justinsb
e2f7895700
GCE: When using calico, need to open up ipip protocol
...
We need to open up the ipip protocol, which wasn't previously enabled.
Future work could construct the firewall rules in a common library,
and then adapt them to the various clouds.
2021-09-21 21:20:24 -04:00
Kubernetes Prow Robot
6be5fa97d3
Merge pull request #12375 from hakman/go-1.17.1
...
Update Go to v1.17.1
2021-09-21 09:20:24 -07:00
Kubernetes Prow Robot
bb81c744f0
Merge pull request #12379 from rifelpet/dump-k8s-ssh
...
kubetest2 - fix parsing output from toolbox dump
2021-09-21 07:34:24 -07:00
Peter Rifel
e423650857
Fix parsing output of kops toolbox dump
2021-09-21 08:54:52 -05:00
Kubernetes Prow Robot
6de7bce8b6
Merge pull request #12371 from justinsb/gce_source_tags_not_on_additional_ips
...
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
2021-09-21 06:00:24 -07:00
justinsb
3e83b771d6
GCE: For IPAlias or Custom Routes, we must recognize source by CIDR
...
SourceTags are not recognized when using IPAlias or custom routes (aka
kubenet), so we must recognize by CIDR instead.
2021-09-21 08:20:17 -04:00
Kubernetes Prow Robot
be2676076c
Merge pull request #12334 from dntosas/bump-amis
...
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
2021-09-21 04:52:24 -07:00
Kubernetes Prow Robot
8f42a4a689
Merge pull request #12368 from justinsb/gce_firewall_rules_always_ipv6
...
GCE: Always have IPv6 rules in "ipv6 mode"
2021-09-20 20:38:23 -07:00
Kubernetes Prow Robot
252f52f53d
Merge pull request #12370 from justinsb/gce_subnet_deletion
...
GCE: Fix subnet deletion
2021-09-20 17:12:23 -07:00
Kubernetes Prow Robot
06924c58b7
Merge pull request #12373 from justinsb/gce_no_utility_subnets
...
GCE: Don't create utility subnets in private topology
2021-09-20 15:32:23 -07:00
Kubernetes Prow Robot
5175875e67
Merge pull request #11578 from justinsb/promote_cidrmap_package
...
Move cidrmap to subnet package
2021-09-20 07:42:10 -07:00
Justin Santa Barbara
1db266f15a
Move cidrmap to subnet package
...
This will enable reuse outside of gce.
2021-09-20 09:33:10 -04:00
justinsb
16fc5e8cec
GCE: Don't create utility subnets in private topology
...
We don't need them on GCE, and in fact we don't support them with IP Alias.
2021-09-20 09:31:33 -04:00
justinsb
1823bc5963
GCE: Fix subnet deletion
...
Subnets are created & owned for IPAlias mode. We weren't deleting
them because of a bug deleting when there is a hyphen in the name (and
by default they are named after the region, which has a hyphen).
2021-09-20 09:29:08 -04:00
justinsb
76f816f483
GCE: Always have IPv6 rules in "ipv6 mode"
...
If we don't specify some SourceRanges, it defaults to 0.0.0.0/0, which
is IPv4 and confusing.
2021-09-20 09:26:28 -04:00
Kubernetes Prow Robot
8b9f4ec41c
Merge pull request #12377 from rifelpet/dump-k8s-ssh
...
Fix parsing of kops toolbox dump yaml output
2021-09-20 05:44:09 -07:00
Peter Rifel
6deeda1ea2
Fix parsing of kops toolbox dump yaml output
...
Also add logging to help troubleshoot which command is failing
2021-09-20 07:06:08 -05:00
Kubernetes Prow Robot
fb9a7f87c6
Merge pull request #12376 from justinsb/setlifecycleoverride_log_cleanup
...
Better logging in setLifecycleOverride
2021-09-20 05:02:10 -07:00
justinsb
856a321a6f
Better logging in setLifecycleOverride
...
Remove the log message at V(8), it doesn't include any real
signal. This method also gets called a lot!
Also differentiate between the expected and unexpected cases when a
task implements/does not implement HasLifecycle.
2021-09-20 07:13:55 -04:00
Ciprian Hacman
19564888f4
Use "//go:build" lines together with "// +build" lines
...
The go command now understands //go:build lines and prefers them over // +build lines. The new syntax uses boolean expressions, just like Go, and should be less error-prone. As of this release, the new syntax is fully supported, and all Go files should be updated to have both forms with the same meaning. To aid in migration, gofmt now automatically synchronizes the two forms. For more details on the syntax and migration plan, see https://golang.org/design/draft-gobuild .
2021-09-20 07:35:31 +03:00
Kubernetes Prow Robot
3101180638
Merge pull request #12372 from rifelpet/dump-k8s-ssh
...
kubetest2 - add support for dumping k8s resources via SSH
2021-09-19 21:26:09 -07:00
Ciprian Hacman
5399c8d627
Update Go to v1.17.1
2021-09-20 06:47:49 +03:00
Kubernetes Prow Robot
a14f822f81
Merge pull request #12374 from justinsb/check_for_containerd_nil
...
Fix nil pointer error where containerd is not in use
2021-09-19 20:34:09 -07:00
justinsb
8c66610b8d
Fix nil pointer error where containerd is not in use
...
We need to check for nil.
We could consider using Getters.
2021-09-19 21:59:22 -04:00
Peter Rifel
5526744471
kubetest2 - add support for dumping k8s resources via SSH
...
Some of our jobs are currently failing because `kops validate cluster` times out waiting for the k8s API DNS record to be updated.
To assist in troubleshooting, we can get insight into the k8s resources present on the cluster even though the DNS record hasnt been set if we use kubectl on the control plane host via SSH.
This will SSH into a control plane host when the local kubectl dump fails.
2021-09-19 18:21:37 -05:00
Kubernetes Prow Robot
5ef81d99c6
Merge pull request #12367 from justinsb/aws_refactor_subnet
...
AWS: Move some subnet functions into AWS model
2021-09-19 15:22:08 -07:00
Kubernetes Prow Robot
07ef70f34d
Merge pull request #12369 from justinsb/imdbv2_is_only-for_aws
...
Only configure IMDSv2 on AWS
2021-09-19 11:42:08 -07:00
justinsb
e21a20e863
Only configure IMDSv2 on AWS
...
These aren't used on other clouds.
2021-09-19 14:00:54 -04:00
justinsb
99764fb168
AWS: Move some subnet functions into AWS model
...
We want to move all these eventually, and this is preparing for better
GCE subnet support.
2021-09-19 12:08:09 -04:00
Kubernetes Prow Robot
9eb28b93fe
Merge pull request #12365 from rifelpet/sctp
...
Fix version check in cilium SCTP test skipping
2021-09-19 08:38:08 -07:00
Kubernetes Prow Robot
34bad9bfc9
Merge pull request #12360 from hakman/calico-3.20.1
...
Update Calico to v3.20.1
2021-09-19 07:54:08 -07:00
Peter Rifel
cf16b4a6bf
Fix version check in cilium SCTP test skipping
2021-09-19 09:12:05 -05:00
Kubernetes Prow Robot
66edcba37b
Merge pull request #12354 from justinsb/kcm_conditions_fix
...
Fix controller defaults for both bootstrap tokens and ipv6
2021-09-19 06:48:08 -07:00
Kubernetes Prow Robot
8ab1f8bbc4
Merge pull request #12355 from justinsb/gate_ipv6_permissions
...
Only add IPv6 IAM permissions if using IPv6
2021-09-19 00:54:08 -07:00
Kubernetes Prow Robot
14ee53b1a7
Merge pull request #12356 from justinsb/dev-build-aws
...
Script for iterating development on AWS
2021-09-19 00:08:08 -07:00
dntosas
dc5926520d
[channels] Bump AWS/GCP/Azure Ubuntu AMIs to latest
...
Signed-off-by: dntosas <ntosas@gmail.com>
2021-09-19 10:03:52 +03:00
Ciprian Hacman
faa66c6597
Update Calico to v3.20.1
2021-09-19 09:31:39 +03:00
Kubernetes Prow Robot
a68294c03f
Merge pull request #12357 from justinsb/ec2_pending_should_be_terminated
...
Recognize pending EC2 instances as needed deletion
2021-09-18 23:20:08 -07:00
justinsb
fc04d91bc7
Recognize pending EC2 instances as needed deletion
...
They should be deleted as they will presumably be running shortly.
Also, this function is used from `kops dump cluster` where presumably
instances are more likely to be pending.
2021-09-18 16:10:29 -04:00
justinsb
db1ba01e94
Only add IPv6 IAM permissions if using IPv6
...
This avoids users wondering what these permissions are for until we
need them.
2021-09-18 13:49:40 -04:00
Justin SB
1562ce4e8a
Script for iterating development on AWS
...
Somewhat opinionated, but should be an easy and quick way to build for
dev in most cases.
2021-09-18 13:42:14 -04:00
Kubernetes Prow Robot
7f7a78a285
Merge pull request #12322 from rifelpet/managed-files2
...
Create a second Terraform provider for managed files
2021-09-18 10:30:08 -07:00
justinsb
345f3d85f1
Fix controller defaults for both bootstrap tokens and ipv6
...
The previous logic would override the controller slice in each
condition, instead of building it up.
2021-09-18 13:12:26 -04:00
Kubernetes Prow Robot
e8e09d5956
Merge pull request #12353 from hakman/ebs-csi-ipv6
...
Fix EC2 IPv6 endpoint for EBS CSI Driver controller
2021-09-18 09:16:07 -07:00
Ciprian Hacman
fa853add24
Fix EC2 IPv6 endpoint for EBS CSI Driver controller
2021-09-18 18:34:13 +03:00
Kubernetes Prow Robot
8d49409d1f
Merge pull request #12352 from eddycharly/fix-docs-etcd-backups
...
fix: etcd backup docs
2021-09-18 06:52:08 -07:00
Kubernetes Prow Robot
e1d8d12efb
Merge pull request #12351 from eddycharly/clean-comment
...
fix: remove inconsistent comment
2021-09-18 05:50:09 -07:00
Charles-Edouard Brétéché
735497442d
fix: etcd backup docs
2021-09-18 14:15:31 +02:00
Charles-Edouard Brétéché
1353039fac
fix: remove inconsistent comment
2021-09-18 14:04:22 +02:00
Kubernetes Prow Robot
f5cc9f6729
Merge pull request #12349 from hakman/aws-ebs-csi-ipv6
...
Use EC2 and Metadata IPv6 endpoints in IPv6 mode for EBS CSI Driver
2021-09-18 05:02:07 -07:00