Commit Graph

13 Commits

Author SHA1 Message Date
Jan Safranek 0d03095fda Add SELinux support to containerd
Add cluster.Spec.Containerd.SELinuxEnabled field that enables SELinux in
containerd.

With SELinux enabled, all pods that use HostPath volumes must run with
SELinux label `spc_t`, otherwise SELinux denies the pods to touch the host
filesystem.
2023-06-19 15:20:08 +02:00
Jesse Haka c050c49ac8 set nodeselector null 2022-05-15 23:30:00 +03:00
Guillaume Le Biller 467424d6a5
Add NodeTerminationHandler cpu resources settings 2022-04-29 10:50:16 +02:00
Ole Markus With 26f8a5d672 Fix affinity and taints for AWS CCM 2022-04-18 13:55:51 +02:00
Ole Markus With 1323ed9040 Add more tolerations to kops-controller and CCM .
CCM and kops-controller taint each other out. This will make them
schedule, and schedule earlier.
2021-09-16 21:09:45 +02:00
Peter Rifel 6a53285ffe
Move AWS CCM image logic into pkg/model and add 1.21 and 1.22 images 2021-09-08 20:56:39 -05:00
Ole Markus With ec2dcfca48 Set NodeIPFamilies in ipv6 mode 2021-09-03 08:31:09 +02:00
Ole Markus With af0aefd2e7 Use localhost as API address for CCM 2021-07-06 16:01:20 +02:00
Ole Markus With bedfb409ca Don't always pull the CCM image 2021-07-06 15:50:30 +02:00
Ole Markus With bb367f22ea Add aws- prefix to CCM SA 2021-07-06 15:46:59 +02:00
Ciprian Hacman d8b03da8ae Set priority class for AWS CCM addon 2021-06-22 06:32:53 +03:00
Nick Turner 0239dc1f63 Permission to create servcice account tokens
* We need the ability to create service account token
  because this is required by clientbuilder/controller-manager
  framework which we will be using in 1.21.
* This is required for the CCM to use 1 SA per controller, which
  follows principle of least privilege and makes audit logs easier
  to understand
* Restricts token creation to resource names "node-controller",
  "service-controller", and "route-controller".
2021-05-13 14:16:59 -07:00
Nick Turner c9feb36f3f Add aws-cloud-controller-manager config to addons
- Config at aws-cloud-controller.addons.k8s.io/k8s-1.18.yaml.template
- AWSCCMTag function for CCM image tag
2020-11-30 01:35:07 -08:00