Commit Graph

965 Commits

Author SHA1 Message Date
Ciprian Hacman e608cd5265 Add support for Kubenet with containerd 2020-05-12 17:20:59 +03:00
Justin Santa Barbara 8db0017e62 kube-apiserver-healthcheck: actually enable on 1.17
We cherry picked the support to 1.17, but now we need to activate the
feature.
2020-05-08 13:32:22 -04:00
Justin SB 75fd939a62
kube-apiserver: healthcheck via sidecar container
kube-apiserver doesn't expose the healthcheck via a dedicated
endpoint, instead relying on anonyomous-access being enabled.  That
has previously forced us to enable the unauthenticated endpoint on
127.0.0.1:8080.

Instead we now run a small sidecar container, which
proxies /healthz and /readyz requests (only) adding appropriate
authentication using a client certificate.

This will also enable better load balancer checks in future, as these
have previously been hampered by the custom CA certificate.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-07 08:06:52 -04:00
Jesse Haka facd12dd32
Revert "feat(openstack): propagate cloud labels to machines" 2020-05-07 12:06:58 +03:00
John Gardiner Myers 843e5b9b16 Move GCEServiceAccount into CloudConfig 2020-05-03 20:35:32 -07:00
Ciprian Hacman 78de18a803 Update k8s.gcr.io/pause image to version 3.2 2020-05-01 22:12:42 +03:00
Kubernetes Prow Robot 71934198aa
Merge pull request #9016 from justinsb/update_etcd_manager
Update to etcd-manager 3.0.20200429
2020-04-29 19:14:18 -07:00
Justin SB 35a42c37e4 Add etcd 3.3.17 to supported etcd version list 2020-04-30 01:35:50 +00:00
Justin Santa Barbara 3f77222cf3 Update to etcd-manager 3.0.20200429
Adds support for new AWS regions

Full changes

* Upgrade aws-sdk-go [#320](https://github.com/kopeio/etcd-manager/pull/320)
* Release notes for 3.0.20200428 [#319](https://github.com/kopeio/etcd-manager/pull/319)
2020-04-29 08:33:19 -04:00
liranp 1ecf559b71
feat(spot/ocean): add support for grace period 2020-04-28 19:54:57 +03:00
Justin Santa Barbara eb3ef1a9bb Update to etcd-manager 3.0.20200428
Contains the workaround for 1-year certificate expiry.

Full changes

* Release notes for 3.0.20200307 [#303](https://github.com/kopeio/etcd-manager/pull/303)
* Add support for etcd 3.3.17 [#304](https://github.com/kopeio/etcd-manager/pull/304)
* Adding client usage extension for server cert (#305) [#306](https://github.com/kopeio/etcd-manager/pull/306)
* Add a check to renew certificates on startup if they expire in 60 days or less [#309](https://github.com/kopeio/etcd-manager/pull/309)
* Try github actions [#310](https://github.com/kopeio/etcd-manager/pull/310)
* Upgrade bazel to 2.2.0 [#311](https://github.com/kopeio/etcd-manager/pull/311)
* Update to go 1.13.10 [#314](https://github.com/kopeio/etcd-manager/pull/314)
* Bazel: update dependency [#316](https://github.com/kopeio/etcd-manager/pull/316)
* e2e tests should wait for cluster readiness [#318](https://github.com/kopeio/etcd-manager/pull/318)
* Remove old bazel versions from travis [#317](https://github.com/kopeio/etcd-manager/pull/317)
* Always renew certificates [#313](https://github.com/kopeio/etcd-manager/pull/313)
2020-04-28 09:15:02 -04:00
Michael Wagner fc5807d374 feat(openstack): propagate cloud labels to machines 2020-04-27 15:58:02 +02:00
Hu Shuai d3d4afd3fd Add unit test for func JoinSuffixes
Signed-off-by: Hu Shuai <hus.fnst@cn.fujitsu.com>
2020-04-22 16:37:19 +08:00
Ciprian Hacman 3de48dad8b Add support for containerd v1.3.4 2020-04-20 06:11:37 +03:00
liranp 2a17a50d00
chore(deps): make gomod 2020-04-19 14:23:32 +03:00
liranp 870bdfdcff
feature(spotinst): add support for auto scaler configuration 2020-04-19 14:22:57 +03:00
Kubernetes Prow Robot f5a316827a
Merge pull request #8936 from rifelpet/userdata-todo
Remove irrelevant TODO comment from userdata
2020-04-18 07:31:36 -07:00
Peter Rifel fd17a118f5
Remove irrelevant TODO comment from userdata
This comment is from 2016, isn't clear, and I believe may be no longer relevant.

This will cleanup the TODO comment from everyone's userdata.
2020-04-18 08:54:35 -05:00
Martin Tomes 462ca78f2a Import package aliases modified
Modified api -> kopsapi aliases of imports of k8s.io/kops/pkg/apis/kops
2020-04-17 16:55:08 +02:00
Kubernetes Prow Robot 982496c539
Merge pull request #8930 from justinsb/enabled_to_pointer
Change NodeLocalDNS Enabled to *bool
2020-04-16 21:55:06 -07:00
Justin Santa Barbara f3a40cf87c Change NodeLocalDNS Enabled to *bool
As discussed in #8780 so we differentiate between false and not-set.
Also tweak the comment.
2020-04-17 00:09:35 -04:00
Nicolas Vanheuverzwijn 89d4fb757e feat: allow additional security groups on bastion ELB 2020-04-16 12:04:59 -04:00
Ole Markus With a7f631e7c9 Apply suggestions from code review
Co-Authored-By: Peter Rifel <rifelpet@users.noreply.github.com>
2020-04-16 08:42:59 +02:00
Ole Markus With 869ab75dea Use etcd-manager for the cilium etcd cluster 2020-04-16 08:42:59 +02:00
Kubernetes Prow Robot 123b640bde
Merge pull request #8903 from rifelpet/cloudlabels
Add CloudLabels tags to additional AWS resources
2020-04-12 00:39:47 -07:00
Peter Rifel 460cdbfc67 Add CloudLabels tags to additional AWS resources
This adds any labels defined in the Cluster spec's CloudLabels to the tags of the following AWS resource types:

Elastic IP
Internet Gateway
NAT Gateway
Route Table
Security Group
Subnet
VPC DHCP Options
VPC
2020-04-11 13:25:52 -05:00
Ole Markus With d5019a6c11 Simplify the spec and templates a bit 2020-04-10 10:48:21 +02:00
Salvatore Mazzarino f754cbda7d NodeLocal DNSCache
Signed-off-by: Salvatore Mazzarino <dev@mazzarino.cz>
2020-04-10 10:44:53 +02:00
Kubernetes Prow Robot 324a34cfa0
Merge pull request #8846 from hakman/remove-old-docker
Cleanup after #8855
2020-04-06 21:25:43 -07:00
Ciprian Hacman 73903bcb3d Remove support for unreleased Docker 19.03.7 2020-04-06 17:34:59 +03:00
eric-hole c59314a799 Adds some initial tests. Fixes some logic
Need to fix service account implementation first

Fixing tests and iterating on the serviceaccount logic

Run the gce_byo_sa test
2020-04-04 21:20:31 -07:00
eric-hole b3d65ffce0 Adds a gce-service-account flag so you BYO service-account
Generated code and some cleanup

Not sure where that code went

Tests for service account

fixes case on gceserviceaccount
2020-04-04 21:15:56 -07:00
Thejas B dda8dc3f37 Add support for Spot block in launch template
- Launch configuration does not support the field SpotDurationInMinutes which is used to reserve the spot instances, but however Launch Template does
2020-03-31 20:07:01 +05:30
Ciprian Hacman 5c8cc493af Set default log level to "info" for containerd 2020-03-22 20:53:58 +02:00
Kubernetes Prow Robot 06823cf354
Merge pull request #8762 from zetaab/allowedcidrs
add support for OpenStack Octavia AllowedCIDRs
2020-03-18 07:32:48 -07:00
Kubernetes Prow Robot f9d882d77a
Merge pull request #8757 from maruina/lyft-0.6.0
Update lyft CNI to 0.6.0
2020-03-17 11:06:22 -07:00
Matteo Ruina 0e66339d11 Add missing ec2:DescribeInstanceTypes policy 2020-03-17 17:10:00 +01:00
Jesse Haka d694a6f66d add support for AllowedCIDRs 2020-03-17 17:33:11 +02:00
Ciprian Hacman 99bec7e9a0 Use containerd 1.2.13 with Docker 19.03.8 2020-03-16 08:03:35 +02:00
Kubernetes Prow Robot e7846fd0db
Merge pull request #8402 from rdrgmnzs/etcd-setting-overwrite
Allow users to overwrite etcd settings.
2020-03-15 11:34:35 -07:00
Kubernetes Prow Robot dde4e267b5
Merge pull request #8748 from hakman/docker-19.03.8
Update Docker to 19.03.8 for 1.18
2020-03-15 07:06:35 -07:00
Ciprian Hacman 3310885064 Update Docker to 19.03.8 for 1.18 2020-03-15 12:31:26 +02:00
eric-hole 1f508e7e17 Tweak the featureflag.GoogleCloudBucketACL.Enabled 2020-03-14 20:47:11 -07:00
Kubernetes Prow Robot 0a6dcce580
Merge pull request #8525 from hakman/docker-tgz
Update support for docker tgz package
2020-03-14 16:40:35 -07:00
Rodrigo Menezes 7e16cad334 Add test and rebase 2020-03-12 10:54:16 -07:00
Rodrigo Menezes 5901ba05fc updated to use #8455 2020-03-12 10:25:52 -07:00
Rodrigo Menezes 301463577e Allow users to overwrite etcd settings.
Fix typo

fix env vars config  ordering
2020-03-12 10:25:52 -07:00
Peter Rifel a999b3ea61 fix OWNERS labels format
These need to be lists
2020-03-10 22:47:50 -05:00
tanjunchen b8020aa8fc remove // TODO path.Join here? 2020-03-09 14:13:22 +08:00
tanjunchen b6fd377af8 remove // TODO path.Join here? 2020-03-09 14:01:47 +08:00