Commit Graph

6484 Commits

Author SHA1 Message Date
Ciprian Hacman 01ea66eed7 hack/update-expected.sh 2024-02-18 10:28:36 +02:00
justinsb 06e82bffd4 refactor: Mark a few tasks as implementing HasAddress
This will ensure I don't mistakenly break the contract again.
2024-02-17 19:24:19 -05:00
Kubernetes Prow Robot 24ab206acc
Merge pull request #16356 from justinsb/revisions_and_pruning
Generate revisions of NLB objects, and introduce cleanup phase
2024-02-17 11:17:18 -08:00
justinsb 2a9343a168 Generate revisions of NLB objects, and introduce cleanup phase
This lets us safely make changes to otherwise immutable fields, in
particular for adding security groups to NLBs created without them.

We detect the older versions, and create deletion tasks to remove
them.  These tasks can be deferred, and we expect them to be
deferred to a "prune" phase that runs after cluster apply.

Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2024-02-17 11:41:15 -05:00
Ciprian Hacman 4ae8f3c28e azure: Fix subnet name 2024-02-17 15:57:19 +02:00
Ciprian Hacman 94b713ec1a azure: Avoid spurious changes in VirtualNetwork 2024-02-17 15:56:53 +02:00
justinsb ffd52cac40 refactor: Introduce DeletionProcessingMode
Deletion processing is not entirely a factor of the target, it is more
a factor of our mode of execution (dry-run vs pre-rolling-update vs
post-rolling-update).  We want to introduce that post-rolling-update
phase, so introduce the DeletionProcessingMode enum and move it from
the target to the context.
2024-02-15 08:12:19 -05:00
Kubernetes Prow Robot 8f71e68d68
Merge pull request #16339 from justinsb/refactor_targetgroups
target group: refactor discovery into awsup
2024-02-14 14:33:00 -08:00
justinsb eb27e30153 target group: refactor discovery into awsup
This sets us up to support multiple generations of target groups,
needed if we want to support adding SecurityGroups to the NLB.
2024-02-14 15:48:50 -05:00
Kubernetes Prow Robot 5a3b1e2703
Merge pull request #16009 from voriol/master
If specified, posts event data to URL upon instance interruption action.
2024-02-13 05:29:50 -08:00
Kubernetes Prow Robot f060b9252a
Merge pull request #16348 from hakman/azure-well-known-services
azure: Replace lb.ForAPIServer with lb.WellKnownServices
2024-02-11 06:21:45 -08:00
Ciprian Hacman eb1dd59e3c azure: Replace lb.ForAPIServer with lb.WellKnownServices 2024-02-11 11:06:17 +02:00
Peter Rifel 6162a6837b
Include /etc/hosts coredns mounts for dns=none clusters 2024-02-10 23:00:49 -06:00
Peter Rifel c58b33a627
Add unit test for setupTopology 2024-02-10 14:19:05 -06:00
Peter Rifel ac13fa610c
Move DNS topology setup earlier in cluster creation
This is needed because setting the bastion public name field depends on the DNS topology.
We were incorrectly setting bastion.publicName for dns=none clusters because the dns=none field wasn't yet set on the cluster.
2024-02-10 14:17:35 -06:00
Ciprian Hacman a1242efe71 azure: Migrate cloudup to new SDK version 2024-02-09 05:14:38 +02:00
Ciprian Hacman 6c4c7d9c00 azure: Migrate tasks to new SDK version 2024-02-09 05:14:38 +02:00
justinsb bd8cce06ae refactor: Drop TargetGroups from NetworkLoadBalancer task
They are not needed, they were only used for dependency ordering (and
we now have that dependency on the split out listener task)
2024-02-04 18:09:17 -05:00
justinsb c9b9a47b94 cloudmock: Implement WithContext methods for ELBv2
Also switch methods that were not passing a context.
2024-02-04 15:52:29 -05:00
justinsb c35c754eff Refactor: Split out NLB Listener into its own task
This allows us to use more of our task machinery, including dependency
analysis.  The intent is that we'll be able to support multiple
LoadBalancers and TargetGroups.
2024-02-04 15:52:25 -05:00
Kubernetes Prow Robot 90fa037c0e
Merge pull request #16315 from zadjadr/chore/cilium-1.15
Update to cilium 1.15
2024-02-03 10:09:39 -08:00
Kubernetes Prow Robot 18670063f2
Merge pull request #16316 from yurrriq/lbc-v2.7.0
Upgrade AWS Load Balancer Controller to v2.7.0
2024-02-02 23:25:20 -08:00
Kubernetes Prow Robot 75059dbd41
Merge pull request #16313 from moshevayner/aws-vpc-cni-ubuntu-22-04-macaddresspolicy
fix(nodeup): set `MACAddressPolicy=none` when using AWS VPC CNI
2024-02-02 21:09:35 -08:00
Moshe Vayner 1342fd1afa fix(nodeup): set `MACAddressPolicy` to `none` when using AWS CNI and Ubuntu 22.04 2024-02-02 23:03:30 -05:00
Eric Bailey 02f8697091 Upgrade LBC manifest to 2.7.0 2024-02-02 14:26:16 -06:00
zadjadr f3574c914f
hack/update-expected.sh 2024-02-02 20:29:51 +01:00
zadjadr 656b3a6956
Update to cilium 1.15 2024-02-02 19:37:04 +01:00
zadjadr 1953cb608e
cilium: Remove depricated options 2024-02-02 16:55:29 +01:00
Kubernetes Prow Robot 1067b6279b
Merge pull request #16294 from justinsb/wait_should_be_an_attribute
refactor: wait for load balancer readiness using a private field
2024-02-01 16:08:54 -08:00
Jesse Haka b5d1ee8245 update containerd & runc versions 2024-02-01 15:05:55 +02:00
Kubernetes Prow Robot dd7548ca38
Merge pull request #16297 from moshevayner/aws-cni-1.16.2
chore(networking): bump aws cni to 1.16.2
2024-01-29 22:15:19 -08:00
Kubernetes Prow Robot d4bdc68959
Merge pull request #16295 from justinsb/refactor_list_elbv2_loadbalancers
Refactor: Move NLB listing function into awsup
2024-01-29 21:12:10 -08:00
Moshe Vayner f8569c35f1 test: hack/update-expected 2024-01-29 22:30:04 -05:00
Moshe Vayner 473391ad87 chore(networking): bump aws-vpc-cni version to 1.16.2 2024-01-29 22:26:31 -05:00
justinsb 314e2b954b Refactor: Move NLB listing function into awsup
As pruning becomes more a part of tasks, there is more overlap between
`kops update cluster` and `kops delete cluster`.
2024-01-30 04:43:48 +02:00
justinsb 086af6458e refactor: wait for load balancer readiness using a private field
This approach is more explicit than looking at the names of the target
groups, and using a private field is simpler.
2024-01-29 09:34:56 -05:00
justinsb 4c392ac71a refactor: Introduce runTests helper method into aws tests
This mirrors what we do in gce, and eliminates some boilerplate.
2024-01-29 09:25:09 -05:00
Kubernetes Prow Robot 2b54ae9d14
Merge pull request #16288 from justinsb/refactor_nlb_name
refactor: NetworkLoadBalancer Name should match Name tag
2024-01-28 21:13:26 -08:00
justinsb 2b9c46bb83 Fix: support comparison of int types in dry-run
This avoids printing a change when the before and after values are the
same.
2024-01-28 16:19:52 -05:00
justinsb 169c96ba11 refactor: NetworkLoadBalancer Name should match Name tag
It was actually the terraform name, and didn't match the tag.

This change should have no externally-visible effect.
2024-01-28 16:19:02 -05:00
Jesse Haka 1d9d06d417 update openstack csi images 2024-01-27 10:01:21 +02:00
justinsb 6871aa7148 Refactor: Plumb context through GCE firewallRule methods
Helps with more coherent tracing/logging.
2024-01-26 10:51:34 -05:00
Jesse Haka 75659b6280 include kube-apiserver controlplane ports in dns=none 2024-01-22 18:41:30 +02:00
Kubernetes Prow Robot 9645e5c7e9
Merge pull request #16265 from borg-land/network-patch
gce: fix nlb firewall rules, operations and alias network subnets
2024-01-20 17:20:59 +01:00
Kubernetes Prow Robot 89b7b14176
Merge pull request #15829 from justinsb/refactor_forapiserver
Refactor: Replace ForAPIServer with WellKnownServices
2024-01-20 17:20:53 +01:00
upodroid f3bc523b17 fix nlb firewall rules, operations and alias network subnets 2024-01-20 13:41:16 +00:00
Ciprian Hacman 8af20ba79f Use dns=none for newly created clusters including for AWS and GCE 2024-01-19 06:15:22 +02:00
Ciprian Hacman 9f7c59236b Update containerd to v1.7.12 2024-01-18 05:27:41 +02:00
justinsb 50776a7e92 Refactor ForAPIServer
We instead return a list of the services we are supporting.

We can in future split out internal and external apiserver services.
2024-01-12 15:53:41 -05:00
justinsb 573c410846 Prefer external endpoints when building kubeconfig
This means that if/when we have multiple load balancers, we will go
through the external one by default.
2024-01-12 11:29:25 -05:00