Ciprian Hacman
01ea66eed7
hack/update-expected.sh
2024-02-18 10:28:36 +02:00
justinsb
06e82bffd4
refactor: Mark a few tasks as implementing HasAddress
...
This will ensure I don't mistakenly break the contract again.
2024-02-17 19:24:19 -05:00
Kubernetes Prow Robot
24ab206acc
Merge pull request #16356 from justinsb/revisions_and_pruning
...
Generate revisions of NLB objects, and introduce cleanup phase
2024-02-17 11:17:18 -08:00
justinsb
2a9343a168
Generate revisions of NLB objects, and introduce cleanup phase
...
This lets us safely make changes to otherwise immutable fields, in
particular for adding security groups to NLBs created without them.
We detect the older versions, and create deletion tasks to remove
them. These tasks can be deferred, and we expect them to be
deferred to a "prune" phase that runs after cluster apply.
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
2024-02-17 11:41:15 -05:00
Ciprian Hacman
4ae8f3c28e
azure: Fix subnet name
2024-02-17 15:57:19 +02:00
Ciprian Hacman
94b713ec1a
azure: Avoid spurious changes in VirtualNetwork
2024-02-17 15:56:53 +02:00
justinsb
ffd52cac40
refactor: Introduce DeletionProcessingMode
...
Deletion processing is not entirely a factor of the target, it is more
a factor of our mode of execution (dry-run vs pre-rolling-update vs
post-rolling-update). We want to introduce that post-rolling-update
phase, so introduce the DeletionProcessingMode enum and move it from
the target to the context.
2024-02-15 08:12:19 -05:00
Kubernetes Prow Robot
8f71e68d68
Merge pull request #16339 from justinsb/refactor_targetgroups
...
target group: refactor discovery into awsup
2024-02-14 14:33:00 -08:00
justinsb
eb27e30153
target group: refactor discovery into awsup
...
This sets us up to support multiple generations of target groups,
needed if we want to support adding SecurityGroups to the NLB.
2024-02-14 15:48:50 -05:00
Kubernetes Prow Robot
5a3b1e2703
Merge pull request #16009 from voriol/master
...
If specified, posts event data to URL upon instance interruption action.
2024-02-13 05:29:50 -08:00
Kubernetes Prow Robot
f060b9252a
Merge pull request #16348 from hakman/azure-well-known-services
...
azure: Replace lb.ForAPIServer with lb.WellKnownServices
2024-02-11 06:21:45 -08:00
Ciprian Hacman
eb1dd59e3c
azure: Replace lb.ForAPIServer with lb.WellKnownServices
2024-02-11 11:06:17 +02:00
Peter Rifel
6162a6837b
Include /etc/hosts coredns mounts for dns=none clusters
2024-02-10 23:00:49 -06:00
Peter Rifel
c58b33a627
Add unit test for setupTopology
2024-02-10 14:19:05 -06:00
Peter Rifel
ac13fa610c
Move DNS topology setup earlier in cluster creation
...
This is needed because setting the bastion public name field depends on the DNS topology.
We were incorrectly setting bastion.publicName for dns=none clusters because the dns=none field wasn't yet set on the cluster.
2024-02-10 14:17:35 -06:00
Ciprian Hacman
a1242efe71
azure: Migrate cloudup to new SDK version
2024-02-09 05:14:38 +02:00
Ciprian Hacman
6c4c7d9c00
azure: Migrate tasks to new SDK version
2024-02-09 05:14:38 +02:00
justinsb
bd8cce06ae
refactor: Drop TargetGroups from NetworkLoadBalancer task
...
They are not needed, they were only used for dependency ordering (and
we now have that dependency on the split out listener task)
2024-02-04 18:09:17 -05:00
justinsb
c9b9a47b94
cloudmock: Implement WithContext methods for ELBv2
...
Also switch methods that were not passing a context.
2024-02-04 15:52:29 -05:00
justinsb
c35c754eff
Refactor: Split out NLB Listener into its own task
...
This allows us to use more of our task machinery, including dependency
analysis. The intent is that we'll be able to support multiple
LoadBalancers and TargetGroups.
2024-02-04 15:52:25 -05:00
Kubernetes Prow Robot
90fa037c0e
Merge pull request #16315 from zadjadr/chore/cilium-1.15
...
Update to cilium 1.15
2024-02-03 10:09:39 -08:00
Kubernetes Prow Robot
18670063f2
Merge pull request #16316 from yurrriq/lbc-v2.7.0
...
Upgrade AWS Load Balancer Controller to v2.7.0
2024-02-02 23:25:20 -08:00
Kubernetes Prow Robot
75059dbd41
Merge pull request #16313 from moshevayner/aws-vpc-cni-ubuntu-22-04-macaddresspolicy
...
fix(nodeup): set `MACAddressPolicy=none` when using AWS VPC CNI
2024-02-02 21:09:35 -08:00
Moshe Vayner
1342fd1afa
fix(nodeup): set `MACAddressPolicy` to `none` when using AWS CNI and Ubuntu 22.04
2024-02-02 23:03:30 -05:00
Eric Bailey
02f8697091
Upgrade LBC manifest to 2.7.0
2024-02-02 14:26:16 -06:00
zadjadr
f3574c914f
hack/update-expected.sh
2024-02-02 20:29:51 +01:00
zadjadr
656b3a6956
Update to cilium 1.15
2024-02-02 19:37:04 +01:00
zadjadr
1953cb608e
cilium: Remove depricated options
2024-02-02 16:55:29 +01:00
Kubernetes Prow Robot
1067b6279b
Merge pull request #16294 from justinsb/wait_should_be_an_attribute
...
refactor: wait for load balancer readiness using a private field
2024-02-01 16:08:54 -08:00
Jesse Haka
b5d1ee8245
update containerd & runc versions
2024-02-01 15:05:55 +02:00
Kubernetes Prow Robot
dd7548ca38
Merge pull request #16297 from moshevayner/aws-cni-1.16.2
...
chore(networking): bump aws cni to 1.16.2
2024-01-29 22:15:19 -08:00
Kubernetes Prow Robot
d4bdc68959
Merge pull request #16295 from justinsb/refactor_list_elbv2_loadbalancers
...
Refactor: Move NLB listing function into awsup
2024-01-29 21:12:10 -08:00
Moshe Vayner
f8569c35f1
test: hack/update-expected
2024-01-29 22:30:04 -05:00
Moshe Vayner
473391ad87
chore(networking): bump aws-vpc-cni version to 1.16.2
2024-01-29 22:26:31 -05:00
justinsb
314e2b954b
Refactor: Move NLB listing function into awsup
...
As pruning becomes more a part of tasks, there is more overlap between
`kops update cluster` and `kops delete cluster`.
2024-01-30 04:43:48 +02:00
justinsb
086af6458e
refactor: wait for load balancer readiness using a private field
...
This approach is more explicit than looking at the names of the target
groups, and using a private field is simpler.
2024-01-29 09:34:56 -05:00
justinsb
4c392ac71a
refactor: Introduce runTests helper method into aws tests
...
This mirrors what we do in gce, and eliminates some boilerplate.
2024-01-29 09:25:09 -05:00
Kubernetes Prow Robot
2b54ae9d14
Merge pull request #16288 from justinsb/refactor_nlb_name
...
refactor: NetworkLoadBalancer Name should match Name tag
2024-01-28 21:13:26 -08:00
justinsb
2b9c46bb83
Fix: support comparison of int types in dry-run
...
This avoids printing a change when the before and after values are the
same.
2024-01-28 16:19:52 -05:00
justinsb
169c96ba11
refactor: NetworkLoadBalancer Name should match Name tag
...
It was actually the terraform name, and didn't match the tag.
This change should have no externally-visible effect.
2024-01-28 16:19:02 -05:00
Jesse Haka
1d9d06d417
update openstack csi images
2024-01-27 10:01:21 +02:00
justinsb
6871aa7148
Refactor: Plumb context through GCE firewallRule methods
...
Helps with more coherent tracing/logging.
2024-01-26 10:51:34 -05:00
Jesse Haka
75659b6280
include kube-apiserver controlplane ports in dns=none
2024-01-22 18:41:30 +02:00
Kubernetes Prow Robot
9645e5c7e9
Merge pull request #16265 from borg-land/network-patch
...
gce: fix nlb firewall rules, operations and alias network subnets
2024-01-20 17:20:59 +01:00
Kubernetes Prow Robot
89b7b14176
Merge pull request #15829 from justinsb/refactor_forapiserver
...
Refactor: Replace ForAPIServer with WellKnownServices
2024-01-20 17:20:53 +01:00
upodroid
f3bc523b17
fix nlb firewall rules, operations and alias network subnets
2024-01-20 13:41:16 +00:00
Ciprian Hacman
8af20ba79f
Use dns=none for newly created clusters including for AWS and GCE
2024-01-19 06:15:22 +02:00
Ciprian Hacman
9f7c59236b
Update containerd to v1.7.12
2024-01-18 05:27:41 +02:00
justinsb
50776a7e92
Refactor ForAPIServer
...
We instead return a list of the services we are supporting.
We can in future split out internal and external apiserver services.
2024-01-12 15:53:41 -05:00
justinsb
573c410846
Prefer external endpoints when building kubeconfig
...
This means that if/when we have multiple load balancers, we will go
through the external one by default.
2024-01-12 11:29:25 -05:00