Commit Graph

445 Commits

Author SHA1 Message Date
Anthony Hausman cc47bd278c
feat(nodelocaldns): Add possibility to set an ExternalCoreFile
Allow users to provide entirely custom CoreFile for NodeLocalDNS to provide improved flexibility.
2023-02-28 08:19:20 +01:00
Jesse Haka 3f9a1b6462 set node status update freq to 60min in OpenStack 2023-02-27 20:38:30 +02:00
ederst b4557d4729 Run make apimachinery and crds 2023-02-13 17:34:31 +01:00
ederst f4fdf7df79 Allow setting 'ignore-volume-microversion' for OCCP
This will allow setting the option `ignore-volume-microversion` for the
cinder-csi-plugin.

Setting this is necessary for older OpenStack APIs so that OCCP can
create PVs.

Note: This will work with cinder-csi-plugin >= 1.25.

For reference:
* https://github.com/kubernetes/cloud-provider-openstack/pull/1986/
2023-01-31 11:48:25 +01:00
Anthony Hausman 484bde5b9b
cilium: Add unreachable route for pod IP on deletion option
When a pod is deleted, the route to its IP is replaced with an unreachable route.
When a pod is created, the route is replaced with a route to the pod veth (so if an unreachable existed, it's replaced).

Ref:
 - https://github.com/cilium/cilium/pull/18505
2023-01-24 14:08:24 +01:00
Ciprian Hacman b1ef66f136 etcd-manager: Add option to set backup retention 2023-01-23 09:43:09 +02:00
Grégory SANCHEZ 6fdf54ff34 feat(cluster-autoscaler): autogenerate priority-expander configMap 2023-01-11 08:26:33 +01:00
John Gardiner Myers b3dfcea95f v1alpha3: Move AWS-specific CloudConfig settings to AWSSpec 2022-12-25 16:12:02 -08:00
John Gardiner Myers 1834fded6a NTH: add API validation against unsupported option configurations 2022-12-16 17:12:54 -08:00
John Gardiner Myers 7c5b983490 Enable NTH Scheduled Event Draining by default 2022-12-08 19:02:44 -08:00
John Gardiner Myers 345aa61422 make crds 2022-12-04 15:56:20 -08:00
John Gardiner Myers 0424c474a3 Don't disable AWS src/dst checks in Calico IPv6 2022-11-25 20:57:48 -08:00
Bronson Mirafuentes 4929ef3e65 update CapacityRebalance comments 2022-11-21 08:47:42 -08:00
Bronson Mirafuentes 85898cba0b add capacityRebalance flag for ASGs 2022-11-21 08:47:40 -08:00
John Gardiner Myers f428f06165 make crds 2022-11-20 15:36:54 -08:00
John Gardiner Myers 8473e8b2e7 Stop making MasterInternalName configurable 2022-11-16 22:06:02 -08:00
John Gardiner Myers 25b7dc21fa Create NLB instead of CLB for bastion 2022-10-29 17:00:00 -07:00
Thomas Colomb e5ddd5b0c3 cluster-autoscaler : Add scaleDownUnneededTime and scaleDownUnreadyTime 2022-10-04 18:57:21 +02:00
Ole Markus With 8ff240fb09 Add docs to kubelet and masterkubelet making it explicit control plane does not use spec.kubelet 2022-09-29 10:49:24 +02:00
Eric Bailey 44d610e38d Add more details to the NTH documentation
When trying to enable Prometheus metrics for NTH, I naively set
nodeTerminationHandler.enablePrometheusMetrics=true.

Add prometheusEnable to the docs to try to prevent such mistakes in the
future. Also add enableRebalanceMonitoring for good measure, and a couple
missing defaults to the struct field docstrings.
2022-09-23 12:16:17 -05:00
Ciprian Hacman 01522dc8a9 Run `make crds` 2022-09-21 08:36:07 +03:00
Daniel Franca cdd0013b1f
Add support to --cordon-node-before-terminating on the cluster autoscaler addon (CordonNodeBeforeTerminating) 2022-09-06 17:03:24 +02:00
Ole Markus With 3518182e44 Add support for cert-manager dns-01 challenges 2022-09-04 08:19:22 +02:00
Ole Markus With 98cd242673 Add support for installing dcgm exporter 2022-08-30 14:54:13 +02:00
Kubernetes Prow Robot fa377131b2
Merge pull request #14177 from olemarkus/bump-nth-125
Bump node termination handler to 1.17.0
2022-08-24 19:12:05 -07:00
Ole Markus With 0cd110d723 Bump node termination handler to 1.17.1 2022-08-24 21:52:52 +02:00
torredil 230ff7eb57 Allow self-managed aws-ebs-csi-driver
Signed-off-by: torredil <torredil@amazon.com>
2022-08-24 18:40:27 +00:00
Ciprian Hacman 11a0f64cd8 Add option to configure runc version for containerd 2022-08-04 09:48:46 +03:00
ederst 8b9521b225 Allow configuring OpenStack CCM networking options 2022-07-21 22:44:37 +02:00
Kubernetes Prow Robot 02433a6785
Merge pull request #13946 from jonasasx/feature/gce_spot
Adding GCE SPOT support
2022-07-16 14:06:53 -07:00
Ciprian Hacman a76fef1b2d Add option to set number of replicas for pod-identity-webhook 2022-07-16 07:23:54 +03:00
Ivan Volynkin 329c60cc62 Adding GCE SPOT support 2022-07-14 20:19:50 +03:00
Ciprian Hacman 19ca0861a1 Add option to set etcd-manager backup interval 2022-07-14 09:58:19 +03:00
Nicolas Sterchele 73b6ed4150
aws: introduce maximum instance lifetime in cluster
The maximum instance lifetime is an AWS only feature and specifies the
maximum amount of time (in seconds) that an instance can be in service
before it is terminated and replaced.
A common use case might be a requirement to replace your instances on a
schedule because of internal security policies or external compliance
controls.
2022-07-04 20:38:33 +02:00
Ole Markus With afd7c60d77 Make it possible to enable the shield addon for LBC 2022-06-30 16:23:08 +02:00
Ivan Volynkin 4264d78839 Adding GuestAccelerators to InstanceTemplate 2022-06-23 10:00:02 +03:00
Eric Bailey 34caed893b Add support for setting mode field on file assets 2022-06-09 10:37:29 -05:00
Ole Markus With 77ebba84b8 Add support for configuring which metrics cilium will export 2022-05-26 09:33:19 +02:00
Kubernetes Prow Robot 7a90131d54
Merge pull request #13567 from HealthEngineAU/cert-manager-nameservers
Add a nameservers parameter for cert-manager.
2022-05-18 00:28:53 -07:00
Jim Barber 0fa178106a Add a nameservers parameter for cert-manager
Provide a way to override the pod's list of DNS nameservers to use so
that split-view DNS zones still work for things like DNS01 challenges.
Without this the DNS TXT records are searched for in the private DNS
zone instead of the public one and the challenge will never succeed.
2022-05-18 13:23:26 +08:00
Steven E. Harris a1495ac4c8
Allow the AWS LB Controller to use WAFs
By introducing a few new fields within the Cluster spec's
"awsLoadBalancerController" field, allow users to enable the AWS Load
Balancer Controller to associate WAFs with EC2 Application Load
Balancers (ALBs). It's possible to enable separately use of two kinds
of WAF: WAF Classic and the never version 2-era WAF, the latter of
which bears no distinguishing name.

Retain our default configuration of the AWS Load Balancer Controller
in which this capability remains disabled via command-line flags,
overriding the controller program's enabling of this capability by
default.

Signed-off-by: Steven E. Harris <seh@panix.com>
2022-05-16 12:20:28 -04:00
avish42 638ab6c8c7 add annotation support to aws-ebs-csi pods 2022-05-12 22:23:55 +05:30
Ciprian Hacman 0b095068f3 Add support for installing additional packages 2022-05-03 06:47:44 +03:00
Guillaume Le Biller 467424d6a5
Add NodeTerminationHandler cpu resources settings 2022-04-29 10:50:16 +02:00
Ole Markus With c9d6186a67 Bump to golang1.18 and k8s deps to 1.24.0-rc.0 2022-04-22 14:11:47 +02:00
Bronson Mirafuentes 7c4f1646e3 add cluster autoscaler pod annotations 2022-04-18 10:32:52 -07:00
DingGGu 1b9cf91684
Bump NTH to 1.16.1, use WithDefaultBool in gotemplate, set ExcludeLoadBalancers default true 2022-04-09 17:04:23 +09:00
DingGGu c1042f4a3b
Bump NTH 1.16 and add excludeFromLoadBalancers option 2022-04-09 17:04:16 +09:00
Kubernetes Prow Robot feb66910b1
Merge pull request #13318 from guillomep/allow_to_add_additional_routes
Possibility to add additional routes in route tables of subnets
2022-04-03 13:46:09 -07:00
Kubernetes Prow Robot 7684da6eca
Merge pull request #13396 from anthonyhaussman/feat/tone/PodAnnotations_NodeLocalDNS
Add possibility to set PodAnnotations into NodeLocalDNS
2022-04-01 10:56:47 -07:00
Guillaume Perrin e501ac62a4 Possibility to add additional routes in route tables of subnets
Signed-off-by: Guillaume Perrin <guillaume28.perrin@gmail.com>
2022-03-28 14:57:21 +02:00
Anthony Hausman 308a886557
AWS-NODE-TERMINATION: Add possibility to set a tune image version
Add the possibility into the AWS `node-termination-handler` addon to set a different image tag version.
It can help to have last fixes if it's needed.
2022-03-23 10:59:51 +01:00
Anthony Hausman 7752cfc932
Add possibility to set PodAnnotations into NodeLocalDNS
Annotations is pretty useful when you need third-party tool to add additional behavior for a k8s resource.
Lots of auto-discovery tools are based on this annotations.

This PR add the possibility to set tune pod annotations in the node-local-dns daemonsets.app.
2022-03-21 16:15:10 +01:00
Jesse Haka 28caf02878 Support GPU in OpenStack 2022-03-11 09:19:09 +02:00
AkiraFukushima c8710203ba
Add support to install EKS Pod Identity Webhook 2022-02-20 18:33:50 +09:00
Jiahui Feng 84dc7ca908 generated: make apimachinery && make crds 2022-02-14 10:49:45 -08:00
Ole Markus With 2625264fe5 Add support for graceful node shutdown
Update docs/cluster_spec.md

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2022-02-11 20:51:02 +01:00
Dan Ports 7a52896fdc Warn that the price expander is only supported on GCE in the docs. 2022-01-05 22:47:34 -05:00
Dan Ports 8672d9b219 Fix CRDs, clarify docs, and add cloud provider check for price expander. 2022-01-05 22:39:21 -05:00
Dan Ports 1d9996b4ad Support price and priority cluster-autoscaler expanders. 2022-01-05 14:10:06 -05:00
Ole Markus With b09241122f Support specifying instance requirements per IG
Update docs/instance_groups.md

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2021-12-24 21:19:58 +01:00
justinsb 71e5a21786 componentconfig: expose advertise-address flag for kube-apiserver
This flag determines which IPs are advertised inside the cluster, in
the "kubernetes" service in the "default" namespace.
2021-12-18 21:30:58 -05:00
Ole Markus With b785965c50 Rename InstanceManager to Manager 2021-12-13 09:14:24 +01:00
Ole Markus With 794cb72112 Karpenter addon
Constrain the instance types to what is supported by the AMI

Add taints and label to karpenter provisioner

Add instance types to karpenter provisioner
2021-12-12 19:33:41 +01:00
Ole Markus With 57fd343e1d Make service topology for cilium configurable 2021-12-12 07:54:21 +01:00
Kubernetes Prow Robot e4aae9bca8
Merge pull request #12320 from ZipRecruiter/anthonyr.dockerd-concurrency
pkg/apis/kops: Allow configuring dockerd --max-* upload and download concurrency and retry options.
2021-12-06 07:08:33 -08:00
John Gardiner Myers 5ae9d24c22 Remove more unused fields from v1alpha3 2021-12-02 20:41:07 -08:00
Peter Rifel 89c392d809
Add API fields for GCP PD CSI driver 2021-11-30 22:15:47 -06:00
John Gardiner Myers ef754ce71f Make requests and limits be *resource.Quantity 2021-11-29 22:50:31 -08:00
Kubernetes Prow Robot 0e56286aa3
Merge pull request #12816 from johngmyers/rename-fields-2
Rename fields to fit acronym conventions
2021-11-24 23:14:33 -08:00
John Gardiner Myers 2ca1d7ddd7 Update autogenerated files 2021-11-24 17:46:00 -08:00
Kubernetes Prow Robot a8289da46e
Merge pull request #12789 from WeTransfer/dnsopt
Add support for --dns flag in Docker config
2021-11-24 08:18:20 -08:00
John Gardiner Myers b9ac79ec6e Rename fields in v1alpha3 networking API to fit acronym convention 2021-11-22 08:07:55 -08:00
John Gardiner Myers f4d2cb0437 Rename fields in v1alpha3 keyset API to fit acronym convention 2021-11-22 08:07:55 -08:00
John Gardiner Myers 8fed76c8b2 Rename fields in v1alpha3 instancegroup API to fit acronym convention 2021-11-22 08:07:55 -08:00
John Gardiner Myers f65ba3d9cd Rename fields in v1alpha3 componentconfig API to fit acronym convention 2021-11-21 16:16:32 -08:00
John Gardiner Myers 5a42c10fd3 Rename fields in v1alpha3 cluster API to fit acronym convention 2021-11-21 16:16:32 -08:00
Jeff Wolski a9ecfa47b5 Add support for --dns flag in Docker config
This commit adds support for the --dns flag which is provided as a
Docker daemon startup flag. The flag is used to set the IP address of
the DNS server that the daemon injects into containers. Multiple --dns
flags are supported.
2021-11-19 10:02:12 +01:00
Kubernetes Prow Robot 2c9183509d
Merge pull request #12699 from zetaab/hostnamesuffix
Add ingress hostname suffix configurable to kOps
2021-11-16 07:13:27 -08:00
Kubernetes Prow Robot 0e32d3dfe2
Merge pull request #12692 from johngmyers/watch-ingress
Watch Ingress by default when using the external-dns provider
2021-11-13 22:38:46 -08:00
Kubernetes Prow Robot 0176f079e7
Merge pull request #12726 from johngmyers/revert-leader-migration
Revert leader migration
2021-11-12 22:50:48 -08:00
John Gardiner Myers 561b562a65 Revert "Update automatically generated files"
This reverts commit 3d5d5b38d6.
2021-11-12 22:07:18 -08:00
Kubernetes Prow Robot 88ffb9fd8f
Merge pull request #12682 from zhengtianbao/ipforwarding
[calico] Add support for allow_ip_forwarding field
2021-11-11 18:54:28 -08:00
Jesse Haka 2325e12c37 fix crds 2021-11-09 10:31:08 +02:00
John Gardiner Myers 241e0558cd Watch Ingress by default when using the external-dns provider 2021-11-07 15:17:01 -08:00
zhengtianbao 0c1329287a Update automatically generated files 2021-11-04 14:32:54 +08:00
John Gardiner Myers 3d5d5b38d6 Update automatically generated files 2021-11-02 23:08:03 -07:00
Kubernetes Prow Robot ad45d2a89e
Merge pull request #12610 from johngmyers/apiv3-cilium
Remove unused Cilium fields from v1alpha3 API
2021-10-30 21:19:17 -07:00
Kubernetes Prow Robot 5bfdefb43c
Merge pull request #12623 from johngmyers/cilium-ipv6-ipam
Never masquerade IPv6 with Cilium
2021-10-29 05:56:51 -07:00
Kubernetes Prow Robot 59a637e6de
Merge pull request #12538 from hierynomus/issue-12205
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
2021-10-29 03:10:51 -07:00
Jeroen van Erp 353be50f9b
Configure aws-iam-authenticator using identityMappings defined in cluster.yaml
Signed-off-by: Jeroen van Erp <jeroen@hierynomus.com>
2021-10-29 10:30:44 +02:00
John Gardiner Myers 7b5fdc7c43 Update automatically generated files 2021-10-27 23:40:02 -07:00
C Anthony Risinger 12e938557e pkg/apis/kops: Allow configuring dockerd --max-* upload and download concurrency and retry options.
YAML config options are maxConcurrentDownloads, maxConcurrentUploads, and maxDownloadAttempts.
Defaults are maxConcurrentDownloads=3, maxConcurrentUploads=5, and maxDownloadAttempts=5.
2021-10-27 09:43:12 -05:00
John Gardiner Myers ad6235e428 Update automatically generated files 2021-10-26 16:12:50 -07:00
John Gardiner Myers 36f2686624 Remove unused Cilium fields from v1alpha3 API 2021-10-25 21:20:07 -07:00
Kubernetes Prow Robot f8ba8b11f7
Merge pull request #12437 from olemarkus/cas-delay
Make it possible to set CAS max-node-provision-time
2021-10-22 09:34:38 -07:00
Ole Markus With 11e68308d1 Disable CNP status updates by default 2021-10-20 14:01:48 +02:00
Ole Markus With 258fd4f9d9 Make it possible to set CAS max-node-provision-time 2021-10-20 13:53:37 +02:00
Kubernetes Prow Robot f8a8c015ef
Merge pull request #12524 from dntosas/cilium-bpf-lb-sock-hostns-only
[cilium] Add support for bpf-lb-sock-hostns-only field
2021-10-19 03:56:38 -07:00
Jesse Haka 7e4d75fc31 make crds 2021-10-12 10:19:16 +03:00