Commit Graph

5512 Commits

Author SHA1 Message Date
justinsb fbf3556772 Thread context through kubectl-auth 2023-11-30 09:08:52 -05:00
Kubernetes Prow Robot 6977243608
Merge pull request #16117 from zetaab/skipfilerepository
skip file remapping if same host
2023-11-26 22:05:13 +01:00
Kubernetes Prow Robot 7c17b16a96
Merge pull request #16099 from spotinst/feat/add_multi_arch_base127_rebase
Spotinst: Feature/add multi arch in VNG and resource tag specification
2023-11-23 15:59:58 +01:00
Peter Rifel e108c3b1c5
Fix parsing of newer kubernetes version URLs 2023-11-22 20:02:38 -06:00
Peter Rifel 386352ea17
Upgrade AWS EBS CSI Driver to v1.25.0 2023-11-20 22:35:27 -06:00
Kubernetes Prow Robot bcbf6c79a4
Merge pull request #16113 from h3poteto/iss-16027
Replace * in IAM tags when IRSA namespace has wildcard
2023-11-20 18:43:09 +01:00
AkiraFukushima 91d3e89313
Replace * in IAM tags when IRSA namespace has wildcard 2023-11-20 21:48:10 +09:00
Jesse Haka 9f383f93cc skip file remapping if same host 2023-11-20 09:18:55 +02:00
Kubernetes Prow Robot c39025b611
Merge pull request #16115 from zetaab/allowlocalfile
allow local file VFS in asset copy
2023-11-19 23:58:32 +01:00
Jesse Haka 0d3f3710a4 allow local file VFS in asset copy 2023-11-19 23:26:33 +02:00
Aaron U'Ren 6903c6cb0e
Remove deprecation of kube-router 2023-11-18 15:36:56 -06:00
justinsb d8c449a4f8 Basic OpenTelemetry support
We initially support capturing to a file (in our own format, as it
doesn't appear a suitable format exists).  This means we don't need a
server to capture the traces, and can start capturing through prow
without a lot of infrastructure changes.

Co-authored-by: Peter Rifel <rifelpet@users.noreply.github.com>
2023-11-18 09:12:19 -05:00
yehielnetapp af19ad5664 add feature base 2023-11-12 14:19:37 +02:00
yehielnetapp 00fc4e78e8 add Label Resource Tag Specification Volumes 2023-11-12 14:19:15 +02:00
Ciprian Hacman 8916d1e547
Release 1.29.0-alpha.2 (#16095) 2023-11-11 13:29:12 +01:00
justinsb 49dfdabb79 cloudmock: Add context functions to mock 2023-11-09 08:17:10 -05:00
Ciprian Hacman 65c24a9f3d Add missing mock functions 2023-11-09 08:17:10 -05:00
justinsb f79d2da6f6 Thread context through some slower AWS tasks
There are still too many context.TODOs here for this to join all the
way up, but we should be able to better understand the slowest tasks.
2023-11-09 08:17:10 -05:00
justinsb cffd473eb0 dump: include AWS route table objects 2023-11-06 07:50:35 -05:00
Ciprian Hacman 3597bddeaf Fix vet error 2023-11-04 05:57:08 +02:00
justinsb a6b963b127 dump: actually dump the gateway objects
I had forgotten to populate the object itself, so it was not appearing
in the raw dump.
2023-10-29 08:13:43 -04:00
justinsb 094b57aa8e dump: include the various gateways on AWS
I think we were leaking egress-only-internet-gateways, it would be
helpful to see their status in the dump.
2023-10-28 16:23:38 -04:00
Kubernetes Prow Robot b9c89c42a5
Merge pull request #16067 from hakman/keep-validating
Add option to provide additional config entries for containerd
2023-10-27 13:43:47 +02:00
Ciprian Hacman 7a1af66152 Add option to provide additional config entries for containerd 2023-10-27 08:56:34 +03:00
upodroid ecf212d736 add --node-instance-group flag to ginkgo 2023-10-26 23:08:18 +01:00
Kubernetes Prow Robot 165cbd5333
Merge pull request #15705 from zadjadr/feature/cilium-14
Bump to Cilium 1.14
2023-10-25 19:54:22 +02:00
Kubernetes Prow Robot cb6b73ea04
Merge pull request #16060 from shapirus/master
Support setting CAS skip-nodes-with-custom-controller-pods parameter
2023-10-25 18:14:37 +02:00
Kubernetes Prow Robot b93b3f3ac9
Merge pull request #16062 from justinsb/validate_kube_controller_manager
Add validation to help users move from experimentClusterSigningDuration
2023-10-25 17:15:49 +02:00
justinsb 23ace87eb3 Add validation to help users move from experimentClusterSigningDuration
We aren't aiming to do this in general, but if we can easily help
users find the new option for deprecated flags, that will save
everyone time.

Issue #15909
2023-10-25 09:40:51 -04:00
shapirus dd665fbe1e Support setting cluster-autoscaler's skip-nodes-with-custom-controller-pods parameter 2023-10-25 14:03:57 +03:00
Ciprian Hacman 3a06d1225f Update codegen to v0.28.3 2023-10-25 07:49:14 +03:00
zadjadr 30aa24f6de
Update to Cilium 1.14.3 2023-10-24 16:59:21 +02:00
zadjadr 4dfaba5242
Bump Cilium to v1.14.2 2023-10-24 16:55:37 +02:00
Matt Morrison 811f7d0420
Push issuer documents to GCS 2023-10-24 07:57:21 +13:00
Kubernetes Prow Robot 1f6d49217b
Merge pull request #16043 from hakman/containerd-1.7.7
Update containerd to v1.7.7
2023-10-23 14:13:34 +02:00
Ciprian Hacman ab05ebb28f Update containerd to v1.7.7 2023-10-22 13:45:12 +03:00
Ciprian Hacman 7d7a9105d6 Add support for --cluster-signing-duration KCM flag 2023-10-21 07:59:47 +03:00
Kubernetes Prow Robot f7bd516b79
Merge pull request #15994 from fmuyassarov/add-nri-support
containerd: introduce a new field to enable NRI
2023-10-21 04:52:02 +02:00
Feruzjon Muyassarov 0aeab5e523 containerd: introduce a new field containerd.nri to enable NRI
Node Resource Interface (NRI) is a common framework for plugging
domain or vendor-specific custom logic into container runtime like
containerd. This commit introduces a new congiguration field
`containerd.nri`, providing cluster admins the flexibility to opt
in for this feature in containerd and tune some of its parameters.
By default, NRI is disabled here in accordance with the containerd's
default config file.

Signed-off-by: Feruzjon Muyassarov <feruzjon.muyassarov@intel.com>
2023-10-21 00:26:54 +03:00
Kubernetes Prow Robot dd7a3a667e
Merge pull request #16013 from sl1pm4t/enable-gcp-cloud-platform-scope
Add cloud-platform GCP VM scope
2023-10-20 18:42:17 +02:00
justinsb 27dd371c08 Refactor: Add context.Context to more VFS methods
This allows for propagation of opentelemetry traces.
2023-10-14 14:31:05 -04:00
Kubernetes Prow Robot c24e575c26
Merge pull request #16010 from borg-land/dumping-logic
Dump nodes even if controlplane is broken
2023-10-12 09:44:59 +02:00
Victor Oriol 10da4519f0 make apimachinery 2023-10-11 09:31:44 +02:00
Victor Oriol dce72a585a update kops apis components 2023-10-11 09:12:38 +02:00
Matt Morrison 0be24991da
Add cloud-platform GCP VM scope 2023-10-11 19:59:25 +13:00
voriol 722fb08eff add webhookURL 2023-10-11 08:58:55 +02:00
Kubernetes Prow Robot 5840216c45
Merge pull request #15974 from borg-land/kubelet-cred-provider
Configure GCP Kubelet Credentials Provider
2023-10-10 13:19:29 +02:00
upodroid 6828213063 dump nodes even if controlplane is broken 2023-10-10 10:32:44 +01:00
upodroid 2b056b9b17 add support for auth-provider-gcp cred provider 2023-10-10 10:29:16 +01:00
Ciprian Hacman 6dd31d9680 aws: Attach security group to NLBs for kops-controller 2023-10-08 09:16:35 +03:00
Kubernetes Prow Robot d2b789da07
Merge pull request #15993 from johngmyers/nlb-sg
aws: Attach security groups to NLBs
2023-10-07 10:57:01 +02:00
John Gardiner Myers 9f40d59545 Improve removal of orphaned security group rules 2023-10-06 22:33:31 -07:00
John Gardiner Myers 2fbc7cf979 aws: Attach security groups to NLBs 2023-10-06 22:33:31 -07:00
Kubernetes Prow Robot 24f23543b4
Merge pull request #15972 from borg-land/bump-gcp-ccm
Bump GCP CCM again
2023-10-07 03:41:20 +02:00
upodroid e08472ddc5 bump cloud-provider-gcp to latest build 2023-10-06 17:52:23 +01:00
Ciprian Hacman 271f3e4d4b Add support for installing additional packages at cluster level 2023-10-06 08:41:41 +03:00
Ciprian Hacman f26874c37e aws: Don't add dependency on additional CIDR for shared VPC 2023-10-03 07:24:12 +03:00
Mia-Cross e12f3dc07b
scaleway: terraform support (#15892)
* tasks dependencies

* FindAddresses should proceed even if LBID is empty

* refacto instance: handle several instances in IG + volumeSize in model

* refacto lb_backend: set servers' IPs in backend task rather than instance

* dns changes for tf support

* render Scaleway s3 objects + add zone to outputs

* add terraform support to documentation

* new instance unique name should be given according to actual instances names

* avoid untimely changes in tf + tag instance IPs to avoid orphaned IPs at cluster deletion

* update integration tests

* review comments

* add IPs to the resources to be deleted with the cluster

* add task + model for DNS record
2023-09-29 04:22:42 -07:00
upodroid d630f9c520 add missing rbac roles and don't run gkenetparamset controller 2023-09-28 12:06:52 +01:00
upodroid de0c99b192 bump gcp ccm image and dump more resources 2023-09-27 15:04:51 +01:00
Ciprian Hacman 626213c2c1 hack/update-expected.sh 2023-09-25 18:21:49 +02:00
Ciprian Hacman b5aedcf73b Update etcd-manager to v3.0.20230925 2023-09-25 18:17:44 +02:00
Kubernetes Prow Robot 97c89f49b0
Merge pull request #15903 from hakman/aws_list_eni_by_vpc
aws: Filter ENI list by VPC
2023-09-24 16:22:56 -07:00
Ciprian Hacman dbe05d8895 Update Karpenter to v0.30.0 2023-09-24 01:53:10 +02:00
Kubernetes Prow Robot d82d574dbe
Merge pull request #15955 from justinsb/gce_network_tags_work_with_ipv6
gce ipv6: we can use network tags with ipv6 addresses
2023-09-23 12:52:55 -07:00
Dan Ports 32b0416547 Configure Karpenter resources. 2023-09-23 11:16:28 -04:00
Kubernetes Prow Robot bd6c6852dc
Merge pull request #15935 from junm-cloudnatix/karpenter-typo
aws: Fix minor typos for Karpenter setup
2023-09-23 07:16:55 -07:00
justinsb 4557f9b655 gce ipv6: we can use network tags with ipv6 addresses
These work with IPv6, and this means we don't need to set up the (more
fragile) CIDR based rules.
2023-09-23 08:39:30 -04:00
Ciprian Hacman 1aecb5304d aws: Filter ENI list by VPC 2023-09-23 05:25:56 +03:00
Kubernetes Prow Robot 0a0f938d91
Merge pull request #15901 from zadjadr/feature/cilium-nodeencryption
Cilium: Implement node encryption
2023-09-22 10:16:50 -07:00
Kubernetes Prow Robot 071b285da6
Merge pull request #15934 from hakman/optimize_test_cleanup
scale-test: Optimise node dumping for large clusters
2023-09-20 10:32:02 -07:00
Jun Mukai 0573e6d39e Fix minor typos for karpenter setup.
`on-demand` is the right string to indicate OnDemand in Karpenter.
See: https://github.com/aws/karpenter-core/blob/main/pkg/apis/v1alpha5/labels.go#L30
As the result it does not fall back to ondemand instances.

Also add `ec2:DescribeImages` to karpenter IAM policies -- it's
noted in https://karpenter.sh/docs/getting-started/migrating-from-cas/#create-iam-roles
(the list also has DeleteLaunchTemplates but I don't think this
is necessary for kOps).
2023-09-20 09:57:46 -07:00
Ciprian Hacman 5c785609b2 test: Dump special nodes first and limit to 500 nodes 2023-09-20 19:45:46 +03:00
Justin SB 1bf8485cdf Recognize kops-controller in registry.k8s.io
We had hard-coded k8s.gcr.io, but this is also available in registry.k8s.io

Also cleanup a few comments
2023-09-18 11:53:08 -04:00
justinsb 0096451a83 Cleanup a few places where we used Warningf with %w
Fixing up a few places where we used the wrong marker.
2023-09-18 11:02:18 -04:00
Ciprian Hacman 772b1d3d37 test: Reduce connection timeout when dumping nodes 2023-09-17 16:08:21 +03:00
Colin Hoglund 2167dd8d82 Update kubelet API with SeccompDefault option. 2023-09-15 21:11:50 -07:00
Dan Ports ae1584c6f0 Add Cognito permissions for AWS LBC. 2023-09-14 12:15:30 -04:00
Kubernetes Prow Robot e834be956a
Merge pull request #15902 from borg-land/gce-sva-bug-fix
Handle 404 properly from Service Accounts API
2023-09-11 11:48:11 -07:00
upodroid 352566cf42 handle 404s properly from service accounts API 2023-09-11 18:43:59 +01:00
zadjadr bc76c3f8ad Implement node encryption 2023-09-11 13:15:15 +02:00
Zadjad Rezai 592e84d042 Populate ingress spec values only when needed
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>

fmt
2023-09-10 09:05:51 +02:00
zadjadr 61d036933e hardcode ingress secrets namespace & lb mode 2023-09-10 08:57:04 +02:00
zadjadr 4807f2c0c6 Implement Cilium Ingress 2023-09-10 08:57:03 +02:00
John Gardiner Myers 9ae4e967d1
Release 1.29.0-alpha.1 (#15889) 2023-09-07 22:00:13 -07:00
Peter Rifel 54c99b5ea6
Filter for unattached ENIs, matching the client-side filtering we do afterwards
Signed-off-by: Peter Rifel <pgrifel@gmail.com>
2023-09-06 21:38:34 -05:00
Peter Rifel 7ec30b4a98
Paginate DescribeNetworkInterfaces calls
This should help with VPCs containing large numbers of ENIs

Signed-off-by: Peter Rifel <pgrifel@gmail.com>
2023-09-06 21:38:25 -05:00
Kubernetes Prow Robot 09bc180686
Merge pull request #15871 from hakman/remove-docker
Remove Docker config option
2023-09-05 15:00:51 -07:00
Ciprian Hacman 4a00078845 Allow setting additional flags for apiserver, kcm and scheduler 2023-09-05 14:33:42 +03:00
Ciprian Hacman 6e6a2a4e7b Address review comments 2023-09-05 12:34:20 +03:00
Ciprian Hacman 120c0b65aa hack/update-expected.sh 2023-09-05 12:34:20 +03:00
Kubernetes Prow Robot 14c0b647db
Merge pull request #15874 from johngmyers/no-master-label
Legacy control-plane node labels are no longer used
2023-09-04 23:05:49 -07:00
Ciprian Hacman c43b48a8d8 Remove Docker config option 2023-09-05 07:22:33 +03:00
John Gardiner Myers 76cb3924c4 Legacy control-plane node labels are no longer used 2023-09-04 20:23:08 -07:00
John Gardiner Myers 1ea0fd3004 AWS always uses resource-based names 2023-09-04 16:08:48 -07:00
John Gardiner Myers 9ced296724 AWS and GCP always use external CCM 2023-09-04 15:54:16 -07:00
John Gardiner Myers daf3d0808c Update IAM builder tests to use external CCM 2023-09-04 15:54:05 -07:00
John Gardiner Myers 47b1c37069 Remove code for disabling AWS EBS CSI driver 2023-09-04 15:43:23 -07:00
justinsb b51cae02d8 Clarify comment on nonMasqueradeCIDR field.
Should not have any code impact.
2023-09-04 13:31:58 -04:00
Kubernetes Prow Robot ccb39750d0
Merge pull request #15860 from johngmyers/remove-23
Remove support for Kubernetes 1.23
2023-09-03 23:23:48 -07:00
Kubernetes Prow Robot f61939b1e2
Merge pull request #15848 from justinsb/warmpool_tweaks
Fix warmpool to expose dependencies for dependency analysis
2023-09-03 20:37:47 -07:00
John Gardiner Myers b3908e592c Remove support for Kubernetes 1.23 2023-09-03 16:22:18 -07:00
Ciprian Hacman 9caf0b2662
Release 1.29.0-alpha.0 (#15858) 2023-09-02 23:19:12 -07:00
Ciprian Hacman db8b0f32f9
Release 1.28.0-beta.1 (#15855) 2023-09-02 21:29:12 -07:00
John Gardiner Myers 0d43b66e56 Use cluster-autoscaler 1.28.0 on k8s 1.28+ 2023-08-31 17:21:17 -07:00
justinsb f5c2f2bcba Fix warmpool to expose dependencies for dependency analysis
We should populate the AutoscalingGroup field, so that it can be used
by dependency analysis.
2023-08-31 13:08:08 -04:00
Ciprian Hacman 17d313e89f Allow custom service account issuer without public bucket 2023-08-31 16:37:33 +03:00
Ciprian Hacman 68ce4c800e aws: Add dependency on additional network cidrs for subnets 2023-08-31 11:15:10 +03:00
Leïla MARABESE c02fb479dc reconcile instancegroup 2023-08-29 17:42:19 +02:00
Ciprian Hacman 7c2481c51d Find containerd package hash from release sha256sum 2023-08-28 03:53:55 +03:00
Kubernetes Prow Robot 77baad6384
Merge pull request #15824 from hakman/experimental-allocatable-ignore-eviction
Add support for --experimental-allocatable-ignore-eviction kubelet flag
2023-08-26 05:17:21 -07:00
Kubernetes Prow Robot 8d5b74064f
Merge pull request #15814 from hakman/number_of_subnets
Split network CIDR into even bigger subnets
2023-08-25 22:01:21 -07:00
Ciprian Hacman c291190674 Add support for --experimental-allocatable-ignore-eviction kubelet flag 2023-08-26 06:01:27 +03:00
justinsb e56c530ba2 Add cdn.dl.k8s.io as a mirror for dl.k8s.io
This should help with reachability, and lets us add more mirrors in
future.
2023-08-24 08:46:46 -04:00
Kubernetes Prow Robot 69fbdcdf55
Merge pull request #15815 from justinsb/do_gossip
Fix gossip on DigitalOcean
2023-08-23 07:53:29 -07:00
justinsb 8b99c79631 Fix gossip on DigitalOcean
We don't have a seeding mechanism for DigitalOcean (this relies on
cloud credentials, which we don't want to put on the nodes).

Instead, use the (stable) load balancer IP to connect.
2023-08-23 08:10:41 -04:00
Ciprian Hacman 879bb604b9 Split network CIDR into even bigger subnets 2023-08-23 05:31:34 +03:00
John Gardiner Myers cd32e76a50 Use AWS CCM 1.28.1 on k8s 1.28+ 2023-08-22 17:07:10 -07:00
Kubernetes Prow Robot fc30975eba
Merge pull request #15791 from hakman/number_of_subnets
Create clusters with bigger default subnets
2023-08-20 21:57:22 -07:00
Ciprian Hacman 46db653702
Apply suggestions from code review
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2023-08-20 06:01:34 +03:00
Kubernetes Prow Robot db3a7abdaf
Merge pull request #15802 from justinsb/gce_transitional_state
gce: don't logspam when next-route-hop is starting
2023-08-19 10:55:21 -07:00
justinsb d9377e4e56 gce: don't logspam when next-route-hop is starting
Observed this when a machine was first starting up.
2023-08-19 13:08:15 -04:00
Kubernetes Prow Robot e1dc807a0c
Merge pull request #15798 from hakman/endpoint-updates-batch-period
kcm: Add support for `--endpoint/slice-updates-batch-period`
2023-08-18 05:40:29 -07:00
Ciprian Hacman 30ddb9efa4 kcm: Add support for --endpoint/slice-updates-batch-period 2023-08-18 14:52:41 +03:00
Jack Andersen af6269f82a
Add a new field for using a custom registry for Cilium
Signed-off-by: Jack Andersen <jandersen@plaid.com>
2023-08-17 10:54:00 -04:00
Ciprian Hacman 460a327fc5 aws: Ignore overlapping pod and network CIDRs with AWS VPC CNI 2023-08-17 07:56:03 +03:00
Ciprian Hacman a1018036ba Split network CIDR into bigger subnets 2023-08-17 05:29:28 +03:00
Kubernetes Prow Robot 73159cd6f5
Merge pull request #15670 from johngmyers/aws-ccm
Fix AWS CCM defaults for IPAM to match KCM
2023-08-16 07:22:27 -07:00
Ciprian Hacman 8a2f74ce46 aws: Ignore volumes set to delete on instance termination 2023-08-14 18:47:38 +03:00
Kubernetes Prow Robot ca1dd07fc9
Merge pull request #15726 from johngmyers/asset-acl
Don't set object-level public ACL in S3 FileRepository
2023-08-12 20:53:19 -07:00
zadjadr 0ea7e55f25 Add missing security groups for cilium etcd 2023-08-11 13:47:15 +02:00
Marco Palmisano 6a7723176d
fix: fixed an edge case with setting NodePort access in Hetzner Cloud 2023-08-10 16:17:28 +02:00
John Gardiner Myers edac43faed
Release 1.28.0-alpha.2 (#15758) 2023-08-09 21:13:26 -07:00
John Gardiner Myers 37be4741e1 hack/update-expected.sh 2023-08-09 18:12:37 -07:00
John Gardiner Myers 688097bd85 Remove unnecessary data from userdata 2023-08-09 18:12:37 -07:00
John Gardiner Myers 0f36b1344e hack/update-expected.sh 2023-08-09 18:12:37 -07:00
John Gardiner Myers 0d9c130b07 Remove use of ClusterSpec in nodeup 2023-08-09 18:12:37 -07:00
Kubernetes Prow Robot dc2db03de2
Merge pull request #15715 from johngmyers/nodeup-cloudconfig
Remove references to cloudconfig-related fields from ClusterSpec in nodeup
2023-08-08 22:03:50 -07:00
zadjadr d2358df1d7 feature: Add cluster-id for Cilium
hack/update-expected.sh
2023-08-06 18:08:39 +02:00
Ciprian Hacman 60b0fee1e0 aws: Add instance group tag to subnets only with Karpenter 2023-08-05 07:50:24 +03:00
Kubernetes Prow Robot ba7b4e716a
Merge pull request #15730 from zadjadr/feature/cilium-13
Bump cilium to v1.13.5
2023-08-04 07:44:23 -07:00
Kubernetes Prow Robot 29aa8257f4
Merge pull request #15737 from hakman/azure_nat_gateway
azure: Add support for NAT gateway
2023-08-03 21:42:20 -07:00
Ole Markus With a0d67fc475 Bump cilium to 1.13.5
Bump to Cilium 1.14.0

hack/update-expected.sh
2023-08-03 21:03:56 +02:00
Jesse Haka e3bcb1f195
OpenStack: add server group name override annotation (#15735)
* OpenStack: add server group name override annotation

* use retries to listinstances

* add support for multiple clusters in same tenant

* run hack-expected.sh

* add test for serverGroupName annotation

* use retry
2023-08-03 00:04:20 -07:00
Ciprian Hacman d382b0e44f azure: Add support for NAT gateway 2023-08-03 07:12:51 +03:00
John Gardiner Myers 054c3960a5 Don't set object-level public ACL in S3 FileRepository 2023-08-01 04:26:41 -07:00
Kubernetes Prow Robot 2d0f2387b0
Merge pull request #15721 from rifelpet/eb
Rename eventbridge rule in toolbox dump output
2023-07-30 08:46:00 -07:00
Kubernetes Prow Robot 12b6991ad3
Merge pull request #15677 from hakman/azure_application_security_groups
azure: Add support for application security groups
2023-07-30 07:32:02 -07:00
Peter Rifel e0c3b8cd36
Rename eventbridge rule in toolbox dump output
`eventbridge` itself is too generic given there are many resource types within the eventbridge service
2023-07-30 09:25:40 -05:00
Ciprian Hacman 10fa740e3d azure: Add support for application security groups 2023-07-30 14:40:14 +03:00