Commit Graph

2249 Commits

Author SHA1 Message Date
Ciprian Hacman 66039f150e Add containerd option for registry mirrors 2020-12-28 19:32:06 +02:00
Kubernetes Prow Robot e39f8bcf7d
Merge pull request #10497 from hakman/relnotes_1.19.0-beta.3
Release notes for 1.19.0-beta.3
2020-12-24 09:58:26 -08:00
Kubernetes Prow Robot aff0ae2d39
Merge pull request #10455 from MoShitrit/docs/contributing
Docs: Rename "Development" section to "Contributing" and add instructions to update the base AMI version of Ubuntu
2020-12-23 09:44:26 -08:00
Ciprian Hacman 49f23412a7 Release notes for 1.19.0-beta.3 2020-12-23 18:14:01 +02:00
MoShitrit 2e671cb91d Address comments: rename contributing.md to index.md and move everything under Contributing section 2020-12-23 09:00:53 -05:00
Kubernetes Prow Robot b5afd1d6c4
Merge pull request #10473 from hakman/custom-container-runtime-package
Add config options for container runtime package URL and Hash
2020-12-23 04:48:28 -08:00
Ciprian Hacman ff6a782303 Add config options for container runtime package URL and Hash 2020-12-23 13:29:22 +02:00
Kubernetes Prow Robot 4266a3ed62
Merge pull request #10486 from DOboznyi/feature-6356/add-event-qps-flag
Added event-qps and event-burst flags to kubelet
2020-12-22 03:12:27 -08:00
Dmytro Oboznyi 334ff1d482
Added event-qps to kubelet flags
Change default value for event-qps to 0
Added event-burst parametr

Signed-off-by: Dmytro Oboznyi <dobozniy@gmail.com>
2020-12-22 10:31:15 +02:00
Moshe Shitrit e09c451041
Typo fix
Co-authored-by: Josh Branham <josh.php@gmail.com>
2020-12-21 11:39:45 -05:00
Kenji Kaneda a61caea8d2 Add Azure support
This commit contains all changes required to support Azure
(https://github.com/kubernetes/kops/issues/3957).
2020-12-21 08:27:54 -08:00
Kubernetes Prow Robot a013aaac28
Merge pull request #10449 from spotinst/feat-ocean-autoscaler
Spotinst: Expose Ocean Headroom percentage and autoconfig labels
2020-12-18 23:18:24 -08:00
Kubernetes Prow Robot ef8c36999a
Merge pull request #10404 from seh/allow-use-of-calico-vxlan-backend
Calico: Allow operators to choose which encapsulation mode to use
2020-12-18 10:54:25 -08:00
Steven E. Harris f0f45b71fd Allow use of Calico's VXLAN networking backend
Introduce a new "encapsulationMode" field in Calico's portion of the
Cluster specification to allow switching between the the IP-in-IP and
VXLAN encapsulation protocols. For now, we accept the values "ipip"
and "vxlan," and forgo a possible "none" value that would disable
encapsulation altogether (at least for the default Calico IP pool).

Augment the default-populating procedure for Calico to take this field
into account when deciding both which networking backend to use and
whether to use IP-in-IP or VXLAN encapsulation for the default IP
pool. Note that these values supplied for the "CALICO_IPV4POOL_IPIP"
and "CALICO_IPV4POOL_VXLAN" environment variables in the "calico-node"
DaemonSet pod spec only matter for creating the "default" IPPool pool
object when no such objects already exist.

Generalize the documentation for the "crossSubnet" field to cover
environments more broad than just AWS, as Calico can employ this
selective encapsulation in any environment in which it can detect
boundaries between subnets.
2020-12-18 10:55:11 -05:00
MoShitrit 1573a33641 Move Development to be a subsection of Contributing 2020-12-18 09:09:17 -05:00
MoShitrit c85da78c14 First pass at adding Contributing section to the docs 2020-12-17 17:17:35 -05:00
liranp 55b27582c6
feat(spot/ocean): expose headroom percentage and autoconfig labels 2020-12-17 17:33:38 +02:00
Ole Markus With 24c9d03477 Use helm's merging of vaulefiles and files 2020-12-16 22:18:58 +01:00
Ole Markus With 64334eba00 Bump helm to v3 2020-12-16 22:18:56 +01:00
Ciprian Hacman 2844abd225 Delay defaulting to CoreDNS to k8s v1.20 2020-12-16 08:12:04 +02:00
Sandeep Rajan 10f6fe9e96 Make coredns default for new clusters 2020-12-15 17:47:24 +02:00
Kubernetes Prow Robot 54a5f4e7f0
Merge pull request #10369 from olemarkus/tf-channels
Template functions for recommended kubernetes versions
2020-12-15 05:41:48 -08:00
Ole Markus With d89a7a55ce Add template function for upgrade version 2020-12-15 09:00:28 +01:00
Ole Markus With 5fe948bb5c Add template function for preferred version 2020-12-15 08:53:30 +01:00
Peter Rifel a5071e08cf
Don't allow ebs volume TF resource names to begin with digit 2020-12-14 23:15:36 -06:00
Peter Rifel 8ecdc74af3
Add release note for terraform launch template migration 2020-12-14 22:11:06 -06:00
Bharath Vedartham cebe171805 Explicitly specify http_endpoint in launch_template terraform
http_endpoint has to be explicitly specified in the metadata_options block
of the launch template terraform according to issue
https://github.com/hashicorp/terraform-provider-aws/issues/12564
2020-12-10 01:37:15 +05:30
Ciprian Hacman 4acc1d4f5d Update docs for CentOS 8 2020-12-09 09:36:43 +02:00
Ciprian Hacman 265bf4d106 Add option for setting the volume encryption key in AWS 2020-12-08 07:08:09 +02:00
Kubernetes Prow Robot e68a4648b9
Merge pull request #10374 from hakman/eip-egress
Add option to reuse existing Elastic IPs for NAT gateways
2020-12-06 04:55:25 -08:00
Ciprian Hacman e11d934268 Add option to reuse existing Elastic IPs for NAT gateways 2020-12-06 09:37:17 +02:00
Kubernetes Prow Robot 7140d96e92
Merge pull request #10318 from olemarkus/cert-manager-addon
Add minimal cert-manager addon
2020-12-04 22:57:25 -08:00
Kubernetes Prow Robot ec691116a9
Merge pull request #10357 from rdrgmnzs/gzip-nodeup-heredocs
Give users the option to gzip and base64 encode the heredocs in the nodeup.sh user-data
2020-12-04 13:37:38 -08:00
Kubernetes Prow Robot 77b6da4d6a
Merge pull request #10312 from srikiz/DO-Move-to-Beta
[Digital Ocean] Promote to Beta
2020-12-04 13:37:26 -08:00
Ole Markus With 1ae09e86a5 Add minimal cert-manager addon 2020-12-04 21:52:07 +01:00
Rodrigo Menezes 3fb12c66ae gzip and base64 encode the heredocs in the nodeup.sh portion of user-data 2020-12-04 10:46:18 -08:00
srikiz f0ba465931 Update documentation 2020-12-04 21:18:55 +05:30
srikiz 052ec647dd Move DO to beta 2020-12-04 21:15:08 +05:30
Ole Markus With b9b24b402c Promote addon docs to first level menu item 2020-12-03 08:24:12 +01:00
Kubernetes Prow Robot 81e5e33b20
Merge pull request #10339 from h3poteto/iss-6612
Add paramaeters related to Taint based Evictions in kube-apiserver
2020-12-02 01:56:50 -08:00
AkiraFukushima 35bd899ffa Add description about toleration seconds parameter for kube-apiserver in docs 2020-12-02 18:20:32 +09:00
Ole Markus With 5aa1ff9d01 Add docs for metrics server 2020-11-30 18:29:50 +01:00
Kubernetes Prow Robot 085b57527f
Merge pull request #10273 from dntosas/weave-add-ability-to-specify-image
[weave] Add support for default version override
2020-11-21 23:55:34 -08:00
Kubernetes Prow Robot 3d1038b9ab
Merge pull request #10282 from alok87/doc-update-cert-expiry-trick3
Can check cert expiry using openssl
2020-11-21 23:11:33 -08:00
Ciprian Hacman 0fdd46f73e
Document minimum supported version 2020-11-22 08:37:26 +02:00
Kubernetes Prow Robot fddbcfe50b
Merge pull request #10294 from rifelpet/nlb-acm-notes
Add more NLB release notes and documentation
2020-11-21 22:31:33 -08:00
Ciprian Hacman 608be53827 Improve formatting 2020-11-22 07:56:12 +02:00
Kubernetes Prow Robot b098ee01e5
Merge pull request #10293 from hakman/relnotes_1.19.0-beta.2
Release notes for 1.19.0-beta.2
2020-11-21 19:33:33 -08:00
Alok Kumar Singh 3b2c2314a2
Can use openssl to check cert expiry 2020-11-22 06:58:05 +05:30
Peter Rifel 4acd421bcf
Add more NLB release notes and documentation 2020-11-21 19:17:14 -06:00
Ciprian Hacman 43da43b15f Release notes for 1.19.0-beta.2 2020-11-22 01:13:39 +02:00
Peter Rifel d2c94f88b2
Add ACM/NLB instructions to 1.19 release notes 2020-11-21 16:44:42 -06:00
dntosas b7a2d0a1b1
[weave] Add support for default version override
In this commit, we enable users to override default version
of networking/Weave specs.

Signed-off-by: dntosas <ntosas@gmail.com>
2020-11-20 14:26:50 +02:00
Brian Choy c99c0d62d3
Fix incorrect URLs in kops cluster documentation 2020-11-19 14:14:04 -08:00
Frank Yang 93dcaddc48 feat(aws): add PolicyNames for ELB to change listener's security policy 2020-11-19 16:07:21 +08:00
Kubernetes Prow Robot 0b5646e94a
Merge pull request #10266 from rifelpet/k8s120
Update k8s dependencies to 1.20.0-beta.2
2020-11-18 10:48:07 -08:00
Peter Rifel f78bf5bf5e
regenerate cli docs 2020-11-18 12:02:58 -06:00
Joel Carter da6b5d1bc4 Expose flags for HorizontalPodAutoscaler
Enable setting of the
`horizontal-pod-autoscaler-initial-readiness-delay` and
`horizontal-pod-autoscaler-cpu-initialization-period` flags
2020-11-15 07:53:58 -06:00
Kubernetes Prow Robot 9e14b29867
Merge pull request #10235 from axpraka/update-kops-as-kOps
Update kops as kOps and remove extra spaces from .md files
2020-11-14 07:45:05 -08:00
Ciprian Hacman 3ca128d5ef make gen-cli-docs 2020-11-14 16:02:59 +02:00
axpraka cb53f89c22 kops as kOps for document
Updated kops as kOps for document.
2020-11-13 23:45:11 -05:00
Kubernetes Prow Robot 4baedc57ab
Merge pull request #10228 from karancode/fix-readme
Fix readme
2020-11-13 19:15:03 -08:00
axpraka 3033caa5e7 Update kops as kOps and remove extra spaces from .md files
- Updated kops as kOps in .md files.
- Remove extra spaces from .md files
2020-11-13 20:09:51 -05:00
karancode 3221aa0bad fix github readme
fix docs

fix

unify curl options

fix
2020-11-14 05:41:14 +09:00
Ciprian Hacman ee39733542 Update docs related to audit logging 2020-11-13 07:36:08 +02:00
Dirk Jablonski 83f1fa872e Fix cluster autoscaler docs 2020-11-12 10:57:10 +01:00
John Gardiner Myers cddd30c184 Update validate cluster cli docs 2020-11-11 09:31:18 -08:00
Kubernetes Prow Robot ebcb8609f4
Merge pull request #10213 from hakman/relnotes_1.19.0-beta.1
Release notes 1.19.0-beta.1
2020-11-10 19:31:48 -08:00
Ciprian Hacman 7501ca50a8 Release notes for 1.19.0-beta.1 2020-11-11 04:53:11 +02:00
liranp fce6a22755
feat(spot/ocean): configure resource limits 2020-11-07 20:32:51 +02:00
Christian Joun e91ed11449
Implement API load balancer class with NLB and ELB support on AWS (#9011)
* refactor TargetLoadBalancer to use DNSTarget interface instead of LoadBalancer

* add LoadBalancerClass fields into api

* make api machinery

* WIP: Implemented API loadbalancer class, allowing NLB and ELB support on AWS for new clusters.

* perform vendoring related tasks and apply fixes identified from hack/

dissallow spotinst + nlb
remove reflection in status_discovery.go
Add precreated additional security groups to the Master nodes in case of NLB
Remove support for attaching individual instances to NLB; only rely on ASG attachments
Don't specify Classic loadbalancer in GCE integration test

* add utility function to the kops model context to make LoadBalancer comparisons simpler

* use DNSTarget interface when locating DNSName of API ELB

* wip: create target group task

* Consolidate TargetGroup tasks

* Use context helper for determining api load balancer type to avoid nil pointers

* Update NLB creation to use target group ARN from separate task rather than creating a TG in-line

* Address staticcheck and bazel failures

* Removing NLB Attachment tasks because they're not used since we switched to defining them as a part of the ASGs

* Address PR review feedback

* Only set LB Class field for AWS clusters, fix nil pointer

* Move target group attributes from NLB task to TG task, removing unused attributes

* Add terraform and cloudformation support for NLBs, listeners, and target groups

* Update integration test for NLB support

* Fix NLB name format to pass terraform validation

* Preserve security group rule names when switching ELB to NLB to reduce destructive terraform changes

* Use elbv2 enums and address some TODOs

* Set healthcheck values in target group

* Find TG tags, fix NLB name detection

* Fix more spurious changes reported by lifecycle integration test

* Fix spotinst validation, more code cleanup

* Address more PR feedback

* ReconcileTargetGroups unit test + more code simplification

* Addressing PR feedback Renaming task 1. awstasks.LoadBalancer -> awstasks.ClassicLoadBalancer

* Addressing PR feedback Renaming task: ELBName() -> CLBName() / LinkToELB() -> LinkToCLB()

* Addressing PR feedback: Various text changes

* fix export of kubecfg

* address TargetGroup should have the same name as the NLB

* should address error when fetching tags due to missing ARN

* Update expected and crds

* Add feature table to NLB docs

* Address more feedback and remove some TODOs that arent applicable anymore

* Update spotinst validation error message

Co-authored-by: Peter Rifel <pgrifel@gmail.com>
2020-11-02 05:28:52 -08:00
Kubernetes Prow Robot 9885df83ad
Merge pull request #10077 from hakman/kOps
Rebrand kops to kOps
2020-10-29 18:16:06 -07:00
John Gardiner Myers 69c9564ee8 Add 1.20 release notes 2020-10-29 12:59:06 -07:00
Ciprian Hacman c9cc319423 Rename _kops_ to kOps in the docs 2020-10-29 19:40:56 +02:00
Ciprian Hacman 61708eae6b Rename kops to kOps in the docs 2020-10-29 19:40:53 +02:00
Ciprian Hacman 6a4d86baf9 Rename Kops to kOps in the docs 2020-10-29 19:39:50 +02:00
Kubernetes Prow Robot b7f66a6d98
Merge pull request #10109 from bmelbourne/set-minimum-terraform-0.12
Set minimum Terraform version to 0.12.26/0.13.0
2020-10-29 01:52:58 -07:00
Kubernetes Prow Robot f466403912
Merge pull request #9794 from rdrgmnzs/lb-attachment
Prevent unintended resource updates to LB attatchments
2020-10-28 15:18:59 -07:00
Kubernetes Prow Robot f3ea21a8c6
Merge pull request #10128 from hakman/fix-bash
Update shell style for CLI docs for better compatibility
2020-10-28 13:55:39 -07:00
Barry Melbourne 84417c330b Set minimum Terraform version to 0.12.26/0.13.0 2020-10-28 20:24:41 +00:00
Rodrigo Menezes 41adf07e15 cleanup code 2020-10-28 11:11:58 -07:00
Kubernetes Prow Robot a83ccdcb25
Merge pull request #10118 from hakman/fix-links
Fix release notes links to point to https://kops.sigs.k8s
2020-10-28 10:11:56 -07:00
Ciprian Hacman 35d49a40a2 Update shell style for CLI docs for better compatibility 2020-10-28 18:23:23 +02:00
Ciprian Hacman f69ffeaa63 Update cluster and state store names in CLI docs 2020-10-28 18:22:53 +02:00
Javi Polo c2684bcf7b Add nodeLocalDNSCache.kubeDnsOnly option 2020-10-27 10:46:25 +01:00
Ciprian Hacman de5847fc62 Fix release notes links to point to https://kops.sigs.k8s 2020-10-27 08:57:07 +02:00
Rodrigo Menezes 9bd0a7aedb Add instruction for no downtime 2020-10-26 18:11:46 -07:00
Rodrigo Menezes 627ba720a9 Add note to required actions 2020-10-26 17:30:09 -07:00
Kubernetes Prow Robot ca39ecefde
Merge pull request #10105 from justinsb/fix_9990
Default to exporting a kubecfg, even without credentials
2020-10-25 21:39:00 -07:00
Kubernetes Prow Robot fac28dcf40
Merge pull request #10102 from hakman/remove-etcd-hackaround
Remove hack/workaround from etcd-manager certificate expiration advisory
2020-10-25 15:47:01 -07:00
Justin SB e03bb72c2c Default to exporting a kubecfg, even without credentials
We do log a hint for the user when we have exported an empty kubecfg,
but this now supports the "current cluster" UX.

Issue #9990
2020-10-25 14:30:32 -04:00
Barry Melbourne 57e2aa3c9f Update Kops Go build version docs 2020-10-25 09:49:13 +00:00
Ciprian Hacman 40f473a816 Remove hack/workaround from etcd-manager certificate expiration advisory 2020-10-25 10:47:48 +02:00
Justin SB 409494a4c3 Release notes for 1.18.2 2020-10-24 11:19:07 -04:00
John Gardiner Myers 14a37806f3 Update Office Hours Zoom link 2020-10-23 09:07:35 -07:00
Kubernetes Prow Robot 06cdefc575
Merge pull request #10078 from yurrriq/patch-1
Update security_groups.md
2020-10-22 22:05:36 -07:00
Peter Rifel 84323630ed
Update docs for cutting new release branches 2020-10-22 22:46:08 -05:00
Eric Bailey 4803f79618
Update security_groups.md
Fix grammatical error: s/ran/run/
2020-10-21 15:57:30 -05:00
Ciprian Hacman a04cea6371 Add eBPF dataplane support for Calico CNI 2020-10-19 20:04:27 +03:00
Ole Markus With 0be8d4e325
Add some missing notes to the release notes (#10056)
* Add some missing notes to the release notes

* Apply suggestions from code review

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>

* Apply suggestions from code review

Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-10-18 09:12:13 -07:00
Ole Markus With c7a2183a1d Add some quick notes on how to get GPU opertor working 2020-10-18 15:39:49 +02:00
Kubernetes Prow Robot d105c9299e
Merge pull request #10044 from h3poteto/iss-9751
Rewrite ssh user to ubuntu in bastions docs
2020-10-15 06:48:24 -07:00
AkiraFukushima aff8c0af00 Change image type to t3.micro from t2.micro in bastion docs 2020-10-15 22:09:44 +09:00
AkiraFukushima c7f4bf3e05 Rewrite ssh user to ubuntu in bastions docs
Document is already out of date because now Ubuntu is used as bastion OS
2020-10-15 22:08:38 +09:00
Ciprian Hacman 2027fb04f2 Release notes for 1.19.0-alpha.5 2020-10-15 09:39:16 +03:00
Ciprian Hacman e6e3fc1309 Fix docs feature table not being rendered 2020-10-12 07:37:39 +03:00
Kubernetes Prow Robot 6f85cd98c0
Merge pull request #10037 from h3poteto/iss-9753
Add WireGuard support for Calico CNI
2020-10-11 06:10:47 -07:00
Kubernetes Prow Robot 5266619970
Merge pull request #10038 from dntosas/apiserver-include-reqTimeout-conf
Add support for KubeAPIServer --request-timeout flag
2020-10-11 04:54:47 -07:00
dntosas 66f42d8a9b
Add support for KubeAPIServer --request-timeout flag
In this commit, we initialize the support of --request-timeout flag on
the configuration of KubeAPIServer so as to enable users for setting
timeout duration value for all kinds of handlers.

Signed-off-by: dntosas <ntosas@gmail.com>
2020-10-11 14:17:44 +03:00
AkiraFukushima b8524205f7 Add wireguard description in calico docs 2020-10-11 19:10:55 +09:00
Kubernetes Prow Robot cc41bba0cf
Merge pull request #10022 from olemarkus/metrics-server
Kubelet serving certificate and metrics server addon
2020-10-09 03:09:07 -07:00
Ole Markus With 259d15cc6a Add release notes 2020-10-09 10:18:02 +02:00
monicagangwar a63ccd5163 [calico] awsSrcDstCheck to disable src/dest checks in AWS
* replacing k8s-ec2-srcdst with calico's config awsSrcDstCheck and
  flag FELIX_AWSSRCDSTCHECK
* documentation and iam changes for calico awsSrcDstCheck
2020-10-08 17:17:23 +05:30
Ole Markus With e8134b706c Sort wellknown ports and add missing ports to table 2020-10-08 08:27:51 +02:00
Kubernetes Prow Robot a310282f07
Merge pull request #10024 from olemarkus/kops-controller-port
Move kops-controller serving port out of conflict
2020-10-07 23:06:15 -07:00
Ole Markus With 1f739b0418 Move kops-controller serving port out of conflict 2020-10-08 07:25:43 +02:00
nareshku dca69323b7 enable kubelet --housekeeping-interval flag 2020-10-07 08:00:41 -07:00
Matt Bacchi 8d76d31b08
Add missing closing inline code character 2020-09-30 10:15:00 -06:00
Kubernetes Prow Robot 3c7e1c80f8
Merge pull request #9997 from erismaster/openstack-doc-typos
Fix pair of typos in openstack docs
2020-09-27 21:44:48 -07:00
Derrik Campau 7e57b9f5d7 Fix pair of typos in openstack docs
Fix a pair of small typos in the openstack docs
2020-09-27 20:05:07 -07:00
Derrik Campau ca70ac2203 Fix small typo in create cluster help output
Fixes typo in cmd/kops/create_cluster.go and
docs/cli/kops_create_cluster.md where example output had filename.yamlh,
changed to filename.yaml
2020-09-26 14:45:03 -07:00
Barry Melbourne a6ff8c7c7c Add deprecation notice for support of Terraform v0.11 2020-09-26 09:08:23 +01:00
Alen Akhabaev 727c02055f Clarified S3 state store encryption in case the bucket default doesn't exist or cannot be read 2020-09-25 16:13:08 +01:00
Ole Markus With 7a7f1d70ea Production recommendations document 2020-09-25 07:20:49 +02:00
Ciprian Hacman 1f0817911a Release notes for 1.19.0-alpha.4 2020-09-16 12:41:07 +03:00
Kubernetes Prow Robot 88748fe7b7
Merge pull request #9934 from justinsb/backfill
Document process to get older releases into artifacts.k8s.io
2020-09-14 09:16:59 -07:00
Justin SB 5797f372a9 Document process to get older releases into artifacts.k8s.io 2020-09-14 11:27:25 -04:00
Kubernetes Prow Robot c7bbe9c472
Merge pull request #9904 from justinsb/relnotes_1_18_1
Release notes for 1.18.1
2020-09-09 11:15:07 -07:00
Kubernetes Prow Robot 5e871a7d5e
Merge pull request #9902 from justinsb/relnotes_1_17_2
Release notes for 1.17.2
2020-09-09 10:09:08 -07:00
Justin SB 5c423e9dfa Release notes for 1.18.1 2020-09-09 12:58:08 -04:00
Justin SB ed83ae382d Release notes for 1.17.2 2020-09-09 11:56:24 -04:00
Chris Loukas 65610dbcee Update NodeLocalDNSConfig with Mem/CPU requests
Add NodeLocalDNS.CPURequest and NodeLocalDNS.MemoryRequest to
configure resource requests.

If not explicitly set, fall back to 25m and 5Mi
2020-09-09 18:40:14 +03:00
Ole Markus With 6cfd50a07a Deprecate the old cas addon 2020-09-09 12:13:32 +02:00
Ole Markus With a0e9fab104 Implement cluster autoscaler as bootstrap addon
Use provider-agnostic node definition for cas instead of aws auto-discovery

Validate clusterAutoscalerSpec

Add spec documentation

Add cas docs

Make CRDs

Apply suggestions from code review

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>

Add enabled flag to cas config

Apply suggestions from code review

Co-authored-by: Guy Templeton <guyjtempleton@googlemail.com>

Add support for custom cas image

Support more k8s versions

Use full image names
2020-09-03 09:52:13 +02:00
inductor 2c3cceccc2 use brew on linux 2020-09-03 13:29:57 +09:00
Kubernetes Prow Robot 1579e3aec3
Merge pull request #9762 from olemarkus/kops-get-nodes
Add command for listing cloud instances
2020-09-01 23:23:06 -07:00
John Gardiner Myers 77d5f12315 Improve description of detaching instances 2020-09-01 21:47:05 -07:00
Ole Markus With c01455cf91 Keep the good part from last attempt 2020-09-01 08:30:03 +02:00
Justin SB 0cda0f5068 Support authentication helper for kubectl
We create a simple exec plugin command which can create and renew
short-lived admin credentials on the fly, essentially leveraging the
security of the underlying cloud credentials.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 15:16:20 -04:00
Ole Markus With ff6c04938d Add kops delete instance command
Add support for deleting instance by k8s node name

Add yes flag
2020-08-28 08:43:30 +02:00
Peter Rifel d0b8c654bd
Add --internal flag for export kubecfg that targets the internal dns name
Kops creates an "api.internal.$clustername" dns A record that points to the master IP(s)

This adds a flag that will use that name and force the CA cert to be included.
This is a workaround for client certificate authentication not working on API ELBs with ACM certificates.
The ELB has a TLS listener rather than TCP, so the client certificate is not passed through to the apiserver.
Using --internal will bypass the API ELB so that the client certificate will be passed directly to the apiserver.
This also requires that the masters' security groups allow 443 access from the client which this does not handle automatically.
2020-08-26 21:15:18 -05:00
Victor Ferreira 486eca13cf docs(iam_roles): adding docs on Permissions Boundaries 2020-08-25 11:31:54 -03:00
Ciprian Hacman 56994de81c Release notes for 1.19.0-alpha.3 2020-08-24 20:05:56 +03:00
Kubernetes Prow Robot 2439466956
Merge pull request #9797 from olemarkus/openstack-docs
Update the openstack getting started docs
2020-08-22 01:27:40 -07:00
Ole Markus With a63a8464db Update the openstack getting started docs 2020-08-22 09:39:40 +02:00
Kubernetes Prow Robot 9344a694b3
Merge pull request #9791 from johngmyers/deprecate-bootstrap-tokens
De-emphasize bootstrap tokens and document node authorization as depr…
2020-08-22 00:05:39 -07:00
Peter Rifel 2d29f84922
Fix feature flag typo in release notes 2020-08-21 14:31:03 -05:00
John Gardiner Myers 171791aae2 De-emphasize bootstrap tokens and document node authorization as deprecated 2020-08-20 21:11:23 -07:00
Kubernetes Prow Robot 5b7d1d7c93
Merge pull request #9781 from johngmyers/update-notes
Add release note about cert expiration
2020-08-19 04:51:11 -07:00
Kubernetes Prow Robot 548beeb9c9
Merge pull request #9770 from hakman/squash-rel-notes
Squash patch versions of old release notes
2020-08-18 21:49:10 -07:00