John Gardiner Myers
edfa6a0e94
Adjust Kubernetes version removals and deprecations for 1.20
2020-10-29 13:25:37 -07:00
Kubernetes Prow Robot
b7f66a6d98
Merge pull request #10109 from bmelbourne/set-minimum-terraform-0.12
...
Set minimum Terraform version to 0.12.26/0.13.0
2020-10-29 01:52:58 -07:00
Kubernetes Prow Robot
f466403912
Merge pull request #9794 from rdrgmnzs/lb-attachment
...
Prevent unintended resource updates to LB attatchments
2020-10-28 15:18:59 -07:00
Barry Melbourne
84417c330b
Set minimum Terraform version to 0.12.26/0.13.0
2020-10-28 20:24:41 +00:00
Kubernetes Prow Robot
f7e8458e31
Merge pull request #10131 from rifelpet/cf-lint-fixes
...
Fix cloudformation lint errors
2020-10-28 12:21:56 -07:00
Peter Rifel
6c4273d985
Fix cloudformation lint errors
...
```
E3002 Invalid Property Resources/AWSAutoScalingAutoScalingGroupnodesmixedinstancesexamplecom/Properties/MixedInstancesPolicy/InstancesDistribution/SpotInstancePool
//kops/tests/integration/update_cluster/mixed_instances_spot/cloudformation.json:321:13
E3031 CidrIp contains invalid characters (Pattern: x.x.x.x/y) at Resources/AWSEC2SecurityGroupIngresssshexternaltonode2001085a348/Properties/CidrIp
//kops/tests/integration/update_cluster/complex/cloudformation.json:833:9
```
I'm using the strings.Contains to determine if a CIDR is v6 since it seems simplest given that we know the value wont have a port number [0]
[0] https://stackoverflow.com/questions/22751035/golang-distinguish-ipv4-ipv6
2020-10-28 10:16:29 -05:00
Peter Rifel
ce2a3e52f7
Call IsUp to validate cluster after creating it
2020-10-27 13:01:46 -05:00
Peter Rifel
fe9903fad3
fix cluster name generation
2020-10-27 13:01:45 -05:00
Peter Rifel
b3acf6a96c
Don't check for existence of binary path before the build stage has occurred
2020-10-27 13:01:45 -05:00
Peter Rifel
6e4f3e6a25
Set default --kops-root value when GOPATH is set
2020-10-27 13:01:44 -05:00
Peter Rifel
362faf3f3f
Add random AWS zone logic + specify build stage location
2020-10-27 13:01:44 -05:00
Rodrigo Menezes
dbbd0dd802
Move external LB and target group to inline as well.
2020-10-26 17:30:06 -07:00
Rodrigo Menezes
82d0ebdb56
Prevent unintended resource updates to LB attatchments
2020-10-26 17:29:07 -07:00
Kubernetes Prow Robot
c9aa53895a
Merge pull request #10048 from hakman/container-runtime-assets
...
Install container runtime packages as assets
2020-10-25 21:03:01 -07:00
Kubernetes Prow Robot
51511ba59b
Merge pull request #10083 from rifelpet/kubetest2
...
kubetest2 - Implement create/validate/delete cluster functionality
2020-10-24 01:11:00 -07:00
Kubernetes Prow Robot
fbb172c08c
Merge pull request #9575 from johngmyers/node-labels
...
Take node labels from cloud tags on AWS
2020-10-23 04:01:45 -07:00
Peter Rifel
048d7ab0a3
Add initial kops fields and create/validate/delete cluster commands
2020-10-22 20:57:38 -05:00
Kubernetes Prow Robot
ea96bbd768
Merge pull request #10066 from binkkatal/hotfix/10015-cloud-formation-lint-error
...
Hotfix/10015 cloud formation lint error
2020-10-20 21:06:19 -07:00
binkkatal
86b605d10b
RUN: ./hack/update-expected.sh
2020-10-20 19:28:20 +05:30
Kubernetes Prow Robot
3ba214dbe1
Merge pull request #10031 from rifelpet/kubetest2
...
Initial kubetest2 structure for e2e testing
2020-10-20 06:56:08 -07:00
Nicolas Vanheuverzwijn
5f59b86c78
Update tests/integration/channel/integration_test.go
...
Co-authored-by: Ciprian Hacman <ciprianhacman@gmail.com>
2020-10-14 13:23:04 -04:00
Nicolas Vanheuverzwijn
b0fd89a193
upgrade-cluster: test that new image in stable or alpha channel will receive automated update
2020-10-14 10:14:47 -04:00
Ciprian Hacman
e44037f825
Install container runtime packages as assets - Integration
2020-10-14 15:41:51 +03:00
Ciprian Hacman
dc86205faf
Update expected outputs of integration tests
2020-10-09 17:12:37 +03:00
Ciprian Hacman
9c888bcdcf
Update expected outputs of integration tests
2020-10-09 09:33:39 +03:00
Peter Rifel
f0295a3cb7
Initial kubetest2 structure for e2e testing
...
This creates a new go module for the e2e code and the kubetest2 skeleton.
Most of the kubetest2 code was copied from sigs.k8s.io/kubetest2/kubetest2-gke.
Currently only building (`make gcs-publish-ci`) is in place.
I used test-infra/scenarios/kubernetes_e2e.py as reference, removing env and make variables that are no longer needed.
Instructions:
```
cd tests/e2e
go install sigs.k8s.io/kubetest2
go install ./kubetest2-kops
kubetest2 kops -v 9 --build --stage-location=gs://foobar/ --kops-root=../../ # runs make gcs-publish-ci and exits
```
2020-10-08 18:15:51 -05:00
Peter Rifel
4bcfebebcc
Fix the detection and rendering of multiple additionalNetworkCIDR blocks
2020-09-27 20:12:09 -05:00
Peter Rifel
0978cd97e8
Add second additionalNetworkCIDR w/ incorrect test output
2020-09-27 20:08:09 -05:00
Justin SB
2a44cb7f16
Update script and testdata CA keypair
...
If we generate with the wrong type (usages), the keypair will be
regenerated.
2020-09-12 16:21:15 -04:00
John Gardiner Myers
54c280eed5
update-expected.sh
2020-09-10 20:59:28 -07:00
Justin SB
6fa8be2716
JSON formatting of IAM: Workaround for optional fields
...
AWS IAM is very strict and doesn't support `Resource: []` for example.
We implement a custom MarshalJSON method to work around that.
2020-09-09 09:57:07 -04:00
Justin SB
a61ecf4c58
Refactor to use interface for iam Subjects
...
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00
Justin SB
ccc814dfbc
Create tests for JWKS scenarios
2020-09-09 09:57:06 -04:00
Kubernetes Prow Robot
4604fa53b3
Merge pull request #9899 from olemarkus/remove-insecure-bind-address
...
Don't explicitly set insecure-bind-address on newer k8s
2020-09-09 03:25:53 -07:00
Ole Markus With
886b4c97cb
Don't explicitly set insecure-bind-address on newer k8s
2020-09-09 11:41:51 +02:00
Ciprian Hacman
43e0b2332c
Update expected outputs of integration tests
2020-09-08 10:12:57 +03:00
Ciprian Hacman
d1bdc1632d
Update expected outputs of integration tests
2020-09-08 08:46:09 +03:00
Kubernetes Prow Robot
277038d419
Merge pull request #9839 from rifelpet/tf-cert-id
...
Dont generate the ssl_certificate_id field on TCP listeners in Terraform
2020-08-31 06:14:21 -07:00
Kubernetes Prow Robot
56bab9fa4f
Merge pull request #9813 from justinsb/expose_jwks
...
Expose JWKS via a feature-flag
2020-08-30 21:06:20 -07:00
Peter Rifel
0326ce4ad7
Dont generate the ssl_certificate_id field on TCP listeners in Terraform
2020-08-30 09:44:16 -05:00
Justin SB
786423f617
Expose JWKS via a feature-flag
...
When the PublicJWKS feature-flag is set, we expose the apiserver JWKS
document publicly (including enabling anonymous access). This is a
stepping stone to a more hardened configuration where we copy the JWKS
document to S3/GCS/etc.
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-08-30 10:15:11 -04:00
Justin SB
c63ce4b5ab
Implement setter by reflection
...
This means we no longer have to individually hard-code the `kops set`
fields, however we use the "language" we're now demonstrated.
We add tests to ensure we have parity with our existing (hard-coded)
setter logic.
2020-08-30 09:59:52 -04:00
Peter Rifel
55f33c68b3
Cleanup old v1alpha1 test outputs
2020-08-27 14:30:10 -05:00
Peter Rifel
64f6f5e2cb
Add integration test for GCE private topology with bastion
2020-08-27 14:28:26 -05:00
Ciprian Hacman
cd82550088
Update integration test for Calico after validation changes
2020-08-24 12:54:15 +03:00
Ciprian Hacman
3f8edd74fe
Update integration test for Calico
2020-08-24 12:30:37 +03:00
Ciprian Hacman
2880e22bce
Add flag for root volume encryption
2020-08-21 18:31:21 +03:00
Kubernetes Prow Robot
8a81d94c7b
Merge pull request #9773 from victorfrancax1/7286
...
Adding support for permission boundaries for AWS IAM Roles
2020-08-19 06:51:11 -07:00
Victor Ferreira
3aaa9a7c0f
feat(aws): adding support to permission boundaries for IAM Roles
2020-08-19 01:16:13 -03:00
Kubernetes Prow Robot
96ab8423b1
Merge pull request #9566 from hakman/arm64-images
...
Add ARM64 support for masters
2020-08-14 20:46:17 -07:00