Commit Graph

141 Commits

Author SHA1 Message Date
Ciprian Hacman 7b9a073da9 Add option for Calico to cleanup kube-proxy rules when running in eBPF mode 2020-10-27 07:35:08 +02:00
Ciprian Hacman a04cea6371 Add eBPF dataplane support for Calico CNI 2020-10-19 20:04:27 +03:00
Kubernetes Prow Robot 6f85cd98c0
Merge pull request #10037 from h3poteto/iss-9753
Add WireGuard support for Calico CNI
2020-10-11 06:10:47 -07:00
Kubernetes Prow Robot 5266619970
Merge pull request #10038 from dntosas/apiserver-include-reqTimeout-conf
Add support for KubeAPIServer --request-timeout flag
2020-10-11 04:54:47 -07:00
dntosas 66f42d8a9b
Add support for KubeAPIServer --request-timeout flag
In this commit, we initialize the support of --request-timeout flag on
the configuration of KubeAPIServer so as to enable users for setting
timeout duration value for all kinds of handlers.

Signed-off-by: dntosas <ntosas@gmail.com>
2020-10-11 14:17:44 +03:00
AkiraFukushima 51e7f2a691 Add wireguardEnabled option in networking Calico 2020-10-11 15:53:07 +09:00
Kubernetes Prow Robot cc41bba0cf
Merge pull request #10022 from olemarkus/metrics-server
Kubelet serving certificate and metrics server addon
2020-10-09 03:09:07 -07:00
Ole Markus With e7070e334d Add metrics-server addon 2020-10-09 08:27:08 +02:00
monicagangwar a63ccd5163 [calico] awsSrcDstCheck to disable src/dest checks in AWS
* replacing k8s-ec2-srcdst with calico's config awsSrcDstCheck and
  flag FELIX_AWSSRCDSTCHECK
* documentation and iam changes for calico awsSrcDstCheck
2020-10-08 17:17:23 +05:30
nareshku dca69323b7 enable kubelet --housekeeping-interval flag 2020-10-07 08:00:41 -07:00
Ole Markus With b9212f85ad Add addon for aws node termination handler 2020-09-17 21:09:28 +02:00
Adam Smith 2fb1a4ecd2 Support ChainInsertMode config option for Calico Networking 2020-09-16 10:38:45 +01:00
Chris Loukas 65610dbcee Update NodeLocalDNSConfig with Mem/CPU requests
Add NodeLocalDNS.CPURequest and NodeLocalDNS.MemoryRequest to
configure resource requests.

If not explicitly set, fall back to 25m and 5Mi
2020-09-09 18:40:14 +03:00
Barry Melbourne 21fe46ce12 Add kubelet cgroup driver property 2020-09-07 17:11:33 +01:00
Ole Markus With a0e9fab104 Implement cluster autoscaler as bootstrap addon
Use provider-agnostic node definition for cas instead of aws auto-discovery

Validate clusterAutoscalerSpec

Add spec documentation

Add cas docs

Make CRDs

Apply suggestions from code review

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>

Add enabled flag to cas config

Apply suggestions from code review

Co-authored-by: Guy Templeton <guyjtempleton@googlemail.com>

Add support for custom cas image

Support more k8s versions

Use full image names
2020-09-03 09:52:13 +02:00
etwillbefine 2b0970376e use list of strings for CORS 2020-08-29 22:11:24 +02:00
etwillbefine 1b6ee2c7e8 add support for cors-allowed-origins
closes https://github.com/kubernetes/kops/issues/2045

correct typo in flag attribute

run code-gen, correct field description
2020-08-29 19:14:39 +02:00
Peter Rifel dd75c1ed91
make apimachinery crds gomod, update-expected.sh 2020-08-24 10:58:09 -05:00
Kubernetes Prow Robot 6c5150f786
Merge pull request #9793 from hakman/root-vol-encrypt
Add flag for root volume encryption
2020-08-21 09:15:40 -07:00
Ciprian Hacman 2880e22bce Add flag for root volume encryption 2020-08-21 18:31:21 +03:00
Kubernetes Prow Robot 076df5ec84
Merge pull request #9782 from hakman/ignore-flannel-workaround
Ignore the disableTxChecksumOffloading flag for Flannel and Canal
2020-08-21 04:47:40 -07:00
Ciprian Hacman 68474f7793 Ignore the disableTxChecksumOffloading flag for Flannel and Canal 2020-08-21 07:55:25 +03:00
Victor Ferreira 3aaa9a7c0f feat(aws): adding support to permission boundaries for IAM Roles 2020-08-19 01:16:13 -03:00
Kubernetes Prow Robot 46ebae1b4e
Merge pull request #9726 from Evalle/ISSUE-9695
Add missing cli options for kube-controller-manager and kube-scheduler
2020-08-12 01:01:45 -07:00
Evgeny Shmarnev 17b2ff0c14 Add authorization-always-allow-paths 2020-08-12 09:10:31 +02:00
Evgeny Shmarnev fd9f4e481f Add missing cli options for kube-controller-manager and kube-scheduler 2020-08-12 08:40:59 +02:00
Ole Markus With 25d98796e2 Add cinder plugin 2020-08-11 10:15:12 +02:00
Robert Russell 6e5544f615 Allow configurable backend modes for aws-iam-authenticator 2020-08-06 21:37:55 -07:00
John Gardiner Myers 70926d43fc Use a stable key for signing service account tokens 2020-07-11 13:18:50 -07:00
Ole Markus With 263172caac Use new templates for cilium 1.8 2020-07-03 07:56:35 +02:00
John Gardiner Myers 16daa3ecac Fix field name 2020-07-01 14:25:49 -07:00
John Gardiner Myers cc2b647d06 Create separate field for disabling rolling updates 2020-06-19 22:19:26 -07:00
Ciprian Hacman 51ebd187f0 Add "--selinux-enabled" flag for Docker 2020-06-12 06:19:09 +03:00
Ole Markus With 9732179d40 Tag all cilium keys with omitempty 2020-06-04 15:46:32 +02:00
Kubernetes Prow Robot c6dcaa8199
Merge pull request #9154 from MoShitrit/issue-9031
Add support for encryption in Cilium
2020-06-04 03:11:15 -07:00
Kubernetes Prow Robot c8674f23a0
Merge pull request #9253 from olemarkus/cilium-ipv4
Don't make it possible to toggle ipv4/6. We only support ipv4 anyway
2020-06-03 14:02:43 -07:00
Kubernetes Prow Robot c78b24fa41
Merge pull request #9140 from olemarkus/docs-networking-support
Add table of networking providers and their status
2020-06-03 07:00:19 -07:00
Kubernetes Prow Robot 4ef6bbe229
Merge pull request #9175 from mtl-wgtwo/calico-ip-detection-method
Enable configuration of the calico IP_AUTODETECTION_METHOD  and IP6_AUTODETECTION_METHOD
2020-06-03 06:24:18 -07:00
Ole Markus With e994bb80a6 Add Romana deprecation/removal notices to godoc 2020-06-03 08:12:11 +02:00
Ole Markus With 972d7a3509 Don't make it possible to toggle ipv4/6. We only support ipv4 anyway 2020-06-03 06:58:13 +02:00
Ole Markus With 7342525872 Remove vsphere from kops files 2020-05-30 13:36:55 +02:00
Matt Long c00464f11d Update crds, apis, models. Add limited field validation 2020-05-27 15:24:01 +02:00
MoShitrit 316a0e2b00 Adding encryption support for Cilium
Adding support for 'secret-name' flag

Adding instructions to enable encryption

Updating docs for cli

Addressing comments

Adding ciliumpassword subcommand to 'kops create secret'

Updating command to generate ciliumpassword secret
2020-05-25 01:54:24 -04:00
Ole Markus With 1698069ae2 Update pkg/apis/kops/networking.go
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-05-23 08:04:34 +02:00
Ole Markus With 6e04586361 Docs fixes 2020-05-22 08:08:58 +02:00
Ole Markus With 82c4670f04 Small comment adjustments 2020-05-22 08:08:58 +02:00
Ole Markus With 77aab657cc Copy comments 2020-05-22 08:08:58 +02:00
Ole Markus With 95d2170fa6 Update networking in kops create
* Remove classic from cli docs. Add missing providers
* Use cilium instead of weave in example since we don't consider weave stable
2020-05-22 08:08:58 +02:00
Kubernetes Prow Robot 26421c3081
Merge pull request #9133 from justinsb/service_account_jwks_uri_flag
Map kube-apiserver service-account-jwks-uri flag
2020-05-19 20:54:18 -07:00
Peter Rifel 9de299f70f
make crds 2020-05-19 22:16:08 -05:00