Commit Graph

11907 Commits

Author SHA1 Message Date
Ciprian Hacman fe3adb1fe3 Force BootstrapClient to run after Protokube 2020-09-12 08:06:21 +03:00
Ciprian Hacman c1e0991153 Skip the iamPolicy.DNSZone task when using gossip 2020-09-10 22:55:36 +03:00
Kubernetes Prow Robot a5fc8895dc
Merge pull request #9857 from hakman/detect-aws-region
Detect AWS region for S3 inside containers
2020-09-09 23:17:44 -07:00
Kubernetes Prow Robot 036ea69525
Merge pull request #9352 from justinsb/irsa_with_public
Simplified form of IAM Roles for ServiceAccounts
2020-09-09 22:23:44 -07:00
Kubernetes Prow Robot 4508406515
Merge pull request #9908 from rdrgmnzs/CacheNodeidentityInfo
Allow caching of Nodeidentity Info in kops-controller for AWS.
2020-09-09 13:01:44 -07:00
Rodrigo Menezes 4c057f138a Allow caching of Nodeidentity Info in kops-controller for AWS to reduce the number of DescribeInstances API calls. 2020-09-09 22:11:29 +03:00
Kubernetes Prow Robot c7bbe9c472
Merge pull request #9904 from justinsb/relnotes_1_18_1
Release notes for 1.18.1
2020-09-09 11:15:07 -07:00
Kubernetes Prow Robot 5e871a7d5e
Merge pull request #9902 from justinsb/relnotes_1_17_2
Release notes for 1.17.2
2020-09-09 10:09:08 -07:00
Justin SB 5c423e9dfa Release notes for 1.18.1 2020-09-09 12:58:08 -04:00
Kubernetes Prow Robot 8a07275bbf
Merge pull request #9901 from commixon/nodelocalcache-configure-resources
Nodelocalcache configure resources
2020-09-09 09:19:08 -07:00
Justin SB ed83ae382d Release notes for 1.17.2 2020-09-09 11:56:24 -04:00
Chris Loukas 65610dbcee Update NodeLocalDNSConfig with Mem/CPU requests
Add NodeLocalDNS.CPURequest and NodeLocalDNS.MemoryRequest to
configure resource requests.

If not explicitly set, fall back to 25m and 5Mi
2020-09-09 18:40:14 +03:00
Kubernetes Prow Robot 900e3c1b46
Merge pull request #9894 from hakman/calico-3.16.1
Update Calico to v3.16.1
2020-09-09 08:03:52 -07:00
Justin SB 6fa8be2716 JSON formatting of IAM: Workaround for optional fields
AWS IAM is very strict and doesn't support `Resource: []` for example.
We implement a custom MarshalJSON method to work around that.
2020-09-09 09:57:07 -04:00
Justin Santa Barbara d8895c57ec Add version logic to UseServiceAccountIAM
Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-09-09 09:57:07 -04:00
Justin SB a61ecf4c58 Refactor to use interface for iam Subjects
Hat-tip to johngmyers for the idea!
2020-09-09 09:57:07 -04:00
Justin SB f05980f6ba IAM Policy: rely on stub resolution/unification
This avoids the hacky search through the list of tasks.
2020-09-09 09:57:06 -04:00
Justin SB ccc814dfbc Create tests for JWKS scenarios 2020-09-09 09:57:06 -04:00
Justin SB 8498ac9dbb Create PublicJWKS feature flag
This should be much easier to start and to get under testing; it only
works with a load balancer, it sets the apiserver into anonymous-auth
allowed, it grants the anonymous auth user permission to read our jwks
tokens.  But it shouldn't need a second bucket or anything of that
nature.

Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>
2020-09-09 09:57:06 -04:00
Kubernetes Prow Robot c9f4f3df99
Merge pull request #9892 from olemarkus/cas-docs
Deprecate old cluster autoscaler addon
2020-09-09 04:39:52 -07:00
Kubernetes Prow Robot 4604fa53b3
Merge pull request #9899 from olemarkus/remove-insecure-bind-address
Don't explicitly set insecure-bind-address on newer k8s
2020-09-09 03:25:53 -07:00
Ole Markus With 6cfd50a07a Deprecate the old cas addon 2020-09-09 12:13:32 +02:00
Ole Markus With 886b4c97cb Don't explicitly set insecure-bind-address on newer k8s 2020-09-09 11:41:51 +02:00
Kubernetes Prow Robot ddde1b8d35
Merge pull request #9897 from johngmyers/spot-direct
Add missing spot support to launch template direct render
2020-09-09 00:59:52 -07:00
John Gardiner Myers 0cb9eed851 Add missing spot support to launch template direct render 2020-09-08 23:20:29 -07:00
Ciprian Hacman 0357d33ff6 Update Calico to v3.16.1 2020-09-09 06:37:27 +03:00
Kubernetes Prow Robot 68b2302b48
Merge pull request #9885 from olemarkus/encryptionconfig-warn
Errors when encryptionConfig is enabled, but no encryptionconfig secret
2020-09-08 11:09:45 -07:00
Ole Markus With 192d6a46f9 Errors when encryptionConfig is enabled, but no encryptionconfig secret
When encryptionConfig is enabled, but the secret is missing, there is no
visible errors anywhere. kube-apiserver just goes into a crashloop
without any complains. This PR adds warnings both on the client side and
through nodeup.
2020-09-08 17:46:18 +02:00
Kubernetes Prow Robot 3527d32b26
Merge pull request #9872 from hakman/root-vol-encrypt-lc
Use root volume encryption flag for LaunchConfiguration with TF and CF
2020-09-08 04:31:42 -07:00
Kubernetes Prow Robot 543c418dc7
Merge pull request #9882 from hakman/gh-releae-artifacts
Use new GitHub artifact names for mirrored assets
2020-09-08 02:21:44 -07:00
Ciprian Hacman 43e0b2332c Update expected outputs of integration tests 2020-09-08 10:12:57 +03:00
Ciprian Hacman 315ed2c9b5 Use new GitHub artifact names for mirrored assets 2020-09-08 10:10:23 +03:00
Kubernetes Prow Robot 766e65c725
Merge pull request #9884 from hakman/mock-1.19.0-alpha.3
Update mock version to 1.19.0-alpha.3
2020-09-08 00:09:43 -07:00
Ciprian Hacman d1bdc1632d Update expected outputs of integration tests 2020-09-08 08:46:09 +03:00
Ciprian Hacman c7bc3d4397 Update mock version to 1.19.0-alpha.3 2020-09-08 08:45:25 +03:00
Kubernetes Prow Robot c3020cff46
Merge pull request #9881 from justinsb/avoid_warning_from_find
verify-terraform: rearrange arguments to find
2020-09-07 17:27:42 -07:00
Justin SB 5f9d3b3431 verify-terraform: rearrange arguments to find
Otherwise we get a warning:

"find: warning: you have specified the global option -maxdepth after the argument -type, but global options are not positional, i.e., -maxdepth affects tests specified before it as well as those specified after it.  Please specify global options before other arguments."
2020-09-07 17:35:57 -04:00
Kubernetes Prow Robot bb63f296f1
Merge pull request #9879 from bmelbourne/add-kubelet-cgroup-driver
Add kubelet cgroup driver property
2020-09-07 10:33:42 -07:00
Barry Melbourne 21fe46ce12 Add kubelet cgroup driver property 2020-09-07 17:11:33 +01:00
Kubernetes Prow Robot 1c7a6d4845
Merge pull request #9878 from hakman/go-1.15.1
Update Go to v1.15.1
2020-09-06 21:41:42 -07:00
Ciprian Hacman 224e19179e Update Go to v1.15.1 2020-09-07 05:56:46 +03:00
Kubernetes Prow Robot d90c90cfa4
Merge pull request #9877 from johngmyers/fspath-notexist
Map ENOENT to ErrNotExist in FSPath
2020-09-05 22:33:41 -07:00
John Gardiner Myers 1e92c7740c Map ENOENT to ErrNotExist in FSPath 2020-09-05 21:46:57 -07:00
Kubernetes Prow Robot d7fbc2f264
Merge pull request #9874 from olemarkus/openstack-golden-servergrouptests
Openstack golden servergrouptests
2020-09-05 12:03:41 -07:00
Ole Markus With 54ccc92829 Remove unused functions 2020-09-05 20:22:21 +02:00
Ole Markus With 0bd29dd4c7 Remove old servergroup test 2020-09-05 20:22:21 +02:00
Ole Markus With 4a21a532da Add golden tests for openstack servergroup 2020-09-05 20:22:21 +02:00
Ole Markus With 5e7ec64347 Move abs resolution a bit earlier to make it clear where we are looking for golden output 2020-09-05 20:10:43 +02:00
Kubernetes Prow Robot bac4afa3e5
Merge pull request #9871 from olemarkus/cilium-upgrades-sept-2
Bump cilium to 1.8.3
2020-09-05 09:15:41 -07:00
Ciprian Hacman 5b1ac28581 Use root volume encryption flag for LaunchConfiguration with TF and CF 2020-09-05 13:17:44 +03:00