Walter Fender
1dfdfc4bb5
Bump konnectivity-client to v0.0.33
...
Bump konnectivity network proxy to v0.0.33.
Includes a couple bug fixes for better handling of dial failures.
[Agent &
Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33 )
include numerous other fixes.
Pin goleak to 1.2
2022-09-26 17:06:49 -07:00
Davanum Srinivas
0f6b9b883c
etcd: Updated to v3.5.5
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-09-15 21:05:13 -04:00
Joseph Anttila Hall
f5c584a020
Bump konnectivity-client to 0.0.32
2022-06-22 17:22:42 -07:00
Manish Kumar
e9e8be304c
etcd: Updated to v3.5.4
2022-06-01 07:52:46 +05:30
Davanum Srinivas
50bea1dad8
Move from k8s.gcr.io to registry.k8s.io
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-05-31 10:16:53 -04:00
Stephen Augustus
3f85937b11
etcd: Update to v3.5.3
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2022-04-13 19:04:00 -04:00
Jordan Liggitt
548c339867
Clean up unused exec auth from cluster setup
2022-03-19 10:47:38 -04:00
Andrew Sy Kim
f654992aec
cluster/gce: update konnectivity image tags to v0.0.30
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-03-04 19:01:02 +00:00
Kubernetes Prow Robot
109cb7cbe7
Merge pull request #108339 from cheftako/anp-release
...
Bump konnectivity-client to v0.0.28
2022-02-25 17:49:23 -08:00
Shihang Zhang
5ee418b4c7
bump kube-addon-manager image version to 9.1.6
2022-02-24 14:13:01 -08:00
Walter Fender
e5b0392f12
Bump konnectivity-client to v0.0.28
...
Bump konnectivity network proxy to v0.0.28.
Includes a fix to ensure the KAS calls Close() on the egress connection.
2022-02-24 12:35:54 -08:00
Kubernetes Prow Robot
c7ff5758db
Merge pull request #106922 from cheftako/anp-release
...
Bump konnectivity network proxy to v0.0.27.
2021-12-10 14:11:21 -08:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-09 21:31:26 -05:00
Walter Fender
b869d5550c
Bump konnectivity network proxy to v0.0.27.
...
/kind feature
Includes fixes for a few resource leaks.
Set the dependency chain to K/K v0.0.21.
Fixes # N/A
```release-note
NONE
```
```docs
NONE
```
2021-12-09 11:56:20 -08:00
Kubernetes Prow Robot
1c127d3682
Merge pull request #105706 from uthark/oatamanenko/upgrade-etcd-3.5.1
...
Upgrade etcd to 3.5.1
2021-11-15 10:04:59 -08:00
Walter Fender
fbc13f22f8
Bump konnectivity to v0.0.25
...
/kind feature
Bump konnectivity network proxy to v0.0.25.
Includes fixes for a few resource leaks.
Adds better logging for debugging.
Moves to golang1.17.
Adds additional keepalives.
Fixes HTTP-CONNECT goroutine leak.
Fixes # N/A
```release-note
NONE
```
```docs
NONE
```
Update the images.
2021-11-07 14:34:09 -08:00
Oleg Atamanenko
965f10f539
Upgrade etcd to 3.5.1
2021-10-18 23:09:27 -07:00
wfender
590300f90d
Enable http2 health checking with go 1.16.5
...
Enabling http2 health checking on http-connect KAS egress.
Reran update-vendor.
Fixed pinning.
2021-08-19 22:38:41 -07:00
Daniel Kłobuszewski
1181421112
Update version of Cluster Autoscaler to 1.22.0
...
Release notes: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.22.0
2021-08-11 09:58:25 +02:00
Walter Fender
6d1556df7b
Update to using apiserver-network-proxy v1.22
...
Includes a fix to prevent the agent writing to a closed channel.
2021-07-24 16:02:01 -07:00
wpedrak
6cb448c10e
Specify etcdctl version for livenessProbe
...
`--command-timeout` is supported in `ETCDCTL_API` version 3 and it is NOT supported in `ETCDCTL_API` version 2. Up to etcd 3.3 (inclusive) default version of `ETCDCTL_API` was 2. This change explicitly defines used `ETCDCTL_API` and allows usage of etcd versions below 3.4.
2021-06-21 16:12:32 +02:00
Kubernetes Prow Robot
b43e4ec89b
Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits
...
kube-scheduler: stop using insecure serving bits
2021-06-15 13:42:12 -07:00
Jan Chaloupka
7560f33e27
kube-scheduler: stop using insecure serving bits
2021-06-14 22:50:53 +02:00
Walter Fender
9f7d61c520
Upgrade ANP components to v0.0.20.
...
Pick up new metrics to help with debugging and monitoring.
Pick up GRPC keep alive on frontend tunnel.
Server now using apps/options.
2021-06-11 09:02:04 -07:00
Marek Siarkowicz
12447bc803
Upgrade etcd server version to 3.5.0-rc.0
2021-06-09 17:00:05 +02:00
Jakub Sroka
ac17d03e76
Remove set errexit from etcd manifest
...
There were cases where this caused etcd to crashloop. It seems lesser evil to let migrator fail instead.
2021-05-27 14:25:35 +02:00
walter
13ab65d356
Upgrade konnectivity-client for GRPC connection fixes
...
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167 .
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5 .
2021-05-24 14:53:30 -07:00
SataQiu
ff18e391e9
cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation
2021-05-19 17:46:35 +08:00
Vinayak Goyal
b951b9349f
Update konnectivity network proxy server to run as non-root, by default in kube-up.
2021-05-13 12:35:34 -07:00
Kubernetes Prow Robot
1bd00776b5
Merge pull request #101874 from tallclair/owners
...
Remove tallclair for gce owners
2021-05-10 13:49:48 -07:00
Kubernetes Prow Robot
7563d3092e
Merge pull request #96216 from knight42/refactor/disable-insecure-port-in-ctrler-mgr
...
refactor: disable insecure serving in controller-manager
2021-05-10 13:49:36 -07:00
Tim Allclair
9d349b6d21
Remove tallclair for gce owners
2021-05-10 10:21:17 -07:00
Kubernetes Prow Robot
8b1c82a34c
Merge pull request #101772 from swetharepakula/bump-glbc-image
...
Update glbc image to v1.12.0
2021-05-06 22:05:02 -07:00
Kubernetes Prow Robot
ca0c04e4d3
Merge pull request #101164 from vinayakankugoyal/apiservernonroot
...
Run control-plane as non root in kube-up.
2021-05-06 17:33:14 -07:00
Swetha Repakula
8c8db0d8e9
Update glbc image to v1.12.0
...
- glbc now uses networking.k8s.io/v1 Ingress
2021-05-06 15:20:05 -07:00
Vinayak Goyal
6aa495ddc6
Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it.
2021-05-06 14:02:53 -07:00
Kubernetes Prow Robot
add13090e2
Merge pull request #101732 from spencer-p/master
...
Promote kube-addon-manager to v9.1.5
2021-05-05 18:49:17 -07:00
Kubernetes Prow Robot
7d176851f2
Merge pull request #100612 from pacoxu/patch-8
...
kubeadm: upgrade etcd to 3.4.13-3
2021-05-05 07:11:27 -07:00
Spencer Peterson
a119b767d0
Promote kube-addon-manager to v9.1.5
...
Change-Id: Iffebad61634831b0c34eb54517a2543c75c55d68
2021-05-04 12:14:52 -07:00
Jian Zeng
e481d99965
refactor: disable insecure serving in controller-manager
...
Now the following flags have no effect and would be removed in v1.24:
* `--port`
* `--address`
The insecure port flags `--port` may only be set to 0 now.
Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
2021-05-03 00:01:49 +08:00
pacoxu
9847579699
gcp/kubeadm: upgrade etcd to 3.4.13-3
...
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-04-15 11:19:41 +08:00
Swetha Repakula
f882eadbdc
Update glbc image in addon
2021-04-13 19:32:03 -07:00
Kubernetes Prow Robot
318db993c8
Merge pull request #101020 from cindy52/bugfix/etcd
...
Change file owner of /mnt/disks/master-pd/var/etcd instead of /var/etcd
2021-04-13 12:09:47 -07:00
Cindy Guo
03f60f4b60
chown on /mnt/disks/master-pd/var/etcd instead of /var/etcd
2021-04-12 08:21:01 +00:00
Kubernetes Prow Robot
99301e672b
Merge pull request #100436 from vinayakankugoyal/apiservernonroot
...
Fix kube-apiserver manifest.
2021-04-10 20:29:35 -07:00
Cindy Guo
9f058079d2
run etcd as nonroot
...
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com>
2021-04-08 20:51:45 +00:00
Vinayak Goyal
4b3271a542
Fix kube-apiserver manifest.
2021-03-21 16:24:56 -07:00
Jake Sanders
fb40ab2cde
Update kube-addon-manager to v9.1.4
2021-03-04 22:39:46 -08:00
Benjamin Elder
56e092e382
hack/update-bazel.sh
2021-02-28 15:17:29 -08:00
Vinayak Goyal
c63ff05e6d
Run kube-apiserver as non-root.
2021-02-22 20:48:16 -08:00