Commit Graph

261 Commits

Author SHA1 Message Date
Walter Fender
1dfdfc4bb5 Bump konnectivity-client to v0.0.33
Bump konnectivity network proxy to v0.0.33.
Includes a couple bug fixes for better handling of dial failures.
[Agent &
Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33)
include numerous other fixes.
Pin goleak to 1.2
2022-09-26 17:06:49 -07:00
Davanum Srinivas
0f6b9b883c
etcd: Updated to v3.5.5
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-09-15 21:05:13 -04:00
Joseph Anttila Hall
f5c584a020 Bump konnectivity-client to 0.0.32 2022-06-22 17:22:42 -07:00
Manish Kumar
e9e8be304c etcd: Updated to v3.5.4 2022-06-01 07:52:46 +05:30
Davanum Srinivas
50bea1dad8
Move from k8s.gcr.io to registry.k8s.io
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-05-31 10:16:53 -04:00
Stephen Augustus
3f85937b11
etcd: Update to v3.5.3
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2022-04-13 19:04:00 -04:00
Jordan Liggitt
548c339867 Clean up unused exec auth from cluster setup 2022-03-19 10:47:38 -04:00
Andrew Sy Kim
f654992aec cluster/gce: update konnectivity image tags to v0.0.30
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-03-04 19:01:02 +00:00
Kubernetes Prow Robot
109cb7cbe7
Merge pull request #108339 from cheftako/anp-release
Bump konnectivity-client to v0.0.28
2022-02-25 17:49:23 -08:00
Shihang Zhang
5ee418b4c7 bump kube-addon-manager image version to 9.1.6 2022-02-24 14:13:01 -08:00
Walter Fender
e5b0392f12 Bump konnectivity-client to v0.0.28
Bump konnectivity network proxy to v0.0.28.
Includes a fix to ensure the KAS calls Close() on the egress connection.
2022-02-24 12:35:54 -08:00
Kubernetes Prow Robot
c7ff5758db
Merge pull request #106922 from cheftako/anp-release
Bump konnectivity network proxy to v0.0.27.
2021-12-10 14:11:21 -08:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-09 21:31:26 -05:00
Walter Fender
b869d5550c Bump konnectivity network proxy to v0.0.27.
/kind feature

Includes fixes for a few resource leaks.
Set the dependency chain to K/K v0.0.21.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```
2021-12-09 11:56:20 -08:00
Kubernetes Prow Robot
1c127d3682
Merge pull request #105706 from uthark/oatamanenko/upgrade-etcd-3.5.1
Upgrade etcd to 3.5.1
2021-11-15 10:04:59 -08:00
Walter Fender
fbc13f22f8 Bump konnectivity to v0.0.25
/kind feature

Bump konnectivity network proxy to v0.0.25.
Includes fixes for a few resource leaks.
Adds better logging for debugging.
Moves to golang1.17.
Adds additional keepalives.
Fixes HTTP-CONNECT goroutine leak.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```

Update the images.
2021-11-07 14:34:09 -08:00
Oleg Atamanenko
965f10f539 Upgrade etcd to 3.5.1 2021-10-18 23:09:27 -07:00
wfender
590300f90d Enable http2 health checking with go 1.16.5
Enabling http2 health checking on http-connect KAS egress.
Reran update-vendor.
Fixed pinning.
2021-08-19 22:38:41 -07:00
Daniel Kłobuszewski
1181421112 Update version of Cluster Autoscaler to 1.22.0
Release notes: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.22.0
2021-08-11 09:58:25 +02:00
Walter Fender
6d1556df7b Update to using apiserver-network-proxy v1.22
Includes a fix to prevent the agent writing to a closed channel.
2021-07-24 16:02:01 -07:00
wpedrak
6cb448c10e Specify etcdctl version for livenessProbe
`--command-timeout` is supported in `ETCDCTL_API` version 3 and it is NOT supported in `ETCDCTL_API` version 2. Up to etcd 3.3 (inclusive) default version of `ETCDCTL_API` was 2. This change explicitly defines used `ETCDCTL_API` and allows usage of etcd versions below 3.4.
2021-06-21 16:12:32 +02:00
Kubernetes Prow Robot
b43e4ec89b
Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits
kube-scheduler: stop using insecure serving bits
2021-06-15 13:42:12 -07:00
Jan Chaloupka
7560f33e27 kube-scheduler: stop using insecure serving bits 2021-06-14 22:50:53 +02:00
Walter Fender
9f7d61c520 Upgrade ANP components to v0.0.20.
Pick up new metrics to help with debugging and monitoring.
Pick up GRPC keep alive on frontend tunnel.
Server now using apps/options.
2021-06-11 09:02:04 -07:00
Marek Siarkowicz
12447bc803 Upgrade etcd server version to 3.5.0-rc.0 2021-06-09 17:00:05 +02:00
Jakub Sroka
ac17d03e76
Remove set errexit from etcd manifest
There were cases where this caused etcd to crashloop. It seems lesser evil to let migrator fail instead.
2021-05-27 14:25:35 +02:00
walter
13ab65d356 Upgrade konnectivity-client for GRPC connection fixes
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167.
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5.
2021-05-24 14:53:30 -07:00
SataQiu
ff18e391e9 cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation 2021-05-19 17:46:35 +08:00
Vinayak Goyal
b951b9349f Update konnectivity network proxy server to run as non-root, by default in kube-up. 2021-05-13 12:35:34 -07:00
Kubernetes Prow Robot
1bd00776b5
Merge pull request #101874 from tallclair/owners
Remove tallclair for gce owners
2021-05-10 13:49:48 -07:00
Kubernetes Prow Robot
7563d3092e
Merge pull request #96216 from knight42/refactor/disable-insecure-port-in-ctrler-mgr
refactor: disable insecure serving in controller-manager
2021-05-10 13:49:36 -07:00
Tim Allclair
9d349b6d21 Remove tallclair for gce owners 2021-05-10 10:21:17 -07:00
Kubernetes Prow Robot
8b1c82a34c
Merge pull request #101772 from swetharepakula/bump-glbc-image
Update glbc image to v1.12.0
2021-05-06 22:05:02 -07:00
Kubernetes Prow Robot
ca0c04e4d3
Merge pull request #101164 from vinayakankugoyal/apiservernonroot
Run control-plane as non root in kube-up.
2021-05-06 17:33:14 -07:00
Swetha Repakula
8c8db0d8e9 Update glbc image to v1.12.0
- glbc now uses networking.k8s.io/v1 Ingress
2021-05-06 15:20:05 -07:00
Vinayak Goyal
6aa495ddc6 Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-06 14:02:53 -07:00
Kubernetes Prow Robot
add13090e2
Merge pull request #101732 from spencer-p/master
Promote kube-addon-manager to v9.1.5
2021-05-05 18:49:17 -07:00
Kubernetes Prow Robot
7d176851f2
Merge pull request #100612 from pacoxu/patch-8
kubeadm: upgrade etcd to 3.4.13-3
2021-05-05 07:11:27 -07:00
Spencer Peterson
a119b767d0 Promote kube-addon-manager to v9.1.5
Change-Id: Iffebad61634831b0c34eb54517a2543c75c55d68
2021-05-04 12:14:52 -07:00
Jian Zeng
e481d99965
refactor: disable insecure serving in controller-manager
Now the following flags have no effect and would be removed in v1.24:
* `--port`
* `--address`

The insecure port flags `--port` may only be set to 0 now.

Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
2021-05-03 00:01:49 +08:00
pacoxu
9847579699 gcp/kubeadm: upgrade etcd to 3.4.13-3
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-04-15 11:19:41 +08:00
Swetha Repakula
f882eadbdc Update glbc image in addon 2021-04-13 19:32:03 -07:00
Kubernetes Prow Robot
318db993c8
Merge pull request #101020 from cindy52/bugfix/etcd
Change file owner of /mnt/disks/master-pd/var/etcd  instead of /var/etcd
2021-04-13 12:09:47 -07:00
Cindy Guo
03f60f4b60 chown on /mnt/disks/master-pd/var/etcd instead of /var/etcd 2021-04-12 08:21:01 +00:00
Kubernetes Prow Robot
99301e672b
Merge pull request #100436 from vinayakankugoyal/apiservernonroot
Fix kube-apiserver manifest.
2021-04-10 20:29:35 -07:00
Cindy Guo
9f058079d2 run etcd as nonroot
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com>
2021-04-08 20:51:45 +00:00
Vinayak Goyal
4b3271a542 Fix kube-apiserver manifest. 2021-03-21 16:24:56 -07:00
Jake Sanders
fb40ab2cde Update kube-addon-manager to v9.1.4 2021-03-04 22:39:46 -08:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Vinayak Goyal
c63ff05e6d Run kube-apiserver as non-root. 2021-02-22 20:48:16 -08:00