Commit Graph

3741 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
f82a6ac72d
Merge pull request #115043 from bobbypage/image-family
cluster/gce: Fetch image from image family
2023-05-03 08:54:13 -07:00
Kubernetes Prow Robot
e153766a2a
Merge pull request #117545 from saschagrunert/cri-tools
Update cri-tools to v1.27.0
2023-05-02 08:18:43 -07:00
Paweł Banaszewski
53c9103a1d Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests 2023-04-28 11:47:08 +00:00
Andrew Sy Kim
96eaed9980 cluster/gce: update cloud-controller-manager to use go-runner
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2023-04-26 11:17:28 +00:00
Andrew Sy Kim
0d27d3cfff cluster/gce: update cloud-provider-gcp image to latest tagged version
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2023-04-26 11:13:29 +00:00
Sascha Grunert
bc00f5c071
Update cri-tools to v1.27.0
Updating cri-tools to the latest release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-04-24 08:52:25 +02:00
Kubernetes Prow Robot
55e2a8db50
Merge pull request #116950 from tosi3k/network-gce
Do not look at VPC-related resources outside the cluster's network
2023-04-11 19:17:22 -07:00
Kubernetes Prow Robot
67cc86d00b
Merge pull request #116649 from saschagrunert/cri-tools
Update cri-tools to v1.26.1
2023-04-11 18:18:48 -07:00
Kubernetes Prow Robot
68f873250f
Merge pull request #116348 from jkh52/knp-0.1.2
Bump Konnectivity to 0.1.2
2023-04-11 15:36:11 -07:00
Antoni Zawodny
beb329f4bf Do not look at VPC-related resources outside the cluster's network 2023-03-27 17:44:25 +02:00
Sascha Grunert
630af564be
Update cri-tools to v1.26.1
Addresses CVE-2022-41723: https://github.com/advisories/GHSA-vvpx-j8f3-3w6h

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-03-15 15:22:24 +01:00
Francesco Romani
b430464df0 gce: podresources: don't disable on windows
Now that podresources socket has been fixed on windows,
we can re-enable on GCE CI.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2023-03-14 22:39:56 +01:00
Kubernetes Prow Robot
c2ad27aaa2
Merge pull request #115619 from jprzychodzen/cluster-kcm-ccm
[GCE] [cluster] Split run controllers per controller-manager
2023-03-14 09:39:34 -07:00
Arnaud Meukam
033f4b1772
Stop clear non-existant retention policy rule
This command is now not necessary and create some noise on the trail
logs.
See: https://github.com/kubernetes/k8s.io/pull/4902

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-13 11:35:10 +01:00
Joseph Anttila Hall
31e1df9ae6
Bump Konnectivity to 0.1.2 2023-03-10 12:48:25 -08:00
Paco Xu
a1def4b9c0 pod-infra-container-image: update comments as it will be removed in couple more releases
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-03-09 11:14:32 +08:00
Arnaud Meukam
471985557a
remove retention policy for staging buckets
Follow-up of:
  - https://github.com/kubernetes/kubernetes/pull/115634

The current retention policy prevent creation or update of new objects
until the existing one are deleted based on the retention period.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-02 19:15:29 +01:00
Arnaud Meukam
bf08cc38da
Add retention policy to staging buckets
Related to:
  - https://github.com/kubernetes/k8s.io/issues/4691

Ensure new staging bucketst are regional and apply lifecycle policy to
the objects of each staging bucket.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-01 17:25:38 +01:00
Antonio Ojea
07fc074a67 Revert "use kube-proxy defaults values for CI"
This reverts commit bafeacd14d.
2023-02-13 11:41:34 +00:00
Jakub Przychodzeń
544456608f Split run controllers per controller-manager 2023-02-08 14:40:04 +00:00
Mohamed Zaian
90570b7595 etcd: Update to version 3.5.7 2023-01-27 17:24:00 +01:00
Kubernetes Prow Robot
afe936fee5
Merge pull request #115191 from jkh52/zero-one-one
Bump konnectivity-client to v0.1.1
2023-01-20 17:56:02 -08:00
Joseph Anttila Hall
5c01971f2a Bump konnectivity-client to v0.1.1
Fixes memory leaks.
Upgrades GRPC and ProtoBuf versions.
2023-01-19 04:35:31 +00:00
Aditi Sharma
d83c37c311 Update CNI version to 1.2.0
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
2023-01-18 13:24:40 +05:30
David Porter
a3b44b574f cluster/gce: Fetch image from image family
Currently, we hardcode the exact image to use in cluster/gce. This is
problematic as the image gets stale very frequently and has old versions
of components such as containerd, kernel, and CVE issues.

Instead, fetch the latest image from the image family. This will ensure
the image will stay up to date. Each image change in image family is
expected to be minor. Switching to a new LTS milestone will require
updating the image family set.

Also add new kube-up environment variables to allow controlling the image
family used, namely:

* IMAGE_FAMILY - default image family to use
* MASTER_IMAGE_FAMILY - image family for master to use (defaults to
  IMAGE_FAMILY if unset)
* NODE_IMAGE_FAMILY - image family for node to use (defaults to
  IMAGE_FAMILY if unset)

Signed-off-by: David Porter <david@porter.me>
2023-01-13 17:34:56 -08:00
Kubernetes Prow Robot
8cb2339730
Merge pull request #114548 from haircommander/cri-tools-1.26
update cri-tools to 1.26.0
2023-01-09 06:53:28 -08:00
Joseph Anttila Hall
7df98deda0 Bump konnectivity-client to v0.0.35
./hack/pin-dependency.sh sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.0.35
./hack/update-codegen.sh
./hack/update-vendor.sh

Manual adjustments:
vendor/modules.txt
cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml
cluster/gce/manifests/konnectivity-server.yaml
2023-01-03 20:23:29 +00:00
Peter Hunt
f41cd1c3dc update cri-tools to 1.26.0
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2022-12-16 16:27:01 -05:00
Antonio Ojea
bafeacd14d use kube-proxy defaults values for CI
Change-Id: I8b9bcd62a0df8c1f90623a53ad3ba7fb31b2a4f3
2022-12-01 10:32:12 +00:00
Paco Xu
75f89875f8 use etcd 3.5.6-0 after promotion 2022-11-24 09:45:56 +08:00
Kubernetes Prow Robot
591fc0d8ab
Merge pull request #113858 from aojea/ingress_nightly
Fix kubernetes/gce-ingress jobs
2022-11-15 10:56:47 -08:00
Antonio Ojea
962dbbba48 fix glbc jobs
use latest stable version
add permissions for endpointslices
2022-11-15 13:39:59 +00:00
Mark Rossetti
534f052a8d
Updating pause image refernces to 3.9
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-11-14 10:24:54 -08:00
Andrew Sy Kim
545835e288 cluster: remove KUBE_TEST_IGNORE_CLOUDPROVIDER_TAINT which is no longer needed
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-05 22:04:19 -04:00
Andrew Sy Kim
3242ca8ab1 cluster: fix cloud-controller-manager.manifest to use priorityClassName instead of priorityClass
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-04 19:35:39 -04:00
Walter Fender
99156b5bdc Turn on CCM in kube-up when cloudprovider=external
Currently if we disable cloud provider by the following
CLOUD_PROVIDER_FLAG=external
KUBE_FEATURE_GATES=DisableCloudProviders=true,DisableKubeletCloudCredentialProviders=true
we can no longer schedule workloads due to taints and a lack of
node configuration.
This pulls a CCM image from K/cloud-provider-gcp to run tests.
This is a pre-step for taking the above feature gates to beta.
It does not address the last known good dependency issue.
Specifically the CCM image is built on top of client-go and staging.
However this image will be an "old" verison of those libraries.
So it does not test if those libraries work in the CCM.

Fix shellcheck errors.
Add CCM_FEATURE_GATES for testing.
Switching to extended regex from perl regex.
Adding instrumentation to cluster configuration.
Improved regex to not greedily get key-value pairs.
Fixed issue with error on regex no line match.
Switch credentialprovider version to v1alpha1
2022-11-03 10:38:23 -07:00
Kubernetes Prow Robot
25dc4c4f32
Merge pull request #112980 from swatisehgal/devicemanager-ga-graduation
node: devicemgr: Graduate Kubelet DeviceManager to GA
2022-11-02 13:17:01 -07:00
Swati Sehgal
752fa093e0 node: devicemgr: GA graduation implies Feature Gate is ON by default
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
2022-11-02 11:05:20 +00:00
Benjamin Elder
4c7189f54b fix SC2267 GNU xargs -i is deprecated in favor of -I{} in cluster/gce/util.sh
see: https://www.shellcheck.net/wiki/SC2267
2022-10-19 23:46:18 -07:00
Kubernetes Prow Robot
51185b77a3
Merge pull request #112901 from vinaykul/ubuntu-kube-up-fix
Fix 'ctr not found' error with gce kube-up for Ubuntu OS deployments
2022-10-17 18:05:18 -07:00
Vinay Kulkarni
eaf8bd87af Fix 'ctr not found' error with gce kube-up for Ubuntu OS deployments 2022-10-06 11:36:48 -07:00
Walter Fender
4f6894d206 Adding flag for testing to ignore cloud provider taint.
Adding the ability to ignore no schedule flags in testing.
Specifically node.cloudprovider.kubernetes.io/uninitialized:NoSchedule
Fix shellcheck complaint.
2022-10-06 10:54:35 -07:00
Arnaud Meukam
9987e4635f
Test startup: make staging bucket regional
Make GCS buckets created by the e2e tests regional.
There are by default multi-regional in US location. The change is
introduced to minimize GCS global cost.
GCS new pricing changed since Oct 1, 2022. See https://cloud.google.com/storage/pricing-announce

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2022-10-05 06:34:04 +02:00
Maciej Borsz
7af94d7e95 Remove ssh firewall only when we delete network 2022-09-29 07:25:20 +00:00
Walter Fender
1dfdfc4bb5 Bump konnectivity-client to v0.0.33
Bump konnectivity network proxy to v0.0.33.
Includes a couple bug fixes for better handling of dial failures.
[Agent &
Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33)
include numerous other fixes.
Pin goleak to 1.2
2022-09-26 17:06:49 -07:00
Walter Fender
56eb2bcff4 Honor the CLOUD_PROVIDER_FLAG flag.
We were not passing the flag from deploying machine to the machine
being deployed to. Now passing the flag.
2022-09-23 19:03:01 -07:00
Kubernetes Prow Robot
ac868b17d6
Merge pull request #112058 from saschagrunert/cri-tools-v1.25
Update cri-tools to v1.25.0
2022-09-21 16:59:07 -07:00
Davanum Srinivas
0f6b9b883c
etcd: Updated to v3.5.5
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-09-15 21:05:13 -04:00
Humble Chirammal
c2a7bfd6b4 removal of glusterfs in-tree driver code from the source
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-09-13 20:11:50 +05:30
Artur Żyliński
f35799f6b1 Fix: Refactor firewall-rules list to read-array 2022-09-12 10:20:50 +02:00