Commit Graph

268 Commits

Author SHA1 Message Date
Mohamed Zaian
90570b7595 etcd: Update to version 3.5.7 2023-01-27 17:24:00 +01:00
Joseph Anttila Hall
5c01971f2a Bump konnectivity-client to v0.1.1
Fixes memory leaks.
Upgrades GRPC and ProtoBuf versions.
2023-01-19 04:35:31 +00:00
Joseph Anttila Hall
7df98deda0 Bump konnectivity-client to v0.0.35
./hack/pin-dependency.sh sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.0.35
./hack/update-codegen.sh
./hack/update-vendor.sh

Manual adjustments:
vendor/modules.txt
cluster/gce/addons/konnectivity-agent/konnectivity-agent-ds.yaml
cluster/gce/manifests/konnectivity-server.yaml
2023-01-03 20:23:29 +00:00
Paco Xu
75f89875f8 use etcd 3.5.6-0 after promotion 2022-11-24 09:45:56 +08:00
Antonio Ojea
962dbbba48 fix glbc jobs
use latest stable version
add permissions for endpointslices
2022-11-15 13:39:59 +00:00
Andrew Sy Kim
3242ca8ab1 cluster: fix cloud-controller-manager.manifest to use priorityClassName instead of priorityClass
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-04 19:35:39 -04:00
Walter Fender
99156b5bdc Turn on CCM in kube-up when cloudprovider=external
Currently if we disable cloud provider by the following
CLOUD_PROVIDER_FLAG=external
KUBE_FEATURE_GATES=DisableCloudProviders=true,DisableKubeletCloudCredentialProviders=true
we can no longer schedule workloads due to taints and a lack of
node configuration.
This pulls a CCM image from K/cloud-provider-gcp to run tests.
This is a pre-step for taking the above feature gates to beta.
It does not address the last known good dependency issue.
Specifically the CCM image is built on top of client-go and staging.
However this image will be an "old" verison of those libraries.
So it does not test if those libraries work in the CCM.

Fix shellcheck errors.
Add CCM_FEATURE_GATES for testing.
Switching to extended regex from perl regex.
Adding instrumentation to cluster configuration.
Improved regex to not greedily get key-value pairs.
Fixed issue with error on regex no line match.
Switch credentialprovider version to v1alpha1
2022-11-03 10:38:23 -07:00
Walter Fender
1dfdfc4bb5 Bump konnectivity-client to v0.0.33
Bump konnectivity network proxy to v0.0.33.
Includes a couple bug fixes for better handling of dial failures.
[Agent &
Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33)
include numerous other fixes.
Pin goleak to 1.2
2022-09-26 17:06:49 -07:00
Davanum Srinivas
0f6b9b883c
etcd: Updated to v3.5.5
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-09-15 21:05:13 -04:00
Joseph Anttila Hall
f5c584a020 Bump konnectivity-client to 0.0.32 2022-06-22 17:22:42 -07:00
Manish Kumar
e9e8be304c etcd: Updated to v3.5.4 2022-06-01 07:52:46 +05:30
Davanum Srinivas
50bea1dad8
Move from k8s.gcr.io to registry.k8s.io
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-05-31 10:16:53 -04:00
Stephen Augustus
3f85937b11
etcd: Update to v3.5.3
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2022-04-13 19:04:00 -04:00
Jordan Liggitt
548c339867 Clean up unused exec auth from cluster setup 2022-03-19 10:47:38 -04:00
Andrew Sy Kim
f654992aec cluster/gce: update konnectivity image tags to v0.0.30
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-03-04 19:01:02 +00:00
Kubernetes Prow Robot
109cb7cbe7
Merge pull request #108339 from cheftako/anp-release
Bump konnectivity-client to v0.0.28
2022-02-25 17:49:23 -08:00
Shihang Zhang
5ee418b4c7 bump kube-addon-manager image version to 9.1.6 2022-02-24 14:13:01 -08:00
Walter Fender
e5b0392f12 Bump konnectivity-client to v0.0.28
Bump konnectivity network proxy to v0.0.28.
Includes a fix to ensure the KAS calls Close() on the egress connection.
2022-02-24 12:35:54 -08:00
Kubernetes Prow Robot
c7ff5758db
Merge pull request #106922 from cheftako/anp-release
Bump konnectivity network proxy to v0.0.27.
2021-12-10 14:11:21 -08:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-09 21:31:26 -05:00
Walter Fender
b869d5550c Bump konnectivity network proxy to v0.0.27.
/kind feature

Includes fixes for a few resource leaks.
Set the dependency chain to K/K v0.0.21.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```
2021-12-09 11:56:20 -08:00
Kubernetes Prow Robot
1c127d3682
Merge pull request #105706 from uthark/oatamanenko/upgrade-etcd-3.5.1
Upgrade etcd to 3.5.1
2021-11-15 10:04:59 -08:00
Walter Fender
fbc13f22f8 Bump konnectivity to v0.0.25
/kind feature

Bump konnectivity network proxy to v0.0.25.
Includes fixes for a few resource leaks.
Adds better logging for debugging.
Moves to golang1.17.
Adds additional keepalives.
Fixes HTTP-CONNECT goroutine leak.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```

Update the images.
2021-11-07 14:34:09 -08:00
Oleg Atamanenko
965f10f539 Upgrade etcd to 3.5.1 2021-10-18 23:09:27 -07:00
wfender
590300f90d Enable http2 health checking with go 1.16.5
Enabling http2 health checking on http-connect KAS egress.
Reran update-vendor.
Fixed pinning.
2021-08-19 22:38:41 -07:00
Daniel Kłobuszewski
1181421112 Update version of Cluster Autoscaler to 1.22.0
Release notes: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.22.0
2021-08-11 09:58:25 +02:00
Walter Fender
6d1556df7b Update to using apiserver-network-proxy v1.22
Includes a fix to prevent the agent writing to a closed channel.
2021-07-24 16:02:01 -07:00
wpedrak
6cb448c10e Specify etcdctl version for livenessProbe
`--command-timeout` is supported in `ETCDCTL_API` version 3 and it is NOT supported in `ETCDCTL_API` version 2. Up to etcd 3.3 (inclusive) default version of `ETCDCTL_API` was 2. This change explicitly defines used `ETCDCTL_API` and allows usage of etcd versions below 3.4.
2021-06-21 16:12:32 +02:00
Kubernetes Prow Robot
b43e4ec89b
Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits
kube-scheduler: stop using insecure serving bits
2021-06-15 13:42:12 -07:00
Jan Chaloupka
7560f33e27 kube-scheduler: stop using insecure serving bits 2021-06-14 22:50:53 +02:00
Walter Fender
9f7d61c520 Upgrade ANP components to v0.0.20.
Pick up new metrics to help with debugging and monitoring.
Pick up GRPC keep alive on frontend tunnel.
Server now using apps/options.
2021-06-11 09:02:04 -07:00
Marek Siarkowicz
12447bc803 Upgrade etcd server version to 3.5.0-rc.0 2021-06-09 17:00:05 +02:00
Jakub Sroka
ac17d03e76
Remove set errexit from etcd manifest
There were cases where this caused etcd to crashloop. It seems lesser evil to let migrator fail instead.
2021-05-27 14:25:35 +02:00
walter
13ab65d356 Upgrade konnectivity-client for GRPC connection fixes
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167.
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5.
2021-05-24 14:53:30 -07:00
SataQiu
ff18e391e9 cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation 2021-05-19 17:46:35 +08:00
Vinayak Goyal
b951b9349f Update konnectivity network proxy server to run as non-root, by default in kube-up. 2021-05-13 12:35:34 -07:00
Kubernetes Prow Robot
1bd00776b5
Merge pull request #101874 from tallclair/owners
Remove tallclair for gce owners
2021-05-10 13:49:48 -07:00
Kubernetes Prow Robot
7563d3092e
Merge pull request #96216 from knight42/refactor/disable-insecure-port-in-ctrler-mgr
refactor: disable insecure serving in controller-manager
2021-05-10 13:49:36 -07:00
Tim Allclair
9d349b6d21 Remove tallclair for gce owners 2021-05-10 10:21:17 -07:00
Kubernetes Prow Robot
8b1c82a34c
Merge pull request #101772 from swetharepakula/bump-glbc-image
Update glbc image to v1.12.0
2021-05-06 22:05:02 -07:00
Kubernetes Prow Robot
ca0c04e4d3
Merge pull request #101164 from vinayakankugoyal/apiservernonroot
Run control-plane as non root in kube-up.
2021-05-06 17:33:14 -07:00
Swetha Repakula
8c8db0d8e9 Update glbc image to v1.12.0
- glbc now uses networking.k8s.io/v1 Ingress
2021-05-06 15:20:05 -07:00
Vinayak Goyal
6aa495ddc6 Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-06 14:02:53 -07:00
Kubernetes Prow Robot
add13090e2
Merge pull request #101732 from spencer-p/master
Promote kube-addon-manager to v9.1.5
2021-05-05 18:49:17 -07:00
Kubernetes Prow Robot
7d176851f2
Merge pull request #100612 from pacoxu/patch-8
kubeadm: upgrade etcd to 3.4.13-3
2021-05-05 07:11:27 -07:00
Spencer Peterson
a119b767d0 Promote kube-addon-manager to v9.1.5
Change-Id: Iffebad61634831b0c34eb54517a2543c75c55d68
2021-05-04 12:14:52 -07:00
Jian Zeng
e481d99965
refactor: disable insecure serving in controller-manager
Now the following flags have no effect and would be removed in v1.24:
* `--port`
* `--address`

The insecure port flags `--port` may only be set to 0 now.

Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
2021-05-03 00:01:49 +08:00
pacoxu
9847579699 gcp/kubeadm: upgrade etcd to 3.4.13-3
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-04-15 11:19:41 +08:00
Swetha Repakula
f882eadbdc Update glbc image in addon 2021-04-13 19:32:03 -07:00
Kubernetes Prow Robot
318db993c8
Merge pull request #101020 from cindy52/bugfix/etcd
Change file owner of /mnt/disks/master-pd/var/etcd  instead of /var/etcd
2021-04-13 12:09:47 -07:00