Commit Graph

841 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
c2ad27aaa2
Merge pull request #115619 from jprzychodzen/cluster-kcm-ccm
[GCE] [cluster] Split run controllers per controller-manager
2023-03-14 09:39:34 -07:00
Arnaud Meukam
033f4b1772
Stop clear non-existant retention policy rule
This command is now not necessary and create some noise on the trail
logs.
See: https://github.com/kubernetes/k8s.io/pull/4902

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-13 11:35:10 +01:00
Paco Xu
a1def4b9c0 pod-infra-container-image: update comments as it will be removed in couple more releases
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-03-09 11:14:32 +08:00
Arnaud Meukam
471985557a
remove retention policy for staging buckets
Follow-up of:
  - https://github.com/kubernetes/kubernetes/pull/115634

The current retention policy prevent creation or update of new objects
until the existing one are deleted based on the retention period.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-02 19:15:29 +01:00
Arnaud Meukam
bf08cc38da
Add retention policy to staging buckets
Related to:
  - https://github.com/kubernetes/k8s.io/issues/4691

Ensure new staging bucketst are regional and apply lifecycle policy to
the objects of each staging bucket.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-01 17:25:38 +01:00
Jakub Przychodzeń
544456608f Split run controllers per controller-manager 2023-02-08 14:40:04 +00:00
Walter Fender
99156b5bdc Turn on CCM in kube-up when cloudprovider=external
Currently if we disable cloud provider by the following
CLOUD_PROVIDER_FLAG=external
KUBE_FEATURE_GATES=DisableCloudProviders=true,DisableKubeletCloudCredentialProviders=true
we can no longer schedule workloads due to taints and a lack of
node configuration.
This pulls a CCM image from K/cloud-provider-gcp to run tests.
This is a pre-step for taking the above feature gates to beta.
It does not address the last known good dependency issue.
Specifically the CCM image is built on top of client-go and staging.
However this image will be an "old" verison of those libraries.
So it does not test if those libraries work in the CCM.

Fix shellcheck errors.
Add CCM_FEATURE_GATES for testing.
Switching to extended regex from perl regex.
Adding instrumentation to cluster configuration.
Improved regex to not greedily get key-value pairs.
Fixed issue with error on regex no line match.
Switch credentialprovider version to v1alpha1
2022-11-03 10:38:23 -07:00
Benjamin Elder
4c7189f54b fix SC2267 GNU xargs -i is deprecated in favor of -I{} in cluster/gce/util.sh
see: https://www.shellcheck.net/wiki/SC2267
2022-10-19 23:46:18 -07:00
Arnaud Meukam
9987e4635f
Test startup: make staging bucket regional
Make GCS buckets created by the e2e tests regional.
There are by default multi-regional in US location. The change is
introduced to minimize GCS global cost.
GCS new pricing changed since Oct 1, 2022. See https://cloud.google.com/storage/pricing-announce

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2022-10-05 06:34:04 +02:00
Maciej Borsz
7af94d7e95 Remove ssh firewall only when we delete network 2022-09-29 07:25:20 +00:00
Walter Fender
56eb2bcff4 Honor the CLOUD_PROVIDER_FLAG flag.
We were not passing the flag from deploying machine to the machine
being deployed to. Now passing the flag.
2022-09-23 19:03:01 -07:00
Artur Żyliński
f35799f6b1 Fix: Refactor firewall-rules list to read-array 2022-09-12 10:20:50 +02:00
Kubernetes Prow Robot
5fa65e989b
Merge pull request #111495 from ndixita/node-e2e-gcp-cred-provider
Configure and install out-of-tree gcp credential provider
2022-08-23 21:20:00 -07:00
Kubernetes Prow Robot
da558e44ca
Merge pull request #111906 from tosi3k/apiserver-godebug
Add a possibility of setting GODEBUG env var for kube-apiserver binary
2022-08-23 20:08:45 -07:00
Dixita Narang
d1deca1cb4 Configure and install out-of-tree gcp credential provider 2022-08-23 00:59:17 +00:00
Antoni Zawodny
a8fb0cab49 Add a possibility of setting GODEBUG env var for kube-apiserver binary 2022-08-18 11:19:52 +02:00
Brian Pursley
c2238b46a2 Change cluster/gce/util to wait for firewall rule creation
Add kube::util::wait-for-jobs in create-network() to wait
for background firewall rule creation, and if any fail, log
a message and exit with the failed job's return code.
2022-08-03 17:23:27 -04:00
Rupeng Liu
89b76dd156 Add Windows Server 2022 support for GKE 2022-06-01 17:47:40 +00:00
Jordan Liggitt
a44192b955 Remove PodSecurityPolicy cluster config 2022-05-04 16:00:56 -04:00
Davanum Srinivas
83e205ae47
fix typo for pause image env var in kube-up
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-04 06:41:03 -05:00
Davanum Srinivas
abdcbb8235
Enable specifying pause image in containerd config.toml
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-02 11:51:06 -05:00
Kubernetes Prow Robot
06e107081e
Merge pull request #104732 from mengjiao-liu/remove-flag-experimental-check-node-capabilities-before-mount
kubelet: Remove the deprecated flag `--experimental-check-node-capabilities-before-mount`
2022-02-24 07:56:30 -08:00
Kubernetes Prow Robot
e14ace9287
Merge pull request #107806 from mauriciopoppe/csi-proxy-additional-flags-kube-up
Env var for additional flags sent to the csi-proxy binary
2022-02-17 16:15:00 -08:00
Kubernetes Prow Robot
a3207872a3
Merge pull request #107481 from shu-mutou/deprecate-dashboard-addon
Remove dashboard cluster addon
2022-02-10 05:35:48 -08:00
Kubernetes Prow Robot
8d01b02c60
Merge pull request #107096 from hakman/remove_non-masquerade-cidr
Remove deprecated flag --non-masquerade-cidr in kubelet
2022-02-08 12:42:50 -08:00
Kubernetes Prow Robot
7bffb3b2ca
Merge pull request #106241 from jdnurme/cloud-provider-env-var
Added env variable for cloud-provider
2022-02-07 20:40:53 -08:00
Mauricio Poppe
29e8e3af85 Env var for additional flags sent to the csi-proxy binary 2022-01-27 00:01:33 +00:00
Ciprian Hacman
d01e9cedb1 Clean up logic for deprecated flag --container-runtime in scripts
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-20 11:19:08 +02:00
Ciprian Hacman
21809043b5 Remove deprecated flag --non-masquerade-cidr in kubelet
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 09:17:26 +02:00
Shu Muto
676972235a Remove dashboard from cluster scripts 2022-01-18 14:48:49 +09:00
cyclinder
07999dac70 Clean up dockershim flags in the kubelet
Signed-off-by: cyclinder <qifeng.guo@daocloud.io>
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-14 16:02:50 +02:00
JD Nurme
30fabbc0cb updated flag name 2022-01-06 19:51:17 +00:00
Mengjiao Liu
beda4cafb6 kubelet: Remove the deprecated flag --experimental-check-node-capabilities-before-mount 2022-01-06 11:47:11 +08:00
Jordan Liggitt
8139b3d89f Drop unused auto-install invocation 2021-12-06 14:48:14 -05:00
Kubernetes Prow Robot
da73a24f6a
Merge pull request #106123 from pohly/log-go-runner-windows
package log runner as part of Kubernetes releases
2021-11-15 09:04:48 -08:00
JD Nurme
4a9703a219 Added env variable for cloud-provider 2021-11-09 00:45:34 +00:00
Walter Fender
f7185b0be1 Add mTLS as default HTTPConnect egress configuration for GCP.
We currently have UDS as the configuration with GRPC.
Some users are setting up egress to remote konnectivity servers.
Cannot use UDS for this configuration.
Should have a config setup which validates the mTLS configuration.

Fixed lint errors from shell check.
Fix volumes to not include pki for ANP in grpc mode.
2021-11-05 11:39:39 -07:00
Patrick Ohly
d2a8a81639 Package kube-log-runner as part of Kubernetes releases
kube-log-runner was formerly known as go-runner when it was originally introduced
in 393e0952e9
It was moved to kubernetes/release/images/build/go-runner later but is now
needed again in Kubernetes itself as replacement for the deprecated --log-file
klog feature: when bringing up a Windows node, kube-proxy.exe and kubelet.exe must be wrapped
with the helper binary to redirect output.

It got renamed to avoid a naming conflict with
test/conformance/image/go-runner and because the name was too vague.

Other downstream Kubernetes users may have a similar need, therefore it makes
sense to provide a prebuilt binary also in the release archives.
2021-11-04 10:00:26 +01:00
Mauricio Poppe
9e29cc042e KubeEnv var to enable Hyper-V in Windows 2021-10-29 07:07:33 +00:00
“Ibrahim
26ce6df217 Update Windows base images GCE provider 2021-09-28 22:40:04 +00:00
Kubernetes Prow Robot
8e56a34195
Merge pull request #102966 from SergeyKanzhelev/deprecateDynamicKubeletConfig
deprecate and disable by default DynamicKubeletConfig feature flag
2021-07-07 17:05:15 -07:00
Stephen Augustus
c24dfe528a
cluster,hack: Use community infra GCS bucket for retrieving CI builds
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-07-03 17:04:54 -04:00
Sergey Kanzhelev
dffc2a60a2 deprecate and disable by default DynamicKubeletConfig feature flag 2021-07-02 23:53:11 +00:00
Patrick Ohly
c91496dda0 cluster: enable debug handlers on GCE master nodes
This is needed for testing metrics support via the secure port
of kube-scheduler and kube-controller-manager. To access that
port, port-forwarding is used.
2021-07-02 10:38:49 +02:00
Kubernetes Prow Robot
77937b1e8e
Merge pull request #101628 from bobbypage/addon-termination-handler
Remove node termination handler addon
2021-05-24 11:31:39 -07:00
Jeremy Edwards
09f9537338 Install Node Problem Detector on GCE Windows nodes 2021-05-15 16:14:17 +00:00
Kubernetes Prow Robot
e8cf412e5e
Merge pull request #101881 from vinayakankugoyal/konnectivity
Update konnectivity network proxy server to run as non-root, by defau…
2021-05-13 23:16:04 -07:00
Vinayak Goyal
b951b9349f Update konnectivity network proxy server to run as non-root, by default in kube-up. 2021-05-13 12:35:34 -07:00
Avritt Rohwer
0a5a697882 Fix bug in retry-forever usage.
- Push retry-forever wrapping to curl invocations.
- Collect curl retry flags into a single variable.
- Remove 'sudo: false' in master.yaml, is unnecessary and breaks older
  cloud-init versions.
- Change log-error status reason to be more accurate.
- Fix the some 'python' invocations to 'python3'.
2021-05-12 09:22:20 -07:00
Kubernetes Prow Robot
ca0c04e4d3
Merge pull request #101164 from vinayakankugoyal/apiservernonroot
Run control-plane as non root in kube-up.
2021-05-06 17:33:14 -07:00