CadolesKube/typhoon
7
0
Fork 0
mirror of https://github.com/puppetmaster/typhoon.git synced 2024-12-25 18:49:33 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,467 Commits 4 Branches 126 Tags 9.4 MiB
b68f8bb2a9
Commit Graph

883 Commits

Author SHA1 Message Date
Dalton Hubble
4fd43b39ad Fix Flatcar Linux docker driver and add cgroups v2 
* Remove `/sys/fs/cgroup/systemd` mount since Flatcar Linux
uses cgroups v2
* Flatcar Linux's `docker` switched from the `cgroupfs` to
`systemd` driver without notice
 2021-11-12 21:07:20 -08:00
Dalton Hubble
65083aca7d Update Calico and Flannel CNI providers 
* Update Calico from v3.20.2 to v3.21.0
* Update Flannel from v0.14.0 to v0.15.0
 2021-11-12 11:03:39 -08:00
Dalton Hubble
07db4c1143 Allow use of google Terraform provider v4.0+ 
* https://github.com/hashicorp/terraform-provider-google/releases/tag/v4.0.0
 2021-11-11 10:17:58 -08:00
Dalton Hubble
b934a13605 Update Prometheus and Grafana addons 2021-11-07 17:00:40 -08:00
Dalton Hubble
cd005a0b27 Prepare for v1.22.3 release 2021-10-28 11:58:55 -07:00
Dalton Hubble
dd4a5a4e7e Update Kubernetes from v1.22.2 to v1.22.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1223
 2021-10-28 10:11:06 -07:00
Dalton Hubble
af835f976f Update flannel from v0.13.0 to v0.14.0 
* https://github.com/flannel-io/flannel/releases/tag/v0.14.0
 2021-10-28 10:09:06 -07:00
Dalton Hubble
17dce49982 Update etcd from v3.5.0 to v3.5.1 
* https://github.com/etcd-io/etcd/releases/tag/v3.5.1
 2021-10-17 11:28:27 -07:00
Dalton Hubble
5744e10329 Update Cilium from v1.0.4 to v1.0.5 
* https://github.com/cilium/cilium/releases/tag/v1.10.5
 2021-10-17 11:26:59 -07:00
Dalton Hubble
20748536df Update nginx-ingress from v1.0.2 to v1.0.4 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.0.4
 2021-10-17 11:17:43 -07:00
Dalton Hubble
f2e6256dd9 Update Prometheus, kube-state-metrics, and Grafana 
* Update monitoring addons
 2021-10-17 11:15:39 -07:00
Dalton Hubble
f8162b9be3 Update Calico from v3.20.1 to v3.20.2 
* Use Calico's iptables legacy vs nft auto-detection
 2021-10-11 20:28:48 -07:00
Dalton Hubble
15117fb95b Update Prometheus and nginx-ingress 2021-10-05 19:15:58 -07:00
Dalton Hubble
cb72b261c7 Update Terraform provider poseidon/matchbox to v0.5+ 
* Relax version constraint to allow future minor version
releases to be used without a corresponding Typhoon change
 2021-09-29 23:41:44 -07:00
Dalton Hubble
209efd2f5b Update Prometheus, Grafana, and kube-state-metrics 2021-09-29 23:39:10 -07:00
Dalton Hubble
5a1e455220 Update nginx-ingress from v1.0.0 to v1.0.1 2021-09-24 09:38:18 -07:00
Dalton Hubble
69f37c8b17 Update Prometheus from v2.29.2 to v2.30.0 2021-09-24 09:34:00 -07:00
Dalton Hubble
b30de949b8 Update Calico and Cilium CNI 
* Update Calico from v3.20.0 to v3.20.1
* Update Cilium from v1.10.3 to v1.10.4
 2021-09-22 22:18:16 -07:00
Dalton Hubble
bb7f31822e Update Kubernetes from v1.22.1 to v1.22.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1222
 2021-09-15 19:56:24 -07:00
Dalton Hubble
eb29fb639b Update nginx-ingress, Prometheus, and Grafana addons 2021-08-24 22:14:57 -07:00
Dalton Hubble
fcbdb50d93 Update Kubernetes from v1.22.0 to v1.22.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1221
 2021-08-19 21:12:02 -07:00
Dalton Hubble
0d8ceae1d9 Add etcd v3.5.0 note to CHANGES 2021-08-11 09:24:43 -07:00
Dalton Hubble
c5cf803634 Update Grafana and kube-state-metrics addons 2021-08-10 22:17:16 -07:00
Dalton Hubble
cbef202eec Update Prometheus discovery of kube components 
* Kubernetes v1.22.0 disabled kube-controller-manager insecure
port, which was used internally for Prometheus metrics scraping
* Configure Prometheus to discover and scrape endpoints for
kube-scheduler and kube-controller-manager via the authenticated
https ports, via bearer token
* Change firewall ports to allow Prometheus (on worker nodes)
to scrape kube-scheduler and kube-controller-manager targets
that run on controller(s) with hostNetwork
* Disable the insecure port on kube-scheduler
 2021-08-10 21:25:19 -07:00
Dalton Hubble
0c99b909a9 Update nginx-ingress from v0.47.0 to v1.0.0-beta.1 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.0.0-beta.1
 2021-08-07 12:46:00 -07:00
Dalton Hubble
739db3b35f Update Grafana and node-exporter addons 
* https://github.com/grafana/grafana/releases/tag/v8.1.0
* https://github.com/prometheus/node_exporter/releases/tag/v1.2.1
 2021-08-05 23:24:57 -07:00
Dalton Hubble
9bac641511 Update Kubernetes from v1.21.3 to v1.22.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1220
 2021-08-04 22:09:19 -07:00
Dalton Hubble
f03045f0dc Update Cilium for cgroups v2 support 
* On Fedora CoreOS, Cilium cross-node service IP load balancing
stopped working for a time (first observable as CoreDNS pods
located on worker nodes not being able to reach the kubernetes
API service 10.3.0.1). This turned out to have two parts:
* Fedora CoreOS switched to cgroups v2 by default. In our early
testing with cgroups v2, Calico (default) was used. With the
cgroups v2 change, SELinux policy denied some eBPF operations.
Since fixed in all Fedora CoreOS channels
* Cilium requires new mounts to support cgroups v2, which are
added here

* https://github.com/coreos/fedora-coreos-tracker/issues/292
* https://github.com/coreos/fedora-coreos-tracker/issues/881
* https://github.com/cilium/cilium/pull/16259
 2021-07-24 10:36:47 -07:00
Dalton Hubble
b603bbde3d Update Butane Config from v1.2.0 to v1.4.0 
* Rename Fedora CoreOS Config (FCC) to Butane Config
* Require any snippets customizations use version v1.4.0

* https://typhoon.psdn.io/advanced/customization/#hosts
 2021-07-19 23:53:51 -07:00
Dalton Hubble
c734fa7b84 Update node-exporter from v1.1.2 to v1.2.0 
* https://github.com/prometheus/node_exporter/releases/tag/v1.2.0
 2021-07-18 15:26:44 -07:00
Dalton Hubble
fdade5b40c Update poseidon/ct provider from v0.8.0 to v0.9.0 
* Continue targeting Ignition v3.2.0 for some time
 2021-07-18 09:05:02 -07:00
Dalton Hubble
171fd2c998 Update Kubernetes from v1.21.2 to v1.21.3 
* https://github.com/kubernetes/kubernetes/releases/tag/v1.21.3
 2021-07-17 18:22:24 -07:00
Dalton Hubble
545bd79624 Update Grafana from v8.0.4 to v8.0.6 
* https://github.com/grafana/grafana/releases/tag/v8.0.6
 2021-07-16 12:02:36 -07:00
Dalton Hubble
66e7354c8a Change AWS default disk type from gp2 to gp3 
* https://aws.amazon.com/about-aws/whats-new/2020/12/introducing-new-amazon-ebs-general-purpose-volumes-gp3/
 2021-07-04 10:43:05 -07:00
Dalton Hubble
3a71b2ccb1 Update Cilium from v1.10.1 to v1.10.2 
* https://github.com/cilium/cilium/releases/tag/v1.10.2
 2021-07-04 10:11:21 -07:00
Dalton Hubble
c7e327417b Update Prometheus and Grafana addons 2021-07-04 10:02:44 -07:00
Dalton Hubble
65ddd2419c Add Known Issues with FCOS to CHANGES 2021-06-27 16:51:59 -07:00
Dalton Hubble
b0e9b1fa60 Update Prometheus and Grafana addons 
* https://github.com/prometheus/prometheus/releases/tag/v2.28.0
* https://github.com/grafana/grafana/releases/tag/v8.0.3
 2021-06-27 14:46:43 -07:00
Dalton Hubble
485feb82c4 Update CoreDNS from v1.8.0 to v1.8.4 
* https://coredns.io/2021/01/20/coredns-1.8.1-release/
* https://coredns.io/2021/02/23/coredns-1.8.2-release/
* https://coredns.io/2021/02/24/coredns-1.8.3-release/
* https://coredns.io/2021/05/28/coredns-1.8.4-release/
 2021-06-23 23:31:25 -07:00
Dalton Hubble
0b276b6b7e Update Kubernetes from v1.21.1 to v1.21.2 
* https://github.com/kubernetes/kubernetes/releases/tag/v1.21.2
 2021-06-17 16:15:20 -07:00
Dalton Hubble
e8513e58bb Add support for Terraform v1.0.0 
* https://github.com/hashicorp/terraform/releases/tag/v1.0.0
 2021-06-17 13:32:56 -07:00
Dalton Hubble
30cfeec6c1 Update nginx-ingress from v0.46.0 to v0.47.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.47.0
 2021-06-07 10:11:07 -07:00
Dalton Hubble
24e63bd134 Update Prometheus, Grafana, kube-state-metrics addons 2021-06-07 09:40:06 -07:00
Dalton Hubble
996bdd9112 Update Calico from v3.19.0 to v3.19.1 
* https://docs.projectcalico.org/archive/v3.19/release-notes/
 2021-06-02 14:51:15 -07:00
Dalton Hubble
9f0126a410 Fix typo in CHANGES.md 2021-05-25 21:16:53 -07:00
Dalton Hubble
966fd280b0 Update Cilium from v0.10.0-rc1 to v0.10.0 
* https://github.com/cilium/cilium/releases/tag/v1.10.0
 2021-05-24 11:16:51 -07:00
Dalton Hubble
e4e074c894 Update Cilium from v1.9.6 to v1.10.0-rc1 
* Add multi-arch container images and arm64 support
* https://github.com/cilium/cilium/releases/tag/v1.10.0-rc1
 2021-05-14 14:24:52 -07:00
Dalton Hubble
d51da49925 Update docs for Kubernetes v1.21.1 and Terraform v0.15.x 2021-05-13 11:34:01 -07:00
Dalton Hubble
2076a779a3 Update Kubernetes from v1.21.0 to v1.21.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#v1211
 2021-05-13 11:23:26 -07:00
Dalton Hubble
048094b256 Update etcd from v3.4.15 to v3.4.16 
* https://github.com/etcd-io/etcd/blob/main/CHANGELOG-3.4.md
 2021-05-13 10:53:04 -07:00
Dalton Hubble
75b063c586 Update Prometheus from v2.25.2 to v2.27.0 
* Update Grafana from v7.5.4 to v7.5.6
* https://github.com/prometheus/prometheus/releases/tag/v2.27.0
* https://github.com/grafana/grafana/releases/tag/v7.5.6
 2021-05-12 11:47:07 -07:00
Dalton Hubble
bc96443710 Update nginx-ingress from v0.45.0 to v0.46.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.46.0
 2021-05-05 12:06:20 -07:00
Dalton Hubble
5f87eb3ec9 Update Fedora CoreOS Kubelet for cgroups v2 
* Fedora CoreOS is beginning to switch from cgroups v1 to
cgroups v2 by default, which changes the sysfs hierarchy
* This will be needed when using a Fedora Coreos OS image
that enables cgroups v2 (`next` stream as of this writing)

Rel: https://github.com/coreos/fedora-coreos-tracker/issues/292
 2021-04-26 11:48:58 -07:00
Dalton Hubble
b152b9f973 Reduce the default disk_size from 40GB to 30GB 
* We're typically reducing the `disk_size` in real clusters
since the space is under used. The default should be lower.
 2021-04-26 11:43:26 -07:00
Dalton Hubble
9c842395a8 Update Cilium from v1.9.5 to v1.9.6 
* https://github.com/cilium/cilium/releases/tag/v1.9.6
 2021-04-26 10:55:23 -07:00
Dalton Hubble
e535ddd15a Update Grafana from v7.5.3 to v7.5.4 
* https://github.com/grafana/grafana/releases/tag/v7.5.4
 2021-04-17 11:38:14 -07:00
Dalton Hubble
5752a8f041 Update kube-state-metrics from v2.0.0-rc.1 to v2.0.0 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0
 2021-04-17 11:34:52 -07:00
Dalton Hubble
c11e23fc50 Fix minor docs issues and missing changelog links 2021-04-13 09:35:11 -07:00
Dalton Hubble
2eb1ac1b4d Update nginx-ingress from v0.44.0 to v0.45.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.45.0
 2021-04-12 00:18:47 -07:00
Dalton Hubble
cb2721ef7d Update Grafana from v7.5.2 to v7.5.3 
* https://github.com/grafana/grafana/releases/tag/v7.5.3
 2021-04-12 00:17:22 -07:00
Dalton Hubble
fc06d28e13 Remove deprecated field on azurerm_lb_backend_address_pool 
* Remove the deprecated `resource_group_name` field from Azure
`azurerm_lb_backend_address_pool` resources
 2021-04-11 23:59:17 -07:00
Dalton Hubble
ebd9570ede Update Fedora CoreOS Config version from v1.1.0 to v1.2.0 
* Require [poseidon/ct](https://github.com/poseidon/terraform-provider-ct)
Terraform provider v0.8+
* Require any [snippets](https://typhoon.psdn.io/advanced/customization/#hosts)
customizations to update to v1.2.0

See upgrade [notes](https://typhoon.psdn.io/topics/maintenance/#upgrade-terraform-provider-ct)
 2021-04-11 15:26:54 -07:00
Dalton Hubble
34e8db7aae Update static Pod manifests for Kubernetes v1.21.0 
* https://github.com/poseidon/terraform-render-bootstrap/pull/257
 2021-04-11 15:05:46 -07:00
Dalton Hubble
084e8bea49 Allow custom initial node taints on worker pool nodes 
* Add `node_taints` variable to worker modules to set custom
initial node taints on cloud platforms that support auto-scaling
worker pools of heterogeneous nodes (i.e. AWS, Azure, GCP)
* Worker pools could use custom `node_labels` to allowed workloads
to select among differentiated nodes, while custom `node_taints`
allows a worker pool's nodes to be tainted as special to prevent
scheduling, except by workloads that explicitly tolerate the
taint
* Expose `daemonset_tolerations` in AWS, Azure, and GCP kubernetes
cluster modules, to determine whether `kube-system` components
should tolerate the custom taint (advanced use covered in docs)

Rel: #550, #663
Closes #429
 2021-04-11 15:00:11 -07:00
Dalton Hubble
d73621c838 Update Kubernetes from v1.20.5 to v1.21.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#v1210
 2021-04-08 21:44:31 -07:00
Dalton Hubble
1a6481df04 Update Grafana from v7.5.1 to v7.5.2 
* https://github.com/grafana/grafana/releases/tag/v7.5.2
 2021-04-04 18:20:02 -07:00
Dalton Hubble
7372d33af8 Update kube-state-metrics and Grafana 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-rc.1
* https://github.com/grafana/grafana/releases/tag/v7.5.1
 2021-03-28 10:53:52 -07:00
Dalton Hubble
451ec771a8 Update Terraform providers and CHANGES for release 2021-03-23 08:45:57 -07:00
Dalton Hubble
597ca4acce Update CoreDNS from v1.7.0 to v1.8.0 
* https://github.com/poseidon/terraform-render-bootstrap/pull/254
 2021-03-20 16:47:25 -07:00
Dalton Hubble
048f1f514e Update Grafana from v7.4.3 to v7.4.5 
* https://github.com/grafana/grafana/releases/tag/v7.4.5
 2021-03-19 11:51:52 -07:00
Dalton Hubble
b825cd9afe Update Prometheus from v2.25.1 to v2.25.2 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.2
 2021-03-19 11:49:38 -07:00
Dalton Hubble
796149d122 Update Kubernetes from v1.20.4 to v1.20.5 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1205
 2021-03-19 11:27:31 -07:00
Dalton Hubble
a66bccd590 Update Cilium from v1.9.4 to v1.9.5 
* https://github.com/cilium/cilium/releases/tag/v1.9.5
 2021-03-14 11:48:22 -07:00
Dalton Hubble
30b1edfcc6 Mark bootstrap token as sensitive in plan/apply 
* Mark the bootstrap token as sensitive, which is useful when
Terraform is run in automated CI/CD systems to avoid showing
the token
* https://github.com/poseidon/terraform-render-bootstrap/pull/251
 2021-03-14 11:32:35 -07:00
Dalton Hubble
a4afe06b64 Update Calico from v3.17.3 to v3.18.1 
* https://docs.projectcalico.org/archive/v3.18/release-notes/
 2021-03-14 10:35:24 -07:00
Dalton Hubble
4d58be0816 Update Prometheus from v2.25.0 to v2.25.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.1
 2021-03-14 09:43:15 -07:00
Dalton Hubble
5bc1cd28c3 Switch kube-state-metrics image from quay to k8s.gcr.io 
* kube-state-metrics is continuing publishing container images
to `k8s.gcr.io` instead of `quay.io`

Rel: https://github.com/kubernetes/kube-state-metrics/issues/1409
 2021-03-11 10:56:18 -08:00
Dalton Hubble
13fbac6c79 Update Grafana from v7.4.2 to v7.4.3 
* https://github.com/grafana/grafana/releases/tag/v7.4.3
 2021-03-05 17:19:54 -08:00
Dalton Hubble
a8fa4a9a06 Update node-exporter and kube-state-metrics 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-rc.0
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.2
 2021-03-05 17:13:45 -08:00
Dalton Hubble
a5c1a96df1 Update etcd from v3.4.14 to v3.4.15 
* https://github.com/etcd-io/etcd/releases/tag/v3.4.15
 2021-03-05 17:02:57 -08:00
Dalton Hubble
6a091e245e Remove Flatcar Linux Edge os_image option 
* Flatcar Linux has not published an Edge channel image since
April 2020 and recently removed mention of the channel from
their documentation https://github.com/kinvolk/Flatcar/pull/345
* Users of Flatcar Linux Edge should move to the stable, beta, or
alpha channel, barring any alternate advice from upstream Flatcar
Linux
 2021-02-20 16:09:54 -08:00
Dalton Hubble
ec389295fe Update Grafana from v7.4.0 to v7.4.2 
* https://github.com/grafana/grafana/releases/tag/v7.4.2
 2021-02-19 00:18:39 -08:00
Dalton Hubble
3c807f3478 Update Prometheus from v2.24.1 to v2.25.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.0
 2021-02-19 00:16:35 -08:00
Dalton Hubble
e76fe80b45 Update Kubernetes from v1.20.3 to v1.20.4 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1204
 2021-02-19 00:02:07 -08:00
Dalton Hubble
32853aaa7b Update Kubernetes from v1.20.2 to v1.20.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1203
 2021-02-17 22:29:33 -08:00
Dalton Hubble
c32a54db40 Update node-exporter from v1.0.1 to v1.1.1 
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.1
 2021-02-14 14:30:28 -08:00
Dalton Hubble
9671b1c734 Update flannel-cni from v0.4.1 to v0.4.2 
* https://github.com/poseidon/flannel-cni/releases/tag/v0.4.2
 2021-02-14 12:04:59 -08:00
Dalton Hubble
3b933e1ab3 Update Grafana from v7.3.7 to v7.4.0 
* https://github.com/grafana/grafana/releases/tag/v7.4.0
 2021-02-07 21:42:18 -08:00
Dalton Hubble
58d8f6f505 Update Prometheus from v2.24.0 to v2.24.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.1
 2021-02-04 22:28:32 -08:00
Dalton Hubble
56853fe222 Update nginx-ingress from v0.43.0 to v0.44.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.44.0
 2021-02-04 22:19:58 -08:00
Dalton Hubble
18165d8076 Update Calico from v3.17.1 to v3.17.2 
* https://github.com/projectcalico/calico/releases/tag/v3.17.2
 2021-02-04 22:03:51 -08:00
Dalton Hubble
50acf28ce5 Update Cilium from v1.9.3 to v1.9.4 
* https://github.com/cilium/cilium/releases/tag/v1.9.4
 2021-02-03 23:08:22 -08:00
Dalton Hubble
ab793eb842 Update Cilium from v1.9.2 to v1.9.3 
* https://github.com/cilium/cilium/releases/tag/v1.9.3
 2021-01-26 17:13:52 -08:00
Dalton Hubble
b74c958524 Update Cilium from v1.9.1 to v1.9.2 
* https://github.com/cilium/cilium/releases/tag/v1.9.2
 2021-01-20 22:06:45 -08:00
Dalton Hubble
11c434915f Update Grafana from v7.3.6 to v7.3.7 
* https://github.com/grafana/grafana/releases/tag/v7.3.7
 2021-01-16 10:46:56 -08:00
Dalton Hubble
05f7df9e80 Update Kubernetes from v1.20.1 to v1.20.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1202
 2021-01-13 17:46:51 -08:00
Dalton Hubble
4220b9ce18 Add support for Terraform v0.14.4+ 
* Support Terraform v0.13.x and v0.14.4+
 2021-01-12 21:43:12 -08:00
Dalton Hubble
6a6af4aa16 Update Prometheus from v2.24.0-rc.0 to v2.24.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.0
 2021-01-12 20:49:18 -08:00
Dalton Hubble
3dcd10f3b8 Update Prometheus v2.23.0 to v2.24.0-rc.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.0-rc.0
 2021-01-01 13:49:28 -08:00
Dalton Hubble
22503993b9 Update nginx-ingress from v0.41.2 to v0.43.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.43.0
* https://github.com/kubernetes/ingress-nginx/issues/6696
 2021-01-01 13:44:45 -08:00
Dalton Hubble
cf3aa8885b Update Prometheus rules and Grafana dashboards 
* Update Grafana from v7.3.5 to v7.3.6
 2020-12-19 14:56:42 -08:00
Dalton Hubble
ba61a137db Add notice about upstream Fedora CoreOS changes 
* Highlight that short-term, use of Fedora CoreOS will
require non-RSA SSH keys or a workaround snippet
 2020-12-19 14:10:42 -08:00
Dalton Hubble
646bdd78e4 Update Kubernetes from v1.20.0 to v1.20.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1201
 2020-12-19 12:56:28 -08:00
Dalton Hubble
c163fbbbcd Update docs and README for release 2020-12-12 12:31:35 -08:00
Dalton Hubble
dc7be431e0 Remove iSCSI mounts from Kubelet 
* Remove Kubelet `/etc/iscsi` and `iscsiadm` host mounts that
were added on bare-metal, since these no longer work on either
Fedora CoreOS or Flatcar Linux with newer `iscsiadm`
* These special mounts on bare-metal date back to #350 which
added them to provide a way to use iSCSI in Kubernetes v1.10
* Today, storage should be handled by external CSI providers
which handle different storage systems, which doesn't rely
on Kubelet storage utils

Close #907
 2020-12-12 11:41:02 -08:00
Dalton Hubble
86e0f806b3 Revert "Add support for Terraform v0.14.x" 
This reverts commit 968febb050.
 2020-12-11 00:47:57 -08:00
Dalton Hubble
96172ad269 Update Grafana from v7.3.4 to v7.3.5 
* https://github.com/grafana/grafana/releases/tag/v7.3.5
 2020-12-11 00:24:43 -08:00
Dalton Hubble
ee9ce3d0ab Update Calico from v3.17.0 to v3.17.1 
* https://github.com/projectcalico/calico/releases/tag/v3.17.1
 2020-12-10 22:48:38 -08:00
Dalton Hubble
a8b8a9b454 Update Kubernetes from v1.20.0-rc.0 to v1.20.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1200
 2020-12-08 18:28:13 -08:00
Dalton Hubble
968febb050 Add support for Terraform v0.14.x 
* Support Terraform v0.13.x and v0.14.x
 2020-12-07 00:22:38 -08:00
Dalton Hubble
bee455f83a Update Cilium from v1.9.0 to v1.9.1 
* https://github.com/cilium/cilium/releases/tag/v1.9.1
 2020-12-04 14:14:18 -08:00
Dalton Hubble
3e89ea1b4a Promote Fedora CoreOS bare-metal to stable 
* Fedora CoreOS is a good choice for use on bare-metal
 2020-12-04 14:02:55 -08:00
Dalton Hubble
e77dd6ecd4 Update Kubernetes from v1.19.4 to v1.20.0-rc.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1200-rc0
 2020-12-03 16:01:28 -08:00
Dalton Hubble
804dfea0f9 Add kubeconfig's for kube-scheduler and kube-controller-manager 
* Generate TLS client certificates for `kube-scheduler` and
`kube-controller-manager` with `system:kube-scheduler` and
`system:kube-controller-manager` CNs
* Template separate kubeconfigs for kube-scheduler and
kube-controller manager (`scheduler.conf` and
`controller-manager.conf`). Rename admin for clarity
* Before v1.16.0, Typhoon scheduled a self-hosted control
plane, which allowed the steady-state kube-scheduler and
kube-controller-manager to use a scoped ServiceAccount.
With a static pod control plane, separate CN TLS client
certificates are the nearest equiv.
* https://kubernetes.io/docs/setup/best-practices/certificates/
* Remove unused Kubelet certificate, TLS bootstrap is used
instead
 2020-12-01 22:02:15 -08:00
Dalton Hubble
8ba23f364c Add TokenReview and TokenRequestProjection flags 
* Add kube-apiserver flags for TokenReview and TokenRequestProjection
(beta, defaults on) to allow using Service Account Token Volume
Projection to create and mount service account tokens tied to a Pod's
lifecycle

Rel:

* https://github.com/poseidon/terraform-render-bootstrap/pull/231
* https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection
 2020-12-01 20:02:33 -08:00
Dalton Hubble
f6025666eb Update etcd from v3.4.12 to v3.4.14 
* https://github.com/etcd-io/etcd/releases/tag/v3.4.14
 2020-11-29 20:04:25 -08:00
Dalton Hubble
85eb502f19 Update Prometheus from v2.23.0-rc.0 to v2.23.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.23.0
 2020-11-29 19:59:27 -08:00
Dalton Hubble
fa3184fb9c Relax terraform-provider-ct version constraint 
* Allow terraform-provider-ct versions v0.6+ (e.g. v0.7.1)
Before, only v0.6.x point updates were allowed
* Update terraform-provider-ct to v0.7.1 in docs
* READ the docs before updating terraform-provider-ct,
as changing worker user-data is handled differently
by different cloud platforms
 2020-11-29 19:51:26 -08:00
Dalton Hubble
22565e57e0 Update kube-state-metrics from v2.0.0-alpha.2 to v2.0.0-alpha.3 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha.3
 2020-11-25 14:30:11 -08:00
Dalton Hubble
026e1f3648 Update Grafana from v7.3.3 to v7.3.4 
* https://github.com/grafana/grafana/releases/tag/v7.3.4
 2020-11-25 14:25:15 -08:00
Dalton Hubble
ae548ce213 Update Calico from v3.16.5 to v3.17.0 
* Enable Calico MTU auto-detection
* Remove [workaround](https://github.com/poseidon/typhoon/pull/724) to
Calico cni-plugin [issue](https://github.com/projectcalico/cni-plugin/issues/874)

Rel: https://github.com/poseidon/terraform-render-bootstrap/pull/230
 2020-11-25 14:22:58 -08:00
Dalton Hubble
e826b49648 Update Matchbox profile to use initramfs and rootfs images 
* Fedora CoreOS stable (after Oct 6) ships separate initramfs
and rootfs images, used as initrd's
* Update profiles to match the Matchbox examples, which have
already switched to the new profile and to remove the unused
kernel args
* Requires Fedora CoreOS version which ships rootfs images
(e.g. stable 32.20200923.3.0 or later)

Rel:

* https://github.com/coreos/fedora-coreos-tracker/issues/390#issuecomment-661986987
* da0df01763 (diff-4541f7b7c174f6ae6270135942c1c65ed9e09ebe81239709f5a9fb34e858ddcf)

Supercedes https://github.com/poseidon/typhoon/pull/888
 2020-11-25 14:13:39 -08:00
Dalton Hubble
fa8f68f50e Fix Fedora CoreOS AWS AMI query in non-US regions 
* A `aws_ami` data source will fail a Terraform plan
if no matching AMI is found, even if the AMI is not
used. ARM64 images are only published to a few US
regions, so the `aws_ami` data query could fail when
creating Fedora CoreOS AWS clusters in non-US regions
* Condition `aws_ami` on whether experimental arch
`arm64` is chosen
* Recent regression introduced in v1.19.4
https://github.com/poseidon/typhoon/pull/875

Closes https://github.com/poseidon/typhoon/issues/886
 2020-11-25 11:32:05 -08:00
Dalton Hubble
ba8d972c76 Update Prometheus from v2.22.2 to v2.23.0-rc.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.23.0-rc.0
 2020-11-24 10:54:42 -08:00
Dalton Hubble
c0347ca0c6 Set kubeconfig and asset_dist as sensitive 
* Mark `kubeconfig` and `asset_dist` as `sensitive` to
prevent the Terraform CLI displaying these values, esp.
for CI systems
* In particular, external tools or tfvars style uses (not
recommended) reportedly display all outputs and are improved
by setting sensitive
* For Terraform v0.14, outputs referencing sensitive fields
must also be annotated as sensitive

Closes https://github.com/poseidon/typhoon/issues/884
 2020-11-23 11:41:55 -08:00
Dalton Hubble
5e4f5de271 Enable Network Load Balancer (NLB) dualstack 
* NLB subnets assigned both IPv4 and IPv6 addresses
* NLB DNS name has both A and AAAA records
* NLB to target node traffic is IPv4 (no change),
no change to security groups needed
* Ingresses exposed through the recommended Nginx
Ingress Controller addon will be accessible via
IPv4 or IPv6. No change is needed to the app's
CNAME to NLB record

Related: https://aws.amazon.com/about-aws/whats-new/2020/11/network-load-balancer-supports-ipv6/
 2020-11-21 14:16:24 -08:00
Dalton Hubble
be28495d79 Update Prometheus from v2.22.1 to v2.22.2 
* https://github.com/prometheus/prometheus/releases/tag/v2.22.2
 2020-11-19 21:50:48 -08:00
Dalton Hubble
f1356fec24 Update Grafana from v7.3.2 to v7.3.3 
* https://github.com/grafana/grafana/releases/tag/v7.3.3
 2020-11-19 21:49:11 -08:00
Dalton Hubble
cc00afa4e1 Add Terraform v0.13 input variable validations 
* Support for migrating from Terraform v0.12.x to v0.13.x
was added in v1.18.8
* Require Terraform v0.13+. Drop support for Terraform v0.12
 2020-11-17 12:02:34 -08:00
Dalton Hubble
f5a83667e8 Update Grafana from v7.3.1 to v7.3.2 
* https://github.com/grafana/grafana/releases/tag/v7.3.2
 2020-11-14 13:30:30 -08:00
Dalton Hubble
a911367c2e Update nginx-ingress from v0.41.0 to v0.41.2 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.41.2
 2020-11-14 13:27:06 -08:00
Dalton Hubble
1b3a0f6ebc Add experimental Fedora CoreOS arm64 support on AWS 
* Add experimental `arch` variable to Fedora CoreOS AWS,
accepting amd64 (default) or arm64 to support native
arm64/aarch64 clusters or mixed/hybrid clusters with
a worker pool of arm64 workers
* Add `daemonset_tolerations` variable to cluster module
(experimental)
* Add `node_taints` variable to workers module
* Requires flannel CNI and experimental Poseidon-built
arm64 Fedora CoreOS AMIs (published to us-east-1, us-east-2,
and us-west-1)

WARN:

* Our AMIs are experimental, may be removed at any time, and
will be removed when Fedora CoreOS publishes official arm64
AMIs. Do NOT use in production

Related:

* https://github.com/poseidon/typhoon/pull/682
 2020-11-14 13:09:24 -08:00
Dalton Hubble
1113a22f61 Update Kubernetes from v1.19.3 to v1.19.4 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.19.md#v1194
 2020-11-11 22:56:27 -08:00
Dalton Hubble
152c7d86bd Change bootstrap.service container from rkt to docker 
* Use docker to run `bootstrap.service` container
* Background https://github.com/poseidon/typhoon/pull/855
 2020-11-11 22:26:05 -08:00
Dalton Hubble
79deb8a967 Update Cilium from v1.9.0-rc3 to v1.9.0 
* https://github.com/cilium/cilium/releases/tag/v1.9.0
 2020-11-10 23:42:41 -08:00
Dalton Hubble
f412f0d9f2 Update Calico from v3.16.4 to v3.16.5 
* https://github.com/projectcalico/calico/releases/tag/v3.16.5
 2020-11-10 22:58:19 -08:00
Dalton Hubble
133d325013 Update nginx-ingress from v0.40.2 to v0.41.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.41.0
 2020-11-08 14:34:52 -08:00
Dalton Hubble
4b05c0180e Update Grafana from v7.3.0 to v7.3.1 
* https://github.com/grafana/grafana/releases/tag/v7.3.1
 2020-11-08 14:13:39 -08:00
Dalton Hubble
f49ab3a6ee Update Prometheus from v2.22.0 to v2.22.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.22.1
 2020-11-08 14:12:24 -08:00
Dalton Hubble
0eef16b274 Improve and tidy Fedora CoreOS etcd-member.service 
* Allow a snippet with a systemd dropin to set an alternate
image via `ETCD_IMAGE`, for consistency across Fedora CoreOS
and Flatcar Linux
* Drop comments about integrating system containers with
systemd-notify
 2020-11-08 11:49:56 -08:00
Dalton Hubble
ad1f59ce91 Change Flatcar etcd-member.service container from rkt to docker 
* Use docker to run the `etcd-member.service` container
* Use env-file `/etc/etcd/etcd.env` like podman on FCOS
* Background: https://github.com/poseidon/typhoon/pull/855
 2020-11-03 16:42:18 -08:00
Dalton Hubble
82e5ac3e7c Update Cilium from v1.8.5 to v1.9.0-rc3 
* https://github.com/poseidon/terraform-render-bootstrap/pull/224
 2020-11-03 10:29:07 -08:00
Dalton Hubble
a8f7880511 Update Cilium from v1.8.4 to v1.8.5 
* https://github.com/cilium/cilium/releases/tag/v1.8.5
 2020-10-29 00:50:18 -07:00
Dalton Hubble
cda5b93b09 Update kube-state-metrics from v2.0.0-alpha.1 to v2.0.0-alpha.2 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha.2
 2020-10-28 18:49:40 -07:00
Dalton Hubble
3e9f5f34de Update Grafana from v7.2.2 to v7.3.0 
* https://github.com/grafana/grafana/releases/tag/v7.3.0
 2020-10-28 17:46:26 -07:00
Dalton Hubble
893d139590 Update Calico from v3.16.3 to v3.16.4 
* https://github.com/projectcalico/calico/releases/tag/v3.16.4
 2020-10-26 00:50:40 -07:00
Dalton Hubble
fc62e51b2a Update Grafana from v7.2.1 to v7.2.2 
* https://github.com/grafana/grafana/releases/tag/v7.2.2
 2020-10-22 00:14:04 -07:00
Dalton Hubble
e5ba3329eb Remove bare-metal CoreOS Container Linux profiles 
* Remove Matchbox profiles for CoreOS Container Linux
* Simplify the remaining Flatcat Linux profiles
 2020-10-21 00:25:10 -07:00
Dalton Hubble
7c3f3ab6d0 Rename container-linux modules to flatcar-linux 
* CoreOS Container Linux was deprecated in v1.18.3
* Continue transitioning docs and modules from supporting
both CoreOS and Flatcar "variants" of Container Linux to
now supporting Flatcar Linux and equivalents

Action Required: Update the Flatcar Linux modules `source`
to replace `s/container-linux/flatcar-linux`. See docs for
examples
 2020-10-20 22:47:19 -07:00
Dalton Hubble
df17253e72 Fix delete node permission on Fedora CoreOS node shutdown 
* On cloud platforms, `delete-node.service` tries to delete the
local node (not always possible depending on preemption time)
* Since v1.18.3, kubelet TLS bootstrap generates a kubeconfig
in `/var/lib/kubelet` which should be used with kubectl in
the delete-node oneshot
 2020-10-18 23:38:11 -07:00