f8162b9be3
Update Calico from v3.20.1 to v3.20.2
...
* Use Calico's iptables legacy vs nft auto-detection
2021-10-11 20:28:48 -07:00
cb72b261c7
Update Terraform provider poseidon/matchbox to v0.5+
...
* Relax version constraint to allow future minor version
releases to be used without a corresponding Typhoon change
2021-09-29 23:41:44 -07:00
b30de949b8
Update Calico and Cilium CNI
...
* Update Calico from v3.20.0 to v3.20.1
* Update Cilium from v1.10.3 to v1.10.4
2021-09-22 22:18:16 -07:00
bb7f31822e
Update Kubernetes from v1.22.1 to v1.22.2
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1222
2021-09-15 19:56:24 -07:00
fcbdb50d93
Update Kubernetes from v1.22.0 to v1.22.1
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1221
2021-08-19 21:12:02 -07:00
cbef202eec
Update Prometheus discovery of kube components
...
* Kubernetes v1.22.0 disabled kube-controller-manager insecure
port, which was used internally for Prometheus metrics scraping
* Configure Prometheus to discover and scrape endpoints for
kube-scheduler and kube-controller-manager via the authenticated
https ports, via bearer token
* Change firewall ports to allow Prometheus (on worker nodes)
to scrape kube-scheduler and kube-controller-manager targets
that run on controller(s) with hostNetwork
* Disable the insecure port on kube-scheduler
2021-08-10 21:25:19 -07:00
1a5949824c
Update etcd from v3.4.16 to v3.5.0
...
* Use multi-arch container image instead of a special
"-arm64" suffix on arm64
* https://github.com/etcd-io/etcd/releases/tag/v3.5.0
2021-08-04 22:10:07 -07:00
9bac641511
Update Kubernetes from v1.21.3 to v1.22.0
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#v1220
2021-08-04 22:09:19 -07:00
f03045f0dc
Update Cilium for cgroups v2 support
...
* On Fedora CoreOS, Cilium cross-node service IP load balancing
stopped working for a time (first observable as CoreDNS pods
located on worker nodes not being able to reach the kubernetes
API service 10.3.0.1). This turned out to have two parts:
* Fedora CoreOS switched to cgroups v2 by default. In our early
testing with cgroups v2, Calico (default) was used. With the
cgroups v2 change, SELinux policy denied some eBPF operations.
Since fixed in all Fedora CoreOS channels
* Cilium requires new mounts to support cgroups v2, which are
added here
* https://github.com/coreos/fedora-coreos-tracker/issues/292
* https://github.com/coreos/fedora-coreos-tracker/issues/881
* https://github.com/cilium/cilium/pull/16259
2021-07-24 10:36:47 -07:00
b603bbde3d
Update Butane Config from v1.2.0 to v1.4.0
...
* Rename Fedora CoreOS Config (FCC) to Butane Config
* Require any snippets customizations use version v1.4.0
* https://typhoon.psdn.io/advanced/customization/#hosts
2021-07-19 23:53:51 -07:00
fdade5b40c
Update poseidon/ct provider from v0.8.0 to v0.9.0
...
* Continue targeting Ignition v3.2.0 for some time
2021-07-18 09:05:02 -07:00
171fd2c998
Update Kubernetes from v1.21.2 to v1.21.3
...
* https://github.com/kubernetes/kubernetes/releases/tag/v1.21.3
2021-07-17 18:22:24 -07:00
3a71b2ccb1
Update Cilium from v1.10.1 to v1.10.2
...
* https://github.com/cilium/cilium/releases/tag/v1.10.2
2021-07-04 10:11:21 -07:00
d0e73b8174
Bump terraform-render-bootstrap
2021-06-27 18:11:43 -07:00
485feb82c4
Update CoreDNS from v1.8.0 to v1.8.4
...
* https://coredns.io/2021/01/20/coredns-1.8.1-release/
* https://coredns.io/2021/02/23/coredns-1.8.2-release/
* https://coredns.io/2021/02/24/coredns-1.8.3-release/
* https://coredns.io/2021/05/28/coredns-1.8.4-release/
2021-06-23 23:31:25 -07:00
0b276b6b7e
Update Kubernetes from v1.21.1 to v1.21.2
...
* https://github.com/kubernetes/kubernetes/releases/tag/v1.21.2
2021-06-17 16:15:20 -07:00
e8513e58bb
Add support for Terraform v1.0.0
...
* https://github.com/hashicorp/terraform/releases/tag/v1.0.0
2021-06-17 13:32:56 -07:00
d77343be3a
Workaround systemd 248 path units not working reliably
...
* On FCOS 34 / systemd 248, `kubelet.path` won't activate (stuck
waiting) when `/etc/kubernetes/kubeconfig` exists, even with
manual prodding of the file. The root cause isn't known, but
a workaround is to delay `/etc/kubernetes` directory creation
or to touch the directory later
* Fix DigitalOcean worker node kubelet.service being enabled
immediately. On bare-metal and DigitalOcean, the kubeconfig
should activate the Kubelet, so it doesn't crashloop needlessly
(nice to have, not required)
2021-06-16 10:19:39 -07:00
996bdd9112
Update Calico from v3.19.0 to v3.19.1
...
* https://docs.projectcalico.org/archive/v3.19/release-notes/
2021-06-02 14:51:15 -07:00
966fd280b0
Update Cilium from v0.10.0-rc1 to v0.10.0
...
* https://github.com/cilium/cilium/releases/tag/v1.10.0
2021-05-24 11:16:51 -07:00
e4e074c894
Update Cilium from v1.9.6 to v1.10.0-rc1
...
* Add multi-arch container images and arm64 support
* https://github.com/cilium/cilium/releases/tag/v1.10.0-rc1
2021-05-14 14:24:52 -07:00
d51da49925
Update docs for Kubernetes v1.21.1 and Terraform v0.15.x
2021-05-13 11:34:01 -07:00
2076a779a3
Update Kubernetes from v1.21.0 to v1.21.1
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#v1211
2021-05-13 11:23:26 -07:00
048094b256
Update etcd from v3.4.15 to v3.4.16
...
* https://github.com/etcd-io/etcd/blob/main/CHANGELOG-3.4.md
2021-05-13 10:53:04 -07:00
5f87eb3ec9
Update Fedora CoreOS Kubelet for cgroups v2
...
* Fedora CoreOS is beginning to switch from cgroups v1 to
cgroups v2 by default, which changes the sysfs hierarchy
* This will be needed when using a Fedora Coreos OS image
that enables cgroups v2 (`next` stream as of this writing)
Rel: https://github.com/coreos/fedora-coreos-tracker/issues/292
2021-04-26 11:48:58 -07:00
9c842395a8
Update Cilium from v1.9.5 to v1.9.6
...
* https://github.com/cilium/cilium/releases/tag/v1.9.6
2021-04-26 10:55:23 -07:00
67047ead08
Update Terraform version to allow v0.15.0
...
* Require Terraform version v0.13 <= x < v0.16
2021-04-16 09:46:01 -07:00
ebd9570ede
Update Fedora CoreOS Config version from v1.1.0 to v1.2.0
...
* Require [poseidon/ct](https://github.com/poseidon/terraform-provider-ct )
Terraform provider v0.8+
* Require any [snippets](https://typhoon.psdn.io/advanced/customization/#hosts )
customizations to update to v1.2.0
See upgrade [notes](https://typhoon.psdn.io/topics/maintenance/#upgrade-terraform-provider-ct )
2021-04-11 15:26:54 -07:00
34e8db7aae
Update static Pod manifests for Kubernetes v1.21.0
...
* https://github.com/poseidon/terraform-render-bootstrap/pull/257
2021-04-11 15:05:46 -07:00
d73621c838
Update Kubernetes from v1.20.5 to v1.21.0
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md#v1210
2021-04-08 21:44:31 -07:00
798ec9a92f
Change CNI config directory to /etc/cni/net.d
...
* Change CNI config directory from `/etc/kubernetes/cni/net.d`
to `/etc/cni/net.d` (Kubelet default)
* https://github.com/poseidon/terraform-render-bootstrap/pull/255
2021-04-02 00:03:48 -07:00
597ca4acce
Update CoreDNS from v1.7.0 to v1.8.0
...
* https://github.com/poseidon/terraform-render-bootstrap/pull/254
2021-03-20 16:47:25 -07:00
796149d122
Update Kubernetes from v1.20.4 to v1.20.5
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1205
2021-03-19 11:27:31 -07:00
a66bccd590
Update Cilium from v1.9.4 to v1.9.5
...
* https://github.com/cilium/cilium/releases/tag/v1.9.5
2021-03-14 11:48:22 -07:00
30b1edfcc6
Mark bootstrap token as sensitive in plan/apply
...
* Mark the bootstrap token as sensitive, which is useful when
Terraform is run in automated CI/CD systems to avoid showing
the token
* https://github.com/poseidon/terraform-render-bootstrap/pull/251
2021-03-14 11:32:35 -07:00
a4afe06b64
Update Calico from v3.17.3 to v3.18.1
...
* https://docs.projectcalico.org/archive/v3.18/release-notes/
2021-03-14 10:35:24 -07:00
170b768ad8
Add KUBELET_IMAGE to Fedora CoreOS bootstrap.service ( #945 )
...
* Align with Flatcar Linux `bootstrap.service`
2021-03-14 09:35:42 -07:00
a5c1a96df1
Update etcd from v3.4.14 to v3.4.15
...
* https://github.com/etcd-io/etcd/releases/tag/v3.4.15
2021-03-05 17:02:57 -08:00
6a091e245e
Remove Flatcar Linux Edge `os_image` option
...
* Flatcar Linux has not published an Edge channel image since
April 2020 and recently removed mention of the channel from
their documentation https://github.com/kinvolk/Flatcar/pull/345
* Users of Flatcar Linux Edge should move to the stable, beta, or
alpha channel, barring any alternate advice from upstream Flatcar
Linux
2021-02-20 16:09:54 -08:00
e76fe80b45
Update Kubernetes from v1.20.3 to v1.20.4
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1204
2021-02-19 00:02:07 -08:00
32853aaa7b
Update Kubernetes from v1.20.2 to v1.20.3
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1203
2021-02-17 22:29:33 -08:00
9671b1c734
Update flannel-cni from v0.4.1 to v0.4.2
...
* https://github.com/poseidon/flannel-cni/releases/tag/v0.4.2
2021-02-14 12:04:59 -08:00
18165d8076
Update Calico from v3.17.1 to v3.17.2
...
* https://github.com/projectcalico/calico/releases/tag/v3.17.2
2021-02-04 22:03:51 -08:00
50acf28ce5
Update Cilium from v1.9.3 to v1.9.4
...
* https://github.com/cilium/cilium/releases/tag/v1.9.4
2021-02-03 23:08:22 -08:00
ab793eb842
Update Cilium from v1.9.2 to v1.9.3
...
* https://github.com/cilium/cilium/releases/tag/v1.9.3
2021-01-26 17:13:52 -08:00
b74c958524
Update Cilium from v1.9.1 to v1.9.2
...
* https://github.com/cilium/cilium/releases/tag/v1.9.2
2021-01-20 22:06:45 -08:00
05f7df9e80
Update Kubernetes from v1.20.1 to v1.20.2
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1202
2021-01-13 17:46:51 -08:00
4220b9ce18
Add support for Terraform v0.14.4+
...
* Support Terraform v0.13.x and v0.14.4+
2021-01-12 21:43:12 -08:00
646bdd78e4
Update Kubernetes from v1.20.0 to v1.20.1
...
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1201
2020-12-19 12:56:28 -08:00
dc7be431e0
Remove iSCSI mounts from Kubelet
...
* Remove Kubelet `/etc/iscsi` and `iscsiadm` host mounts that
were added on bare-metal, since these no longer work on either
Fedora CoreOS or Flatcar Linux with newer `iscsiadm`
* These special mounts on bare-metal date back to #350 which
added them to provide a way to use iSCSI in Kubernetes v1.10
* Today, storage should be handled by external CSI providers
which handle different storage systems, which doesn't rely
on Kubelet storage utils
Close #907
2020-12-12 11:41:02 -08:00
Dalton Hubble
ajrpayne