mirror/typhoon
1
0
Fork 0
mirror of https://github.com/poseidon/typhoon synced 2024-09-28 06:50:02 +02:00
Code Issues
1,170 Commits 7 Branches 119 Tags 23 MiB
4d58be0816
Commit Graph

708 Commits

Author SHA1 Message Date
Dalton Hubble
4d58be0816 Update Prometheus from v2.25.0 to v2.25.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.1
 2021-03-14 09:43:15 -07:00
Dalton Hubble
5bc1cd28c3 Switch kube-state-metrics image from quay to k8s.gcr.io 
* kube-state-metrics is continuing publishing container images
to `k8s.gcr.io` instead of `quay.io`

Rel: https://github.com/kubernetes/kube-state-metrics/issues/1409
 2021-03-11 10:56:18 -08:00
Dalton Hubble
13fbac6c79 Update Grafana from v7.4.2 to v7.4.3 
* https://github.com/grafana/grafana/releases/tag/v7.4.3
 2021-03-05 17:19:54 -08:00
Dalton Hubble
a8fa4a9a06 Update node-exporter and kube-state-metrics 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-rc.0
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.2
 2021-03-05 17:13:45 -08:00
Dalton Hubble
a5c1a96df1 Update etcd from v3.4.14 to v3.4.15 
* https://github.com/etcd-io/etcd/releases/tag/v3.4.15
 2021-03-05 17:02:57 -08:00
Dalton Hubble
6a091e245e Remove Flatcar Linux Edge os_image option 
* Flatcar Linux has not published an Edge channel image since
April 2020 and recently removed mention of the channel from
their documentation https://github.com/kinvolk/Flatcar/pull/345
* Users of Flatcar Linux Edge should move to the stable, beta, or
alpha channel, barring any alternate advice from upstream Flatcar
Linux
 2021-02-20 16:09:54 -08:00
Dalton Hubble
ec389295fe Update Grafana from v7.4.0 to v7.4.2 
* https://github.com/grafana/grafana/releases/tag/v7.4.2
 2021-02-19 00:18:39 -08:00
Dalton Hubble
3c807f3478 Update Prometheus from v2.24.1 to v2.25.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.25.0
 2021-02-19 00:16:35 -08:00
Dalton Hubble
e76fe80b45 Update Kubernetes from v1.20.3 to v1.20.4 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1204
 2021-02-19 00:02:07 -08:00
Dalton Hubble
32853aaa7b Update Kubernetes from v1.20.2 to v1.20.3 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1203
 2021-02-17 22:29:33 -08:00
Dalton Hubble
c32a54db40 Update node-exporter from v1.0.1 to v1.1.1 
* https://github.com/prometheus/node_exporter/releases/tag/v1.1.1
 2021-02-14 14:30:28 -08:00
Dalton Hubble
9671b1c734 Update flannel-cni from v0.4.1 to v0.4.2 
* https://github.com/poseidon/flannel-cni/releases/tag/v0.4.2
 2021-02-14 12:04:59 -08:00
Dalton Hubble
3b933e1ab3 Update Grafana from v7.3.7 to v7.4.0 
* https://github.com/grafana/grafana/releases/tag/v7.4.0
 2021-02-07 21:42:18 -08:00
Dalton Hubble
58d8f6f505 Update Prometheus from v2.24.0 to v2.24.1 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.1
 2021-02-04 22:28:32 -08:00
Dalton Hubble
56853fe222 Update nginx-ingress from v0.43.0 to v0.44.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.44.0
 2021-02-04 22:19:58 -08:00
Dalton Hubble
18165d8076 Update Calico from v3.17.1 to v3.17.2 
* https://github.com/projectcalico/calico/releases/tag/v3.17.2
 2021-02-04 22:03:51 -08:00
Dalton Hubble
50acf28ce5 Update Cilium from v1.9.3 to v1.9.4 
* https://github.com/cilium/cilium/releases/tag/v1.9.4
 2021-02-03 23:08:22 -08:00
Dalton Hubble
ab793eb842 Update Cilium from v1.9.2 to v1.9.3 
* https://github.com/cilium/cilium/releases/tag/v1.9.3
 2021-01-26 17:13:52 -08:00
Dalton Hubble
b74c958524 Update Cilium from v1.9.1 to v1.9.2 
* https://github.com/cilium/cilium/releases/tag/v1.9.2
 2021-01-20 22:06:45 -08:00
Dalton Hubble
11c434915f Update Grafana from v7.3.6 to v7.3.7 
* https://github.com/grafana/grafana/releases/tag/v7.3.7
 2021-01-16 10:46:56 -08:00
Dalton Hubble
05f7df9e80 Update Kubernetes from v1.20.1 to v1.20.2 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1202
 2021-01-13 17:46:51 -08:00
Dalton Hubble
4220b9ce18 Add support for Terraform v0.14.4+ 
* Support Terraform v0.13.x and v0.14.4+
 2021-01-12 21:43:12 -08:00
Dalton Hubble
6a6af4aa16 Update Prometheus from v2.24.0-rc.0 to v2.24.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.0
 2021-01-12 20:49:18 -08:00
Dalton Hubble
3dcd10f3b8 Update Prometheus v2.23.0 to v2.24.0-rc.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.24.0-rc.0
 2021-01-01 13:49:28 -08:00
Dalton Hubble
22503993b9 Update nginx-ingress from v0.41.2 to v0.43.0 
* https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v0.43.0
* https://github.com/kubernetes/ingress-nginx/issues/6696
 2021-01-01 13:44:45 -08:00
Dalton Hubble
cf3aa8885b Update Prometheus rules and Grafana dashboards 
* Update Grafana from v7.3.5 to v7.3.6
 2020-12-19 14:56:42 -08:00
Dalton Hubble
ba61a137db Add notice about upstream Fedora CoreOS changes 
* Highlight that short-term, use of Fedora CoreOS will
require non-RSA SSH keys or a workaround snippet
 2020-12-19 14:10:42 -08:00
Dalton Hubble
646bdd78e4 Update Kubernetes from v1.20.0 to v1.20.1 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1201
 2020-12-19 12:56:28 -08:00
Dalton Hubble
c163fbbbcd Update docs and README for release 2020-12-12 12:31:35 -08:00
Dalton Hubble
dc7be431e0 Remove iSCSI mounts from Kubelet 
* Remove Kubelet `/etc/iscsi` and `iscsiadm` host mounts that
were added on bare-metal, since these no longer work on either
Fedora CoreOS or Flatcar Linux with newer `iscsiadm`
* These special mounts on bare-metal date back to #350 which
added them to provide a way to use iSCSI in Kubernetes v1.10
* Today, storage should be handled by external CSI providers
which handle different storage systems, which doesn't rely
on Kubelet storage utils

Close #907
 2020-12-12 11:41:02 -08:00
Dalton Hubble
86e0f806b3 Revert "Add support for Terraform v0.14.x" 
This reverts commit 968febb050.
 2020-12-11 00:47:57 -08:00
Dalton Hubble
96172ad269 Update Grafana from v7.3.4 to v7.3.5 
* https://github.com/grafana/grafana/releases/tag/v7.3.5
 2020-12-11 00:24:43 -08:00
Dalton Hubble
ee9ce3d0ab Update Calico from v3.17.0 to v3.17.1 
* https://github.com/projectcalico/calico/releases/tag/v3.17.1
 2020-12-10 22:48:38 -08:00
Dalton Hubble
a8b8a9b454 Update Kubernetes from v1.20.0-rc.0 to v1.20.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1200
 2020-12-08 18:28:13 -08:00
Dalton Hubble
968febb050 Add support for Terraform v0.14.x 
* Support Terraform v0.13.x and v0.14.x
 2020-12-07 00:22:38 -08:00
Dalton Hubble
bee455f83a Update Cilium from v1.9.0 to v1.9.1 
* https://github.com/cilium/cilium/releases/tag/v1.9.1
 2020-12-04 14:14:18 -08:00
Dalton Hubble
3e89ea1b4a Promote Fedora CoreOS bare-metal to stable 
* Fedora CoreOS is a good choice for use on bare-metal
 2020-12-04 14:02:55 -08:00
Dalton Hubble
e77dd6ecd4 Update Kubernetes from v1.19.4 to v1.20.0-rc.0 
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#v1200-rc0
 2020-12-03 16:01:28 -08:00
Dalton Hubble
804dfea0f9 Add kubeconfig's for kube-scheduler and kube-controller-manager 
* Generate TLS client certificates for `kube-scheduler` and
`kube-controller-manager` with `system:kube-scheduler` and
`system:kube-controller-manager` CNs
* Template separate kubeconfigs for kube-scheduler and
kube-controller manager (`scheduler.conf` and
`controller-manager.conf`). Rename admin for clarity
* Before v1.16.0, Typhoon scheduled a self-hosted control
plane, which allowed the steady-state kube-scheduler and
kube-controller-manager to use a scoped ServiceAccount.
With a static pod control plane, separate CN TLS client
certificates are the nearest equiv.
* https://kubernetes.io/docs/setup/best-practices/certificates/
* Remove unused Kubelet certificate, TLS bootstrap is used
instead
 2020-12-01 22:02:15 -08:00
Dalton Hubble
8ba23f364c Add TokenReview and TokenRequestProjection flags 
* Add kube-apiserver flags for TokenReview and TokenRequestProjection
(beta, defaults on) to allow using Service Account Token Volume
Projection to create and mount service account tokens tied to a Pod's
lifecycle

Rel:

* https://github.com/poseidon/terraform-render-bootstrap/pull/231
* https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection
 2020-12-01 20:02:33 -08:00
Dalton Hubble
f6025666eb Update etcd from v3.4.12 to v3.4.14 
* https://github.com/etcd-io/etcd/releases/tag/v3.4.14
 2020-11-29 20:04:25 -08:00
Dalton Hubble
85eb502f19 Update Prometheus from v2.23.0-rc.0 to v2.23.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.23.0
 2020-11-29 19:59:27 -08:00
Dalton Hubble
fa3184fb9c Relax terraform-provider-ct version constraint 
* Allow terraform-provider-ct versions v0.6+ (e.g. v0.7.1)
Before, only v0.6.x point updates were allowed
* Update terraform-provider-ct to v0.7.1 in docs
* READ the docs before updating terraform-provider-ct,
as changing worker user-data is handled differently
by different cloud platforms
 2020-11-29 19:51:26 -08:00
Dalton Hubble
22565e57e0 Update kube-state-metrics from v2.0.0-alpha.2 to v2.0.0-alpha.3 
* https://github.com/kubernetes/kube-state-metrics/releases/tag/v2.0.0-alpha.3
 2020-11-25 14:30:11 -08:00
Dalton Hubble
026e1f3648 Update Grafana from v7.3.3 to v7.3.4 
* https://github.com/grafana/grafana/releases/tag/v7.3.4
 2020-11-25 14:25:15 -08:00
Dalton Hubble
ae548ce213 Update Calico from v3.16.5 to v3.17.0 
* Enable Calico MTU auto-detection
* Remove [workaround](https://github.com/poseidon/typhoon/pull/724) to
Calico cni-plugin [issue](https://github.com/projectcalico/cni-plugin/issues/874)

Rel: https://github.com/poseidon/terraform-render-bootstrap/pull/230
 2020-11-25 14:22:58 -08:00
Dalton Hubble
e826b49648 Update Matchbox profile to use initramfs and rootfs images 
* Fedora CoreOS stable (after Oct 6) ships separate initramfs
and rootfs images, used as initrd's
* Update profiles to match the Matchbox examples, which have
already switched to the new profile and to remove the unused
kernel args
* Requires Fedora CoreOS version which ships rootfs images
(e.g. stable 32.20200923.3.0 or later)

Rel:

* https://github.com/coreos/fedora-coreos-tracker/issues/390#issuecomment-661986987
* da0df01763 (diff-4541f7b7c174f6ae6270135942c1c65ed9e09ebe81239709f5a9fb34e858ddcf)

Supercedes https://github.com/poseidon/typhoon/pull/888
 2020-11-25 14:13:39 -08:00
Dalton Hubble
fa8f68f50e Fix Fedora CoreOS AWS AMI query in non-US regions 
* A `aws_ami` data source will fail a Terraform plan
if no matching AMI is found, even if the AMI is not
used. ARM64 images are only published to a few US
regions, so the `aws_ami` data query could fail when
creating Fedora CoreOS AWS clusters in non-US regions
* Condition `aws_ami` on whether experimental arch
`arm64` is chosen
* Recent regression introduced in v1.19.4
https://github.com/poseidon/typhoon/pull/875

Closes https://github.com/poseidon/typhoon/issues/886
 2020-11-25 11:32:05 -08:00
Dalton Hubble
ba8d972c76 Update Prometheus from v2.22.2 to v2.23.0-rc.0 
* https://github.com/prometheus/prometheus/releases/tag/v2.23.0-rc.0
 2020-11-24 10:54:42 -08:00
Dalton Hubble
c0347ca0c6 Set kubeconfig and asset_dist as sensitive 
* Mark `kubeconfig` and `asset_dist` as `sensitive` to
prevent the Terraform CLI displaying these values, esp.
for CI systems
* In particular, external tools or tfvars style uses (not
recommended) reportedly display all outputs and are improved
by setting sensitive
* For Terraform v0.14, outputs referencing sensitive fields
must also be annotated as sensitive

Closes https://github.com/poseidon/typhoon/issues/884
 2020-11-23 11:41:55 -08:00