517 Commits

Author SHA1 Message Date
Dalton Hubble
f04e07c001 Update kube-apiserver runtime-config flags
* MutatingAdmissionPolicy is available as a beta and alpha API
2025-11-23 16:05:07 -08:00
dghubble-renovate[bot]
a589c32870 Bump actions/checkout action from v5 to v6 2025-11-21 09:57:50 -08:00
Dalton Hubble
3c8c071333 Update Kubernetes from v1.34.1 to v1.34.2
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md
2025-11-21 09:30:14 -08:00
Dalton Hubble
a4e9ef0430 Update Kubernetes components from v1.33.1 to v1.34.1
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md
2025-11-21 09:14:02 -08:00
dependabot[bot]
01667f6904 Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-24 21:31:06 -07:00
Dalton Hubble
c7e2a637d7 Rollback Cilium from v1.17.6 to v1.17.5
* Cilium v1.17.6 is broken, see https://github.com/cilium/cilium/issues/40571
2025-07-27 14:20:21 -07:00
Dalton Hubble
cd82a41654 Update Kubernetes from v1.33.2 to v1.33.3
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1333
2025-07-19 09:48:16 -07:00
Dalton Hubble
9af5837c35 Update Cilium and flannel container images 2025-06-29 17:30:21 -07:00
Dalton Hubble
36d543051b Update Kubernetes from v1.33.1 to v1.33.2
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1332
2025-06-29 17:20:32 -07:00
Dalton Hubble
2c7e627201 Update Kubernetes from v1.33.0 to v1.33.1
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1331
2025-05-24 20:22:11 -07:00
Dalton Hubble
18eb9cded5 Update Kubernetes from v1.32.3 to v1.33.0
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1330
2025-05-06 19:59:01 -07:00
Dalton Hubble
1e4b00eab9 Update Cilium and flannel container images
* Bump component images for those using the builtin bootstrap
2025-03-18 20:08:24 -07:00
Dalton Hubble
209e02b4f2 Update Kubernetes from v1.32.1 to v1.32.3
* Update Cilium from v1.16.5 to v1.17.1 as well
2025-03-12 21:06:46 -07:00
Dalton Hubble
c50071487c Add service_account_issuer variable for kube-apiserver
* Allow the service account token issuer to be adjusted or served
from a public bucket or static cache
* Output the public key used to sign service account tokens so that
it can be used to compute JWKS (JSON Web Key Sets) if desired

Docs: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery
2025-02-07 10:58:54 -08:00
Dalton Hubble
997f6012b5 Update Kubernetes from v1.32.0 to v1.32.1
* Enable the Kubernetes MutatingAdmissionPolicy alpha via feature gate
* Update CoreDNS from v1.11.4 to v1.12.0
* Update flannel from v0.26.2 to v0.26.3

Docs: https://kubernetes.io/docs/reference/access-authn-authz/mutating-admission-policy/
2025-01-20 15:23:22 -08:00
Dalton Hubble
3edb0ae646 Change flannel port from 4789 to 8472
* flannel and Cilium default to UDP 8472 for VXLAN traffic to
avoid conflicts with other VXLAN usage (e.g. Open vSwith)
* Aligning flannel and Cilium to use the same vxlan port makes
firewall rules or security policies simpler across clouds
2024-12-30 11:59:36 -08:00
Dalton Hubble
33f8d2083c Remove calico_manifests from assets_dist outputs 2024-12-28 20:37:28 -08:00
Dalton Hubble
79b8ae1280 Remove Calico and associated variables
* Drop support for Calico CNI
2024-12-28 20:34:29 -08:00
Dalton Hubble
0d3f17393e Change the default Pod CIDR to 10.20.0.0/14
* Change the default Pod CIDR from 10.2.0.0/16 to 10.20.0.0/14
(10.20.0.0 - 10.23.255.255) to support 1024 nodes by default
* Most CNI providers divide the Pod CIDR so that each node has
a /24 to allocate to local pods (256). The previous `10.2.0.0/16`
default only fits 256 /24's so 256 nodes were supported without
customizing the pod_cidr
2024-12-23 10:16:42 -08:00
Dalton Hubble
c775b4de9a Update Kubernetes from v1.31.4 to v1.32.0
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1320
2024-12-20 16:58:35 -08:00
Dalton Hubble
fbe7fa0a57 Update Kubernetes from v1.31.3 to v1.31.4
* Update flannel from v0.26.0 to v0.26.2
* Update Cilium from v1.16.4 to v1.16.5
2024-12-20 15:06:55 -08:00
Dalton Hubble
e6a1c7bccf Update Kubernetes from v1.31.2 to v1.31.3
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1313
2024-11-24 08:40:22 -08:00
Dalton Hubble
95203db11c Update Kubernetes from v1.31.1 to v1.31.2
* Update Cilium from v1.16.1 to v1.16.3
* Update flannel from v0.25.6 to v0.26.0
2024-10-26 08:30:38 -07:00
Dalton Hubble
1cfc654494 Update Kubernetes from v1.30.0 to v1.30.1
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1311
2024-09-20 14:29:33 -07:00
Dalton Hubble
1ddecb1cef Change Cilium configuration to use kube-proxy replacement
* Skip creating the kube-proxy DaemonSet when Cilium is chosen
2024-08-23 07:15:18 -07:00
Dalton Hubble
0b78c87997 Fix flannel-cni container image version to v0.4.2
* This was mistakenly bumped to v0.4.4 which doesn't exist

Rel: https://github.com/poseidon/terraform-render-bootstrap/pull/379
2024-08-22 19:19:37 -07:00
Dalton Hubble
7e8551750c Update Kubernetes from v1.30.4 to v1.31.0
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1310
2024-08-17 08:02:30 -07:00
Dalton Hubble
8b6a3a4c0d Update Kubernetes from v1.30.3 to v1.30.4
* Update Cilium from v1.16.0 to v1.16.1
2024-08-16 08:21:49 -07:00
Dalton Hubble
66d8fe3a4d Update CoreDNS and Cilium components
* Update CoreDNS from v1.11.1 to v1.11.3
* Update Cilium from v1.15.7 to v1.16.0
2024-08-04 21:03:23 -07:00
Dalton Hubble
45b6b7e877 Rename context in kubeconfig-admin
* Use the cluster_name as the kubeconfig context, cluster,
and user. Drop the trailing -context suffix
2024-08-04 20:43:03 -07:00
Dalton Hubble
1609060f4f Update Kubernetes from v1.30.2 to v1.30.3
* Update builtin Cilium manifests from v1.15.6 to v1.15.7
* Update builtin flannel manifests from v0.25.4 to v0.25.5
2024-07-20 10:59:20 -07:00
Dalton Hubble
886f501bf7 Update Kubernetes from v1.30.1 to v1.30.2
* Update CoreDNS from v1.9.4 to v1.11.1
* Update Cilium from v1.15.5 to v1.15.6
* Update flannel from v0.25.1 to v0.25.4
2024-06-17 08:11:41 -07:00
Dalton Hubble
e1b1e0c75e Update Cilium from v1.15.4 to v1.15.5
* https://github.com/cilium/cilium/releases/tag/v1.15.5
2024-05-19 16:36:55 -07:00
Dalton Hubble
a54fe54d98 Extend components variable with flannel, calico, and cilium
* By default the `networking` CNI provider is pre-installed,
but the component variable provides an extensible mechanism
to skip installing these components
* Validate that networking can only be set to one of flannel,
calico, or cilium
2024-05-18 14:56:44 -07:00
Dalton Hubble
452bcf379d Update Kubernetes from v1.30.0 to v1.30.1
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1301
2024-05-15 21:56:50 -07:00
Dalton Hubble
990286021a Organize CoreDNS and kube-proxy manifests so they're optional
* Add a `coredns` variable to configure the CoreDNS manifests,
with an `enable` field to determine whether CoreDNS manifests
are applied to the cluster during provisioning (default true)
* Add a `kube-proxy` variable to configure kube-proxy manifests,
with an `enable` field to determine whether the kube-proxy
Daemonset is applied to the cluster during provisioning (default
true)
* These optional allow for provisioning clusters without CoreDNS
or kube-proxy, so these components can be customized or managed
through separate plan/apply processes or automation
2024-05-12 18:05:55 -07:00
Dalton Hubble
baf406f261 Update Cilium and flannel container images
* Update Cilium from v1.15.3 to v1.25.4
* Update flannel from v0.24.4 to v0.25.1
2024-05-12 08:26:50 -07:00
dghubble-renovate[bot]
2bb4ec5bfd Bump provider tls from 3.4.0 to v4 2024-05-04 09:00:14 -07:00
Dalton Hubble
d233e90754 Update Kubernetes from v1.29.3 to v1.30.0
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1300
2024-04-23 20:43:33 -07:00
Dalton Hubble
959b9ea04d Update Calico and Cilium container image versions
* Update Cilium from v1.15.2 to v1.15.3
* Update Calico from v3.27.2 to v3.27.3
2024-04-03 22:43:55 -07:00
Dalton Hubble
9145a587b3 Update Kubernetes from v1.29.2 to v1.29.3
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v1293
2024-03-23 00:45:02 -07:00
Dalton Hubble
5dfa185b9d Update Cilium and flannel container image versions
* https://github.com/cilium/cilium/releases/tag/v1.15.2
* https://github.com/flannel-io/flannel/releases/tag/v0.24.4
2024-03-22 11:12:32 -07:00
Dalton Hubble
e9d52a997e Update Calico from v2.26.3 to v2.27.2
* Calico update fixes https://github.com/projectcalico/calico/issues/8372
2024-02-25 12:01:23 -08:00
Dalton Hubble
da65b4816d Update Cilium from v1.14.3 to v1.15.1
* https://github.com/cilium/cilium/releases/tag/v1.15.1
2024-02-23 22:46:20 -08:00
Dalton Hubble
2909ea9da3 Update flannel from v0.22.3 to v0.24.2
* https://github.com/flannel-io/flannel/releases/tag/v0.24.2
2024-02-18 16:13:19 -08:00
Dalton Hubble
763f56d0a5 Update Kubernetes from v1.29.1 to v1.29.2
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v1292
2024-02-18 15:46:02 -08:00
Dalton Hubble
acc7460fcc Update Kubernetes from v1.29.0 to v1.29.1
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v1291
2024-02-04 10:43:58 -08:00
Dalton Hubble
f0d22ec895 Update Kubernetes from v1.28.4 to v1.29.0
* https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v1290
2023-12-22 09:01:31 -08:00
Dalton Hubble
a6e637d196 Update Kubernetes from v1.28.3 to v1.28.4 2023-11-21 06:11:30 -08:00
dependabot[bot]
521cf9604f Bump hashicorp/setup-terraform from 2 to 3
Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) from 2 to 3.
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/setup-terraform/compare/v2...v3)

---
updated-dependencies:
- dependency-name: hashicorp/setup-terraform
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-31 09:10:42 -07:00