-
Notifications
You must be signed in to change notification settings - Fork 511
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #2699 from stmcginnis/k8s-1.25
Add k8s 1.25 variants
- Loading branch information
Showing
125 changed files
with
1,036 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
[package] | ||
# "." is not allowed in crate names, but we want a friendlier name for the | ||
# directory and spec file, so we override it below. | ||
name = "kubernetes-1_25" | ||
version = "0.1.0" | ||
edition = "2018" | ||
publish = false | ||
build = "build.rs" | ||
|
||
[lib] | ||
path = "pkg.rs" | ||
|
||
[package.metadata.build-package] | ||
package-name = "kubernetes-1.25" | ||
|
||
[[package.metadata.build-package.external-files]] | ||
url = "https://distro.eks.amazonaws.com/kubernetes-1-25/releases/2/artifacts/kubernetes/v1.25.5/kubernetes-src.tar.gz" | ||
sha512 = "d6b238dd8cf957006959d5c16ee1e2943c087d269c30c4e936c9af41d3568b4b696200bc416a3b0d9f212f5fe4c9a5a9428b7337adc2be9b89a0914e618abf94" | ||
# RPM BuildRequires | ||
[build-dependencies] | ||
glibc = { path = "../glibc" } | ||
|
||
# RPM Requires | ||
[dependencies] | ||
aws-signing-helper = { path = "../aws-signing-helper" } | ||
ecr-credential-provider = { path = "../ecr-credential-provider" } | ||
# `conntrack-tools`, `containerd` and `findutils` are only needed at runtime, | ||
# and are pulled in by `release`. | ||
# conntrack-tools = { path = "../conntrack-tools" } | ||
# containerd = { path = "../containerd" } | ||
# findutils = { path = "../findutils" } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
use std::process::{exit, Command}; | ||
|
||
fn main() -> Result<(), std::io::Error> { | ||
let ret = Command::new("buildsys").arg("build-package").status()?; | ||
if !ret.success() { | ||
exit(1); | ||
} | ||
Ok(()) | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,62 @@ | ||
[clarify."github.com/JeffAshton/win_pdh"] | ||
expression = "BSD-3-Clause" | ||
license-files = [ | ||
{ path = "LICENSE", hash = 0xb221dcc9 }, | ||
] | ||
|
||
[clarify."github.com/daviddengcn/go-colortext"] | ||
expression = "BSD-3-Clause AND MIT" | ||
license-files = [ | ||
{ path = "LICENSE", hash = 0x9769fae1 }, | ||
] | ||
|
||
[clarify."github.com/ghodss/yaml"] | ||
expression = "MIT AND BSD-3-Clause" | ||
license-files = [ | ||
{ path = "LICENSE", hash = 0xcdf3ae00 }, | ||
] | ||
|
||
[clarify."github.com/heketi/heketi"] | ||
# kubernetes only uses code that is under LGPLv3+/Apache 2.0, not the code that is GPLv2+/LGPLv3+ | ||
expression = "LGPL-3.0-or-later OR Apache-2.0" | ||
license-files = [ | ||
{ path = "LICENSE", hash = 0x3c4b96d1 }, | ||
{ path = "LICENSE-APACHE2", hash = 0x438c8616 }, | ||
{ path = "COPYING-LGPLV3", hash = 0xf0bccb3a }, | ||
] | ||
skip-files = [ "COPYING-GPLV2" ] | ||
|
||
[clarify."github.com/go-bindata/go-bindata"] | ||
expression = "CC0-1.0" | ||
license-files = [ | ||
{ path = "LICENSE", hash = 0x393fafd6 }, | ||
] | ||
|
||
[clarify."github.com/miekg/dns"] | ||
expression = "BSD-3-Clause" | ||
license-files = [ | ||
{ path = "COPYRIGHT", hash = 0xe41dd36c }, | ||
{ path = "LICENSE", hash = 0xfc8f12ff }, | ||
] | ||
|
||
[clarify."sigs.k8s.io/yaml"] | ||
expression = "MIT AND BSD-3-Clause" | ||
license-files = [ | ||
{ path = "LICENSE", hash = 0xcdf3ae00 }, | ||
] | ||
|
||
[clarify."honnef.co/go/tools"] | ||
expression = "MIT AND BSD-3-Clause AND Apache-2.0" | ||
license-files = [ | ||
{ path = "LICENSE", hash = 0xad378ed2 }, | ||
{ path = "LICENSE-THIRD-PARTY", hash = 0x546425eb }, | ||
{ path = "lint/LICENSE", hash = 0xc6b58232 }, | ||
{ path = "ssa/LICENSE", hash = 0xe656fb62 }, | ||
] | ||
|
||
[clarify."github.com/storageos/go-api"] | ||
expression = "MIT AND BSD-2-Clause" | ||
license-files = [ | ||
{ path = "LICENCE", hash = 0x67a6861e }, | ||
] | ||
skip-files = ["licence.go", "types/licence.go"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
apiVersion: kubelet.config.k8s.io/v1 | ||
kind: CredentialProviderConfig | ||
providers: | ||
{{#if settings.kubernetes.credential-providers}} | ||
{{#each settings.kubernetes.credential-providers}} | ||
{{#if this.enabled}} | ||
- name: {{@key}} | ||
matchImages: | ||
{{#each this.image-patterns}} | ||
- "{{this}}" | ||
{{/each}} | ||
defaultCacheDuration: "{{default "12h" this.cache-duration}}" | ||
apiVersion: credentialprovider.kubelet.k8s.io/v1alpha1 | ||
{{#if (eq @key "ecr-credential-provider")}} | ||
env: | ||
- name: HOME | ||
value: /root | ||
{{#if settings.aws.profile}} | ||
- name: AWS_PROFILE | ||
value: {{settings.aws.profile}} | ||
{{/if}} | ||
{{/if}} | ||
{{/if}} | ||
{{/each}} | ||
{{/if}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,2 @@ | ||
[Service] | ||
ExecStartPre=/bin/ln -sf /run/containerd/containerd.sock /run/dockershim.sock |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
[Unit] | ||
Description=Kubernetes PKI private directory (/etc/kubernetes/pki/private) | ||
DefaultDependencies=no | ||
Conflicts=umount.target | ||
Before=local-fs.target umount.target | ||
After=selinux-policy-files.service | ||
Wants=selinux-policy-files.service | ||
|
||
[Mount] | ||
What=tmpfs | ||
Where=/etc/kubernetes/pki/private | ||
Type=tmpfs | ||
Options=nosuid,nodev,noexec,noatime,context=system_u:object_r:secret_t:s0,mode=0700 | ||
|
||
[Install] | ||
WantedBy=preconfigured.target |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,22 @@ | ||
--- | ||
apiVersion: v1 | ||
kind: Config | ||
clusters: | ||
- cluster: | ||
{{#if settings.kubernetes.api-server}} | ||
certificate-authority: "/etc/kubernetes/pki/ca.crt" | ||
server: "{{settings.kubernetes.api-server}}" | ||
{{/if}} | ||
name: kubernetes | ||
contexts: | ||
- context: | ||
cluster: kubernetes | ||
user: kubelet | ||
name: kubelet | ||
current-context: kubelet | ||
users: | ||
- name: kubelet | ||
{{#if settings.kubernetes.bootstrap-token}} | ||
user: | ||
token: "{{settings.kubernetes.bootstrap-token}}" | ||
{{/if}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,130 @@ | ||
--- | ||
kind: KubeletConfiguration | ||
apiVersion: kubelet.config.k8s.io/v1beta1 | ||
{{#if settings.kubernetes.standalone-mode}} | ||
address: 127.0.0.1 | ||
authentication: | ||
anonymous: | ||
enabled: true | ||
webhook: | ||
enabled: false | ||
authorization: | ||
mode: AlwaysAllow | ||
{{else}} | ||
address: 0.0.0.0 | ||
authentication: | ||
anonymous: | ||
enabled: false | ||
webhook: | ||
cacheTTL: 2m0s | ||
enabled: true | ||
x509: | ||
clientCAFile: "/etc/kubernetes/pki/ca.crt" | ||
authorization: | ||
mode: Webhook | ||
webhook: | ||
cacheAuthorizedTTL: 5m0s | ||
cacheUnauthorizedTTL: 30s | ||
{{/if}} | ||
clusterDomain: {{settings.kubernetes.cluster-domain}} | ||
{{#if settings.kubernetes.cluster-dns-ip}} | ||
clusterDNS: | ||
{{#each settings.kubernetes.cluster-dns-ip}} | ||
- {{this}} | ||
{{else}} | ||
- {{settings.kubernetes.cluster-dns-ip}} | ||
{{/each}} | ||
{{/if}} | ||
{{#if settings.kubernetes.eviction-hard}} | ||
evictionHard: | ||
{{#each settings.kubernetes.eviction-hard}} | ||
{{@key}}: "{{this}}" | ||
{{/each}} | ||
{{/if}} | ||
{{#if settings.kubernetes.allowed-unsafe-sysctls}} | ||
allowedUnsafeSysctls: {{settings.kubernetes.allowed-unsafe-sysctls}} | ||
{{/if}} | ||
{{#if settings.kubernetes.registry-qps includeZero=true}} | ||
registryPullQPS: {{settings.kubernetes.registry-qps}} | ||
{{/if}} | ||
{{#if settings.kubernetes.registry-burst includeZero=true}} | ||
registryBurst: {{settings.kubernetes.registry-burst}} | ||
{{/if}} | ||
{{#if settings.kubernetes.event-qps includeZero=true}} | ||
eventRecordQPS: {{settings.kubernetes.event-qps}} | ||
{{/if}} | ||
{{#if settings.kubernetes.event-burst includeZero=true}} | ||
eventBurst: {{settings.kubernetes.event-burst}} | ||
{{/if}} | ||
kubeAPIQPS: {{default 10 settings.kubernetes.kube-api-qps}} | ||
kubeAPIBurst: {{default 20 settings.kubernetes.kube-api-burst}} | ||
kubeReserved: | ||
cpu: "{{kube_reserve_cpu settings.kubernetes.kube-reserved.cpu}}" | ||
{{#if settings.kubernetes.kube-reserved.memory}} | ||
memory: "{{settings.kubernetes.kube-reserved.memory}}" | ||
{{else}} | ||
{{#if settings.kubernetes.max-pods}} | ||
memory: "{{kube_reserve_memory settings.kubernetes.max-pods settings.kubernetes.kube-reserved.memory}}" | ||
{{/if}} | ||
{{/if}} | ||
ephemeral-storage: "{{default "1Gi" settings.kubernetes.kube-reserved.ephemeral-storage}}" | ||
kubeReservedCgroup: "/runtime" | ||
{{#if settings.kubernetes.system-reserved}} | ||
systemReserved: | ||
{{#each settings.kubernetes.system-reserved}} | ||
{{@key}}: "{{this}}" | ||
{{/each}} | ||
systemReservedCgroup: "/system" | ||
{{/if}} | ||
cpuManagerPolicy: {{default "none" settings.kubernetes.cpu-manager-policy}} | ||
{{#if settings.kubernetes.cpu-manager-reconcile-period}} | ||
cpuManagerReconcilePeriod: {{settings.kubernetes.cpu-manager-reconcile-period}} | ||
{{/if}} | ||
{{#if settings.kubernetes.topology-manager-scope}} | ||
topologyManagerScope: {{settings.kubernetes.topology-manager-scope}} | ||
{{/if}} | ||
{{#if settings.kubernetes.topology-manager-policy}} | ||
topologyManagerPolicy: {{settings.kubernetes.topology-manager-policy}} | ||
{{/if}} | ||
{{#if settings.kubernetes.pod-pids-limit includeZero=true}} | ||
podPidsLimit: {{settings.kubernetes.pod-pids-limit}} | ||
{{/if}} | ||
{{#if settings.kubernetes.image-gc-high-threshold-percent includeZero=true}} | ||
imageGCHighThresholdPercent: {{settings.kubernetes.image-gc-high-threshold-percent}} | ||
{{/if}} | ||
{{#if settings.kubernetes.image-gc-low-threshold-percent includeZero=true}} | ||
imageGCLowThresholdPercent: {{settings.kubernetes.image-gc-low-threshold-percent}} | ||
{{/if}} | ||
{{#if settings.kubernetes.provider-id}} | ||
providerID: {{settings.kubernetes.provider-id}} | ||
{{/if}} | ||
resolvConf: "/etc/resolv.conf" | ||
hairpinMode: hairpin-veth | ||
readOnlyPort: 0 | ||
cgroupDriver: systemd | ||
cgroupRoot: "/" | ||
runtimeRequestTimeout: 15m | ||
featureGates: | ||
RotateKubeletServerCertificate: true | ||
CSIMigration: true | ||
CSIMigrationAWS: true | ||
CSIMigrationvSphere: true | ||
protectKernelDefaults: true | ||
serializeImagePulls: false | ||
{{#if (and (default "" settings.kubernetes.server-certificate) (default "" settings.kubernetes.server-key))}} | ||
tlsCertFile: "/etc/kubernetes/pki/kubelet-server.crt" | ||
tlsPrivateKeyFile: "/etc/kubernetes/pki/private/kubelet-server.key" | ||
{{else}} | ||
serverTLSBootstrap: {{settings.kubernetes.server-tls-bootstrap}} | ||
{{/if}} | ||
tlsCipherSuites: | ||
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | ||
volumePluginDir: "/var/lib/kubelet/plugins/volume/exec" | ||
maxPods: {{default 110 settings.kubernetes.max-pods}} | ||
staticPodPath: "/etc/kubernetes/static-pods/" | ||
{{#if settings.kubernetes.container-log-max-size includeZero=true}} | ||
containerLogMaxSize: {{settings.kubernetes.container-log-max-size}} | ||
{{/if}} | ||
{{#if settings.kubernetes.container-log-max-files includeZero=true}} | ||
containerLogMaxFiles: {{settings.kubernetes.container-log-max-files}} | ||
{{/if}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
NODE_IP={{settings.kubernetes.node-ip}} | ||
NODE_LABELS={{join_map "=" "," "no-fail-if-missing" settings.kubernetes.node-labels}} | ||
NODE_TAINTS={{join_node_taints settings.kubernetes.node-taints}} | ||
POD_INFRA_CONTAINER_IMAGE={{settings.kubernetes.pod-infra-container-image}} |
Oops, something went wrong.