Promote dev to alpha

cluster/etcd-cluster.yaml

@@ -78,8 +78,16 @@ Resources:
     DeletionPolicy: Retain
     Properties:
       BucketName: "{{Arguments.EtcdS3Backup}}"
+      LifecycleConfiguration:
+        Rules:
+          - AbortIncompleteMultipartUpload:
+              DaysAfterInitiation: 1
+            ExpirationInDays: 7
+            NoncurrentVersionExpirationInDays: 1
+            Prefix: ""
+            Status: Enabled
       VersioningConfiguration:
-        Status: Enabled
+        Status: Suspended
   EtcdRole:
     Type: AWS::IAM::Role
     Properties:

cluster/manifests/cluster-autoscaler/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: kube-system
   labels:
     application: cluster-autoscaler
-    version: v0.10
+    version: v0.11
 spec:
   replicas: 1
   selector:
@@ -15,7 +15,7 @@ spec:
     metadata:
       labels:
         application: cluster-autoscaler
-        version: v0.10
+        version: v0.11
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
         iam.amazonaws.com/role: "{{ .LocalID }}-app-autoscaler"

cluster/manifests/flannel/daemonset.yaml

@@ -0,0 +1,81 @@
+apiVersion: extensions/v1beta1
+kind: DaemonSet
+metadata:
+  name: kube-flannel
+  namespace: kube-system
+  labels:
+    application: flannel
+    version: v0.9.1
+spec:
+  updateStrategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      application: flannel
+  template:
+    metadata:
+      labels:
+        application: flannel
+        version: v0.9.1
+      annotations:
+        scheduler.alpha.kubernetes.io/critical-pod: ''
+    spec:
+      initContainers:
+      - name: etcdctl
+        image: quay.io/coreos/etcd:v3.2.10
+        args:
+        - etcdctl
+        - --endpoint=http://127.0.0.1:2379
+        - set
+        - /coreos.com/network/config
+        - '{"Network": "10.2.0.0/16", "Backend": {"Type": "vxlan"}}'
+        resources:
+          limits:
+            cpu: 100m
+            memory: 100Mi
+          requests:
+            cpu: 25m
+            memory: 25Mi
+      containers:
+      - name: kube-flannel
+        image: quay.io/coreos/flannel:v0.9.1
+        args:
+        - --etcd-endpoints=http://127.0.0.1:2379
+        - --iface=eth0
+        - --ip-masq
+        - --healthz-ip=127.0.0.1
+        - --healthz-port=7978
+        - --v=2
+        resources:
+          limits:
+            cpu: 100m
+            memory: 100Mi
+          requests:
+            cpu: 25m
+            memory: 25Mi
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - name: runflannel
+          mountPath: /run/flannel
+      hostNetwork: true
+      tolerations:
+      - operator: Exists
+        effect: NoSchedule
+      - operator: Exists
+        effect: NoExecute
+      - operator: Exists
+        key: CriticalAddonsOnly
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: flannel
+                operator: NotIn
+                values:
+                - local
+      volumes:
+      - name: runflannel
+        hostPath:
+          path: /run/flannel

cluster/manifests/ingress-controller/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: kube-system
   labels:
     application: kube-ingress-aws-controller
-    version: v0.4.0
+    version: v0.4.2
 spec:
   replicas: 1
   selector:
@@ -15,7 +15,7 @@ spec:
     metadata:
       labels:
         application: kube-ingress-aws-controller
-        version: v0.4.0
+        version: v0.4.2
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
         iam.amazonaws.com/role: "{{ .LocalID }}-app-ingr-ctrl"
@@ -26,7 +26,7 @@ spec:
         operator: Exists
       containers:
       - name: controller
-        image: registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.4.0
+        image: registry.opensource.zalan.do/teapot/kube-ingress-aws-controller:v0.4.2
         env:
         - name: AWS_REGION
           value: {{ .Region }}

cluster/manifests/kube-proxy/daemonset.yaml

@@ -0,0 +1,78 @@
+apiVersion: extensions/v1beta1
+kind: DaemonSet
+metadata:
+  name: kube-proxy
+  namespace: kube-system
+  labels:
+    application: kube-proxy
+    version: v1.7.9_coreos.0
+spec:
+  selector:
+    matchLabels:
+      application: kube-proxy
+  updateStrategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      name: kube-proxy
+      labels:
+        application: kube-proxy
+        version: v1.7.9_coreos.0
+      annotations:
+        scheduler.alpha.kubernetes.io/critical-pod: ''
+    spec:
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: kube-proxy
+                operator: NotIn
+                values:
+                - local
+      tolerations:
+      - operator: Exists
+        effect: NoSchedule
+      - operator: Exists
+        effect: NoExecute
+      - operator: Exists
+        key: CriticalAddonsOnly
+      hostNetwork: true
+      containers:
+      - name: kube-proxy
+        image: registry.opensource.zalan.do/teapot/hyperkube:v1.7.9_coreos.0
+        command:
+        - /hyperkube
+        - proxy
+        - --kubeconfig=/etc/kubernetes/kubeconfig
+        - --feature-gates=ExperimentalCriticalPodAnnotation=true,TaintBasedEvictions=true
+        - --v=2
+        securityContext:
+          privileged: true
+        resources:
+          requests:
+            cpu: 50m
+            memory: 75Mi
+          limits:
+            cpu: 200m
+            memory: 200Mi
+        volumeMounts:
+        - name: ssl-certs
+          mountPath: /etc/ssl/certs
+          readOnly: true
+        - name: kubeconfig
+          mountPath: /etc/kubernetes/kubeconfig
+          readOnly: true
+        - name: etc-kube-ssl
+          mountPath: /etc/kubernetes/ssl
+          readOnly: true
+      volumes:
+      - name: ssl-certs
+        hostPath:
+          path: /usr/share/ca-certificates
+      - name: kubeconfig
+        hostPath:
+          path: /etc/kubernetes/kubeconfig
+      - name: etc-kube-ssl
+        hostPath:
+          path: /etc/kubernetes/ssl

cluster/manifests/kube-static-egress-controller/deployment.yaml

@@ -0,0 +1,44 @@
+apiVersion: apps/v1beta1
+kind: Deployment
+metadata:
+  name: kube-static-egress-controller
+  namespace: kube-system
+  labels:
+    application: kube-static-egress-controller
+    version: v0.0.3
+spec:
+  replicas: 0
+  selector:
+    matchLabels:
+      application: kube-static-egress-controller
+  template:
+    metadata:
+      labels:
+        application: kube-static-egress-controller
+        version: v0.0.3
+      annotations:
+        scheduler.alpha.kubernetes.io/critical-pod: ''
+        iam.amazonaws.com/role: "{{ .LocalID }}-static-egress-controller"
+    spec:
+      containers:
+      - name: controller
+        image: registry.opensource.zalan.do/teapot/kube-static-egress-controller:v0.0.3
+        args:
+        - "--log-level=debug"
+        - "--provider=aws"
+        - "--aws-nat-cidr-block=172.31.64.0/28"
+        - "--aws-nat-cidr-block=172.31.64.16/28"
+        - "--aws-nat-cidr-block=172.31.64.32/28"
+        - "--aws-az=eu-central-1a"
+        - "--aws-az=eu-central-1b"
+        - "--aws-az=eu-central-1c"
+        env:
+        - name: AWS_REGION
+          value: eu-central-1
+        resources:
+          limits:
+            cpu: 100m
+            memory: 200Mi
+          requests:
+            cpu: 5m
+            memory: 25Mi

cluster/manifests/pod-cidr-controller/deployment.yaml

@@ -0,0 +1,32 @@
+apiVersion: apps/v1beta1
+kind: Deployment
+metadata:
+  name: pod-cidr-controller
+  namespace: kube-system
+  labels:
+    application: pod-cidr-controller
+    version: v0.1.0
+spec:
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      application: pod-cidr-controller
+  template:
+    metadata:
+      labels:
+        application: pod-cidr-controller
+        version: v0.1.0
+    spec:
+      hostNetwork: true
+      serviceAccountName: system
+      containers:
+      - name: pod-cidr-controller
+        image: pierone.stups.zalan.do/teapot/pod-cidr-controller:v0.1.0
+        resources:
+          requests:
+            memory: 32Mi
+            cpu: 10m
+          limits:
+            memory: 128Mi
+            cpu: 100m

cluster/manifests/zmon-agent/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: "kube-system"
   labels:
     application: "zmon-agent"
-    version: "0.1-a38-2-g0a44e32"
+    version: "0.1-a39"
 spec:
   replicas: 1
   selector:
@@ -15,7 +15,7 @@ spec:
     metadata:
       labels:
         application: "zmon-agent"
-        version: "0.1-a38-2-g0a44e32"
+        version: "0.1-a39"
       annotations:
         iam.amazonaws.com/role: "{{ .LocalID }}-app-zmon"
         scheduler.alpha.kubernetes.io/critical-pod: ''
@@ -25,7 +25,7 @@ spec:
         operator: Exists
       containers:
         - name: zmon-agent
-          image: "registry.opensource.zalan.do/zmon/zmon-agent-core:0.1-a38-2-g0a44e32"
+          image: "registry.opensource.zalan.do/zmon/zmon-agent-core:0.1-a39"
           resources:
             limits:
               cpu: 100m