aws: bypass LBC mservice webhook for kube-system - #18248
Merged
Merged
Conversation
The mservice MutatingWebhook has failurePolicy=Fail and no namespaceSelector, so any kube-system Service CREATE causes race condition failures during cluster creation until the LBC pod is Ready. Exclude kube-system to match the v3.2.2 chart default (kubernetes#18221). Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
rifelpet
approved these changes
Apr 26, 2026
Contributor
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: rifelpet The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
social4hyq
pushed a commit
to social4hyq/homebrew-core
that referenced
this pull request
Sep 20, 2026
kops 1.35.1 Created-by: HarmonybrewBot Commit-by: HarmonybrewBot Merged-by: HarmonybrewBot Description: Created by `brew bump` --- Created with `brew bump-formula-pr`.<details> <summary>release notes</summary> <pre>## What's Changed * Automated cherry pick of #17740: Fix HasHighlyAvailableControlPlane to use AllInstanceGroups by @hakman in kubernetes/kops#18117 * Automated cherry pick of #18113: Add excludedInstanceTypes to instanceRequirements by @hakman in kubernetes/kops#18119 * Automated cherry pick of #18123: Fix instanceRequirements memory assignment bug by @hakman in kubernetes/kops#18124 * Automated cherry pick of #17999: aws: Bypass LBC webhook for cert-manager by @rifelpet in kubernetes/kops#18125 * Automated cherry pick of #18126: Add --use-kubeconfig to kops reconcile cluster by @hakman in kubernetes/kops#18127 * Automated cherry pick of #18128: vfs: Silence warnings when the S3 provider has no supported by @hakman in kubernetes/kops#18130 * Automated cherry pick of #18114: Pin upload-artifacts GHA to commit sha by @rifelpet in kubernetes/kops#18208 * Automated cherry pick of #18173: Update Golang to 1.25.9 by @hakman in kubernetes/kops#18205 * Automated cherry pick of #18110: Update Cluster Autoscaler to 1.35.0 by @hakman in kubernetes/kops#18217 * Automated cherry pick of #18237: cilium: require k8s-connectivity in liveness probe by @hakman in kubernetes/kops#18242 * aws: bypass LBC mservice webhook for kube-system by @hakman in kubernetes/kops#18248 * Automated cherry pick of #18251: aws: skip node S3 permissions when kops-controller serves node config by @hakman in kubernetes/kops#18253 * Cherrypick VPC CNI fixes to 1.35 by @rifelpet in kubernetes/kops#18268 * Cherrypick GCE resource dump fixes to 1.35 by @rifelpet in kubernetes/kops#18282 * Automated cherry pick of #18285: cilium: allow setting arbitrary cilium-config entries by @hakman in kubernetes/kops#18286 * Automated cherry pick of #18281: hetzner: Upgrade hcloud-cloud-controller-manager to v1.30.1 by @hakman in kubernetes/kops#18283 * Automated cherry pick of #18298: dns-controller: make priorityClassName configurable by @hakman in kubernetes/kops#18299 * Automated cherry pick of #18232: Initial support for Ubuntu 26.04 by @rifelpet in kubernetes/kops#18306 * Automated cherry pick of #18302: dns-controller: default Provider when ExternalDNS is partially set by @hakman in kubernetes/kops#18303 * Automated cherry pick of #18307: gce: expose kops-controller on internal LB for gossip clusters by @hakman in kubernetes/kops#18308 * Automated cherry pick of #18260: azure: encode storage account in azureblob:// URLs by @hakman in kubernetes/kops#18320 * Automated cherry pick of #18319: azure: list VMSS NICs in protokube gossip seed discovery by @hakman in kubernetes/kops#18321 * Automated cherry pick of #18323: etcd-manager: upgrade to v3.0.20260512 by @hakman in kubernetes/kops#18324 * Cherrypick GCE instance handling fixes to 1.35 by @rifelpet in kubernetes/kops#18327 * etcd-manager: bump etcd to latest patches (3.5.30, 3.6.11) by @yuzhouliu9 in kubernetes/kops#18333 * Automated cherry pick of #18375: cilium: add flags for bpf-lb-sock and bpf-lb-sock-hostns-only by @hakman in kubernetes/kops#18376 * Automated cherry pick of #18379: kops-controller and nodeup bug fixes by @rifelpet in kubernetes/kops#18380 * Automated cherry pick of #18384: Fix kops get assets when spec.dnsZone is a DNS name by @hakman in kubernetes/kops#18386 * Automated cherry pick of #18144: Move johngmyers to emeritus by @hakman in kubernetes/kops#18388 * Automated cherry pick of #18391: Validate instance group names in kops-controller by @rifelpet in kubernetes/kops#18392 * Upgrade Go to 1.26.3 for release-1.35 by @hakman in kubernetes/kops#18396 * Update dependencies for release-1.35 by @hakman in kubernetes/kops#18399 * Automated cherry pick of #18401: gomod: tidy and verify all modules by @hakman in kubernetes/kops#18404 * Automated cherry pick of #18403: build: use gcr.io/distroless/static as base image by @hakman in kubernetes/kops#18417 * Automated cherry pick of #18418: chore: Add hashes for additional May releases by @hakman in kubernetes/kops#18419 * Automated cherry pick of #18364: chore: upgrade containerd to v2.3.0 #18422: chore: upgrade containerd to v2.3.1 by @hakman in kubernetes/kops#18423 * Release 1.35.1 by @hakman in kubernetes/kops#18425 **Full Changelog**: https://github.com/kubernetes/kops/compare/v1.35.0...v1.35.1</pre> <p>View the full release notes at <a href="/sitelet?url=https%3A%2F%2Fgithub.com%2Fkubernetes%2Fkops%2Fpull%2F%253Ca%2520href%3D"https://github.com/kubernetes/kops/releases/tag/v1.35.1">https://github.com/kubernetes/kops/releases/tag/v1.35.1</a>.</p">https://github.com/kubernetes/kops/releases/tag/v1.35.1">https://github.com/kubernetes/kops/releases/tag/v1.35.1</a>.</p> </details> <hr> See merge request: Harmonybrew/homebrew-core!9614
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The mservice MutatingWebhook has failurePolicy=Fail and no namespaceSelector, so any kube-system Service CREATE causes race condition failures during cluster creation until the LBC pod is Ready.
Exclude kube-system to match the v3.2.2 chart default (#18221).
/cc @rifelpet