Commit Graph

3727 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
d9eb7c4c6c
Merge pull request #110333 from liurupeng/rupliu/addwin22
Add Windows Server 2022 support for GKE
2022-06-01 13:40:09 -07:00
Kubernetes Prow Robot
875d48b66b
Merge pull request #108195 from SergeyKanzhelev/unusedMetadataKeys
there is no need for gci-docker-version and gci-ensure-gke-docker - t…
2022-06-01 12:03:16 -07:00
Rupeng Liu
89b76dd156 Add Windows Server 2022 support for GKE 2022-06-01 17:47:40 +00:00
Manish Kumar
e9e8be304c etcd: Updated to v3.5.4 2022-06-01 07:52:46 +05:30
Sergey Kanzhelev
6f5661f139 fix the registry configuration 2022-05-31 23:12:16 +00:00
Davanum Srinivas
50bea1dad8
Move from k8s.gcr.io to registry.k8s.io
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-05-31 10:16:53 -04:00
Sascha Grunert
882c460d2a
Update cri-tools to v1.24.2
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-05-30 09:13:56 +02:00
lajay-lawrence
9a035e3287 Updated verification commands 2022-05-26 18:53:26 +00:00
Jordan Liggitt
a44192b955 Remove PodSecurityPolicy cluster config 2022-05-04 16:00:56 -04:00
Kubernetes Prow Robot
82ccfb4d2e
Merge pull request #109657 from claudiubelu/gce-containerd-update
GCE Windows: Copy the CNI binaries from the right folder
2022-05-04 02:35:26 -07:00
Kubernetes Prow Robot
9566ce488a
Merge pull request #109468 from pjh/owners-pjh
Remove pjh from cluster/gce/ OWNERS files
2022-05-04 01:28:07 -07:00
Kubernetes Prow Robot
2ab7ef06ac
Merge pull request #109249 from mauriciopoppe/csi-proxy-1.1.1
Bump CSI Proxy to v1.1.1-gke.0
2022-05-03 19:29:44 -07:00
Claudiu Belu
dc881cbc77 GCE Windows: Copy the CNI binaries from the right folder
A previous commit updated the containerd version used on Windows
nodes from 1.5.4 to 1.6.2. However, the folder structure of the
containerd releases changed since then from:

cni/$binary.exe

to:

cni/bin/$binary.exe

Because of this, the Windows nodes do not have the necessary CNI
binaries needed to setup the pod networks.
2022-04-25 15:06:30 -07:00
Claudiu Belu
70f14e16e4 windows GCE: Bumps containerd version to 1.6.2
containerd v1.6.0 introduced HostProcessContainers support [1], which
are required for e2e tests that need that feature.

This addresses some of the permafailing tests for Windows GCE E2E test runs.

[1] https://github.com/containerd/containerd/pull/5131
2022-04-20 06:53:26 -07:00
Stephen Augustus
3f85937b11
etcd: Update to v3.5.3
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2022-04-13 19:04:00 -04:00
Peter Hornyack
eb64e29528 Remove pjh from cluster/gce/ OWNERS files
Moved to emeritus_approvers for the windows directory - this seems
appropriate according to
https://www.kubernetes.dev/docs/guide/owners/#emeritus.
2022-04-13 18:24:20 +00:00
Mauricio Poppe
47f13ef136 Bump CSI Proxy to v1.1.1-gke.0 2022-04-01 21:45:25 +00:00
Davanum Srinivas
f7ad09c447
Switch to pause 3.7
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-29 15:36:38 -04:00
Davanum Srinivas
bef0ddef86
kube-up: use registry.k8s.io for containerd-related jobs
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-23 11:30:49 -04:00
Jordan Liggitt
548c339867 Clean up unused exec auth from cluster setup 2022-03-19 10:47:38 -04:00
Kubernetes Prow Robot
41b29e6542
Merge pull request #99287 from anfernee/clientip
Add HNS Load Balancer Healthchecks for ExternalTrafficPolicy: Local
2022-03-16 22:57:18 -07:00
Davanum Srinivas
9a0bb97a34
add tags for KUBE_ADDON_REGISTRY when we load images locally
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-15 17:16:33 -04:00
Yongkun Gui
78a507b256 Fix health check from Google's Load Balancer
This change adds 2 options for windows:
--forward-healthcheck-vip: If true forward service VIP for health check
port
--root-hnsendpoint-name: The name of the hns endpoint name for root
namespace attached to l2bridge, default is cbr0

When --forward-healthcheck-vip is set as true and winkernel is used,
kube-proxy will add an hns load balancer to forward health check request
that was sent to lb_vip:healthcheck_port to the node_ip:healthcheck_port.
Without this forwarding, the health check from google load balancer will
fail, and it will stop forwarding traffic to the windows node.

This change fixes the following 2 cases for service:
- `externalTrafficPolicy: Cluster` (default option): healthcheck_port is
10256 for all services. Without this fix, all traffic won't be directly
forwarded to windows node. It will always go through a linux node and
get forwarded to windows from there.
- `externalTrafficPolicy: Local`: different healthcheck_port for each
service that is configured as local. Without this fix, this feature
won't work on windows node at all. This feature preserves client ip
that tries to connect to their application running in windows pod.

Change-Id: If4513e72900101ef70d86b91155e56a1f8c79719
2022-03-11 22:34:59 -08:00
Kubernetes Prow Robot
ad46b4f921
Merge pull request #108457 from ialidzhikov/cleanup/target-ram-mb
apiserver: Remove the deprecated `--target-ram-mb` flag
2022-03-07 02:38:53 -08:00
Davanum Srinivas
7b5c718946
explicitly specify journald config
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-06 18:48:35 -05:00
Andrew Sy Kim
f654992aec cluster/gce: update konnectivity image tags to v0.0.30
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-03-04 19:01:02 +00:00
Davanum Srinivas
83e205ae47
fix typo for pause image env var in kube-up
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-04 06:41:03 -05:00
Davanum Srinivas
91ade9f318
Switch pv-recycler container image to debian-base
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-03 13:37:17 -05:00
ialidzhikov
bdbc750129 apiserver: Remove the deprecated --target-ram-mb flag
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2022-03-02 18:52:46 +02:00
Davanum Srinivas
abdcbb8235
Enable specifying pause image in containerd config.toml
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-02 11:51:06 -05:00
Davanum Srinivas
08af9935a5
fix broken find command
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-01 22:54:31 -05:00
Kubernetes Prow Robot
109cb7cbe7
Merge pull request #108339 from cheftako/anp-release
Bump konnectivity-client to v0.0.28
2022-02-25 17:49:23 -08:00
Shihang Zhang
5ee418b4c7 bump kube-addon-manager image version to 9.1.6 2022-02-24 14:13:01 -08:00
Walter Fender
e5b0392f12 Bump konnectivity-client to v0.0.28
Bump konnectivity network proxy to v0.0.28.
Includes a fix to ensure the KAS calls Close() on the egress connection.
2022-02-24 12:35:54 -08:00
Kubernetes Prow Robot
06e107081e
Merge pull request #104732 from mengjiao-liu/remove-flag-experimental-check-node-capabilities-before-mount
kubelet: Remove the deprecated flag `--experimental-check-node-capabilities-before-mount`
2022-02-24 07:56:30 -08:00
Kubernetes Prow Robot
344bf270ee
Merge pull request #108034 from tstapler/critools_arm_configuresh
Add crit-tools arm64 sha512 hash to configure.sh
2022-02-17 17:20:41 -08:00
Kubernetes Prow Robot
e14ace9287
Merge pull request #107806 from mauriciopoppe/csi-proxy-additional-flags-kube-up
Env var for additional flags sent to the csi-proxy binary
2022-02-17 16:15:00 -08:00
Tyler Stapler
01b8d59430 Rework npd default hash selection to match crictl
Change-Id: I63e0837e62c4c8fa5d8371dcb1390d2d3e672e0c
2022-02-17 22:43:16 +00:00
Sergey Kanzhelev
0e5dffc1fc there is no need for gci-docker-version and gci-ensure-gke-docker - those are not used by COS or any of scripts
Change-Id: I317c95d8fd2f51598cfa3e710380552d8fc07d2d
2022-02-17 19:00:22 +00:00
Sergey Kanzhelev
19a01fa8c6 remove docker installation from everywhere 2022-02-17 08:02:13 +00:00
Tyler Stapler
9288c190f9 Add crit-tools arm64 sha512 hash to configure.sh
Change-Id: I2a06fb6ded78a755b71ce75a07fd1d9ad29f310c
2022-02-15 18:00:51 +00:00
David Porter
3281504a50 cluster/ - Configure containerd only if necessary
PR #107663 changed the startup logic to always call `SetupContainerd`
which will generate a new containerd `/etc/containerd/config.toml` file.

This is not always desired since some jobs install containerd from
source and the containerd startup scripts
(https://github.com/containerd/containerd/blob/main/contrib/gce/configure.sh)
are responsible for generating the `/etc/containerd/config.toml` file.
By always calling `SetupContainerd`, the containerd configuration by
containerd's `configure.sh` will be overridden which breaks certain test
jobs, see https://github.com/kubernetes/kubernetes/issues/107830.

To fix this issue, only call `SetupContainerd` if
`/etc/profile.d/containerd_env.sh` does not exist. When containerd
`configure.sh` script will run, `/etc/profile.d/containerd_env.sh` will
be written, and as a result the k8s setup scripts should avoid
overriding the containerd configuration.

Signed-off-by: David Porter <david@porter.me>
2022-02-10 14:24:14 -08:00
Kubernetes Prow Robot
a3207872a3
Merge pull request #107481 from shu-mutou/deprecate-dashboard-addon
Remove dashboard cluster addon
2022-02-10 05:35:48 -08:00
Kubernetes Prow Robot
8d01b02c60
Merge pull request #107096 from hakman/remove_non-masquerade-cidr
Remove deprecated flag --non-masquerade-cidr in kubelet
2022-02-08 12:42:50 -08:00
Kubernetes Prow Robot
7bffb3b2ca
Merge pull request #106241 from jdnurme/cloud-provider-env-var
Added env variable for cloud-provider
2022-02-07 20:40:53 -08:00
Aditi Sharma
a251acdfc7 Source containerd env for repo installation
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
2022-01-31 09:29:46 +05:30
Mauricio Poppe
29e8e3af85 Env var for additional flags sent to the csi-proxy binary 2022-01-27 00:01:33 +00:00
Kubernetes Prow Robot
66445662ad
Merge pull request #107769 from liurupeng/reverthashvalue
Revert changes to the flb-exporter hash value
2022-01-26 05:10:13 -08:00
Kubernetes Prow Robot
dbb5e3fe86
Merge pull request #107663 from hakman/remove_container-runtime_test_scripts
Clean up logic for deprecated flag --container-runtime in scripts
2022-01-25 22:30:25 -08:00
RupengLiu
446052f7a3 Revert changes to the flb-exporter hash value 2022-01-25 16:35:58 -08:00
Kubernetes Prow Robot
45b6af6b71
Merge pull request #107478 from liurupeng/gke-updatefluentbitversion
Update fluent bit version to 1.8.10 for GKE windows container
2022-01-20 21:47:58 -08:00
RupengLiu
7a2f2980c5 Update fluent bit version 2022-01-20 11:21:29 -08:00
Ciprian Hacman
d01e9cedb1 Clean up logic for deprecated flag --container-runtime in scripts
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-20 11:19:08 +02:00
Ciprian Hacman
21809043b5 Remove deprecated flag --non-masquerade-cidr in kubelet
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-19 09:17:26 +02:00
Kubernetes Prow Robot
feb758027c
Merge pull request #106907 from cyclinder/remove_dockershim_flags
Clean up dockershim flags in the kubelet
2022-01-18 09:09:09 -08:00
Shu Muto
676972235a Remove dashboard from cluster scripts 2022-01-18 14:48:49 +09:00
Sascha Grunert
f7f0f4b901
Update cri-tools to v1.23.0
Files promoted to `k8s-artifacts-cri-tools`:
https://console.cloud.google.com/storage/browser/k8s-artifacts-cri-tools/release/v1.23.0

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-01-17 15:02:53 +01:00
cyclinder
07999dac70 Clean up dockershim flags in the kubelet
Signed-off-by: cyclinder <qifeng.guo@daocloud.io>
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev>
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-01-14 16:02:50 +02:00
Jordan Liggitt
5d9b7ae9e5 Remove fluentd-elasticsearch addon 2022-01-14 08:23:51 -05:00
Kubernetes Prow Robot
6b399153ba
Merge pull request #107502 from zshihang/metadata
limit the scope of 169.254.169.252/32 to host
2022-01-13 15:54:27 -08:00
Kubernetes Prow Robot
3bd422dc76
Merge pull request #107293 from dims/jan-1-owners-cleanup
Cleanup OWNERS files - Jan 2021 Week 1
2022-01-13 10:30:30 -08:00
Shihang Zhang
17c2be0667 limit the scope of 169.254.169.252/32 to host 2022-01-12 10:36:59 -08:00
Kubernetes Prow Robot
5d950ceee4
Merge pull request #104669 from arekkusu/patch-3
Update GKE kubernetes sources download link
2022-01-10 14:36:25 -08:00
Davanum Srinivas
ba1f853b5a
Add mwielgus back
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-01-10 09:02:53 -05:00
Davanum Srinivas
9682b7248f
OWNERS cleanup - Jan 2021 Week 1
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-01-10 08:14:29 -05:00
JD Nurme
30fabbc0cb updated flag name 2022-01-06 19:51:17 +00:00
Mengjiao Liu
beda4cafb6 kubelet: Remove the deprecated flag --experimental-check-node-capabilities-before-mount 2022-01-06 11:47:11 +08:00
Kubernetes Prow Robot
b90b2d963d
Merge pull request #103078 from pacoxu/api-audiences
kube-apiserver: use --api-audiences as --service-account-api-audiences is deprecated
2022-01-05 12:49:47 -08:00
Kubernetes Prow Robot
4d4d57fcf0
Merge pull request #106340 from SergeyKanzhelev/removeCriCtlTar
remove crictl tar
2022-01-04 13:06:34 -08:00
Jing Xu
34c14949fc Change default runtime to containerd for Windows cluster
change default runtime to containerd for windows

Change-Id: I61949ae3687cddb7bfd00715a455ee5eed4da0db
2021-12-22 14:14:52 -08:00
Kubernetes Prow Robot
1426587e08
Merge pull request #106436 from dims/cleanup-owners-files-no-activity-in-a-year
Cleanup OWNERS files (No Activity in the last year)
2021-12-15 12:07:51 -08:00
Davanum Srinivas
497e9c1971
Cleanup OWNERS files (No Activity in the last year)
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-15 10:34:02 -05:00
Kubernetes Prow Robot
7e6e307f11
Merge pull request #106843 from liggitt/drop-curl-bash
Drop unused auto-install invocation
2021-12-13 09:10:10 -08:00
Kubernetes Prow Robot
c7ff5758db
Merge pull request #106922 from cheftako/anp-release
Bump konnectivity network proxy to v0.0.27.
2021-12-10 14:11:21 -08:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-09 21:31:26 -05:00
Kubernetes Prow Robot
461dc9e371
Merge pull request #104640 from lizhuqi/fluentd-1-17
Remove stackdriver version variable
2021-12-09 16:29:10 -08:00
Walter Fender
b869d5550c Bump konnectivity network proxy to v0.0.27.
/kind feature

Includes fixes for a few resource leaks.
Set the dependency chain to K/K v0.0.21.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```
2021-12-09 11:56:20 -08:00
Jian Zeng
fe448785b5 fix: remove insecure flag from configure-kubeapiserver.sh
Signed-off-by: Jian Zeng <anonymousknight96@gmail.com>
2021-12-09 15:06:52 +08:00
Jordan Liggitt
8139b3d89f Drop unused auto-install invocation 2021-12-06 14:48:14 -05:00
Léiyì Zhang
3c91436fc1 turning off default storage class in kube-up 2021-11-16 19:26:30 +00:00
Kubernetes Prow Robot
1c127d3682
Merge pull request #105706 from uthark/oatamanenko/upgrade-etcd-3.5.1
Upgrade etcd to 3.5.1
2021-11-15 10:04:59 -08:00
Kubernetes Prow Robot
da73a24f6a
Merge pull request #106123 from pohly/log-go-runner-windows
package log runner as part of Kubernetes releases
2021-11-15 09:04:48 -08:00
Sergey Kanzhelev
f059c3580c remove crictl tar 2021-11-11 06:12:30 +00:00
Mike Danese
384e9cec1b don't expand $(ls -A /scrub) in PV_RECYCLER_TEMPLATE
Before we write the template.
2021-11-10 11:14:45 -08:00
Kubernetes Prow Robot
e9a8bd94f7
Merge pull request #104921 from cheftako/anp-cp
Add mTLS as default HTTPConnect egress configuration for GCP.
2021-11-09 22:15:25 -08:00
Mauricio Poppe
84b403fd02 Use simple match instead of regex match 2021-11-09 05:09:18 +00:00
JD Nurme
4a9703a219 Added env variable for cloud-provider 2021-11-09 00:45:34 +00:00
Kubernetes Prow Robot
701c2b7942
Merge pull request #106196 from mauriciopoppe/gce-windows-ssh-fix
Fix creation of the administrator_keys_file file with many users
2021-11-08 13:11:57 -08:00
Kubernetes Prow Robot
97125e76f3
Merge pull request #103626 from jkh52/tweak-konnectivity
Konnectivity Proxy: move proxy-agent cpu limit to request.
2021-11-08 12:11:20 -08:00
Walter Fender
fbc13f22f8 Bump konnectivity to v0.0.25
/kind feature

Bump konnectivity network proxy to v0.0.25.
Includes fixes for a few resource leaks.
Adds better logging for debugging.
Moves to golang1.17.
Adds additional keepalives.
Fixes HTTP-CONNECT goroutine leak.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```

Update the images.
2021-11-07 14:34:09 -08:00
Mauricio Poppe
ff0afb6169 Fix creation of the administrator_keys_file file with many users 2021-11-06 03:14:13 +00:00
Walter Fender
35737ff810 Switched ANP w/ grpc to not use destHost strategy.
Factored in feedback from caesarxuchao
2021-11-05 11:56:56 -07:00
Walter Fender
f7185b0be1 Add mTLS as default HTTPConnect egress configuration for GCP.
We currently have UDS as the configuration with GRPC.
Some users are setting up egress to remote konnectivity servers.
Cannot use UDS for this configuration.
Should have a config setup which validates the mTLS configuration.

Fixed lint errors from shell check.
Fix volumes to not include pki for ANP in grpc mode.
2021-11-05 11:39:39 -07:00
Kubernetes Prow Robot
2f21cff49d
Merge pull request #106018 from ahrtr/replace_ioutil_with_io_os_cluster_gce_gci
Replace ioutil with io and os for cluster/gce/gci
2021-11-04 03:08:03 -07:00
Patrick Ohly
d2a8a81639 Package kube-log-runner as part of Kubernetes releases
kube-log-runner was formerly known as go-runner when it was originally introduced
in 393e0952e9
It was moved to kubernetes/release/images/build/go-runner later but is now
needed again in Kubernetes itself as replacement for the deprecated --log-file
klog feature: when bringing up a Windows node, kube-proxy.exe and kubelet.exe must be wrapped
with the helper binary to redirect output.

It got renamed to avoid a naming conflict with
test/conformance/image/go-runner and because the name was too vague.

Other downstream Kubernetes users may have a similar need, therefore it makes
sense to provide a prebuilt binary also in the release archives.
2021-11-04 10:00:26 +01:00
Joseph Anttila Hall
d13ee80cb0 Konnectivity Proxy: move cpu limit to request. 2021-11-03 17:40:51 -07:00
Sandeep Rajan
be24af7644 bump coredns to 1.8.6 in kube-up
Signed-off-by: Sandeep Rajan <srajan@infoblox.com>
2021-11-02 10:52:44 -04:00
Kubernetes Prow Robot
37efc5feec
Merge pull request #105920 from SergeyKanzhelev/fixReturnValueHandling
return value is taken from if statement instead of the function call
2021-11-01 00:01:30 -07:00
ahrtr
45428d887d replace ioutil with io and os for cluster/gce/gci 2021-10-30 14:23:50 +08:00
Mauricio Poppe
9e29cc042e KubeEnv var to enable Hyper-V in Windows 2021-10-29 07:07:33 +00:00