3727 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
b876623070 Merge pull request #102264 from jeremyje/fb176
Upgrade Fluent-Bit 1.7.6.
2021-05-24 21:49:29 -07:00
Kubernetes Prow Robot
06d44d2f42 Merge pull request #101168 from mikedanese/warning
add a warning about the filter table
2021-05-24 21:48:40 -07:00
walter
13ab65d356 Upgrade konnectivity-client for GRPC connection fixes
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167.
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5.
2021-05-24 14:53:30 -07:00
Jeremy Edwards
54f3eb42e9 Upgrade Fluent-Bit 1.7.6. 2021-05-24 19:51:00 +00:00
Kubernetes Prow Robot
77937b1e8e Merge pull request #101628 from bobbypage/addon-termination-handler
Remove node termination handler addon
2021-05-24 11:31:39 -07:00
SataQiu
ff18e391e9 cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation 2021-05-19 17:46:35 +08:00
Kubernetes Prow Robot
e830610854 Merge pull request #101539 from jeremyje/installnpd
Install Node Problem Detector on GCE Windows nodes
2021-05-18 20:16:50 -07:00
Jeremy Edwards
09f9537338 Install Node Problem Detector on GCE Windows nodes 2021-05-15 16:14:17 +00:00
Jeremy Edwards
2f87f280fe GCE Windows: Upgrade to fluent-bit 1.7.5 2021-05-14 21:23:30 +00:00
Kubernetes Prow Robot
e8cf412e5e Merge pull request #101881 from vinayakankugoyal/konnectivity
Update konnectivity network proxy server to run as non-root, by defau…
2021-05-13 23:16:04 -07:00
Sergey Kanzhelev
72fe1b722c Make the service account error more apparent 2021-05-14 04:39:24 +00:00
Vinayak Goyal
b951b9349f Update konnectivity network proxy server to run as non-root, by default in kube-up. 2021-05-13 12:35:34 -07:00
Avritt Rohwer
0a5a697882 Fix bug in retry-forever usage.
- Push retry-forever wrapping to curl invocations.
- Collect curl retry flags into a single variable.
- Remove 'sudo: false' in master.yaml, is unnecessary and breaks older
  cloud-init versions.
- Change log-error status reason to be more accurate.
- Fix the some 'python' invocations to 'python3'.
2021-05-12 09:22:20 -07:00
Kubernetes Prow Robot
1bd00776b5 Merge pull request #101874 from tallclair/owners
Remove tallclair for gce owners
2021-05-10 13:49:48 -07:00
Kubernetes Prow Robot
7563d3092e Merge pull request #96216 from knight42/refactor/disable-insecure-port-in-ctrler-mgr
refactor: disable insecure serving in controller-manager
2021-05-10 13:49:36 -07:00
Tim Allclair
9d349b6d21 Remove tallclair for gce owners 2021-05-10 10:21:17 -07:00
Kubernetes Prow Robot
8b1c82a34c Merge pull request #101772 from swetharepakula/bump-glbc-image
Update glbc image to v1.12.0
2021-05-06 22:05:02 -07:00
Kubernetes Prow Robot
ca0c04e4d3 Merge pull request #101164 from vinayakankugoyal/apiservernonroot
Run control-plane as non root in kube-up.
2021-05-06 17:33:14 -07:00
Swetha Repakula
8c8db0d8e9 Update glbc image to v1.12.0
- glbc now uses networking.k8s.io/v1 Ingress
2021-05-06 15:20:05 -07:00
Kubernetes Prow Robot
1f3fd1cb80 Merge pull request #101751 from vinayakankugoyal/sshproxy
Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as…
2021-05-06 15:15:51 -07:00
Kubernetes Prow Robot
8955f55fcf Merge pull request #101678 from vinayakankugoyal/goodbye-basicauth
Remove remnants of basic auth from cluster bootstrap.
2021-05-06 14:14:14 -07:00
Vinayak Goyal
6aa495ddc6 Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-06 14:02:53 -07:00
Kubernetes Prow Robot
add13090e2 Merge pull request #101732 from spencer-p/master
Promote kube-addon-manager to v9.1.5
2021-05-05 18:49:17 -07:00
Vinayak Goyal
487583bd0a Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 15:23:04 -07:00
Vinayak Goyal
406ceae991 Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 14:49:59 -07:00
Vinayak Goyal
5d8c89b164 Run control-plane as non root in kube-up. 2021-05-05 14:46:28 -07:00
Jeremy Edwards
daa5be1d01 GCE Windows: Do not install docker when containerd CRI is selected. 2021-05-05 21:06:33 +00:00
Kubernetes Prow Robot
7d176851f2 Merge pull request #100612 from pacoxu/patch-8
kubeadm: upgrade etcd to 3.4.13-3
2021-05-05 07:11:27 -07:00
Spencer Peterson
a119b767d0 Promote kube-addon-manager to v9.1.5
Change-Id: Iffebad61634831b0c34eb54517a2543c75c55d68
2021-05-04 12:14:52 -07:00
David Porter
dac06aefb0 Revert "Revert "cluster: Use python3 everywhere""
This reverts commit 7038338e0f.
2021-05-03 21:43:15 -07:00
Jian Zeng
e481d99965 refactor: disable insecure serving in controller-manager
Now the following flags have no effect and would be removed in v1.24:
* `--port`
* `--address`

The insecure port flags `--port` may only be set to 0 now.

Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
2021-05-03 00:01:49 +08:00
Kubernetes Prow Robot
c5b900b69c Merge pull request #97399 from davidxia/comment-typo
Fix typo in comment
2021-05-01 04:57:59 -07:00
Vinayak Goyal
b87762966d Remove remnants of basic auth from cluster bootstrap. 2021-04-30 11:23:14 -07:00
Jeremy Edwards
5c713379a0 GCE Windows: mkdir -p fluent-bit pos-files directory. 2021-04-29 22:52:38 +00:00
David Porter
e02ff0687e Remove node termination handler addon 2021-04-29 14:42:23 -07:00
Kubernetes Prow Robot
f631c0e520 Merge pull request #101271 from jeremyje/fixfb
Fix fluent-bit configuration for GCE Windows.
2021-04-27 19:06:49 -07:00
Paco Xu
7038338e0f Revert "cluster: Use python3 everywhere" 2021-04-26 11:21:44 +08:00
David Porter
3f87f4f278 Use python3 everywhere 2021-04-23 14:33:58 -07:00
Kubernetes Prow Robot
ae35c6f10c Merge pull request #101255 from basantsa1989/stack-type
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
2021-04-22 15:55:28 -07:00
Jeremy Edwards
e62301c87d Fix fluent-bit configuration for GCE Windows. 2021-04-22 20:04:54 +00:00
Kubernetes Prow Robot
6aa683e9cf Merge pull request #100639 from zshihang/proxy
dnat to 169.254.169.252 for metadata server traffic
2021-04-21 11:15:51 -07:00
Ikko Ashimine
f69a2b40da Fix typo in gci/README.md
becase -> because
2021-04-21 21:35:05 +09:00
Kubernetes Prow Robot
41505f7109 Merge pull request #101176 from jkh52/master
kube-master-installation: improve systemd cross-unit robustness.
2021-04-20 00:42:45 -07:00
Kubernetes Prow Robot
46b0ad1327 Merge pull request #101207 from vinayakankugoyal/sshproxy
If kube-apiserver is running as non-root then set the permissions of …
2021-04-19 17:24:33 -07:00
Joseph Anttila Hall
05bcc72dc2 kube-master-installation: reboot on failure.
Also some minor reliability tweaks.
2021-04-19 17:16:21 -07:00
Vinayak Goyal
94e34da471 If kube-apiserver is running as non-root then set the permissions of /etc/srv/sshproxy accordingly. 2021-04-19 13:16:06 -07:00
Basant Amarkhed
e15d811652 Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code) 2021-04-19 19:06:55 +00:00
Shihang Zhang
297ad30610 dnat to 169.254.169.252 for metadata server traffic 2021-04-19 10:47:51 -07:00
Kubernetes Prow Robot
28c877dcb6 Merge pull request #101043 from benhxy/tls-2
Use GKE specific configuration for kubeconfig file generation
2021-04-16 11:54:51 -07:00
Kubernetes Prow Robot
7ecd93ea1e Merge pull request #100764 from benhxy/tls
Use GKE specific configuration for kube-apiserver SNI cert
2021-04-15 19:52:22 -07:00