Benjamin Elder
64ed5964d5
permit self-assignment line for clarity and also fear of touching get-kube.sh
2022-10-20 16:22:11 -07:00
Benjamin Elder
4c7189f54b
fix SC2267 GNU xargs -i is deprecated in favor of -I{} in cluster/gce/util.sh
...
see: https://www.shellcheck.net/wiki/SC2267
2022-10-19 23:46:18 -07:00
Kubernetes Prow Robot
51185b77a3
Merge pull request #112901 from vinaykul/ubuntu-kube-up-fix
...
Fix 'ctr not found' error with gce kube-up for Ubuntu OS deployments
2022-10-17 18:05:18 -07:00
Kubernetes Prow Robot
2e1da6590e
Merge pull request #113045 from wewark/master
...
Update to latest kubedns and nodelocaldns images.
2022-10-14 03:38:57 -07:00
Kubernetes Prow Robot
b601769721
Merge pull request #112924 from marosset/remove-20h2-windows-images
...
cleanup: Remove out-of-support Windows 20H2 images
2022-10-13 11:25:15 -07:00
Khaled Hamed
74db48f510
Update to latest kubedns and nodelocaldns images.
2022-10-13 14:48:37 +02:00
Mark Rossetti
ecd543be04
Remove out-of-support Windows 20H2 images
...
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-10-12 14:43:51 -07:00
Jordan Liggitt
dd0910691f
Move root approvers to subdirs
2022-10-10 13:43:03 -04:00
Jordan Liggitt
04b178b49b
Make root approval non-recursive
2022-10-10 08:26:53 -04:00
Vinay Kulkarni
eaf8bd87af
Fix 'ctr not found' error with gce kube-up for Ubuntu OS deployments
2022-10-06 11:36:48 -07:00
Walter Fender
4f6894d206
Adding flag for testing to ignore cloud provider taint.
...
Adding the ability to ignore no schedule flags in testing.
Specifically node.cloudprovider.kubernetes.io/uninitialized:NoSchedule
Fix shellcheck complaint.
2022-10-06 10:54:35 -07:00
Arnaud Meukam
9987e4635f
Test startup: make staging bucket regional
...
Make GCS buckets created by the e2e tests regional.
There are by default multi-regional in US location. The change is
introduced to minimize GCS global cost.
GCS new pricing changed since Oct 1, 2022. See https://cloud.google.com/storage/pricing-announce
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2022-10-05 06:34:04 +02:00
Kubernetes Prow Robot
b4b67c9ca5
Merge pull request #112781 from humblec/gce-new
...
Update sidecar controllers to latest versions in the e2e
2022-09-29 22:18:28 -07:00
Humble Chirammal
b3a3d8cb6b
Update sidecar controllers to latest versions in the e2e
...
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-09-29 22:13:11 +05:30
Kubernetes Prow Robot
bc3d78aa55
Merge pull request #112726 from dims/drop-unsupported-iks-configuration-for-kubemark
...
Drop unsupported iks configuration for kubemark
2022-09-29 04:06:54 -07:00
Maciej Borsz
7af94d7e95
Remove ssh firewall only when we delete network
2022-09-29 07:25:20 +00:00
Walter Fender
1dfdfc4bb5
Bump konnectivity-client to v0.0.33
...
Bump konnectivity network proxy to v0.0.33.
Includes a couple bug fixes for better handling of dial failures.
[Agent &
Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33 )
include numerous other fixes.
Pin goleak to 1.2
2022-09-26 17:06:49 -07:00
Davanum Srinivas
908ec2a496
Drop unsupported iks configuration for kubemark
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-09-25 17:33:22 -04:00
Walter Fender
56eb2bcff4
Honor the CLOUD_PROVIDER_FLAG flag.
...
We were not passing the flag from deploying machine to the machine
being deployed to. Now passing the flag.
2022-09-23 19:03:01 -07:00
Kubernetes Prow Robot
188b65c92f
Merge pull request #110826 from humblec/test-failure
...
Fix the test failure on volume snapshot
2022-09-22 12:50:52 -07:00
Kubernetes Prow Robot
ac868b17d6
Merge pull request #112058 from saschagrunert/cri-tools-v1.25
...
Update cri-tools to v1.25.0
2022-09-21 16:59:07 -07:00
Humble Chirammal
40621d4351
Fix the test failure on volume snapshot
...
Since we have upgraded to snapshot controller version to v6, the
snapshot tests looks to be failing in the testgrid. It has been mainly
because the latest version of snapshot controller stopped serving
v1beta1 APIs. The sidecar image versions in the tests also has to be
updated to make sure these are compatible.
This commit add missing RBAC rules for the controller as per the
latest version.
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-09-16 19:39:47 +05:30
Davanum Srinivas
0f6b9b883c
etcd: Updated to v3.5.5
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-09-15 21:05:13 -04:00
Davanum Srinivas
4e650c3c7c
etcd: Build image 3.5.5-0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-09-15 15:37:10 -04:00
Kubernetes Prow Robot
43a5c7b4e2
Merge pull request #112446 from gcampbell12/gc/update-dns-addon
...
Update kube-dns and nodelocaldns to 1.22.11
2022-09-14 15:39:33 -07:00
George Campbell
4f5ccb834e
Update kube-dns and nodelocaldns to 1.22.11
2022-09-14 14:34:45 +01:00
Humble Chirammal
c2a7bfd6b4
removal of glusterfs in-tree driver code from the source
...
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-09-13 20:11:50 +05:30
Artur Żyliński
f35799f6b1
Fix: Refactor firewall-rules list to read-array
2022-09-12 10:20:50 +02:00
Matthew Cary
8a0e0c7f79
Remove race between kubelet startup and mounter rootfs
...
Change-Id: I18d5a7d1f8c475c96da3c4166802ac76e91b3b52
2022-09-01 15:58:43 -07:00
Sascha Grunert
0ed8dd211a
Update cri-tools to v1.25.0
...
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-08-26 11:55:40 +02:00
Kubernetes Prow Robot
5fa65e989b
Merge pull request #111495 from ndixita/node-e2e-gcp-cred-provider
...
Configure and install out-of-tree gcp credential provider
2022-08-23 21:20:00 -07:00
Kubernetes Prow Robot
da558e44ca
Merge pull request #111906 from tosi3k/apiserver-godebug
...
Add a possibility of setting GODEBUG env var for kube-apiserver binary
2022-08-23 20:08:45 -07:00
Kubernetes Prow Robot
07bca2d791
Merge pull request #67782 from dims/yank-in-tree-openstack-cloud-provider
...
Remove in-tree openstack cloud provider
2022-08-23 18:59:48 -07:00
Kubernetes Prow Robot
6e46517905
Merge pull request #111694 from ialidzhikov/enh/unprivileged-node-local-dns
...
Run node-local-dns in non-privileged mode
2022-08-23 17:17:41 -07:00
Dixita Narang
d1deca1cb4
Configure and install out-of-tree gcp credential provider
2022-08-23 00:59:17 +00:00
Davanum Srinivas
9bbf01bae9
Remove references to openstack and cinder
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-08-22 16:43:14 -04:00
Antoni Zawodny
a8fb0cab49
Add a possibility of setting GODEBUG env var for kube-apiserver binary
2022-08-18 11:19:52 +02:00
ialidzhikov
bfe98c0c2a
Run node-local-dns in non-privileged mode
2022-08-05 14:18:27 +03:00
Brian Pursley
c2238b46a2
Change cluster/gce/util to wait for firewall rule creation
...
Add kube::util::wait-for-jobs in create-network() to wait
for background firewall rule creation, and if any fail, log
a message and exit with the failed job's return code.
2022-08-03 17:23:27 -04:00
Kubernetes Prow Robot
e5a649d4f6
Merge pull request #111493 from dpasiukevich/patch-1
...
Update OWNERS
2022-07-28 14:13:11 -07:00
Dzmitry Pasiukevich
5b3222c540
Update OWNERS
2022-07-28 09:36:41 +02:00
dpasiukevich
4c43287ffe
Update to latest kubedns and nodelocaldns images.
2022-07-28 07:55:37 +02:00
David Porter
ead45ba74d
test: cluster: Bump to COS 97 image
...
COS-85 is very old OS image and is EoL in September 2022. Update to the
latest stable LTS version of COS.
Signed-off-by: David Porter <david@porter.me>
2022-07-25 14:48:27 -07:00
Mark Rossetti
40f3e624a6
Switching everything to use pause:3.8
...
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-07-21 14:53:15 -07:00
David Porter
304a040a17
cluster: use systemd cgroup driver for cgroupv2
...
* Detect if image is using cgroupv2
* Configure both kubelet and containerd to use systemd cgroup driver
when running under cgroupv2
Systemd cgroup driver is recommended to be used when running on
cgroupv2. It is also the default in moby
https://github.com/moby/moby/pull/40846
Signed-off-by: David Porter <david@porter.me>
2022-07-18 16:06:30 -07:00
xing-yang
e7cfbbbbc7
Change snapshot-controller image to v4.2.1
2022-07-07 21:23:12 -04:00
Joseph Anttila Hall
f5c584a020
Bump konnectivity-client to 0.0.32
2022-06-22 17:22:42 -07:00
Humble Chirammal
adefd5db42
remove deprecated label and update snapshot controller version
...
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-06-16 16:42:45 +05:30
Wes Panther
6ac853fe60
Update Debian base images to latest
...
- debian-base:bullseye-v1.3.0
- debian-iptables:bullseye-v1.4.0
- setcap:bullseye-v1.3.0
2022-06-13 21:36:46 -07:00
Mohamed Zaian
90c8912098
[kube-up]: Bump coredns to 1.9.3
2022-06-09 11:47:15 +02:00
Kubernetes Prow Robot
8d5518d426
Merge pull request #109813 from saschagrunert/cri-tools
...
Update cri-tools to v1.24.2
2022-06-03 09:31:05 -07:00
Kubernetes Prow Robot
b7b824bb9e
Merge pull request #110033 from mk46/etcd_update_v3.5.4
...
etcd: Updated to v3.5.4
2022-06-02 13:26:31 -07:00
Kubernetes Prow Robot
d9eb7c4c6c
Merge pull request #110333 from liurupeng/rupliu/addwin22
...
Add Windows Server 2022 support for GKE
2022-06-01 13:40:09 -07:00
Kubernetes Prow Robot
875d48b66b
Merge pull request #108195 from SergeyKanzhelev/unusedMetadataKeys
...
there is no need for gci-docker-version and gci-ensure-gke-docker - t…
2022-06-01 12:03:16 -07:00
Rupeng Liu
89b76dd156
Add Windows Server 2022 support for GKE
2022-06-01 17:47:40 +00:00
Manish Kumar
e9e8be304c
etcd: Updated to v3.5.4
2022-06-01 07:52:46 +05:30
Sergey Kanzhelev
6f5661f139
fix the registry configuration
2022-05-31 23:12:16 +00:00
Davanum Srinivas
50bea1dad8
Move from k8s.gcr.io to registry.k8s.io
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-05-31 10:16:53 -04:00
Sascha Grunert
882c460d2a
Update cri-tools to v1.24.2
...
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-05-30 09:13:56 +02:00
Kubernetes Prow Robot
f3264dd0b3
Merge pull request #110031 from mk46/etcd-image-v3.5.4
...
etcd: Build image 3.5.4-0
2022-05-27 21:16:16 -07:00
lajay-lawrence
9a035e3287
Updated verification commands
2022-05-26 18:53:26 +00:00
Raunak Pradip Shah
39cf002690
Add v1beta1 snapshot CRDs to cluster addons
2022-05-26 12:54:12 +05:30
Raunak Pradip Shah
43bd5f8648
Add OneOf
2022-05-14 11:54:37 +05:30
Manish Kumar
f1ed75bcd7
etcd: Build image 3.5.4-0
2022-05-13 13:02:40 +05:30
Raunak Pradip Shah
20e77209f1
Update snapshot CRDs to v6
2022-05-12 23:47:39 +05:30
Swetha Repakula
2fcbb92681
Add leases permissions to glbc rbac
...
* required for leader election for ingress-gce
2022-05-10 15:49:15 -07:00
Jordan Liggitt
a44192b955
Remove PodSecurityPolicy cluster config
2022-05-04 16:00:56 -04:00
Kubernetes Prow Robot
82ccfb4d2e
Merge pull request #109657 from claudiubelu/gce-containerd-update
...
GCE Windows: Copy the CNI binaries from the right folder
2022-05-04 02:35:26 -07:00
Kubernetes Prow Robot
9566ce488a
Merge pull request #109468 from pjh/owners-pjh
...
Remove pjh from cluster/gce/ OWNERS files
2022-05-04 01:28:07 -07:00
Kubernetes Prow Robot
2ab7ef06ac
Merge pull request #109249 from mauriciopoppe/csi-proxy-1.1.1
...
Bump CSI Proxy to v1.1.1-gke.0
2022-05-03 19:29:44 -07:00
Claudiu Belu
dc881cbc77
GCE Windows: Copy the CNI binaries from the right folder
...
A previous commit updated the containerd version used on Windows
nodes from 1.5.4 to 1.6.2. However, the folder structure of the
containerd releases changed since then from:
cni/$binary.exe
to:
cni/bin/$binary.exe
Because of this, the Windows nodes do not have the necessary CNI
binaries needed to setup the pod networks.
2022-04-25 15:06:30 -07:00
Claudiu Belu
70f14e16e4
windows GCE: Bumps containerd version to 1.6.2
...
containerd v1.6.0 introduced HostProcessContainers support [1], which
are required for e2e tests that need that feature.
This addresses some of the permafailing tests for Windows GCE E2E test runs.
[1] https://github.com/containerd/containerd/pull/5131
2022-04-20 06:53:26 -07:00
Stephen Augustus
3f85937b11
etcd: Update to v3.5.3
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2022-04-13 19:04:00 -04:00
Marek Siarkowicz
b0f3f015d7
Build etcd v3.5.3 image
...
Co-authored-by: Stephen Augustus <foo@auggie.dev>
2022-04-13 16:25:14 -04:00
Stephen Augustus
cddd83c997
Update Debian base images
...
- debian-base:bullseye-v1.2.0
- debian-iptables:bullseye-v1.3.0
- setcap:bullseye-v1.2.0
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2022-04-13 16:23:54 -04:00
Peter Hornyack
eb64e29528
Remove pjh from cluster/gce/ OWNERS files
...
Moved to emeritus_approvers for the windows directory - this seems
appropriate according to
https://www.kubernetes.dev/docs/guide/owners/#emeritus .
2022-04-13 18:24:20 +00:00
Mauricio Poppe
47f13ef136
Bump CSI Proxy to v1.1.1-gke.0
2022-04-01 21:45:25 +00:00
Davanum Srinivas
f7ad09c447
Switch to pause 3.7
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-29 15:36:38 -04:00
Stephen Kitt
080c6c711e
Upgrade to blang/semver/v4 v4.0.0
...
This is the first version to be fully go-mod-compatible.
Signed-off-by: Stephen Kitt <skitt@redhat.com>
2022-03-28 09:33:23 +02:00
Davanum Srinivas
bef0ddef86
kube-up: use registry.k8s.io for containerd-related jobs
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-23 11:30:49 -04:00
Jordan Liggitt
548c339867
Clean up unused exec auth from cluster setup
2022-03-19 10:47:38 -04:00
Kubernetes Prow Robot
41b29e6542
Merge pull request #99287 from anfernee/clientip
...
Add HNS Load Balancer Healthchecks for ExternalTrafficPolicy: Local
2022-03-16 22:57:18 -07:00
Kubernetes Prow Robot
1007f4974d
Merge pull request #108712 from dims/support-ci-jobs-that-use-prebuilt-images-by-adding-additional-image-tags
...
Support CI jobs that use prebuilt-images by adding additional image tags
2022-03-15 21:59:48 -07:00
Davanum Srinivas
9a0bb97a34
add tags for KUBE_ADDON_REGISTRY when we load images locally
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-15 17:16:33 -04:00
xing-yang
aae1f2c476
Update sig-storage owners file
2022-03-14 18:57:52 +00:00
Yongkun Gui
78a507b256
Fix health check from Google's Load Balancer
...
This change adds 2 options for windows:
--forward-healthcheck-vip: If true forward service VIP for health check
port
--root-hnsendpoint-name: The name of the hns endpoint name for root
namespace attached to l2bridge, default is cbr0
When --forward-healthcheck-vip is set as true and winkernel is used,
kube-proxy will add an hns load balancer to forward health check request
that was sent to lb_vip:healthcheck_port to the node_ip:healthcheck_port.
Without this forwarding, the health check from google load balancer will
fail, and it will stop forwarding traffic to the windows node.
This change fixes the following 2 cases for service:
- `externalTrafficPolicy: Cluster` (default option): healthcheck_port is
10256 for all services. Without this fix, all traffic won't be directly
forwarded to windows node. It will always go through a linux node and
get forwarded to windows from there.
- `externalTrafficPolicy: Local`: different healthcheck_port for each
service that is configured as local. Without this fix, this feature
won't work on windows node at all. This feature preserves client ip
that tries to connect to their application running in windows pod.
Change-Id: If4513e72900101ef70d86b91155e56a1f8c79719
2022-03-11 22:34:59 -08:00
Kubernetes Prow Robot
ad46b4f921
Merge pull request #108457 from ialidzhikov/cleanup/target-ram-mb
...
apiserver: Remove the deprecated `--target-ram-mb` flag
2022-03-07 02:38:53 -08:00
Davanum Srinivas
7b5c718946
explicitly specify journald config
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-06 18:48:35 -05:00
Andrew Sy Kim
f654992aec
cluster/gce: update konnectivity image tags to v0.0.30
...
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-03-04 19:01:02 +00:00
Davanum Srinivas
83e205ae47
fix typo for pause image env var in kube-up
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-04 06:41:03 -05:00
Davanum Srinivas
91ade9f318
Switch pv-recycler container image to debian-base
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-03 13:37:17 -05:00
ialidzhikov
bdbc750129
apiserver: Remove the deprecated --target-ram-mb
flag
...
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2022-03-02 18:52:46 +02:00
Davanum Srinivas
abdcbb8235
Enable specifying pause image in containerd config.toml
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-02 11:51:06 -05:00
Kubernetes Prow Robot
4737127b57
Merge pull request #108429 from dims/allow-env-var-to-be-remote-url
...
Allow KUBE_TEST_REPO_LIST to be a remote url as well
2022-03-02 08:07:16 -08:00
Davanum Srinivas
08af9935a5
fix broken find command
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-01 22:54:31 -05:00
Kubernetes Prow Robot
bed430d337
Merge pull request #108389 from serathius/etcd-v3.6.0-alpha.0
...
Start building etcd v3.6.0-alpha.0 image for scalability tests
2022-03-01 12:50:06 -08:00
Davanum Srinivas
22cef5094e
Log where we pull images from
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-01 09:53:19 -05:00
Marek Siarkowicz
8f5250e3fe
Start building etcd v3.6.0-alpha.0 image for scalability tests
2022-02-28 13:58:18 +01:00
Kubernetes Prow Robot
109cb7cbe7
Merge pull request #108339 from cheftako/anp-release
...
Bump konnectivity-client to v0.0.28
2022-02-25 17:49:23 -08:00
Shihang Zhang
5ee418b4c7
bump kube-addon-manager image version to 9.1.6
2022-02-24 14:13:01 -08:00