Commit Graph

10189 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
57675324e1
Merge pull request #107189 from jingxu97/dec/containerd
Change default runtime to containerd for Windows cluster
2022-01-04 11:27:37 -08:00
CJ Cullen
282d178f7c Bump elasticsearch image to 7.16.2. 2021-12-24 01:05:40 +00:00
Jing Xu
34c14949fc Change default runtime to containerd for Windows cluster
change default runtime to containerd for windows

Change-Id: I61949ae3687cddb7bfd00715a455ee5eed4da0db
2021-12-22 14:14:52 -08:00
Kubernetes Prow Robot
95b4e46db0
Merge pull request #106593 from claudiubelu/windows/etcd-image2
Adds Windows support for etcd image
2021-12-21 15:59:35 -08:00
Kubernetes Prow Robot
1426587e08
Merge pull request #106436 from dims/cleanup-owners-files-no-activity-in-a-year
Cleanup OWNERS files (No Activity in the last year)
2021-12-15 12:07:51 -08:00
Davanum Srinivas
497e9c1971
Cleanup OWNERS files (No Activity in the last year)
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-15 10:34:02 -05:00
Kubernetes Prow Robot
7e6e307f11
Merge pull request #106843 from liggitt/drop-curl-bash
Drop unused auto-install invocation
2021-12-13 09:10:10 -08:00
Kubernetes Prow Robot
c7ff5758db
Merge pull request #106922 from cheftako/anp-release
Bump konnectivity network proxy to v0.0.27.
2021-12-10 14:11:21 -08:00
Carlos Panato
4bda9697ee
[go1.17] Update to go1.17.5
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-12-10 16:58:29 +01:00
Davanum Srinivas
c89299a890
Temporarily comment out untrusted user
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-09 21:31:32 -05:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-12-09 21:31:26 -05:00
Kubernetes Prow Robot
461dc9e371
Merge pull request #104640 from lizhuqi/fluentd-1-17
Remove stackdriver version variable
2021-12-09 16:29:10 -08:00
Walter Fender
b869d5550c Bump konnectivity network proxy to v0.0.27.
/kind feature

Includes fixes for a few resource leaks.
Set the dependency chain to K/K v0.0.21.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```
2021-12-09 11:56:20 -08:00
ahrtr
f01ecfabf4 replace ioutil with io and os for cluster/images/etcd;
bump the REVISION in Makefile to 5
2021-12-10 03:13:17 +08:00
Kubernetes Prow Robot
8cc7d14588
Merge pull request #106859 from knight42/refactor/remove-apiserver-insecure-port
refactor(apiserver): remove the insecure flags
2021-12-09 09:48:30 -08:00
wpedrak
183793cb27 Update version.txt only when necessary
Follow up on https://github.com/kubernetes/kubernetes/pull/106653
2021-12-09 10:09:49 +01:00
Jian Zeng
fe448785b5 fix: remove insecure flag from configure-kubeapiserver.sh
Signed-off-by: Jian Zeng <anonymousknight96@gmail.com>
2021-12-09 15:06:52 +08:00
Kubernetes Prow Robot
68bd9994ae
Merge pull request #106833 from cpanato/go117
[go1.17] Update to go1.17.4
2021-12-07 19:28:44 -08:00
Kubernetes Prow Robot
4c3bcf52db
Merge pull request #106653 from wpedrak/resilient-version.txt
Make writing version.txt more resilient
2021-12-07 18:27:14 -08:00
Kubernetes Prow Robot
9cbe01e5a1
Merge pull request #106588 from victory460/master
Code cleanup: fix some typo
2021-12-07 18:26:25 -08:00
Kubernetes Prow Robot
e2206cae9d
Merge pull request #106495 from aaronbbrown/abb-addon-manager-image-loc
correct kube-addon-manager image location
2021-12-07 17:27:34 -08:00
Jordan Liggitt
8139b3d89f Drop unused auto-install invocation 2021-12-06 14:48:14 -05:00
Carlos Panato
2adf0e116c
[go1.17] Update to go1.17.4
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-12-06 09:40:54 +01:00
wpedrak
d5e1ee4de8 Make writing version.txt more resilient
Writing file first truncate it and writes later on. During disk space pressure it may cause file to become empty. To mitigate above, we create file with new version first and then move it in place of old one (to make sure that disk space is available)
2021-11-26 12:44:50 +01:00
xuweiwei
9ab5c8a36f Fix typo
depenging -> depending
permssion -> permission

Signed-off-by: xuweiwei <xuweiwei_yewu@cmss.chinamobile.com>
2021-11-23 16:18:13 +08:00
Claudiu Belu
c1656d1604 Adds Windows support for etcd image
We can use docker buildx in order to build and push Windows images from the same Linux node,
as long as the Dockerfile does not have any RUN commands in the Windows step.

We also need to create a non-default builder instance in order to be able to build and
push Windows images.

The Windows images have to be built and pushed directly to the registry.

For Windows containers without Hyper-V isolation, the host OS Version and the
Container OS Version need to match, which is why we added multiple Windows OS Versions
to the building process.

For the manifest list, we need to also annotate the Windows OS Version, so the Windows nodes
will be able to pull the proper image from the manifest list.

Adds support for Windows OS Versions: 1809, 2004, 20H2, ltsc2022.

Bumped etcd image revision.
2021-11-22 12:27:57 +00:00
Aaron Brown
0f0fefd773
correct kube-addon-manager image location 2021-11-17 11:18:06 -05:00
Marek Siarkowicz
5dda60d6d1 Bump Metrics Server to v0.5.2 2021-11-17 14:51:51 +01:00
Léiyì Zhang
3c91436fc1 turning off default storage class in kube-up 2021-11-16 19:26:30 +00:00
Kubernetes Prow Robot
1c127d3682
Merge pull request #105706 from uthark/oatamanenko/upgrade-etcd-3.5.1
Upgrade etcd to 3.5.1
2021-11-15 10:04:59 -08:00
Kubernetes Prow Robot
da73a24f6a
Merge pull request #106123 from pohly/log-go-runner-windows
package log runner as part of Kubernetes releases
2021-11-15 09:04:48 -08:00
Sergey Kanzhelev
f059c3580c remove crictl tar 2021-11-11 06:12:30 +00:00
Mike Danese
384e9cec1b don't expand $(ls -A /scrub) in PV_RECYCLER_TEMPLATE
Before we write the template.
2021-11-10 11:14:45 -08:00
Kubernetes Prow Robot
e9a8bd94f7
Merge pull request #104921 from cheftako/anp-cp
Add mTLS as default HTTPConnect egress configuration for GCP.
2021-11-09 22:15:25 -08:00
Mauricio Poppe
84b403fd02 Use simple match instead of regex match 2021-11-09 05:09:18 +00:00
JD Nurme
4a9703a219 Added env variable for cloud-provider 2021-11-09 00:45:34 +00:00
Kubernetes Prow Robot
701c2b7942
Merge pull request #106196 from mauriciopoppe/gce-windows-ssh-fix
Fix creation of the administrator_keys_file file with many users
2021-11-08 13:11:57 -08:00
Kubernetes Prow Robot
97125e76f3
Merge pull request #103626 from jkh52/tweak-konnectivity
Konnectivity Proxy: move proxy-agent cpu limit to request.
2021-11-08 12:11:20 -08:00
Walter Fender
fbc13f22f8 Bump konnectivity to v0.0.25
/kind feature

Bump konnectivity network proxy to v0.0.25.
Includes fixes for a few resource leaks.
Adds better logging for debugging.
Moves to golang1.17.
Adds additional keepalives.
Fixes HTTP-CONNECT goroutine leak.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```

Update the images.
2021-11-07 14:34:09 -08:00
Carlos Panato
abbf8c3bed
[go1.17] Update to go1.17.3
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-11-07 16:29:35 +01:00
Mauricio Poppe
ff0afb6169 Fix creation of the administrator_keys_file file with many users 2021-11-06 03:14:13 +00:00
Pavithra Ramesh
f43c21448b Update to latest kubedns and nodelocaldns images. 2021-11-05 12:50:06 -07:00
Walter Fender
35737ff810 Switched ANP w/ grpc to not use destHost strategy.
Factored in feedback from caesarxuchao
2021-11-05 11:56:56 -07:00
Walter Fender
f7185b0be1 Add mTLS as default HTTPConnect egress configuration for GCP.
We currently have UDS as the configuration with GRPC.
Some users are setting up egress to remote konnectivity servers.
Cannot use UDS for this configuration.
Should have a config setup which validates the mTLS configuration.

Fixed lint errors from shell check.
Fix volumes to not include pki for ANP in grpc mode.
2021-11-05 11:39:39 -07:00
Kubernetes Prow Robot
aa964e097c
Merge pull request #106150 from pohly/log-runner-kubemark
kubemark: replace deprecated --log-file parameter with runner
2021-11-05 04:01:52 -07:00
Patrick Ohly
c3cd9a3902 kubemark: static binary, replace deprecated --log-file parameter
The --log-file parameter will be deprecated as of Kubernetes 1.23 and should be
avoided. The replacement for distroless images is the image with go-runner, a
tool that handles output redirection.

For kubemark to run in that image it must be built as static binary.
2021-11-04 20:52:56 +01:00
Kubernetes Prow Robot
2f21cff49d
Merge pull request #106018 from ahrtr/replace_ioutil_with_io_os_cluster_gce_gci
Replace ioutil with io and os for cluster/gce/gci
2021-11-04 03:08:03 -07:00
Patrick Ohly
d2a8a81639 Package kube-log-runner as part of Kubernetes releases
kube-log-runner was formerly known as go-runner when it was originally introduced
in 393e0952e9
It was moved to kubernetes/release/images/build/go-runner later but is now
needed again in Kubernetes itself as replacement for the deprecated --log-file
klog feature: when bringing up a Windows node, kube-proxy.exe and kubelet.exe must be wrapped
with the helper binary to redirect output.

It got renamed to avoid a naming conflict with
test/conformance/image/go-runner and because the name was too vague.

Other downstream Kubernetes users may have a similar need, therefore it makes
sense to provide a prebuilt binary also in the release archives.
2021-11-04 10:00:26 +01:00
Joseph Anttila Hall
d13ee80cb0 Konnectivity Proxy: move cpu limit to request. 2021-11-03 17:40:51 -07:00
Kubernetes Prow Robot
da707b6133
Merge pull request #106091 from rajansandeep/updateto1.8.6
[kube-up]: Bump coredns to 1.8.6
2021-11-03 15:24:45 -07:00
Kubernetes Prow Robot
1dd781ddca
Merge pull request #106065 from pacoxu/etcd-3.5.1-image-build
update etcd makefile to using 3.5.1 for building
2021-11-02 19:01:17 -07:00
Sandeep Rajan
be24af7644 bump coredns to 1.8.6 in kube-up
Signed-off-by: Sandeep Rajan <srajan@infoblox.com>
2021-11-02 10:52:44 -04:00
Paco Xu
6bac4dcaf7 update etcd makefile to using 3.5.1 for building
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2021-11-02 09:56:21 +08:00
Kubernetes Prow Robot
657412713b
Merge pull request #102637 from charlesxsh/fix-migrate-sever
fix potential deadlock
2021-11-01 04:17:19 -07:00
Kubernetes Prow Robot
37efc5feec
Merge pull request #105920 from SergeyKanzhelev/fixReturnValueHandling
return value is taken from if statement instead of the function call
2021-11-01 00:01:30 -07:00
ahrtr
45428d887d replace ioutil with io and os for cluster/gce/gci 2021-10-30 14:23:50 +08:00
Mauricio Poppe
9e29cc042e KubeEnv var to enable Hyper-V in Windows 2021-10-29 07:07:33 +00:00
shuaichen
3d620192d9 Use 10250 as targetPort for metrics-server
Metrics-server's usage of privileged port 443 as targetPort requires
elevated permissions than necessary and violates principle of least
privilege.
2021-10-28 03:10:15 +00:00
Joseph Burnett
a9788ca9b0 Give metrics server permission to read node stats. 2021-10-27 13:32:42 +00:00
Sergey Kanzhelev
c703725592 return value is taken from if statement instead of the function call 2021-10-26 00:11:55 +00:00
Oleg Atamanenko
965f10f539 Upgrade etcd to 3.5.1 2021-10-18 23:09:27 -07:00
Kubernetes Prow Robot
819b021ada
Merge pull request #92433 from claudiubelu/windows/etcd-image
Adds Windows support for etcd image
2021-10-18 15:49:34 -07:00
Michelle Tandya
e9e6a7cb6b Update the binary version file for NPD to 0.8.10-gke0.1 2021-10-14 20:55:41 +00:00
Mengjiao Liu
19e8852154 [go1.17] Update to go1.17.2 2021-10-14 16:15:51 +08:00
Kubernetes Prow Robot
a861de6d16
Merge pull request #105500 from ibabou/update_owners_cluster_gce
Add [ibabou] & [pjh] to Cluster GCE directory OWNERS
2021-10-06 09:58:41 -07:00
Kubernetes Prow Robot
4586ff2c7c
Merge pull request #105333 from ibabou/update_win_base_images
Update windows base images - GCE provider
2021-10-05 23:08:33 -07:00
“Ibrahim
6a2eae0d12 Add [ibabou] & [pjh] to Cluster GCE directory OWNERS 2021-10-05 22:12:49 +00:00
Sascha Grunert
9ae990e3d5
Use docker buildx for etcd image
This allows to choose the correct architecture in the image manifest,
which defaulted to the host system before applying this patch.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-10-05 13:38:02 +02:00
Kubernetes Prow Robot
70d1360ab8
Merge pull request #105103 from tkashem/extend-audit-policy
apiserver: refactor PolicyRuleEvaluator interface
2021-10-04 14:12:40 -07:00
taku333
e0901e26ca
Update sleep .5 ⇨ sleep 0.5
There is no change in the process.
I changed it because 0.5 seems to be more intuitive than .5.
2021-10-01 10:02:31 +09:00
“Ibrahim
26ce6df217 Update Windows base images GCE provider 2021-09-28 22:40:04 +00:00
Aaron Crickenberger
d41f9339f6 Revert "Use docker buildx for etcd image"
This reverts commit ea1bc18bc1.

But bumps the REVISION var

This commit broke etcd image builds
2021-09-27 10:46:17 -07:00
Kubernetes Prow Robot
6a71f85ccf
Merge pull request #105263 from cyclinder/bump_metrics_server
bump metrics-server to 0.5.1
2021-09-27 03:39:34 -07:00
Kubernetes Prow Robot
d385d0602a
Merge pull request #105158 from justaugustus/its-a-bullseye
releng: Update build images to Debian 11 (Bullseye)
2021-09-26 23:14:23 -07:00
cyclinder
3e426355b9 bump metrics-server to 0.5.1
Signed-off-by: cyclinder <qifeng.guo@daocloud.io>
2021-09-27 11:18:03 +08:00
Claudiu Belu
c4fc9bba6c Adds Windows support for etcd image
We can use docker buildx in order to build and push Windows images from the same Linux node,
as long as the Dockerfile does not have any RUN commands in the Windows step.

We also need to create a non-default builder instance in order to be able to build and
push Windows images.

The Windows images have to be built and pushed directly to the registry.

For Windows containers without Hyper-V isolation, the host OS Version and the
Container OS Version need to match, which is why we added multiple Windows OS Versions
to the building process.

For the manifest list, we need to also annotate the Windows OS Version, so the Windows nodes
will be able to pull the proper image from the manifest list.

Adds support for Windows OS Versions: 1809, 2004, 20H2, ltsc2022.

Bumped etcd image revision.
2021-09-24 18:28:00 +00:00
Aaron Crickenberger
42a955b3ae use k8s-staging-test-infra/gcb-docker-gcloud 2021-09-24 06:54:40 -07:00
Abu Kashem
a748fdc677
apiserver: refactor PolicyRuleEvaluator to return a struct 2021-09-24 08:08:32 -04:00
Kubernetes Prow Robot
7bff8adaf6
Merge pull request #92853 from cosmo0920/add-sniffer-class-loading-feature-on-es-image
[fluentd/elasticsearch] Add mechanism to load simple sniffer class
2021-09-23 23:07:24 -07:00
Stephen Augustus
8dcaf8433b
cluster/images/etcd: Build 3.5.0-2 image
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-09-20 21:02:49 -04:00
Stephen Augustus
531eb712c2
releng: Update build images to Debian 11 (Bullseye)
- debian-base:bullseye-v1.0.0
- debian-iptables:bullseye-v1.0.0
- go-runner:v2.3.1-go1.17.1-bullseye.0
- kube-cross:v1.23.0-go1.17.1-bullseye.0
- setcap:bullseye-v1.0.0

Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-09-20 20:51:32 -04:00
Paco Xu
ef99ba8cb2
konnectivity-agent-ds: remove toleration for NoSchedule 2021-09-17 10:58:09 +08:00
Paco Xu
a48a2efbd4
remove deprecated validEgressSelectorNames 'master' (#102242)
* remove deprecated validEgressSelectorNames 'master'

Signed-off-by: pacoxu <paco.xu@daocloud.io>

* update gce configure: replace deprecated egress name 'master' with 'controlplane'

Signed-off-by: pacoxu <paco.xu@daocloud.io>

* add dup error for EgressSelection & fix converting alpha/beta to v1 name
2021-09-16 07:09:46 -07:00
Kubernetes Prow Robot
03e0106bbc
Merge pull request #102592 from pacoxu/patch-11
add NoExecute toleration for konnectivity agent
2021-09-15 01:40:42 -07:00
Carlos Panato
132c7066e0
[go1.17] Update to go1.17.1
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-09-14 13:04:25 +02:00
Kubernetes Prow Robot
c79f7c1add
Merge pull request #104711 from claudiubelu/update-pause-3.6
update pause image references to use 3.6
2021-09-13 19:09:08 -07:00
Julie Qi
6bf310d6aa Remove stackdriver version variable 2021-09-10 15:26:16 -07:00
Kubernetes Prow Robot
34fb61beba
Merge pull request #104444 from cheftako/anp-v23
Enable http2 health checking with go 1.16.5 on KAS egress.
2021-09-07 08:43:15 -07:00
Kubernetes Prow Robot
7363da7ca7
Merge pull request #101318 from eltociear/patch-5
Fix typo in gci/README.md
2021-09-03 02:45:49 -07:00
Alex
bea25d8024
Update GKE kubernetes sources download link
Fix non-working link provided on MOTD to download GKE source release.
Now point to correct location, confirmed same file as provided in "/home/kubernetes/kubernetes-src.tar.gz"
2021-08-31 10:31:23 +09:00
Claudiu Belu
18936d4785 updates pause image references
The pause:3.6 image has been published.

Also updates older / incorrect references.
2021-08-29 21:50:05 -07:00
Stephen Augustus
481cf6fbe7
generated: Run hack/update-gofmt.sh
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:49 -04:00
Stephen Augustus
e8d2bff6ba
[go1.17] Update to go1.17
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:41 -04:00
Antonio Ojea
0cd75e8fec run hack/update-netparse-cve.sh 2021-08-20 10:42:09 +02:00
wfender
590300f90d Enable http2 health checking with go 1.16.5
Enabling http2 health checking on http-connect KAS egress.
Reran update-vendor.
Fixed pinning.
2021-08-19 22:38:41 -07:00
Kubernetes Prow Robot
08eaea4590
Merge pull request #104350 from tkashem/audit-policy-refactor
refactor: rename audit Checker interface
2021-08-19 01:41:24 -07:00
Kubernetes Prow Robot
9d38c64a7d
Merge pull request #104426 from mauriciopoppe/update-csi-proxy-version
Upgrade the default csi-proxy version installed by kube-up.sh
2021-08-18 15:23:45 -07:00
Sascha Grunert
6a6e24702c
Update cri-tools to v1.22.0
This patch updates crictl to the latest available release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-08-18 10:15:15 +02:00
Mauricio Poppe
fa9d5546cd Upgrade the default csi-proxy version installed by kube-up.sh 2021-08-17 19:37:26 +00:00
Kubernetes Prow Robot
f466d9278f
Merge pull request #104317 from ibabou/add_termination_hook_startup_script
Add termination hook to the startup script - GCE Windows
2021-08-12 17:50:57 -07:00
Abu Kashem
27f1503514
rename audit Checker interface 2021-08-12 17:42:41 -04:00
“Ibrahim
aa9380e017 Add termination hook to the startup script - GCE Windows 2021-08-12 19:56:15 +00:00
Marek Siarkowicz
704628fde4 Update golang used in etcd image to 1.16.7 2021-08-12 10:28:01 +02:00
Kubernetes Prow Robot
07fe9f0192
Merge pull request #104293 from x13n/master
Update version of Cluster Autoscaler to 1.22.0
2021-08-11 03:20:47 -07:00
Daniel Kłobuszewski
1181421112 Update version of Cluster Autoscaler to 1.22.0
Release notes: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.22.0
2021-08-11 09:58:25 +02:00
Kubernetes Prow Robot
a21a328a1a
Merge pull request #104116 from saschagrunert/etcd-buildx
Use docker buildx for etcd image
2021-08-11 00:54:49 -07:00
Mengjiao Liu
08d8f29a7a Update debian-base image to buster-v1.9.0 2021-08-07 09:44:59 +08:00
Kubernetes Prow Robot
eb7d492194
Merge pull request #104205 from ibabou/add_ibabou_gce_win_owners
Add [ibabou] to cluster/gce/windows OWNERS file
2021-08-06 13:47:29 -07:00
“Ibrahim
b98594bc79 Add ibabou to gce/windows OWNERS file 2021-08-06 17:48:07 +00:00
Carlos Panato
6b9dc099f8
[go1.16] Update to go1.16.7
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-08-06 17:11:00 +02:00
Kubernetes Prow Robot
bfcc756f09
Merge pull request #103963 from mcshooter/update-npd-089
update node-problem-detector v0.8.9
2021-08-05 19:45:05 -07:00
Kubernetes Prow Robot
13c74c4309
Merge pull request #104181 from SergeyKanzhelev/patch-2
Propose myself as a reviewer for cluster/gce/gci
2021-08-05 17:51:01 -07:00
Kubernetes Prow Robot
6751ae8f21
Merge pull request #104112 from mcshooter/dump-kube-env-from-startup-script
Log kube-env variables from startup script
2021-08-05 16:36:38 -07:00
Sergey Kanzhelev
ddaa06abee
Propose myself as a reviewer for cluster/gce/gci 2021-08-05 14:24:35 -07:00
Kubernetes Prow Robot
58cde6c442
Merge pull request #103874 from liggitt/move-conformance
Move conformance image
2021-08-05 08:17:34 -07:00
Kubernetes Prow Robot
1d693cd832
Merge pull request #104109 from caesarxuchao/keepalive
add a keepalive time to the konnectivity server
2021-08-05 06:09:46 -07:00
Kubernetes Prow Robot
a77d151c6c
Merge pull request #103855 from ibabou/update_bin_win_154
Update Containerd version - GCE Windows (1.5.4)
2021-08-05 01:45:07 -07:00
Kubernetes Prow Robot
04c7fe8256
Merge pull request #103627 from liu-cong/latency
Add structured logging for more steps
2021-08-04 22:11:07 -07:00
Kubernetes Prow Robot
f886190b48
Merge pull request #103436 from loburm/config_kube_proxy
Make cpu request of kube proxy configurable by env variable.
2021-08-04 19:00:40 -07:00
Kubernetes Prow Robot
ce5dbd2095
Merge pull request #103376 from mattcary/sunrpc
Drop end of sunrpc port range to avoid port conflicts.
2021-08-04 19:00:32 -07:00
Kubernetes Prow Robot
9c5cefb230
Merge pull request #101781 from ptabor/20210506-retry-dns-resolve
Retry hostname->IP: [Errno -2] Name or service not known
2021-08-04 18:59:27 -07:00
Michelle Tandya
9cffbab037 Log kube-env variables from startup script 2021-08-04 22:53:52 +00:00
vteratipally
5d84ffa6c2
Update configure-helper.sh 2021-08-04 14:36:16 -07:00
vteratipally
b0039559dd
Update configure-helper.sh 2021-08-04 13:19:00 -07:00
Chao Xu
572a24d854 add a keepalive time to the konnectivity server 2021-08-04 12:48:32 -07:00
vteratipally
0376c58c44
Update configure-helper.sh
add live-restore true by default.
2021-08-04 12:09:10 -07:00
Sascha Grunert
ea1bc18bc1
Use docker buildx for etcd image
This allows to choose the correct architecture in the image manifest,
which defaulted to the host system before applying this patch.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-08-04 14:49:45 +02:00
Michelle Tandya
4606ebe423 update node-problem-detector v0.8.9 2021-07-28 01:02:56 +00:00
Walter Fender
6d1556df7b Update to using apiserver-network-proxy v1.22
Includes a fix to prevent the agent writing to a closed channel.
2021-07-24 16:02:01 -07:00
Jordan Liggitt
024930df11 Move cluster/images/conformance to test/conformance/image 2021-07-23 11:23:55 -04:00
Kubernetes Prow Robot
8088b3e67d
Merge pull request #103713 from aojea/metrics-server-443
cluster: fix metrics-server deployment on CI jobs
2021-07-23 06:59:16 -07:00
“Ibrahim
2cacfada26 Update Containerd version - GCE Windows 2021-07-22 18:34:11 +00:00
Julie Qi
2a4a1c1d00 disable aufs module 2021-07-21 23:25:19 -07:00
Antonio Ojea
0610968bfa bump metrics-server to 0.5.0 2021-07-22 01:13:44 +02:00
Antonio Ojea
c5aead020b cluster: fix CI metrics-server deployment
use deployment based on upstream manifest

- add liveness and readiness probes
- use kubelet port secure port

https://github.com/kubernetes-sigs/metrics-server/blob/release-0.4/manifests/base/deployment.yaml#L32-L38
2021-07-22 01:06:04 +02:00
Kubernetes Prow Robot
61b2ce3855
Merge pull request #103777 from vteratipally/cos-update
update cos 85 version to latest version
2021-07-19 19:23:31 -07:00
Jefftree
536cf81974 Add konnectivity agent to log dump 2021-07-19 15:38:17 -07:00
Varsha Teratipally
9d0b32858a update cos 85 version to latest. 2021-07-19 17:54:39 +00:00
Carlos Panato
a3b6f0557d
device-plugins: replace gcr.io/gke-release to use the community registry
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-07-15 16:02:42 +02:00
Matthew Cary
60d446fe3d Drop end of sunrpc port range to avoid port conflicts.
Change-Id: I1561fe447f50d9ac835094b3cceba62ea74dfd81
2021-07-13 18:38:40 +00:00
Carlos Panato
83f8d1ad72
[go1.16] Update to go1.16.6
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-07-13 18:05:16 +02:00
Cong Liu
6c87c22277 Add structured logging for more steps 2021-07-09 15:35:44 -07:00
Kubernetes Prow Robot
119b8fc93e
Merge pull request #103057 from jeremyje/fixnet
GCE Windows: Set TCP/IP parameters to align with GCE optimal settings.
2021-07-08 14:01:44 -07:00
Kubernetes Prow Robot
f915aa39e8
Merge pull request #103541 from jbartosik/bump-addon-manager
Bump version of Addon Resizer used by Metrics Server
2021-07-07 18:09:29 -07:00
Kubernetes Prow Robot
8e56a34195
Merge pull request #102966 from SergeyKanzhelev/deprecateDynamicKubeletConfig
deprecate and disable by default DynamicKubeletConfig feature flag
2021-07-07 17:05:15 -07:00
Kubernetes Prow Robot
ac554af79b
Merge pull request #103142 from serathius/etcd-3.5.0
Upgrade etcd to 3.5.0
2021-07-07 12:40:22 -07:00
Joachim Bartosik
3fadea4ea2 Bump version of Addon Resizer used by Metrics Server
To pull in two fixes it needs to continue working in 1.22:

- Updated dependencies,
- Using new metric for getting node count.
2021-07-07 14:48:52 +02:00
Kubernetes Prow Robot
a445eb2b7f
Merge pull request #103474 from chendave/distroless
Bump `distroless/base` image to latest version
2021-07-06 06:16:42 -07:00
Dave Chen
b6b1674f56 Switch to the version instead of the latest 2021-07-06 10:58:57 +08:00
Kubernetes Prow Robot
5e3bed6399
Merge pull request #101433 from SergeyKanzhelev/patch-1
Make the service account error more apparent
2021-07-05 03:23:13 -07:00
Dave Chen
26f223fa6e Bump distroless/base image to latest version
`distroless/base:latest` is a multi-arched image now, this will help the `kubemark` works properly
on the platforms other than `amd64`

Signed-off-by: Dave Chen <dave.chen@arm.com>
2021-07-05 13:55:51 +08:00
Stephen Augustus
c24dfe528a
cluster,hack: Use community infra GCS bucket for retrieving CI builds
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-07-03 17:04:54 -04:00
Sergey Kanzhelev
dffc2a60a2 deprecate and disable by default DynamicKubeletConfig feature flag 2021-07-02 23:53:11 +00:00
Kubernetes Prow Robot
57720afb7e
Merge pull request #103387 from SergeyKanzhelev/makeSureToSplitNPDHashesByArch
make sure to split NPD hashes by architecture when upgrading to 0.8.9
2021-07-02 13:38:46 -07:00
Kubernetes Prow Robot
a331cf74b7
Merge pull request #102050 from pohly/fix/deflake-metrics-proxy
remove metrics proxy
2021-07-02 12:30:10 -07:00
Marian Lobur
5d80d6e7c3 Make cpu request of kube proxy configurable by env variable. 2021-07-02 16:00:56 +02:00
Patrick Ohly
c91496dda0 cluster: enable debug handlers on GCE master nodes
This is needed for testing metrics support via the secure port
of kube-scheduler and kube-controller-manager. To access that
port, port-forwarding is used.
2021-07-02 10:38:49 +02:00
Kubernetes Prow Robot
e524a5ab42
Merge pull request #103282 from MrHohn/cpa-multi-arch
Update dns-horizontal-autoscaler to use the multi-arch image
2021-07-01 11:47:42 -07:00
Piotr Tabor
de442ef860 Retry hostname->IP: [Errno -2] Name or service not known
During cluster configuration, the hostname is getting resolved to IP,
as etcd requires IP address as listening address.

Due to connectivity flakes or delayed network inititalization, sometimes
the IP fails to be resolved to a name with following error:
```
[Errno -2] Name or service not known
```
that leads to attempt to run etcd with empty flag.

The PR adds a proper retry (up to 5 minutes) in case the connectivity
problems happens.

I considered alternatives like: `getent hosts foo`, but unfortunetelly thay
can return IPv6 that etcd is not ready for (yet).
2021-07-01 12:20:07 +02:00
Sergey Kanzhelev
210c610d66 make sure to split NPD hashes by architecture when upgrading to 0.8.9 2021-07-01 08:12:35 +00:00
Kubernetes Prow Robot
d787eaa4d5
Merge pull request #103332 from mcshooter/updateNPDVersion
Update NPD release version and include windows defender config
2021-06-30 01:19:02 -07:00
Kubernetes Prow Robot
61ee139a08
Merge pull request #103070 from jeremyje/logspam
GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam.
2021-06-29 18:29:02 -07:00
Michelle Tandya
03f85e9ade Update NPD release version and include windows defender config 2021-06-30 00:00:32 +00:00
Kubernetes Prow Robot
ebcb4a2d88
Merge pull request #103104 from pacoxu/npd-088
update npd to v0.8.8
2021-06-29 02:30:40 -07:00
pacoxu
ffdf3f5007 update node-problem-detector npd to v0.8.8
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-Authored-By: vteratipally <vteratipally@users.noreply.github.com>
2021-06-29 09:35:32 +08:00
Zihong Zheng
f59523ab4c Update dns-horizontal-autoscaler to use the wqmulti-arch image 2021-06-28 16:53:32 -07:00
Kubernetes Prow Robot
6010cbe593
Merge pull request #103040 from shu-mutou/sig-ui-leads
Add shu-mutou to dashboard approvers
2021-06-28 02:19:49 -07:00
Joyce Kung
42f9333e7f Update debian-base image to buster-v1.8.0 2021-06-25 20:38:15 -04:00
Kubernetes Prow Robot
a2206b6891
Merge pull request #96615 from caseydavenport/casey-route-table-range
Configure Calico's route table range so it does not conflict with GKE CNI
2021-06-25 05:18:44 -07:00
Marek Siarkowicz
ebe550bd48 Upgrade etcd to 3.5.0 2021-06-24 09:15:17 +02:00
Kubernetes Prow Robot
e120459000
Merge pull request #102952 from wpedrak/master
Specify etcdctl version in livenessProbe
2021-06-22 18:28:22 -07:00
pacoxu
f05f30943d kube-apiserver in gce: use --api-audiences as --service-account-api-audiences is deprecated
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-06-22 11:09:46 +08:00
Shu Muto
d95f677dd8
Fix OWNERS 2021-06-22 10:08:13 +09:00
Jeremy Edwards
44360b315c GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam. 2021-06-21 23:46:27 +00:00
Jeremy Edwards
7839668877 GCE Windows: Set TCP/IP parameters to keep idle connections alive on GCE. 2021-06-21 23:00:32 +00:00
Mauricio Poppe
e2061cfcd8 Expose envvar CSI_PROXY_VERSION 2021-06-21 18:33:23 +00:00
wpedrak
6cb448c10e Specify etcdctl version for livenessProbe
`--command-timeout` is supported in `ETCDCTL_API` version 3 and it is NOT supported in `ETCDCTL_API` version 2. Up to etcd 3.3 (inclusive) default version of `ETCDCTL_API` was 2. This change explicitly defines used `ETCDCTL_API` and allows usage of etcd versions below 3.4.
2021-06-21 16:12:32 +02:00
tiloso
b22d0b13cc Fix verify staticcheck flake in cluster/images/etcd 2021-06-21 12:05:42 +02:00
Shu Muto
ea419eaf33 Add shu-mutou to dashboard approvers
Also, update members.
2021-06-21 18:39:43 +09:00
Kubernetes Prow Robot
ba50598ae5
Merge pull request #102386 from JornShen/bump_calico_to_v3.19.1
bump calico to v3.19.1
2021-06-18 18:12:50 -07:00
Vinayak Goyal
774d228637 remove the path if it exists before writing pki data.
if setfacl is called before chmod g+r at anypoint during the lifetime of
the cluster then the default group does not have read permissions on the
file. so we explicitly grant the default group read permissions. See
https://gist.github.com/mmdriley/85ca34f711acbec4b1b94902add488e5 for a
repro.
2021-06-18 11:03:37 -07:00
Kubernetes Prow Robot
d89c11a0d4
Merge pull request #102629 from tiloso/staticcheck-cluster-apimachinery-apiserver
Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver}
2021-06-18 09:52:06 -07:00
pacoxu
4ee38f33d2 update etcd makefile to build v3.5.0 image 2021-06-16 14:41:44 +08:00
Kubernetes Prow Robot
3a47ddccdf
Merge pull request #100488 from liggitt/protobuf
update etcd, grpc, protobuf dependencies
2021-06-15 14:49:42 -07:00
Kubernetes Prow Robot
b43e4ec89b
Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits
kube-scheduler: stop using insecure serving bits
2021-06-15 13:42:12 -07:00
Jordan Liggitt
2979c3325e Switch to go.etcd.io/etcd/client/v3 2021-06-15 09:53:06 -04:00
Jordan Liggitt
5f1983d871 Drop etcd v2 support from etcd migration image 2021-06-15 09:53:05 -04:00
Kubernetes Prow Robot
b766721332
Merge pull request #102814 from cheftako/master
Update K/K to use ANP v0.0.20
2021-06-14 19:00:33 -07:00
Jan Chaloupka
7560f33e27 kube-scheduler: stop using insecure serving bits 2021-06-14 22:50:53 +02:00
Kubernetes Prow Robot
1400be60ff
Merge pull request #102495 from jeremyje/fb177
GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression.
2021-06-11 17:03:01 -07:00
Walter Fender
9f7d61c520 Upgrade ANP components to v0.0.20.
Pick up new metrics to help with debugging and monitoring.
Pick up GRPC keep alive on frontend tunnel.
Server now using apps/options.
2021-06-11 09:02:04 -07:00
Joseph Anttila Hall
9d514b2de4 Konnectivity: tune flags for larger clusters (5k nodes). 2021-06-10 14:05:44 -07:00
Kubernetes Prow Robot
f008ba0fed
Merge pull request #102062 from serathius/etcd-server
Update Etcd server image to 3.5.0-rc.0-0
2021-06-10 08:23:27 -07:00
Kubernetes Prow Robot
4f854e39f2
Merge pull request #102689 from cpanato/go1165
[go1.16] Update to go1.16.5
2021-06-09 12:31:27 -07:00
Marek Siarkowicz
12447bc803 Upgrade etcd server version to 3.5.0-rc.0 2021-06-09 17:00:05 +02:00
Mengjiao Liu
dc5626cc18 Upgrade debian-base to buster v1.7.1 2021-06-09 14:30:31 +08:00
Kubernetes Prow Robot
4413ed50dd
Merge pull request #102585 from serathius/etcd-v3.5.0-rc.0
Update etcd makefile to build v3.5.0-rc.0 image
2021-06-08 12:26:28 -07:00
Carlos Panato
1524526991
[go1.16] Update to go1.16.5
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-06-08 14:11:32 +02:00
Kubernetes Prow Robot
028bffba58
Merge pull request #102661 from Jefftree/patch-4
Default GCE testing to using konnectivity
2021-06-07 11:45:08 -07:00
Kubernetes Prow Robot
3d2a7c146e
Merge pull request #102370 from JacobX33/master
Remove set errexit from etcd manifest
2021-06-07 08:16:40 -07:00
Jeffrey Ying
7a63dff88b
Update konnectivity default 2021-06-07 11:06:28 -04:00
Kubernetes Prow Robot
9d27400fe2
Merge pull request #102040 from njuptlzf/fix_conversion
Fix auditing failed of request: encoding failed
2021-06-05 19:58:38 -07:00
njuptlzf
7b0fbb7292 add audit log test cases for cross-group subresource 2021-06-06 09:52:05 +08:00
tiloso
c5d70e9db1 Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver} 2021-06-05 22:15:15 +02:00
Kubernetes Prow Robot
74af3b712d
Merge pull request #102297 from deads2k/ssh-tunnels
remove --ssh- options, deprecated 13 releases, that only work on GCE
2021-06-05 10:40:50 -07:00
Kubernetes Prow Robot
e6a8bc9fbe
Merge pull request #90368 from serathius/remove-legacy-metrics
Remove legacy metrics client from podautoscaler
2021-06-05 08:44:38 -07:00
Marek Siarkowicz
4ebc0c94a4 Remove legacy metrics client from podautoscaler 2021-06-04 23:06:32 +02:00
Paco Xu
7f06d0d553
add NoExecute toleration for konnectivity agent 2021-06-04 17:39:02 +08:00
Marek Siarkowicz
82be7aad26 Update etcd makefile to build v3.5.0-rc.0 image 2021-06-04 08:31:19 +02:00
Shihao Xia
f1c1992f5e fix potential deadlock 2021-06-03 21:48:34 -04:00
David Eads
ae603a38bc remove -ssh-user from cluster scripts for GCE 2021-06-03 17:53:09 -04:00
Jeremy Edwards
47a7fcb17b GCE Windows: Only create NPD kubeconfig when the file path is defined. 2021-06-02 21:15:45 +00:00
Maciej Szulik
1619e8eb95
Clean apply's prune and kube addons with batch/v1 CronJob 2021-06-02 14:27:29 +02:00
Walter Fender
355be99390 Default GCE testing to using konnectivity
Turning GRPC based Konnectivity testing on id advance of
removing the SSHTunnel code.
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=25
shows the feature to be stable and it should remain that way.
2021-06-01 16:53:41 -07:00
Jeremy Edwards
3cb4f3e1bf GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression. 2021-06-01 16:25:21 +00:00
Kubernetes Prow Robot
bc8acbc43e
Merge pull request #102328 from lentzi90/update-cni-plugins
Update CNI plugins v0.9.1
2021-05-28 10:16:46 -07:00
jornshen
c9fe8ddf68 bump calico to v3.19.1 2021-05-28 10:29:44 +08:00
David Ashpole
3813ed1ef7 fix prometheus-to-sd image for fluentbit 2021-05-27 10:54:10 -07:00
Jakub Sroka
ac17d03e76
Remove set errexit from etcd manifest
There were cases where this caused etcd to crashloop. It seems lesser evil to let migrator fail instead.
2021-05-27 14:25:35 +02:00
Kubernetes Prow Robot
d541872f9a
Merge pull request #102239 from Haleygo/clean-up-AlgorithmProvider-flag-and-pkg
clean up algorithmprovider pkg and remove scheduler deprecated algorithm-provider flag
2021-05-27 00:54:23 -07:00
Lennart Jern
507710b50f
Update CNI plugins v0.9.1
ref: https://github.com/containernetworking/plugins/releases/tag/v0.9.1
Signed-off-by: Lennart Jern <lennart.jern@est.tech>
2021-05-26 11:02:04 +03:00
Haleygo
2769e99dba remove scheduler deprecated algorithm-provider flag and clean up algorithmprovider pkg 2021-05-26 13:19:44 +08:00
Marko Mudrinić
80fa50e0d7
Update etcd image revision
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2021-05-25 22:49:20 +02:00
Marko Mudrinić
33fe4bb076
Update debian-base to buster-v1.7.0
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2021-05-25 22:49:03 +02:00
Kubernetes Prow Robot
fd82c69957
Merge pull request #102277 from serathius/etcd-image
Update etcd makefile to build v3.5.0-beta.3 image
2021-05-25 13:46:54 -07:00
Marek Siarkowicz
e862421c2b Update etcd makefile to build v3.5.0-beta.3 image 2021-05-25 15:37:22 +02:00
Sascha Grunert
b167fc24d7
Update pause image to v3.5
Update dependencies and the test images to use pause 3.5. We also
provide a changelog entry for the new container image version.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-05-25 09:04:46 +02:00
Kubernetes Prow Robot
b876623070
Merge pull request #102264 from jeremyje/fb176
Upgrade Fluent-Bit 1.7.6.
2021-05-24 21:49:29 -07:00
Kubernetes Prow Robot
06d44d2f42
Merge pull request #101168 from mikedanese/warning
add a warning about the filter table
2021-05-24 21:48:40 -07:00
walter
13ab65d356 Upgrade konnectivity-client for GRPC connection fixes
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167.
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5.
2021-05-24 14:53:30 -07:00
Kubernetes Prow Robot
ccbb7dbe54
Merge pull request #102070 from bskiba/master
Update addon resizer to 1.8.13
2021-05-24 13:38:41 -07:00
Kubernetes Prow Robot
0d46e728dd
Merge pull request #101486 from dashpole/updates_images
Update event-exporter and prometheus-to-sd versions in cluster addons
2021-05-24 13:38:32 -07:00
Jeremy Edwards
54f3eb42e9 Upgrade Fluent-Bit 1.7.6. 2021-05-24 19:51:00 +00:00
Kubernetes Prow Robot
77937b1e8e
Merge pull request #101628 from bobbypage/addon-termination-handler
Remove node termination handler addon
2021-05-24 11:31:39 -07:00
Beata Lach (Skiba)
7d2e6d7ba9 Update addon resizer to 1.8.13
Needed to fix https://github.com/kubernetes/autoscaler/issues/3567
2021-05-24 18:58:08 +02:00
Kubernetes Prow Robot
d7903669c4
Merge pull request #96299 from ggriffiths/snapshot_controller_metrics_e2e_tests
Add Snapshot Controller e2e metric tests
2021-05-23 03:33:37 -07:00
Kubernetes Prow Robot
fb3273774a
Merge pull request #99178 from wilsonehusin/distroless-conformance
Use distroless to build Conformance image
2021-05-21 13:32:11 -07:00
Grant Griffiths
564e531aa7 Add Snapshot Controller e2e metric tests
Signed-off-by: Grant Griffiths <ggriffiths@purestorage.com>
2021-05-20 23:29:23 -07:00
Kubernetes Prow Robot
3cc0ca0988
Merge pull request #102129 from SataQiu/clean-critical-pod-annotation
Cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation
2021-05-19 15:25:31 -07:00
Kubernetes Prow Robot
8c0d06aad8
Merge pull request #101869 from olagacek/master
Set poll period of metrics server nanny to 30s
2021-05-19 11:14:51 -07:00
SataQiu
ff18e391e9 cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation 2021-05-19 17:46:35 +08:00
Kubernetes Prow Robot
e830610854
Merge pull request #101539 from jeremyje/installnpd
Install Node Problem Detector on GCE Windows nodes
2021-05-18 20:16:50 -07:00
Kubernetes Prow Robot
75ec50bc10
Merge pull request #102024 from jeremyje/upgradefb
GCE Windows: Fix Fluent-bit crashloop on Windows Event Log Ingestion
2021-05-18 19:14:50 -07:00
Jeremy Edwards
09f9537338 Install Node Problem Detector on GCE Windows nodes 2021-05-15 16:14:17 +00:00
Geon-Ju Kim
181485212b Remove unnecessary quotes from get-kube scripts 2021-05-15 13:27:09 +09:00
Jeremy Edwards
2f87f280fe GCE Windows: Upgrade to fluent-bit 1.7.5 2021-05-14 21:23:30 +00:00
André Bauer
ccedb1cd64 remove kibana system:anonymous rbac
Signed-off-by: André Bauer <monotek23@gmail.com>
2021-05-14 19:10:45 +02:00
Kubernetes Prow Robot
ee9f365c51
Merge pull request #100169 from coffeepac/pc/es-7.10.2
rev ES and allow anonymous access to kibana
2021-05-14 03:58:04 -07:00
Kubernetes Prow Robot
e8cf412e5e
Merge pull request #101881 from vinayakankugoyal/konnectivity
Update konnectivity network proxy server to run as non-root, by defau…
2021-05-13 23:16:04 -07:00
Sergey Kanzhelev
72fe1b722c Make the service account error more apparent 2021-05-14 04:39:24 +00:00