github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-27 21:47:07 +00:00
Code Issues Projects Releases Wiki Activity
101,985 Commits 42 Branches 7,905 Tags 1.3 GiB
012bfaf98d
Commit Graph

101985 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tim Hockin
012bfaf98d Service REST test: remove last use of "inner" 
This required making a more hi-fidelity fake.  That, in turn, required
fixing some tests which were just not correct.
 2021-07-01 18:26:45 -07:00
Tim Hockin
22ed090e73 Service REST test: mostly remove tests of "inner" 
This test was sometimes using the "inner" REST and sometimes using the
"outer" REST.  This commit changes all but one test to use the outer.
The remaining test needs rework.
 2021-07-01 18:26:45 -07:00
Tim Hockin
7e8882d189 Service REST test: Remove pointless scaffolding 
These fields don't add much value in actually proving it all works, and
they make the upcoming de-layering hard.
 2021-07-01 18:26:45 -07:00
Tim Hockin
175f4f3387 Move service test-helper funcs to a package 2021-07-01 18:26:45 -07:00
Tim Hockin
b1fcbab801 Service REST test: helper funcs for ports, too 2021-07-01 18:26:45 -07:00
Tim Hockin
5f65ba7d76 Service REST test: Use helper funcs to streamline 
This makes subsequent changes easier to see.
 2021-07-01 18:26:44 -07:00
Tim Hockin
d64bb1b29e Service REST test: always check errors 
This will be needed in upcoming changes.
 2021-07-01 18:26:44 -07:00
Tim Hockin
d3a0332b6c Service REST test: remove unused fields 
These fields are never set, so we can remove them with no change in
behavior.
 2021-07-01 18:26:44 -07:00
Tim Hockin
292b1444eb Remove bad test for AllocateLoadBalancerNodePorts 
If the gate is open, we should never find nil.
 2021-07-01 18:26:44 -07:00
Tim Hockin
0bb280044e Fix typo in IP allocator error 2021-07-01 18:26:44 -07:00
Tim Hockin
5970c4671c Add an IPFamily() method to ipallocator 2021-07-01 18:26:44 -07:00
Tim Hockin
89b633d353 Fix doc comment 2021-07-01 18:26:44 -07:00
Kubernetes Prow Robot
62503f254e
Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist 
Refactored files containing whitelist/blacklist to allowlist/denylist…
 2021-07-01 18:12:25 -07:00
Kubernetes Prow Robot
8fb67473ce
Merge pull request #103323 from sejr/podsecurity-restricted-volumes 
[Pod Security] Restricted volume type check
 2021-07-01 18:12:11 -07:00
Kubernetes Prow Robot
2d4753b898
Merge pull request #103360 from m14815/commit-21.6.3 
Error should be checked first, then go to other steps.
 2021-07-01 15:36:03 -07:00
Kubernetes Prow Robot
25bbe2ebc5
Merge pull request #99594 from cofyc/kep1845-api 
Prioritizing nodes based on volume capacity: API changes
 2021-07-01 15:35:51 -07:00
Samuel Roth
13a1804a5f podsecurity: add restricted volume type check 
podsecurity: restricted volumes check
 2021-07-01 17:51:56 -04:00
Kubernetes Prow Robot
43ebff8fa4
Merge pull request #103306 from swetharepakula/convert-proxy 
Kubeproxy uses V1 EndpointSlice
 2021-07-01 14:28:11 -07:00
Kubernetes Prow Robot
9ca75c1f49
Merge pull request #103243 from ii/promote-statefulset-status-test 
Promote to Conformance StatefulSet Patch, Read and Replace Status test +3
 2021-07-01 14:28:02 -07:00
Kubernetes Prow Robot
062bc359ca
Merge pull request #102444 from sanwishe/resourceStartTime 
Expose container start time in kubelet /metrics/resource endpoint
 2021-07-01 14:27:51 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Kubernetes Prow Robot
3334703eb2
Merge pull request #103242 from ii/promote-deployment-status-test 
Promote to Conformance Patch, Read and Replace DeploymentStatus test +1
 2021-07-01 13:18:04 -07:00
Kubernetes Prow Robot
cd94e840cb
Merge pull request #103241 from ii/promote-statefulset-list-deletecollection 
Promote to Conformance StatefulSet List, Patch & DeleteCollection Test +3
 2021-07-01 13:17:52 -07:00
Kubernetes Prow Robot
e524a5ab42
Merge pull request #103282 from MrHohn/cpa-multi-arch 
Update dns-horizontal-autoscaler to use the multi-arch image
 2021-07-01 11:47:42 -07:00
Kubernetes Prow Robot
e5135985fa
Merge pull request #103340 from MadhavJivrajani/proc-mount-baseline 
Add baseline check for procMount type
 2021-07-01 09:50:07 -07:00
Kubernetes Prow Robot
b0af328e6e
Merge pull request #103326 from pacoxu/safe-sysctls 
Mark net.ipv4.ip_unprivileged_port_start as a safe sysctl
 2021-07-01 09:49:55 -07:00
Kubernetes Prow Robot
7e00f5d401
Merge pull request #103118 from wangyysde/remove-errors-from-check_conformance_test_requirements.go 
use native error instead of github.com/pkg/errors
 2021-07-01 07:39:55 -07:00
Madhav Jivrajani
f0ffba75ad Add baseline check for procMount type 
- Will not allow if a container (init or not) sets the proc mount type to anything other than `Default`
- Include fixture for proc mount baseline generation and the consequent genreated test data

Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
 2021-07-01 20:02:36 +05:30
Kubernetes Prow Robot
1861e4756d
Merge pull request #103396 from praveenghuge/master-to-main-cleanup 
k8s.io master to main cleanup
 2021-07-01 04:45:54 -07:00
Kubernetes Prow Robot
3f4c39bbd7
Merge pull request #103063 from neolit123/1.22-add-patches-to-v1beta3 
kubeadm: add support for patches in v1beta3; deprecate --experimental-patches
 2021-07-01 02:25:54 -07:00
Kubernetes Prow Robot
a0c83ba938
Merge pull request #103385 from ravisantoshgudimetla/fix-ubernetes-tests-2 
[storage] [test] Ensure proper resource creation
 2021-07-01 00:06:06 -07:00
Kubernetes Prow Robot
dbfea1e2aa
Merge pull request #103365 from liggitt/podsecurity-feature-test 
PodSecurity: make failure integration tests feature-aware
 2021-07-01 00:05:54 -07:00
Kubernetes Prow Robot
c14017b270
Merge pull request #103176 from CaoDonghui123/updatemod 
Update golang.org/x/net
 2021-06-30 22:17:54 -07:00
Praveen Ghuge
db3534dd64 master too main cleanup 2021-06-30 21:56:29 -07:00
Kubernetes Prow Robot
5c23b61247
Merge pull request #103327 from SataQiu/fix-write-config-to 
kube-scheduler: ensure the default config output of --write-to-config is usable
 2021-06-30 21:00:06 -07:00
Kubernetes Prow Robot
ea0098b811
Merge pull request #103219 from mgutierrez98/refactor-wait_go 
Renamed variable within wait_test containing master to control plane
 2021-06-30 20:59:54 -07:00
wangyysde
e2e1c94f06 use native error instead of github.com/pkg/errors 
Signed-off-by: wangyysde <net_use@bzhy.com>
 2021-07-01 10:54:09 +08:00
Kubernetes Prow Robot
4748bb04b6
Merge pull request #102508 from kolyshkin/runc-1.0 
Update runc to 1.0.0
 2021-06-30 19:35:55 -07:00
pacoxu
2cab85a403 Mark net.ipv4.ip_unprivileged_port_start as a safe sysctl 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-07-01 10:31:21 +08:00
Jordan Liggitt
ba6b4c5a18 PodSecurity: test GA-only cases and alpha/beta fields separately 2021-06-30 22:08:11 -04:00
Jordan Liggitt
e87016cf94 PodSecurity: add ability to skip failure cases if relevant features are disabled 2021-06-30 22:05:00 -04:00
Yecheng Fu
b522e95aae Prioritizing nodes based on volume capacity: API changes 2021-07-01 10:00:59 +08:00
Swetha Repakula
03b7a699c2 Kubeproxy uses V1 EndpointSlice 2021-06-30 18:41:57 -07:00
Kubernetes Prow Robot
c206af0367
Merge pull request #103380 from vinayakankugoyal/bug 
Fix incorrect user and group for kube-scheduler when it is running as non-root.
 2021-06-30 17:21:53 -07:00
Kir Kolyshkin
ab5b77944e kubelet/cm: don't set Devices 
Since runc 1.0.0 it is now sufficient to have SkipDevices: true.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2021-06-30 16:17:35 -07:00
Kir Kolyshkin
4e7cf5413d vendor: bump runc to 1.0.0 pre 
This is to check if runc 1.0.0 (to be released shortly) works with k8s.

The commands used were (roughly):

	hack/pin-dependency.sh github.com/opencontainers/runc v1.0.0
	hack/lint-dependencies.sh
	# Follow its recommendations.
	hack/pin-dependency.sh github.com/cilium/ebpf v0.6.1
	hack/pin-dependency.sh github.com/opencontainers/selinux v1.8.2
	hack/pin-dependency.sh github.com/sirupsen/logrus v1.8.1
	# Recheck.
	hack/lint-dependencies.sh
	GO111MODULE=on go mod edit -dropreplace github.com/willf/bitset
	hack/update-vendor.sh
	# Recheck.
	hack/lint-dependencies.sh
	hack/update-internal-modules.sh
	# Recheck.
	hack/lint-dependencies.sh

[v2: rebased, updated runc 3a0234e1fe2e82 -> 2f8e8e9d977500]
[v3: testing master + runc pr 3019]
[v4: updated to 93a01cd4d0b7a0f08a]
[v5: updated to f093cca13d3cf8a484]
[v6: rebased]
[v7: updated to runc v1.0.0]
[v8: rebased]

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2021-06-30 16:16:32 -07:00
Kubernetes Prow Robot
642f42d62b
Merge pull request #103364 from aramase/check-privileged 
[PodSecurity] Add privileged containers baseline check
 2021-06-30 16:11:48 -07:00
Kubernetes Prow Robot
385402d506
Merge pull request #103082 from chrishenzie/read-write-once-pod-access-mode-scheduler 
Enforce ReadWriteOncePod during scheduling
 2021-06-30 16:11:36 -07:00
ravisantoshgudimetla
67bc23411b [storage] [test] Ensure proper resource creation 
Ensure resources are created in zone with schedulable
nodes. For example, if we have 4 zones with 3 zones
having worker nodes and 1 zone having master nodes(unscheduable
for workloads), we should not create resources like PV, PVC or
pods in that zone.
 2021-06-30 18:01:57 -04:00
Kubernetes Prow Robot
0dad7d1c47
Merge pull request #103318 from jpbetz/fix-102749 
Bump SMD to v4.1.2 to pick up #102749 fix
 2021-06-30 14:03:03 -07:00