Commit Graph

107605 Commits

Author SHA1 Message Date
Maciej Wyrzuc
1108bed763 Revert "Field status.hostIPs added for Pod (#101566)"
This reverts commit 61b3c028ba.
2022-03-31 12:39:45 +00:00
Jordan Liggitt
e54ff8a7ff regenerate openapi with 1.24 removed APIs 2022-03-31 08:15:26 -04:00
Kubernetes Release Robot
3d1e510036 CHANGELOG: Update directory for v1.24.0-beta.0 release 2022-03-31 09:21:59 +00:00
Kubernetes Prow Robot
7d485da326
Merge pull request #109181 from liggitt/auditing-disabled-errors
Avoid log spam in servers without auditing enabled
2022-03-31 02:21:00 -07:00
Kubernetes Prow Robot
f2e5c16545
Merge pull request #109060 from thockin/kube-proxy-rule-cleanups-after-106497
Kube proxy rule reorg XLB->EXT
2022-03-31 00:11:01 -07:00
Jordan Liggitt
f23b9a5002 Avoid log spam in servers without auditing enabled 2022-03-31 02:02:48 -04:00
Sarvesh Rangnekar
b9792a9dae
Introduce APIs to support multiple ClusterCIDRs (#108290)
* Introduce networking/v1alpha1 api, ClusterCIDRConfig type

Introduce networking/v1alpha1 api group.

Add `ClusterCIDRConfig` type to networking/v1alpha1 api group, this type
will enable the NodeIPAM controller to support multiple ClusterCIDRs.

* Change ClusterCIDRConfig.NodeSelector type in api

* Fix review comments for API

* Update ClusterCIDRConfig API Spec

Introduce PerNodeHostBits field, remove PerNodeMaskSize
2022-03-30 19:39:00 -07:00
Kubernetes Prow Robot
8b158fa730
Merge pull request #108953 from nckturner/remove-insecure-serving
Remove the deprecated insecure serving from the cloud controller manager
2022-03-30 18:03:00 -07:00
Kubernetes Prow Robot
9f33d2867b
Merge pull request #109169 from liggitt/distribution
Update docker/distribution to 2.8.1 to fix go module checksum error
2022-03-30 16:35:26 -07:00
Jordan Liggitt
a6da995405 Update docker/distribution to 2.8.1 to fix checksum error 2022-03-30 18:25:47 -04:00
Kubernetes Prow Robot
c0e7b15c75
Merge pull request #109112 from dims/prune-junit-xml-files
Prune junit xml files to avoid issues with test grid.
2022-03-30 14:50:08 -07:00
Kubernetes Prow Robot
f33b88fe62
Merge pull request #108815 from cici37/updateComm
Update comments to reduce confusion
2022-03-30 14:49:56 -07:00
Kubernetes Prow Robot
5223c1efef
Merge pull request #97081 from Nordix/issue-93456
Ipvs: non-local access to externalTrafficPolicy:Local
2022-03-30 13:37:56 -07:00
Kubernetes Prow Robot
64c5ed3804
Merge pull request #109084 from dims/add-some-sudo-in-local-up-cluster
Add some sudo in local-up-cluster.sh
2022-03-30 10:58:35 -07:00
Kubernetes Prow Robot
d4ac0ebecb
Merge pull request #109072 from jiahuif-forks/feature/leader-migration/to-ga
Graduate Leader Migration to GA
2022-03-30 10:58:24 -07:00
Davanum Srinivas
d20df79545
prune junit xml files in ci harness
Over time the size of our junit xml has exploded to the point where
test-grid fails to process them. We still have the original/full
*.stdout files from where the junit xml files are generated from so the
junit xml files need NOT have the fill/exact output for
processing/display. So let us prune the large messages with an
indicator that we have "[... clipped...]" some of the content so folks
can see that they have to consult the full *.stdout files.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Davanum Srinivas
917c361880
Add a utility to prune junit xml files
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Tim Hockin
40e21e310f Elide the -FW- chain when possible
This makes it epsilon harder to reason about but saves one chain
declaration and one rule per service-port usually.
2022-03-30 09:55:34 -07:00
Tim Hockin
7726b5f9fc kube-proxy: inline args in most cases 2022-03-30 09:55:34 -07:00
Tim Hockin
c4271c9a6f Rename tests to avoid underscores 2022-03-30 09:55:34 -07:00
Tim Hockin
9ed6b73495 kube-proxy: comment endpoint in SEP jumps 2022-03-30 09:55:34 -07:00
Tim Hockin
0e47dc3a65 kube-proxy: remove old TODO 2022-03-30 09:55:33 -07:00
Tim Hockin
30c1523708 kube-proxy: Renames for readability 2022-03-30 09:55:32 -07:00
Tim Hockin
f1553f58c5 kube-proxy: Remove now unneeded rule
Now that NodePorts jump to EXT, we don't need a specific rule for
loopback source detection.
2022-03-30 09:54:40 -07:00
Tim Hockin
db932a0ab1 kube-proxy: Rework LB VIP capture logic
* Comments
* If there are multiple VIPs, don't declare the fwChain multiple times.
* Don't emit the last -j DROP if there's no source ranges
2022-03-30 09:54:40 -07:00
Tim Hockin
07b2585927 kube-proxy: Rename XLB -> EXT
This changes the "XLB" chain into the "EXT" chain - the "external
destinations" chain.
2022-03-30 09:54:38 -07:00
Tim Hockin
482f3bc4bf kube-proxy: all external jumps to XLB chain
This makes the "destination" policy model clearer.  All external
destination captures now jump to the "XLB chain, which is the main place
that masquerade is done (removing it from most other places).

This is simpler to trace - XLB *always* exists (as long as you have an
external exposure) and never gets bypassed.
2022-03-30 09:52:18 -07:00
Kubernetes Prow Robot
2e55595d3b
Merge pull request #109137 from wojtek-t/fix_multiple_values_indexer
Fix issues in indexer caused by object changing the number of index values
2022-03-30 04:04:28 -07:00
Kubernetes Prow Robot
cb6ca16d47
Merge pull request #109134 from pacoxu/patch-8
TestPreShutdownHooks: change timeout to 200ms
2022-03-30 01:20:26 -07:00
Paco Xu
99c447ff0e TestPreShutdownHooks: change timeout to 1s 2022-03-30 15:12:44 +08:00
Michael Bolot
cbbb5f70a4 Addresses the issue which caused #109115 2022-03-30 09:07:37 +02:00
Wojciech Tyczyński
56159f258c Add test for indexer with multiple values 2022-03-30 08:52:10 +02:00
Kubernetes Prow Robot
ba1bbb5ac6
Merge pull request #109128 from Jefftree/openapiv3-metrics
Add metrics for OpenAPI v3 generation
2022-03-29 20:37:48 -07:00
Kubernetes Prow Robot
e4690b0fbc
Merge pull request #109123 from dims/switch-to-pause-3.7
Switch to pause 3.7 for Kubernetes 1.24
2022-03-29 20:37:39 -07:00
Kubernetes Prow Robot
cbc341575a
Merge pull request #109122 from jpbetz/runtime-limit-tightening
Reduce CEL runtime cost limits by 1/2 based on latency goals
2022-03-29 20:37:29 -07:00
Kubernetes Prow Robot
c7fc0f9125
Merge pull request #109120 from kevindelgado/ss-validation-metrics
Track field validation in metrics
2022-03-29 20:37:20 -07:00
Kubernetes Prow Robot
7fba4f75c5
Merge pull request #109107 from liggitt/deprecated-cert-audit
Add audit annotations and log prefixes to deprecated cert warnings
2022-03-29 20:37:09 -07:00
Kubernetes Prow Robot
fe4cbf6514
Merge pull request #109104 from kolyshkin/bump-runc-1.1.1
vendor: bump runc to 1.1.1
2022-03-29 20:36:59 -07:00
Kubernetes Prow Robot
6358d36fbf
Merge pull request #109102 from liggitt/darwin-tls
Tolerate additional error messages in TLS unit tests
2022-03-29 20:36:50 -07:00
Kubernetes Prow Robot
9e65ee3908
Merge pull request #109097 from pacoxu/fix-sig-node-failures
remove baseline pod security in host pid sharing testing
2022-03-29 20:36:37 -07:00
Kubernetes Prow Robot
904c30562a
Merge pull request #109031 from Jefftree/openapiv3beta
OpenAPI V3 Enable Beta
2022-03-29 20:36:25 -07:00
Kubernetes Prow Robot
0c5574c2a3
Merge pull request #108745 from aramase/aes-gcm
feat: prepare KMS data encryption for migration to AES-GCM
2022-03-29 19:28:25 -07:00
Tim Hockin
dd0fc6b354 kube-proxy: print line number for test failures 2022-03-29 18:48:27 -07:00
Tim Hockin
ef959f00af kube-proxy: clean up tests
No functional changes, much whitespace.

Make assertIPTablesRulesEqual() *not* sort the `expected` value - make
the test cases all be pre-sorted.  This will make followup commits
cleaner.

Make the test output cleaner when this fails.

Use dedent everywhere for easier reading.
2022-03-29 18:48:27 -07:00
Tim Hockin
99330d407a kube-proxy: internal renames 2022-03-29 18:48:27 -07:00
Jefftree
8e88d46210 Switch beta flag on 2022-03-29 17:49:56 -07:00
Jefftree
f0837c18d3 Add conversion if APIService does not publish v3 2022-03-29 17:49:56 -07:00
Jefftree
67d3dbfaae Separate OpenAPI V2 and V3 Config 2022-03-29 17:49:56 -07:00
Jefftree
9d42879d2c Update tests for kube-openapi upgrade 2022-03-29 17:49:56 -07:00
Jefftree
52af96c89c generated: Update OpenAPI 2022-03-29 17:49:56 -07:00