Maciej Wyrzuc
1108bed763
Revert "Field status.hostIPs
added for Pod ( #101566 )"
...
This reverts commit 61b3c028ba
.
2022-03-31 12:39:45 +00:00
Jordan Liggitt
e54ff8a7ff
regenerate openapi with 1.24 removed APIs
2022-03-31 08:15:26 -04:00
Kubernetes Release Robot
3d1e510036
CHANGELOG: Update directory for v1.24.0-beta.0 release
2022-03-31 09:21:59 +00:00
Kubernetes Prow Robot
7d485da326
Merge pull request #109181 from liggitt/auditing-disabled-errors
...
Avoid log spam in servers without auditing enabled
2022-03-31 02:21:00 -07:00
Kubernetes Prow Robot
f2e5c16545
Merge pull request #109060 from thockin/kube-proxy-rule-cleanups-after-106497
...
Kube proxy rule reorg XLB->EXT
2022-03-31 00:11:01 -07:00
Jordan Liggitt
f23b9a5002
Avoid log spam in servers without auditing enabled
2022-03-31 02:02:48 -04:00
Sarvesh Rangnekar
b9792a9dae
Introduce APIs to support multiple ClusterCIDRs ( #108290 )
...
* Introduce networking/v1alpha1 api, ClusterCIDRConfig type
Introduce networking/v1alpha1 api group.
Add `ClusterCIDRConfig` type to networking/v1alpha1 api group, this type
will enable the NodeIPAM controller to support multiple ClusterCIDRs.
* Change ClusterCIDRConfig.NodeSelector type in api
* Fix review comments for API
* Update ClusterCIDRConfig API Spec
Introduce PerNodeHostBits field, remove PerNodeMaskSize
2022-03-30 19:39:00 -07:00
Kubernetes Prow Robot
8b158fa730
Merge pull request #108953 from nckturner/remove-insecure-serving
...
Remove the deprecated insecure serving from the cloud controller manager
2022-03-30 18:03:00 -07:00
Kubernetes Prow Robot
9f33d2867b
Merge pull request #109169 from liggitt/distribution
...
Update docker/distribution to 2.8.1 to fix go module checksum error
2022-03-30 16:35:26 -07:00
Jordan Liggitt
a6da995405
Update docker/distribution to 2.8.1 to fix checksum error
2022-03-30 18:25:47 -04:00
Kubernetes Prow Robot
c0e7b15c75
Merge pull request #109112 from dims/prune-junit-xml-files
...
Prune junit xml files to avoid issues with test grid.
2022-03-30 14:50:08 -07:00
Kubernetes Prow Robot
f33b88fe62
Merge pull request #108815 from cici37/updateComm
...
Update comments to reduce confusion
2022-03-30 14:49:56 -07:00
Kubernetes Prow Robot
5223c1efef
Merge pull request #97081 from Nordix/issue-93456
...
Ipvs: non-local access to externalTrafficPolicy:Local
2022-03-30 13:37:56 -07:00
Kubernetes Prow Robot
64c5ed3804
Merge pull request #109084 from dims/add-some-sudo-in-local-up-cluster
...
Add some sudo in local-up-cluster.sh
2022-03-30 10:58:35 -07:00
Kubernetes Prow Robot
d4ac0ebecb
Merge pull request #109072 from jiahuif-forks/feature/leader-migration/to-ga
...
Graduate Leader Migration to GA
2022-03-30 10:58:24 -07:00
Davanum Srinivas
d20df79545
prune junit xml files in ci harness
...
Over time the size of our junit xml has exploded to the point where
test-grid fails to process them. We still have the original/full
*.stdout files from where the junit xml files are generated from so the
junit xml files need NOT have the fill/exact output for
processing/display. So let us prune the large messages with an
indicator that we have "[... clipped...]" some of the content so folks
can see that they have to consult the full *.stdout files.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Davanum Srinivas
917c361880
Add a utility to prune junit xml files
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Tim Hockin
40e21e310f
Elide the -FW- chain when possible
...
This makes it epsilon harder to reason about but saves one chain
declaration and one rule per service-port usually.
2022-03-30 09:55:34 -07:00
Tim Hockin
7726b5f9fc
kube-proxy: inline args
in most cases
2022-03-30 09:55:34 -07:00
Tim Hockin
c4271c9a6f
Rename tests to avoid underscores
2022-03-30 09:55:34 -07:00
Tim Hockin
9ed6b73495
kube-proxy: comment endpoint in SEP jumps
2022-03-30 09:55:34 -07:00
Tim Hockin
0e47dc3a65
kube-proxy: remove old TODO
2022-03-30 09:55:33 -07:00
Tim Hockin
30c1523708
kube-proxy: Renames for readability
2022-03-30 09:55:32 -07:00
Tim Hockin
f1553f58c5
kube-proxy: Remove now unneeded rule
...
Now that NodePorts jump to EXT, we don't need a specific rule for
loopback source detection.
2022-03-30 09:54:40 -07:00
Tim Hockin
db932a0ab1
kube-proxy: Rework LB VIP capture logic
...
* Comments
* If there are multiple VIPs, don't declare the fwChain multiple times.
* Don't emit the last -j DROP if there's no source ranges
2022-03-30 09:54:40 -07:00
Tim Hockin
07b2585927
kube-proxy: Rename XLB -> EXT
...
This changes the "XLB" chain into the "EXT" chain - the "external
destinations" chain.
2022-03-30 09:54:38 -07:00
Tim Hockin
482f3bc4bf
kube-proxy: all external jumps to XLB chain
...
This makes the "destination" policy model clearer. All external
destination captures now jump to the "XLB chain, which is the main place
that masquerade is done (removing it from most other places).
This is simpler to trace - XLB *always* exists (as long as you have an
external exposure) and never gets bypassed.
2022-03-30 09:52:18 -07:00
Kubernetes Prow Robot
2e55595d3b
Merge pull request #109137 from wojtek-t/fix_multiple_values_indexer
...
Fix issues in indexer caused by object changing the number of index values
2022-03-30 04:04:28 -07:00
Kubernetes Prow Robot
cb6ca16d47
Merge pull request #109134 from pacoxu/patch-8
...
TestPreShutdownHooks: change timeout to 200ms
2022-03-30 01:20:26 -07:00
Paco Xu
99c447ff0e
TestPreShutdownHooks: change timeout to 1s
2022-03-30 15:12:44 +08:00
Michael Bolot
cbbb5f70a4
Addresses the issue which caused #109115
2022-03-30 09:07:37 +02:00
Wojciech Tyczyński
56159f258c
Add test for indexer with multiple values
2022-03-30 08:52:10 +02:00
Kubernetes Prow Robot
ba1bbb5ac6
Merge pull request #109128 from Jefftree/openapiv3-metrics
...
Add metrics for OpenAPI v3 generation
2022-03-29 20:37:48 -07:00
Kubernetes Prow Robot
e4690b0fbc
Merge pull request #109123 from dims/switch-to-pause-3.7
...
Switch to pause 3.7 for Kubernetes 1.24
2022-03-29 20:37:39 -07:00
Kubernetes Prow Robot
cbc341575a
Merge pull request #109122 from jpbetz/runtime-limit-tightening
...
Reduce CEL runtime cost limits by 1/2 based on latency goals
2022-03-29 20:37:29 -07:00
Kubernetes Prow Robot
c7fc0f9125
Merge pull request #109120 from kevindelgado/ss-validation-metrics
...
Track field validation in metrics
2022-03-29 20:37:20 -07:00
Kubernetes Prow Robot
7fba4f75c5
Merge pull request #109107 from liggitt/deprecated-cert-audit
...
Add audit annotations and log prefixes to deprecated cert warnings
2022-03-29 20:37:09 -07:00
Kubernetes Prow Robot
fe4cbf6514
Merge pull request #109104 from kolyshkin/bump-runc-1.1.1
...
vendor: bump runc to 1.1.1
2022-03-29 20:36:59 -07:00
Kubernetes Prow Robot
6358d36fbf
Merge pull request #109102 from liggitt/darwin-tls
...
Tolerate additional error messages in TLS unit tests
2022-03-29 20:36:50 -07:00
Kubernetes Prow Robot
9e65ee3908
Merge pull request #109097 from pacoxu/fix-sig-node-failures
...
remove baseline pod security in host pid sharing testing
2022-03-29 20:36:37 -07:00
Kubernetes Prow Robot
904c30562a
Merge pull request #109031 from Jefftree/openapiv3beta
...
OpenAPI V3 Enable Beta
2022-03-29 20:36:25 -07:00
Kubernetes Prow Robot
0c5574c2a3
Merge pull request #108745 from aramase/aes-gcm
...
feat: prepare KMS data encryption for migration to AES-GCM
2022-03-29 19:28:25 -07:00
Tim Hockin
dd0fc6b354
kube-proxy: print line number for test failures
2022-03-29 18:48:27 -07:00
Tim Hockin
ef959f00af
kube-proxy: clean up tests
...
No functional changes, much whitespace.
Make assertIPTablesRulesEqual() *not* sort the `expected` value - make
the test cases all be pre-sorted. This will make followup commits
cleaner.
Make the test output cleaner when this fails.
Use dedent everywhere for easier reading.
2022-03-29 18:48:27 -07:00
Tim Hockin
99330d407a
kube-proxy: internal renames
2022-03-29 18:48:27 -07:00
Jefftree
8e88d46210
Switch beta flag on
2022-03-29 17:49:56 -07:00
Jefftree
f0837c18d3
Add conversion if APIService does not publish v3
2022-03-29 17:49:56 -07:00
Jefftree
67d3dbfaae
Separate OpenAPI V2 and V3 Config
2022-03-29 17:49:56 -07:00
Jefftree
9d42879d2c
Update tests for kube-openapi upgrade
2022-03-29 17:49:56 -07:00
Jefftree
52af96c89c
generated: Update OpenAPI
2022-03-29 17:49:56 -07:00