Dan Winship
df7e4a9432
Belatedly port pkg/proxy/config Endpoints unit tests to EndpointSlice
2022-12-30 19:51:35 -05:00
xin.li
8848f848db
[ut] add test for pkg/probe/http/request.go
...
Signed-off-by: xin.li <xin.li@daocloud.io>
2022-12-30 10:13:54 +08:00
Dan Winship
0ea0295965
Duplicate the "anti-martian-packet" rule in kube-proxy
...
This rule was mistakenly added to kubelet even though it only applies
to kube-proxy's traffic. We do not want to remove it from kubelet yet
because other components may be depending on it for security, but we
should make kube-proxy output its own rule rather than depending on
kubelet.
2022-12-29 16:24:58 -05:00
Dan Winship
305641bd4c
Add iptablesKubeletJumpChains to iptables proxier
...
Some of the chains kube-proxy creates are also created by kubelet; we
need to ensure that those chains exist but we should not delete them
in CleanupLeftovers().
2022-12-29 16:24:58 -05:00
Dan Winship
37a8a2bdaf
fix indentation of iptables dumps in some test cases
...
(Especially, use tabs rather than spaces.)
2022-12-29 16:24:58 -05:00
Dan Winship
1870c4cdd7
Add a comment-only rule to the end of KUBE-FW-* chains
...
With the removal of the "-j KUBE-MARK-DROP" rules, the firewall chains
end rather ambiguously. Add a comment-only rule explaining what will
happen.
2022-12-29 16:24:58 -05:00
Kubernetes Prow Robot
00aae4c10c
Merge pull request #114740 from kushagra98/master
...
Misleading message when there are no metrics.
2022-12-29 11:09:28 -08:00
Kushagra
80384bbb55
spelling mistake rectified
2022-12-29 17:55:17 +00:00
Transmitt0r
50ed17a66e
Changed remaining code to improve output for files under test/e2e/autoscaling
2022-12-29 17:42:02 +01:00
Kushagra
f380ef8b61
Misleading message when there are no metrics.
2022-12-29 10:57:43 +00:00
huyinhou
b9987eeb6c
fix allDevices map data race
2022-12-29 18:27:08 +08:00
chen zechun
94ea99dab4
Remove duplicate fmt.Sprintf for logging
2022-12-29 17:39:10 +08:00
Quan Tian
a5790d5caa
Do not log errors when ServiceHealthServer is closed normally
...
Server.Serve() always returns a non-nil error. If it exits because the
http server is closed, it will return ErrServerClosed. To differentiate
the error, this patch changes to close the http server instead of the
listener when the Service is deleted. Closing http server automatically
closes the listener, there is no need to cache the listeners any more.
Signed-off-by: Quan Tian <qtian@vmware.com>
2022-12-29 17:11:29 +08:00
andyzhangx
776bbbb320
fix: tryUnmount with SafeNotMountedBehavior
2022-12-29 08:58:31 +00:00
huyinhou
997cefc9da
add unit test
2022-12-29 14:50:18 +08:00
JunYang
cc4126a010
use klog.InfoS instead of klog.V(0).Info-proxy part
2022-12-29 11:16:51 +08:00
jjjungkim
266aa4be5d
fix typo
2022-12-28 08:23:50 +00:00
Kubernetes Prow Robot
7eb9a75bf9
Merge pull request #114710 from thockin/document_group-version-to-pkg-path
...
simplify group-version-to-pkg-path()
2022-12-27 13:41:28 -08:00
Kubernetes Prow Robot
24490fdd65
Merge pull request #114704 from thockin/codegen_safer_xargs
...
codegen: safer use of 'sort' and 'xargs'
2022-12-27 10:45:28 -08:00
Tim Hockin
77e41786a2
simplify group-version-to-pkg-path()
2022-12-27 10:34:44 -08:00
Kubernetes Prow Robot
136eb9c203
Merge pull request #114705 from thockin/codegen_subproject_cleanup
...
Cleanup codegen subproject scripts
2022-12-27 07:59:40 -08:00
Kubernetes Prow Robot
1e523a36b2
Merge pull request #114700 from kerthcet/cleanup/replace-deprecated-function-in-pointer
...
Replace deprecated pointer function in scheduler tests
2022-12-27 07:59:29 -08:00
Kubernetes Prow Robot
e54e97294f
Merge pull request #114708 from thockin/verify_swagger_git_subtree
...
Make verify-generated-swagger-docs use worktree
2022-12-27 05:57:38 -08:00
Kubernetes Prow Robot
33e284fcd8
Merge pull request #114707 from thockin/verify_yamlfmt_git_subtree
...
Make verify-yamlfmt.sh use git worktree
2022-12-27 05:57:27 -08:00
Kubernetes Prow Robot
659a792f84
Merge pull request #114709 from thockin/remove_gengo_dep
...
Remove dep on gengo
2022-12-27 02:15:27 -08:00
Paco Xu
160f015ef4
kubelet: add key encipherment usage only if it is rsa key
...
remove allowOmittingUsageKeyEncipherment as it is always true
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2022-12-27 16:04:25 +08:00
Kubernetes Prow Robot
5e969c3568
Merge pull request #114706 from thockin/verify_mocks_git_subtree
...
Make verify-mocks.sh use git worktree
2022-12-26 22:01:27 -08:00
Kubernetes Prow Robot
04cba00205
Merge pull request #114711 from thockin/shell_array_instead_of_string
...
make update: Use a shell array instead of string
2022-12-26 20:37:27 -08:00
Tim Hockin
b5c5913db0
Make verify-generated-swagger-docs use worktree
...
Also move a function into these files that was only used in the one
place.
2022-12-26 17:17:33 -08:00
Tim Hockin
90e290e495
Make verify-yamlfmt.sh use git worktree
2022-12-26 17:14:58 -08:00
Tim Hockin
ff7ba89b1c
Make verify-mocks.sh use git worktree
2022-12-26 17:14:14 -08:00
Tim Hockin
db1f27896f
make update: Use a shell array instead of string
2022-12-26 16:24:16 -08:00
Tim Hockin
5b17cd61a9
Remove dep on gengo
2022-12-26 16:23:36 -08:00
Tim Hockin
0cba4a197d
Cleanup codegen subproject scripts
...
Mostly really small things like linewraps and quoting.
2022-12-26 16:09:08 -08:00
Tim Hockin
709dadb899
codegen: safer use of 'sort' and 'xargs'
...
`LC_ALL=C` is consistent regardless of locale
`xargs -0` is safe when filenames may have spaces
2022-12-26 16:08:59 -08:00
Kubernetes Prow Robot
68b96575a2
Merge pull request #114669 from Nordix/ipvs-remove-module-check
...
Ipvs: remove module check
2022-12-26 10:09:27 -08:00
Paco Xu
3ace3eb74b
certificates default to tolerate no key encipherment
2022-12-26 23:15:21 +08:00
Kante Yin
666605498a
Replace deprecated pointer function
...
Signed-off-by: Kante Yin <kerthcet@gmail.com>
2022-12-26 22:06:44 +08:00
yanggang
650b42ce30
fix-typo
...
Signed-off-by: yanggang <gang.yang@daocloud.io>
2022-12-26 15:11:38 +08:00
Tim Hockin
7c7d79b058
Make the warning about pod name clearer
...
Previously this was cut-paste from deployment. It didn't make much
sense for pod.
2022-12-25 14:20:55 -08:00
Kubernetes Prow Robot
685d639cb5
Merge pull request #114464 from Nordix/issue-114461
...
Set permissions for timestamp directory before publishing update to avoid permission denied
2022-12-24 16:11:26 -08:00
Lars Ekman
5ff705fd77
proxy/ipvs: Describe and handle a bug in moby/ipvs
...
Handle https://github.com/moby/ipvs/issues/27
A work-around was already in place, but a segv would occur
when the bug is fixed. That will not happen now.
2022-12-24 10:21:27 +01:00
Tero Saarni
96306f144a
Set permissions on volume before publishing update
...
This change fixes a race condition that was caused by setting the file owner,
group and mode non-atomically, after the updated files had been published.
Users who were running non-root containers, without GID 0 permissions, and
had removed read permissions from other users by setting defaultMode: 0440 or
similar, were getting intermittent permission denied errors when accessing
files on secret or configmap volumes or service account tokens on projected
volumes during update.
2022-12-24 07:59:41 +02:00
Kubernetes Prow Robot
05ecc3d602
Merge pull request #114683 from thockin/remove_old_comment_proxy_valid_pod_addr
...
Remove TODO about API proxy checking for svc
2022-12-23 15:37:37 -08:00
Kubernetes Prow Robot
e96337606d
Merge pull request #114681 from thockin/nix_comments_about_ipv6_not_ready
...
Remove old comments about IPv6 not being ready
2022-12-23 15:37:26 -08:00
Kubernetes Prow Robot
0b05897c30
Merge pull request #112021 from mrunalp/test_host_path_pv_selinux_fix
...
Set correct SELinux label for host paths volumes created by host path provisioner
2022-12-23 12:35:27 -08:00
Tim Hockin
ed3ebbaaa7
Remove TODO about API proxy checking for svc
2022-12-23 12:32:17 -08:00
Brian Pursley
aa7a828f20
cmd/get: Remove cmd argument from Run()
...
Removes the need to pass cmd as an argument to Run(). This change required reading the --sort-by flag in Complete() in a way similar to other flags.
This change allows the cobra.Command not to need to be passed throughout the completion code, which I updated as part of this commit.
It also is a step in the direction of the TODO comment requesting the removal of arguments passed to Run() and watch().
2022-12-23 14:56:59 -05:00
Kubernetes Prow Robot
a4deb20a1d
Merge pull request #114030 from lauchokyip/fixApply
...
Removed factory from apply command flag struct
2022-12-23 11:13:27 -08:00
Tim Hockin
57b9656e2b
Remove old comments about IPv6 not being ready
2022-12-23 11:06:44 -08:00