Commit Graph

72065 Commits

Author SHA1 Message Date
Andrew Lytvynov
5c073abfe1 Move csr.RequestNodeCertificate into kubelet bootstrap package
This func is only used by the kubelet and there's no need to pollute
client-go API with it.
2018-11-13 10:27:51 -08:00
Andrew Lytvynov
162b364292 Remove unused funcs in certutil 2018-11-13 10:26:43 -08:00
k8s-ci-robot
bfb95290b9
Merge pull request #70795 from yuexiao-wang/print-join-command
kubeadm: print the join command
2018-11-13 10:11:21 -08:00
Lubomir I. Ivanov
9a37f2d878
kubeadm: set pod-infra-container-image for the kubelet
The kubelet allows you to set `--pod-infra-container-image`
(also called `PodSandboxImage` in the kubelet config),
which can be a custom location to the "pause" image in the case
of Docker. Other CRIs are not supported.

Set the CLI flag for the Docker case in flags.go using
WriteKubeletDynamicEnvFile().
2018-11-13 13:10:22 -05:00
Thomas Riccardi
068cdaa56c Recognize newer docker versions without -ce/-ee suffix
Since docker 18.09, the ServerVersion field format changed: the `-ce`
or `-ee` suffix disappeared:

- docker 18.06: `18.06.1-ce`
- docker 18.09: `18.09.0`

This was not expected by the docker_validator version regexp, which
assumed newer docker versions ended with `-[a-z]{2}`.
This made the validator return an error, whereas we expect it to
return only a warning (by recognizing it as a newer but not yet
supported docker version).

This commit relax the version regexp to also recognize `18.09.0`.
The docker validator now returns a warning, as tested.
2018-11-13 18:55:29 +01:00
Chuck Ha
db3d636f91
updates license year
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-13 12:49:42 -05:00
Chuck Ha
5792eeb137
kubeadm: Adds tests to node patching
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-13 12:48:54 -05:00
k8s-ci-robot
9199025b24
Merge pull request #70849 from yagonobre/rm-dynamic-kubelet
Remove DynamicKubeletConfig from init and join workflow
2018-11-13 08:54:34 -08:00
k8s-ci-robot
bd2cb5a72d
Merge pull request #70831 from mikedanese/securesvcacct
add BoundServiceAccountTokenVolume feature
2018-11-13 08:54:25 -08:00
wojtekt
4242d1b760 Use watch cache when rv=0 even when limit is set 2018-11-13 16:52:30 +01:00
Ruben Orduz
89a5d5cadd iptables reset text message
Signed-off-by: Ruben Orduz <rubenoz@gmail.com>
2018-11-13 10:36:43 -05:00
k8s-ci-robot
67b7d9777d
Merge pull request #70749 from brancz/log-metrics
pkg/kubelet/logs: Add container log size metric
2018-11-13 06:47:08 -08:00
Yago Nobre
62c9303ecf
Remove DynamicKubeletConfig from init and join workflow, also remove DynamicKubeletConfig feature gate 2018-11-13 11:56:24 -02:00
k8s-ci-robot
da33d8ab7b
Merge pull request #70893 from fabriziopandini/fix-stacked-etcd
fix kubeadm upgrade regression
2018-11-13 04:38:48 -08:00
yuexiao-wang
5851fd556b kubeadm: print the join command should happen after all the phases in init have finished
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-11-13 19:05:10 +08:00
Deep Debroy
05759a9091 Handle validation of drivers in Spec and Status
Signed-off-by: Deep Debroy <ddebroy@docker.com>
2018-11-13 02:35:30 -08:00
k8s-ci-robot
89bdc42f76
Merge pull request #70964 from dashpole/update_cadvisor_godep_v0.32.0
Update cAdvisor godeps to v0.32.0
2018-11-13 01:56:21 -08:00
Patrick Ohly
89193ac0fd e2e/storage: avoid fmt.Sprintf for single string
The fmt.Sprintf call is either redundant (if the format string
contains no format characters) or broken (if it does, because there
are no parameters).
2018-11-13 10:43:19 +01:00
Deep Debroy
af73d7bdc1 Add validation of CSINodeInfo before Create/Update calls
Signed-off-by: Deep Debroy <ddebroy@docker.com>
2018-11-13 00:48:56 -08:00
fabriziopandini
7f1b2a62a7 fix kubeadm upgrade 2018-11-13 09:14:16 +01:00
k8s-ci-robot
bcef72bf06
Merge pull request #70877 from yagonobre/reset
Handler error when kubeconfig file not exist on kubeadm reset
2018-11-12 23:56:57 -08:00
k8s-ci-robot
468c99ea24
Merge pull request #70558 from seans3/custom-column-move
kubectl: move custom columns printers and flags
2018-11-12 22:17:30 -08:00
Daniel Smith
980242c209 fixup! add longest_running_processor_microseconds metric 2018-11-12 21:57:57 -08:00
k8s-ci-robot
b31f9cb0cf
Merge pull request #70850 from mikedanese/enabletr
always enable TokenRequest in GCE kube-up.sh
2018-11-12 20:04:27 -08:00
k8s-ci-robot
efd19d3c94
Merge pull request #70970 from awly/unexport-csr-parsecsr
Unexport csr.ParseCSR
2018-11-12 18:31:45 -08:00
Andrew Lytvynov
41334cfdd3 Unexport csr.ParseCSR
This func is only used internally and was copied from
k8s.io/kubernetes/pkg/apis/certificates.
2018-11-12 17:15:09 -08:00
k8s-ci-robot
27cf50d85e
Merge pull request #70322 from mikedanese/audoidc
make oidc authenticator (more?) audience aware
2018-11-12 17:03:29 -08:00
k8s-ci-robot
3c5c6025bf
Merge pull request #70807 from Klaven/kubeadm_1221
kubeadm: Remove AuditPolicyConfiguration
2018-11-12 15:43:23 -08:00
David Ashpole
770b81a2b1 update cAdvisor godeps to v0.32.0 2018-11-12 15:07:41 -08:00
Pavithra Ramesh
73b548db06 Support running a nodelocal dns cache
This change includes the yaml files and gce startup script changes
to run this addon. It is disabled by default, can be enabled by setting
KUBE_ENABLE_NODELOCAL_DNS=true
An ip address is required for the cache instance to listen for
requests on, default is a link local ip address of value 169.254.25.10

addressed review comments, updated image location
Picked a different prometheus port so stats port is not same as the
coredns deployment

Removed the nodelocaldns-ready label.
Set memory limit to 30Mi
2018-11-12 14:54:20 -08:00
Sean Sullivan
e0b712d428 kubectl: move custom columns printers and flags 2018-11-12 14:31:59 -08:00
k8s-ci-robot
3bcbc5da79
Merge pull request #70887 from seans3/kubectl-get-fix
kubectl get: remove internal resource dependency
2018-11-12 13:20:08 -08:00
Mike Danese
f4ff26679f add BoundServiceAccountTokenVolume feature
* require TokenRequest to be enabled and configured
* bind ca.crt publisher to this feature rather than to TokenRequest
2018-11-12 13:11:47 -08:00
Frederic Branczyk
4724fca678
pkg/kubelet/stats: Add container log size metric 2018-11-12 22:04:50 +01:00
Daniel Smith
680ddd49d8 fixup! add longest_running_processor_microseconds metric
fix data race
2018-11-12 12:57:42 -08:00
Mike Danese
a714d9cd04 make oidc authenticator (more?) audience aware
Part of https://github.com/kubernetes/kubernetes/issues/69893
2018-11-12 12:43:21 -08:00
k8s-ci-robot
08784ad9af
Merge pull request #70842 from mikedanese/simplify
combine syncs in rootcacertpublisher
2018-11-12 12:01:45 -08:00
Marek
064f74b2e8 fixes kubeadm 1221 to remove AuditPolicyConfiguration
Added conversion test and failure.
2018-11-12 14:33:26 -05:00
Mike Danese
f3611a6264 always enable TokenRequest in GCE kube-up.sh 2018-11-12 11:24:52 -08:00
Antoine Pelisse
d3d4d268ac Add test for CRD server-dry-run and fix bug
Add a new test to make sure we can server-dry-run CRDs and also fix a
typo now that we have a test, we could notice that it doesn't work.
2018-11-12 11:06:27 -08:00
Daniel Smith
fd77aa5a41 add longest_running_processor_microseconds metric 2018-11-12 10:52:18 -08:00
k8s-ci-robot
7712766daf
Merge pull request #70872 from juanvallejo/jvallejo/cronjob-server-side-delete
defer finalizing pods for cronjobs to server delete
2018-11-12 08:28:41 -08:00
juanvallejo
18e969e8b6
update bazel 2018-11-12 10:13:48 -05:00
juanvallejo
9f1cc8571e
defer finalizing pods for cronjobs to server delete 2018-11-12 10:13:48 -05:00
Yago Nobre
5e31a6bb74
Handler error when kubeconfig file not exist on kubeadm reset 2018-11-12 10:36:35 -02:00
k8s-ci-robot
0ca67bde54
Merge pull request #70362 from ddebroy/ddebroy-multi-pvc
Add multi PVC versions of e2e tests for WaitForFirstConsumer
2018-11-12 03:14:39 -08:00
k8s-ci-robot
d8e78c8ac5
Merge pull request #66149 from honkiko/do-not-take-all-endpoints-into-ipset
hairpin ipset could only contain local endpoints
2018-11-12 02:04:09 -08:00
k8s-ci-robot
99811e2540
Merge pull request #70870 from fabriziopandini/kubeadm-config-JoinControlPlane
Kubeadm config refactor JoinControlPlane
2018-11-12 00:53:09 -08:00
k8s-ci-robot
5fb8229218
Merge pull request #70024 from fabriziopandini/kubeadm-addons-config
kubeadm - addon configuration in the kubeadm config API.
2018-11-12 00:52:59 -08:00
k8s-ci-robot
94c5953904
Merge pull request #70699 from liggitt/controllerrevisions
Include read access to controllerrevisions for admin/edit/view roles
2018-11-11 21:17:39 -08:00