Commit Graph

100548 Commits

Author SHA1 Message Date
carlory
5d9a0c3c00 As users are a valid resources type for the can-i command, the warning shouldn't appear 2021-05-01 13:13:21 +08:00
Kubernetes Prow Robot
b18aea1499
Merge pull request #101592 from M00nF1sh/target-chunk
Register/Deregister Targets in chunks for AWS TargetGroup
2021-04-30 20:15:58 -07:00
Siddhartha Chowdhuri
4425fd6bfe Added changes 2021-04-30 18:29:28 -07:00
Kubernetes Prow Robot
96e4e95397
Merge pull request #95396 from stlaz/x509_cn_error_metrics
webhooks,aggregation: add metrics to count certs missing SAN
2021-04-30 18:03:58 -07:00
Kubernetes Prow Robot
032a6fd494
Merge pull request #100233 from umangachapagain/imagepolicy-desc
add missing description to api/imagepolicy/v1alpha1/types.go
2021-04-30 15:24:00 -07:00
Cédric de Saint Martin
9fe7891fcd Container type: document that SecurityContext applies to Container instead of Pod.
Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr>
2021-04-30 21:38:06 +02:00
Kubernetes Prow Robot
ef9d6f8c93
Merge pull request #101579 from carlory/remove-fg-RootCAConfigMap
remove RootCAConfigMap feature gate
2021-04-30 12:06:33 -07:00
Kubernetes Prow Robot
8365e2384c
Merge pull request #101187 from GreenApple10/feature/import_cleanup
remove duplicate packet import
2021-04-30 12:06:25 -07:00
Kubernetes Prow Robot
25a9b583a9
Merge pull request #99760 from navist2020/fix_descriptons
Add descriptions to api/authorization/*/types.go
2021-04-30 12:06:12 -07:00
Kubernetes Prow Robot
c3b7d3056a
Merge pull request #98740 from andrewmelis/arm/fix-container-security-context-docs
Arm/fix container security context docs
2021-04-30 12:05:59 -07:00
Vinayak Goyal
b87762966d Remove remnants of basic auth from cluster bootstrap. 2021-04-30 11:23:14 -07:00
Kubernetes Prow Robot
f235adc4d2
Merge pull request #101621 from jeremyje/fixfb
GCE Windows: mkdir -p fluent-bit pos-files directory.
2021-04-30 10:24:39 -07:00
Kubernetes Prow Robot
ba5b2ea82b
Merge pull request #101595 from bobbypage/gpu
test: Update nvidia-driver-installer used in gce-device-plugin-gpu job
2021-04-30 10:24:29 -07:00
Kubernetes Prow Robot
72b24d128b
Merge pull request #101590 from smarterclayton/quantity
quantity: Allow a new quantity to be created directly from inf.Dec
2021-04-30 10:24:14 -07:00
Kubernetes Prow Robot
eec38190a0
Merge pull request #101477 from x13n/metrics-server
Bump metrics server to use 0.4.4 image.
2021-04-30 10:24:01 -07:00
Aman Chourasiya
a0e15c89ca Removing comment to improve generated docs. 2021-04-30 16:04:36 +00:00
Han Kang
0f6cea3b51 Add myself as a dep reviewer
Change-Id: I80406ca92d30c1f8d5a95f21794205d01a2f6eab
2021-04-30 07:59:19 -07:00
Mengxue Zhang
2d2ee6bc3a change default feature gate value of IndexedJob 2021-04-30 14:36:15 +00:00
Kubernetes Prow Robot
f039f94a6f
Merge pull request #101589 from mtaufen/fix-agnhost-ca
agnhost: Try both in-cluster and external discovery
2021-04-30 07:28:10 -07:00
Kubernetes Prow Robot
70f745a37a
Merge pull request #100305 from ingvagabund/kube-scheduler-release-lock-on-cancel
Release lock on cancel for scheduler
2021-04-30 07:27:58 -07:00
Kubernetes Prow Robot
a108dc498b
Merge pull request #101484 from tkashem/apf-queueset-use-list
apf: use a list instead of slice for queueset
2021-04-30 04:25:58 -07:00
Mateusz Matejczyk
5570595293 Add marseel@ to sig-scalability-reviewers 2021-04-30 13:08:10 +02:00
Jan Chaloupka
b9356df066 Drop IsScalarResourceName check in GetNonzeroRequestForResource
All invokers of GetNonzeroRequestForResource in k/k are either setting
the resource name to CPU/Memory or are checking if the requested
resource name is scalar after the invocation.
Thus, it's unnecessary to check for scalar resource name again.
In the worst case, GetNonzeroRequestForResource returns non-zero
resource quantity which can be ignored by an invoker by running
IsResourceName helpers afterwards.
2021-04-30 13:00:55 +02:00
Marcel Zięba
898cf6eb48 Add jitter to lease controller 2021-04-30 08:29:01 +00:00
Daniel Kłobuszewski
447b0ca705 Bump metrics server to use 0.4.4 image. 2021-04-30 09:13:39 +02:00
Kubernetes Prow Robot
6850e0abf2
Merge pull request #100218 from aojea/unitflakes1
unit test using metrics must reset the global registry
2021-04-29 23:01:57 -07:00
Kubernetes Prow Robot
7b7b54ed7a
Merge pull request #100354 from bobbypage/bobbypage-node-reviewer
Add bobbypage as sig node reviewer
2021-04-29 19:17:57 -07:00
Kubernetes Prow Robot
a8035dbc3b
Merge pull request #101619 from ikeeip/scheduler_framework_plugin_defaultpreemption_dependency
Scheduler: remove pkg/features dependency from DefaultPreemption plugin
2021-04-29 18:11:01 -07:00
Kubernetes Prow Robot
8d949052c8
Merge pull request #101582 from tsmetana/k8s-fix-aws-kms-key-test
Fix invalid AWS KMS key test flake
2021-04-29 18:10:52 -07:00
Kubernetes Prow Robot
a489c5a1f0
Merge pull request #101535 from adjika/feature/client-go_documentation
Fixes formatting and typos in client-go docs
2021-04-29 18:10:44 -07:00
Kubernetes Prow Robot
2b8a7809b4
Merge pull request #101524 from rphillips/add_sync_to_killpod_2
kubelet: do not cleanup volumes if pod is being killed
2021-04-29 18:10:36 -07:00
Kubernetes Prow Robot
ce5ce8e290
Merge pull request #101509 from thinpark/park
[k8s.io/apiserver/pkg/endpoints/discovery/]: improve readability
2021-04-29 18:10:28 -07:00
Kubernetes Prow Robot
663b425e21
Merge pull request #101417 from pacoxu/node-local-dns-docs
update node local dns readme for ipv6 and 1.18 GA
2021-04-29 18:10:19 -07:00
Kubernetes Prow Robot
316f9b0416
Merge pull request #101083 from eddiezane/ez/prune-sig-cli-owners
Prune sig-cli owners
2021-04-29 18:10:10 -07:00
Kubernetes Prow Robot
551ef71b64
Merge pull request #100256 from sarandia/metricsserverarch
bump metrics server version to v0.3.7 and make it multi-arch
2021-04-29 18:09:58 -07:00
Kubernetes Prow Robot
3fcd8398c7
Merge pull request #101025 from tnqn/describe-endpointslice-panic
Fix EndpointSlice describe panic when an Endpoint doesn't have zone
2021-04-29 17:07:57 -07:00
Josh Soref
44a9f24fda Spelling/grammar
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2021-04-29 19:54:59 -04:00
Jeremy Edwards
5c713379a0 GCE Windows: mkdir -p fluent-bit pos-files directory. 2021-04-29 22:52:38 +00:00
Kubernetes Prow Robot
6baad0a1d4
Merge pull request #99537 from pandaamanda/kubectl_clusterinfo_dump_fix_info
fix description of command kubectl cluster-info dump
2021-04-29 15:12:11 -07:00
David Porter
28acfab74c Update cos-gpu-installer image
This installer image should be compatible with COS-M85 images,
specifically `cos-85-13310-1041-9`
2021-04-29 14:58:47 -07:00
Kubernetes Prow Robot
204ff6caeb
Merge pull request #101586 from liggitt/delete-partition-tests
Remove inactive failing tests
2021-04-29 11:36:23 -07:00
Kubernetes Prow Robot
eb326fdc07
Merge pull request #100262 from chaitanyabandi/daemon-ns-patch
use Patch API to add namespace annotations
2021-04-29 11:36:11 -07:00
Ryan Phillips
224a4db269 cleanup podkiller close 2021-04-29 11:49:58 -05:00
Ryan Phillips
1f81b44cc7 kubelet: do not cleanup volumes if pod is being killed 2021-04-29 11:49:58 -05:00
Kubernetes Prow Robot
19c7089245
Merge pull request #101569 from wzshiming/test/e2e-node-shutdown
Fix flake for GracefulNodeShutdown e2e
2021-04-29 09:01:25 -07:00
Kubernetes Prow Robot
01955b99d7
Merge pull request #101531 from ialidzhikov/cleanup/volume-snapshot-data-source
Remove the VolumeSnapshotDataSource feature gate
2021-04-29 09:01:17 -07:00
Kubernetes Prow Robot
06eeec737a
Merge pull request #101439 from prameshj/update-kubedns
Update to using kubedns 1.17.3 image.
2021-04-29 09:01:04 -07:00
Abu Kashem
69f9bc181f
apf: use a list instead of slice for queueset 2021-04-29 12:00:55 -04:00
Kubernetes Prow Robot
02c556d4d2
Merge pull request #101005 from zxh326/fix-create-service
Set namespace when using kubectl create service
2021-04-29 09:00:51 -07:00
Michael Taufen
0b3b99c096 Try both in-cluster and external discovery
The conformance test for ServiceAccountIssuerDiscovery is currently
configured with --in-cluster-discovery, which only supports token
validation against in-cluster endpoints. Many cloud providers provide
their own, external endpoints for OIDC discovery, and because the iss
claim in tokens will point to these endpoints, but the client in this
test only trusts the Cluster CA, it will fail to connect to the external
discovery endpoints when validating the token.

To ensure that the conformance test at least supports scenario where
both the discovery doc endpoint and JWKS endpoint are cluster-local and
the scenario where both endpoints are cluster-external, this PR has the
test try both and requires at least one to pass.

Caveat: The test still won't support a configuration where one
endpoint is cluster-local and the other is external. We don't yet have
evidence that this is a configuration that is used in practice, so this
initial hotfix will at least fix the conformance test for the "both
external" configuration we know providers already use. Note that if one
endpoint is cluster-local, and the other is cluster-external, tokens can
still only be validated in-cluster, because both endpoints must be
accessible to Relying Parties that validate tokens.
2021-04-29 08:56:02 -07:00