Commit Graph

102189 Commits

Author SHA1 Message Date
atiratree
1e0f695afa fix translations location in update-translations.sh 2021-07-07 20:01:25 +02:00
Kubernetes Prow Robot
006d5b8539 Merge pull request #103524 from bergerhoffer/help-text-updates
Minor adjustments to descriptions and example text
2021-07-07 10:44:12 -07:00
Kubernetes Prow Robot
b93cd81609 Merge pull request #103481 from wojtek-t/pf_watch_tracker
Add watch tracker to APF for request cost estimation
2021-07-07 10:44:06 -07:00
Kubernetes Prow Robot
896cf744cb Merge pull request #103420 from raisaat/pods-api-test-fix
Fix pkg/api/pod/util tests to ensure feature gate is set
2021-07-07 10:43:53 -07:00
Kubernetes Prow Robot
20be00980c Merge pull request #103232 from astraw99/fix_delete_nil_pointer
Fix delete nil pointer panic
2021-07-07 10:43:41 -07:00
Kubernetes Prow Robot
657c6fe033 Merge pull request #103407 from brianpursley/visit-order-tests
Added unit tests for ExpandPathsToFileVisitors
2021-07-07 08:57:08 -07:00
Kubernetes Prow Robot
f166221f10 Merge pull request #103390 from ironyman/validators
Use system-validators v1.5.0
2021-07-07 08:56:56 -07:00
Kubernetes Prow Robot
eaba61b4de Merge pull request #103276 from NetApp/data-source-ref
Add DataSourceRef field to PVC spec
2021-07-07 08:56:44 -07:00
Kubernetes Prow Robot
b289fbb03d Merge pull request #103409 from andrewsykim/service-internal-traffic-policy-e2e
test/e2e/network: add test for Service internalTrafficPolicy
2021-07-07 06:18:43 -07:00
Andrea Hoffer
6b736f3484 Minor adjustments to descriptions and example text 2021-07-07 08:27:51 -04:00
wojtekt
cea1dcfeed Add watch tracker to APF for request cost estimation 2021-07-07 11:05:30 +02:00
Kubernetes Prow Robot
17f6f28621 Merge pull request #103468 from Huang-Wei/fix-sched-cc
instantiates scheduler ComponentConfig after parsing feature gates
2021-07-07 01:22:43 -07:00
Kubernetes Prow Robot
ec39cc2eaf Merge pull request #103507 from CaoDonghui123/updateurl
update  kubectl url
2021-07-06 23:56:43 -07:00
Kubernetes Prow Robot
656d00e894 Merge pull request #103496 from neolit123/1.22-add-defaulting-v1beta3-imagepull
kubeadm: statically default ImagePullPolicy in v1beta3
2021-07-06 22:11:48 -07:00
Kubernetes Prow Robot
72f28fb8b3 Merge pull request #103445 from tallclair/podsecurity-attrs
Move pod-security-admission to an external Attributes interface
2021-07-06 22:11:39 -07:00
Samuel Roth
9e87082b85 [Pod Security] Baseline + restricted policy checks for seccomp (#103341)
* podsecurity: add seccomp policy checks

* podsecurity: generated seccomp fixtures
2021-07-06 22:11:28 -07:00
Kubernetes Prow Robot
2547c5bb97 Merge pull request #103307 from aojea/kubelet_podIPs
podIPs order match node IP family preference (Downward API)
2021-07-06 22:11:20 -07:00
Kubernetes Prow Robot
561959f682 Merge pull request #102823 from ehashman/kep-2400-swap
Alpha node swap support
2021-07-06 22:11:11 -07:00
Kubernetes Prow Robot
99f77725c8 Merge pull request #102677 from yuzhiquan/deprecated-warning-for-drain
Deprecated message for ignore-errors flag
2021-07-06 22:11:03 -07:00
Kubernetes Prow Robot
60475ee5c2 Merge pull request #102181 from enj/enj/i/deprecate_gcp_azure
Deprecate azure and gcp in-tree auth plugins
2021-07-06 22:10:55 -07:00
Kubernetes Prow Robot
7df432f78f Merge pull request #99582 from chendave/fix_config
custom plugin config should take precedence over default plugin config
2021-07-06 22:10:43 -07:00
astraw99
af19d7f415 fix delete nil pointer panic 2021-07-07 12:45:13 +08:00
Kubernetes Prow Robot
1affd894cf Merge pull request #98431 from wawa0210/fix-98253
fix kubectl alpha debug node does not work on tainted(NoExecute) nodes
2021-07-06 21:04:42 -07:00
Kubernetes Prow Robot
e1acbbd8fd Merge pull request #99961 from margocrawf/master
Introduce Impersonate-UID header
2021-07-06 18:46:43 -07:00
Ben Swartzlander
00dba76918 Add DataSourceRef field to PVC spec
Modify the behavior of the AnyVolumeDataSource alpha feature gate to enable
a new field, DataSourceRef, rather than modifying the behavior of the
existing DataSource field. This allows addition Volume Populators in a way
that doesn't risk breaking backwards compatibility, although it will
result in eventually deprecating the DataSource field.
2021-07-06 21:17:41 -04:00
Kubernetes Prow Robot
ca0c8275b4 Merge pull request #103484 from wojtek-t/pf_queue_picker
Update the logic to pick the best queue in P&F
2021-07-06 16:22:22 -07:00
Kubernetes Prow Robot
15222a599f Merge pull request #103244 from verult/fsgroup-to-csi
Delegate applying FSGroup to CSI driver through NodeStageVolume and NodePublishVolume
2021-07-06 16:22:10 -07:00
Antonio Ojea
a7469cf680 sort and filter exposed Pod IPs
runtimes may return an arbitrary number of Pod IPs, however, kubernetes
only takes into consideration the first one of each IP family.

The order of the IPs are the one defined by the Kubelet:
- default prefer IPv4
- if NodeIPs are defined, matching the first nodeIP family

PodIP is always the first IP of PodIPs.

The downward API must expose the same IPs and in the same order than
the pod.Status API object.
2021-07-07 00:15:31 +02:00
Tim Allclair
cf6ba6096f Move pod-security-admission to an external Attributes interface 2021-07-06 15:15:15 -07:00
Monis Khan
6bfaeaf916 Deprecate azure and gcp in-tree auth plugins
With the client-go credential plugin functionality going GA in 1.22,
it is now time to deprecate these legacy integrations.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-06 17:18:25 -04:00
Elana Hashman
5584725605 Explicitly set LimitedSwap case with fallthrough 2021-07-06 13:50:09 -07:00
Kubernetes Prow Robot
59e5b849c9 Merge pull request #103517 from liggitt/podsecurity-fixture-cleanup
Podsecurity fixture cleanup
2021-07-06 13:16:31 -07:00
Kubernetes Prow Robot
15b4498e34 Merge pull request #101767 from damemi/random-downscale-beta
Promote LogarithmicScaleDown to Beta
2021-07-06 13:16:19 -07:00
Kubernetes Prow Robot
cbba6e41cc Merge pull request #103472 from andrewsykim/deflake-quota-service-test
test/integration/quota: deflake TestQuotaLimitService
2021-07-06 12:08:19 -07:00
Raisaat Rashid
68dadd40d6 Fix pkg/api/pod/util tests to ensure feature gate is set
Fixing this led to finding a bug in how the TestDropProbeGracePeriod
unit tests were written, so this patch also includes a fix for that.

Co-Authored-By: Elana Hashman <ehashman@redhat.com>
2021-07-06 13:34:54 -05:00
wojtekt
0ecc7ba311 Update the logic to pick the best queue in P&F 2021-07-06 20:25:38 +02:00
Kubernetes Prow Robot
eae87bfe7e Merge pull request #103483 from odinuge/revert-102508-runc-1.0
Revert "Update runc to 1.0.0"
2021-07-06 10:42:56 -07:00
Kubernetes Prow Robot
f41f3b15bc Merge pull request #103480 from chendave/pluginconfig_issue
Readable error message on the plugin configs of the removed plugins
2021-07-06 10:42:48 -07:00
Kubernetes Prow Robot
6fc7dd5137 Merge pull request #103292 from verb/1.22-kubectl-debug-compat
Add backwards compatibility for ephemeral containers in kubectl debug
2021-07-06 10:42:39 -07:00
Kubernetes Prow Robot
3392f16908 Merge pull request #102890 from ankeesler/exec-plugin-v1
exec credential provider: add v1 struct
2021-07-06 10:42:31 -07:00
Kubernetes Prow Robot
ea3bcbc205 Merge pull request #101946 from chendave/balance_allocation
Support extended resource in NodeResourcesBalancedAllocation plugin
2021-07-06 10:42:19 -07:00
Wei Huang
4c9c761bbb instantiates scheduler ComponentConfig after parsing feature gates 2021-07-06 10:39:12 -07:00
Margo Crawford
74f5ed6b17 This introduces an Impersonate-Uid header to server side code.
UserInfo contains a uid field alongside groups, username and extra.
This change makes it possible to pass a UID through as an impersonation header like you
can with Impersonate-Group, Impersonate-User and Impersonate-Extra.

This PR contains:

* Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
* Unit tests for allowed and disallowed impersonation cases
* An integration test that creates a CertificateSigningRequest using impersonation,
  and ensures that the API server populates the correct impersonated spec.uid upon creation.
2021-07-06 10:13:16 -07:00
Jordan Liggitt
2220fc6149 PodSecurity: clean up unnecessary passing fixtures 2021-07-06 12:44:00 -04:00
Jordan Liggitt
ea54b1b152 PodSecurity: Make check-specific passing fixtures optional 2021-07-06 12:43:56 -04:00
Kubernetes Prow Robot
2423842549 Merge pull request #103514 from soltysh/format_string
Hide long and multiline strings when printing
2021-07-06 09:35:02 -07:00
Kubernetes Prow Robot
dd8ba30877 Merge pull request #103509 from sanposhiho/test/integration/util/fix-typo
Fix(test/integration/util): fix typo on logging message
2021-07-06 09:34:55 -07:00
Kubernetes Prow Robot
7752b195f2 Merge pull request #103504 from tkashem/apf-add-additional-latency
apf: refactor width into its own struct
2021-07-06 09:34:43 -07:00
Kubernetes Prow Robot
c93e509e6f Merge pull request #103435 from dashpole/rename_service
Change tracing service from kube-apiserver to apiserver
2021-07-06 09:34:31 -07:00
Kubernetes Prow Robot
907e2c4d46 Merge pull request #103294 from mengjiao-liu/rename-master-package
test/integration: rename package and files name from master to controlplane
2021-07-06 09:34:19 -07:00