108029 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Dan Winship	24e1e3d9ee	proxy/iptables: port packet-flow tests to use new parsing stuff	2022-05-09 11:29:08 -04:00
Dan Winship	913f4bc0ba	pkg/util/iptables/testing: Fix FakeIPTables ... FakeIPTables barely implemented any of the iptables interface, and the main part that it did implement, it implemented incorrectly. Fix it: - Implement EnsureChain, DeleteChain, EnsureRule, and DeleteRule, not just SaveInto/Restore/RestoreAll. - Restore/RestoreAll now correctly merge the provided state with the existing state, rather than simply overwriting it. - SaveInto now returns the table that was requested, rather than just echoing back the Restore/RestoreAll.	2022-05-09 11:29:08 -04:00
Dan Winship	10a72a9e03	pkg/util/iptables/testing: Add IPTables dump-parsing helpers	2022-05-09 11:29:06 -04:00
Dan Winship	f0f47ae590	proxy/iptables: tweak sortIPTablesRules some more ... Sort the ":CHAINNAME" lines in the same order as the "-A CHAINNAME" lines (meaning, KUBE-NODEPORTS and KUBE-SERVICES come first). (This will simplify IPTablesDump because it won't need to keep track of the declaration order and the rule order separately.)	2022-05-09 11:19:28 -04:00
Dan Winship	f2fa1033d0	pkg/util/iptables/testing: Add better IPTables rule-parsing helpers ... There were previously some strange iptables-rule-parsing functions that were only used by two unit tests in pkg/proxy/ipvs. Get rid of them and replace them with some much better iptables-rule-parsing functions.	2022-05-09 11:19:26 -04:00
Kubernetes Prow Robot	2b3508e0f1	Merge pull request #109826 from danwinship/multi-load-balancer ... fix kube-proxy bug with multiple LB IPs and source ranges	2022-05-06 03:09:15 -07:00
Kubernetes Prow Robot	6585b9da58	Merge pull request #109736 from my-git9/kubernetesurl2 ... Update links to cluster auditing documentation	2022-05-06 03:09:04 -07:00
Kubernetes Prow Robot	7141b6d58d	Merge pull request #109840 from neolit123/1.25-fix-master-taint-re-add ... kubeadm: only taint CP nodes when the legacy "master" taint is present	2022-05-05 21:31:03 -07:00
Kubernetes Prow Robot	5e9a6a256e	Merge pull request #109464 from liggitt/gomodule-install ... Use module mode when building/installing	2022-05-05 16:28:52 -07:00
Kubernetes Prow Robot	4bec6b34ef	Merge pull request #107122 from songlh/fixing-5 ... fixing the panic in TestVersion	2022-05-05 16:28:41 -07:00
Kubernetes Prow Robot	313d9fb0b1	Merge pull request #109311 from my-git9/creatego ... Modify function parameters	2022-05-05 13:50:41 -07:00
Lubomir I. Ivanov	b1f3034051	kubeadm: only taint CP nodes when the legacy "master" taint is present ... During upgrade when a CP node is missing the old / legacy "master" taint, assume the user has manually removed it to allow workloads to schedule. In such cases do not re-taint the node with the new "control-plane" taint.	2022-05-05 23:39:23 +03:00
Kubernetes Prow Robot	71df3e819b	Merge pull request #109545 from sanposhiho/fix-nun-on-scheduler_perf ... Skip adding data to avoid "json: unsupported value: NaN" panic when data is NaN	2022-05-05 11:53:45 -07:00
Kubernetes Prow Robot	751e9c0f5b	Merge pull request #109825 from alculquicondor/reduce-tests ... Reduce number of repetitions and pods in TestPreemptionRaces	2022-05-05 10:50:29 -07:00
Kubernetes Prow Robot	f853a05e24	Merge pull request #109534 from ii/promote-job-lifecycle-test ... Promote Batchv1JobLifecycleTest +4 Endpoints	2022-05-05 10:50:21 -07:00
Kubernetes Prow Robot	522cd18f87	Merge pull request #109779 from marseel/reduce_buckets_for_ttl_controller ... Reduce number of buckets in ttl controller for 2k+ nodes clusters	2022-05-05 09:45:00 -07:00
Kubernetes Prow Robot	6966988ba2	Merge pull request #109760 from wojtek-t/fix_leaking_reconciler_storage ... Fix leaking reconciler storage	2022-05-05 09:44:52 -07:00
Kubernetes Prow Robot	ac61dc624c	Merge pull request #109626 from logicalhan/watch-cache-metrics ... refactor watch cache metrics so that they are in a single place	2022-05-05 09:44:43 -07:00
Kubernetes Prow Robot	8041606dfa	Merge pull request #109557 from mborsz/traces ... Improve Create/Update traces.	2022-05-05 09:44:32 -07:00
Kubernetes Prow Robot	0bd2847019	Merge pull request #109435 from pohly/feature-gates-sorting ... 1.25: feature gate cleanup	2022-05-05 09:44:20 -07:00
Kensei Nakada	4af3c5efeb	Skip adding data to avoid "json: unsupported value: NaN" panic when data is NaN	2022-05-05 16:11:22 +00:00
Kubernetes Prow Robot	d582814d5e	Merge pull request #109795 from photra/fix-broken-links ... Fix broken links	2022-05-05 08:14:27 -07:00
Kubernetes Prow Robot	64d1acd21b	Merge pull request #109711 from MushuEE/patch-1 ... Update Metrics doc as there is a typo in package	2022-05-05 08:14:20 -07:00
Dan Winship	813aca47af	proxy/iptables: fix firewall rules with multiple LB IPs ... The various loops in the LoadBalancer rule section were mis-nested such that if a service had multiple LoadBalancer IPs, we would write out the firewall rules multiple times (and the allowFromNode rule for the second and later IPs would end up being written after the "else DROP" rule from the first IP).	2022-05-05 10:58:09 -04:00
Dan Winship	df589b46a1	proxy/iptables: test multiple LoadBalancer IPs on one service	2022-05-05 10:58:09 -04:00
Dan Winship	709b4f696d	proxy/iptables: test LoadBalancerSourceRanges vs node IP ... The LoadBalancer rules change if the node IP is in one of the LoadBalancerSourceRange subnets, so make sure to set nodeIP on the fake proxier so we can test this, and add a second source range to TestLoadBalancer containing the node IP. (This changes the result of one flow test that previously expected that node-to-LB would be dropped.)	2022-05-05 10:58:07 -04:00
Aldo Culquicondor	51b1bb5ea7	Reduce number of repetitions and pods in TestPreemptionRaces ... Change-Id: Id2c73be7be2536b02c804978d26d1e977a344399	2022-05-05 10:38:05 -04:00
xin.li	9d7012d164	modify error line ... Signed-off-by: xin.li <xin.li@daocloud.io>	2022-05-05 21:44:43 +08:00
Kubernetes Prow Robot	99de67958d	Merge pull request #109798 from liggitt/psp ... Remove PodSecurityPolicy admission plugin	2022-05-05 06:40:32 -07:00
Kubernetes Prow Robot	8f7e80cd89	Merge pull request #109483 from cyclinder/fix_healthz ... kube-proxy: fix healthz return unexpect code 200	2022-05-05 06:40:19 -07:00
Jordan Liggitt	6cdaecfe0a	Build in hermetic module mode	2022-05-05 08:47:33 -04:00
Jordan Liggitt	2a10ca650d	drop vendor from test targets	2022-05-05 08:47:33 -04:00
Jordan Liggitt	7227c442c0	drop vendor from makefile	2022-05-05 08:47:33 -04:00
Jordan Liggitt	39f5c13510	drop vendor from go install paths	2022-05-05 08:47:33 -04:00
Marcel Zięba	47257b7613	Reduce number of buckets in ttl controller for 2k+ nodes clusters	2022-05-05 12:26:36 +00:00
Kubernetes Prow Robot	b81a2a7373	Merge pull request #109792 from my-git9/csi-test2 ... modify link	2022-05-05 05:02:31 -07:00
Kubernetes Prow Robot	50e1f70027	Merge pull request #109782 from danwinship/no-local-endpoints-metric ... Don't increment "no local endpoints" metric when there are no remote endpoints	2022-05-05 05:02:20 -07:00
Wojciech Tyczyński	33dca56ba8	Destroy endpoints-reconciler lease storage on shutdown	2022-05-05 13:45:48 +02:00
Kubernetes Prow Robot	b7c4d243de	Merge pull request #109804 from cici37/celUpdate ... Bump cel-go to v0.11.2	2022-05-05 01:44:01 -07:00
Kubernetes Prow Robot	78f3b812ff	Merge pull request #109803 from liggitt/api-fixture-data ... v1.24.0 API fixture data	2022-05-05 01:43:53 -07:00
Kubernetes Prow Robot	6aa4c92403	Merge pull request #109772 from robscott/robscott-sig-net-approvers ... Adding myself to sig-network reviewers and approvers	2022-05-05 01:43:45 -07:00
Kubernetes Prow Robot	f0928952d7	Merge pull request #109770 from fromanirh/e2e-node-device-plugin-skip ... e2e: node: explicit skip for device plugin tests	2022-05-05 01:43:37 -07:00
Kubernetes Prow Robot	77c37da7fc	Merge pull request #109764 from saikat-royc/fix-delete-timeout ... honor the framework delete timeout for pv	2022-05-05 01:43:29 -07:00
Kubernetes Prow Robot	f40f078590	Merge pull request #109759 from wojtek-t/cleanup_integration_tests ... Minor cleanup to use t.Run() in test/integration	2022-05-05 01:43:22 -07:00
Kubernetes Prow Robot	e514c5d79c	Merge pull request #109755 from p0lyn0mial/harden-test-service-account ... hardens integration serviceaccount tests	2022-05-05 01:43:14 -07:00
Kubernetes Prow Robot	f1ad477c88	Merge pull request #109751 from SataQiu/clean-kubeadm-20220502 ... kubeadm: replace *clientset.Clientset with clientset.Interface for join phase	2022-05-05 01:43:06 -07:00
Kubernetes Prow Robot	43575888fd	Merge pull request #109750 from aojea/spdy_tls ... spdyroundtripper: don't need to verify server hostname twice	2022-05-05 01:42:59 -07:00
Kubernetes Prow Robot	794d3ab686	Merge pull request #109740 from AllenZMC/fix_test_iptables ... Optimize test cases for iptables	2022-05-05 01:42:51 -07:00
Kubernetes Prow Robot	b5d494cdee	Merge pull request #109738 from AllenZMC/fix ... Optimize test cases for ipvs	2022-05-05 01:42:43 -07:00
Tim Allclair	07c34eb400	[E2E] Refactor pod polling functions (WaitForX) (#109704) ... * Clean up WaitFor Pod functions * Handle retryable errors when polling * Log more context on timeout * #squash Address PR feedback	2022-05-05 01:42:32 -07:00