Kubernetes Prow Robot
26bdfbc0ab
Merge pull request #103437 from p0lyn0mial/readyz-signal
...
genericapiserver: adds HasBeenReady lifecycle signal
2021-07-05 08:02:55 -07:00
Kubernetes Prow Robot
5e3bed6399
Merge pull request #101433 from SergeyKanzhelev/patch-1
...
Make the service account error more apparent
2021-07-05 03:23:13 -07:00
Kubernetes Prow Robot
d95c46a3e5
Merge pull request #98306 from borgerli/kube-proxy-log
...
Support dynamically set log level for kube-proxy
2021-07-05 03:23:05 -07:00
Kubernetes Prow Robot
77aa52a09a
Merge pull request #92372 from breunigs/vsphere-consider-not-found-success-on-delete
...
ignore "vmdk not found" vsphere errors during unmount (assume success)
2021-07-05 03:22:53 -07:00
Kubernetes Prow Robot
0f9a47428c
Merge pull request #101834 from pmmalinov01/remove_todo_rel_notes_team
...
CHANGELOG/OWNERS: Add simcard0000 as reviewer
2021-07-05 02:15:06 -07:00
Kubernetes Prow Robot
687f0aa35b
Merge pull request #101296 from Miciah/fix-RollingUpdateDaemonSet-godoc-regarding-rounding
...
Fix RollingUpdateDaemonSet godoc regarding rounding
2021-07-05 02:14:54 -07:00
Kubernetes Prow Robot
a3c2028cf4
Merge pull request #103039 from tkashem/fix-102973
...
apf: calculation of dR/dt should use seats in use
2021-07-05 00:14:54 -07:00
Kubernetes Prow Robot
120f6325a7
Merge pull request #103471 from pacoxu/patch-1
...
kubeadm: fix nil pointer in Cfg() feature gate checking
2021-07-04 23:06:53 -07:00
Kubernetes Prow Robot
f9d0498f71
Merge pull request #103302 from xinydev/reorder-kubeadmin
...
Cleanup: re-order the imports in kubeadm
2021-07-04 19:10:18 -07:00
Paco Xu
772344aef2
kubeadm: fix nil pointer in Cfg() feature gate checking
2021-07-05 09:59:57 +08:00
Kubernetes Prow Robot
39e951a08d
Merge pull request #101624 from tilt-dev/nicks/go-to-protobuf
...
go-to-protobuf: small fixes to improve debuggability
2021-07-04 14:22:18 -07:00
Kubernetes Prow Robot
6d8f386922
Merge pull request #103461 from justaugustus/ci-bucket
...
cluster,hack: Use community infra GCS bucket for retrieving CI builds
2021-07-04 12:38:19 -07:00
XinYang
c2a8cd359f
re-order the imports in kubeadm
...
Signed-off-by: XinYang <xinydev@gmail.com>
Update cmd/kubeadm/app/cmd/join.go
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
2021-07-04 16:41:27 +08:00
Stephen Augustus
c24dfe528a
cluster,hack: Use community infra GCS bucket for retrieving CI builds
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-07-03 17:04:54 -04:00
Kubernetes Prow Robot
5fe522c237
Merge pull request #101988 from vinayakankugoyal/kubeadm
...
Remove users and groups created as part of rootless control-plane in kubeadm.
2021-07-02 23:42:17 -07:00
Vinayak Goyal
1ae9b8f04d
Update kernel components to run as non-root in kubeadm.
2021-07-02 17:37:55 -07:00
Kubernetes Prow Robot
cbe3ef473e
Merge pull request #100412 from hanlins/lb-node-ports-beta
...
Lb node ports beta
2021-07-02 16:08:10 -07:00
Hanlin Shi
c96c809539
Add integration test for LB node port control
...
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
2021-07-02 21:58:49 +00:00
Hanlin Shi
c8bc420245
Fix the beta release version.
...
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
2021-07-02 21:58:49 +00:00
Hanlin Shi
79b6df96fc
Add tests for LB type service
...
1. create LB type svc with nodeport allocation set to false
1. create LB type svc with nodeport allocation unset
3. update LB type svc's nodeport allocation field
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
2021-07-02 21:58:49 +00:00
Hanlin Shi
24592ca989
Update the related tests
...
1. add AllocateLoadBalancerNodePorts fields in specs for validation test cases
2. update fuzzer
3. in resource quota e2e, allocate node port for loadbalancer type service and
exceed the node port quota
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
2021-07-02 21:58:41 +00:00
Kubernetes Prow Robot
57720afb7e
Merge pull request #103387 from SergeyKanzhelev/makeSureToSplitNPDHashesByArch
...
make sure to split NPD hashes by architecture when upgrading to 0.8.9
2021-07-02 13:38:46 -07:00
Kubernetes Prow Robot
d1833880a7
Merge pull request #103083 from vivian-xu/use-native-errors
...
Update github.com/pkg/errors with go native errors pkg
2021-07-02 13:38:38 -07:00
Kubernetes Prow Robot
c246b03d74
Merge pull request #101074 from verb/1.22-kubectl-target-warning
...
Warn user for runtime support of debug targeting
2021-07-02 13:38:26 -07:00
Andrew Sy Kim
05c6eaf0d1
promote ServiceLBNodePortControl to beta
...
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-02 20:09:14 +00:00
Kubernetes Prow Robot
0bb6d1431c
Merge pull request #103371 from claudiubelu/tests/windows-flakyness
...
windows tests: Wait for the network connectivity first
2021-07-02 12:30:22 -07:00
Kubernetes Prow Robot
a331cf74b7
Merge pull request #102050 from pohly/fix/deflake-metrics-proxy
...
remove metrics proxy
2021-07-02 12:30:10 -07:00
Kubernetes Prow Robot
ba008d6131
Merge pull request #103379 from thockin/rest-hooks-use-by-svc-prep
...
A collection of Service REST cleanups
2021-07-02 09:32:13 -07:00
Kubernetes Prow Robot
1345a802de
Merge pull request #103187 from Haleygo/fix-dry-run-when-using-externalCA
...
Kubeadm init --dry-run should work when using an external ca
2021-07-02 07:58:25 -07:00
Kubernetes Prow Robot
ce3bf862ee
Merge pull request #102964 from neolit123/1.22-decouple-bootstraptoken-api
...
kubeadm: decouple the bootstraptoken API from the kubeadm API
2021-07-02 07:58:13 -07:00
Lukasz Szaszkiewicz
58b91ffca9
adds HasBeenReady signal that fires when the readyz endpoint succeeds
2021-07-02 15:46:54 +02:00
Lukasz Szaszkiewicz
ca108d109d
readyz signals when the handler succeeds for the first time.
...
Co-authored-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2021-07-02 15:46:54 +02:00
Kubernetes Prow Robot
93119f4503
Merge pull request #103432 from p0lyn0mial/lifecycle_events
...
simply renames terminationSignals to lifecycleSignals
2021-07-02 05:44:13 -07:00
Lee Verberne
968185e1f7
Warn user for runtime support of debug targeting
...
Add a warning message to `kubectl debug` when using the `--target`
option as many runtimes don't support it yet.
2021-07-02 14:23:00 +02:00
Haleygo
6d6d200c3a
dry-run can work when using an external ca
2021-07-02 18:53:51 +08:00
Lukasz Szaszkiewicz
6c88a62cb4
remove logging from the Signal method
2021-07-02 12:50:20 +02:00
Lukasz Szaszkiewicz
dae08bc3a7
rename terminationSignals to lifecycleSignals
2021-07-02 12:40:58 +02:00
Patrick Ohly
c91496dda0
cluster: enable debug handlers on GCE master nodes
...
This is needed for testing metrics support via the secure port
of kube-scheduler and kube-controller-manager. To access that
port, port-forwarding is used.
2021-07-02 10:38:49 +02:00
Kubernetes Prow Robot
defcc916ed
Merge pull request #103382 from liggitt/podsecurity-hostprocess
...
[PodSecurity] hostProcess baseline check
2021-07-02 01:16:24 -07:00
Kubernetes Prow Robot
3e0432c3e1
Merge pull request #102168 from adisky/credential-provider-1
...
Improve concurrency and cache for kubelet credential provider
2021-07-02 01:16:12 -07:00
Tim Hockin
2b84b49ea9
Service REST test: Remove pointless cleanup
2021-07-01 23:24:29 -07:00
Tim Hockin
ca708fa9ac
Service REST test: Fix some names
2021-07-01 23:24:24 -07:00
Kubernetes Prow Robot
659c7e709f
Merge pull request #99494 from enj/enj/i/not_after_ttl_hint
...
csr: add expirationSeconds field to control cert lifetime
2021-07-01 23:02:12 -07:00
Tim Hockin
54b6a416fb
Service REST test: better IP and port alloc checks
2021-07-01 23:01:36 -07:00
Monis Khan
8d49502fcd
csr: update e2e conformance test with expirationSeconds usage
...
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-01 23:38:16 -04:00
Monis Khan
29b3fa7826
Generated
...
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-01 23:38:16 -04:00
Monis Khan
cd91e59f7c
csr: add expirationSeconds field to control cert lifetime
...
This change updates the CSR API to add a new, optional field called
expirationSeconds. This field is a request to the signer for the
maximum duration the client wishes the cert to have. The signer is
free to ignore this request based on its own internal policy. The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration. The minimum allowed
value for this field is 600 seconds (ten minutes).
This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.
Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.
Signed-off-by: Monis Khan <mok@vmware.com>
2021-07-01 23:38:15 -04:00
Kubernetes Prow Robot
2627808e93
Merge pull request #103378 from n4j/feature/podSecurityApparmor_v2
...
[PodSecurity] baseline - apparmor
2021-07-01 19:20:24 -07:00
Kubernetes Prow Robot
df95052de3
Merge pull request #103218 from dashpole/otel_clientgo
...
Add tracing to apiserver client-go requests
2021-07-01 19:20:12 -07:00
Tim Hockin
43b13840db
Service REST test: remove obscure const
2021-07-01 18:26:46 -07:00