Commit Graph

110287 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ef7fc10460
Merge pull request #111677 from dims/stop-panic-in-govet-levee
Stop panic in govet levee under golang 1.19
2022-08-03 22:31:46 -07:00
Kubernetes Prow Robot
feec95583a
Merge pull request #111669 from pohly/trim_report_framework
e2e: trim junit report for Spyglass
2022-08-03 20:49:58 -07:00
Kubernetes Prow Robot
b661944b65
Merge pull request #110939 from Abirdcfly/deleteutil
don't quota events.k8s.io events by default
2022-08-03 20:49:46 -07:00
Adolfo García Veytia (Puerco)
f17efe9278 Update default go version in common.sh to 1.19
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>
2022-08-03 22:23:21 -05:00
Adolfo García Veytia (Puerco)
7324b781fe Update versions and images to go 1.19 versions
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>
2022-08-03 22:23:15 -05:00
Adolfo García Veytia (Puerco)
2be8ac828e Update default go to 1.19 in pubbot rules
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>
2022-08-03 22:05:27 -05:00
Adolfo García Veytia (Puerco)
5d2de18956 Bump test Makefile to final 1.19
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>
2022-08-03 22:05:03 -05:00
Adolfo García Veytia (Puerco)
79df9e66f3 Update kubecross version to v1.25.0-go1.19-bullseye.0
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>
2022-08-03 22:04:21 -05:00
Davanum Srinivas
34742f2d2e
run lint-dependencies and follow directions
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-08-03 22:00:02 -04:00
Davanum Srinivas
30e2fcd041
Stop panic in govet-levee CI job
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-08-03 21:51:01 -04:00
Kubernetes Prow Robot
d4795e4bec
Merge pull request #111620 from Jiawei0227/storageos
cleanup: Remove storageos volume plugins from k8s codebase
2022-08-03 18:05:36 -07:00
Kubernetes Prow Robot
0a2ae7ab3a
Merge pull request #111126 from aramase/kms-v2alpha1-impl
Implement KMS v2alpha1
2022-08-03 16:41:43 -07:00
Kubernetes Prow Robot
aee13fc3de
Merge pull request #109706 from alexanderConstantinescu/etp-local-svc
Avoid re-syncing LBs for ETP=local services
2022-08-03 16:41:36 -07:00
Brian Pursley
c2238b46a2 Change cluster/gce/util to wait for firewall rule creation
Add kube::util::wait-for-jobs in create-network() to wait
for background firewall rule creation, and if any fail, log
a message and exit with the failed job's return code.
2022-08-03 17:23:27 -04:00
Kubernetes Prow Robot
a0e702763e
Merge pull request #110495 from alexzielenski/atomic-objectreference
make ObjectReference field ownership granular
2022-08-03 14:21:48 -07:00
Jiawei Wang
d52cdeae79 cleanup: Remove storageos volume plugins from k8s codebase 2022-08-03 20:19:59 +00:00
Stephen Heywood
88e86a7d98 Revert "e2e: should manage the lifecycle of an APIService" 2022-08-04 08:06:07 +12:00
Kubernetes Prow Robot
442574f3a7
Merge pull request #111513 from jingxu97/july/localstorage
Promote Local storage capacity isolation feature to GA
2022-08-03 13:05:59 -07:00
Kubernetes Prow Robot
4b6134b6dc
Merge pull request #111090 from kinvolk/rata/userns-support-2022
Add support for user namespaces phase 1 (KEP 127)
2022-08-03 13:05:47 -07:00
Anish Ramasekar
f19f3f4099
Implement KMS v2alpha1
- add feature gate
- add encrypted object and run generated_files
- generate protobuf for encrypted object and add unit tests
- move parse endpoint to util and refactor
- refactor interface and remove unused interceptor
- add protobuf generate to update-generated-kms.sh
- add integration tests
- add defaulting for apiVersion in kmsConfiguration
- handle v1/v2 and default in encryption config parsing
- move metrics to own pkg and reuse for v2
- use Marshal and Unmarshal instead of serializer
- add context for all service methods
- check version and keyid for healthz

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-08-03 19:04:47 +00:00
Kubernetes Prow Robot
d6a3a68afc
Merge pull request #111647 from bobbypage/bump_cadvisor_0_45_0
vendor: Bump cAdvisor to v0.45.0
2022-08-03 11:11:53 -07:00
Alexander Zielenski
bd648f3f9e
add regression test of formerly atomic claimRef 2022-08-03 10:57:13 -07:00
Rodrigo Campos
8dc98c9b8e Update autogenerated files
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
b1eaf6a2d9 tests: add e2e tests for userns
Co-authored-by: Rodrigo Campos <rodrigoca@microsoft.com>
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2022-08-03 19:53:22 +02:00
Rodrigo Campos
138e80819e kubelet: set user namespace options
Set the user namespace options to use for the pod.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
67b38ffe6e kubelet: propagate errors from namespacesForPod
it is a preparatory change for the next commit.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-08-03 19:53:22 +02:00
Rodrigo Campos
695b30e91c volume: use GetHostIDsForPod()
This commit only changes the UID/GID if user namespaces is enabled. When
it is enabled, it changes it so the hostUID and hostGID that are mapped
to the currently used UID/GID. This is needed so volumes are created
with the hostUID/hostGID and the user inside the container can read
them.

If user namespaces are disabled for this pod, this is a no-op: there is
no user namespace mapping, so the hostUID/hostGID are the same as inside
the container.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2022-08-03 19:53:22 +02:00
Rodrigo Campos
d07c2688fe kubelet: add GetHostIDsForPod()
In future commits we will need this to set the user/group of supported
volumes of KEP 127 - Phase 1.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
9b2fc639a0 kubelet: add GetUserNamespaceMappings to RuntimeHelper
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
63462285d5 kubelet: add userns manager
it is used to allocate and keep track of the unique users ranges
assigned to each pod that runs in a user namespace.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
Co-authored-by: Rodrigo Campos <rodrigoca@microsoft.com>
2022-08-03 19:53:22 +02:00
Rodrigo Campos
cf8164bccf apis: add validation for HostUsers
This commit just adds a validation according to KEP-127. We check that
only the supported volumes for phase 1 of the KEP are accepted.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2022-08-03 19:53:22 +02:00
Alexander Zielenski
84f795d04a
mark persistentvolume's claimRef as granular 2022-08-03 10:01:14 -07:00
David Porter
d9fda8ab3b vendor: Bump cAdvisor to v0.45.0
Signed-off-by: David Porter <david@porter.me>
2022-08-03 09:47:06 -07:00
Alexander Zielenski
133c265530
update kube-openapi 2022-08-03 09:46:39 -07:00
kerthcet
b4277e7ce4 Fix potential goroutine leakages in taint manager tests
Signed-off-by: kerthcet <kerthcet@gmail.com>
2022-08-04 00:00:48 +08:00
Dave Chen
c299a12cf2 e2e: trim junit report for Spyglass, avoid "open stdout"
Including the full information for successful tests makes the resulting XML
file too large for the 200GB limit in Spyglass when running large jobs (like
scale testing).

The original solution from https://github.com/kubernetes/kubernetes/pull/111627
broke JUnit reporting in other test suites, in particular
test/e2e_node. Keeping the code inside the framework ensures that all test
suites continue to have the JUnit reporting.

AfterReadingAllFlags is a good place to set this up because all test suites
using the test context are expected to call it before running tests and after
parsing flags.

Removing the ReportEntries added by ginkgo.By from all test reports usually
avoids the `system-err` part in the JUnit file, which in Spyglass avoids
the extra "open stdout" button.

Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
Co-authored-by: Dave Chen <dave.chen@arm.com>
2022-08-03 17:56:36 +02:00
Chih-Chieh Yang
3c31efe32f Add more comment and clip negative value to prevent Sqrt error 2022-08-03 15:16:26 +00:00
Kubernetes Prow Robot
1a916f278b
Merge pull request #111668 from endocrimes/revert-111627-trim_report
Revert "e2e: Trim junit reporter to adapt with testgrid"
2022-08-03 07:49:53 -07:00
Chih-Chieh Yang
c70ec593ec Fix minor issues and clean up 2022-08-03 14:14:36 +00:00
Danielle
5b312246c8
Revert "e2e: Trim junit reporter to adapt with testgrid" 2022-08-03 15:45:09 +02:00
Kubernetes Prow Robot
49bcbe648d
Merge pull request #111613 from dims/avoid-hardcoding-os-and-arch-installing-etcd
Avoid hard coding Operating System and Architecture in hack/lib/etcd.sh
2022-08-03 06:17:53 -07:00
Kubernetes Prow Robot
cf777ab782
Merge pull request #111627 from chendave/trim_report
e2e: Trim junit reporter to adapt with testgrid
2022-08-03 04:51:52 -07:00
Stanislav Kardashov
8b9578bf76 Generate specs after fixing typo in documentation 2022-08-03 14:18:36 +03:00
Giuseppe Scrivano
482e76dc2c features: add UserNamespacesSupport feature
define a feature gate for the user namespaces support.  The feature is
not enabled by default.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-08-03 13:18:11 +02:00
muyangren2
4af5cc3443 add test for GetAPIServerVirtualIP
modify

modify

modify

modify

modify
2022-08-03 18:12:00 +08:00
Stanislav Kardashov
e10f45b844 Fix typo in field description. 2022-08-03 13:08:43 +03:00
ZhangYu
20affda7f7 Add test for cmd/kubeadm/app/cmd/util/cmdutil.go 2022-08-03 15:01:55 +08:00
jinxu
0064010cdd Promote Local storage capacity isolation feature to GA
This change is to promote local storage capacity isolation feature to GA

At the same time, to allow rootless system disable this feature due to
unable to get root fs, this change introduced a new kubelet config
"localStorageCapacityIsolation". By default it is set to true. For
rootless systems, they can set this configuration to false to disable
the feature. Once it is set, user cannot set ephemeral-storage
request/limit because capacity and allocatable will not be set.

Change-Id: I48a52e737c6a09e9131454db6ad31247b56c000a
2022-08-02 23:45:48 -07:00
zhangxiaoyang
7375ba4e27 add validation test for features.GracefulNodeShutdownBasedOnPodPriority 2022-08-03 14:43:00 +08:00
Kubernetes Prow Robot
aea9f9887d
Merge pull request #111645 from vinaykul/restart-free-pod-vertical-scaling-cri
CRI changes to support in-place pod resize
2022-08-02 21:27:51 -07:00