Commit Graph

4485 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
87cf098f34 Merge pull request #129452 from SataQiu/fix-20250102
kubeadm: fix a bug where the 'node.skipPhases' in UpgradeConfiguration is not respected by 'kubeadm upgrade node' command
2025-01-02 12:00:14 +01:00
SataQiu
4c6deed07e kubeadm: fix a bug where the node.skipPhases in UpgradeNodeConfiguration is not respected by 'kubeadm upgrade node' 2025-01-02 17:44:05 +08:00
Kubernetes Prow Robot
3c229949f9 Merge pull request #129401 from pacoxu/kubeadm-upgrade-precheck
kubeadm: add kernel version check for upgrade
2025-01-02 03:50:13 +01:00
SataQiu
2fd16abbe8 kubeadm: bump supported etcd version 2024-12-31 10:11:38 +08:00
Paco Xu
2c305d71f0 kubeadm: add system verification check(including kernel version check) for upgrade 2024-12-30 18:17:56 +08:00
Lubomir I. Ivanov
b406ba5cc3 kubeadm: skip disabled addons in clusterconfig on upgrade
If an addon is disabled in the ClusterConfiguration skip it
on upgrade in the repsective subphase of 'addons'.
2024-12-28 12:20:00 +02:00
Kubernetes Prow Robot
80379db5d5 Merge pull request #129279 from HirazawaUi/remove-cri-anno
[NodeLocalCRISocket]: remove kubeadm.alpha.kubernetes.io/cri-socket annotation when kubeadm upgrade
2024-12-21 09:46:09 +01:00
HirazawaUi
7c515cd1cb remove kubeadm.alpha.kubernetes.io/cri-socket annotation when kubeadm upgrade 2024-12-21 14:57:57 +08:00
Kubernetes Prow Robot
646e7f04d9 Merge pull request #129317 from carlory/kubeadm-touch
kubeadm: remove preflight check for `touch` on Linux nodes.
2024-12-21 05:00:09 +01:00
Kubernetes Prow Robot
fab7593a29 Merge pull request #129278 from HirazawaUi/remove-kubelet-args
[NodeLocalCRISocket]:  Remove `container-runtime-endpoint` flag when kubeadm upgrade
2024-12-20 11:26:08 +01:00
carlory
4396511e43 kubeadm: removed preflight check for touch on Linux nodes.
Signed-off-by: carlory <baofa.fan@daocloud.io>
2024-12-20 11:28:30 +08:00
HirazawaUi
769e7990d6 remove container-runtime-endpoint flag when upgrade 2024-12-20 08:03:10 +08:00
Stephen Kitt
efdb735750 kubeadm: fix idempotency retain, address deprecation
CreateOrRetain is supposed to operate on an object name which isn't
necessarily the given object's name (for use in migrations), this
restores that feature.

Replace all uses of deprecated functions with their generic variants.

Providing the context externally isn't useful right now, drop it from
the new functions and use context.Background() where needed.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-12-19 14:29:09 +01:00
Stephen Kitt
db4c509e71 kubeadm: generalise CreateOrUpdate etc.
This uses generics to generalise the various CreateOrUpdate,
CreateOrRetain etc. functions. Where appropriate, the context is added
as an initial argument to the new functions.

ConfigMapMutator isn't used anywhere else, so it's dropped in favour
of the private objectMutator added in this commit.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-12-19 09:19:29 +01:00
Kubernetes Prow Robot
e818574885 Merge pull request #129131 from pacoxu/kubeadm-iptables-check
kubeadm: remove iptables/ip/tc/ethtool binary preflight check
2024-12-14 08:14:53 +01:00
Paco Xu
39e7db9cc9 kubeadm: remove iptables/ip/tc/ethtool binary preflight check 2024-12-13 16:11:07 +08:00
Kubernetes Prow Robot
e8615e2712 Merge pull request #129054 from pohly/remove-import-name
remove import doc comments
2024-12-12 09:58:35 +01:00
Kubernetes Prow Robot
f83f78dbd5 Merge pull request #129141 from vlttnv/patch-1
Fix grammar mistake in kubeadm config v1beta4
2024-12-12 06:41:02 +00:00
Kubernetes Prow Robot
1f415b4e13 Merge pull request #129006 from kokes/kubeadm_rereading_kubeconfigs
kubeadm: Do not read kubeconfig from disk repeatedly in the init phase
2024-12-12 05:28:38 +00:00
Valentin
9bd5dc86d3 Fix grammar mistake in kubeadm config v1beta4
Fix grammar mistake in kubeadm configuration documentation - use "a YAML" instead of "an YAML" since YAML starts with a consonant sound.
2024-12-10 14:00:38 +02:00
Patrick Ohly
8a908e0c0b remove import doc comments
The "// import <path>" comment has been superseded by Go modules.
We don't have to remove them, but doing so has some advantages:

- They are used inconsistently, which is confusing.
- We can then also remove the (currently broken) hack/update-vanity-imports.sh.
- Last but not least, it would be a first step towards avoiding the k8s.io domain.

This commit was generated with
   sed -i -e 's;^package \(.*\) // import.*;package \1;' $(git grep -l '^package.*// import' | grep -v 'vendor/')

Everything was included, except for
   package labels // import k8s.io/kubernetes/pkg/util/labels
because that package is marked as "read-only".
2024-12-02 16:59:34 +01:00
Ondrej Kokes
6f06cd6e05 Do not reload kubeconfig from disk
When `kubeadm init phase bootstrap-token` gets invoked, it reads
the kubeconfig from disk repeatedly. This is wasteful, but, more
importantly, it blocks the use of `/dev/stdin` and other sources
of data that cannot be read repeatedly.

This change introduces a new field that caches a parsed kubeconfig
and when a new clientset is requested, it is converted from
this pre-parsed kubeconfig, the code no longer reaches out to disk.
2024-11-27 16:44:51 +01:00
Abhishek Kr Srivastav
179fa16f46 Remove user privilege checks from preflight tests 2024-11-15 19:52:27 +05:30
Kubernetes Prow Robot
deecaf73eb Merge pull request #128763 from srivastav-abhishek/fix-err-string
Fixed failing UT TestWriteKubeletConfigFiles by removing privilege check and adding proper error handling
2024-11-13 18:54:47 +00:00
Abhishek Kr Srivastav
56e3c787a5 Fixed failing test by removing privilege check and some refactor
Addressed review comments
2024-11-13 23:13:33 +05:30
SataQiu
d81e8beaea kubeadm: fix a bug where upgrade dryrun can not select the network interface correctly 2024-11-13 11:54:30 +08:00
Kubernetes Prow Robot
983dd07760 Merge pull request #128031 from HirazawaUi/kep-4656
[Kubeadm] KEP-4656: Add kubelet instance configuration to configure CRI socket for each node
2024-11-06 20:09:37 +00:00
HirazawaUi
d3ea4d3d9a Implement kubeadm reset 2024-11-06 21:43:09 +08:00
HirazawaUi
c47eaa88b1 Implement kubeadm upgrade 2024-11-06 21:43:05 +08:00
Kubernetes Prow Robot
3dcad5f0db Merge pull request #128532 from neolit123/1.32-handle-custom-addreses-comp-readyz
kubeadm: use advertise address for WaitForAllControlPlaneComponents
2024-11-06 08:51:29 +00:00
HirazawaUi
12a394fcc7 Implement kubeadm join 2024-11-05 20:59:57 +08:00
HirazawaUi
16e767d915 Implement kubeadm init 2024-11-05 20:59:53 +08:00
Lubomir I. Ivanov
0cfcaa82e1 kubeadm: use advertise address for WaitForAllControlPlaneComponents 2024-11-05 09:00:38 +02:00
Kubernetes Prow Robot
6fce566781 Merge pull request #128474 from neolit123/1.32-handle-custom-addreses-comp-readyz
kubeadm: use actual addresses/ports for WaitForAllControlPlaneComponents
2024-11-02 17:19:26 +00:00
Lubomir I. Ivanov
b2741f7b1c kubeadm: use actual addresses/ports for WaitForAllControlPlaneComponents
By default check the KCM and scheduler on 127.0.0.1:<port> as that is the
defaall --bind-address kubeamd uses for these components.

For kube-apiserver take the value from APIEndpoint.AdvertiseAddress which is
dynamically detected from the host. Unless the user has passed explicitly --advertise-address
as an extra arg.

Read the <port> values for all components from the --secure-port flag
value if needed. Otherwise use defaults.

Use /livez for apiserver and scheduler. Add TODO for KCM to
switch to /livez as well.
2024-11-02 18:09:36 +02:00
Lubomir I. Ivanov
fceb39ecd2 kubeadm: ensure proper parsing of SSR username
- Split the code that tries to get node name from SSR into
a new function getNodeNameFromSSR(). Unit test the function.
- Fix error that the "system:nodes:" prefix was not trimmed.
- Fix mislearding errors around FetchInitConfigurationFromCluster.
This function performs multiple actions, and the "get node"
action can also be of type apierrors.NotFound(). This creates
confusion in the returned error in enforceRequirement during
upgrade. Fix this problem.
2024-11-01 11:42:58 +02:00
HirazawaUi
fc5b3e2dfb add NodeLocalCRISocket feature gate 2024-10-31 23:09:05 +08:00
Lubomir I. Ivanov
07918a59e8 kubeadm: support dryrunning upgrade wihout a real cluster
Make the following changes:
- When dryrunning if the given kubeconfig does not exist
create a DryRun object without a real client. This means only
a fake client will be used for all actions.
- Skip the preflight check if manifests exist during dryrun.
Print "would ..." instead.
- Add new reactors that handle objects during upgrade.
- Add unit tests for new reactors.
- Print message on "upgrade node" that this is not a CP node
if the apiserver manifest is missing.
- Add a new function GetNodeName() that uses 3 different methods
for fetching the node name. Solves a long standing issue where
we only used the cert in kubelet.conf for determining node name.
- Various other minor fixes.
2024-10-31 14:58:47 +02:00
Kubernetes Prow Robot
db66e397d9 Merge pull request #128359 from matteriben/disable-caching-for-authoritative-zone
disable caching for authoritative zone to comply with rfc-1035 section 6.1.2
2024-10-30 02:37:24 +00:00
Matt Riben
30d9ed7203 disable caching for authoritative zone
Signed-off-by: Matt Riben <matt.riben@swirldslabs.com>
2024-10-29 17:10:07 -05:00
Kubernetes Prow Robot
646b0bc49b Merge pull request #128354 from SataQiu/join-control-plane-e2e
kubeadm: support joining control plane nodes in dryrun mode without a real initialized control plane
2024-10-28 14:40:55 +00:00
SataQiu
dc48aed791 kubeadm: support joining control plane nodes in dryrun mode without a real initialized control plane 2024-10-28 21:37:58 +08:00
bzsuni
80fe671cc9 Add UT for cmd/kubeadm/app/cmd/util/join.go
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-10-28 11:12:06 +08:00
Kubernetes Prow Robot
6568b4bdb3 Merge pull request #126953 from aroradaman/kubeadm-pre-flight-remove-conntrack
kubeadm: remove preflight check for existence of conntrack binary
2024-10-22 22:36:51 +01:00
Kubernetes Prow Robot
81ce66f059 Merge pull request #127420 from runzhliu/patch-3
improve the logging format
2024-10-21 21:14:58 +01:00
SataQiu
a0f8c51a75 kubeadm: using options.Force constant instead of 'force' string 2024-10-18 18:12:14 +08:00
runzhliu
e8602f224d improve the logging format 2024-10-17 05:57:50 +08:00
Antonio
250d00d8dc #128117 Fix misleading kubadm output
The control-plane should be referred to in plural otherwise it can be misleading to join the the cp to other nodes.
2024-10-16 11:32:18 +02:00
Kubernetes Prow Robot
769695a218 Merge pull request #126776 from neolit123/1.31-improve-dry-run-logic
kubeadm: refactor the dry-run logic
2024-10-14 10:20:21 +01:00
Lubomir I. Ivanov
30f9893374 kubeadm: refactor the dry-run logic
The current dryrun client implemnetation is suboptimal
and sparse. It has the following problems:

- When an object CREATE or UPDATE reaches the default dryrun client
the operation is a NO-OP, which means subsequent GET calls must
fully emulate the object that exists in the store.
- There are multiple implmentations of a DryRunGetter interface
such the one in init_dryrun.go but there are no implementations
for reset, upgrade, join.
- There is a specific DryRunGetter that is backed by a real
client in clientbacked_dryrun.go, but this is used for upgrade
and does not work in conjuction with a fake client.

This commit does the following changes:

- Removes all existing *dryrun*.go implementations.
- Add a new DryRun implementation in dryrun.go that implements
3 clients - fake clientset, real clientset, real dynamic client.
- The DryRun object uses the method chaining pattern.
- Allows the user opt-in into real clients only if needed, by passing
a real kubeconfig. By default only constructs a fake client.
- The default reactor chain for the fake client, always logs the
object action, then for GET or LIST actions attempts to use the
real dynamic client to get the object. If a real object does not
exist it attempts to get the object from the fake object store.
- The user can prepend or append reactors to the chain.
- All known needed reactors for operations during init, join,
reset, upgrade are added as methods of the DryRun struct.
- Adds detailed unit test for the DryRun struct and its methods
including reactors.

Additional changes:
- Use the new DryRun implementation in all command workflows -
init, join, reset, upgrade.
- Ensure that --dry-run works even if there is no active cluster
by returning faked objects. For join, a faked cluster-info
with a fake bootstrap token and CA are used.
2024-10-11 00:15:59 +03:00