Commit Graph

101841 Commits

Author SHA1 Message Date
Chris Henzie
358d2e0bd1 Export contains access mode helper method
Will be used during validation of PVs and PVCs
2021-06-28 21:24:56 -07:00
Chris Henzie
83e3ee780a Rename access mode contains helper method
So it is consistent with other methods performing the same check (one
for internal and external types)
2021-06-28 21:24:56 -07:00
Chris Henzie
dba8ee229e Add validation options for PersistentVolumeClaims
These options provide an extensible way of configuring how PVCs are
validated
2021-06-28 21:24:55 -07:00
Chris Henzie
9ba0eed7c5 Add validation options for PersistentVolumes
These options provide an extensible way of configuring how PVs are
validated
2021-06-28 21:24:55 -07:00
Kubernetes Prow Robot
d92f6c424d
Merge pull request #103099 from liggitt/podsecurity
PodSecurity admission
2021-06-28 20:46:52 -07:00
Kubernetes Prow Robot
db3a216fbb
Merge pull request #97238 from andrewsykim/kube-proxy-handle-terminating
kube-proxy handle terminating endpoints
2021-06-28 20:46:40 -07:00
Kubernetes Prow Robot
9866f9364e
Merge pull request #103112 from fromanirh/cpumanager-e2e-fixes
e2e: node: remove obsolete AlphaFeature tag
2021-06-28 19:36:39 -07:00
Kubernetes Prow Robot
ee459b8969
Merge pull request #103265 from fromanirh/e2e-node-fix-npd
e2e: node: fix npd test failures bumping image
2021-06-28 17:03:50 -07:00
Kubernetes Prow Robot
15d3c3a5e2
Merge pull request #102821 from ehashman/phase-fix
Ensure kubelet statuses can handle loss of container runtime state
2021-06-28 15:38:40 -07:00
Kubernetes Prow Robot
38f012320f
Merge pull request #101947 from cynepco3hahue/memory_manager_move_to_beta
memory manager: move to beta
2021-06-28 15:38:28 -07:00
Jordan Liggitt
6f9011a4ae PodSecurity: vendor: generated files
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:46:00 -04:00
Jordan Liggitt
b8bdcf6441 PodSecurity: update dependencies 2021-06-28 17:46:00 -04:00
Jordan Liggitt
724fbfbb69 PodSecurity: test: generate fixture data 2021-06-28 17:46:00 -04:00
Jordan Liggitt
93c6f8969a PodSecurity: check: addCapabilities 2021-06-28 17:45:59 -04:00
Jordan Liggitt
3733e209c9 PodSecurity: check: allowPrivilegeEscalation 2021-06-28 17:45:36 -04:00
Jordan Liggitt
a8206ef58b PodSecurity: check: runAsNonRoot 2021-06-28 17:45:36 -04:00
Jordan Liggitt
12ea930aae PodSecurity: check: selinux
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:36 -04:00
Jordan Liggitt
42dc070b47 PodSecurity: kube-apiserver integration test 2021-06-28 17:45:36 -04:00
Jordan Liggitt
f39bddd767 PodSecurity: kube-apiserver: admission wiring 2021-06-28 17:45:35 -04:00
Jordan Liggitt
65a42a483c PodSecurity: pkg/features: feature gate 2021-06-28 17:45:35 -04:00
Tim Allclair
02a6187757 PodSecurity: admission: admission library
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
29f5ebf1fe PodSecurity: test: framework 2021-06-28 17:45:35 -04:00
Tim Allclair
1436d35779 PodSecurity: policy: registry
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
5183ea0bf0 PodSecurity: metrics: stub interface
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
a3ba921b16 PodSecurity: admission/api: configuration API
Admission configuration:
- user, namespace, runtimeclass exemptions
- default policy levels and versions
- defaulting
- load and serialization helpers

Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:34 -04:00
Tim Allclair
9ce17c8773 PodSecurity: api: runtime API
Label keys, values, and parsing helper functions

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:34 -04:00
Kubernetes Prow Robot
bb309b5706
Merge pull request #103249 from wangyysde/update-kubeadm-help-msg
correct example command of kubeadm help
2021-06-28 14:24:28 -07:00
Kubernetes Prow Robot
51e1969d9c
Merge pull request #103133 from marwanad/allow-scheduler-to-patch-conditions
switch scheduler to generate the merge patch on pod status instead of the full pod
2021-06-28 12:46:28 -07:00
Kubernetes Prow Robot
556f8500ff
Merge pull request #102859 from MikeSpreitzer/add-r-metrics
Add APF metrics about R(t)
2021-06-28 11:40:28 -07:00
Kubernetes Prow Robot
cd5d3e690e
Merge pull request #103153 from josephburnett/v2beta2
Move HPA v2beta2 deprecation to 1.23.
2021-06-28 10:33:25 -07:00
Marwan Ahmed
48dfa2a554 generate scheduler merge patches on the pod status instead of the full pod 2021-06-28 09:35:55 -07:00
Kubernetes Prow Robot
c2882f3142
Merge pull request #103158 from rajaskakodkar/sctp_test
Fix "should not mistakenly treat 'protocol: SCTP' as 'protocol: TCP', even if the plugin doesn't support SCTP" test
2021-06-28 07:59:37 -07:00
Kubernetes Prow Robot
5e06f173fb
Merge pull request #98866 from wzshiming/fix/termination_grace_period_seconds_is_negative
Fix TerminationGracePeriodSeconds is negative (part 1)
2021-06-28 07:59:25 -07:00
Francesco Romani
889dcb5b54 e2e: node: fix npd test failures bumping image
The PR https://github.com/kubernetes/kubernetes/pull/100041 updated
node-problem-detector to v0.8.7, but unfortunately we didn't update
also the image using in the e2e_node tests.

As result, the tests were failing like

E2eNode Suite: [sig-node] NodeProblemDetector [NodeFeature:NodeProblemDetector] [Serial] SystemLogMonitor should generate node condition and events for corresponding errors
_output/local/go/src/k8s.io/kubernetes/test/e2e_node/node_problem_detector_linux.go:301
Timed out after 60.000s.
Expected success, but got an error:
    <*errors.errorString | 0xc0011f2600>: {
        s: "expected total number of events was 4, actual events counted was 7\nEvents

This in turn was one of the contributing factors in making the
pull-kubernetes-node-kubelet-serial lane constantly failing.

This patch updates the image used in the tests, fixing the failure.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2021-06-28 16:32:12 +02:00
Kubernetes Prow Robot
6010cbe593
Merge pull request #103040 from shu-mutou/sig-ui-leads
Add shu-mutou to dashboard approvers
2021-06-28 02:19:49 -07:00
Kubernetes Prow Robot
49ac765b67
Merge pull request #103026 from sanposhiho/fix/typo-on-ExtractHoge
Fix typo on ExtractHoge documentation.
2021-06-28 02:19:37 -07:00
Kubernetes Prow Robot
883cacde77
Merge pull request #101413 from songxiao-wang87/run-test6
Structured Logging migration: modify policy part logs of kube-controller-manager.
2021-06-28 02:19:25 -07:00
wangyysde
39a373b162 correct example command of kubeadm help
Signed-off-by: wangyysde <net_use@bzhy.com>
2021-06-28 16:12:52 +08:00
Kubernetes Prow Robot
89675101d0
Merge pull request #103093 from songxiao-wang87/run-test22
CHANGELOG: fix punctuation errors in 1.22
2021-06-28 01:11:25 -07:00
Kubernetes Prow Robot
d9ef459918
Merge pull request #103003 from sschne/bugfix/fix-required-pathtype
remove omitempty tag from PathType
2021-06-27 23:17:25 -07:00
Shiming Zhang
a8d4cfac93 Allow delete with grace period 1s even if metadata period is negative 2021-06-28 11:49:39 +08:00
Shiming Zhang
45ce2dfacc Treat negative as 1s in delete path 2021-06-28 11:49:39 +08:00
Shiming Zhang
40593fa4d3 spec.terminationGracePeriodSeconds allow it to be set to 1s if it was previously negative 2021-06-28 11:49:39 +08:00
Kubernetes Prow Robot
657d93c4cc
Merge pull request #103238 from seans3/cmd-headers-beta
kubectl command headers as default in beta
2021-06-27 11:17:24 -07:00
Rajas Kakodkar
266ffa8526 bug fix in sctp test 2021-06-27 21:53:41 +05:30
Sean Sullivan
4add8ed910 kubectl command headers as default in beta 2021-06-27 01:12:45 -07:00
Kubernetes Prow Robot
a0f9c8c277
Merge pull request #103001 from zshihang/csi
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Kubernetes Prow Robot
2d1026c664
Merge pull request #103126 from jdnurme/konn-21-update
Updated to use konnectivity client v0.0.21, and implemented placehold…
2021-06-26 18:23:23 -07:00
Kubernetes Prow Robot
e974bcd471
Merge pull request #103235 from thejoycekung/debian-setcap-image-bump
Update debian, debian-iptables, setcap images to pick up CVE fixes
2021-06-26 16:21:23 -07:00
Joyce Kung
aeccadda4f Update setcap image to buster-v2.0.3 2021-06-26 15:16:12 -04:00