Commit Graph

118694 Commits

Author SHA1 Message Date
Antonio Ojea
3ee2f27e5b kubelet: cloud-provider external addresses
Kubelet, if using cloud provider external, initializes temporary
the node addresses using the non-cloud provider logic, until the
cloud provider overrides it.

This behavior has undesired consequences if the cloud-provider addresses
are different than the original ones, specially for hostNetwork pods,
that inherit these addresses from the Node.

Since some cloud-providers depend on this behavior, in order to keep
backward compatibility, assume that the specifying addresses via
the node-ip flags means that the intent is to keep the existing
behavior to temporary initialize the addresses.

If the node-ips are the unspecified addresses or are not set, then
wait for the external cloud provider to set the node addresses.

Change-Id: I3a3895f9b830769f9658e6a03f058c914c438a09
Signed-off-by: Antonio Ojea <aojea@google.com>
2023-10-06 14:01:28 +00:00
Kubernetes Prow Robot
854d0e7fc8
Merge pull request #120956 from my-git9/clusterinfout
kubeadm: increase ut converage for bootstraptoken/clusterinfo
2023-10-06 13:43:22 +02:00
xin.li
8510057e2d kubeadm: increase ut converage for bootstraptoken/clusterinfo
Signed-off-by: xin.li <xin.li@daocloud.io>
2023-10-06 18:36:02 +08:00
Kubernetes Prow Robot
5ff79611d5
Merge pull request #120400 from neolit123/1.29-fix-bootstrap-token-constant-time
cluster-bootstrap: address constant-time problems as in NCC-E003660-TTV
2023-10-06 11:57:55 +02:00
Kubernetes Prow Robot
d0dfe64334
Merge pull request #120975 from ardaguclu/close-heartbeat-explicitly
Close websocket heartbeat explicitly when unexpected closure received
2023-10-06 09:05:47 +02:00
Arda Güçlü
a888fef242 Use timeout function to detect transient errors 2023-10-06 08:55:22 +03:00
Kubernetes Prow Robot
3bfa9482fc
Merge pull request #121008 from danwinship/proxy-startup-error-regression
Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat
2023-10-06 00:08:43 +02:00
Kubernetes Prow Robot
598076a71c
Merge pull request #120713 from matte21/add-pkg-docs-to-kubelet-cm
Add package-level godoc to pkg/kubelet/cm
2023-10-05 22:44:07 +02:00
matte21
a213edae2a Add package-level godoc to pkg/kubelet/cm
Add file doc.go with some rudimentary information to package
kubelet/cm. This will make it easier for people approaching the
kubelet codebase for the first time to quickly understand what's
in the package, since its name is abbreviated and hostile to
newcomers.
2023-10-05 14:20:51 -04:00
Kubernetes Prow Robot
e314ec2c98
Merge pull request #120998 from kannon92/job-ptr-update
convert pointer to ptr for job controller
2023-10-05 19:42:13 +02:00
Dan Winship
b2f0052d27 Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat 2023-10-05 12:57:29 -04:00
Kevin Hannon
b96a074bcd convert pointer to ptr for job controller 2023-10-05 09:30:01 -04:00
Lubomir I. Ivanov
1d519f1b08 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time
The function uses BootstrapTokenRegexp.MatchString(token)
which is not a recommended practice.

Instead, break down the token into its components: ID, secret.
The ID is public thus we can use Regexp matching for it.
The secret needs constant time comparison. Iterate over
every character and make sure it fits the 0-9a-z range and that
it has a length of 16.
2023-10-05 13:47:23 +03:00
Arda Güçlü
914210ee9a revert back to IsUnexpectedCloseError check 2023-10-05 12:04:06 +03:00
Arda Güçlü
e1ae906048 Close websocket heartbeat explicitly when unexpected closure received 2023-10-05 11:22:11 +03:00
Kubernetes Prow Robot
f19b62fc09
Merge pull request #120959 from pohly/e2e-test-whitespace-cleanup
e2e: remove redundant spaces in test names
2023-10-05 00:41:59 +02:00
Kubernetes Prow Robot
6f5fa2eb2f
Merge pull request #120985 from palnabarun/3221/fix-authorizer-name
[StructuredAuthorizationConfiguration] Fix the level at which authorizer name is surfaced
2023-10-04 15:45:29 +02:00
Kubernetes Prow Robot
f936f69cf9
Merge pull request #120729 from pohly/events-context
k8s.io/client-go/tools/[events|record]: support context
2023-10-04 15:45:16 +02:00
Kubernetes Prow Robot
56f330493c
Merge pull request #120822 from akhilerm/change-from-deprecated-fields
update rules to switch from deprecated dir field
2023-10-04 14:00:38 +02:00
Kubernetes Prow Robot
c9bd841cdf
Merge pull request #120984 from p0lyn0mial/upstream-reflector-always-fallback-to-listwatch
reflector: fallback to the previous mode on any error
2023-10-04 12:03:07 +02:00
Nabarun Pal
3de0d9afbb
pkg/kubeapiserver: pass authorizer in top level while building from legacy options
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-10-04 14:17:16 +05:30
Lukasz Szaszkiewicz
4b39150179 reflector: fallback to the previous mode on any error
originally we honored only apierrors.IsInvalid
but decided to fallback on every error
because it is better to make progress than deadlocking
2023-10-04 10:10:26 +02:00
Nabarun Pal
11ce6d2915
k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-10-04 10:33:58 +05:30
Kubernetes Prow Robot
3c94af73e1
Merge pull request #118299 from rexagod/kep-2305
KEP-2305: introduce allow-metric-labels-manifest
2023-10-04 03:03:07 +02:00
Kubernetes Prow Robot
ae02d1c832
Merge pull request #120971 from p0lyn0mial/upstream-watchlist-client-go-fallback-integration
integration/apimachinery: add TestReflectorWatchListFallback integration test
2023-10-03 21:27:02 +02:00
Kubernetes Prow Robot
fe84992651
Merge pull request #120542 from alvaroaleman/condition-change
Apimeta Set/RemoveStatusCondition: Indicate change
2023-10-03 20:20:21 +02:00
Abhishek Srivastav
5f8fc30b2c
Added locks on request tracker before accessing fields (#120599)
* Added locks on request tracker before accessing fields

Unit test StatefulSetAutoDeletePVCEnabled has been
flaking with DATARACE. Added lock on request tracker
before accessing err field.

* Addressed review comments for PR : Added locks on request tracker before accessing fields
2023-10-03 16:38:08 +02:00
Lukasz Szaszkiewicz
9b32a47ab6 integration/apimachinery: add TestReflectorWatchListFallback integration test 2023-10-03 14:56:50 +02:00
Kubernetes Prow Robot
389e60fb2e
Merge pull request #120980 from p0lyn0mial/upstream-client-go-close-watcher
reflector: close an established watcher when the StopCh was closed
2023-10-03 14:56:06 +02:00
Lukasz Szaszkiewicz
26f113be2f reflector: close an established watcher when the StopCh was closed 2023-10-03 13:49:21 +02:00
Kubernetes Prow Robot
6a84edb2ce
Merge pull request #120222 from tkashem/apf-queue-wait-ctx
apf: manage request queue wait with context in APF Filter
2023-10-03 11:16:18 +02:00
Kubernetes Prow Robot
67733c650b
Merge pull request #119485 from carlory/cleanup-e2e-apps-framework-equal
e2e_apps: stop using deprecated framework.ExpectEqual
2023-10-02 11:45:02 -07:00
Kubernetes Prow Robot
a321897e77
Merge pull request #120262 from harche/list_timeout
Add timeout to listContainerStats context
2023-10-02 07:46:46 -07:00
Kubernetes Prow Robot
44cfd556b3
Merge pull request #120339 from pohly/scheduler-perf-dra-driver-names
scheduler_perf: use different log names for different DRA drivers
2023-10-02 06:32:56 -07:00
Kubernetes Prow Robot
5cc92713d1
Merge pull request #120335 from pohly/scheduler-perf-pod-name
scheduler_perf: show name of one pending pod in log
2023-10-02 06:32:45 -07:00
Kubernetes Prow Robot
e8abe1af8d
Merge pull request #120843 from aojea/repair_metrics
Add metrics to the allocators repair loops
2023-10-01 15:58:44 -07:00
Kubernetes Prow Robot
ed72ee264e
Merge pull request #120829 from danwinship/proxy-rule-testing-cleanup
iptables proxy test cleanups, moving away from assertIPTablesRulesEqual
2023-10-01 09:50:56 -07:00
Kubernetes Prow Robot
0b63390add
Merge pull request #119303 from abidmunirmalik/kubectl_doc_fix
fixes the issue in the documentation of kubectl events
2023-10-01 09:50:44 -07:00
carlory
98bad643cd e2e_apps: stop using deprecated framework.ExpectEqual 2023-10-01 10:30:00 +08:00
Antonio Ojea
566fad5eda add metrics to the ipallocator repair loop
The repair loop are great for saving us of leaks, but the side effect
is that bugs can go unnoticed for a long time, so we need some
signal to be able to identify those errors proactivily.

Add two new metrics to identify:
- errors on the reconcile loop
- errors per clusterip
2023-09-30 15:46:06 +00:00
Antonio Ojea
4eff70dcf9 add metrics to the nodeport allocator repair loop
The repair loop are great for saving us of leaks, but the side effect
is that bugs can go unnoticed for a long time, so we need some
signal to be able to identify those errors proactivily.

Add two new metrics to identify:
- errors on the reconcile loop
- errors per nodeport
2023-09-30 15:46:06 +00:00
Kubernetes Prow Robot
622509830c
Merge pull request #120716 from xrstf/fix-typos
Fix typos
2023-09-30 00:25:56 -07:00
Kubernetes Prow Robot
3e9f2f4d65
Merge pull request #120948 from marosset/fix-mem-limit-windows-test
Fixing attempt to deploy past allocatable memory limits test on Windows
2023-09-29 14:33:57 -07:00
Mark Rossetti
0b76e7b69f
Fixing attempt to deploy past allocatable memory limits test on Windows
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2023-09-29 13:26:51 -07:00
Kubernetes Prow Robot
46728a8fa2
Merge pull request #120896 from aramase/aramase/f/kmsv2_pkcs11
[KMSv2] pkcs11 reference implementation using SoftHSM
2023-09-29 12:11:56 -07:00
Kubernetes Prow Robot
c54c6b2383
Merge pull request #120938 from ptsgr/fix-linter
Refactoring variable declaration and value setting
2023-09-29 10:56:43 -07:00
Anish Ramasekar
d2a3184c47
remove pkg/encrypt and pkg/value in kms
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-09-29 16:57:32 +00:00
Anish Ramasekar
e764e83fe8
remove mock aes, latency and ratelimit wrapper remote services
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-09-29 16:57:32 +00:00
Anish Ramasekar
2f5708833a
[KMSv2] pkcs11 reference implementation using SoftHSM
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-09-29 16:57:26 +00:00
Kubernetes Prow Robot
46dea3015f
Merge pull request #120050 from DamianSawicki/some-tests
Add tests for extract tag functions in prereleaselifecyclegenerators
2023-09-29 09:10:43 -07:00