Commit Graph

108867 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
42fec42586
Merge pull request #110756 from lokichoggio/proxy
fix comments in pkg/proxy/types.go
2022-06-24 07:03:10 -07:00
Kubernetes Prow Robot
4df3f2b9f0
Merge pull request #110411 from trierra/px-beta-125
promote the Portworx feature gate to Beta
2022-06-24 07:02:58 -07:00
Kubernetes Prow Robot
7a9268d83a
Merge pull request #110719 from xakdwch/master
volume/fc: fix FibreChannel volume plugin matching wrong disks
2022-06-24 03:40:57 -07:00
Kubernetes Prow Robot
411ecc3b62
Merge pull request #110764 from soltysh/improve_msg
Improve run and debug attach message upon failure
2022-06-24 02:27:09 -07:00
Kubernetes Prow Robot
e526241a9a
Merge pull request #108833 from eltociear/patch-8
fix typo in genericapiserver.go
2022-06-24 02:26:57 -07:00
Kubernetes Prow Robot
34b4125351
Merge pull request #110656 from pacoxu/kubeadm-dup-unix
kubeadm: handle dup unix:// prefix in node annotation
2022-06-24 00:21:21 -07:00
Maciej Szulik
43c2ae479f
Improve run and debug attach message upon failure 2022-06-24 09:14:27 +02:00
Paco Xu
8555f401a0 kubeadm: handle dup unix:// prefix in node annotaiton 2022-06-24 11:16:34 +08:00
Kubernetes Prow Robot
07dfdf0859
Merge pull request #110709 from chendave/fix_renew
kubeadm: Honor `cert-dir` for cert operations
2022-06-23 19:51:19 -07:00
lokichoggio
52280de403
fix comments in pkg/proxy/types.go 2022-06-24 09:50:02 +08:00
Kubernetes Prow Robot
487512bb56
Merge pull request #109510 from sugangli/pinhole-fw
Firewall Pinhole Fix for ILB and NetLB
2022-06-23 16:13:20 -07:00
Kubernetes Prow Robot
801bcfeea7
Merge pull request #110731 from jkh52/update-netproxy
Bump konnectivity-client to 0.0.32
2022-06-23 12:41:20 -07:00
Kubernetes Prow Robot
d6547d26eb
Merge pull request #110748 from cpanato/prombotclean
remove release-1.20 from prom bot due to eol
2022-06-23 11:19:43 -07:00
Sugang Li
c64846da00 update kube-controller-manager dependencies 2022-06-23 18:07:18 +00:00
Sugang Li
84903d4b84 add ILB and NetLB pinhole changes 2022-06-23 18:07:15 +00:00
Kubernetes Prow Robot
035f22d781
Merge pull request #110712 from chendave/ignore_args
kubeadm: certs renew doesn't support positional args
2022-06-23 09:09:43 -07:00
cpanato
ab810a7f85
remove release-1.20 from prom bot due to eol
Signed-off-by: cpanato <ctadeu@gmail.com>
2022-06-23 18:04:17 +02:00
Kubernetes Prow Robot
1e3c973e72
Merge pull request #110628 from danwinship/kep-3178-ipvs-mark-drop
don't use KUBE-MARK-DROP in ipvs proxy
2022-06-23 07:59:55 -07:00
Kubernetes Prow Robot
272386c9b6
Merge pull request #110496 from kolyshkin/runc-1.1.3
vendor: bump runc to 1.1.3
2022-06-23 07:59:43 -07:00
Dave Chen
e8e804deaa kubeadm: certs renew doesn't support positional args
Signed-off-by: Dave Chen <dave.chen@arm.com>
2022-06-23 19:52:22 +08:00
Kubernetes Prow Robot
df0af6f7b8
Merge pull request #110736 from Octopusjust/k8s-pr3
Incomplete coverage of test scenarios
2022-06-23 04:33:44 -07:00
Dave Chen
57646c941f kubeadm: Honor cert-dir for cert operations
- `cert-dir` could be specified to a value other than the default value
- we have tests that should be executed successfully on the working cluster

Signed-off-by: Dave Chen <dave.chen@arm.com>
2022-06-23 19:32:20 +08:00
xakdwch
ddcc448070 volume/fc: fix FibreChannel volume plugin matching wrong disks
Before:
  findDisk()
    fcPathExp := "^(pci-.*-fc|fc)-0x" + wwn + "-lun-" + lun
After:
  findDisk()
    fcPathExp := "^(pci-.*-fc|fc)-0x" + wwn + "-lun-" + lun + "$"

fc path may have the same wwns but different luns.for example:
pci-0000:41:00.0-fc-0x500a0981891b8dc5-lun-1
pci-0000:41:00.0-fc-0x500a0981891b8dc5-lun-12

Function findDisk() may mismatch the fc path, return the wrong device and wrong associated devicemapper parent.
This may cause a disater that pods attach wrong disks. Accutally it happended in my testing environment before.
2022-06-23 16:36:01 +08:00
ZhangYu
9f4562c7b6 Incomplete coverage of test scenarios 2022-06-23 11:41:23 +08:00
Kubernetes Prow Robot
0669ba386b
Merge pull request #110685 from hwdef/cleanup-spelling_failures
clean up spelling_failures
2022-06-22 20:09:43 -07:00
Kubernetes Prow Robot
dee37aacc1
Merge pull request #110652 from Abirdcfly/fixchunksize
fix: --chunk-size with selector returns missing result
2022-06-22 18:21:43 -07:00
Joseph Anttila Hall
f5c584a020 Bump konnectivity-client to 0.0.32 2022-06-22 17:22:42 -07:00
Kubernetes Prow Robot
ddfbb5bdbe
Merge pull request #110724 from pohly/klog-update
build: update to klog v2.70.0
2022-06-22 17:03:54 -07:00
Kubernetes Prow Robot
e64852fcad
Merge pull request #110330 from DangerOnTheRanger/cel-e2e
Add additional CRD validation E2E tests
2022-06-22 17:03:43 -07:00
Abirdcfly
fba297629d fix: --chunk-size with selector returns missing result
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
2022-06-23 07:07:13 +08:00
Kubernetes Prow Robot
1d81106534
Merge pull request #110425 from LY-today/fake-evict-list-err
fix: list pod err after an pod evicted
2022-06-22 15:55:42 -07:00
Kubernetes Prow Robot
ae3537120b
Merge pull request #110639 from aojea/slice_no_node
EndpointSlice with Pods without an existing Node
2022-06-22 10:43:42 -07:00
Dan Winship
28253f6030 proxy/ipvs: Use DROP directly rather than KUBE-MARK-DROP
The ipvs proxier was figuring out LoadBalancerSourceRanges matches in
the nat table and using KUBE-MARK-DROP to mark unmatched packets to be
dropped later. But with ipvs, unlike with iptables, DNAT happens after
the packet is "delivered" to the dummy interface, so the packet will
still be unmodified when it reaches the filter table (the first time)
so there's no reason to split the work between the nat and filter
tables; we can just do it all from the filter table and call DROP
directly.

Before:

  - KUBE-LOAD-BALANCER (in nat) uses kubeLoadBalancerFWSet to match LB
    traffic for services using LoadBalancerSourceRanges, and sends it
    to KUBE-FIREWALL.

  - KUBE-FIREWALL uses kubeLoadBalancerSourceCIDRSet and
    kubeLoadBalancerSourceIPSet to match allowed source/dest combos
    and calls "-j RETURN".

  - All remaining traffic that doesn't escape KUBE-FIREWALL is sent to
    KUBE-MARK-DROP.

  - Traffic sent to KUBE-MARK-DROP later gets dropped by chains in
    filter created by kubelet.

After:

  - All INPUT and FORWARD traffic gets routed to KUBE-PROXY-FIREWALL
    (in filter). (We don't use "KUBE-FIREWALL" any more because
    there's already a chain in filter by that name that belongs to
    kubelet.)

  - KUBE-PROXY-FIREWALL sends traffic matching kubeLoadbalancerFWSet
    to KUBE-SOURCE-RANGES-FIREWALL

  - KUBE-SOURCE-RANGES-FIREWALL uses kubeLoadBalancerSourceCIDRSet and
    kubeLoadBalancerSourceIPSet to match allowed source/dest combos
    and calls "-j RETURN".

  - All remaining traffic that doesn't escape
    KUBE-SOURCE-RANGES-FIREWALL is dropped (directly via "-j DROP").

  - (KUBE-LOAD-BALANCER in nat is now used only to set up masquerading)
2022-06-22 13:02:22 -04:00
Dan Winship
a9cd57fa40 proxy/ipvs: add filter table support to ipsetWithIptablesChain 2022-06-22 12:53:18 -04:00
Kubernetes Prow Robot
e9702cfc1b
Merge pull request #110593 from SataQiu/kubeadm-coredns-20220615
kubeadm: add the preferred pod anti-affinity for CoreDNS Deployment
2022-06-22 09:29:56 -07:00
Kubernetes Prow Robot
e2fe430da7
Merge pull request #109632 from weilaaa/recorrect_byindex_input_param
correct input params of ByIndex
2022-06-22 09:29:43 -07:00
LY-today
f299494e79 fix: list pod err after an pod evicted
Signed-off-by: LY-today <724102053@qq.com>
2022-06-22 23:30:40 +08:00
Kubernetes Prow Robot
b60978629d
Merge pull request #110700 from alculquicondor/increase_timeout
Increase timeout for TestSyncPastDeadlineJobFinished
2022-06-22 08:23:56 -07:00
Kubernetes Prow Robot
fd20191212
Merge pull request #110684 from chymy/fix-typo-for-kubeadm
fix several typo
2022-06-22 08:23:45 -07:00
Patrick Ohly
f05e327ca6 build: update to klog v2.70.0
The main practical advantage is that klog.Fatal no longer dumps the backtrace
of all goroutines.
2022-06-22 16:29:51 +02:00
Kubernetes Prow Robot
18b5efceda
Merge pull request #110410 from Jiawei0227/master
CSIMigration feature gate to GA
2022-06-22 04:05:48 -07:00
Kubernetes Prow Robot
23144130a8
Merge pull request #109396 from SergeyKanzhelev/testDurationCheck
check for the test duraiton to make NodeProblemDetector test reliable
2022-06-22 01:43:43 -07:00
Antonio Ojea
b8ba6ab005 endpointslices: node missing on Pod scenario
When a Pod is referencing a Node that doesn't exist on the local
informer cache, the current behavior was to return an error to
retry later and stop processing.
However, this can cause scenarios that a missing node leaves a
Slice stuck, it can no reflect other changes, or be created.
Also, this doesn't respect the publishNotReadyAddresses options
on Services, that considers ok to publish pod Addresses that are
known to not be ready.

The new behavior keeps retrying the problematic Service, but it
keeps processing the updates, reflacting current state on the
EndpointSlice. If the publishNotReadyAddresses is set, a missing
node on a Pod is not treated as an error.
2022-06-22 09:45:16 +02:00
Antonio Ojea
baecb1981e fix metrics for placeholder slice
There is always a placeholder slice.

The ServicePortCache logic was considering always one endpointSlice
per Endpoint, but if there are multiple empty Endpoints, we just
use one placeholder slice, not multiple placeholder slices.
2022-06-22 09:45:02 +02:00
Antonio Ojea
0d9689a55d fix a bug on endpointslices tests comparing the wrong metrics 2022-06-22 09:40:18 +02:00
Kubernetes Prow Robot
10486a7331
Merge pull request #110707 from wongearl/fix-package-importe
fix "k8s.io/client-go/rest" is being imported more than once,optimize code
2022-06-22 00:35:44 -07:00
weilaaa
9847b2eeb4 correct input params and add godoc 2022-06-22 11:26:07 +08:00
wongearl
44404d309c fix "k8s.io/client-go/rest" is being imported more than once,optimize code 2022-06-22 10:31:24 +08:00
Kubernetes Prow Robot
3beb8dc596
Merge pull request #110612 from mattcary/ss-integration
Add TestAutodeleteOwnerRefs statefulset integration test
2022-06-21 15:29:42 -07:00
Kubernetes Prow Robot
4720f0725c
Merge pull request #110531 from Iceber/fix-run-controller-manager
fix the running of the kube-controller-manager
2022-06-21 13:15:55 -07:00