Commit Graph

57686 Commits

Author SHA1 Message Date
Daniel Nardo
8aef128640 Set the NON_MASQUERADE_CIDR to 0/0 by default in GCE/GKE which disables
masquerade rules setup by the kubelet.  Add masquerade rules based
on NON_MASQUERADE_CIDR being set to 0/0.
2017-11-06 10:01:55 -08:00
Dr. Stefan Schimanski
a246d6f1d1 apiserver: protect registry cleanup against concurrent access 2017-11-06 18:35:56 +01:00
Eric Chiang
393ac3cc55 CHANGELOG: loosen language around audit policy file kind and apiVersion 2017-11-06 08:46:49 -08:00
Eric Chiang
fa40bc8f18 audit policy: reject audit policy files without apiVersion and kind 2017-11-06 08:46:49 -08:00
Kubernetes Submit Queue
a8fc7f691f
Merge pull request #54990 from shyamjvs/retry-pod-list-in-load-test
Automatic merge from submit-queue (batch tested with PRs 55169, 54990). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Retry pod listing call in load test if possible instead of failing

The latest run of 5k-node performance test failed due to this (https://k8s-gubernator.appspot.com/build/kubernetes-jenkins/logs/ci-kubernetes-e2e-gce-scale-performance/57):

```
listing pods from rc load-small-10363
Expected error:
    ...
    Get https://35.196.185.248/api/v1/namespaces/e2e-tests-load-30-nodepods-14-f9gcv/pods?labelSelector=name%3Dload-small-10363&resourceVersion=0: read tcp 172.17.0.5:40524->35.196.185.248:443: read: connection reset by peer
not to have occurred
```

/cc @wojtek-t @porridge
2017-11-06 08:27:39 -08:00
Kubernetes Submit Queue
7966af637e
Merge pull request #55169 from sttts/sttts-cache-stop-race
Automatic merge from submit-queue (batch tested with PRs 55169, 54990). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

apiserver: fix Cacher.Stop() race
2017-11-06 08:27:36 -08:00
hongshibao
2141b9edd5 Fix divide by zero issue in calculating spread priority for zones 2017-11-06 23:39:05 +08:00
Kubernetes Submit Queue
4882789147
Merge pull request #55081 from juju-solutions/bug/departing
Automatic merge from submit-queue (batch tested with PRs 54535, 54950, 55081). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Bug/departing

**What this PR does / why we need it**: With this PR we fix the bugs we had with multiple masters setup with juju.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/422

**Special notes for your reviewer**: Related PR: https://github.com/juju-solutions/interface-kube-control/pull/15

**Release note**:

```NONE

```
2017-11-06 07:30:48 -08:00
Kubernetes Submit Queue
099935df14
Merge pull request #54950 from sttts/sttts-code-gen-go-names
Automatic merge from submit-queue (batch tested with PRs 54535, 54950, 55081). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

code-gen: add +groupGoName to allow unique Go identifiers in clientsets and informers

We use the first segement of the GroupName as Go name. Hence, a GroupName
"policy.k8s.io" and "policy.authorization.k8s.io" could not live in the
same clientset or shared informer factory. This PR add another tag:

```
  // +groupGoName=AuthorizationPolicy
```
2017-11-06 07:30:44 -08:00
Kubernetes Submit Queue
175af4c3c4
Merge pull request #54535 from nikhita/apiextensions-typed-client
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

apiextensions/examples: add typed client

It was discussed in https://github.com/kubernetes/kubernetes/pull/52753#issuecomment-337840762 to add a typed client example to apiextensions-apiserver and remove the controller part.

For an example controller, we have [`k8s.io/sample-controller`](https://github.com/kubernetes/kubernetes/tree/master/staging/src/k8s.io/sample-controller) now.

**Release note**:

```release-note
NONE
```
2017-11-06 07:25:07 -08:00
Dr. Stefan Schimanski
a30c0f477d apiserver: fix Cacher.Stop() race 2017-11-06 15:37:07 +01:00
Kubernetes Submit Queue
658024c2d7
Merge pull request #54846 from zjj2wry/remove-kubectl-dep
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Remove kubectl dependency internal version

**What this PR does / why we need it**:
ref kubernetes/kubectl#83

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:
use `k8s.io/api/core/v1` replace `k8s.io/kubernetes/pkg/api`

use `k8s.io/client-go/kubernetes/typed/core/v1` replace `k8s.io/kubernetes/pkg/client/clientset_generated/internalclientset/typed/core/internalversion`

**Release note**:

```release-note
NONE
```
2017-11-06 06:34:40 -08:00
David Eads
2c671614df split some admission plugins into mutation and validation halves 2017-11-06 09:07:00 -05:00
Shyam Jeedigunta
2a0b7657c6 Retry pod listing call in load test if possible instead of failing 2017-11-06 15:05:27 +01:00
Alexander Kanevskiy
13ffe2cf4e kubeadm: don't create duplicate volume/mount
If certificates for etcd are located in the same directory or
subdirectories of kubernetes pki directory, don't create separate
volumes and mounts in manifests.

Fixes kubernetes/kubeadm#522
2017-11-06 16:00:11 +02:00
Kubernetes Submit Queue
824533d217
Merge pull request #55123 from caesarxuchao/remove-binary
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Remove the wrongly checked in binary

This is awkward :(
2017-11-06 05:46:19 -08:00
Kubernetes Submit Queue
b0ec2038c4
Merge pull request #55119 from pires/fix_e2e_scheduling_predicates_hostname
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix scheduler predicates test that may violate DNS label rules

**What this PR does / why we need it**:

This commit fixes an issue where in clusters which have FQDN as the node names,
one of the scheduling predicates tests will fail because it will try and run a
pod with a name that violates DNS-1123 rules. As an example, one such pod name
could look like "filler-pod-kube-node-0.kubelet.mesos".

**Which issue(s) this PR fixes**:
Fixes #55117

**Special notes for your reviewer**:

As soon as this is approved, I will create the cherry-pick PRs for 1.7.x. It doesn't apply on 1.8.x.

cc @aveshagarwal @kubernetes/sig-scheduling-pr-reviews 

**Release note**:
```
NONE
```
2017-11-06 05:46:09 -08:00
David Eads
8203b0b135 tolerate discovery errors in the restmapper 2017-11-06 08:22:44 -05:00
Dr. Stefan Schimanski
f4b8276001 Update generated code 2017-11-06 14:04:33 +01:00
Marcin Wielgus
6912f4442b Cluster Autoscaler 1.0.2 2017-11-06 13:23:51 +01:00
Dr. Stefan Schimanski
11d9dd8cec apiserver: remove scheme arg from NewUnsecuredEtcd3TestClientServer 2017-11-06 13:05:33 +01:00
Dr. Stefan Schimanski
622d985ea7 code-gen: add example2 type to test +groupGoName 2017-11-06 12:16:24 +01:00
Dr. Stefan Schimanski
a62e6310cb code-gen: allow overlapping prefixes in GroupNames 2017-11-06 12:16:24 +01:00
Di Xu
fa143c6ddf add tests 2017-11-06 17:24:59 +08:00
WanLinghao
7b7135ef79 remove unused function in keymutex_test.go file
modified:   pkg/util/keymutex/keymutex_test.go
2017-11-06 17:05:23 +08:00
xiangpengzhao
c691be3acf Switch field types to PodSelector and NamespaceSelector 2017-11-06 15:22:50 +08:00
MrHohn
e07a9c4ce6 Don't share nodePort service in session affinity tests 2017-11-05 22:42:33 -08:00
Di Xu
4a3131ddaa add fieldSelector for kubectl get 2017-11-06 14:30:56 +08:00
Di Xu
057b7bf767 rename selector to labelSelector 2017-11-06 14:30:20 +08:00
hzxuzhonghu
6bca31cb49 implement SafeWaitGroup without race issue 2017-11-06 10:34:14 +08:00
Lion-Wei
0a60be5c0a kubeadm mount path '/lib/modules' 2017-11-06 10:18:10 +08:00
Josh Horwitz
590e626939 Add support for configmap resource lock type to CCM 2017-11-05 19:24:16 -05:00
Chao Xu
7430e0a489 remove the wrongly checked in binary 2017-11-05 15:52:16 -08:00
Kubernetes Submit Queue
210626577b
Merge pull request #54750 from ss22ever/branch1
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Stop using the PersistentVolumeLabel admission controller in v1.9

**What this PR does / why we need it**:
Stop using the PersistentVolumeLabel admission controller in v1.9, as in v1.9, we're targeting out-of-tree cloud providers to be ready to use more generally as part of moving to beta.

**Which issue this PR fixes**:
 fixes kubernetes/kubeadm#444
2017-11-05 14:00:46 -08:00
root
824cf1f960 Stop using the PersistentVolumeLabel admission controller in v1.9 2017-11-05 19:43:58 +00:00
Paulo Pires
d2edb8af9e
fix scheduler predicates test that may violate DNS label rules
This commit fixes an issue where in clusters which have FQDN as the node names,
one of the scheduling predicates tests will fail because it will try and run a
pod with a name that violates DNS-1123 rules. As an example, one such pod name
could look like "filler-pod-kube-node-0.kubelet.mesos".

Signed-off-by: Paulo Pires <pjpires@gmail.com>
2017-11-05 16:01:39 +00:00
Kubernetes Submit Queue
20a1a647f3
Merge pull request #54387 from tianshapjq/validation-errorinfo
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

correct the error info when resourceName equals to hugepage

**What this PR does / why we need it**:
when the resourceName eqauls to hugepage, the error info outputs as NvidiaGPU, which should be corrected.
2017-11-05 06:49:30 -08:00
Kubernetes Submit Queue
462d5ed106
Merge pull request #55115 from CaoShuFeng/crd_test
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

[trival]remove duplicated code from unit test

**Release note**:
```
NONE
```
2017-11-05 06:03:33 -08:00
Nikhita Raghunath
30732bb0cc update apiextensions-apiserver godeps 2017-11-05 14:37:38 +05:30
Nikhita Raghunath
019583ad7d typed client: add generated files 2017-11-05 14:37:38 +05:30
Nikhita Raghunath
355279c866 typed client: add tags and script for code generation 2017-11-05 14:37:27 +05:30
Nikhita Raghunath
1e3918e4b1 remove dynamic client 2017-11-05 13:44:06 +05:30
Cao Shufeng
acb90b6547 [trival]remove duplicated code from unit test 2017-11-05 15:02:41 +08:00
Mike Kaplinskiy
c7e901e970
Hide openapi-spec in diffs 2017-11-04 23:16:04 -07:00
Kubernetes Submit Queue
aed9ad4b08
Merge pull request #54778 from stewart-yu/addexplain
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add comment for preempt sunction.

**What this PR does / why we need it**:
Add explain for preempt sunction.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2017-11-04 15:42:20 -07:00
Kubernetes Submit Queue
5691a8d4fe
Merge pull request #54721 from runcom/reset-remove-dockerism
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

kubeadm: reset: use crictl to reset containers

@luxas PTAL



Signed-off-by: Antonio Murdaca <runcom@redhat.com>



**What this PR does / why we need it**:

This patch makes kubeadm to try and reset containers using `crictl` first instead of docker. The reason is that kubeadm reset is ineffective with new container runtimes using the CRI (like CRI-O).
This patch uses `crictl` first and falls back to `docker` in case `crictl` isn't available. 

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

Fix https://github.com/kubernetes/kubeadm/issues/508

**Special notes for your reviewer**:

**Release note**:

```release-note
kubeadm: reset: use crictl to reset containers
```
2017-11-04 14:49:52 -07:00
Kubernetes Submit Queue
3e245366f0
Merge pull request #53484 from danehans/kubeadm_probe
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Adds Support for Configurable Kubeadm Probes.

**What this PR does / why we need it**:
Allows kubeadm liveness probes to be configurable using extra args. Needed to provide deployment flexibility where services are not bound to `127.0.0.1`.

**Which issue this PR fixes**: fixes https://github.com/kubernetes/kubeadm/issues/473

**Special notes for your reviewer**:
Needed for IPv6 support.
/sig network
/area ipv6

**Release note**:
```release-note
```
2017-11-04 14:04:27 -07:00
Zihong Zheng
c1a959c660 Clean up redundant DNS related kubelet codes
Signed-off-by: Zihong Zheng <zihongz@google.com>
2017-11-04 12:33:32 -07:00
Shiyang Wang
1b3059d1ac update staging files 2017-11-04 15:22:13 +08:00
NickrenREN
d379a9a3ff Add downward_api e2e test for LocalStorageCapacityIsolation feature 2017-11-04 12:50:34 +08:00