120507 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Dan Winship	51063cb5c4	Clean up conntrack unit tests ... Fix the test names to match the functions they are testing. Abstract out the repetitive FakeExec handling. Explicitly specify the "expectCommand" in each one, to make it clearer that that's really the part that we're testing. For everything except TestExec(), test each case with both a "success" result and a "nothing to delete" result from the conntrack binary.	2024-01-15 13:07:08 -05:00
Kubernetes Prow Robot	12fc215656	Merge pull request #122663 from aroradaman/drop-ct-state-invalid-rule ... pkg/proxy/nftables: drop conntrack state invalid rule	2024-01-13 19:01:16 +01:00
Kubernetes Prow Robot	e5b64bdef7	Merge pull request #122747 from BenTheElder/undo-unapproved-owners ... Revert "Save a list of images used by e2e.test"	2024-01-12 23:27:44 +01:00
Benjamin Elder	08645984b0	Revert "Save a list of images used by e2e.test" ... This reverts commit a3c4a60995.	2024-01-12 13:15:01 -08:00
Kubernetes Prow Robot	83e6636096	Merge pull request #122647 from benluddy/featuregate-default-runtime-override ... Support overrides for registered feature defaults.	2024-01-12 17:54:40 +01:00
Ben Luddy	46d0e1d5aa	Support overrides for registered feature defaults. ... This is to support the goal of enabling a feature by default for a single component only when the feature in question is consumed by multiple components. Overriden defaults are reflected in KnownFeatures and registered flag text.	2024-01-12 10:25:22 -05:00
Kubernetes Prow Robot	157da7d52e	Merge pull request #122733 from pohly/logcheck-update ... hack/tools: bump logcheck to v0.8.1	2024-01-12 15:47:37 +01:00
Patrick Ohly	d954b25b11	hack/tools: bump logcheck to v0.8.1 ... This enables the usage of the new SafePtr in code which needs to support contextual logging.	2024-01-12 14:39:50 +01:00
Kubernetes Prow Robot	cc076e553e	Merge pull request #122731 from cpanato/update-prom ... Update publishing-bot rules to Go 1.20.13 and 1.21.6	2024-01-12 14:21:17 +01:00
cpanato	4db86556e5	Update publishing-bot rules to Go 1.20.13 and 1.21.6 ... Signed-off-by: cpanato <ctadeu@gmail.com>	2024-01-12 12:01:23 +01:00
Kubernetes Prow Robot	4b94168c0f	Merge pull request #122687 from danwinship/nftables-packet-flow ... Document the nftables kube-proxy packet flow	2024-01-12 02:52:24 +01:00
Kubernetes Prow Robot	4f2029bb65	Merge pull request #122702 from p0lyn0mial/upstream-component-base-fg-clean-up ... component-base/featuregate: store atomic.Value fields as value not reference	2024-01-11 20:32:56 +01:00
Kubernetes Prow Robot	7ca92fb016	Merge pull request #122697 from pacoxu/revert-Evented-PLEG-to-alpha ... Revert "Graduate Evented PLEG to Beta"	2024-01-11 20:32:50 +01:00
Dan Winship	5ca73197b3	Document the nftables kube-proxy packet flow	2024-01-11 12:59:21 -05:00
Kubernetes Prow Robot	9d86dbd0ad	Merge pull request #122710 from dims/local-up-cluster-use-newly-built-library-always ... local-up-cluster: use the newly built library always	2024-01-11 18:25:47 +01:00
Kubernetes Prow Robot	823ecb58f6	Merge pull request #122706 from pacoxu/klog-upgrade ... bump klog to v2.120.0	2024-01-11 18:25:38 +01:00
Kubernetes Prow Robot	773ad73b90	Merge pull request #122705 from cpanato/update-go-1.21-master ... [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4	2024-01-11 14:19:21 +01:00
Davanum Srinivas	ddbf3ab662	local-up-cluster: use the newly built library always ... Signed-off-by: Davanum Srinivas <davanum@gmail.com>	2024-01-11 08:13:21 -05:00
cpanato	a5861a1262	[go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4 ... Signed-off-by: cpanato <ctadeu@gmail.com>	2024-01-11 11:54:35 +01:00
Paco Xu	3c86d21316	bump klog to v2.120.0	2024-01-11 17:35:07 +08:00
Lukasz Szaszkiewicz	6376dd6296	component-base/featuregate: store atomic.Value fields as value not reference ... featureGate is a pointer receiver thus it is safe to store atomic fields as values because they won't be copied.	2024-01-11 09:19:34 +01:00
Paco Xu	56321a7779	Revert "Graduate Evented PLEG to Beta" ... This reverts commit d971809b49.	2024-01-11 15:27:23 +08:00
Kubernetes Prow Robot	c9158e9a19	Merge pull request #122595 from dims/support-building-with-and-without-cloud-providers ... KUBE_PROVIDERLESS - Support building with and without cloud providers	2024-01-11 05:42:23 +01:00
Daman Arora	b0e929264f	e2e/network/conntrack: rename invalid conntrack state test ... Signed-off-by: Daman Arora <aroradaman@gmail.com>	2024-01-11 03:11:42 +05:30
Kubernetes Prow Robot	741fd84d15	Merge pull request #122689 from enj/enj/r/ec_hash_cleanup ... Clean up encryption config reading and hashing logic	2024-01-10 21:58:17 +01:00
Monis Khan	9387a66c71	Clean up encryption config reading and hashing logic ... This is a no-op change that makes the internal encryption config hash more specific to it use and explicitly marks it as unstable. Signed-off-by: Monis Khan <mok@microsoft.com>	2024-01-10 14:52:12 -05:00
Kubernetes Prow Robot	0341e8294a	Merge pull request #122555 from p0lyn0mial/upstream-client-go-fg-provider-with-types ... client-go/features: introduce feature gates	2024-01-10 20:49:12 +01:00
Daman Arora	4ffa12b9d9	pkg/proxy/nftables: drop ct-state-invalid rule ... Signed-off-by: Daman Arora <aroradaman@gmail.com>	2024-01-10 22:53:09 +05:30
Lukasz Szaszkiewicz	04bbd3481f	client-go/features: warn when ordering initialization issue ... ReplaceFeatureGates logs a warning when the default env var implementation has been already used. Such a situation indicates a potential ordering issue and usually is unwanted.	2024-01-10 17:24:55 +01:00
Lukasz Szaszkiewicz	d74c57d4f5	client-go/features: introduce feature gates ... This PR add a feature gates mechanisim to client-go as described in https://docs.google.com/document/d/1g9BGCRw-7ucUxO6OtCWbb3lfzUGA_uU9178wLdXAIfs In particular: - Adds a default feature gate implementation based on environment variables. - Adds a set of methods for reading, overwriting the default implementation, and adding features to an external registry. Co-authored-by: deads2k <deads@redhat.com> Co-authored-by: Ben Luddy <bluddy@redhat.com>	2024-01-10 17:20:40 +01:00
Kubernetes Prow Robot	35bed806dc	Merge pull request #121956 from rewanthtammana/patch-1 ... Fixed `remotePath` in mount_windows.go	2024-01-10 17:08:08 +01:00
Kubernetes Prow Robot	7dca023859	Merge pull request #122684 from soltysh/improve_output ... Add missing string formatting directive	2024-01-10 15:59:26 +01:00
Kubernetes Prow Robot	6e614b0e3f	Merge pull request #122683 from soltysh/fix_validatingadmissionpolicies ... Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies	2024-01-10 15:59:08 +01:00
Kubernetes Prow Robot	fc691e8ffd	Merge pull request #122476 from kerthcet/feat/support-annotation ... Support annotation in nodewrapper	2024-01-10 14:05:58 +01:00
Maciej Szulik	70e20b58dd	Add missing string formatting directive	2024-01-10 13:28:02 +01:00
Maciej Szulik	8abe5394ac	Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies	2024-01-10 13:20:27 +01:00
Kubernetes Prow Robot	331e5561ab	Merge pull request #122642 from my-git9/componentconfigs-ut-q ... kubeadm: increase ut coverage app/componentconfigs	2024-01-10 02:47:06 +01:00
Kubernetes Prow Robot	c74cd5fec4	Merge pull request #122524 from AxeZhan/testPQupdate ... [Scheduler] refactor TestPriorityQueue_Update	2024-01-10 02:46:59 +01:00
Kubernetes Prow Robot	95a159299b	Merge pull request #122614 from tnqn/nftables-firewall ... kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode	2024-01-09 22:27:16 +01:00
Kubernetes Prow Robot	1cfe76a8e4	Merge pull request #122583 from jsafrane/fix-selinux-e2e ... Fix SELinux e2e tests: add label to observed metrics	2024-01-09 22:27:07 +01:00
Davanum Srinivas	ce263d8828	Address comments during Review ... Signed-off-by: Davanum Srinivas <davanum@gmail.com>	2024-01-09 15:52:16 -05:00
Kubernetes Prow Robot	13fad117aa	Merge pull request #122630 from uablrek/kube-proxy-ip-types ... Kube-proxy: use type net.IP for addresses	2024-01-09 21:18:25 +01:00
Kubernetes Prow Robot	ccb1d08162	Merge pull request #121834 from vaibhav2107/eviction-update ... Added Imagefs inodes in default Eviction Hard	2024-01-09 21:18:16 +01:00
Kubernetes Prow Robot	4c82da4d9f	Merge pull request #122655 from uablrek/cleanup-cidrs ... kube-proxy: don't use invalid cidrs in unit test	2024-01-09 19:36:16 +01:00
Kubernetes Prow Robot	56ecdadd99	Merge pull request #122574 from brianpursley/kubectl-1532 ... Fix kubectl drain error handling bug.	2024-01-09 17:40:17 +01:00
xin.li	1a69fd4cb0	kubeadm: increase ut coverage app/componentconfigs ... Signed-off-by: xin.li <xin.li@daocloud.io>	2024-01-09 21:52:11 +08:00
Quan Tian	f21f8d9984	kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode ... Previously, the firewall-check chain was run in input, forward, and output hook but not prerouting hook. When the LoadBalancer traffic arrived at input or forward hook, it had been DNATed to endpoint IP and port, so the firewall-check chain didn't take effect, traffic from out of LoadBalancerSourceRanges was not dropped. It was not detected by unit test because the chains were sorted by priority only, while hook should be taken into consideration. The commit links the firewall-check chain to prerouting hook and unlinks it from input and forward hook to ensure the traffic is filtered before DNAT. The priorities of filter chains are updated from "DNATPriority-1" to "DNATPriority-10" to allow third parties to insert something else between them. Signed-off-by: Quan Tian <qtian@vmware.com>	2024-01-09 17:34:16 +08:00
Lars Ekman	50b3ffc71f	kube-proxy: LoadBalancerSourceRanges as *net.IPNet	2024-01-09 09:17:56 +01:00
Lars Ekman	9eac24c656	kube-proxy: store ExternalIPs as net.IP ... They were stored as strings which could be non-canonical and cause problems	2024-01-09 09:17:50 +01:00
Lars Ekman	d2294007b0	kube-proxy: store LoadBalancerVIPs as net.IP ... They were stored as strings which could be non-canonical and cause problems	2024-01-09 09:17:43 +01:00