108854 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lokichoggio	52280de403	fix comments in pkg/proxy/types.go	2022-06-24 09:50:02 +08:00
Kubernetes Prow Robot	487512bb56	Merge pull request #109510 from sugangli/pinhole-fw ... Firewall Pinhole Fix for ILB and NetLB	2022-06-23 16:13:20 -07:00
Kubernetes Prow Robot	801bcfeea7	Merge pull request #110731 from jkh52/update-netproxy ... Bump konnectivity-client to 0.0.32	2022-06-23 12:41:20 -07:00
Kubernetes Prow Robot	d6547d26eb	Merge pull request #110748 from cpanato/prombotclean ... remove release-1.20 from prom bot due to eol	2022-06-23 11:19:43 -07:00
Sugang Li	c64846da00	update kube-controller-manager dependencies	2022-06-23 18:07:18 +00:00
Sugang Li	84903d4b84	add ILB and NetLB pinhole changes	2022-06-23 18:07:15 +00:00
Kubernetes Prow Robot	035f22d781	Merge pull request #110712 from chendave/ignore_args ... kubeadm: certs renew doesn't support positional args	2022-06-23 09:09:43 -07:00
cpanato	ab810a7f85	remove release-1.20 from prom bot due to eol ... Signed-off-by: cpanato <ctadeu@gmail.com>	2022-06-23 18:04:17 +02:00
Kubernetes Prow Robot	1e3c973e72	Merge pull request #110628 from danwinship/kep-3178-ipvs-mark-drop ... don't use KUBE-MARK-DROP in ipvs proxy	2022-06-23 07:59:55 -07:00
Kubernetes Prow Robot	272386c9b6	Merge pull request #110496 from kolyshkin/runc-1.1.3 ... vendor: bump runc to 1.1.3	2022-06-23 07:59:43 -07:00
Dave Chen	e8e804deaa	kubeadm: certs renew doesn't support positional args ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2022-06-23 19:52:22 +08:00
Kubernetes Prow Robot	df0af6f7b8	Merge pull request #110736 from Octopusjust/k8s-pr3 ... Incomplete coverage of test scenarios	2022-06-23 04:33:44 -07:00
ZhangYu	9f4562c7b6	Incomplete coverage of test scenarios	2022-06-23 11:41:23 +08:00
Kubernetes Prow Robot	0669ba386b	Merge pull request #110685 from hwdef/cleanup-spelling_failures ... clean up spelling_failures	2022-06-22 20:09:43 -07:00
Kubernetes Prow Robot	dee37aacc1	Merge pull request #110652 from Abirdcfly/fixchunksize ... fix: --chunk-size with selector returns missing result	2022-06-22 18:21:43 -07:00
Joseph Anttila Hall	f5c584a020	Bump konnectivity-client to 0.0.32	2022-06-22 17:22:42 -07:00
Kubernetes Prow Robot	ddfbb5bdbe	Merge pull request #110724 from pohly/klog-update ... build: update to klog v2.70.0	2022-06-22 17:03:54 -07:00
Kubernetes Prow Robot	e64852fcad	Merge pull request #110330 from DangerOnTheRanger/cel-e2e ... Add additional CRD validation E2E tests	2022-06-22 17:03:43 -07:00
Abirdcfly	fba297629d	fix: --chunk-size with selector returns missing result ... Signed-off-by: Abirdcfly <fp544037857@gmail.com>	2022-06-23 07:07:13 +08:00
Kubernetes Prow Robot	1d81106534	Merge pull request #110425 from LY-today/fake-evict-list-err ... fix: list pod err after an pod evicted	2022-06-22 15:55:42 -07:00
Kubernetes Prow Robot	ae3537120b	Merge pull request #110639 from aojea/slice_no_node ... EndpointSlice with Pods without an existing Node	2022-06-22 10:43:42 -07:00
Dan Winship	28253f6030	proxy/ipvs: Use DROP directly rather than KUBE-MARK-DROP ... The ipvs proxier was figuring out LoadBalancerSourceRanges matches in the nat table and using KUBE-MARK-DROP to mark unmatched packets to be dropped later. But with ipvs, unlike with iptables, DNAT happens after the packet is "delivered" to the dummy interface, so the packet will still be unmodified when it reaches the filter table (the first time) so there's no reason to split the work between the nat and filter tables; we can just do it all from the filter table and call DROP directly. Before: - KUBE-LOAD-BALANCER (in nat) uses kubeLoadBalancerFWSet to match LB traffic for services using LoadBalancerSourceRanges, and sends it to KUBE-FIREWALL. - KUBE-FIREWALL uses kubeLoadBalancerSourceCIDRSet and kubeLoadBalancerSourceIPSet to match allowed source/dest combos and calls "-j RETURN". - All remaining traffic that doesn't escape KUBE-FIREWALL is sent to KUBE-MARK-DROP. - Traffic sent to KUBE-MARK-DROP later gets dropped by chains in filter created by kubelet. After: - All INPUT and FORWARD traffic gets routed to KUBE-PROXY-FIREWALL (in filter). (We don't use "KUBE-FIREWALL" any more because there's already a chain in filter by that name that belongs to kubelet.) - KUBE-PROXY-FIREWALL sends traffic matching kubeLoadbalancerFWSet to KUBE-SOURCE-RANGES-FIREWALL - KUBE-SOURCE-RANGES-FIREWALL uses kubeLoadBalancerSourceCIDRSet and kubeLoadBalancerSourceIPSet to match allowed source/dest combos and calls "-j RETURN". - All remaining traffic that doesn't escape KUBE-SOURCE-RANGES-FIREWALL is dropped (directly via "-j DROP"). - (KUBE-LOAD-BALANCER in nat is now used only to set up masquerading)	2022-06-22 13:02:22 -04:00
Dan Winship	a9cd57fa40	proxy/ipvs: add filter table support to ipsetWithIptablesChain	2022-06-22 12:53:18 -04:00
Kubernetes Prow Robot	e9702cfc1b	Merge pull request #110593 from SataQiu/kubeadm-coredns-20220615 ... kubeadm: add the preferred pod anti-affinity for CoreDNS Deployment	2022-06-22 09:29:56 -07:00
Kubernetes Prow Robot	e2fe430da7	Merge pull request #109632 from weilaaa/recorrect_byindex_input_param ... correct input params of ByIndex	2022-06-22 09:29:43 -07:00
LY-today	f299494e79	fix: list pod err after an pod evicted ... Signed-off-by: LY-today <724102053@qq.com>	2022-06-22 23:30:40 +08:00
Kubernetes Prow Robot	b60978629d	Merge pull request #110700 from alculquicondor/increase_timeout ... Increase timeout for TestSyncPastDeadlineJobFinished	2022-06-22 08:23:56 -07:00
Kubernetes Prow Robot	fd20191212	Merge pull request #110684 from chymy/fix-typo-for-kubeadm ... fix several typo	2022-06-22 08:23:45 -07:00
Patrick Ohly	f05e327ca6	build: update to klog v2.70.0 ... The main practical advantage is that klog.Fatal no longer dumps the backtrace of all goroutines.	2022-06-22 16:29:51 +02:00
Kubernetes Prow Robot	18b5efceda	Merge pull request #110410 from Jiawei0227/master ... CSIMigration feature gate to GA	2022-06-22 04:05:48 -07:00
Kubernetes Prow Robot	23144130a8	Merge pull request #109396 from SergeyKanzhelev/testDurationCheck ... check for the test duraiton to make NodeProblemDetector test reliable	2022-06-22 01:43:43 -07:00
Antonio Ojea	b8ba6ab005	endpointslices: node missing on Pod scenario ... When a Pod is referencing a Node that doesn't exist on the local informer cache, the current behavior was to return an error to retry later and stop processing. However, this can cause scenarios that a missing node leaves a Slice stuck, it can no reflect other changes, or be created. Also, this doesn't respect the publishNotReadyAddresses options on Services, that considers ok to publish pod Addresses that are known to not be ready. The new behavior keeps retrying the problematic Service, but it keeps processing the updates, reflacting current state on the EndpointSlice. If the publishNotReadyAddresses is set, a missing node on a Pod is not treated as an error.	2022-06-22 09:45:16 +02:00
Antonio Ojea	baecb1981e	fix metrics for placeholder slice ... There is always a placeholder slice. The ServicePortCache logic was considering always one endpointSlice per Endpoint, but if there are multiple empty Endpoints, we just use one placeholder slice, not multiple placeholder slices.	2022-06-22 09:45:02 +02:00
Antonio Ojea	0d9689a55d	fix a bug on endpointslices tests comparing the wrong metrics	2022-06-22 09:40:18 +02:00
Kubernetes Prow Robot	10486a7331	Merge pull request #110707 from wongearl/fix-package-importe ... fix "k8s.io/client-go/rest" is being imported more than once,optimize code	2022-06-22 00:35:44 -07:00
weilaaa	9847b2eeb4	correct input params and add godoc	2022-06-22 11:26:07 +08:00
wongearl	44404d309c	fix "k8s.io/client-go/rest" is being imported more than once,optimize code	2022-06-22 10:31:24 +08:00
Kubernetes Prow Robot	3beb8dc596	Merge pull request #110612 from mattcary/ss-integration ... Add TestAutodeleteOwnerRefs statefulset integration test	2022-06-21 15:29:42 -07:00
Kubernetes Prow Robot	4720f0725c	Merge pull request #110531 from Iceber/fix-run-controller-manager ... fix the running of the kube-controller-manager	2022-06-21 13:15:55 -07:00
Kubernetes Prow Robot	3d5971aa5d	Merge pull request #110167 from NoicFank/master ... scheduling: fix duplicate checks for number of enabled queue sort plugin	2022-06-21 13:15:43 -07:00
Aldo Culquicondor	817c8bbf59	Increase timeout for TestSyncPastDeadlineJobFinished ... To mitigate flakiness Change-Id: I1d0286d16d2b7dd3a605690e9a2d4d2f954701ff	2022-06-21 14:49:10 -04:00
Kubernetes Prow Robot	1ceca7b139	Merge pull request #110646 from thockin/rest-init-uid-early ... Initialize UID earlier in the Create process	2022-06-21 11:06:38 -07:00
Kubernetes Prow Robot	e1f5282b19	Merge pull request #110638 from kerthcet/feat/nominate-to-reviewer ... REQUEST: nominate kerthcet as sig scheduler reviewer	2022-06-21 11:06:26 -07:00
Kubernetes Prow Robot	a57c140a12	Merge pull request #110567 from xiaomudk/patch-2 ... Remove redundant variable definitions in scheduler apis defaults.go	2022-06-21 09:46:25 -07:00
Kante Yin	e844c12a61	Cleanup: defer to close server in tests (#110367) ... * Cleanup: defer to close server in tests Signed-off-by: kerthcet <kerthcet@gmail.com> * address comments Signed-off-by: kerthcet <kerthcet@gmail.com> * address comments Signed-off-by: kerthcet <kerthcet@gmail.com>	2022-06-21 08:00:38 -07:00
Kubernetes Prow Robot	375fd32b9f	Merge pull request #109957 from adammw/adammw/disruption-implements-scale ... disruptioncontroller: check for scale subresource correctly	2022-06-21 08:00:26 -07:00
Kubernetes Prow Robot	a9f83d839e	Merge pull request #110664 from jbartosik/rollback-failing-hpa-e2e ... Revert "Add e2e test for HPA behavior: scale up delay"	2022-06-21 05:49:43 -07:00
hwdef	2ea856026a	clean up spelling_failures	2022-06-21 17:33:46 +08:00
chymy	c8aa25e472	fix several typo ... Signed-off-by: chymy <chang.min1@zte.com.cn>	2022-06-21 09:11:41 +00:00
Kubernetes Prow Robot	02462739ca	Merge pull request #110655 from Abirdcfly/fixtypo1 ... typo in comments pkg/kubelet/volumemanager/volume_manager.go	2022-06-20 16:01:42 -07:00