Commit Graph

107549 Commits

Author SHA1 Message Date
Dan Winship
548cf9d5de proxy/iptables: fix internal-vs-external traffic policy handling
Fix internal and external traffic policy to be handled separately (so
that, in particular, services with Local internal traffic policy and
Cluster external traffic policy do not behave as though they had Local
external traffic policy as well.

Additionally, traffic to an `internalTrafficPolicy: Local` service on
a node with no endpoints is now dropped rather than being rejected
(which, as in the external case, may prevent traffic from being lost
when endpoints are in flux).
2022-03-26 11:06:34 -04:00
Dan Winship
2e780ecd99 proxy/iptables: Split KUBE-SVL-XXX chain out of KUBE-XLB-XXX
Now the XLB chain _only_ implements the "short-circuit local
connections to the SVC chain" rule, and the actual endpoint selection
happens in the SVL chain.

Though not quite implemented yet, this will eventually also mean that
"SVC" = "Service, Cluster traffic policy" as opposed to "SVL" =
"Service, Local traffic policy"
2022-03-26 11:06:34 -04:00
Dan Winship
87dcf8b914 proxy/iptables: move XLB chain initial rule setup 2022-03-26 11:06:34 -04:00
Dan Winship
2b872a990d proxy/iptables: clean up / clarify iptables chain names a bit 2022-03-26 11:06:34 -04:00
Kubernetes Prow Robot
78889cd1bb
Merge pull request #109035 from deepakkinni/enable_def_v1
Default enable flag for beta feature HonorPVReclaimPolicy
2022-03-26 08:03:21 -07:00
Kubernetes Prow Robot
c600e820cd
Merge pull request #107451 from davidebianchi/master
fix: update WithDiscoveryQPS method description
2022-03-26 06:53:22 -07:00
Kubernetes Prow Robot
9568dca969
Merge pull request #109039 from mkimuram/issue/109037
Use WaitForPodRunningInNamespace for proxy e2e tests
2022-03-26 04:35:21 -07:00
Antonio Ojea
d2ca66651d refactor apiserver tests 2022-03-26 10:20:27 +01:00
Antonio Ojea
ddadc9a0bb reorganize controlplane integration tests 2022-03-26 09:19:55 +01:00
Antonio Ojea
d9bac2efb9 reduce parallelism on daemonset tests 2022-03-26 09:14:53 +01:00
Kubernetes Prow Robot
c18c2447cf
Merge pull request #108350 from kevindelgado/kubectl-validation
Server Side Field Validation Support For Kubectl
2022-03-26 00:53:21 -07:00
Kubernetes Prow Robot
736a023167
Merge pull request #108988 from neolit123/1.24-update-system-validators
update k8s.io/system-validators to v1.7.0
2022-03-25 23:45:35 -07:00
Kubernetes Prow Robot
924654b504
Merge pull request #108828 from manugupt1/update-mountinfo
Updates moby/sys mountinfo package to v0.6.0
2022-03-25 23:45:28 -07:00
Kubernetes Prow Robot
0b79a791ed
Merge pull request #107180 from ardaguclu/remove-deprecated-serverresource
Remove deprecated discovery/ServerResources function
2022-03-25 23:45:21 -07:00
Jordan Liggitt
466ddd01de Raise verbosity of EncoderWithAllocator log 2022-03-26 01:06:39 -04:00
Kevin Delgado
b0f3b5a796 Adjust validation checks to pass for both client-side and server-side validation 2022-03-26 03:45:13 +00:00
Kevin Delgado
0bb1a32411 Expand newly created cmd-test
Modify newly created cmd-test to work for both
client-side and server-side validation
2022-03-26 03:45:13 +00:00
Kevin Delgado
fe3772890f add server-side validation support to kubectl 2022-03-26 03:45:13 +00:00
Kubernetes Prow Robot
083c3ac4e8
Merge pull request #106998 from eltociear/patch-7
Fix typo in get_test.go
2022-03-25 20:23:55 -07:00
Kubernetes Prow Robot
f411c4068c
Merge pull request #109040 from jpbetz/revert-cel-bump
Revert #108954: Use CEL EagerlyValidateDeclarations to improve compilation performance
2022-03-25 19:18:10 -07:00
Kubernetes Prow Robot
6c73b674d7
Merge pull request #109030 from liggitt/revert-apf-ssa
Revert "Revert "Merge pull request #107797 from tkashem/revert-107456""
2022-03-25 19:17:58 -07:00
Deepak Kinni
836ace46a0 Default enable flag for beta feature HonorPVReclaimPolicy
Signed-off-by: Deepak Kinni <dkinni@vmware.com>
2022-03-26 06:48:28 +05:30
Kubernetes Prow Robot
6efd6582df
Merge pull request #109006 from andrewsykim/kubelet-cred-provider-e2e-beta
test/e2e_node: update kubelet credential provider tests to use new v1beta1 APIs
2022-03-25 18:08:24 -07:00
Kubernetes Prow Robot
c239b406f0
Merge pull request #108929 from gnufied/move-expansion-feature-gate-ga
Move all volume expansion feature gates to GA
2022-03-25 18:08:16 -07:00
Kubernetes Prow Robot
08765e15da
Merge pull request #108894 from marosset/windows-cri-api-storage-opts
CRI-API - Add rootfs size to WindowsContainerResources
2022-03-25 18:08:09 -07:00
Kubernetes Prow Robot
0a63090445
Merge pull request #108859 from cici37/placeholder
Return a placeholder error for blocking failures and skip CEL validation.
2022-03-25 18:07:58 -07:00
Kubernetes Prow Robot
58847ef702
Merge pull request #109019 from liggitt/null-fix
Fix inconsistent requirement for kind in strict json decoding
2022-03-25 15:35:25 -07:00
Kubernetes Prow Robot
5a651eacbc
Merge pull request #108987 from soltysh/deprecate_long_version
Start deprecating long/golang version information
2022-03-25 15:35:17 -07:00
Kubernetes Prow Robot
317f8afe92
Merge pull request #108976 from ArangoGutierrez/devel/typos/scheduler
Fix typos under pkg/scheduler
2022-03-25 15:35:09 -07:00
Kubernetes Prow Robot
9472cbb547
Merge pull request #108946 from ArangoGutierrez/devel/108801
Cleanup: pkg/util/ipset
2022-03-25 15:35:01 -07:00
Kubernetes Prow Robot
bb3127eee8
Merge pull request #108939 from stevekuznetsov/skuznets/precise-watch
pkg/storage/etcd3: be more precise in watch test
2022-03-25 15:34:53 -07:00
Kubernetes Prow Robot
91d3afc948
Merge pull request #108899 from jsturtevant/windows-gmsa-deployment
Windows gmsa e2e: Don't assume bash is avaliable for webhook deployment
2022-03-25 15:34:45 -07:00
Kubernetes Prow Robot
8f12e4a44b
Merge pull request #108898 from jiahuif-forks/feature/openapi-enums/to-beta
Graduate OpenAPI Enums to beta
2022-03-25 15:34:37 -07:00
Kubernetes Prow Robot
5af9afe201
Merge pull request #108698 from tkashem/last-error
client-go: wrap previous error to provide more context to caller
2022-03-25 15:34:30 -07:00
Kubernetes Prow Robot
ea006f5246
Merge pull request #108531 from tallclair/redirects
Don't follow redirects with spdy
2022-03-25 15:34:23 -07:00
Kubernetes Prow Robot
a2a774d3d1
Merge pull request #108493 from VilledeMontreal/feat/compForCompositeNames
Support shell completion for the type/name form
2022-03-25 15:34:10 -07:00
Kubernetes Prow Robot
d6487d63b7
Merge pull request #108310 from csantanapr/add-check-colima
add check for colima docker socket as fall back
2022-03-25 15:33:59 -07:00
Masaki Kimura
52afdc6259 Use WaitForPodRunningInNamespace for proxy e2e tests 2022-03-25 21:24:59 +00:00
Kubernetes Prow Robot
e8e0fe9e87
Merge pull request #106792 from aojea/reserved_allocator
KEP-3070: Reserve Service IP Ranges For Dynamic and Static IP Allocation
2022-03-25 13:53:58 -07:00
Joe Betz
c89539fdc5 Revert "Initialize a base CEL env and share it to avoid repeated function declaration validation"
This reverts commit 6c6d76c69e.
2022-03-25 16:47:33 -04:00
Joe Betz
4fba6adc91 Revert "Bump CEL to 0.11.2"
This reverts commit 4c90653d19.
2022-03-25 16:46:52 -04:00
Rey Lejano
37a86e3e33 updates for kubectl generated ref docs 2022-03-25 12:31:12 -07:00
Surya Seetharaman
1ea5f9432c Add validation for bridge-interface and interface-name-prefix
Co-authored-by: Will Daly <widaly@microsoft.com>
Signed-off-by: Surya Seetharaman <suryaseetharaman.9@gmail.com>
2022-03-25 20:06:12 +01:00
Surya Seetharaman
7d480d8ac8 Enable local traffic detection using the interface options
This commit adds the framework for the new local detection
modes BridgeInterface and InterfaceNamePrefix to work.

Signed-off-by: Surya Seetharaman <suryaseetharaman.9@gmail.com>
2022-03-25 20:06:12 +01:00
Surya Seetharaman
5632991115 Local Traffic Detector: Add two new modes
This PR introduces two new modes for detecting
local traffic in a cluster.
1) detectLocalByBridgeInterface: This takes a bridge name
as argument and decides all traffic that match on their
originating interface being that of this bridge, shall be
considered as local pod traffic.
2) detectLocalByInterfaceNamePrefix: This takes an interface prefix
name as argument and decides all traffic that match on their
originating interface names having a prefix that matches this
argument shall be considered as local pod traffic.

Signed-off-by: Surya Seetharaman <suryaseetharaman.9@gmail.com>
2022-03-25 20:06:06 +01:00
Kubernetes Prow Robot
84bd51c7a1
Merge pull request #107910 from tkashem/latency-breakdown
track latency incurred in various layers of apiserver
2022-03-25 11:47:58 -07:00
Jordan Liggitt
363a8beaab Revert "Revert "Merge pull request 107797 from tkashem/revert-107456""
This reverts commit b0b460921b.
2022-03-25 14:36:10 -04:00
Carlos Eduardo Arango Gutierrez
a435ad33f4
Cleanup: pkg/util/ipset
Signed-off-by: Carlos Eduardo Arango Gutierrez <carangog@redhat.com>
2022-03-25 14:14:17 -04:00
Stephen Heywood
a1f6b7b7ec Create job lifecycle e2e test
The test validates the following endpoints
- deleteBatchV1CollectionNamespacedJob
- listBatchV1JobForAllNamespaces
- patchBatchV1NamespacedJob
- replaceBatchV1NamespacedJob
2022-03-26 06:58:38 +13:00
Aldo Culquicondor
cd9fd12960 Reduce number of pods in Job+GC tests
To reduce the load of the integration tests. This change reduces the runtime of each test in half.

Change-Id: I71bcaadf3809643c63bb0f6b73c28778d37d8967
2022-03-25 13:01:50 -04:00