Commit Graph

95165 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
7bf9b0a3be
Merge pull request #96047 from tkashem/fix-filter-latency-bucket
Change bucket for apiserver_request_filter_duration_seconds metric
2020-10-30 07:14:06 -07:00
Abu Kashem
16ac2d84cf
change bucket from 0.0s to 0.0001s 2020-10-30 09:18:40 -04:00
Kubernetes Prow Robot
f78d095d52
Merge pull request #95894 from thockin/svc-default-on-read
Populate ClusterIPs on read
2020-10-30 04:46:05 -07:00
Kubernetes Prow Robot
8b59fe9612
Merge pull request #95938 from coffeepac/repair-cluster-discovery
use current method signatures
2020-10-30 01:34:06 -07:00
Kubernetes Prow Robot
f2ed1b5580
Merge pull request #96016 from cici37/informer
Move informer_factory to staging
2020-10-30 00:44:06 -07:00
Kubernetes Prow Robot
3662e1e344
Merge pull request #96025 from haircommander/fix-API_PORT
hack/local-up-cluster.sh: fix API_PORT
2020-10-29 21:04:15 -07:00
Kubernetes Prow Robot
d0bee69fc9
Merge pull request #94636 from hprateek43/cpu_threads_parameter
Added config parameter for CPU threads
2020-10-29 21:04:05 -07:00
Tim Hockin
a4c9330683 Populate ClusterIPs on read
Old stored services will not have the `clusterIPs` field when read back
without this.

This includes some renaming for clarity and expanded comments, and a new
test for default on read.
2020-10-29 20:40:39 -07:00
Kubernetes Prow Robot
ad6a2af7d8
Merge pull request #95531 from damemi/move-scheduler-helpers
Move MatchNodeSelectorTerms to k8s.io/component-helpers
2020-10-29 20:06:05 -07:00
Kubernetes Prow Robot
f99ad43dbb
Merge pull request #95575 from oomichi/remove-non-ascii-20201014
Replace non-ascii string under test/
2020-10-29 18:36:18 -07:00
Kubernetes Prow Robot
53913a7c67
Merge pull request #95489 from ankeesler/ankeesler/enj/f/exec_plugin_cluster
exec credential provider: wire in cluster info (superset of #91192)
2020-10-29 18:36:05 -07:00
Kubernetes Prow Robot
ba75a6dbd7
Merge pull request #96012 from khenidak/clusterIPs-labeling
add tests that update services while gate is off
2020-10-29 17:40:45 -07:00
Kubernetes Prow Robot
4d4570979a
Merge pull request #95982 from masap/local_up_cluster1
local-up-cluster.sh: Pass SERVICE_CLUSTER_IP_RANGE to controller manager
2020-10-29 17:40:36 -07:00
Kubernetes Prow Robot
a71334b64c
Merge pull request #95925 from deads2k/doc-events
Event: Document TTL and best-effort-ness
2020-10-29 17:40:22 -07:00
Kubernetes Prow Robot
e91cb0b1b5
Merge pull request #95196 from thockin/auto-wipe-linked-service-fields
Automatically wipe dependent fields on service "type" updates
2020-10-29 17:40:06 -07:00
Kubernetes Prow Robot
3b51cd1b1e
Merge pull request #95207 from tkashem/apf-filter-latency
Add a new metric to measure apiserver request filter latency
2020-10-29 15:42:05 -07:00
Abu Kashem
62431047b4
Enable filter latency tracking for request filters
Enable filter latency tracking for the following request filters:
- apf (priority and fairness)
- authentication
- authorization
- impersonation
- audit
2020-10-29 17:31:05 -04:00
Abu Kashem
99df0b1581
Measure how much time a request spends in server filter(s):
- A: the timestamp a particular filter starts executing for a request.
- B: the timestamp the particular filter has completed and the next handler
     in the chain has started executing.

We define filter latency as `B - A`. Introduce a new metric to track filter latency:
"apiserver_request_filter_duration_seconds"
This measures request filter latency distribution in seconds, for each filter type.
2020-10-29 17:30:53 -04:00
Peter Hunt
174548659f hack/local-up-cluster.sh: fix API_PORT
commit kubernetes/kubernetes@cfc2b33 causes a local cluster to not come up because it sets the default insecure port to 8080, which is no longer valid

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2020-10-29 17:17:58 -04:00
Kubernetes Prow Robot
5ee72a49cb
Merge pull request #94066 from lojies/auditlogcompress
add audit-log-compress to apiserver
2020-10-29 14:16:06 -07:00
Andrew Keesler
409f22832a
exec credential provider: exec -> client.authentication.k8s.io/exec
Hopefully we've fixed all of these references now...

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-29 17:02:55 -04:00
Kubernetes Prow Robot
26c8ce57a5
Merge pull request #95915 from wojtek-t/progress_notify_frequency
Allow configuring etcd progress notify interval on GCE
2020-10-29 12:58:06 -07:00
cici37
a91a2cdad6 Move informer_factory to staging 2020-10-29 12:20:33 -07:00
Khaled (Kal) Henidak
7bdc244f4a add tests that update services while gate is off 2020-10-29 18:59:48 +00:00
Kubernetes Prow Robot
1968e96165
Merge pull request #95856 from knight42/refactor/disable-apiserver-insecure-port
refactor(apiserver): disable insecure port
2020-10-29 10:47:58 -07:00
Mike Dame
b7ba77c25b Move MatchNodeSelectorTerms to k8s.io/component-helpers 2020-10-29 13:39:13 -04:00
Andrew Keesler
875a46bd7c
exec credential provider: k8s.io/client-go/tools/auth/exec helper
Exec plugin implementations should be able to call
LoadExecCredentialFromEnv() in order to get everything they need to
operate (i.e., cluster information (as long as it is passed in) and
optionally per-cluster configuration).

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-29 13:38:50 -04:00
Andrew Keesler
c4299d15d5
exec credential provider: ProvideClusterInfo and kubeconfig shadow
- The main idea here is that we want to 1) prevent potentially large CA
  bundles from being set in an exec plugin's environment and 2) ensure
  that the exec plugin is getting everything it needs in order to talk to
  a cluster.
- Avoid breaking existing manual declarations of rest.Config instances by
  moving exec Cluster to kubeconfig internal type.
- Use client.authentication.k8s.io/exec to qualify exec cluster extension.
- Deep copy the exec Cluster.Config when we copy a rest.Config.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-29 13:38:42 -04:00
Kubernetes Prow Robot
917dcbabe1
Merge pull request #95985 from saschagrunert/psp-seccomp-annotation-fix
Fix seccomp PSP docker/default annotation handling
2020-10-29 09:10:59 -07:00
knight42
cfc2b330a7
refactor(apiserver): ignore the insecure flags
Leave the insecure flags intact but stop serving on insecure port.
2020-10-29 23:20:17 +08:00
wojtekt
eb63da77ea Allow for configuring etcd progress notify interval on GCE 2020-10-29 15:43:51 +01:00
Sascha Grunert
5588f025e2
Fix seccomp PSP docker/default annotation handling
With the graduation of seccomp to GA we automatically convert the
deprecated seccomp profile annotation `docker/default` to
`runtime/default`. This means that we now have to automatically allow
`runtime/default` if a user specifies `docker/default` and vice versa in
an allowed PSP seccomp profile.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-10-29 14:08:14 +01:00
Kubernetes Prow Robot
2729b8e375
Merge pull request #95871 from damemi/move-unchanged-scheduler-helpers
Change function signature for MatchNodeSelectorTerms
2020-10-29 04:18:59 -07:00
Masashi Honma
8e84f3d78d local-up-cluster.sh: Pass SERVICE_CLUSTER_IP_RANGE to controller manager
Previously, SERVICE_CLUSTER_IP_RANGE was passed only to kube-apiserver.

Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
2020-10-29 17:47:19 +09:00
Harsh Singh
1763688d71 Added config parameter for CPU threads 2020-10-29 12:16:10 +05:30
Kubernetes Prow Robot
518b826b1d
Merge pull request #95962 from xing-yang/manifests_owners
Update testing-manifests/storage-csi owners file
2020-10-28 23:36:59 -07:00
Kubernetes Prow Robot
7a20fcf6ef
Merge pull request #95890 from barney-s/winlog_add_fluentd
If image has stack driver agent installed, use it.
2020-10-28 22:42:59 -07:00
Kubernetes Prow Robot
5937e7eef7
Merge pull request #92343 from knight42/fix/flags-before-plugin
fix(kubectl): print error if users place flags before plugin name
2020-10-28 20:30:58 -07:00
Pat Christopher
a30d2f6908
pin to latest k8s version 2020-10-28 19:49:57 -07:00
Pat Christopher
94ee60acc6
more versions 2020-10-28 19:49:57 -07:00
Pat Christopher
bf9e72eadd
rev versions 2020-10-28 19:49:57 -07:00
Pat Christopher
e5c20ca50a
use current method signatures 2020-10-28 19:49:57 -07:00
Kubernetes Prow Robot
ab02182419
Merge pull request #95965 from Huang-Wei/pc-conformance-deleteCollection
Update PriorityClass conformance test to cover DeleteCollection
2020-10-28 18:37:12 -07:00
Kubernetes Prow Robot
f3c957c349
Merge pull request #95947 from wojtek-t/bump_gce_master_sizes
Update function setting master node size for GCE
2020-10-28 18:36:58 -07:00
卢振兴10069964
9470f64a4f add audit-log-compress to apiserver 2020-10-29 09:33:05 +08:00
Kubernetes Prow Robot
1a37266208
Merge pull request #95411 from MHBauer/log-containerd
always collect containerd logs during e2e-node tests
2020-10-28 16:16:59 -07:00
Wei Huang
6ccbd3c9a9
Update PriorityClass conformance test to cover DeleteCollection 2020-10-28 15:35:46 -07:00
xing-yang
b55bf4c49b Update testing-manifests/storage-csi owners file 2020-10-28 21:21:02 +00:00
Kubernetes Prow Robot
8bc8b11bcf
Merge pull request #95939 from dprotaso/leaderelection-release
Address scenario where releasing a resource lock fails if a prior update fails or gets cancelled
2020-10-28 13:54:06 -07:00
Kubernetes Prow Robot
d4771b9519
Merge pull request #95907 from aojea/testdualslices
dualstack endpoints integration tests
2020-10-28 13:53:53 -07:00