Commit Graph

103763 Commits

Author SHA1 Message Date
Paco Xu
a48a2efbd4
remove deprecated validEgressSelectorNames 'master' (#102242)
* remove deprecated validEgressSelectorNames 'master'

Signed-off-by: pacoxu <paco.xu@daocloud.io>

* update gce configure: replace deprecated egress name 'master' with 'controlplane'

Signed-off-by: pacoxu <paco.xu@daocloud.io>

* add dup error for EgressSelection & fix converting alpha/beta to v1 name
2021-09-16 07:09:46 -07:00
Jian Zeng
2fbbd380ea
refactor: switch to tls cipher suite in stdlib
Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
2021-09-16 21:58:01 +08:00
Aldo Culquicondor
609306dd5b Skip check for all topology labels when using system default spreading
Checking for all topology labels is not backwards compatible. Clusters were nodes don't have zone labels effectively have default spreading disabled.

Change only applies to system defaults.
2021-09-16 09:37:56 -04:00
Kubernetes Prow Robot
5d7ac70051
Merge pull request #104670 from andyzhangx/patch-2
turn on CSIMigrationAzureDisk by default on 1.23
2021-09-16 05:35:45 -07:00
Stanislav Laznicka
b67bd722a9
rootcacertpublisher: drop the namespace label from metrics to reduce its cardinality
The `root_ca_cert_publisher_sync_duration_seconds` metric tracks the sync
duration in the root CA cert publisher per code and namespace. In
clusters with a high namespace turnover (like CI clusters), this may
cause the kube-controller-manager to expose over 100k series to
Prometheus, which may cause degradation of that service.

Drop the `namespace` label to remove the metrics' cardinality, tracking
this metric by namespace does not justify the impact of keeping it.
2021-09-16 14:05:32 +02:00
Lukasz Szaszkiewicz
83171562b0 etcd-client starts retrying transient errors from the etcd cluster
This PR enables unaryClientInterceptor in conjunction with Prometheus interceptor.
Previously it was simply overwritten by the Prometheus interceptor.
As a result etcd client didn't attempt to retry certain errors.

The unaryClientInterceptor is important because it knows how to retry all sorts of errors from the etcd cluster. It will make the API server more resilient to failures -  end users won't see certain errors.
The full list of retriable (codes.Unavailable) errors can be found at https://github.com/etcd-io/etcd/blob/main/api/v3rpc/rpctypes/error.go#L72
2021-09-16 13:58:49 +02:00
h4ghhh
0734820279
'New' Event namespace validate failed (#100125) 2021-09-16 04:29:45 -07:00
jyz0309
615c69643b migrate to struct log for proxy
Signed-off-by: jyz0309 <45495947@qq.com>

remove useless str

Signed-off-by: jyz0309 <45495947@qq.com>

fix comment

Signed-off-by: jyz0309 <45495947@qq.com>

fix comment

Signed-off-by: jyz0309 <45495947@qq.com>
2021-09-16 18:01:22 +08:00
Patrick Ohly
1d656d46a2 scheduler: avoid repeated boilerplate code when registering plugins
Some plugins expect the new feature gate struct. We can inject that additional
parameter via a helper function instead of having to repeat the same anonymous
function for each plugin.
2021-09-16 11:23:57 +02:00
Kubernetes Prow Robot
bea2e462a5
Merge pull request #105033 from calvin0327/pr-cleanup
Structured log migration for pkg/util/netsh
2021-09-16 01:53:46 -07:00
wojtekt
b7221bc77c Update import restrictions 2021-09-16 10:52:28 +02:00
Shubham Kuchhal
ef2be5586e Add supported 'alg' header values. 2021-09-16 14:02:21 +05:30
Kubernetes Prow Robot
b0f347350b
Merge pull request #105055 from MikeSpreitzer/its-flow-distinguisher
Rename httplog entry from "apf_d" to "apf_fd"
2021-09-15 23:51:45 -07:00
calvin0327
fb9caa6a84 structured log migration for pkg/util/netsh 2021-09-16 13:23:37 +08:00
Kubernetes Prow Robot
25e52d9177
Merge pull request #102937 from gy95/service
remove windows service not used global variable
2021-09-15 21:41:45 -07:00
Kubernetes Prow Robot
47cf49cc37
Merge pull request #105054 from jiahuif-forks/feature/feature-gate/kep-2887
add feature gate for OpenAPIEnums.
2021-09-15 18:21:46 -07:00
Anago GCB
dd5c3a109e Merge remote-tracking branch 'origin/master' 2021-09-15 23:39:36 +00:00
Jiahui Feng
2ddcf13e91 add feature gate OpenAPIEnums.
KEP-2887 OpenAPI Enum Types
2021-09-15 16:08:47 -07:00
Anago GCB
cfe3155d35 Merge remote-tracking branch 'origin/master' 2021-09-15 22:46:58 +00:00
Kubernetes Prow Robot
04daa00b7d
Merge pull request #105058 from puerco/1.19-cve
Add CVE 2021-25741 info to 1.19 Release Notes
2021-09-15 15:40:34 -07:00
Anago GCB
8edec0d65f CHANGELOG: Update directory for v1.22.2 release 2021-09-15 22:28:09 +00:00
Anago GCB
8b5b543976 CHANGELOG: Update directory for v1.21.5 release 2021-09-15 21:53:54 +00:00
Adolfo García Veytia (Puerco)
4bff82205d Add CVE 2021-25741 info to 1.19 release notes
This commit adds information about CVE 2021-25741 to the v1.19
changelog which did not make it into the document at release time.

Signed-off-by: Adolfo García Veytia (Puerco) <adolfo.garcia@uservers.net>
2021-09-15 16:29:58 -05:00
Mike Spreitzer
bf424292db Add metrics about handling LIST requests
Add metrics that illuminate the costs of handling LIST requests.
2021-09-15 17:18:09 -04:00
Mike Spreitzer
be717abb83 Rename httplog entry from "apf_d" to "apf_fd"
Because it is for the "Flow Distinguisher".
2021-09-15 17:10:11 -04:00
Anago GCB
49e00c006c Merge remote-tracking branch 'origin/master' 2021-09-15 21:05:08 +00:00
Anago GCB
61f9ed5765 CHANGELOG: Update directory for v1.19.15 release 2021-09-15 19:55:22 +00:00
Anago GCB
eed84f92fd CHANGELOG: Update directory for v1.20.11 release 2021-09-15 19:55:06 +00:00
Kubernetes Prow Robot
8975906dfc
Merge pull request #104942 from SataQiu/kubeadm-20210912
kubeadm: do not check if the /etc/kubernetes/manifests folder is empty on joining worker nodes during preflight
2021-09-15 11:16:11 -07:00
Clayton Coleman
d5719800bf
kubelet: Handle UID reuse in pod worker
If a pod is killed (no longer wanted) and then a subsequent create/
add/update event is seen in the pod worker, assume that a pod UID
was reused (as it could be in static pods) and have the next
SyncKnownPods after the pod terminates remove the worker history so
that the config loop can restart the static pod, as well as return
to the caller the fact that this termination was not final.

The housekeeping loop then reconciles the desired state of the Kubelet
(pods in pod manager that are not in a terminal state, i.e. admitted
pods) with the pod worker by resubmitting those pods. This adds a
small amount of latency (2s) when a pod UID is reused and the pod
is terminated and restarted.
2021-09-15 14:02:00 -04:00
Elana Hashman
47086a6623
Add test for recreating a static pod 2021-09-15 14:01:48 -04:00
Kubernetes Prow Robot
1c1d2e4edc
Merge pull request #105040 from cpanato/update-publish
staging/publishing: Set go1.16 version to go1.16.8
2021-09-15 10:06:31 -07:00
Kubernetes Prow Robot
f570b940f5
Merge pull request #104995 from pohly/pin-dependencies-to-fork
pin-dependency.sh: enhance forking of a dependency
2021-09-15 08:56:31 -07:00
Aldo Culquicondor
a0e7a567c5 Add metric job_pod_finished
To count the number of pods that the job controller successfully tracked with the JobTrackingWithFinalizers feature gate.
2021-09-15 11:19:47 -04:00
Kubernetes Prow Robot
07a4ae1845
Merge pull request #104078 from atiratree/e2e.minreadyseconds
add StatefulSet MinReadySeconds e2e test
2021-09-15 07:40:32 -07:00
luyou86
57ec833619 client-go bucket rate limiter add maxDelay 2021-09-15 22:39:15 +08:00
wojtekt
950f655bdd Migrate to k8s.io/utils/clock in client-go - part 1 2021-09-15 15:10:44 +02:00
Carlos Panato
f6faa18659
staging/publishing: Set go1.16 version to go1.16.8
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-09-15 14:24:04 +02:00
atiratree
2cad64db80 add StatefulSet MinReadySeconds e2e test 2021-09-15 13:32:38 +02:00
Kubernetes Prow Robot
73d51a21db
Merge pull request #105034 from pacoxu/kubeadm-insecure-port
kubeadm: remove the flag --port from scheduler manifest
2021-09-15 03:52:41 -07:00
wojtekt
adf82f050c Migrate to k8s.io/utils/clock in apimachinery 2021-09-15 11:52:18 +02:00
wojtekt
859a98c035 Migrate to k8s.io/utils/clock in apiserver 2021-09-15 11:52:18 +02:00
Kubernetes Prow Robot
03e0106bbc
Merge pull request #102592 from pacoxu/patch-11
add NoExecute toleration for konnectivity agent
2021-09-15 01:40:42 -07:00
Kubernetes Prow Robot
4c014e5ca4
Merge pull request #104991 from hzxuzhonghu/mem-leak
Fix workqueue memory leak
2021-09-14 22:42:41 -07:00
Paco Xu
0b8433a3f5 kubeadm: remove --port from kube-scheduler manifest 2021-09-15 12:58:35 +08:00
Alkaid
5449ce7c5c
Migrate cmd/proxy/app and pkg/proxy/meta_proxier to structured logging (#104928)
* migrate log

Signed-off-by: jyz0309 <45495947@qq.com>

* remove useless change

Signed-off-by: jyz0309 <45495947@qq.com>

fix comment

Signed-off-by: jyz0309 <45495947@qq.com>

fix comment

Signed-off-by: jyz0309 <45495947@qq.com>

* use nil to instead err

Signed-off-by: jyz0309 <45495947@qq.com>

* fix comment

Signed-off-by: jyz0309 <45495947@qq.com>

* remove useless change

Signed-off-by: jyz0309 <45495947@qq.com>

* resolve conflict

Signed-off-by: jyz0309 <45495947@qq.com>

* resolve conflict

Signed-off-by: jyz0309 <45495947@qq.com>

* fix comment

Signed-off-by: jyz0309 <45495947@qq.com>

* fix comment

Signed-off-by: jyz0309 <45495947@qq.com>

* fix comment

Signed-off-by: jyz0309 <45495947@qq.com>
2021-09-14 20:50:40 -07:00
Kubernetes Prow Robot
4622007bdd
Merge pull request #104793 from h4ghhh/dynamic_event_handler
Add unit tests for scheduler's dynamic event handlers registration
2021-09-14 18:24:40 -07:00
Anago GCB
3a53309d22 Merge remote-tracking branch 'origin/master' 2021-09-14 22:54:31 +00:00
Kubernetes Prow Robot
5e2ec0c575
Merge pull request #104913 from pohly/generic-ephemeral-pvc-protection
kube-controller-manager: properly check generic ephemeral volume feature
2021-09-14 15:26:59 -07:00
Anago GCB
7d5b744e85 CHANGELOG: Update directory for v1.23.0-alpha.2 release 2021-09-14 22:08:45 +00:00