Commit Graph

80987 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
a9d4eddcd1
Merge pull request #80223 from ahg-g/ahg-reviewer
Nominate Abdullah Gharaibeh to scheduler reviewers.
2019-07-23 15:52:28 -07:00
Kubernetes Prow Robot
0ba6ecca72
Merge pull request #77155 from draveness/feature/refactor-util-service
refactor: move service related functions in service pkg
2019-07-23 15:52:15 -07:00
Angela Li
e56db7d407 Move to getMachineInfo() 2019-07-23 13:25:12 -07:00
David Zhu
e194cf24cc Dedupe all Make PVC API object functions into the one MakePersistentVolumeClaim to rule them all 2019-07-23 12:59:00 -07:00
David Zhu
290a7f12ce Add migration shim for VerifyVolumesAreAttached and BulkVolumeVerify 2019-07-23 12:57:47 -07:00
Matthew Wong
02530b9ffb Enable windows ntfs e2e storage tests for aws driver 2019-07-23 19:28:14 +00:00
Matthew Wong
51615f691d Add support for windows to AWS EBS 2019-07-23 19:28:14 +00:00
Kubernetes Prow Robot
5b496fe8f5
Merge pull request #80315 from klueska/upstream-cleanup-socketmask
Cleanup the TopologyManager socketmask abstraction
2019-07-23 11:40:28 -07:00
Kubernetes Prow Robot
304e2c247a
Merge pull request #80294 from klueska/upstream-fail-fast-cpumanager-topologymanager
Update the cpumanager and topologymanager to error out if an invalid policy is given
2019-07-23 11:40:14 -07:00
Angela Li
da966f33f4 Add unit test 2019-07-23 11:22:51 -07:00
Angela Li
7adb0a2656 Set the systemUUID for windows nodes 2019-07-23 10:59:24 -07:00
Kubernetes Prow Robot
7e806a2dd6
Merge pull request #80459 from cwdsuzhou/July/fix_panic_nodeGetVolumeStats
Fix potential panic in nodeGetVolumeStatsV1
2019-07-23 10:01:59 -07:00
Kubernetes Prow Robot
16b65b259d
Merge pull request #80393 from smarterclayton/pod_failure
Pod e2e for reading last line can flake if pod runs to completion
2019-07-23 10:01:46 -07:00
Cezar Sa Espinola
c25763e159
proxy/ipvs: Compute all node ips only once when a zero cidr is used
Computing all node ips twice would always happen when no node port
addresses were explicitly set. The GetNodeAddresses call would return
two zero cidrs (ipv4 and ipv6) and we would then retrieve all node IPs
twice because the loop wouldn't break after the first time.

Also, it is possible for the user to set explicit node port addresses
including both a zero and a non-zero cidr, but this wouldn't make sense
for nodeIPs since the zero cidr would already cause nodeIPs to include
all IPs on the node.
2019-07-23 13:35:37 -03:00
Cezar Sa Espinola
5c16940508
proxy/ipvs: Only compute node ip addresses once per sync
Previously the same ip addresses would be computed for each nodePort
service and this could be CPU intensive for a large number of nodePort
services with a large number of ipaddresses on the node.
2019-07-23 13:35:27 -03:00
Kubernetes Prow Robot
55807b71ad
Merge pull request #80433 from zgfh/add_kube_config_doc_link
add link of kubeadm config doc
2019-07-23 04:32:56 -07:00
silenceshell
c9275c97aa
fix grammar err
"be of interest to you"
2019-07-23 19:18:29 +08:00
Kubernetes Prow Robot
3ea28073a4
Merge pull request #80375 from wongma7/framework-csidriver
Add CSIDriver creation factory to e2e framework
2019-07-23 01:28:54 -07:00
Kubernetes Prow Robot
7dc5d1f064
Merge pull request #80377 from davidz627/fix/testAMDefault
Change default PVC AccessModes to RWO in test framework
2019-07-22 23:52:55 -07:00
caiweidong
45c52d1314 Fix potential panic in nodeGetVolumeStatsV1 2019-07-23 13:47:35 +08:00
Kubernetes Prow Robot
5381bf5800
Merge pull request #79553 from ahmedtd/binauthz
GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook
2019-07-22 22:22:53 -07:00
Kubernetes Prow Robot
f101466d2e
Merge pull request #77553 from s-urbaniak/fix-76956
pkg/util/workqueue/prometheus: fix double registration
2019-07-22 19:10:53 -07:00
Wei Huang
f822487f05
EvenPodsSpread: match selector of each constraint independently
- see more discussion at https://github.com/kubernetes/kubernetes/pull/77760#discussion_r305107973
2019-07-22 17:51:23 -07:00
Wei Huang
c23aef40f2
[eps-pred-meta] auto-gen files 2019-07-22 17:34:56 -07:00
Wei Huang
249752cc1f
fixup: fix comments and use a channel to pass err 2019-07-22 17:34:56 -07:00
Wei Huang
dce6686c9a
EvenPodsSpread: refactor "chained" utils
- move "chanined" utils to pkg/scheduler/testing/utils.go so as to be re-used by all scheduler tests
2019-07-22 17:34:56 -07:00
Wei Huang
3dbef991a3
EvenPodsSpread: refactor topologyPairsPodSpreadMap
- update minMatchMap from []int32 to map[string]int32
2019-07-22 17:34:56 -07:00
Wei Huang
a242e376ac
EvenPodsSpread: PredicateMetadata initilization
- build a new `topologyPairsPodSpreadMap` into PredicateMetadata
- update ShallowCopy()
- unit tests
2019-07-22 17:34:56 -07:00
Kubernetes Prow Robot
08f9f2b58a
Merge pull request #80436 from M00nF1sh/master
Refactors to kubectl CP command
2019-07-22 16:49:06 -07:00
Kubernetes Prow Robot
f31d786927
Merge pull request #78477 from YoubingLi/filter
Fixes 78001 The implementation of Filter extension for the new framework
2019-07-22 16:48:53 -07:00
Taahir Ahmed
9702c6e6e9 GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook
This commit adds support for using `gke-exec-auth-plugin` (vTPM-based
certificates for mTLS) for webhooks when calling endpoints matching
`*.googleapis.com`, and integrates this support with
ValidatingAdmissionWebhook.

To enable it, request ValidatingAdmissionWebhook with
`ADMISSION_CONTROL=...,ValidatingAdmissionWebhook,...` (default) and
opt in to `gke-exec-auth-plugin` using `WEBHOOK_GKE_EXEC_AUTH=true`
during the configuration process.

If you don't opt-in, ValidatingAdmissionWebhook will be deployed as
before.

Requesting `WEBHOOK_GKE_EXEC_AUTH=true` will fail if you have not
provided other configuration variables:

  * `EXEC_AUTH_PLUGIN_URL`: controls whether `gke-exec-auth-plugin` is
    downloaded during the installation step.  A prerequisite for
    actually using the plugin.

  * `TOKEN_URL`, `TOKEN_BODY`, and `TOKEN_BODY_UNQUOTED`:
    configuration values used when calling the plugin.  `TOKEN_URL`
    and `TOKEN_BODY` have existing usage. `TOKEN_BODY_UNQUOTED` is a
    new variable that is meant to sidestep the problem of inverting
    `strconv.Quote` in Bash.

The existing configuration process for ImagePolicyWebhook has been
reworked to make it play nicely with ValidatingAdmissionWebhook under
`WEBHOOK_GKE_EXEC_AUTH=true`.

  * It originally placed the ImagePolicyWebhook configuration object
    at the top-level of the file specified by
    `--admission-control-config-file`.  I can't see why this worked;
    it must have been hitting some sort of lucky path through the
    various config file loading mechanisms.  Now, it places its
    configuration in a sub-field of that file, which is shared among
    all admission control plugins.

  * It mounted its various config files read-write.  I reviewed the
    code and couldn't see why it was necessary, so I moved the config
    files into the existing read-only mount at `/etc/srv/kubernetes`.

  * It now checks that all the configuration values it requires have
    been provided.

Co-authored-by: Mike Danese <mikedanese@google.com>
Co-authored-by: Taahir Ahmed <taahm@google.com>
2019-07-22 16:01:37 -07:00
Kubernetes Prow Robot
150448e163
Merge pull request #80341 from chenchun/fix-bind-unreserve
Calling Unreserve plugin before recordSchedulingFailure in case of bi…
2019-07-22 15:14:53 -07:00
Kubernetes Prow Robot
04c9bd9bfa
Merge pull request #80176 from liyanhui1228/cpuusage
Add CPU usage nano cores for windows nodes
2019-07-22 13:52:53 -07:00
Tim Allclair
9ba6fe8810 refactors to kubernetes cp command 2019-07-22 13:25:13 -07:00
Angela Li
8851a42655 gofmt 2019-07-22 10:56:28 -07:00
Angela Li
e6e8615db3 address comments 2019-07-22 10:53:15 -07:00
Kubernetes Prow Robot
0d2b85878d
Merge pull request #80402 from mjudeikis/generic.retry
make client-go/util/retry more generic
2019-07-22 10:52:53 -07:00
M00nF1sh
bad1802892 refactors to kubernetes CP command 2019-07-22 10:33:19 -07:00
Matthew Wong
5060704a76 Add CSIDriver creation factory to e2e framework 2019-07-22 10:20:02 -07:00
alan
ca8d5759ff
add link of kubeadm config doc 2019-07-22 22:44:30 +08:00
Kubernetes Prow Robot
7e6b70fbb5
Merge pull request #59416 from verb/debug-api
Add Ephemeral Containers to the Kubernetes core API
2019-07-22 07:14:53 -07:00
Pengfei Ni
2a62bc74ad Fix retry issues when the nodes are under deleting on Azure 2019-07-22 21:58:49 +08:00
Lee Verberne
4a753c7a44 Generated code for ephemeral containers API 2019-07-22 11:19:22 +00:00
Lee Verberne
013f049ce0 Add Ephemeral Containers to the Kubernetes core API 2019-07-22 11:19:22 +00:00
Lee Verberne
c7ffc1cd8c Rename DebugContainers feature to EphemeralContainers 2019-07-22 11:00:13 +00:00
Kubernetes Prow Robot
1cb3b5807e
Merge pull request #80418 from cwdsuzhou/July/fix_csi_attacher_ut
Fix csi attacher unit tests using t.Run()
2019-07-22 03:20:54 -07:00
Pengfei Ni
f74b610036 Report NodeNotInitialized error when providerId is empty string
This could be happening when cloud-controller-manager is used.
2019-07-22 16:18:07 +08:00
caiweidong
8789143062 Fix csi attacher unit tests using t.Run() 2019-07-22 15:42:31 +08:00
toyoda
799026a7ee use ExpectEqual in density_test.go 2019-07-22 16:11:11 +09:00
Mangirdas
2a0856a4d8 make util/retry more generic 2019-07-21 19:20:33 +01:00