Commit Graph

107620 Commits

Author SHA1 Message Date
Joe Betz
8920b2d95e Only validate each expression once in primary CEL correctness suite 2022-04-01 11:04:58 -04:00
Kubernetes Prow Robot
885f14d162
Merge pull request #109188 from wojtek-t/pf_mitigate_delegated_requests
Fix the overestimated cost of deletaged API requests in P&F
2022-03-31 15:49:17 -07:00
Kubernetes Prow Robot
64e711085b
Merge pull request #108016 from jiahuif-forks/feature/leader-migration-v1-api
v1 types for Leader Migration
2022-03-31 15:49:05 -07:00
Kubernetes Prow Robot
cc3a250f6a
Merge pull request #108491 from liggitt/feature-defaults-test
Exercise defaulting tests with/without features enabled
2022-03-31 14:43:06 -07:00
Kubernetes Prow Robot
17381762dd
Merge pull request #109200 from dashpole/fix_lint
Fix copylock vet errors in component-base metrics
2022-03-31 12:06:36 -07:00
Kubernetes Prow Robot
e89b80bdd8
Merge pull request #109178 from liggitt/openapi-master
Fix non-enum CSR condition field, omit enums from static openapi snapshot
2022-03-31 10:37:02 -07:00
Jordan Liggitt
ddd15e1d8c omit enums from static openapi snapshots used to generate clients 2022-03-31 12:31:47 -04:00
Jordan Liggitt
2b52a1e509 Drop enum tag from certificate request condition 2022-03-31 12:31:47 -04:00
David Ashpole
120da3bb9b
fix copylock vet errors in component-base metrics 2022-03-31 15:07:11 +00:00
Kubernetes Prow Robot
691d4c3989
Merge pull request #109151 from Argh4k/r-101566
Revert "Field `status.hostIPs` added for Pod (#101566)"
2022-03-31 07:05:02 -07:00
Maciej Wyrzuc
1108bed763 Revert "Field status.hostIPs added for Pod (#101566)"
This reverts commit 61b3c028ba.
2022-03-31 12:39:45 +00:00
Jordan Liggitt
e54ff8a7ff regenerate openapi with 1.24 removed APIs 2022-03-31 08:15:26 -04:00
Kubernetes Release Robot
3d1e510036 CHANGELOG: Update directory for v1.24.0-beta.0 release 2022-03-31 09:21:59 +00:00
Kubernetes Prow Robot
7d485da326
Merge pull request #109181 from liggitt/auditing-disabled-errors
Avoid log spam in servers without auditing enabled
2022-03-31 02:21:00 -07:00
Wojciech Tyczyński
14a4fd3853 Fix the overestimated cost of deletaged API requests in P&F 2022-03-31 09:47:41 +02:00
Kubernetes Prow Robot
f2e5c16545
Merge pull request #109060 from thockin/kube-proxy-rule-cleanups-after-106497
Kube proxy rule reorg XLB->EXT
2022-03-31 00:11:01 -07:00
Jordan Liggitt
f23b9a5002 Avoid log spam in servers without auditing enabled 2022-03-31 02:02:48 -04:00
Sarvesh Rangnekar
b9792a9dae
Introduce APIs to support multiple ClusterCIDRs (#108290)
* Introduce networking/v1alpha1 api, ClusterCIDRConfig type

Introduce networking/v1alpha1 api group.

Add `ClusterCIDRConfig` type to networking/v1alpha1 api group, this type
will enable the NodeIPAM controller to support multiple ClusterCIDRs.

* Change ClusterCIDRConfig.NodeSelector type in api

* Fix review comments for API

* Update ClusterCIDRConfig API Spec

Introduce PerNodeHostBits field, remove PerNodeMaskSize
2022-03-30 19:39:00 -07:00
Kubernetes Prow Robot
8b158fa730
Merge pull request #108953 from nckturner/remove-insecure-serving
Remove the deprecated insecure serving from the cloud controller manager
2022-03-30 18:03:00 -07:00
Kubernetes Prow Robot
9f33d2867b
Merge pull request #109169 from liggitt/distribution
Update docker/distribution to 2.8.1 to fix go module checksum error
2022-03-30 16:35:26 -07:00
Jordan Liggitt
a6da995405 Update docker/distribution to 2.8.1 to fix checksum error 2022-03-30 18:25:47 -04:00
Kubernetes Prow Robot
c0e7b15c75
Merge pull request #109112 from dims/prune-junit-xml-files
Prune junit xml files to avoid issues with test grid.
2022-03-30 14:50:08 -07:00
Kubernetes Prow Robot
f33b88fe62
Merge pull request #108815 from cici37/updateComm
Update comments to reduce confusion
2022-03-30 14:49:56 -07:00
Kubernetes Prow Robot
5223c1efef
Merge pull request #97081 from Nordix/issue-93456
Ipvs: non-local access to externalTrafficPolicy:Local
2022-03-30 13:37:56 -07:00
Kubernetes Prow Robot
64c5ed3804
Merge pull request #109084 from dims/add-some-sudo-in-local-up-cluster
Add some sudo in local-up-cluster.sh
2022-03-30 10:58:35 -07:00
Kubernetes Prow Robot
d4ac0ebecb
Merge pull request #109072 from jiahuif-forks/feature/leader-migration/to-ga
Graduate Leader Migration to GA
2022-03-30 10:58:24 -07:00
Davanum Srinivas
d20df79545
prune junit xml files in ci harness
Over time the size of our junit xml has exploded to the point where
test-grid fails to process them. We still have the original/full
*.stdout files from where the junit xml files are generated from so the
junit xml files need NOT have the fill/exact output for
processing/display. So let us prune the large messages with an
indicator that we have "[... clipped...]" some of the content so folks
can see that they have to consult the full *.stdout files.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Davanum Srinivas
917c361880
Add a utility to prune junit xml files
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Tim Hockin
40e21e310f Elide the -FW- chain when possible
This makes it epsilon harder to reason about but saves one chain
declaration and one rule per service-port usually.
2022-03-30 09:55:34 -07:00
Tim Hockin
7726b5f9fc kube-proxy: inline args in most cases 2022-03-30 09:55:34 -07:00
Tim Hockin
c4271c9a6f Rename tests to avoid underscores 2022-03-30 09:55:34 -07:00
Tim Hockin
9ed6b73495 kube-proxy: comment endpoint in SEP jumps 2022-03-30 09:55:34 -07:00
Tim Hockin
0e47dc3a65 kube-proxy: remove old TODO 2022-03-30 09:55:33 -07:00
Tim Hockin
30c1523708 kube-proxy: Renames for readability 2022-03-30 09:55:32 -07:00
Tim Hockin
f1553f58c5 kube-proxy: Remove now unneeded rule
Now that NodePorts jump to EXT, we don't need a specific rule for
loopback source detection.
2022-03-30 09:54:40 -07:00
Tim Hockin
db932a0ab1 kube-proxy: Rework LB VIP capture logic
* Comments
* If there are multiple VIPs, don't declare the fwChain multiple times.
* Don't emit the last -j DROP if there's no source ranges
2022-03-30 09:54:40 -07:00
Tim Hockin
07b2585927 kube-proxy: Rename XLB -> EXT
This changes the "XLB" chain into the "EXT" chain - the "external
destinations" chain.
2022-03-30 09:54:38 -07:00
Tim Hockin
482f3bc4bf kube-proxy: all external jumps to XLB chain
This makes the "destination" policy model clearer.  All external
destination captures now jump to the "XLB chain, which is the main place
that masquerade is done (removing it from most other places).

This is simpler to trace - XLB *always* exists (as long as you have an
external exposure) and never gets bypassed.
2022-03-30 09:52:18 -07:00
Kubernetes Prow Robot
2e55595d3b
Merge pull request #109137 from wojtek-t/fix_multiple_values_indexer
Fix issues in indexer caused by object changing the number of index values
2022-03-30 04:04:28 -07:00
Kubernetes Prow Robot
cb6ca16d47
Merge pull request #109134 from pacoxu/patch-8
TestPreShutdownHooks: change timeout to 200ms
2022-03-30 01:20:26 -07:00
Paco Xu
99c447ff0e TestPreShutdownHooks: change timeout to 1s 2022-03-30 15:12:44 +08:00
Michael Bolot
cbbb5f70a4 Addresses the issue which caused #109115 2022-03-30 09:07:37 +02:00
Wojciech Tyczyński
56159f258c Add test for indexer with multiple values 2022-03-30 08:52:10 +02:00
Kubernetes Prow Robot
ba1bbb5ac6
Merge pull request #109128 from Jefftree/openapiv3-metrics
Add metrics for OpenAPI v3 generation
2022-03-29 20:37:48 -07:00
Kubernetes Prow Robot
e4690b0fbc
Merge pull request #109123 from dims/switch-to-pause-3.7
Switch to pause 3.7 for Kubernetes 1.24
2022-03-29 20:37:39 -07:00
Kubernetes Prow Robot
cbc341575a
Merge pull request #109122 from jpbetz/runtime-limit-tightening
Reduce CEL runtime cost limits by 1/2 based on latency goals
2022-03-29 20:37:29 -07:00
Kubernetes Prow Robot
c7fc0f9125
Merge pull request #109120 from kevindelgado/ss-validation-metrics
Track field validation in metrics
2022-03-29 20:37:20 -07:00
Kubernetes Prow Robot
7fba4f75c5
Merge pull request #109107 from liggitt/deprecated-cert-audit
Add audit annotations and log prefixes to deprecated cert warnings
2022-03-29 20:37:09 -07:00
Kubernetes Prow Robot
fe4cbf6514
Merge pull request #109104 from kolyshkin/bump-runc-1.1.1
vendor: bump runc to 1.1.1
2022-03-29 20:36:59 -07:00
Kubernetes Prow Robot
6358d36fbf
Merge pull request #109102 from liggitt/darwin-tls
Tolerate additional error messages in TLS unit tests
2022-03-29 20:36:50 -07:00