Commit Graph

94507 Commits

Author SHA1 Message Date
Eric Weber
5cd63097ba Don't attempt to detach an FC device if we don't know its name 2020-09-14 14:32:00 -05:00
Sergey Kanzhelev
2a9228eb3c follow up cleanup after SupportPodPidLimits GA 2020-09-14 18:50:24 +00:00
Kubernetes Prow Robot
79cc8be2cd
Merge pull request #94769 from justaugustus/aug-cluster
cluster/images: Add justaugustus as reviewer
2020-09-14 11:49:12 -07:00
Kubernetes Prow Robot
4378481172
Merge pull request #94768 from justaugustus/aug-hack
hack: Add justaugustus as reviewer
2020-09-14 11:48:58 -07:00
Aldo Culquicondor
2ae4eeb3ea Mount kubelet and container runtime rootdir on LSSD
When environment variable NODE_LOCAL_SSD_EPHEMERAL=true,
create a RAID 0 array on all attached SSDs to mount:

- kubelet root dir
- container runtime root dir
- pod logs dir

Those directories account for all ephemeral storage.
An array is not created when there is only one SSD.

Change-Id: I22137f1d83fc19e9ef58a556d7461da43e4ab9bd
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2020-09-14 14:32:28 -04:00
Kubernetes Prow Robot
54df1fdc90
Merge pull request #94090 from deads2k/podpreset
remove pod presets
2020-09-14 10:43:13 -07:00
Kubernetes Prow Robot
73dda0af5d
Merge pull request #92355 from wawa0210/fix-91482
fix windows container root validate
2020-09-14 10:42:59 -07:00
Kubernetes Prow Robot
e1fd2d7ff5
Merge pull request #94771 from justaugustus/aug-github
.github: Add justaugustus as reviewer
2020-09-14 09:41:55 -07:00
Kubernetes Prow Robot
01d5446d71
Merge pull request #94770 from justaugustus/aug-test
test/{images,utils/image}: Add justaugustus as reviewer
2020-09-14 09:41:46 -07:00
Kubernetes Prow Robot
11793434da
Merge pull request #94712 from droslean/cred-leak
[credentialprovider] avoid potential secret leaking while reading .dockercfg
2020-09-14 09:41:36 -07:00
Kubernetes Prow Robot
3a42886dee
Merge pull request #94711 from jingyih/update_etcd
Bump etcd to dd1b699fc489
2020-09-14 09:41:27 -07:00
Kubernetes Prow Robot
5dd2676bf6
Merge pull request #94555 from SataQiu/fix-crisocket-warning-20200905
Fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR
2020-09-14 09:41:12 -07:00
Kubernetes Prow Robot
7ffc46924f
Merge pull request #94102 from neolit123/1.19-fix-etcd-700-perms
kubeadm: adjust the logic around etcd data directory creation
2020-09-14 09:40:59 -07:00
Kubernetes Prow Robot
3dc6f74d04
Merge pull request #94751 from sensesai/senses/fixLruCache
Fix misusage of RLock in timeCache lru.Cache.Get()
2020-09-14 08:11:12 -07:00
Kubernetes Prow Robot
1d2424969e
Merge pull request #93543 from liggitt/builder-example
Add example of using resource builder to load a manifest file
2020-09-14 08:10:59 -07:00
Nikolaos Moraitis
b907f9e118 avoid potential secret leaking while reading .dockercfg
There are a lot of scenarios where an invalid .dockercfg file
will still contain secrets. This commit removes logging of the
contents to avoid any potential leaking and manages the actual error
by printing to the user the actual location of the invalid file.

Signed-off-by: Nikolaos Moraitis <nmoraiti@redhat.com>
2020-09-14 15:39:05 +02:00
David Eads
82ed033ec9 clean up podpreset deprecated client 2020-09-14 09:24:41 -04:00
David Eads
c0c033b12f generated 2020-09-14 09:24:41 -04:00
David Eads
4172068d93 remove generated podpreset 2020-09-14 09:24:40 -04:00
David Eads
c7911a384c remove pod presets 2020-09-14 09:24:40 -04:00
Stephen Augustus
fc673df1e4 test/{images,utils/image}: Add justaugustus as reviewer
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-14 09:11:50 -04:00
Stephen Augustus
cca9a8c320 cluster/images: Add justaugustus as reviewer
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-14 09:09:05 -04:00
Stephen Augustus
8d665d8863 hack: Add justaugustus as reviewer
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-14 09:06:38 -04:00
Stephen Augustus
9f59625b4d .github: Add justaugustus as reviewer
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-14 09:05:04 -04:00
Kubernetes Prow Robot
9962577929
Merge pull request #94727 from mlevesquedion/fix/avoid-logging-kubeadm-tokens-before-deleting-them
kubeadm: Avoid logging token in RunDeleteTokens
2020-09-14 06:04:58 -07:00
zhanwang
ae03350e30
kubeadm init phase upload-certs: add flag --kubeconfig 2020-09-14 17:48:20 +08:00
Adrian Moreno
21b598cbe7 portforward: Fix UDP-only ports calculation
If a service has both TCP and UDP but the TCP port appears before in the
range loop, it will be considered a UDP-only port and the forwarding
will fail.

Fix that by calculating the difference between UDP ports and TCP ports.

Signed-off-by: Adrian Moreno <amorenoz@redhat.com>
2020-09-14 08:40:50 +02:00
andyzhangx
f15bb8d72e chore: add network rule support in Azure account creation
set DefaultActionDeny

fix comments
2020-09-14 03:42:58 +00:00
auxten
611ddc10b0 Fix misusage of RLock in timeCache lru.Cache.Get() 2020-09-13 21:08:19 +08:00
Pu Wang
40f2d1b8ff
e2e test support microk8s
microk8s run kubelet service as `snap.microk8s.daemon-kubelet.service`, instead of `kubelet.service`.
so e2e should use `systemctl list-units *kubelet* --state=running` to find out kubelet service of microk8s.
2020-09-13 16:11:50 +08:00
knight42
ce0a423ef7
test(iptables): deflake TestRestoreAllWaitOldIptablesRestore
Signed-off-by: knight42 <anonymousknight96@gmail.com>
2020-09-12 22:43:44 +08:00
knight42
b25af8e3c9
feat(iptables): be able to override iptables-1.4-compatible lock path 2020-09-12 22:43:43 +08:00
Kubernetes Prow Robot
66334f02e8
Merge pull request #94731 from spiffxp/rm-http-ingress-gce-tests
Remove tests related to HTTPS support for ingress-gce
2020-09-12 04:08:56 -07:00
Kubernetes Prow Robot
e2ea2744d8
Merge pull request #94729 from dashpole/flaky_metrics
Add retry for creating metrics grabber to fix test flakes
2020-09-12 01:30:56 -07:00
Kubernetes Prow Robot
2cb951d78a
Merge pull request #91921 from mtaufen/said-beta
Graduate ServiceAccountIssuerDiscovery to beta
2020-09-11 23:30:57 -07:00
Kubernetes Prow Robot
a33f6b44e9
Merge pull request #94687 from karan/cfs-flag-warn
Non-zero cfs quota period duration requires feature flag
2020-09-11 22:28:57 -07:00
Mike Danese
94f4f06d13 test flake: fix data race in csi_test.go
The attach goroutine can currently t.Log/t.Error during or after the
subtest completion. This causes races like:

```
==================
WARNING: DATA RACE
Read at 0x00c000e90ac3 by goroutine 1231:
  testing.(*common).logDepth()
      GOROOT/src/testing/testing.go:736 +0xa9
  testing.(*common).log()
      GOROOT/src/testing/testing.go:729 +0x8f
  testing.(*common).Logf()
      GOROOT/src/testing/testing.go:775 +0x21
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll.func21.1()
      pkg/volume/csi/csi_test.go:313 +0x1a4
Previous write at 0x00c000e90ac3 by goroutine 875:
  testing.tRunner.func1()
      GOROOT/src/testing/testing.go:1113 +0x484
  testing.tRunner()
      GOROOT/src/testing/testing.go:1131 +0x22a
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
Goroutine 1231 (running) created at:
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll.func21()
      pkg/volume/csi/csi_test.go:307 +0xf05
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
Goroutine 875 (running) created at:
  testing.(*T).Run()
      GOROOT/src/testing/testing.go:1178 +0x796
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll()
      pkg/volume/csi/csi_test.go:223 +0xb2c
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
==================
```

See also this comment:

07c1788357/src/testing/testing.go (L1141-L1142)

Noticed in:

https://github.com/kubernetes/kubernetes/pull/94449
https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/94449/pull-kubernetes-bazel-test/1304519003330318337
2020-09-11 22:19:42 -07:00
Wei Huang
185ba08fcd
Move podPassesBasicChecks() to VolumeBinding plugin 2020-09-11 13:54:02 -07:00
Wei Huang
42cfda2f94
Remove pvcLister from genericScheduler
PVCLister can be fetched from sharedInformerFactory.
2020-09-11 13:54:01 -07:00
David Ashpole
20863a8b43 add retry for creating metrics grabber to fix test flakes 2020-09-11 13:52:45 -07:00
Aaron Crickenberger
deffddbfb5 Remove tests related to HTTPS support for ingress-gce 2020-09-11 13:32:27 -07:00
Mike Danese
bdadb2a187 make kube::util::find-binary not dependent on bazel-out/ structure
Implement an aspect that outputs go_build_mode metadata for go binaries,
and use that during binary selection.
2020-09-11 13:19:38 -07:00
Mike Danese
d182ecc1f9 output go_binary rule directly from go_binary_conditional_pure
And same for go_test_conditional_pure.

Instead of aliasing. Aliases are annoying in a number of ways. This is
specifically bugging me now because they make the action graph harder to
analyze programmatically. By using aliases here, we would need to handle
potentially aliased go_binary targets and dereference to the effective
target.

The comment references an issue with `pure = select(...)` which appears
to be resolved considering this now builds.
2020-09-11 13:19:37 -07:00
Mike Danese
5a72bb001f hack/lib/util.sh: some bash cleanups
* switched one spot to use kube::logging
* make kube::util::find-binary return an error when it doesn't find
  anything so that hack scripts fail fast instead of with '' binary not
  found errors.
  * this required deleting some genfeddoc stuff. the binary no longer
    exists in k/k repo since we removed federation/, and I don't see it
    in https://github.com/kubernetes-sigs/kubefed/ either. I'm assuming
    that it's gone for good now.
2020-09-11 13:19:37 -07:00
Stephen Augustus
bb1855bf11 bazel: Replace --features with Starlark build settings flag
All --features and --define flags
Deprecated in: 0.23.0
To be removed in: 0.25.0

ref: https://github.com/bazelbuild/rules_go/wiki/Deprecation-schedule

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-11 13:19:37 -07:00
Stephen Augustus
2ff22026d5 [go1.15] staging/publishing: Set default go version to go1.15.2
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-11 13:15:19 -07:00
Stephen Augustus
eb61cf27fe [go1.15] build: Use go-runner:buster-v2.0.1 (built using go1.15.1)
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-11 13:15:15 -07:00
Stephen Augustus
a4a98f440c [go1.15] Update to go1.15.2
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-11 13:15:12 -07:00
Stephen Augustus
01a0c45f4a [go1.15] hack/tools: Update to k/repo-infra@v0.1.1 (supports go1.15.2)
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-11 13:15:08 -07:00
Stephen Augustus
ebd8ccc6bb [go1.15] build: Update to k/repo-infra@v0.1.1 (supports go1.15.2)
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-11 13:14:43 -07:00