Commit Graph

102248 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
a2b1f00a8b Merge pull request #103522 from atiratree/fix-translations-location
fix translations location in update-translations.sh
2021-07-08 05:58:53 -07:00
Kubernetes Prow Robot
388c2d901d Merge pull request #103560 from sejr/podsecurity-validate-configuration
[PodSecurity] Add ValidatePodSecurityConfiguration
2021-07-08 03:05:13 -07:00
Kubernetes Prow Robot
1edf50192e Merge pull request #103536 from mengjiao-liu/clean-master-term-test
Clean up the remaining master names in test/integration
2021-07-08 03:05:05 -07:00
Kubernetes Prow Robot
33431f542b Merge pull request #103534 from wojtek-t/pf_queue_picker_refinements
Refinements to pick queue logic in P&F
2021-07-08 03:04:53 -07:00
Kubernetes Prow Robot
e326c00bc5 Merge pull request #103562 from neolit123/1.22-fix-upgrade-image-pull
kubeadm: statically default the "from cluster" InitConfiguration
v1.22.0-beta.1
2021-07-08 01:56:53 -07:00
Kubernetes Prow Robot
9c4905e7af Merge pull request #103548 from dims/drop-hashicorp-lru
Drop hashicorp lru - switch to the lru impl in k8s.io/utils
2021-07-08 00:12:53 -07:00
Davanum Srinivas
6c72fbaa89 update vendor after switch
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:37 -04:00
Davanum Srinivas
79d0c6cdc1 switch from golang-lru to the one in k8s.io/utils
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:37 -04:00
Davanum Srinivas
3a221b3332 update to new k8s.io/utils
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:30 -04:00
Samuel Roth
a6b30e9629 podsecurity: added ValidatePodSecurityConfiguration 2021-07-07 21:59:05 -04:00
Kubernetes Prow Robot
f915aa39e8 Merge pull request #103541 from jbartosik/bump-addon-manager
Bump version of Addon Resizer used by Metrics Server
2021-07-07 18:09:29 -07:00
Kubernetes Prow Robot
16af282ee7 Merge pull request #103520 from swetharepakula/truncate-endpoints
Truncate endpoints over a 1000 addresses
2021-07-07 18:09:21 -07:00
Kubernetes Prow Robot
8fb777efb0 Merge pull request #103451 from swetharepakula/ga-proxy-gates
Graduate EndpointSliceProxying and WindowsEndpointSliceProxying Gates
2021-07-07 18:09:13 -07:00
Kubernetes Prow Robot
36a7426aa5 Merge pull request #99144 from bart0sh/PR0094-promote-HugePageStorageMediumSize-to-GA
promote huge page storage medium size to GA
2021-07-07 18:09:05 -07:00
Kubernetes Prow Robot
ebbe63f116 Merge pull request #92863 from AkihiroSuda/rootless-pr
kubelet & kube-proxy: ignore sysctl errors and rlimit errors when running in UserNS (for rootless)
2021-07-07 18:08:53 -07:00
Kubernetes Prow Robot
818ed1afff Merge pull request #103552 from liggitt/podsecurity-code
PodSecurity: use code/reason/details from admission library
2021-07-07 17:05:56 -07:00
Kubernetes Prow Robot
075ce33452 Merge pull request #103487 from novahe/fix/fixture-data-race
client-go: fix fixture data race
2021-07-07 17:05:48 -07:00
Kubernetes Prow Robot
7bfd0b0503 Merge pull request #103467 from thockin/svc-alloc-lb-nodeports-bug
Fix small bug with AllocateLoadBalancerNodePorts
2021-07-07 17:05:40 -07:00
Kubernetes Prow Robot
10ba908d74 Merge pull request #103419 from natasha41575/upgradeKust4.2
Upgrade kustomize-in-kubectl to v4.2.0
2021-07-07 17:05:31 -07:00
Kubernetes Prow Robot
6ed98b60f0 Merge pull request #103383 from Huang-Wei/move-up-pods
sched: provide an option for plugin developers to move pods to activeQ
2021-07-07 17:05:22 -07:00
Kubernetes Prow Robot
8e56a34195 Merge pull request #102966 from SergeyKanzhelev/deprecateDynamicKubeletConfig
deprecate and disable by default DynamicKubeletConfig feature flag
2021-07-07 17:05:15 -07:00
Kubernetes Prow Robot
785d9f028a Merge pull request #102188 from alculquicondor/fasterselector
Improve slice allocation in LabelSelectorAsSelector
2021-07-07 17:05:06 -07:00
Kubernetes Prow Robot
e3234f3d6b Merge pull request #101604 from pacoxu/tuning-grpc
use PermitWithoutStream=true for etcd: send pings even without active stream
2021-07-07 17:04:53 -07:00
Lubomir I. Ivanov
6cf3e36c37 kubeadm: statically default the "from cluster" InitConfiguration
During operations such as "upgrade", kubeadm fetches the
ClusterConfiguration object from the kubeadm ConfigMap.
However, due to requiring node specifics it wraps it in an
InitConfiguration object. The function responsible for that is:
  app/util/config#FetchInitConfigurationFromCluster().

A problem with this function (and sub-calls) is that it ignores
the static defaults applied from versioned types
(e.g. v1beta3/defaults.go) and only applies dynamic defaults for:
- API endpoints
- node registration
- etc...

The introduction of Init|JoinConfiguration.ImagePullPolicy now
has static defaulting of the NodeRegistration object with a default
policy of "PullIfNotPresent". Respect this defaulting by constructing
a defaulted internal InitConfiguration from
FetchInitConfigurationFromCluster() and only then apply the dynamic
defaults over it.

This fixes a bug where "kubeadm upgrade ..." fails when pulling images
due to an empty ("") ImagePullPolicy. We could assume that empty
string means default policy on runtime in:
cmd/kubeadm/app/preflight/checks.go#ImagePullCheck()

but that might actually not be the user intent during "init" and "join",
due to e.g. a typo. Similarly, we don't allow empty tokens
on runtime and error out.
2021-07-08 02:52:11 +03:00
Kubernetes Prow Robot
e67979eaf6 Merge pull request #103550 from tkashem/apf-bootstrap-log-message
apf: fix bootstrap ensurer log message
2021-07-07 14:20:36 -07:00
Kubernetes Prow Robot
a392ca0f25 Merge pull request #103543 from liggitt/implement-check_dropCapabilities.go
Implement check drop capabilities.go
2021-07-07 14:20:23 -07:00
Swetha Repakula
0a42f7b989 Graduate EndpointSliceProxying and WindowsEndpointSliceProxying Gates 2021-07-07 13:33:30 -07:00
Jordan Liggitt
1dfacd3c70 PodSecurity: use code/reason/details from admission library 2021-07-07 16:25:16 -04:00
Wei Huang
fb9cafc99b sched: provide an option for plugin developers to move pods to activeQ 2021-07-07 12:50:12 -07:00
Swetha Repakula
9bd857ca04 Truncate endpoints over a 1000 addresses
* set `endpoints.kubernetes.io/over-capacity` to "truncated" when
 number of addresses has been truncated to a 1000
 * ready addresses are prioritized over non-ready addresses
 * addresses are proportionally truncated across subsets
2021-07-07 12:48:43 -07:00
Kubernetes Prow Robot
d7123a6524 Merge pull request #103537 from wojtek-t/pf_chunking_refactor
Avoid code duplication in watchcache
2021-07-07 12:40:42 -07:00
Kubernetes Prow Robot
ac6a1b1821 Merge pull request #103414 from ravisantoshgudimetla/fix-pdb-status
[disruptioncontroller] Don't error for unmanaged pods
2021-07-07 12:40:35 -07:00
Kubernetes Prow Robot
ac554af79b Merge pull request #103142 from serathius/etcd-3.5.0
Upgrade etcd to 3.5.0
2021-07-07 12:40:22 -07:00
Abu Kashem
d9e3fbff94 apf: fix bootstrap ensurer log message 2021-07-07 15:01:46 -04:00
atiratree
33e6ebc8f8 update translations 2021-07-07 20:16:09 +02:00
atiratree
1e0f695afa fix translations location in update-translations.sh 2021-07-07 20:01:25 +02:00
Kubernetes Prow Robot
006d5b8539 Merge pull request #103524 from bergerhoffer/help-text-updates
Minor adjustments to descriptions and example text
2021-07-07 10:44:12 -07:00
Kubernetes Prow Robot
b93cd81609 Merge pull request #103481 from wojtek-t/pf_watch_tracker
Add watch tracker to APF for request cost estimation
2021-07-07 10:44:06 -07:00
Kubernetes Prow Robot
896cf744cb Merge pull request #103420 from raisaat/pods-api-test-fix
Fix pkg/api/pod/util tests to ensure feature gate is set
2021-07-07 10:43:53 -07:00
Kubernetes Prow Robot
20be00980c Merge pull request #103232 from astraw99/fix_delete_nil_pointer
Fix delete nil pointer panic
2021-07-07 10:43:41 -07:00
Jordan Liggitt
6408f3dffc Update generated files 2021-07-07 12:02:21 -04:00
Jordan Liggitt
250f47a45c Rename to capabilities_restricted 2021-07-07 12:02:21 -04:00
Jordan Liggitt
08608a24f1 Update dropCapabilities check/fixtures 2021-07-07 12:02:12 -04:00
Kubernetes Prow Robot
657c6fe033 Merge pull request #103407 from brianpursley/visit-order-tests
Added unit tests for ExpandPathsToFileVisitors
2021-07-07 08:57:08 -07:00
Kubernetes Prow Robot
f166221f10 Merge pull request #103390 from ironyman/validators
Use system-validators v1.5.0
2021-07-07 08:56:56 -07:00
Kubernetes Prow Robot
eaba61b4de Merge pull request #103276 from NetApp/data-source-ref
Add DataSourceRef field to PVC spec
2021-07-07 08:56:44 -07:00
novahe
ce257266aa client-go: copying object to fix data race (#103148) 2021-07-07 23:44:14 +08:00
ravisantoshgudimetla
2c116055f7 [disruptioncontroller] Don't error for unmanaged pods
As of now, we allow PDBs to be applied to pods via
selectors, so there can be unmanaged pods(pods that
don't have backing controllers) but still have PDBs associated.
Such pods are to be logged instead of immediately throwing
a sync error. This ensures disruption controller is
not frequently updating the status subresource and thus
preventing excessive and expensive writes to etcd.
2021-07-07 10:42:24 -04:00
mgutierrez98
a8793dcb3e Implement check_dropAllCapabilities.go and test/fixtures_dropAllCapabilities.go 2021-07-07 09:41:15 -04:00
Kubernetes Prow Robot
b289fbb03d Merge pull request #103409 from andrewsykim/service-internal-traffic-policy-e2e
test/e2e/network: add test for Service internalTrafficPolicy
2021-07-07 06:18:43 -07:00