Minhan Xia
643fc3803b
add firewall chain to filter request based on loadbalancer source range
2016-08-15 17:42:41 -07:00
PingWang
ee567e1ea0
optimise the getConntrackMax function
...
Signed-off-by: PingWang <wang.ping5@zte.com.cn >
2016-08-15 09:42:09 +08:00
Girish Kalele
5d6abf59ff
kube-proxy: Propagate hostname to iptables proxier
2016-08-09 10:05:29 -07:00
Harry Zhang
15d0f5cfd5
Move linedelimiter to it's own pkg
...
Refactoring resource container
2016-07-29 02:29:26 -04:00
Tim Hockin
1f37281dae
Scale kube-proxy conntrack limits by cores
...
For large machines we want more conntrack entries than smaller machines.
2016-07-15 16:36:40 -07:00
Random-Liu
4246853211
Prevent kube-proxy from panicing when sysfs is mounted as read-only.
...
Send a node event when this happens and hint to the administrator
about the remediation.
2016-07-10 22:32:51 -07:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
Clayton Coleman
fdb110c859
Fix the rest of the code
2016-04-29 17:12:10 -04:00
Wojciech Tyczynski
d6896fa45a
Allow setting content-type in binaries
2016-04-21 14:12:13 +02:00
CJ Cullen
760568796f
Masquerade traffic from off-cluster going through kube-proxy.
2016-04-19 21:39:34 -07:00
goltermann
34d4eaea08
Fixing several (but not all) go vet errors. Most are around string formatting, or unreachable code.
2016-03-22 17:26:50 -07:00
Mike Danese
5ec02bd021
add http handler to export configuration state
2016-02-24 14:12:28 -08:00
k8s-merge-robot
b32078d89b
Merge pull request #20496 from matthewdupre/masquerade-config
...
Auto commit by PR queue bot
2016-02-08 10:49:20 -08:00
Matt Dupre
9925cddc11
Change iptables fwmark to use single configurable bit instead of whole mark space
2016-02-08 11:12:09 +00:00
Jan Chaloupka
4389b3f0d6
Rewritte util.* -> wait.* wherever reasonable
2016-02-07 12:02:20 +01:00
k8s-merge-robot
c26087db45
Merge pull request #19611 from thockin/proxy-sysctl-decouple
...
Auto commit by PR queue bot
2016-02-06 23:01:48 -08:00
Tim Hockin
41ba8ced6d
Dont log errors on proxy leftover cleanup
2016-02-07 02:41:50 +00:00
Tim Hockin
11f75e61b9
Inject a kernel-compat tester for kube-proxy test
2016-02-02 22:11:39 -08:00
Tim Hockin
7ed83ad4f9
Make kube-proxy default to iptables (regression)
...
This was accidentally introduced as part of the component config changes.
2016-02-02 12:45:11 -08:00
Mike Danese
309eac5f7f
update proxy server
2016-01-28 15:46:40 -08:00
Clayton Coleman
715b77cbcd
Split proxy and scheduler arguments
...
Keep options and flags distinct from initialization
2016-01-06 21:34:31 -05:00
Tim Hockin
da0ac31182
Set conntrack params in kube-proxy
...
Add flags to control max connections (set to 256k vs 64k default) and TCP
established timeout (set to 1 day vs 5 day default). Flags can be set to 0 to
mean "don't change it".
This is only set at startup, and not wrapped in a rectifier loop.
Tested manually.
2015-12-30 15:46:40 -08:00
Avesh Agarwal
3d5207fd73
This commit adds type information to events.
...
This addresses issue #15624 .
2015-11-24 09:59:54 -05:00
Mike Danese
65b8d43543
remove code that puts kube-proxy into a special cgroup since it runs in a container now
2015-11-23 10:20:58 -08:00
Tim Hockin
970c045848
Enable iptables kube-proxy by default in master
2015-11-13 18:38:01 -08:00
k8s-merge-robot
ec9b493647
Merge pull request #14639 from gmarek/hollow-proxy
...
Auto commit by PR queue bot
2015-10-27 18:22:38 -07:00
gmarek
5a4e4d4d57
Add a HollowProxy to the HollowNode.
2015-10-27 18:23:29 +01:00
feisky
13dce74adb
Gendocs for docs/admin/kube-*
2015-10-25 19:24:23 +08:00
Steve Sloka
4302208aa9
globally search/replace 'KubeApiQps' to 'KubeAPIQPS' and 'KubeApiBurst' to 'KubeAPIBurst' to match GO rules
2015-10-23 08:24:19 -04:00
Abhishek Shah
d172ca6986
Added UdpIdleTimeout flag
2015-10-21 17:25:35 -07:00
k8s-merge-robot
6dc3dcf36a
Merge pull request #15414 from thockin/exp-beta-annotations
...
Auto commit by PR queue bot
2015-10-20 17:45:32 -07:00
Clayton Coleman
9440d17041
Proxy resync period should not be 30 seconds
2015-10-15 11:26:49 -04:00
Tim Hockin
4a2e64d3eb
Add beta annotation for kube-proxy
2015-10-14 15:31:37 -07:00
Dawn Chen
69a8dc64c7
Merge pull request #15247 from spiffxp/kube-api-limits
...
Expose kube-api burst/qps settings for kube components
2015-10-12 15:19:46 -07:00
Aaron Crickenberger
69351e3e88
Expose kube-api burst/qps settings for kube components
...
Default to hardcodes for components that had them, and 5.0 qps, 10 burst
for those that relied on client defaults
Unclear if maybe it'd be better to just assume these are set as part of
the incoming kubeconfig. For now just exposing them as flags since it's
easier for me to manually tweak.
2015-10-12 11:56:15 -04:00
Avesh Agarwal
8fb96afff4
This removes unused params passed to proxy server.
2015-10-06 18:21:16 -04:00
k8s-merge-robot
bd58984844
Merge pull request #14736 from aveshagarwal/master-proxy-crash
...
Auto commit by PR queue bot
2015-10-02 18:37:38 -07:00
k8s-merge-robot
698441cad3
Merge pull request #14655 from aveshagarwal/master-proxy-issue
...
Auto commit by PR queue bot
2015-09-30 22:51:20 -07:00
Avesh Agarwal
af90318222
Fixes crash when proxy is run with --cleanup-iptables=true.
2015-09-30 23:13:13 -04:00
Avesh Agarwal
310d4f48e6
Fixes erroneous declaration of oomAdjuster.
...
Fixes duplication of execer, dbus, iptInterface.
Fixes default assignment of SyncPeriod.
2015-09-29 23:00:14 -04:00
k8s-merge-robot
b661cfd21e
Merge pull request #14643 from liguangbo/change_Oom_to_OOM
...
Auto commit by PR queue bot
2015-09-29 18:54:22 -07:00
Avesh Agarwal
7c1ff97e39
execer is already created earliler, and so there is no need to create it
...
again.
2015-09-28 09:56:57 -04:00
liguangbo
12299087da
Change Oom to OOM
2015-09-28 18:18:04 +08:00
Tim Hockin
026054f73e
Set iptables refresh to 30s
2015-09-25 14:02:24 -07:00
gmarek
1c25c2cd99
Refactor KubeProxy to allow mocking of all moving parts.
2015-09-23 18:47:05 +02:00
Tim Hockin
bd3cd82a12
Change kube-proxy flag: annotation for proxy-mode
...
This changes the --legacy-userspace-proxy flag to be a string flag
--proxy-mode. If specified, the flag will be respected ('userspace' and
'iptables' being valid values). If left blank (default) we will choose the
"best". best means userspace for now UNLESS the user adds an annotation
(net.experimental.kubernetes.io/proxy-mode) to their node, in which case we
will try to use that.
This allows people to try it on a single machine without fear of global failure
and without it getting rolled back on reboots. It is a poor-man's config blob.
2015-09-21 18:06:24 -07:00
Dan Winship
30ea22f40e
Make kube-proxy resync its rules on firewalld restart
2015-09-15 11:17:40 -04:00
Dan Winship
8bc9c40796
Watch for firewalld restart, to allow reloading iptables rules
2015-09-15 11:17:40 -04:00
Daniel Smith
b225c1d47a
Run gofmt (separate commit for easy rebases)
2015-09-10 17:17:59 -07:00
Daniel Smith
15b30b8b09
Move version agnostic parts of client
...
pkg/client/unversioned/cache -> pkg/client/cache
pkg/client/unversioned/record -> pkg/client/record
2015-09-10 17:17:59 -07:00
