Commit Graph

96061 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
6068f12e90
Merge pull request #96376 from gnufied/fsgroup-change-policy-beta
Move fsGroupChangePolicy feature to beta
2020-11-10 12:43:45 -08:00
Kubernetes Prow Robot
30617439aa
Merge pull request #95741 from katiewasnothere/katiewasnothere/update_windows_container_resources
Add WindowsContainerResources to UpdateContainerResourcesRequest
2020-11-10 12:43:14 -08:00
Kubernetes Prow Robot
40ef0ad6e9
Merge pull request #95002 from p0lyn0mial/upstream-supress-err-conn-killed
stop logging killing connection/stream because serving request timed out and response had been started
2020-11-10 12:37:51 -08:00
Kubernetes Prow Robot
0f6d1ed59c
Merge pull request #94526 from Danil-Grigorev/metrics-vcenter-version
Add vCenter info metric
2020-11-10 12:36:32 -08:00
Sergey Kanzhelev
9408c5d1e6 added new runtimeclass test and changed Disruptive to Serial 2020-11-10 20:31:34 +00:00
Lubomir I. Ivanov
fb7ddf88e9 kubeadm: mark the "master" label/taint as deprecated
- Mark the "node-role.kubernetes.io/master" key for labels
and taints as deprecated.
- During "kubeadm init/join" apply the label
"node-role.kubernetes.io/control-plane" to new control-plane nodes,
next to the existing "node-role.kubernetes.io/master" label.
- During "kubeadm upgrade apply", find all Nodes with the "master"
label and also apply the "control-plane" label to them
(if they don't have it).
- During upgrade health-checks collect Nodes labeled both "master"
and "control-plane".
- Rename the constants.ControlPlane{Taint|Toleraton} to
constants.OldControlPlane{Taint|Toleraton} to manage the transition.
- Mark constants.OldControlPlane{{Taint|Toleraton} as deprecated.
- Use constants.OldControlPlane{{Taint|Toleraton} instead of
constants.ControlPlane{Taint|Toleraton} everywhere.
- Introduce constants.ControlPlane{Taint|Toleraton}.
- Add constants.ControlPlaneToleraton to the kube-dns / CoreDNS
Deployments to make them anticipate the introduction
of the "node-role.kubernetes.io/control-plane:NoSchedule"
taint (constants.ControlPlaneTaint) on kubeadm control-plane Nodes.
2020-11-10 22:10:13 +02:00
Christopher M. Luciano
fa7a802d55
dualstack: use correct IPFamily list for conntrack checks in e2e
We hardcode the index number in the KubeProxy/Conntrack e2es and
CollectAddresses returns 4 mixed IP Family addresses in a dualstack
cluster. This change ensures that the serverNodeInfo.nodeIP has only
valid addresses for the expected IPFamily per test case.

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
2020-11-10 15:02:29 -05:00
Andrew Sy Kim
b1e0decce1 move service controller config to k8s.io/cloud-provider/controllers/service/config
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 14:59:44 -05:00
Kubernetes Prow Robot
d41f791542
Merge pull request #96413 from pigletfly/fix-kubelet-import
Remove duplicate import
2020-11-10 11:48:13 -08:00
Kubernetes Prow Robot
02528ce91a
Merge pull request #96247 from saikat-royc/iss-95590
e2e test for PodFsGroupChangePolicy feature
2020-11-10 11:45:03 -08:00
Jonathan Basseri
dfe6ea6df6 Use FilteredDialContext with quobyte API
This injects the filtered DialContext behavior from VolumeHost into the
quobyte plugin, which allows us to configure a host deny list for the
plugin.

There should be no change in timeouts, because we are able to use the
same default transport settings as before.
2020-11-10 11:21:04 -08:00
Jonathan Basseri
40bb82a5b8 Update quobyte client API to v0.1.8
This update picks up https://github.com/quobyte/api/pull/19 which adds
the needed `SetTransport` option. With this update, we can add the IP
deny list into quobyte operations.
2020-11-10 11:20:53 -08:00
Kubernetes Prow Robot
2b8f43bf15
Merge pull request #96071 from Huang-Wei/phantom-sched-update-evt
Ignore some update Pod events in scheduler
2020-11-10 10:55:17 -08:00
Kubernetes Prow Robot
f458996af1
Merge pull request #95770 from jingxu97/oct/readyfile
Remove ready directory which created in empty volumeMounter setUp func
2020-11-10 10:54:40 -08:00
Andrew Sy Kim
f3192c3149 import restrictions: allow k8s.io/kubelet to import credentialprovider
apis

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:07 -05:00
Andrew Sy Kim
91aae6ea48 hack/.golint: ignore golint for new kubelet and credentialprovider APIs package
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:07 -05:00
Andrew Sy Kim
aadc1d25b3 pkg/credentialprovider: export URL parsing and matching helper functions
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:07 -05:00
Andrew Sy Kim
5344afd4fb pkg/credentialprovider: add initial exec-based credential provider plugin
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:07 -05:00
Andrew Sy Kim
2d0dd26252 kubelet: add initial credentialprovider v1alpha1 APIs
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:06 -05:00
Andrew Sy Kim
ab04386e8f feature gates: add KubeletCredentialProviders feature gate
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:06 -05:00
Andrew Sy Kim
51441fd052 kubelet: support alpha credential provider exec plugins
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:06 -05:00
Andrew Sy Kim
c23638c3ce kubelet: update pkg/kubelet/apis/config/OWNERS to include api approvers and reviewers
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:06 -05:00
Andrew Sy Kim
359c6e2623 kubelet: add CredentialProviderConfig API
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 13:44:06 -05:00
Kubernetes Prow Robot
3146daf433
Merge pull request #96418 from marseel/fix_large_k8s_clusters_without_vpc_native
Forbid creating clusters with more than 100 nodes without vpc-native
2020-11-10 10:00:40 -08:00
Maciej Szulik
6b4dd3d774
Change at which level klog.Fatal is invoked 2020-11-10 17:27:07 +01:00
Kubernetes Prow Robot
0ad06e991a
Merge pull request #96370 from serathius/sanitization
Add --experimental-logging-sanitization flag to control plane components
2020-11-10 08:08:40 -08:00
Marcel Zięba
6e598a96ff Forbid creating clusters with more than 100 nodes without vpc-native 2020-11-10 15:58:25 +00:00
Kubernetes Prow Robot
26f09b77a8
Merge pull request #96028 from masap/local_up_cluster2
local-up-cluster.sh: Pass CLUSTER_CIDR to kube-proxy
2020-11-10 07:17:00 -08:00
Mucahit Kurt
6748570724 Change the logic of pod volumes existence check during kubelet cleanupOrphanedPodDirs, cleanupOrphanedPodCgroups and PodResourcesAreReclaimed
check in-memory cache whether volumes are still mounted and check disk directory for the volume paths instead of mounted volumes check

Signed-off-by: Mucahit Kurt <mucahitkurt@gmail.com>
2020-11-10 17:33:01 +03:00
Kubernetes Prow Robot
4926beedf9
Merge pull request #96414 from andyzhangx/remove-label-dependency
remove label dependency on k8s api in Azure
2020-11-10 06:22:41 -08:00
andyzhangx
7c4ae183e0 remove label dependency on k8s api in Azure
fix golint

fix gofmt
2020-11-10 12:58:17 +00:00
Kubernetes Prow Robot
59405cc2b4
Merge pull request #96338 from nilo19/feature/support-additional-probe-protocol
Support customize load balancer health probe protocol and request path
2020-11-10 03:12:39 -08:00
pigletfly
19a36d4b9a Remove duplicate import 2020-11-10 19:11:46 +08:00
Bryan Boreham
19de43137b kubelet: ensure pod UIDs are unique
Ensure node name and file path are included in the hash which produces
the pod UID, otherwise all pods created from the same manifest have
the same UID across the cluster.

The real author of this code is Yu-Ju Hong <yjhong@google.com>.
I am resurrecting an abandoned PR, and changed the git author to pass
CLA check.

Signed-off-by: Bryan Boreham <bjboreham@gmail.com>
2020-11-10 10:04:04 +00:00
Marek Siarkowicz
bd2bf5c0e3 Add --experimental-logging-sanitization flag to control plane components
Co-authored-by: Paweł Kępka <pkepka@google.com>
2020-11-10 10:47:40 +01:00
Saikat Roychowdhury
a07096952b FsgroupChange policy test suite 2020-11-10 08:36:07 +00:00
Kubernetes Prow Robot
4628c605aa
Merge pull request #92466 from mborsz/nmetrics
Improve observability of node authorizer
2020-11-10 00:32:42 -08:00
Maciej Borsz
4d81f7e129 Improve observability of node authorizer:
* Adding some metrics to the graph
* Adding log message when node authorizer has synced

Change-Id: I3447d6bc389a0b82ded1db2a7a4ae41d79486c2b
2020-11-10 08:40:46 +01:00
Jing Xu
a4aa494cc1 Remove ready directory which created in empty volumeMounter setUp func
Change-Id: I2384b07c7a044149e93e951a45f9f8a7bd9dba15
2020-11-09 23:12:21 -08:00
Andrew Sy Kim
80f2101da1 cloud-provider: update docs and guidance for InstanceV2 and Zones
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-10 01:13:45 -05:00
marosset
b14e83333b fixing issue where SMB share paths cannot resolve with CRI-containerD on Windows 2020-11-10 05:54:28 +00:00
Kubernetes Prow Robot
082146a6e6
Merge pull request #96358 from jiaxunsongucb/azurestack_apiversion
fix: change storage account client API version for Azure Stack
2020-11-09 20:57:03 -08:00
Kubernetes Prow Robot
9778f05c7b
Merge pull request #96320 from Huang-Wei/cleanup-annotation-wording
cleanup dated wording "NominatedNodeName annotation"
2020-11-09 20:56:54 -08:00
Kubernetes Prow Robot
347e4e9e22
Merge pull request #96205 from qingsenLi/k8s201104-ga
Remove TaintBasedEvictions Feature Gate
2020-11-09 20:56:40 -08:00
Wei Huang
6e0fb9ad7f
Ignore specific Pod update events in scheduler 2020-11-09 20:35:01 -08:00
Kubernetes Prow Robot
2e55fa82df
Merge pull request #96330 from jingxu97/nov/snapshot
Modify storage snapshottable test for Windows
2020-11-09 19:52:41 -08:00
Qi Ni
d17621bee6 Support customize load balancer health probe protocol 2020-11-10 11:50:00 +08:00
Hemant Kumar
006020b71e Move fsGroupChangePolicy feature to beta 2020-11-09 21:49:11 -05:00
Kathryn Baldauf
fbf46a4c5b Add WindowsContainerResources to UpdateContainerResourcesRequest
Signed-off-by: Kathryn Baldauf <kabaldau@microsoft.com>
2020-11-09 18:38:52 -08:00
xing-yang
3379395471 Change snapshot test to use v1 apis 2020-11-10 02:27:38 +00:00