github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-23 11:50:44 +00:00
Code Issues Projects Releases Wiki Activity
103,815 Commits 42 Branches 7,905 Tags 1.3 GiB
bceefb7a86
Commit Graph

103815 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jordan Liggitt
13e0887c4c PodSecurity: add admission benchmark 
go test ./plugin/pkg/admission/security/podsecurity -bench /pod -benchmem
goos: darwin
goarch: amd64
pkg: k8s.io/kubernetes/plugin/pkg/admission/security/podsecurity
cpu: Intel(R) Core(TM) i7-9750H CPU @ 2.60GHz
BenchmarkVerifyPod/enforce-implicit_pod-12         	  702789	      1585 ns/op	    2120 B/op	      12 allocs/op
BenchmarkVerifyPod/enforce-privileged_pod-12       	  737588	      1607 ns/op	    2120 B/op	      12 allocs/op
BenchmarkVerifyPod/enforce-baseline_pod-12         	  409818	      2974 ns/op	    3368 B/op	      17 allocs/op
BenchmarkVerifyPod/enforce-restricted_pod-12       	  370262	      3385 ns/op	    3368 B/op	      17 allocs/op
BenchmarkVerifyPod/warn-baseline_pod-12            	  391808	      3101 ns/op	    3368 B/op	      17 allocs/op
BenchmarkVerifyPod/warn-restricted_pod-12          	  349411	      3452 ns/op	    3368 B/op	      17 allocs/op
BenchmarkVerifyPod/enforce-warn-audit-baseline_pod-12         	  208221	      5735 ns/op	    5864 B/op	      27 allocs/op
BenchmarkVerifyPod/warn-baseline-audit-restricted_pod-12      	  249662	      4849 ns/op	    4616 B/op	      22 allocs/op
PASS
ok  	k8s.io/kubernetes/plugin/pkg/admission/security/podsecurity	10.707s
 2021-09-21 16:20:11 -04:00
Aldo Culquicondor
7868fbbe64 Revert "Add metric job_pod_finished" 
This reverts commit a0e7a567c5.
 2021-09-21 15:16:54 -04:00
Aldo Culquicondor
8bcb780808 Revert "Limit number of Pods counted in a single Job sync" 
This reverts commit 7d9cb88fed.
 2021-09-21 15:16:50 -04:00
Kubernetes Prow Robot
d5f39ebe4d
Merge pull request #105064 from knight42/refactor-switch-to-stdlib-cipher 
refactor: switch to tls cipher suite in stdlib
 2021-09-21 11:56:42 -07:00
Kubernetes Prow Robot
7c71e06cd1
Merge pull request #104959 from calvin0327/issue-test-dataRace 
fix the test issue of node shutdown manager
 2021-09-21 11:56:30 -07:00
Kubernetes Prow Robot
44d4d007bf
Merge pull request #103424 from 249043822/br-cadvisor-perf 
Optimize kubelet stats provider for perfomace bottleneck
 2021-09-21 11:56:18 -07:00
Tim Allclair
4633670153 Fix PodSecurity forbidden response reason 2021-09-21 11:34:13 -07:00
Kubernetes Prow Robot
40c9203472
Merge pull request #105171 from liggitt/gomodule-staticcheck 
Make staticcheck package-compatible
 2021-09-21 10:34:23 -07:00
Phil
f1a9402082 Log if PV is still in use trying to delete it 
Similar to what we have in:
https://github.com/kubernetes/kubernetes/blob/master/pkg/controller/volume/pvcprotection/pvc_protection_controller.go#L181
The objective is to have a easy way to monitor if a PV will enter in Terminating state due to a failed removal when still in use.
This way we can capture the PV log and alert according.
The code is not tested.

Update pv_protection_controller.go

Change call to Infof
 2021-09-21 18:05:16 +01:00
Jordan Liggitt
fc0f6ab127 Make importverifier package-compatible 2021-09-21 12:46:29 -04:00
Jordan Liggitt
00622da45e Make staticcheck package-compatible 2021-09-21 12:19:57 -04:00
Kubernetes Prow Robot
bf77f8ff43
Merge pull request #105162 from MadhavJivrajani/migrate-clock-pkg 
migrate k8s.io/apimachinery/util/clock -> k8s.io/utils/clock
 2021-09-21 08:44:24 -07:00
sanposhiho
77c1949326 add usage message only when parsing flags failed 2021-09-22 00:40:15 +09:00
Mike Spreitzer
4b9cba8587 Improve queueset sharding and dispatching 
New anti-windup technique: use the request arrival time as the floor
on the virtual dispatch time.  Prevent bound violations where they
might arise rather than fixing up just one queue at dispatch time,
so that the fixed up dispatch times figure into the dispatching choice.

Two tweaks to the shuffle sharding.  Take seats of executing requests
into account as well as seats of waiting requests.  Do not always
consider the generated hand in the same order.

Rename the queueset methods that do shuffle sharding and finding the
queue to dispatch from, because the old names were confusingly
similar.

Tighten up some request margins.

Name the test cases in TestNoRestraint and TestWindup.
 2021-09-21 11:20:02 -04:00
Kubernetes Prow Robot
9ff99adc60
Merge pull request #104167 from ialidzhikov/cleanup/boundserviceaccounttokenvolume 
Remove the BoundServiceAccountTokenVolume feature gate
 2021-09-21 07:18:23 -07:00
Jordan Liggitt
e63725425f Smoke test code-generator using full packages 2021-09-21 10:17:42 -04:00
Kubernetes Prow Robot
68d646a101
Merge pull request #105085 from MikeSpreitzer/fix-queueset-tests 
Update TestNoRestraint and TestWindup
 2021-09-21 03:48:23 -07:00
Madhav Jivrajani
fed2ec99c6 migrate k8s.io/apimachinery/util/clock -> k8s.io/utils/clock 
Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
 2021-09-21 15:54:44 +05:30
ialidzhikov
d6f4c03e4b Remove the BoundServiceAccountTokenVolume feature gate 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2021-09-21 11:53:51 +03:00
Mike Spreitzer
0ee1a7b4ff More test tweaks 
Canonicalize listing of test cases.

Make TestNoRestraint try both cases: competition and none.
 2021-09-21 03:06:38 -04:00
Kubernetes Prow Robot
6c45f6e32b
Merge pull request #105125 from BinacsLee/binacs-fix-scheQ-caculate-overflow 
Scheduler: fix calculateBackoffDuration overflow in extreme data cases
 2021-09-20 21:26:23 -07:00
BinacsLee
f277864aa5 Scheduler queue: fix calculateBackoffDuration overflow in extreme data cases 2021-09-21 09:42:52 +08:00
Stephen Augustus
1a15eeef38
test/conformance/image: Update runner image to base-debian11 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-09-20 21:05:06 -04:00
Stephen Augustus
8dcaf8433b
cluster/images/etcd: Build 3.5.0-2 image 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-09-20 21:02:49 -04:00
Stephen Augustus
531eb712c2
releng: Update build images to Debian 11 (Bullseye) 
- debian-base:bullseye-v1.0.0
- debian-iptables:bullseye-v1.0.0
- go-runner:v2.3.1-go1.17.1-bullseye.0
- kube-cross:v1.23.0-go1.17.1-bullseye.0
- setcap:bullseye-v1.0.0

Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-09-20 20:51:32 -04:00
Kubernetes Prow Robot
c4587a62f9
Merge pull request #105143 from aojea/netexec_optional_listen 
agnhost: allow to disable udp listener on netexec
 2021-09-20 16:10:22 -07:00
Kubernetes Prow Robot
dde200478a
Merge pull request #105145 from aojea/fix_host_internal 
avoid hostNetwork pods conflict binding UDP ports
 2021-09-20 15:02:45 -07:00
Kubernetes Prow Robot
acbeaf8b8e
Merge pull request #104944 from jyz0309/migrate-log 
Migrate `cmd/proxy/{config, healthcheck, winkernel}` to structured logging
 2021-09-20 15:02:37 -07:00
Kubernetes Prow Robot
775c9314ad
Merge pull request #104578 from MadhavJivrajani/refactor-rate-limiters 
Move client-go/tools/record tests away from `IntervalClock` to `SimpleIntervalClock`
 2021-09-20 15:02:24 -07:00
Pritish Samal
060f5b88d0
Migrate pkg/proxy/util to structured logging (#104908) 
* Migrate to Structured Logs in `pkg/proxy/util`

* Minor fixes

* change key to cidr and remove namespace arg

* Update key from cidr to CIDR

Co-authored-by: JUN YANG <69306452+yangjunmyfm192085@users.noreply.github.com>

* Update key cidr to CIDR

Co-authored-by: JUN YANG <69306452+yangjunmyfm192085@users.noreply.github.com>

* Update key ip to IP

Co-authored-by: JUN YANG <69306452+yangjunmyfm192085@users.noreply.github.com>

* Update key ip to IP

Co-authored-by: JUN YANG <69306452+yangjunmyfm192085@users.noreply.github.com>

* Interchange svcNamespace and svcName

* Change first letter of all messages to capital

* Change key names in endpoints.go

* Change all keynames to lower bumby caps convention

Co-authored-by: JUN YANG <69306452+yangjunmyfm192085@users.noreply.github.com>
 2021-09-20 13:54:35 -07:00
Kubernetes Prow Robot
b34a735bbe
Merge pull request #102523 from stlaz/rootca_metrics_cleanup 
rootcacertpublisher: drop the namespace label from metrics to reduce its cardinality
 2021-09-20 13:54:24 -07:00
Kubernetes Prow Robot
353f0a5eab
Merge pull request #105095 from wojtek-t/migrate_clock_3 
Unify towards k8s.io/utils/clock - part 3
 2021-09-20 12:46:45 -07:00
Kubernetes Prow Robot
3e985b7af6
Merge pull request #104916 from pohly/storage-e2e-owners 
e2e storage: update OWNERS
 2021-09-20 12:46:37 -07:00
Kubernetes Prow Robot
06796b7c7c
Merge pull request #104863 from pohly/restore-volume-life-cycle-check 
e2e: restore volume lifecycle check for most tests
 2021-09-20 12:46:24 -07:00
Kubernetes Prow Robot
e8653fe24a
Merge pull request #104163 from ialidzhikov/cleanup/pids-limit 
Remove SupportPodPidsLimit and SupportNodePidsLimit feature gates
 2021-09-20 11:35:09 -07:00
Kubernetes Prow Robot
b92b799881
Merge pull request #102309 from pacoxu/track-unwanted-dependencies-1 
add update-unwanted-dependencies.sh to track unwanted dependencies
 2021-09-20 10:18:10 -07:00
Wei Huang
3b64c1b01d
sched: de-duplicate plugin registration logic by using FactoryAdapter 2021-09-20 10:12:34 -07:00
Kubernetes Prow Robot
f55101913f
Merge pull request #105098 from Karthik-K-N/fix-error-format 
Fix incorrect format specifier in test files
 2021-09-20 08:56:09 -07:00
Kubernetes Prow Robot
232bc67b22
Merge pull request #104655 from luyou86/client-go-bucket-rate-limiter-add-maxDelay 
client-go bucket rate limiter add maxDelay
 2021-09-20 07:46:11 -07:00
pacoxu
b99e1e4aa9 use reference as we cannot distinguishing direct/indirect with go mod graph 2021-09-20 22:14:34 +08:00
jyz0309
5d32be4126 fix type check 
Signed-off-by: jyz0309 <45495947@qq.com>
 2021-09-20 19:42:15 +08:00
jyz0309
6344d6b26d rebuild msg and rename namespace 
Signed-off-by: jyz0309 <45495947@qq.com>
 2021-09-20 19:04:21 +08:00
Kubernetes Prow Robot
6e92ee6788
Merge pull request #105106 from MikeSpreitzer/apf-migrate-clock 
Migrate apiserver/pkg/util/flowcontrol to use k8s.io/utils/clock
 2021-09-20 03:52:09 -07:00
Antonio Ojea
b55e6f2cd0 avoid hostNetwork pods conflict binding UDP ports 
The agnhost pods using netexec will bind by default to the UDP
port 8081, use a different port for hostNetwork pods to avoid
scheduling conflicts and fail the tests.
 2021-09-20 09:54:23 +02:00
Antonio Ojea
2bf38ed86b agnhost: allow to disable udp listener on netexec 
There are some tests that doesn't need the UDP listener, so they
can disable it.
This is specially needed for tests that use hostNetwork pods, if 2
pods try to bind to the same port, the test will fail because one
of the pod can't be scheduled because of the port conflict.

To keep backwards compatibility, we can add an option to disable
the UDP listener by setting the port number to -1, that is consistent
with the SCTP implementation.
 2021-09-20 09:44:20 +02:00
Shivanshu Raj Shrivastava
bbd809cbd0
Fixing incorrectly migrated structured logs (#105122) 
* added keys for structured logging

* used KObj
 2021-09-19 12:28:08 -07:00
Kubernetes Prow Robot
a3d62e6925
Merge pull request #105134 from aojea/hack-local-resolv 
local-cluster-up: allow to specify the kubelet resolv.conf
 2021-09-19 07:22:09 -07:00
Antonio Ojea
1846e42f7b alllocal-cluster-up: ow to specify the kubelet resolv.conf 2021-09-19 12:06:52 +02:00
Kubernetes Prow Robot
25c7b6a2c7
Merge pull request #105109 from Huang-Wei/cleanup-dupe-import 
cleanup duplicated import of "k8s.io/apimachinery/pkg/runtime"
 2021-09-18 17:20:07 -07:00
Kubernetes Prow Robot
a73f45dd96
Merge pull request #105031 from howardjohn/q/memory-leak 
workqueue: fix leak in queue preventing objects from being GCed
 2021-09-17 23:42:06 -07:00