Commit Graph

88078 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
c24fa741ae
Merge pull request #87499 from ejweber/fc-mount-options
FC mount options
2020-02-07 05:55:56 -08:00
Kubernetes Prow Robot
4ea66a35e8
Merge pull request #87201 from aojea/skip_dual
fix e2e dual-stack test flakiness
2020-02-07 05:55:43 -08:00
Kubernetes Prow Robot
ab97b666e2
Merge pull request #87902 from apelisse/ensureexist-limit-range-gce
gce-addons: Make sure default/limit-range doesn't get overridden
2020-02-07 00:08:29 -08:00
Kubernetes Prow Robot
fc6f878a65
Merge pull request #87845 from Huang-Wei/pts-exclude-terminating-pods
PodTopologySpread plugin now excludes terminatingPods
2020-02-07 00:08:20 -08:00
Kubernetes Prow Robot
1f147a4cf5
Merge pull request #87734 from mikedanese/ctxsnap
snapshot clientsets pending context migration
2020-02-07 00:08:10 -08:00
Kubernetes Prow Robot
c5bf3fbdf0
Merge pull request #87612 from enj/enj/i/oidc_audience_token_review
Make oidc authenticator audience agnostic
2020-02-07 00:07:56 -08:00
Kubernetes Prow Robot
7edb849f70
Merge pull request #87585 from justaugustus/rm-specs
build: Remove deb and rpm build definitions/specs
2020-02-07 00:07:43 -08:00
Kubernetes Prow Robot
9a1ea1844e
Merge pull request #87866 from dims/shutdown-bazel-explicitly-after-we-build
Explicitly shutdown bazel after the target finishes
2020-02-06 17:48:22 -08:00
Kubernetes Prow Robot
69e01784c1
Merge pull request #87838 from Ikuyadeu/path2filepath
Move 'path' package usage to 'path/filepath' (repeat the #87713)
2020-02-06 17:48:11 -08:00
Kubernetes Prow Robot
e4061baeac
Merge pull request #87830 from dims/update-sigs.k8s.io/yaml-to-v1.2.0
Updating dependency sigs.k8s.io/yaml to version v1.2.0
2020-02-06 17:48:01 -08:00
Kubernetes Prow Robot
f0bd622e35
Merge pull request #87829 from zhan849/harry/backoff-manager
implement backoff manager
2020-02-06 17:47:51 -08:00
Kubernetes Prow Robot
c493dd9542
Merge pull request #87826 from mikedanese/owner
add myself to hack/OWNERS
2020-02-06 17:47:42 -08:00
Kubernetes Prow Robot
9c1e124b15
Merge pull request #87823 from tallclair/test-tokens
Ensure testing credentials are labeled as such
2020-02-06 17:47:29 -08:00
Kubernetes Prow Robot
ef4e2c9f04
Merge pull request #87818 from tedyu/node-info-err
Check getNodeInfoError against nil
2020-02-06 17:47:13 -08:00
Kubernetes Prow Robot
8d80a44177
Merge pull request #87813 from sttts/sttts-schema-aggregation-logging
kube-aggregator: increase log level of AggregationController API group logging
2020-02-06 17:47:01 -08:00
Kubernetes Prow Robot
3dc3c7c653
Merge pull request #87788 from ahg-g/ahg-filter
Reduce overhead of error message formatting and allocation for NodeResource filter
2020-02-06 17:46:50 -08:00
Kubernetes Prow Robot
91d2088f24
Merge pull request #87778 from p0lyn0mial/improve-unavailableGauge
makes unavailableGauge metric to always reflect the current state of a service
2020-02-06 17:46:38 -08:00
Kubernetes Prow Robot
6ac8f2c70c
Merge pull request #87758 from klueska/upstream-cleanup-topology-manager
Cleanup TopologyManager and update policy.Merge()
2020-02-06 17:46:27 -08:00
Kubernetes Prow Robot
98d8af1582
Merge pull request #87741 from dims/ensure-configure-can-work-on-both-python2-and-3
python snippets should work on both old and new python versions
2020-02-06 17:46:15 -08:00
Kubernetes Prow Robot
caae5467c3
Merge pull request #87695 from andrewsykim/ipvs-handle-ipv6-dest
update github.com/docker/libnetwork to c8a5fca4a652
2020-02-06 17:45:59 -08:00
Kubernetes Prow Robot
04498c5955
Merge pull request #87513 from gavinfish/e2e_ingress_manifest
Move IngressFromManifest/IngressToManifest to ingress e2e fw
2020-02-06 17:45:45 -08:00
Kubernetes Prow Robot
04e28b3674
Merge pull request #87098 from davidz627/feature/migratedRollback
Add annotation updating for migration for PVs and PVCs
2020-02-06 17:45:32 -08:00
Mike Danese
2a5bce8c82 use tars instead of debs to build server images 2020-02-06 15:09:30 -08:00
Stephen Augustus
ac9983f43d build: Remove references to debs/rpms in BUILD/dependency files
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-02-06 15:08:52 -08:00
Stephen Augustus
baec6d4af5 build: Remove deb and rpm build definitions/specs
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-02-06 15:08:49 -08:00
Kubernetes Prow Robot
6a92f19444
Merge pull request #87730 from marosset/windows-kubelet-stats-timeout-updates
Windows kubelet stats timeout updates
2020-02-06 13:57:24 -08:00
Antoine Pelisse
e41f2ccd41 gce-addons: Make sure default/limit-range doesn't get overridden 2020-02-06 12:10:12 -08:00
Ted Yu
871739e4df Check getNodeInfoError against nil 2020-02-06 10:57:43 -08:00
marosset
999fdfaddf Calling hcsshim instead of docker api to get stats for windows to greatly reduce latency 2020-02-06 17:59:10 +00:00
marosset
e8f12692df adding e2e test to ensure it takes less than 10 seconds to query kubelet stats for windows nodes 2020-02-06 17:59:05 +00:00
Wei Huang
815206685c
PodTopologySpread excludes terminatingPods when making scheduling decision 2020-02-06 07:38:50 -08:00
Kubernetes Prow Robot
6858c25ee4
Merge pull request #85861 from ingvagabund/scheduler-perf-collect-data-items-from-metrics
Collect some of scheduling metrics and scheduling throughput
2020-02-06 07:05:34 -08:00
Kubernetes Prow Robot
a67238eed6
Merge pull request #87007 from wojtek-t/cleanup_manual_conversions
Cleanup manual conversions
2020-02-06 02:27:33 -08:00
Kubernetes Prow Robot
641321c94c
Merge pull request #87358 from tanjunchen/use-e2eskipper-final
test/e2e/framework: remove skip.go and use e2eskipper subpackage
2020-02-05 19:47:33 -08:00
Davanum Srinivas
fc719c13f5
Explicitly shutdown bazel after the target finishes 2020-02-05 18:16:34 -05:00
Kubernetes Prow Robot
9f6f608816
Merge pull request #87492 from 928234269/fix_staticcheck05
fix static check errors in vendor/k8s.io/apimachinery/pkg/api/resource
2020-02-05 12:11:55 -08:00
Davanum Srinivas
f20e17e9dd
python snippets should work on both old and new python versions 2020-02-05 11:22:56 -05:00
Kubernetes Prow Robot
d90dd93855
Merge pull request #82111 from xieyanker/xieyanker-patch-2
remove stateCheckPeriod
2020-02-05 04:17:55 -08:00
Kubernetes Prow Robot
7e8f31b313
Merge pull request #87809 from mfojtik/kubectl-logs-preselect
kubectl: allow to preselect interesting container in logs
2020-02-05 01:09:20 -08:00
Kubernetes Prow Robot
e27245490e
Merge pull request #87793 from msau42/storageclass-name
Add an option to external storage e2es to use a copy of a pre-installed StorageClass
2020-02-05 01:09:06 -08:00
Kubernetes Prow Robot
85ffc9dbd7
Merge pull request #87791 from mikedanese/authexp
remove authn/z expansions
2020-02-05 01:08:48 -08:00
Kubernetes Prow Robot
23aa2e2f5c
Merge pull request #87786 from Jefftree/netproxy-logging
Save log files for network proxy
2020-02-05 01:08:35 -08:00
Kubernetes Prow Robot
8f5e8279f6
Merge pull request #87781 from caesarxuchao/fix-webhook-image-bugs
Only set admission review reponse patch type if the patch is not empty
2020-02-05 01:08:23 -08:00
Kubernetes Prow Robot
4601189105
Merge pull request #87761 from dims/ensure-specified-container-runtimes-are-present
Ensure specified container runtimes are present
2020-02-05 01:08:09 -08:00
Kubernetes Prow Robot
a6a5fc5764
Merge pull request #87760 from dims/update-network-y-stuff-for-supporting-ubuntu/bionic
update network-y stuff for supporting ubuntu/bionic
2020-02-05 01:07:56 -08:00
Yuki Ueda
d1bc1875aa Move 'path' package usage to 'path/filepath' 2020-02-05 14:29:27 +09:00
Kubernetes Prow Robot
133f77247c
Merge pull request #87825 from kevtaylor/kep/VolumeSubpathExpansionE2ETests
Change HostPath to EmptyDir for VolumeSubpathEnvExpansion e2e tests
2020-02-04 20:45:55 -08:00
Harry Zhang
fc8a39d439 implement backoff manager 2020-02-04 14:23:15 -08:00
Monis Khan
9b23f22472
Make oidc authenticator audience agnostic
This change removes the audience logic from the oidc authenticator
and collapses it onto the same logic used by other audience unaware
authenticators.

oidc is audience unaware in the sense that it does not know or
understand the API server's audience.  As before, the authenticator
will continue to check that the token audience matches the
configured client ID.

The reasoning for this simplification is:

1. The previous code tries to make the client ID on the oidc token
a valid audience.  But by not returning any audience, the token is
not valid when used via token review on a server that is configured
to honor audiences (the token works against the Kube API because the
audience check is skipped).

2. It is unclear what functionality would be gained by allowing
token review to check the client ID as a valid audience.  It could
serve as a proxy to know that the token was honored by the oidc
authenticator, but that does not seem like a valid use case.

3. It has never been possible to use the client ID as an audience
with token review as it would have always failed the audience
intersection check.  Thus this change is backwards compatible.

It is strange that the oidc authenticator would be considered
audience unaware when oidc tokens have an audience claim, but from
the perspective of the Kube API (and for backwards compatibility),
these tokens are only valid for the API server's audience.

This change seems to be the least magical and most consistent way to
honor backwards compatibility and to allow oidc tokens to be used
via token review when audience support in enabled.

Signed-off-by: Monis Khan <mok@vmware.com>
2020-02-04 13:24:49 -08:00
Davanum Srinivas
5bb1838c5c
Updating dependency sigs.k8s.io/yaml to version v1.2.0 2020-02-04 15:45:47 -05:00