Commit Graph

112406 Commits

Author SHA1 Message Date
Paco Xu
34d845502f kubeadm: use coredns v1.10.0 2022-12-05 11:42:43 +08:00
Paco Xu
9b633b3dde update github.com/coredns/corefile-migration v1.0.18 2022-12-05 11:05:39 +08:00
Paco Xu
d65ea5e712 update coredns kube up to v1.10.0 2022-12-05 10:08:32 +08:00
kidddddddddddddddddddddd
9e0a7c7ee7 add pre_filter for volume_zone 2022-12-03 02:11:04 +08:00
Andy Goldstein
784ec157e6
reflector: refactor setting typeDescription & expectedGVK
Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>
2022-12-02 12:39:58 -05:00
Andy Goldstein
474fc8c523 Reflector: support logging Unstructured type
Add an annotation that can be added to the exampleType passed to
NewReflector to indicate the expected type for the Reflector. This is
useful for types such as unstuctured.Unstructured, which, when used with
a dynamic informer, do not have their TypeMeta filled in.

Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>
2022-12-02 12:22:04 -05:00
Maksym Pavlenko
3c0a78e924 Make mounter interface exportable
In current implementation it's not possible to implement
Mounter interface from a different package because of
private function:

Type cannot implement 'mount.Interface' as it has a non-exported method and is defined in a different package

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2022-12-02 06:58:43 -08:00
Arda Güçlü
b84f192acc kubectl scale: proceed even if there is invalid resource in multi 2022-12-02 17:23:44 +03:00
Arda Güçlü
76ee3788cc kubectl scale: Add dry-run prefix to indicate result is not applied
Currently, if user executes `kubectl scale --dry-run`, output has no
indicator showing that this is not applied in reality.

This PR adds dry run suffix to the output as well as more integration
tests to verify it.
2022-12-02 16:27:18 +03:00
Arda Güçlü
13be899b42 kubectl scale: Use visitor only once
`kubectl scale` calls visitor two times. Second call fails when
the piped input is passed by returning an
`error: no objects passed to scale` error.

This PR uses the result of first visitor and fixes that piped
input problem. In addition to that, this PR also adds new
scale test to verify.
2022-12-02 16:00:22 +03:00
Arda Güçlü
832644f0b3 kubectl exec: return descriptive error message when multi resource passed
`kubectl exec` command supports getting files as inputs. However,
if the file contains multiple resources, it returns unclear error message;
`cannot attach to *v1.List: selector for *v1.List not implemented`.

Since `exec` command does not support multi resources, this PR
handles that and returns descriptive error message earlier.
2022-12-02 14:05:11 +03:00
David Eads
ffec39cb27 wait for ingress admission to catch up to the cache during testing 2022-12-01 13:16:39 -05:00
Kubernetes Prow Robot
3e26e104bd
Merge pull request #114232 from pacoxu/etcd-3.5.6-0
add etcd 3.5.6-0 to kuebadm supported etcd version
2022-12-01 03:54:27 -08:00
Paco Xu
f0d1a39e8f add etcd 3.5.6-0 to kuebadm supported etcd version 2022-12-01 18:41:32 +08:00
Antonio Ojea
bafeacd14d use kube-proxy defaults values for CI
Change-Id: I8b9bcd62a0df8c1f90623a53ad3ba7fb31b2a4f3
2022-12-01 10:32:12 +00:00
Sascha Grunert
8a96ed0d20
Link kubectl-convert binary statically
The kubectl-convert binary itself only depends on the following runtime
libraries when linking dynamically:

```
> ldd _output/bin/kubectl-convert
        linux-vdso.so.1 (0x00007ffef0786000)
        libpthread.so.0 => /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib/libpthread.so.0 (0x00007f5f4ac25000)
        libdl.so.2 => /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib/libdl.so.2 (0x00007f5f4ac20000)
        libc.so.6 => /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib/libc.so.6 (0x00007f5f4aa00000)
        /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib/ld-linux-x86-64.so.2 => /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib64/ld-linux-x86-64.so.2 (0x00007f5f4ac2c000)
```

We now move kubectl-convert to become a static binary as well to achieve
maximum portability.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-12-01 11:23:26 +01:00
Iceber Gu
6b7755f8eb fix the alpha phase version of LegacyServiceAccountTokenTracking
Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
2022-12-01 11:16:06 +08:00
Antoine Pelisse
56cac64655 fieldmanager: Make all tests external 2022-11-30 13:54:24 -08:00
Antoine Pelisse
9c447177e8 fieldmanager: Move private setLastApplied to internal.SetLastApplied
Since this is used both in real-code and in test-code, let's put it
somewhere it can be re-used.
2022-11-30 13:54:21 -08:00
Antoine Pelisse
530d25026e fieldmanager: remove dependencies on dummy version conversion for tests 2022-11-30 13:54:21 -08:00
Antoine Pelisse
7217e0308d fieldmanager: Remove unnecessary method for creating TestFieldManager 2022-11-30 13:54:16 -08:00
Aldo Culquicondor
4e1c3a5855
Dedup serialization of status
Change-Id: Iaba63ea31e948933e162b3148cda2588af0fdaa3
2022-11-30 13:05:07 -05:00
Aldo Culquicondor
b62541fe84
Avoid serialization of maps when log level < 10
Change-Id: If264c26ae599602d5b4919301f011c2095d706ee
2022-11-30 12:53:52 -05:00
Kubernetes Release Robot
79cba170b5 CHANGELOG: Update directory for v1.26.0-rc.1 release 2022-11-30 17:07:55 +00:00
Msk
1444f089fc Fix go routine leaks
Close the channel instead of write to it to avoid hanging goroutine.
2022-12-01 00:29:59 +08:00
Paco Xu
a782bd62bd add github.com/mindprince/gonvml to unwanted dependencies for license reason 2022-11-30 15:12:04 +08:00
Paco Xu
7e9dfad2b6 sort unwanted dependencies in order 2022-11-30 14:37:53 +08:00
Brian Pursley
c0dea5e31a i18n: Fix bug where package-level variables are not translated.
Change i18n.T() to load translations if they have not yet been loaded.

Added new integration tests to test help output translation.
2022-11-29 23:09:57 -05:00
Kubernetes Prow Robot
d98e9620e3
Merge pull request #114193 from xmudrii/fix-pub-bot-rules
publishing-bot: Fix apimachinery rule for release-1.26 pointing to the wrong staging dir and use correct Go version
2022-11-29 13:03:08 -08:00
michael mccune
6981a1acf5 fix spelling error in e2e upgrade apps daemonset test 2022-11-29 15:56:15 -05:00
Davanum Srinivas
ffef2d1f1a
add more validation to rules.yaml
We need to better catch problems like the one we fixed in:
7b6a3d6a33

Essentially a copy-paste error where had a branch pointing to staging/src/k8s.io/code-generator instead of staging/src/k8s.io/apimachinery

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-11-29 15:07:34 -05:00
Marko Mudrinić
8e973ce871
Fix Go 1.19 version in publishing-bot rules
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2022-11-29 20:55:12 +01:00
Marko Mudrinić
7b6a3d6a33
Update publishing-bot rule for apimachinery on release-1.26
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2022-11-29 20:53:14 +01:00
QuantumEnergyE
847a39afc0 Retry patch when then service is unavailable or timeout. 2022-11-29 23:09:31 +08:00
Dan Winship
bfa4948bb6 Don't re-run EnsureChain/EnsureRules on partial syncs
We currently invoke /sbin/iptables 24 times on each syncProxyRules
before calling iptables-restore. Since even trivial iptables
invocations are slow on hosts with lots of iptables rules, this adds a
lot of time to each sync. Since these checks are expected to be a
no-op 99% of the time, skip them on partial syncs.
2022-11-29 09:42:49 -05:00
Sascha Grunert
f04bb71878
Tracing: sample always in hack/local-up-cluster.sh
If the feature gate `KubeletTracing` is enabled, then we should default
to a sample rate of 1 million per million, which will sample everything:

https://github.com/open-telemetry/opentelemetry-go/blob/aa868d5/sdk/trace/sampling.go#L107-L110

This helps to easier spin-up a cluster with tracing enabled by exporting
`FEATURE_GATES="KubeletTracing=true"`.

Related docs: https://k8s.io/docs/concepts/cluster-administration/system-traces/#kubelet-traces

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-11-29 13:12:19 +01:00
ZhangYu
6553ba246f pkg/kubelet/network/dns: omit unnecessary fmt.Sprintf 2022-11-29 14:44:14 +08:00
Tim Hockin
f4c1682fb1
Validate StatefulSet names as DNS Label
Any StatefuleSet which took advantage of this (by having dots in the
name) can't have worked because we set `pod.spec.hostname` from it,
which is validated as a DNS label.

So while this is strictly a breaking change, it doesn't break anything
that was not already broken.
2022-11-28 17:31:08 -08:00
Joe Betz
ab3c353227 Improve error messages for parse errors of --kube-reserved, --system-reserved and --qos-reserved 2022-11-28 16:35:26 -05:00
Claudiu Belu
1129f57143 unittests: Skip test if not on GCE
The test in pkg/credentialprovider/gcp/metadata_test.go is meant to
run only on GCE, which means that it will fail in any other case.

We should skip the test if we're not testing in GCE or Windows in GCE.
2022-11-28 13:54:14 +00:00
ZhangYu
357d0a8603 staging/src/k8s.io/legacy-cloud-providers/azure: remove unnecessary fmt.Sprintf 2022-11-28 16:56:01 +08:00
Riaan Kleinhans
0545a0a988
update ineligible endpoints yaml 2022-11-28 08:57:21 +13:00
Kubernetes Prow Robot
7061704297
Merge pull request #114146 from justaugustus/sig-release-leads-update
OWNERS(sig-release): Promote Verónica (Tech Lead) and Jeremy (Chair)
2022-11-25 13:44:04 -08:00
Stephen Augustus
d0bc8e83df
OWNERS(sig-release): Promote Verónica (Tech Lead) and Jeremy (Chair)
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2022-11-25 15:37:55 -05:00
Kubernetes Prow Robot
6bdda2da16
Merge pull request #114122 from aojea/fix_endpoint_reconciler_11_2022
Fix endpoint reconciler failing to delete masterlease
2022-11-25 02:28:05 -08:00
Antonio Ojea
b89f42be26 remove flaky tag for GCE NEG tests
Fixed by

https://github.com/kubernetes/kubernetes/pull/113858
https://github.com/kubernetes/kubernetes/pull/113562
2022-11-25 08:52:35 +00:00
Wojciech Tyczyński
4ffca653ff Fix endpoint reconciler failing to delete masterlease
add regression test for endpoint reconciler leases
2022-11-25 08:13:20 +00:00
Jan Safranek
ebc5b208ae Fix OwnerReferencesPermissionEnforcement complaints when autodeleting PVCs
When StatefulSetAutoDeletePVC feature gate is enabled, StatefulSet
controller updates ownerReferences on managed PVCs. To be able to pass
OwnerReferencesPermissionEnforcement admission, it must have permissions to
delete PVCs.
2022-11-24 14:46:45 +01:00
Kubernetes Prow Robot
8f2371bcce
Merge pull request #114096 from pacoxu/vul-version-wrong
changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
2022-11-24 00:30:04 -08:00
Paco Xu
efb3f79328 changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 2022-11-24 13:03:44 +08:00