Commit Graph

80941 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
cbae6ed036
Merge pull request #80220 from alculquicondor/refactor/scheduler-cache
Use scheduler cache in affinity priority functions
2019-07-24 13:50:06 -07:00
Kubernetes Prow Robot
9c903376f3
Merge pull request #80091 from bertinatto/iscsi_ref_counter
Add new iSCSI refcounter
2019-07-24 13:49:52 -07:00
Kubernetes Prow Robot
e0ff9634d5
Merge pull request #79992 from deads2k/crd-protection
add protection for reserved API groups
2019-07-24 10:44:15 -07:00
Kubernetes Prow Robot
1dac5fd14a
Merge pull request #79444 from cezarsa/node_addrs
proxy/ipvs: Only compute node ip addresses once per sync
2019-07-24 07:40:16 -07:00
Kubernetes Prow Robot
030274eba3
Merge pull request #80443 from davidz627/fix/verifyMigration
Add migration shim for verifyvolumeattachment and bulk verify
2019-07-24 05:30:15 -07:00
Fabio Bertinatto
44d7510ee0 Add unit test for iSCSI refcounter 2019-07-24 14:21:36 +02:00
David Eads
aa84028119 add protection for reserved API groups 2019-07-24 07:41:30 -04:00
Fabio Bertinatto
0007c2abd4 Add new refcounter for iSCSI volumes 2019-07-24 13:40:10 +02:00
Kubernetes Prow Robot
da3daf2e8a
Merge pull request #80451 from cwdsuzhou/July/fix_error_override
Fix error override when saveVolumeData occurs error
2019-07-24 02:02:15 -07:00
Kubernetes Prow Robot
bbdd0557b6
Merge pull request #78170 from DaiHao/daemon
ignore failed pods to not block rolling update daemonset
2019-07-23 21:36:14 -07:00
Kubernetes Prow Robot
c08a88a2d1
Merge pull request #80419 from feiskyer/vmss-fix
Fix retry issues when the nodes are under deleting on Azure
2019-07-23 19:32:18 -07:00
caiweidong
a5bf98a43e Fix error overrided when saveVolumeData occurs error 2019-07-24 10:19:22 +08:00
Aldo Culquicondor
f58abdf966 Use scheduler cache in affinity priority functions
Make the cache implement NodeLister and expose it to the priority
functions. This way, the priority functions make use of a single cache,
the scheduler's, instead of mixing it with the lister's caches.

Signed-off-by: Aldo Culquicondor <acondor@google.com>
2019-07-23 22:10:49 -04:00
Kubernetes Prow Robot
5993ec5a5a
Merge pull request #80478 from silenceshell/patch-1
fix grammar error
2019-07-23 17:14:54 -07:00
Kubernetes Prow Robot
eb6bcfb345
Merge pull request #80096 from ZP-AlwaysWin/dev05
Fix golint failure in pkg/util/netsh/testing/
2019-07-23 17:14:41 -07:00
Kubernetes Prow Robot
60c2d44129
Merge pull request #79552 from wongma7/windows-ebs
Add support for AWS EBS on windows
2019-07-23 17:14:28 -07:00
Kubernetes Prow Robot
87c3f515f5
Merge pull request #77760 from Huang-Wei/eps-pred-meta
Even Pods Spread - 2. Calculating Predicates Metadata
2019-07-23 17:14:15 -07:00
Kubernetes Prow Robot
a9d4eddcd1
Merge pull request #80223 from ahg-g/ahg-reviewer
Nominate Abdullah Gharaibeh to scheduler reviewers.
2019-07-23 15:52:28 -07:00
Kubernetes Prow Robot
0ba6ecca72
Merge pull request #77155 from draveness/feature/refactor-util-service
refactor: move service related functions in service pkg
2019-07-23 15:52:15 -07:00
David Zhu
290a7f12ce Add migration shim for VerifyVolumesAreAttached and BulkVolumeVerify 2019-07-23 12:57:47 -07:00
Matthew Wong
02530b9ffb Enable windows ntfs e2e storage tests for aws driver 2019-07-23 19:28:14 +00:00
Matthew Wong
51615f691d Add support for windows to AWS EBS 2019-07-23 19:28:14 +00:00
Kubernetes Prow Robot
5b496fe8f5
Merge pull request #80315 from klueska/upstream-cleanup-socketmask
Cleanup the TopologyManager socketmask abstraction
2019-07-23 11:40:28 -07:00
Kubernetes Prow Robot
304e2c247a
Merge pull request #80294 from klueska/upstream-fail-fast-cpumanager-topologymanager
Update the cpumanager and topologymanager to error out if an invalid policy is given
2019-07-23 11:40:14 -07:00
Kubernetes Prow Robot
7e806a2dd6
Merge pull request #80459 from cwdsuzhou/July/fix_panic_nodeGetVolumeStats
Fix potential panic in nodeGetVolumeStatsV1
2019-07-23 10:01:59 -07:00
Kubernetes Prow Robot
16b65b259d
Merge pull request #80393 from smarterclayton/pod_failure
Pod e2e for reading last line can flake if pod runs to completion
2019-07-23 10:01:46 -07:00
Cezar Sa Espinola
c25763e159
proxy/ipvs: Compute all node ips only once when a zero cidr is used
Computing all node ips twice would always happen when no node port
addresses were explicitly set. The GetNodeAddresses call would return
two zero cidrs (ipv4 and ipv6) and we would then retrieve all node IPs
twice because the loop wouldn't break after the first time.

Also, it is possible for the user to set explicit node port addresses
including both a zero and a non-zero cidr, but this wouldn't make sense
for nodeIPs since the zero cidr would already cause nodeIPs to include
all IPs on the node.
2019-07-23 13:35:37 -03:00
Cezar Sa Espinola
5c16940508
proxy/ipvs: Only compute node ip addresses once per sync
Previously the same ip addresses would be computed for each nodePort
service and this could be CPU intensive for a large number of nodePort
services with a large number of ipaddresses on the node.
2019-07-23 13:35:27 -03:00
Kubernetes Prow Robot
55807b71ad
Merge pull request #80433 from zgfh/add_kube_config_doc_link
add link of kubeadm config doc
2019-07-23 04:32:56 -07:00
silenceshell
c9275c97aa
fix grammar err
"be of interest to you"
2019-07-23 19:18:29 +08:00
Kubernetes Prow Robot
3ea28073a4
Merge pull request #80375 from wongma7/framework-csidriver
Add CSIDriver creation factory to e2e framework
2019-07-23 01:28:54 -07:00
Kubernetes Prow Robot
7dc5d1f064
Merge pull request #80377 from davidz627/fix/testAMDefault
Change default PVC AccessModes to RWO in test framework
2019-07-22 23:52:55 -07:00
caiweidong
45c52d1314 Fix potential panic in nodeGetVolumeStatsV1 2019-07-23 13:47:35 +08:00
Kubernetes Prow Robot
5381bf5800
Merge pull request #79553 from ahmedtd/binauthz
GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook
2019-07-22 22:22:53 -07:00
Kubernetes Prow Robot
f101466d2e
Merge pull request #77553 from s-urbaniak/fix-76956
pkg/util/workqueue/prometheus: fix double registration
2019-07-22 19:10:53 -07:00
Wei Huang
f822487f05
EvenPodsSpread: match selector of each constraint independently
- see more discussion at https://github.com/kubernetes/kubernetes/pull/77760#discussion_r305107973
2019-07-22 17:51:23 -07:00
Wei Huang
c23aef40f2
[eps-pred-meta] auto-gen files 2019-07-22 17:34:56 -07:00
Wei Huang
249752cc1f
fixup: fix comments and use a channel to pass err 2019-07-22 17:34:56 -07:00
Wei Huang
dce6686c9a
EvenPodsSpread: refactor "chained" utils
- move "chanined" utils to pkg/scheduler/testing/utils.go so as to be re-used by all scheduler tests
2019-07-22 17:34:56 -07:00
Wei Huang
3dbef991a3
EvenPodsSpread: refactor topologyPairsPodSpreadMap
- update minMatchMap from []int32 to map[string]int32
2019-07-22 17:34:56 -07:00
Wei Huang
a242e376ac
EvenPodsSpread: PredicateMetadata initilization
- build a new `topologyPairsPodSpreadMap` into PredicateMetadata
- update ShallowCopy()
- unit tests
2019-07-22 17:34:56 -07:00
Kubernetes Prow Robot
08f9f2b58a
Merge pull request #80436 from M00nF1sh/master
Refactors to kubectl CP command
2019-07-22 16:49:06 -07:00
Kubernetes Prow Robot
f31d786927
Merge pull request #78477 from YoubingLi/filter
Fixes 78001 The implementation of Filter extension for the new framework
2019-07-22 16:48:53 -07:00
Taahir Ahmed
9702c6e6e9 GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook
This commit adds support for using `gke-exec-auth-plugin` (vTPM-based
certificates for mTLS) for webhooks when calling endpoints matching
`*.googleapis.com`, and integrates this support with
ValidatingAdmissionWebhook.

To enable it, request ValidatingAdmissionWebhook with
`ADMISSION_CONTROL=...,ValidatingAdmissionWebhook,...` (default) and
opt in to `gke-exec-auth-plugin` using `WEBHOOK_GKE_EXEC_AUTH=true`
during the configuration process.

If you don't opt-in, ValidatingAdmissionWebhook will be deployed as
before.

Requesting `WEBHOOK_GKE_EXEC_AUTH=true` will fail if you have not
provided other configuration variables:

  * `EXEC_AUTH_PLUGIN_URL`: controls whether `gke-exec-auth-plugin` is
    downloaded during the installation step.  A prerequisite for
    actually using the plugin.

  * `TOKEN_URL`, `TOKEN_BODY`, and `TOKEN_BODY_UNQUOTED`:
    configuration values used when calling the plugin.  `TOKEN_URL`
    and `TOKEN_BODY` have existing usage. `TOKEN_BODY_UNQUOTED` is a
    new variable that is meant to sidestep the problem of inverting
    `strconv.Quote` in Bash.

The existing configuration process for ImagePolicyWebhook has been
reworked to make it play nicely with ValidatingAdmissionWebhook under
`WEBHOOK_GKE_EXEC_AUTH=true`.

  * It originally placed the ImagePolicyWebhook configuration object
    at the top-level of the file specified by
    `--admission-control-config-file`.  I can't see why this worked;
    it must have been hitting some sort of lucky path through the
    various config file loading mechanisms.  Now, it places its
    configuration in a sub-field of that file, which is shared among
    all admission control plugins.

  * It mounted its various config files read-write.  I reviewed the
    code and couldn't see why it was necessary, so I moved the config
    files into the existing read-only mount at `/etc/srv/kubernetes`.

  * It now checks that all the configuration values it requires have
    been provided.

Co-authored-by: Mike Danese <mikedanese@google.com>
Co-authored-by: Taahir Ahmed <taahm@google.com>
2019-07-22 16:01:37 -07:00
Kubernetes Prow Robot
150448e163
Merge pull request #80341 from chenchun/fix-bind-unreserve
Calling Unreserve plugin before recordSchedulingFailure in case of bi…
2019-07-22 15:14:53 -07:00
Kubernetes Prow Robot
04c9bd9bfa
Merge pull request #80176 from liyanhui1228/cpuusage
Add CPU usage nano cores for windows nodes
2019-07-22 13:52:53 -07:00
Tim Allclair
9ba6fe8810 refactors to kubernetes cp command 2019-07-22 13:25:13 -07:00
Angela Li
8851a42655 gofmt 2019-07-22 10:56:28 -07:00
Angela Li
e6e8615db3 address comments 2019-07-22 10:53:15 -07:00
Kubernetes Prow Robot
0d2b85878d
Merge pull request #80402 from mjudeikis/generic.retry
make client-go/util/retry more generic
2019-07-22 10:52:53 -07:00