Commit Graph

107706 Commits

Author SHA1 Message Date
Jordan Liggitt
a6da995405 Update docker/distribution to 2.8.1 to fix checksum error 2022-03-30 18:25:47 -04:00
Kubernetes Prow Robot
c0e7b15c75
Merge pull request #109112 from dims/prune-junit-xml-files
Prune junit xml files to avoid issues with test grid.
2022-03-30 14:50:08 -07:00
Kubernetes Prow Robot
f33b88fe62
Merge pull request #108815 from cici37/updateComm
Update comments to reduce confusion
2022-03-30 14:49:56 -07:00
Kubernetes Prow Robot
5223c1efef
Merge pull request #97081 from Nordix/issue-93456
Ipvs: non-local access to externalTrafficPolicy:Local
2022-03-30 13:37:56 -07:00
Kubernetes Prow Robot
64c5ed3804
Merge pull request #109084 from dims/add-some-sudo-in-local-up-cluster
Add some sudo in local-up-cluster.sh
2022-03-30 10:58:35 -07:00
Kubernetes Prow Robot
d4ac0ebecb
Merge pull request #109072 from jiahuif-forks/feature/leader-migration/to-ga
Graduate Leader Migration to GA
2022-03-30 10:58:24 -07:00
Davanum Srinivas
d20df79545
prune junit xml files in ci harness
Over time the size of our junit xml has exploded to the point where
test-grid fails to process them. We still have the original/full
*.stdout files from where the junit xml files are generated from so the
junit xml files need NOT have the fill/exact output for
processing/display. So let us prune the large messages with an
indicator that we have "[... clipped...]" some of the content so folks
can see that they have to consult the full *.stdout files.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Davanum Srinivas
917c361880
Add a utility to prune junit xml files
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-30 12:58:43 -04:00
Tim Hockin
40e21e310f Elide the -FW- chain when possible
This makes it epsilon harder to reason about but saves one chain
declaration and one rule per service-port usually.
2022-03-30 09:55:34 -07:00
Tim Hockin
7726b5f9fc kube-proxy: inline args in most cases 2022-03-30 09:55:34 -07:00
Tim Hockin
c4271c9a6f Rename tests to avoid underscores 2022-03-30 09:55:34 -07:00
Tim Hockin
9ed6b73495 kube-proxy: comment endpoint in SEP jumps 2022-03-30 09:55:34 -07:00
Tim Hockin
0e47dc3a65 kube-proxy: remove old TODO 2022-03-30 09:55:33 -07:00
Tim Hockin
30c1523708 kube-proxy: Renames for readability 2022-03-30 09:55:32 -07:00
Tim Hockin
f1553f58c5 kube-proxy: Remove now unneeded rule
Now that NodePorts jump to EXT, we don't need a specific rule for
loopback source detection.
2022-03-30 09:54:40 -07:00
Tim Hockin
db932a0ab1 kube-proxy: Rework LB VIP capture logic
* Comments
* If there are multiple VIPs, don't declare the fwChain multiple times.
* Don't emit the last -j DROP if there's no source ranges
2022-03-30 09:54:40 -07:00
Tim Hockin
07b2585927 kube-proxy: Rename XLB -> EXT
This changes the "XLB" chain into the "EXT" chain - the "external
destinations" chain.
2022-03-30 09:54:38 -07:00
Tim Hockin
482f3bc4bf kube-proxy: all external jumps to XLB chain
This makes the "destination" policy model clearer.  All external
destination captures now jump to the "XLB chain, which is the main place
that masquerade is done (removing it from most other places).

This is simpler to trace - XLB *always* exists (as long as you have an
external exposure) and never gets bypassed.
2022-03-30 09:52:18 -07:00
SataQiu
9ac1b4b68f remove unused option deployment-controller-sync-period for deployment controller 2022-03-30 20:00:53 +08:00
Kubernetes Prow Robot
2e55595d3b
Merge pull request #109137 from wojtek-t/fix_multiple_values_indexer
Fix issues in indexer caused by object changing the number of index values
2022-03-30 04:04:28 -07:00
Kubernetes Prow Robot
cb6ca16d47
Merge pull request #109134 from pacoxu/patch-8
TestPreShutdownHooks: change timeout to 200ms
2022-03-30 01:20:26 -07:00
Paco Xu
99c447ff0e TestPreShutdownHooks: change timeout to 1s 2022-03-30 15:12:44 +08:00
Michael Bolot
cbbb5f70a4 Addresses the issue which caused #109115 2022-03-30 09:07:37 +02:00
Wojciech Tyczyński
56159f258c Add test for indexer with multiple values 2022-03-30 08:52:10 +02:00
Kubernetes Prow Robot
ba1bbb5ac6
Merge pull request #109128 from Jefftree/openapiv3-metrics
Add metrics for OpenAPI v3 generation
2022-03-29 20:37:48 -07:00
Kubernetes Prow Robot
e4690b0fbc
Merge pull request #109123 from dims/switch-to-pause-3.7
Switch to pause 3.7 for Kubernetes 1.24
2022-03-29 20:37:39 -07:00
Kubernetes Prow Robot
cbc341575a
Merge pull request #109122 from jpbetz/runtime-limit-tightening
Reduce CEL runtime cost limits by 1/2 based on latency goals
2022-03-29 20:37:29 -07:00
Kubernetes Prow Robot
c7fc0f9125
Merge pull request #109120 from kevindelgado/ss-validation-metrics
Track field validation in metrics
2022-03-29 20:37:20 -07:00
Kubernetes Prow Robot
7fba4f75c5
Merge pull request #109107 from liggitt/deprecated-cert-audit
Add audit annotations and log prefixes to deprecated cert warnings
2022-03-29 20:37:09 -07:00
Kubernetes Prow Robot
fe4cbf6514
Merge pull request #109104 from kolyshkin/bump-runc-1.1.1
vendor: bump runc to 1.1.1
2022-03-29 20:36:59 -07:00
Kubernetes Prow Robot
6358d36fbf
Merge pull request #109102 from liggitt/darwin-tls
Tolerate additional error messages in TLS unit tests
2022-03-29 20:36:50 -07:00
Kubernetes Prow Robot
9e65ee3908
Merge pull request #109097 from pacoxu/fix-sig-node-failures
remove baseline pod security in host pid sharing testing
2022-03-29 20:36:37 -07:00
Kubernetes Prow Robot
904c30562a
Merge pull request #109031 from Jefftree/openapiv3beta
OpenAPI V3 Enable Beta
2022-03-29 20:36:25 -07:00
Zhecheng Li
349900472a Avoid updating Services with stale specs
Fix the bug that service specs in servicesToUpdate may have been
updated by clients.

Signed-off-by: Zhecheng Li <zhechengli@microsoft.com>
2022-03-30 11:26:50 +08:00
Kubernetes Prow Robot
0c5574c2a3
Merge pull request #108745 from aramase/aes-gcm
feat: prepare KMS data encryption for migration to AES-GCM
2022-03-29 19:28:25 -07:00
Tim Hockin
dd0fc6b354 kube-proxy: print line number for test failures 2022-03-29 18:48:27 -07:00
Tim Hockin
ef959f00af kube-proxy: clean up tests
No functional changes, much whitespace.

Make assertIPTablesRulesEqual() *not* sort the `expected` value - make
the test cases all be pre-sorted.  This will make followup commits
cleaner.

Make the test output cleaner when this fails.

Use dedent everywhere for easier reading.
2022-03-29 18:48:27 -07:00
Tim Hockin
99330d407a kube-proxy: internal renames 2022-03-29 18:48:27 -07:00
Jefftree
8e88d46210 Switch beta flag on 2022-03-29 17:49:56 -07:00
Jefftree
f0837c18d3 Add conversion if APIService does not publish v3 2022-03-29 17:49:56 -07:00
Jefftree
67d3dbfaae Separate OpenAPI V2 and V3 Config 2022-03-29 17:49:56 -07:00
Jefftree
9d42879d2c Update tests for kube-openapi upgrade 2022-03-29 17:49:56 -07:00
Jefftree
52af96c89c generated: Update OpenAPI 2022-03-29 17:49:56 -07:00
Jefftree
550d6383b5 generated: Update kube-openapi and vendor 2022-03-29 17:47:26 -07:00
Anish Ramasekar
90b42f91fd
feat: prepare KMS data encryption for migration to AES-GCM
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: Monis Khan <mok@vmware.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-03-30 00:37:42 +00:00
Kubernetes Prow Robot
699aeb735f
Merge pull request #109092 from kolyshkin/mock-1.6.0
vendor: bump golang/mock to 1.6.0
2022-03-29 17:36:16 -07:00
Brian Pursley
3fbd5e5e0e
Add printer benchmarks (#109085)
* Code cleanup

- Remove redundant parentheses.
- Remove unnecessary type conversion of string to string.
- Fix wrong function name in comment.

* Add printer benchmarks
2022-03-29 17:36:07 -07:00
Kubernetes Prow Robot
5b8dbfbbcf
Merge pull request #108995 from pohly/log-contextual
contextual logging
2022-03-29 17:35:59 -07:00
Kubernetes Prow Robot
1ff499ac13
Merge pull request #108994 from KnVerey/kustomize-453
Update kubectl kustomize to v4.5.4
2022-03-29 17:35:51 -07:00
Kubernetes Prow Robot
4b3ddcf793
Merge pull request #108909 from saschagrunert/wip-crio
Inject SSH public key into CRI-O serial prow jobs
2022-03-29 17:35:42 -07:00