Commit Graph

95357 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
3662e1e344
Merge pull request #96025 from haircommander/fix-API_PORT
hack/local-up-cluster.sh: fix API_PORT
2020-10-29 21:04:15 -07:00
Kubernetes Prow Robot
d0bee69fc9
Merge pull request #94636 from hprateek43/cpu_threads_parameter
Added config parameter for CPU threads
2020-10-29 21:04:05 -07:00
cici37
9465d95ea6 Move CCM to staging k8s.io/cloud-provider 2020-10-29 20:50:23 -07:00
Shihang Zhang
ff641f6eb2 mv TokenRequest and TokenRequestProjection to GA 2020-10-29 20:47:01 -07:00
Tim Hockin
a4c9330683 Populate ClusterIPs on read
Old stored services will not have the `clusterIPs` field when read back
without this.

This includes some renaming for clarity and expanded comments, and a new
test for default on read.
2020-10-29 20:40:39 -07:00
Kubernetes Prow Robot
ad6a2af7d8
Merge pull request #95531 from damemi/move-scheduler-helpers
Move MatchNodeSelectorTerms to k8s.io/component-helpers
2020-10-29 20:06:05 -07:00
andyzhangx
e88be95471 test: remove flacky ut 2020-10-30 03:01:23 +00:00
Stephen Heywood
f005b3a5f7 Add json-response flag to porter
Provides a response that includes a body and a method. This response
will enable a client (e2e test) to confirm that a proxy did not alter
the http method.
2020-10-30 14:48:16 +13:00
Kubernetes Prow Robot
f99ad43dbb
Merge pull request #95575 from oomichi/remove-non-ascii-20201014
Replace non-ascii string under test/
2020-10-29 18:36:18 -07:00
Kubernetes Prow Robot
53913a7c67
Merge pull request #95489 from ankeesler/ankeesler/enj/f/exec_plugin_cluster
exec credential provider: wire in cluster info (superset of #91192)
2020-10-29 18:36:05 -07:00
Kubernetes Prow Robot
ba75a6dbd7
Merge pull request #96012 from khenidak/clusterIPs-labeling
add tests that update services while gate is off
2020-10-29 17:40:45 -07:00
Kubernetes Prow Robot
4d4570979a
Merge pull request #95982 from masap/local_up_cluster1
local-up-cluster.sh: Pass SERVICE_CLUSTER_IP_RANGE to controller manager
2020-10-29 17:40:36 -07:00
Kubernetes Prow Robot
a71334b64c
Merge pull request #95925 from deads2k/doc-events
Event: Document TTL and best-effort-ness
2020-10-29 17:40:22 -07:00
Kubernetes Prow Robot
e91cb0b1b5
Merge pull request #95196 from thockin/auto-wipe-linked-service-fields
Automatically wipe dependent fields on service "type" updates
2020-10-29 17:40:06 -07:00
Hugo Fonseca
0794bf65bc HTTP Probe: Add 'Accept' header by default
When using a HTTP probe, the request will now have a "Accept" header by default with the "*/*" (accept all)
Most tools do add this header (see curl) so it's a reasonable expectation that http probe has it as well
2020-10-30 00:32:49 +00:00
Kubernetes Prow Robot
3b51cd1b1e
Merge pull request #95207 from tkashem/apf-filter-latency
Add a new metric to measure apiserver request filter latency
2020-10-29 15:42:05 -07:00
Abu Kashem
62431047b4
Enable filter latency tracking for request filters
Enable filter latency tracking for the following request filters:
- apf (priority and fairness)
- authentication
- authorization
- impersonation
- audit
2020-10-29 17:31:05 -04:00
Abu Kashem
99df0b1581
Measure how much time a request spends in server filter(s):
- A: the timestamp a particular filter starts executing for a request.
- B: the timestamp the particular filter has completed and the next handler
     in the chain has started executing.

We define filter latency as `B - A`. Introduce a new metric to track filter latency:
"apiserver_request_filter_duration_seconds"
This measures request filter latency distribution in seconds, for each filter type.
2020-10-29 17:30:53 -04:00
Peter Hunt
174548659f hack/local-up-cluster.sh: fix API_PORT
commit kubernetes/kubernetes@cfc2b33 causes a local cluster to not come up because it sets the default insecure port to 8080, which is no longer valid

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2020-10-29 17:17:58 -04:00
Kubernetes Prow Robot
5ee72a49cb
Merge pull request #94066 from lojies/auditlogcompress
add audit-log-compress to apiserver
2020-10-29 14:16:06 -07:00
Andrew Keesler
409f22832a
exec credential provider: exec -> client.authentication.k8s.io/exec
Hopefully we've fixed all of these references now...

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-29 17:02:55 -04:00
Ricardo Pchevuzinske Katz
912d9673cb kubectl flush profiling when get a sigterm
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@gmail.com>
2020-10-29 17:15:12 -03:00
Chris Henzie
830d7cecd7 Cleanup non-namespaced objects in e2e test during interrupts 2020-10-29 13:12:23 -07:00
Kubernetes Prow Robot
26c8ce57a5
Merge pull request #95915 from wojtek-t/progress_notify_frequency
Allow configuring etcd progress notify interval on GCE
2020-10-29 12:58:06 -07:00
cici37
a91a2cdad6 Move informer_factory to staging 2020-10-29 12:20:33 -07:00
Jefftree
4d979f6f12 Remove behaviors 2020-10-29 12:05:54 -07:00
Khaled (Kal) Henidak
7bdc244f4a add tests that update services while gate is off 2020-10-29 18:59:48 +00:00
Marek Siarkowicz
4b29b03573 Add datapolicy tags to staging/src/k8s.io/kubectl 2020-10-29 19:48:42 +01:00
Marek Siarkowicz
6c7132b284 Add datapolicy tags to staging/src/k8s.io/legacy-cloud-providers 2020-10-29 19:47:32 +01:00
Rahul Joshi
f32f46829c Mark SecondaryRangeName as deprecated. 2020-10-29 11:47:18 -07:00
Kubernetes Prow Robot
1968e96165
Merge pull request #95856 from knight42/refactor/disable-apiserver-insecure-port
refactor(apiserver): disable insecure port
2020-10-29 10:47:58 -07:00
Mike Dame
b7ba77c25b Move MatchNodeSelectorTerms to k8s.io/component-helpers 2020-10-29 13:39:13 -04:00
Andrew Keesler
875a46bd7c
exec credential provider: k8s.io/client-go/tools/auth/exec helper
Exec plugin implementations should be able to call
LoadExecCredentialFromEnv() in order to get everything they need to
operate (i.e., cluster information (as long as it is passed in) and
optionally per-cluster configuration).

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-29 13:38:50 -04:00
Andrew Keesler
c4299d15d5
exec credential provider: ProvideClusterInfo and kubeconfig shadow
- The main idea here is that we want to 1) prevent potentially large CA
  bundles from being set in an exec plugin's environment and 2) ensure
  that the exec plugin is getting everything it needs in order to talk to
  a cluster.
- Avoid breaking existing manual declarations of rest.Config instances by
  moving exec Cluster to kubeconfig internal type.
- Use client.authentication.k8s.io/exec to qualify exec cluster extension.
- Deep copy the exec Cluster.Config when we copy a rest.Config.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-10-29 13:38:42 -04:00
wojtekt
a19f528351 Remove FieldMatchingFlags 2020-10-29 18:25:51 +01:00
wojtekt
7d5b96d5fc Adjust conversion generator to new converter changes 2020-10-29 18:25:51 +01:00
Marek Siarkowicz
d5f857be6e Add datapolicy tags to staging/src/k8s.io/kube-aggregator/ 2020-10-29 18:13:55 +01:00
Kubernetes Prow Robot
917dcbabe1
Merge pull request #95985 from saschagrunert/psp-seccomp-annotation-fix
Fix seccomp PSP docker/default annotation handling
2020-10-29 09:10:59 -07:00
Maciej Szulik
7c8e4c83fb
kubeconfig: add explicit path, if specified to loading precedence 2020-10-29 16:45:10 +01:00
Maciej Szulik
9a4dfec2be
Introduce api-extensions category in k8s apiserver
This category includes:
1. mutating admission configs
2. validating admission configs
3. CRDs
4. APIServices
2020-10-29 16:44:26 +01:00
knight42
cfc2b330a7
refactor(apiserver): ignore the insecure flags
Leave the insecure flags intact but stop serving on insecure port.
2020-10-29 23:20:17 +08:00
wojtekt
eb63da77ea Allow for configuring etcd progress notify interval on GCE 2020-10-29 15:43:51 +01:00
Sascha Grunert
5588f025e2
Fix seccomp PSP docker/default annotation handling
With the graduation of seccomp to GA we automatically convert the
deprecated seccomp profile annotation `docker/default` to
`runtime/default`. This means that we now have to automatically allow
`runtime/default` if a user specifies `docker/default` and vice versa in
an allowed PSP seccomp profile.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-10-29 14:08:14 +01:00
Kubernetes Prow Robot
2729b8e375
Merge pull request #95871 from damemi/move-unchanged-scheduler-helpers
Change function signature for MatchNodeSelectorTerms
2020-10-29 04:18:59 -07:00
Masashi Honma
8e84f3d78d local-up-cluster.sh: Pass SERVICE_CLUSTER_IP_RANGE to controller manager
Previously, SERVICE_CLUSTER_IP_RANGE was passed only to kube-apiserver.

Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
2020-10-29 17:47:19 +09:00
10177505
a0a79f4fe0 fix kubectl debug link error 2020-10-29 15:50:30 +08:00
Harsh Singh
1763688d71 Added config parameter for CPU threads 2020-10-29 12:16:10 +05:30
Kubernetes Prow Robot
518b826b1d
Merge pull request #95962 from xing-yang/manifests_owners
Update testing-manifests/storage-csi owners file
2020-10-28 23:36:59 -07:00
Rob Scott
2c7d186669
Updating EndpointSliceMirroring e2e test to accept multiple slices
Due to informer caching, this caused some flaky test failures.
2020-10-28 22:49:17 -07:00
Kubernetes Prow Robot
7a20fcf6ef
Merge pull request #95890 from barney-s/winlog_add_fluentd
If image has stack driver agent installed, use it.
2020-10-28 22:42:59 -07:00