github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-24 12:15:52 +00:00
Code Issues Projects Releases Wiki Activity
94,392 Commits 42 Branches 7,905 Tags 1.3 GiB
d9bb58fc49
Commit Graph

94392 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
11793434da
Merge pull request #94712 from droslean/cred-leak 
[credentialprovider] avoid potential secret leaking while reading .dockercfg
 2020-09-14 09:41:36 -07:00
Kubernetes Prow Robot
3a42886dee
Merge pull request #94711 from jingyih/update_etcd 
Bump etcd to dd1b699fc489
 2020-09-14 09:41:27 -07:00
Kubernetes Prow Robot
5dd2676bf6
Merge pull request #94555 from SataQiu/fix-crisocket-warning-20200905 
Fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR
 2020-09-14 09:41:12 -07:00
Kubernetes Prow Robot
7ffc46924f
Merge pull request #94102 from neolit123/1.19-fix-etcd-700-perms 
kubeadm: adjust the logic around etcd data directory creation
 2020-09-14 09:40:59 -07:00
Kubernetes Prow Robot
3dc6f74d04
Merge pull request #94751 from sensesai/senses/fixLruCache 
Fix misusage of RLock in timeCache lru.Cache.Get()
 2020-09-14 08:11:12 -07:00
Kubernetes Prow Robot
1d2424969e
Merge pull request #93543 from liggitt/builder-example 
Add example of using resource builder to load a manifest file
 2020-09-14 08:10:59 -07:00
Nikolaos Moraitis
b907f9e118 avoid potential secret leaking while reading .dockercfg 
There are a lot of scenarios where an invalid .dockercfg file
will still contain secrets. This commit removes logging of the
contents to avoid any potential leaking and manages the actual error
by printing to the user the actual location of the invalid file.

Signed-off-by: Nikolaos Moraitis <nmoraiti@redhat.com>
 2020-09-14 15:39:05 +02:00
David Eads
82ed033ec9 clean up podpreset deprecated client 2020-09-14 09:24:41 -04:00
David Eads
c0c033b12f generated 2020-09-14 09:24:41 -04:00
David Eads
4172068d93 remove generated podpreset 2020-09-14 09:24:40 -04:00
David Eads
c7911a384c remove pod presets 2020-09-14 09:24:40 -04:00
Stephen Augustus
fc673df1e4 test/{images,utils/image}: Add justaugustus as reviewer 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-14 09:11:50 -04:00
Stephen Augustus
cca9a8c320 cluster/images: Add justaugustus as reviewer 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-14 09:09:05 -04:00
Stephen Augustus
8d665d8863 hack: Add justaugustus as reviewer 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-14 09:06:38 -04:00
Stephen Augustus
9f59625b4d .github: Add justaugustus as reviewer 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-14 09:05:04 -04:00
Kubernetes Prow Robot
9962577929
Merge pull request #94727 from mlevesquedion/fix/avoid-logging-kubeadm-tokens-before-deleting-them 
kubeadm: Avoid logging token in RunDeleteTokens
 2020-09-14 06:04:58 -07:00
zhanwang
ae03350e30
kubeadm init phase upload-certs: add flag --kubeconfig 2020-09-14 17:48:20 +08:00
Adrian Moreno
21b598cbe7 portforward: Fix UDP-only ports calculation 
If a service has both TCP and UDP but the TCP port appears before in the
range loop, it will be considered a UDP-only port and the forwarding
will fail.

Fix that by calculating the difference between UDP ports and TCP ports.

Signed-off-by: Adrian Moreno <amorenoz@redhat.com>
 2020-09-14 08:40:50 +02:00
andyzhangx
f15bb8d72e chore: add network rule support in Azure account creation 
set DefaultActionDeny

fix comments
 2020-09-14 03:42:58 +00:00
auxten
611ddc10b0 Fix misusage of RLock in timeCache lru.Cache.Get() 2020-09-13 21:08:19 +08:00
Pu Wang
40f2d1b8ff
e2e test support microk8s 
microk8s run kubelet service as `snap.microk8s.daemon-kubelet.service`, instead of `kubelet.service`.
so e2e should use `systemctl list-units *kubelet* --state=running` to find out kubelet service of microk8s.
 2020-09-13 16:11:50 +08:00
knight42
ce0a423ef7
test(iptables): deflake TestRestoreAllWaitOldIptablesRestore 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-12 22:43:44 +08:00
knight42
b25af8e3c9
feat(iptables): be able to override iptables-1.4-compatible lock path 2020-09-12 22:43:43 +08:00
Kubernetes Prow Robot
66334f02e8
Merge pull request #94731 from spiffxp/rm-http-ingress-gce-tests 
Remove tests related to HTTPS support for ingress-gce
 2020-09-12 04:08:56 -07:00
Kubernetes Prow Robot
e2ea2744d8
Merge pull request #94729 from dashpole/flaky_metrics 
Add retry for creating metrics grabber to fix test flakes
 2020-09-12 01:30:56 -07:00
Kubernetes Prow Robot
2cb951d78a
Merge pull request #91921 from mtaufen/said-beta 
Graduate ServiceAccountIssuerDiscovery to beta
 2020-09-11 23:30:57 -07:00
Kubernetes Prow Robot
a33f6b44e9
Merge pull request #94687 from karan/cfs-flag-warn 
Non-zero cfs quota period duration requires feature flag
 2020-09-11 22:28:57 -07:00
Mike Danese
94f4f06d13 test flake: fix data race in csi_test.go 
The attach goroutine can currently t.Log/t.Error during or after the
subtest completion. This causes races like:

```
==================
WARNING: DATA RACE
Read at 0x00c000e90ac3 by goroutine 1231:
  testing.(*common).logDepth()
      GOROOT/src/testing/testing.go:736 +0xa9
  testing.(*common).log()
      GOROOT/src/testing/testing.go:729 +0x8f
  testing.(*common).Logf()
      GOROOT/src/testing/testing.go:775 +0x21
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll.func21.1()
      pkg/volume/csi/csi_test.go:313 +0x1a4
Previous write at 0x00c000e90ac3 by goroutine 875:
  testing.tRunner.func1()
      GOROOT/src/testing/testing.go:1113 +0x484
  testing.tRunner()
      GOROOT/src/testing/testing.go:1131 +0x22a
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
Goroutine 1231 (running) created at:
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll.func21()
      pkg/volume/csi/csi_test.go:307 +0xf05
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
Goroutine 875 (running) created at:
  testing.(*T).Run()
      GOROOT/src/testing/testing.go:1178 +0x796
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll()
      pkg/volume/csi/csi_test.go:223 +0xb2c
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
==================
```

See also this comment:

07c1788357/src/testing/testing.go (L1141-L1142)

Noticed in:

https://github.com/kubernetes/kubernetes/pull/94449
https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/94449/pull-kubernetes-bazel-test/1304519003330318337
 2020-09-11 22:19:42 -07:00
Wei Huang
185ba08fcd
Move podPassesBasicChecks() to VolumeBinding plugin 2020-09-11 13:54:02 -07:00
Wei Huang
42cfda2f94
Remove pvcLister from genericScheduler 
PVCLister can be fetched from sharedInformerFactory.
 2020-09-11 13:54:01 -07:00
David Ashpole
20863a8b43 add retry for creating metrics grabber to fix test flakes 2020-09-11 13:52:45 -07:00
Aaron Crickenberger
deffddbfb5 Remove tests related to HTTPS support for ingress-gce 2020-09-11 13:32:27 -07:00
Mike Danese
bdadb2a187 make kube::util::find-binary not dependent on bazel-out/ structure 
Implement an aspect that outputs go_build_mode metadata for go binaries,
and use that during binary selection.
 2020-09-11 13:19:38 -07:00
Mike Danese
d182ecc1f9 output go_binary rule directly from go_binary_conditional_pure 
And same for go_test_conditional_pure.

Instead of aliasing. Aliases are annoying in a number of ways. This is
specifically bugging me now because they make the action graph harder to
analyze programmatically. By using aliases here, we would need to handle
potentially aliased go_binary targets and dereference to the effective
target.

The comment references an issue with `pure = select(...)` which appears
to be resolved considering this now builds.
 2020-09-11 13:19:37 -07:00
Mike Danese
5a72bb001f hack/lib/util.sh: some bash cleanups 
* switched one spot to use kube::logging
* make kube::util::find-binary return an error when it doesn't find
  anything so that hack scripts fail fast instead of with '' binary not
  found errors.
  * this required deleting some genfeddoc stuff. the binary no longer
    exists in k/k repo since we removed federation/, and I don't see it
    in https://github.com/kubernetes-sigs/kubefed/ either. I'm assuming
    that it's gone for good now.
 2020-09-11 13:19:37 -07:00
Stephen Augustus
bb1855bf11 bazel: Replace --features with Starlark build settings flag 
All --features and --define flags
Deprecated in: 0.23.0
To be removed in: 0.25.0

ref: https://github.com/bazelbuild/rules_go/wiki/Deprecation-schedule

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-11 13:19:37 -07:00
Stephen Augustus
2ff22026d5 [go1.15] staging/publishing: Set default go version to go1.15.2 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-11 13:15:19 -07:00
Stephen Augustus
eb61cf27fe [go1.15] build: Use go-runner:buster-v2.0.1 (built using go1.15.1) 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-11 13:15:15 -07:00
Stephen Augustus
a4a98f440c [go1.15] Update to go1.15.2 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-11 13:15:12 -07:00
Stephen Augustus
01a0c45f4a [go1.15] hack/tools: Update to k/repo-infra@v0.1.1 (supports go1.15.2) 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-11 13:15:08 -07:00
Stephen Augustus
ebd8ccc6bb [go1.15] build: Update to k/repo-infra@v0.1.1 (supports go1.15.2) 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-11 13:14:43 -07:00
Kubernetes Prow Robot
1b8c7585f3
Merge pull request #94726 from pradvenkat/gpu-device-plugin-addon 
gpu device plugin uses EnsureExists addon mode
 2020-09-11 13:04:09 -07:00
Michael Taufen
4f850f97de Graduate ServiceAccountIssuerDiscovery to beta 2020-09-11 12:01:47 -07:00
Kubernetes Prow Robot
491e419760
Merge pull request #94462 from joakimr-axis/joakimr-axis_util.sh_yaml-quote 
Fix some shellcheck warnings/errors in cluster/gce/util.sh
 2020-09-11 11:56:09 -07:00
Kubernetes Prow Robot
360659102c
Merge pull request #94702 from huikang/fix-minor-comment 
Fix minor comment in a script
 2020-09-11 10:48:23 -07:00
Michaël Lévesque-Dion
fbd62d55af avoid logging token in RunDeleteTokens 2020-09-11 13:28:52 -04:00
Pradeep Venkatachalam
00ecbcc866 gpu device plugin uses EnsureExists addon mode 2020-09-11 10:19:57 -07:00
Kubernetes Prow Robot
77f349ea17
Merge pull request #94704 from lavalamp/big-rename 
rename some files
 2020-09-11 09:50:22 -07:00
Karan Goel
a49760bfce Non-zero cfs quota period duration requires feature flag 2020-09-11 08:00:05 -07:00
Maciej Szulik
eec4a04c2d
Use namespace flag passed to RunKubectl* methods 2020-09-11 14:51:03 +02:00