Tim Hockin
9ed6b73495
kube-proxy: comment endpoint in SEP jumps
2022-03-30 09:55:34 -07:00
Tim Hockin
0e47dc3a65
kube-proxy: remove old TODO
2022-03-30 09:55:33 -07:00
Tim Hockin
30c1523708
kube-proxy: Renames for readability
2022-03-30 09:55:32 -07:00
Tim Hockin
f1553f58c5
kube-proxy: Remove now unneeded rule
...
Now that NodePorts jump to EXT, we don't need a specific rule for
loopback source detection.
2022-03-30 09:54:40 -07:00
Tim Hockin
db932a0ab1
kube-proxy: Rework LB VIP capture logic
...
* Comments
* If there are multiple VIPs, don't declare the fwChain multiple times.
* Don't emit the last -j DROP if there's no source ranges
2022-03-30 09:54:40 -07:00
Tim Hockin
07b2585927
kube-proxy: Rename XLB -> EXT
...
This changes the "XLB" chain into the "EXT" chain - the "external
destinations" chain.
2022-03-30 09:54:38 -07:00
Tim Hockin
482f3bc4bf
kube-proxy: all external jumps to XLB chain
...
This makes the "destination" policy model clearer. All external
destination captures now jump to the "XLB chain, which is the main place
that masquerade is done (removing it from most other places).
This is simpler to trace - XLB *always* exists (as long as you have an
external exposure) and never gets bypassed.
2022-03-30 09:52:18 -07:00
SataQiu
9ac1b4b68f
remove unused option deployment-controller-sync-period for deployment controller
2022-03-30 20:00:53 +08:00
Kubernetes Prow Robot
2e55595d3b
Merge pull request #109137 from wojtek-t/fix_multiple_values_indexer
...
Fix issues in indexer caused by object changing the number of index values
2022-03-30 04:04:28 -07:00
Kubernetes Prow Robot
cb6ca16d47
Merge pull request #109134 from pacoxu/patch-8
...
TestPreShutdownHooks: change timeout to 200ms
2022-03-30 01:20:26 -07:00
Paco Xu
99c447ff0e
TestPreShutdownHooks: change timeout to 1s
2022-03-30 15:12:44 +08:00
Michael Bolot
cbbb5f70a4
Addresses the issue which caused #109115
2022-03-30 09:07:37 +02:00
Wojciech Tyczyński
56159f258c
Add test for indexer with multiple values
2022-03-30 08:52:10 +02:00
Kubernetes Prow Robot
ba1bbb5ac6
Merge pull request #109128 from Jefftree/openapiv3-metrics
...
Add metrics for OpenAPI v3 generation
2022-03-29 20:37:48 -07:00
Kubernetes Prow Robot
e4690b0fbc
Merge pull request #109123 from dims/switch-to-pause-3.7
...
Switch to pause 3.7 for Kubernetes 1.24
2022-03-29 20:37:39 -07:00
Kubernetes Prow Robot
cbc341575a
Merge pull request #109122 from jpbetz/runtime-limit-tightening
...
Reduce CEL runtime cost limits by 1/2 based on latency goals
2022-03-29 20:37:29 -07:00
Kubernetes Prow Robot
c7fc0f9125
Merge pull request #109120 from kevindelgado/ss-validation-metrics
...
Track field validation in metrics
2022-03-29 20:37:20 -07:00
Kubernetes Prow Robot
7fba4f75c5
Merge pull request #109107 from liggitt/deprecated-cert-audit
...
Add audit annotations and log prefixes to deprecated cert warnings
2022-03-29 20:37:09 -07:00
Kubernetes Prow Robot
fe4cbf6514
Merge pull request #109104 from kolyshkin/bump-runc-1.1.1
...
vendor: bump runc to 1.1.1
2022-03-29 20:36:59 -07:00
Kubernetes Prow Robot
6358d36fbf
Merge pull request #109102 from liggitt/darwin-tls
...
Tolerate additional error messages in TLS unit tests
2022-03-29 20:36:50 -07:00
Kubernetes Prow Robot
9e65ee3908
Merge pull request #109097 from pacoxu/fix-sig-node-failures
...
remove baseline pod security in host pid sharing testing
2022-03-29 20:36:37 -07:00
Kubernetes Prow Robot
904c30562a
Merge pull request #109031 from Jefftree/openapiv3beta
...
OpenAPI V3 Enable Beta
2022-03-29 20:36:25 -07:00
Kubernetes Prow Robot
0c5574c2a3
Merge pull request #108745 from aramase/aes-gcm
...
feat: prepare KMS data encryption for migration to AES-GCM
2022-03-29 19:28:25 -07:00
Tim Hockin
dd0fc6b354
kube-proxy: print line number for test failures
2022-03-29 18:48:27 -07:00
Tim Hockin
ef959f00af
kube-proxy: clean up tests
...
No functional changes, much whitespace.
Make assertIPTablesRulesEqual() *not* sort the `expected` value - make
the test cases all be pre-sorted. This will make followup commits
cleaner.
Make the test output cleaner when this fails.
Use dedent everywhere for easier reading.
2022-03-29 18:48:27 -07:00
Tim Hockin
99330d407a
kube-proxy: internal renames
2022-03-29 18:48:27 -07:00
Jefftree
8e88d46210
Switch beta flag on
2022-03-29 17:49:56 -07:00
Jefftree
f0837c18d3
Add conversion if APIService does not publish v3
2022-03-29 17:49:56 -07:00
Jefftree
67d3dbfaae
Separate OpenAPI V2 and V3 Config
2022-03-29 17:49:56 -07:00
Jefftree
9d42879d2c
Update tests for kube-openapi upgrade
2022-03-29 17:49:56 -07:00
Jefftree
52af96c89c
generated: Update OpenAPI
2022-03-29 17:49:56 -07:00
Jefftree
550d6383b5
generated: Update kube-openapi and vendor
2022-03-29 17:47:26 -07:00
Anish Ramasekar
90b42f91fd
feat: prepare KMS data encryption for migration to AES-GCM
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: Monis Khan <mok@vmware.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-03-30 00:37:42 +00:00
Kubernetes Prow Robot
699aeb735f
Merge pull request #109092 from kolyshkin/mock-1.6.0
...
vendor: bump golang/mock to 1.6.0
2022-03-29 17:36:16 -07:00
Brian Pursley
3fbd5e5e0e
Add printer benchmarks ( #109085 )
...
* Code cleanup
- Remove redundant parentheses.
- Remove unnecessary type conversion of string to string.
- Fix wrong function name in comment.
* Add printer benchmarks
2022-03-29 17:36:07 -07:00
Kubernetes Prow Robot
5b8dbfbbcf
Merge pull request #108995 from pohly/log-contextual
...
contextual logging
2022-03-29 17:35:59 -07:00
Kubernetes Prow Robot
1ff499ac13
Merge pull request #108994 from KnVerey/kustomize-453
...
Update kubectl kustomize to v4.5.4
2022-03-29 17:35:51 -07:00
Kubernetes Prow Robot
4b3ddcf793
Merge pull request #108909 from saschagrunert/wip-crio
...
Inject SSH public key into CRI-O serial prow jobs
2022-03-29 17:35:42 -07:00
Kubernetes Prow Robot
b0254c8a0b
Merge pull request #108758 from fengzixu/improvement-volume-health
...
re-push "add volume kubelet_volume_stats_health_abnormal to kubelet #105585 "
2022-03-29 17:35:34 -07:00
Kubernetes Prow Robot
9fe98d8bab
Merge pull request #108736 from NetApp/any-volume-data-source-beta
...
Update AnyVolumeDataSource feature gate to beta
2022-03-29 17:35:25 -07:00
Kubernetes Prow Robot
92c30bf6bd
Merge pull request #108724 from sanposhiho/cycle-state
...
use `sync.Map` in CycleState for better performance
2022-03-29 17:35:13 -07:00
Kubernetes Prow Robot
1266744002
Merge pull request #108693 from gnufied/enable-rwx-call-all-nodes
...
Enable node-expansion to be called on all nodes for RWX volumes
2022-03-29 17:35:05 -07:00
Kubernetes Prow Robot
57a739bdf2
Merge pull request #108691 from andrewsykim/proxy-terminating-endpoints
...
Apply ProxyTerminatingEndpoints to all traffic policies
2022-03-29 17:34:57 -07:00
Kubernetes Prow Robot
1cddd38956
Merge pull request #108256 from bertinatto/kubelet-attach-detach
...
Update EnableControllerAttachDetach documentation
2022-03-29 17:34:49 -07:00
Kubernetes Prow Robot
faf7ad6120
Merge pull request #108146 from marosset/windows-kubelet-elevated-check
...
Fixing logic for kubelet permissions check on windows
2022-03-29 17:34:40 -07:00
Kubernetes Prow Robot
33f56203e3
Merge pull request #108033 from tkashem/pre-shutdown-hook
...
apiserver: stop http server after pre shutdown hooks
2022-03-29 17:34:32 -07:00
Kubernetes Prow Robot
0f2300575c
Merge pull request #108032 from deejross/kep3140-cronjob-timezone
...
KEP 3140: TimeZone support for CronJob
2022-03-29 17:34:20 -07:00
Kubernetes Prow Robot
d429c9820e
Merge pull request #106824 from lauchokyip/removeExposeGenerator
...
Remove generator dependency of expose.go
2022-03-29 17:34:07 -07:00
Davanum Srinivas
89b1accf4d
switch owner for CERT_DIR
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-29 20:04:33 -04:00
Kubernetes Prow Robot
dd1e43332a
Merge pull request #107476 from alculquicondor/job-ready
...
Graduate JobReadyPods to beta
2022-03-29 16:08:06 -07:00