Kubernetes Prow Robot
e14ace9287
Merge pull request #107806 from mauriciopoppe/csi-proxy-additional-flags-kube-up
...
Env var for additional flags sent to the csi-proxy binary
2022-02-17 16:15:00 -08:00
Kubernetes Prow Robot
2134e971a6
Merge pull request #107684 from aojea/nodePortsOnLocalhost
...
kube-proxy: only set route_localnet if required
2022-02-17 16:14:48 -08:00
Kubernetes Prow Robot
3d4f59416e
Merge pull request #108192 from SergeyKanzhelev/no-docker-install-needed
...
remove docker installation from startup scripts
2022-02-17 15:01:33 -08:00
Kubernetes Prow Robot
8b249ca5c4
Merge pull request #108179 from serathius/patch-2
...
Add serathius to etcd image owners
2022-02-17 15:01:26 -08:00
Kubernetes Prow Robot
ab97735dbf
Merge pull request #108169 from deads2k/fix-rest-handlers
...
convert rest storage to per-resource part 1 of...?
2022-02-17 15:01:14 -08:00
Kubernetes Prow Robot
0cfb5ccd6a
Merge pull request #107725 from neolit123/1.24-kubeadm-improve-strict-validation
...
kubeadm: improve the strict unmarshaling of component config
2022-02-17 15:01:02 -08:00
Kubernetes Prow Robot
d6087e7409
Merge pull request #108122 from sanposhiho/fix-broken-link-commonsh
...
Fix broken link for common.sh
2022-02-17 13:55:04 -08:00
Antonio Ojea
8b5fa408e0
kube-proxy: only set route_localnet if required
...
kube-proxy sets the sysctl net.ipv4.conf.all.route_localnet=1
so NodePort services can be accessed on the loopback addresses in
IPv4, but this may present security issues.
Leverage the --nodeport-addresses flag to opt-out of this feature,
if the list is not empty and none of the IP ranges contains an IPv4
loopback address this sysctl is not set.
In addition, add a warning to inform users about this behavior.
2022-02-17 20:20:31 +01:00
Kubernetes Prow Robot
3e60727f75
Merge pull request #108174 from stevekuznetsov/skuznets/transformer-context
...
storage: transformers: pass a context.Context
2022-02-17 09:45:37 -08:00
Lubomir I. Ivanov
ee5c927f06
kubeadm: improve strict validation for configuration
...
- Modify VerifyUnmarshalStrict to use serializer/json instead
of sigs.k8s.io/yaml. In strict mode, the serializers
in serializer/json use the new sigs.k8s.io/json library
that also catches case sensitive errors for field names -
e.g. foo vs Foo. Include test case for that in strict/testdata.
- Move the hardcoded schemes to check to the side of the
caller - i.e. accept a slice of runtime.Scheme.
- Move the klog warnings outside of VerifyUnmarshalStrict
and make them the responsibility of the caller.
- Call VerifyUnmarshalStrict when downloading the configuration
from kubeadm-config or the kube-proxy or kubelet-config CMs.
This validation is useful if the user has manually patched the CMs.
2022-02-17 19:37:41 +02:00
Steve Kuznetsov
27312feb99
storage: transformers: pass a context.Context
...
When an envelope transformer calls out to KMS (for instance), it will be
very helpful to pass a `context.Context` to allow for cancellation. This
patch does that, while passing the previously-expected additional data
via a context value.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2022-02-17 08:31:31 -08:00
Kubernetes Release Robot
0e1a62963b
CHANGELOG: Update directory for v1.23.4 release
2022-02-17 16:24:24 +00:00
Kubernetes Release Robot
1f19c7d8a1
CHANGELOG: Update directory for v1.22.7 release
2022-02-17 16:17:20 +00:00
Kubernetes Release Robot
f7f18d719c
CHANGELOG: Update directory for v1.21.10 release
2022-02-17 16:07:42 +00:00
Kubernetes Prow Robot
6de9dddf94
Merge pull request #106539 from dgrisonnet/rest-client-latency
...
Replace url label in rest client latency metrics by host and path
2022-02-17 06:09:36 -08:00
Marek Siarkowicz
5f7ff4d18b
Add serathius to etcd image owners
2022-02-17 10:25:47 +01:00
Kubernetes Prow Robot
e777f72163
Merge pull request #108165 from wojtek-t/stop_printing_selflink_from_kubectl
...
Stop setting selfLink in kubectl
2022-02-17 01:17:35 -08:00
Sergey Kanzhelev
19a01fa8c6
remove docker installation from everywhere
2022-02-17 08:02:13 +00:00
Kevin Delgado
df2768123d
FieldValidation tests for endpoints apiserver and benchmarks for integration tests ( #107848 )
...
* wip, working post-strict-yaml
* wip, merge-patch and json-patch tests added
* added SMP tests
* cleanup
* add benchmarks
* more detailed test failure message
* start adding field validation integration benchmarks
* use valid input for benchmarking
* fix remaining integration benchmarks
* benchmarking feedback
* fix endpoints benchmarking
* remove unused vars
2022-02-16 21:19:49 -08:00
Kubernetes Prow Robot
912c9c46f8
Merge pull request #107705 from ardaguclu/filter-strategic-patch-nonexist
...
Discard null values in complex objects in strategic patch
2022-02-16 21:19:37 -08:00
Kubernetes Prow Robot
b6549ecf46
Merge pull request #108173 from stevekuznetsov/skuznets/use-sub-tests
...
storage: etcd: use sub-tests
2022-02-16 19:35:43 -08:00
Steve Kuznetsov
4e166ff74d
storage: etcd: shorten sub-test names
...
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2022-02-16 16:10:20 -08:00
Kubernetes Prow Robot
0874cfddda
Merge pull request #108147 from tallclair/audit
...
Don't decorate admission for audit when audit is disabled
2022-02-16 15:26:19 -08:00
Kubernetes Prow Robot
c4f42306f8
Merge pull request #108171 from stevekuznetsov/skuznets/remove-dupe-storage-test
...
storage: etcd: remove a duplicate test case
2022-02-16 14:20:44 -08:00
Steve Kuznetsov
7729691f5c
storage: etcd: TestConditionalDelete: use sub-tests
...
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2022-02-16 13:46:20 -08:00
Steve Kuznetsov
dbb00694f6
storage: etcd: TestUnconditionalDelete: use sub-tests
...
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2022-02-16 13:46:17 -08:00
Steve Kuznetsov
b6a6625217
storage: etcd: TestGuaranteedUpdate: use sub-tests
...
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2022-02-16 13:46:17 -08:00
Steve Kuznetsov
f1ded3b0c3
storage: etcd: TestGetToList: use sub-tests
...
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2022-02-16 13:46:17 -08:00
Steve Kuznetsov
921e7525c0
storage: etcd: remove a duplicate test case
...
This test case was a duplicate of the previous one.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
2022-02-16 13:13:17 -08:00
Kubernetes Prow Robot
aa0e6320d5
Merge pull request #108163 from wojtek-t/update_selflink_doc
...
Update selflink doc
2022-02-16 12:47:08 -08:00
Kubernetes Prow Robot
1e15566628
Merge pull request #108162 from jsafrane/mount-options-comma
...
Parse mount options with double quotes and commas correctly
2022-02-16 12:46:56 -08:00
Kubernetes Prow Robot
e8d0009746
Merge pull request #108143 from tallclair/apparmor
...
Forbid empty AppArmor localhost profile
2022-02-16 12:46:44 -08:00
Wojciech Tyczyński
9015f27e6d
Stop setting selfLink in kubectl
2022-02-16 20:44:15 +01:00
David Eads
132fbf4192
convert rest storage to per-resource
2022-02-16 14:19:29 -05:00
Kubernetes Prow Robot
b68063fce7
Merge pull request #108149 from nilo19/bug/cache
...
fix: do not return early in the node informer when there is no change…
2022-02-16 10:00:49 -08:00
Kubernetes Prow Robot
2d2a7272fc
Merge pull request #107670 from 249043822/br-notfound
...
Suppress container not found errors in container runtime getPodStatuses
2022-02-16 10:00:37 -08:00
Arda Güçlü
0ee00ba104
Simplify casting in discardNullValuesFromPatch
2022-02-16 19:43:35 +03:00
wojtekt
bdd53fe9f9
Autogenerated
2022-02-16 17:34:34 +01:00
wojtekt
f20a603719
Update SelfLink field documentation
2022-02-16 17:13:08 +01:00
Kubernetes Prow Robot
f538b0b105
Merge pull request #108017 from denkensk/add-flush-flag
...
Add a deprecated cmd flag for the time interval between flushing pods from unschedualbeQ to activeQ or backoffQ.
2022-02-16 07:56:38 -08:00
Kubernetes Prow Robot
2bca37340c
Merge pull request #108094 from hakman/remove_e2e_flag_dockershim-checkpoint-dir
...
Remove unused `--dockershim-checkpoint-dir` e2e.test flag
2022-02-16 06:36:37 -08:00
Ciprian Hacman
3834761187
Remove unused --dockershim-checkpoint-dir
e2e.test flag
...
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev>
2022-02-16 15:34:28 +02:00
Jan Safranek
1bc658a2d8
Parse mount options with double quotes and commas correctly
...
A mount option can contain commas in double quoted string. Such comma is
part of the mount option and it is not option separator.
For example, this is a single mount option:
context="system_u:object_r:container_file_t:s0:c460,c902"
2022-02-16 14:22:10 +01:00
Kubernetes Prow Robot
2ccdd4573b
Merge pull request #108057 from bobbypage/log-dump
...
log grabbing: obtain timestamps on extra services
2022-02-16 03:12:36 -08:00
Kubernetes Prow Robot
a06e272124
Merge pull request #108127 from neolit123/1.24-fix-e2e-kubeadm-unversioned-kubelet-cm-defaults
...
test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
2022-02-16 00:43:38 -08:00
Kubernetes Prow Robot
400b1dea17
Merge pull request #107934 from jlsong01/add_lowercase_secret_key_warning
...
add warning when kubectl set env from secret leads to uppercase
2022-02-15 23:14:37 -08:00
Kubernetes Prow Robot
1fa888529e
Merge pull request #107533 from neolit123/1.24-update-master-label-taint
...
kubeadm: apply "master" label/taint migration for 1.24
2022-02-15 21:44:36 -08:00
Qi Ni
82852c0a7c
fix: do not return early in the node informer when there is no change of the topology label.
2022-02-16 12:17:48 +08:00
Alex Wang
87549203e9
add deprecated flag for flush pods to activeq interval
2022-02-16 11:05:52 +08:00
Tim Allclair
1b529d4f0b
Don't decorate admission for audit when audit is disabled
2022-02-15 17:20:32 -08:00