Commit Graph

92854 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
7e75a5ef43
Merge pull request #87273 from SaranBalaji90/kubelet-log-file
Add support for disabling /logs endpoint in kubelet
2020-07-07 04:09:58 -07:00
Antonio Ojea
f8e64d31f9 kube-proxy iptables min-sync-period default 1sec
Currently kube-proxy defaults the min-sync-period for
iptables to 0. However, as explained by Dan Winship,

"With minSyncPeriod: 0, you run iptables-restore 100 times.
 With minSyncPeriod: 1s , you run iptables-restore once.
 With minSyncPeriod: 10s , you also run iptables-restore once,
 but you might have to wait 10 seconds first"
2020-07-07 11:23:00 +02:00
Noah Kantrowitz
a1fb2f9c7a
Make sure the _output folder exists before using it from module-graph.sh 2020-07-07 01:19:59 -07:00
Kubernetes Prow Robot
aaf40adcd0
Merge pull request #92461 from Haleygo/001
update static check failed from pkg/volume/rbd
2020-07-07 00:57:58 -07:00
Kevin Klues
26cb650655 Remove unnecessary union after call to GetPreferredAllocation()
There is no need to try and allocate already-allocated devices again.
2020-07-07 06:35:57 +00:00
Kevin Klues
67ecc11c44 Harden callGetPreferredAllocationIfAvailable() return value
Previously, we didn't check the contents of the result after calling out
to the plugin endpoint. This could have resulted in errors if the plugin
returned either 'nil' or an empty result. This patch fixes this.
2020-07-07 06:35:57 +00:00
Kevin Klues
d87365494a Fix bug in call to callGetPreferredAllocationIfAvailable()
Previously, we were passing the variable 'devices' to this function,
when we should have been passing 'allocated'. This bug crept in due to a
variable name change that didn't propogate its way through the entire
function. The tests added in the previous commit would have caught this.
2020-07-07 06:35:57 +00:00
Kevin Klues
d551ab1e78 Add tests to check paramaters passed to GetPreferredAllocation()
These tests uncovered some small bugs that will be fixed in a subsequent
set of commits.
2020-07-07 06:35:57 +00:00
Kubernetes Prow Robot
3615291cb3
Merge pull request #92834 from ykakarap/kubectl_force_flag_serverside
kubectl: cannot use --force with --server-side
2020-07-06 20:37:58 -07:00
Dave Chen
028af0970f Cut off the cost to run filter plugins when no victim pods are found
If no potential victims could be found, there is no need to evaluate the node
again, since its state didn't change.

It's safe to return and thus prevent scheduling from running the filter plugins
again.

NOTE:
A node that is filtered out by filter plugins could pass the filter plugins if
there is a change on that node, i.e. pods termination on that node.

Previously, this could be either caught by the normal `schedule` or `preempt` (pods
are terminated when the preemption logic tries to find the nodes and re-evaluate
the filter plugins.)

Actually, this shouldn't be taken care by the preemption, consider the routine
of `schedule` is always running when the interval is "zero", let `schedule`
take care of it will release `preempt` from something irrelevant with the `preemption`.

Due to above reason, couple of testcase as well as the logic of checking the existence
of victim pods are removed as it will never happen after the change.

Signed-off-by: Dave Chen <dave.chen@arm.com>
2020-07-07 09:55:34 +08:00
Fei Xu
34826c82be Return err when create ContainerLogsDir failed 2020-07-07 09:36:35 +08:00
Kubernetes Prow Robot
5577214128
Merge pull request #92835 from ixdy/ixdy-owners
Move ixdy to emeritus
2020-07-06 14:39:57 -07:00
Anders Eknert
c595f983fa Move kube_flags_without_token creation 2020-07-06 21:55:23 +02:00
Rob Scott
fa59370e93
Adding new logging, event, and metric to better capture when mirroring addresses is skipped 2020-07-06 12:43:35 -07:00
Rob Scott
e701cb0205
Enabling the EndpointSliceMirroring controller, adding related config 2020-07-06 12:43:34 -07:00
Rob Scott
85d5a15841
Adding integration and e2e tests to cover EndpointSliceMirroring 2020-07-06 12:43:34 -07:00
Rob Scott
0695896caa
Updating apiserver Endpoints management to set skip-mirror label
This will ensure that the self-referential kubernetes Endpoints
resources is not mirrored by the EndpointSliceMirroring controller.
2020-07-06 12:43:33 -07:00
Rob Scott
8691466059
Adding EndpointSliceMirroring controller
This will mirror custom Endpoints to EndpointSlices to ensure that
applications will not need to maintain both separately.
2020-07-06 12:43:33 -07:00
Rob Scott
91bc902e20
Adding endpointslice.kubernetes.io/skip-mirror label 2020-07-06 12:43:32 -07:00
David Eads
542a007646 add helpers for managing conditions 2020-07-06 15:30:40 -04:00
Jordan Liggitt
9550f5080f Add audit annotation for requests to deprecated API endpoints 2020-07-06 15:10:13 -04:00
Abdullah Gharaibeh
c98dee4945 Return a FitError when PreFilter fails with unschedulable status 2020-07-06 15:02:07 -04:00
Chethan Venkatesh
3e19a33cea Fix typo in vsphere e2e tests 2020-07-06 11:39:26 -07:00
Jordan Liggitt
a17e297245 Add deprecated metric for requests to deprecated custom resource versions 2020-07-06 14:32:55 -04:00
Jordan Liggitt
f03290c390 Move feature gate check to crdInfo construction time 2020-07-06 14:29:18 -04:00
Jeff Grafton
089a1af421 Move ixdy to emeritus 2020-07-06 10:39:56 -07:00
Patrick Ohly
0efbbe8555 CSIStorageCapacity: check for sufficient storage in volume binder
This uses the information provided by a CSI driver deployment for
checking whether a node has access to enough storage to create the
currently unbound volumes, if the CSI driver opts into that checking
with CSIDriver.Spec.VolumeCapacity != false.

This resolves a TODO from commit 95b530366a.
2020-07-06 19:20:10 +02:00
Yuvaraj Kakaraparthi
f93ad0204e kubectl: cannot use --force with --server-side 2020-07-06 10:07:26 -07:00
Kubernetes Prow Robot
a26e5881d8
Merge pull request #92786 from answer1991/feature/enhance-bootstrap-certificate
make Kubelet bootstrap certificate signal aware
2020-07-06 09:52:52 -07:00
Sri Saran Balaji Vellore Rajakumar
05240c9218 Add support for disabling /logs endpoint in kubelet 2020-07-06 07:52:30 -07:00
Jordan Liggitt
ddfe137254 Generated files 2020-07-06 10:42:27 -04:00
Jordan Liggitt
e95ea4a407 Make use of go1.14 stdlib types optional 2020-07-06 10:38:39 -04:00
Jordan Liggitt
ae43f87954 Move go.mod back to go1.13 2020-07-06 10:38:39 -04:00
chenjun.cj
db71941775 make Kubelet bootstrap certificate signal aware 2020-07-06 22:30:27 +08:00
Sascha Grunert
c3ba2d8b8b
Add seccomp GA version skew for pods
This adds a new conversion function to the pod strategy to handle the
seccomp version skew strategy:

https://github.com/kubernetes/enhancements/blob/master/keps/sig-node/20190717-seccomp-ga.mdversion-skew-strategy

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-07-06 16:06:24 +02:00
Kubernetes Prow Robot
205d5c5829
Merge pull request #91381 from pjbgf/seccomp-ga-kubelet-changes
seccomp GA - Add new seccomp fields and update kubelet to use them
2020-07-06 07:02:52 -07:00
marload
b602ddf901 Refactoring: Change Inf Loop Condition (1 -> True) 2020-07-06 21:15:03 +09:00
Paulo Gomes
8976e3620f
Add seccomp enforcement and validation based on new GA fields
Adds seccomp validation.

This ensures that field and annotation values must match when present.

Co-authored-by: Sascha Grunert <sgrunert@suse.com>
2020-07-06 09:13:25 +01:00
Wei Huang
07583bf95b
Bypass PreFilter in ServiceAfffinity if AffinityLabels arg is not present 2020-07-05 23:37:04 -07:00
Kubernetes Prow Robot
865cbf0bdf
Merge pull request #91517 from gaurav1086/Remove_unnecessary_Sprintfs
cleanup: Remove_unnecessary_Sprintfs
2020-07-05 05:26:49 -07:00
Kubernetes Prow Robot
b9da08a33e
Merge pull request #92793 from feiskyer/fix-node-name
Fix throttling issues when Azure VM computer name prefix is different from VMSS name
2020-07-04 20:44:49 -07:00
Chethan Venkatesh
5849f1681c Fix vsphere util method - disksAreAttached 2020-07-04 19:33:36 -07:00
Divyen Patel
950ed79e41 fixed e2e test vsphere_volume_datastore.go 2020-07-04 16:56:27 -07:00
Kubernetes Prow Robot
9e70d6f805
Merge pull request #91738 from jsafrane/fix-iscsi-metadata
iscsi: don't write json medata file when the volume is already mounted.
2020-07-04 16:06:48 -07:00
Kubernetes Prow Robot
2da917d370
Merge pull request #77979 from s-urbaniak/remove-trailing-one
kube-aggregator/openapi/controller: remove trailing 1 in failure ratelimiter
2020-07-04 04:56:48 -07:00
Pengfei Ni
e1bbcd8f06 Fix throttling issues when Azure VM computer name prefix is different from VMSS name 2020-07-04 19:19:30 +08:00
Kubernetes Prow Robot
393f9e94e4
Merge pull request #92417 from wawa0210/ipam-staticcheck
Ipam staticcheck
2020-07-04 00:30:48 -07:00
Kubernetes Prow Robot
86096addb1
Merge pull request #92689 from chendave/fix_testcase
Fix the nits found in the testcases of `PodTopologySpread`
2020-07-03 20:31:26 -07:00
Kubernetes Prow Robot
efb56da4a5
Merge pull request #92665 from klueska/upstream-add-get-preferred-allocation-api
Add GetPreferredAllocation() call to the v1beta1 device plugin API
2020-07-03 20:31:16 -07:00
Kubernetes Prow Robot
d3aafb231b
Merge pull request #92609 from andrewsykim/ipvs-binded-addr
proxier/ipvs: check already binded addresses in the IPVS dummy interface
2020-07-03 20:31:02 -07:00