d-kuro
b78ab3515e
Fix ownerReferences.apiVersion for kubectl create job --from=cronjob
2020-03-06 12:24:02 +09:00
Jefftree
6fd748e2c5
exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly
2020-03-05 16:59:55 -08:00
immutablet
922e0bfaec
Hide methods in the encryption config that are not used outside the package.
2020-03-05 16:54:27 -08:00
Ted Yu
723761aa88
Don't try to create VolumeSpec immediately after underlying PVC is being deleted
...
Signed-off-by: Ted Yu <yuzhihong@gmail.com>
2020-03-05 16:45:50 -08:00
Darren Shepherd
eb9cf777dc
Disable HTTP2 while proxying a "Connection: upgrade" request
...
When proxying connection upgrade requests, like websockets, we dial
the target and then manually write the http.Request to the wire,
bypassing the http.Client. In this scenario we are by default using
HTTP/1.1 from both the client and to the target server we are proxying.
Because of this we must disable HTTP2 in the TLS handshake so that the
server does not think we are writing a HTTP2 request. We do this by
setting the TLSConfig.NextProtos field to "http/1.1".
Signed-off-by: Darren Shepherd <darren@rancher.com>
2020-03-05 17:31:22 -07:00
Kubernetes Prow Robot
edf460bc0f
Merge pull request #88775 from cmluciano/cml/altbackend
...
Ingress alternate backends
2020-03-05 16:22:49 -08:00
Jefftree
06abedb063
Allow both GRPC and http-connect mode to be toggled
2020-03-05 16:16:59 -08:00
JoshVanL
1bb6ed9bdc
Checks error for loading audit webhook config to prevent panic
...
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-03-05 23:30:50 +00:00
Antoine Pelisse
5231c6815c
managedfields: Update Apply time if neither object nor managedfields have changed
2020-03-05 15:19:50 -08:00
Antoine Pelisse
df41fd932b
Bump sigs.k8s.io/structured-merge-diff to v3
2020-03-05 15:19:50 -08:00
Antoine Pelisse
7120abe698
fieldmanager: Add failing test for no-op apply actually writing to etcd
2020-03-05 15:19:50 -08:00
Antoine Pelisse
39681aa580
fieldmanager: Move ManagedFields update logic into its own class
2020-03-05 15:19:50 -08:00
Mike Danese
76f8594378
more artisanal fixes
...
Most of these could have been refactored automatically but it wouldn't
have been uglier. The unsophisticated tooling left lots of unnecessary
struct -> pointer -> struct transitions.
2020-03-05 14:59:47 -08:00
Mike Danese
aaf855c1e6
deref all calls to metav1.NewDeleteOptions that are passed to clients.
...
This is gross but because NewDeleteOptions is used by various parts of
storage that still pass around pointers, the return type can't be
changed without significant refactoring within the apiserver. I think
this would be good to cleanup, but I want to minimize apiserver side
changes as much as possible in the client signature refactor.
2020-03-05 14:59:46 -08:00
Mike Danese
c58e69ec79
automated refactor
2020-03-05 14:59:46 -08:00
Mike Danese
86bd06c882
update clients
2020-03-05 14:13:59 -08:00
Mike Danese
d9671045ff
update client gen
2020-03-05 14:13:59 -08:00
Charles Eckman
aee9fde751
Add e2e test for validating JWTs as OIDC tokens
...
Adds an E2E test to deploy an agnhost container that runs the test.
Co-authored-by: Michael Taufen <mtaufen@google.com>
2020-03-05 13:58:52 -08:00
Sandeep Rajan
5ce4198152
update coredns to 1.6.7
2020-03-05 16:55:28 -05:00
Mike Dame
1d7006c38d
Add Extenders to scheduler v1alpha2 component config
2020-03-05 16:42:15 -05:00
Christopher M. Luciano
912f05bafb
ingress: add alternate resource backend
...
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
2020-03-05 16:08:44 -05:00
Kubernetes Prow Robot
8508875e4d
Merge pull request #88858 from cmluciano/cml/hostnamewildcard
...
ingress: allow wildcard hosts in IngressRule
2020-03-05 12:48:38 -08:00
Joel Smith
da988294ec
Work-around for missing metrics on CRI-O exited containers
...
HPA needs metrics for exited init containers before it will
take action. By setting memory and CPU usage to zero for any
containers that cAdvisor didn't provide statistics for, we
are assured that HPA will be able to correctly calculate
pod resource usage.
2020-03-05 13:20:43 -07:00
Mike Spreitzer
c7b098ac6c
Renaming: "Change" -> "Add" for consistency with underlying method
2020-03-05 15:17:33 -05:00
Mike Spreitzer
8a1b603209
Fix queued request accounting, extended queueset test
2020-03-05 15:13:46 -05:00
Aldo Culquicondor
1fab27502b
Disallow use of Plugin or PluginConfig when using Policy
...
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2020-03-05 15:05:26 -05:00
Aldo Culquicondor
13fa48e592
Disallow duplicate PluginConfig in framework creation
...
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2020-03-05 14:51:41 -05:00
Ted Yu
af0e1319c3
Allow container visitor to operate on selected container types
...
Signed-off-by: Ted Yu <yuzhihong@gmail.com>
2020-03-05 11:48:00 -08:00
Clayton Coleman
8c35e32a40
test: Properly detect container runtime flake in e2e test
...
The condition was not part of the message and so would not
match:
OCI runtime create failed: container_linux.go:349: starting container process caused "process_linux.go:449: container init caused \"rootfs_linux.go:58: mounting \\\"/var/lib/kubelet/pods/128aea1f-bde3-43d5-8b5f-dd86b9a5ef33/volumes/kubernetes.io~secret/default-token-v55hm\\\" to rootfs \\\"/var/lib/docker/overlay2/813487ba91d534ded546ae34f2a05e7d94c26bd015d356f9b2641522d8f0d6da/merged\\\" at \\\"/var/run/secrets/kubernetes.io/serviceaccount\\\" caused \\\"stat /var/lib/kubelet/pods/128aea1f-bde3-43d5-8b5f-dd86b9a5ef33/volumes/kubernetes.io~secret/default-token-v55hm: no such file or directory\\\"\"": unknown
Updated the check and regex.
2020-03-05 14:20:59 -05:00
Pavithra Ramesh
bb318ea84a
Update to latest node-cache image
2020-03-05 11:07:06 -08:00
Christopher M. Luciano
e931e30647
ingress: allow wildcard hosts in IngressRule
...
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
2020-03-05 13:44:48 -05:00
Chao Xu
7ac25f4812
Add cheftako as an onwer of cluster/
2020-03-05 10:24:29 -08:00
Chao Xu
7d86217043
Use the v0.0.8 network proxy images
2020-03-05 09:54:19 -08:00
James Munnelly
834331088f
Use versioned autoscaling API group in code-generator examples
2020-03-05 17:50:25 +00:00
Kubernetes Prow Robot
0ad60b35c1
Merge pull request #88801 from jsafrane/snapshot-test-timeout
...
Fix GCE PD snapshot flakiness
2020-03-05 09:08:51 -08:00
Kubernetes Prow Robot
2f145e9422
Merge pull request #88249 from claudiubelu/tests/reduce-to-agnhost-dnsutils
...
tests: Replaces dnsutils image used with agnhost (part 4)
2020-03-05 09:08:37 -08:00
Kubernetes Prow Robot
a5f7151a15
Merge pull request #88827 from neolit123/1.18-deprecate-certs-renew-use-api
...
kubeadm: deprecate the flag --use-api for cert renewal
2020-03-05 07:19:12 -08:00
Kubernetes Prow Robot
ab7c75ff3e
Merge pull request #88763 from p0lyn0mial/dynamiccertificates-cleanup
...
cleans up dynamiccertificates package
2020-03-05 07:19:04 -08:00
Kubernetes Prow Robot
318918cac4
Merge pull request #88716 from zhouya0/show_kubectl_describe_ingress_error
...
Show kubectl describe ingress error
2020-03-05 07:18:51 -08:00
Kubernetes Prow Robot
55bfdc6024
Merge pull request #88004 from verb/cli-debug
...
Add kubectl debug alpha command
2020-03-05 07:18:37 -08:00
Monis Khan
2cd6abece4
dynamic certs: pass valid object to event recorder
...
Signed-off-by: Monis Khan <mok@vmware.com>
2020-03-05 09:48:29 -05:00
Monis Khan
3bc918e484
dynamic certs: use correct name with event recorder
...
Signed-off-by: Monis Khan <mok@vmware.com>
2020-03-05 09:48:29 -05:00
Monis Khan
86a5993007
dynamic certs: do not copy mutex via shallow copy of tls.Config
...
go vet error:
call of dynamiccertificates.NewDynamicServingCertificateController
copies lock value: crypto/tls.Config contains sync.Once contains
sync.Mutex
Signed-off-by: Monis Khan <mok@vmware.com>
2020-03-05 09:48:28 -05:00
nolancon
0551d408ac
Bug fix for TM none policy
2020-03-05 14:25:48 +00:00
Kubernetes Prow Robot
1f2e1967d1
Merge pull request #88566 from Deepthidharwar/topology-mgr-numa-tests
...
Enable running cpu-mgr-multiNUMA e2e tests with Topology manager
2020-03-05 05:38:37 -08:00
Maciej Borsz
01c62f6726
Revert "Implement ItemBucketRateLimiter"
2020-03-05 14:35:19 +01:00
Hemant Kumar
b132959687
Start adding tests for verifying correct modes
...
Add an example for permission bits checking
2020-03-05 08:00:27 -05:00
Kubernetes Prow Robot
67c6767b7d
Merge pull request #88721 from Deepthidharwar/sriov-tm-bug
...
FIX SRIOV detection logic not to error out if device not present on the system
2020-03-05 02:58:50 -08:00
Kubernetes Prow Robot
0836b583f7
Merge pull request #85289 from serathius/remove-prometheus-controller-endpointslice
...
Remove prometheus references from pkg/controller/endpointslice
2020-03-05 02:58:37 -08:00
Janek Łukaszewicz
96567c8dcc
log-dump.sh: better logging in case of error from listing GCS
2020-03-05 10:40:46 +01:00