Commit Graph

103135 Commits

Author SHA1 Message Date
Claudio Kuenzler
f3708fa016 Do not attempt to overwrite higher system (sysctl) values
With this commit kube-proxy accepts current system values (retrieved by sysctl) which are higher than the internally known and expected values.
The code change was mistakenly created as PR in the k3s project (see https://github.com/k3s-io/k3s/pull/3505). 
A real life use case is described in Rancher issue https://github.com/rancher/rancher/issues/33360.

When Kubernetes runs on a Node which itself is a container (e.g. LXC), and the value is changed on the (LXC) host, kube-proxy then fails at the next start as it does not recognize the current value and attempts to overwrite the current value with the previously known one. This result in:

```
I0624 07:38:23.053960      54 conntrack.go:103] Set sysctl 'net/netfilter/nf_conntrack_max' to 524288
F0624 07:38:23.053999      54 server.go:495] open /proc/sys/net/netfilter/nf_conntrack_max: permission denied
```

However a sysctl overwrite only makes sense if the current value is lower than the previously known and expected value. If the value was increased on the host, that shouldn't really bother kube-proxy and just go on with it.

Signed-off-by: Claudio Kuenzler ck@claudiokuenzler.com
2021-08-25 14:16:09 +02:00
Kubernetes Prow Robot
296991f697
Merge pull request #104518 from dntosas/scheduler-remove-deprecated-metric
[scheduler] Remove deprecated volumeSchedulingLatency metric
2021-08-25 03:08:39 -07:00
Kubernetes Prow Robot
1a845ccd07
Merge pull request #103603 from mengjiao-liu/update-ingress-to-v1
Promote `ingressclass.kubernetes.io/is-default-class` annotation to networking/v1
2021-08-24 20:24:39 -07:00
Kubernetes Prow Robot
c1e69551be
Merge pull request #103692 from justaugustus/go117
[go1.17] Update to go1.17
2021-08-24 18:54:40 -07:00
Kubernetes Prow Robot
1767a94f15
Merge pull request #104494 from nicomitchell/fix_comment_html_tags
apiserver/pkg/storage/interfaces.go: Add backticks to comments misparsed as HTML by IDEs
2021-08-24 17:00:39 -07:00
Kubernetes Prow Robot
ef754331c4
Merge pull request #104359 from mborsz/apflog
Add APF's priorityLevel to httplog.go
2021-08-24 13:00:58 -07:00
Stephen Augustus
f11a3cd58f
hack/boilerplate: Tolerate new build tag format (//go:build)
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:49 -04:00
Stephen Augustus
481cf6fbe7
generated: Run hack/update-gofmt.sh
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:49 -04:00
Stephen Augustus
0be115722b
generated: Run hack/lint-dependencies.sh and hack/update-vendor.sh
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:47 -04:00
Stephen Augustus
0e9881a9dc
[go1.17] Bump golang.org/x/... dependencies
hack/pin-dependency.sh golang.org/x/crypto master
hack/pin-dependency.sh golang.org/x/net master
hack/pin-dependency.sh golang.org/x/oauth2 master
hack/pin-dependency.sh golang.org/x/sync master
hack/pin-dependency.sh golang.org/x/sys master
hack/pin-dependency.sh golang.org/x/term master
hack/pin-dependency.sh golang.org/x/time master
hack/pin-dependency.sh golang.org/x/tools master

Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:46 -04:00
Stephen Augustus
6318f6a0e7
dependencies.yaml: Track Golang version for upstream etcd releases
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:45 -04:00
Stephen Augustus
e8d2bff6ba
[go1.17] Update to go1.17
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:47:41 -04:00
Stephen Augustus
e1bfcbc873
dependencies.yaml: Alpha-sort reference paths
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-08-24 15:22:42 -04:00
Kubernetes Prow Robot
2f68346fbb
Merge pull request #104523 from liggitt/serviceaccount-default
Ensure serviceaccount admission produces v1 Pod matching defaults after round-trip
2021-08-24 11:51:10 -07:00
Kubernetes Prow Robot
0c9bb963f8
Merge pull request #103178 from nckturner/custom-cloud-controller-client-names
Allow custom service account names to be used for cloud controllers
2021-08-24 11:50:58 -07:00
Kubernetes Prow Robot
d64e918785
Merge pull request #104541 from sanposhiho/cleanup/scheduler/NumUnschedulablePods-isnt-used
Clean up: delete NumUnschedulablePods because it's no longer in use
2021-08-24 10:37:26 -07:00
Kubernetes Prow Robot
4e832a7db9
Merge pull request #103630 from mysunshine92/controller_util-annotation
Modify the wrong comment for controller_util.go
2021-08-24 10:37:14 -07:00
Kubernetes Prow Robot
b40d9e8dd5
Merge pull request #104543 from claudiubelu/patch-7
test images: retrigger busybox image building
2021-08-24 08:27:26 -07:00
Kubernetes Prow Robot
5f0180ec05
Merge pull request #104232 from lauchokyip/fixSecret
Added support for multiple --from-env flags
2021-08-24 08:27:14 -07:00
Kubernetes Prow Robot
62828b24f3
Merge pull request #104504 from astraw99/fix_typo_CRED
Fix typo `CRED` to `CRUD`
2021-08-24 06:45:14 -07:00
astraw99
f8b82e189c fix typo CRED to CRUD 2021-08-24 20:36:43 +08:00
Claudiu Belu
d565129a45
test images: retrigger busybox image building
The previous job failed because the windows-servercore-cache image was not built yet.
2021-08-24 15:15:07 +03:00
Maciej Borsz
6db63869b0 Add APF's priorityLevel to httplog.go 2021-08-24 11:00:04 +02:00
sanposhiho
b7dd0a7660 Clean up: delete NumUnschedulablePods because it's no longer in use 2021-08-24 17:34:05 +09:00
Kubernetes Prow Robot
c2a633e07e
Merge pull request #104362 from prameshj/event-to-log
Convert some GCE LB events to logs.
2021-08-23 20:51:13 -07:00
Kubernetes Prow Robot
625b1e2d0b
Merge pull request #104382 from feiskyer/fix-vm-state
fix: ensure InstanceShutdownByProviderID return false for creating Azure VMs
2021-08-23 19:41:14 -07:00
Nick Turner
a5b47f7dd0 Allow custom client names to be used for cloud controllers
* This allows a controller to use cloud provider managed RBAC
  when --use-service-account-credentials is set.
* Create ControllerInitFuncConstructor to pass to init funcs to avoid
  future function signature growth.
* Add comments for context around legacy naming of node controllers.
* Add example for setting client names from cloud controller manager.
2021-08-24 00:51:24 +00:00
Kubernetes Prow Robot
f6331c74b6
Merge pull request #103557 from jiahuif/feature/controller-manager/interface
common interface for controllers
2021-08-23 15:27:25 -07:00
Chok Yip Lau
9a13bae510 Added support for multiple --from-env flags 2021-08-23 17:18:00 -04:00
Kubernetes Prow Robot
72b327c685
Merge pull request #104488 from seans3/cmd-headers-cancel-request
Adds CancelRequest function to CommandHeadersRoundTripper
2021-08-23 14:17:25 -07:00
Kubernetes Prow Robot
4a6792dd10
Merge pull request #104465 from tkashem/httplogger-structured
apiserver: add key/value pair to httplog
2021-08-23 11:48:34 -07:00
Kubernetes Prow Robot
358e509863
Merge pull request #103545 from thockin/rest-create-deepcopy
REST: Document mutable inputs on Create() and fix tests
2021-08-23 11:48:22 -07:00
Indeed
6616655b7b create common interface for controllers. 2021-08-23 10:44:01 -07:00
Kubernetes Prow Robot
e8263c2325
Merge pull request #104460 from verult/livenessprobe-2.4.0
Bump livenessprobe to 2.4.0 in e2e hostpath driver spec
2021-08-23 10:38:12 -07:00
Kubernetes Prow Robot
aeec553fd3
Merge pull request #104369 from mauriciopoppe/regional-pd-storage-class-setup
Fix storage class setup in regional_pd.go
2021-08-23 10:38:00 -07:00
Kubernetes Prow Robot
a799768352
Merge pull request #104187 from j2gg0s/remove-unnecessary-map-in-converter
apimachinery: remove unused ignoredConversions map in converter.
2021-08-23 08:40:00 -07:00
Jordan Liggitt
47859b7781 Ensure serviceaccount admission produces v1 Pod matching defaults after round-trip 2021-08-23 11:32:10 -04:00
Kubernetes Prow Robot
f840bd719d
Merge pull request #104509 from mysunshine92/job-0823
Fix typo PodTrackingWithFinalizers to JobTrackingWithFinalizers
2021-08-23 07:30:00 -07:00
dntosas
cd795fa2eb
[scheduler] Remove deprecated volumeSchedulingLatency metric
As part of https://github.com/kubernetes/kubernetes/pull/100720 we
backported fix on existing releases and in this commit we completely
remove the deprecated metric from master branch.

Signed-off-by: dntosas <ntosas@gmail.com>
2021-08-23 15:18:16 +03:00
Kubernetes Prow Robot
b9565beef0
Merge pull request #104345 from MikeSpreitzer/test-width
Fix extra latency and add tests for that and non-unit width
2021-08-23 02:32:00 -07:00
wangyamei
c128411815 fix typo: Modify PodTrackingWithFinalizers to JobTrackingWithFinalizers 2021-08-23 15:38:30 +08:00
Tim Hockin
6dfae64d9b REST: Document mutable inputs on Create()
If one doesn't DeepCopy() on the way into Create, we can end up writing
into the original object.  This is by design, and should not be a
problem EXCEPT for tests.  If a test compares the input to this function
with the result, but the input was mutated in-situ, it may hide errors,
resulting in tests that pass, but shouldn't.
2021-08-22 12:04:23 -07:00
Tim Hockin
42c7e62180 Fix registry tests to look at result objects 2021-08-22 11:59:33 -07:00
Tim Hockin
75dea6b8bc Service REST: Use DeepCopy() on Create() and fix tests 2021-08-22 11:59:33 -07:00
Nicolas Mitchell
340555476a add backticks to comments containing < or > 2021-08-21 10:59:50 -07:00
Kubernetes Prow Robot
3a26b864f4
Merge pull request #104410 from skyguard1/fix_node_names_util
Fix using variables in the loop in vsphere_util
2021-08-20 19:11:58 -07:00
Kubernetes Prow Robot
499a1f99a9
Merge pull request #104489 from liggitt/signal-buffer
Fix buffered signal channel go vet error
2021-08-20 14:53:58 -07:00
Jordan Liggitt
322bc82777 Fix buffered signal channel go vet error 2021-08-20 16:47:56 -04:00
Sean Sullivan
183498a410 Adds CancelRequest function to CommandHeadersRoundTripper 2021-08-20 13:34:02 -07:00
Kubernetes Prow Robot
7652353523
Merge pull request #104435 from liggitt/convertible-test
Fix slice type comparison bug
2021-08-20 12:38:47 -07:00