Commit Graph

104763 Commits

Author SHA1 Message Date
wongearl
50e4f24ea8 reuse previous evaluation 2021-11-02 12:53:17 -04:00
kerthcet
e5dd375b14 refactor scheudler's node resource plugins
Signed-off-by: kerthcet <kerthcet@gmail.com>
2021-11-03 00:52:23 +08:00
Jordan Liggitt
1f8f996dc9 PodSecurity: register/test v1beta1 config 2021-11-02 12:46:55 -04:00
Kubernetes Prow Robot
d8b6dc3e06
Merge pull request #106001 from NikhilSharmaWe/betterOutputKubectl
Changed code to improve output for files under test/e2e/kubectl
2021-11-02 09:20:58 -07:00
Jordan Liggitt
d997607eb9 PodSecurity: find/replace v1alpha1 -> v1beta1 2021-11-02 11:42:31 -04:00
Jordan Liggitt
23e2f1a378 PodSecurity: copy v1alpha1 config to v1beta1 2021-11-02 11:35:18 -04:00
Abu Kashem
bbc5934831
drop managed fields from audit entries
drop the managed fields of the objects from the audit entries when we
are logging request and response bodies.
2021-11-02 11:34:48 -04:00
Kubernetes Prow Robot
58b4e876e9
Merge pull request #106087 from liggitt/podsecurity-ns-benchmark
PodSecurity: benchmark large numbers of owned pods
2021-11-02 08:14:58 -07:00
Sandeep Rajan
be24af7644 bump coredns to 1.8.6 in kube-up
Signed-off-by: Sandeep Rajan <srajan@infoblox.com>
2021-11-02 10:52:44 -04:00
Kubernetes Prow Robot
9be67806cd
Merge pull request #102945 from chenchun/fake
Pass DeleteOptions down to the Reactor
2021-11-02 07:14:58 -07:00
Danielle Lancashire
4ae64bd799 e2e_node: add a default kubeletconfig fallback 2021-11-02 15:10:29 +01:00
Danielle Lancashire
a4cf3a90a2 e2e_node: support passing kubelet-config-file to local runs 2021-11-02 15:10:29 +01:00
Danielle Lancashire
6e9e436026 e2e_node: kubelet config: move to file where possible 2021-11-02 15:10:28 +01:00
Danielle Lancashire
4097a3d472 e2e_node: allow customizing the base kubeletconfig
This commit forces Kubelet Configuration files to always be generated
and when possible will use the kubeletconfig file that has been provided
by the test orchestrator
2021-11-02 15:09:56 +01:00
Danielle Lancashire
f1deb0ba2e e2e_node: remote: add kubeletconfig to archive
This commit enables the remote runner to provide a KubeletConfiguration
file to the test suite when uploading it to a remote host, thet test
runner will then use this configuration to run the Kubelet with the
provided config.
2021-11-02 15:08:39 +01:00
Danielle Lancashire
26980cf701 e2e_node: cleanup entrypoint 2021-11-02 15:08:39 +01:00
Danielle Lancashire
7dbbfe38e1 e2e_node: remote runner: junitFilePrefix -> junitFileName 2021-11-02 15:08:39 +01:00
Jordan Liggitt
01fa142ef5 PodSecurity: promote to beta 2021-11-02 09:43:24 -04:00
Kubernetes Prow Robot
07d3a92ce6
Merge pull request #105653 from p0lyn0mial/crd-503-refactor
apiextentionserver: refactor returning 503 for custom resource requests during server start
2021-11-02 06:12:58 -07:00
Jordan Liggitt
1bff65e6f8 PodSecurity: benchmark large numbers of owned pods 2021-11-02 08:43:27 -04:00
Kubernetes Prow Robot
2a821d787b
Merge pull request #105525 from damemi/wire-contexts-core
Wire contexts to Core controllers
2021-11-02 03:32:58 -07:00
Mark Rossetti
fa2c855ea5 batching test cases and improving logs in host-process-container command line test 2021-11-01 20:41:33 -07:00
Kubernetes Prow Robot
6ebd6f38b9
Merge pull request #104909 from pacoxu/kubectl-qos
kubectl: include init containers when determining pod QoS
2021-11-01 20:00:58 -07:00
Chun Chen
888c049df6 Auto generated 2021-11-02 10:04:53 +08:00
Chun Chen
621970476f Pass DeleteOptions down to the Reactor
Co-authored-by: Mo Khan <theenjeru@gmail.com>
2021-11-02 10:04:48 +08:00
Paco Xu
6bac4dcaf7 update etcd makefile to using 3.5.1 for building
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2021-11-02 09:56:21 +08:00
Ruochen Xu
6cc9bedfab add condition pre-check for pod uid and pod resource version in bind api 2021-11-02 09:51:15 +08:00
Kubernetes Prow Robot
349758d65d
Merge pull request #105898 from tallclair/ps-metrics
[PodSecurity] Metrics improvements
2021-11-01 18:12:58 -07:00
Kubernetes Prow Robot
88f8974c8a
Merge pull request #105974 from wojtek-t/pf_watch_support_8
P&F: Enable support for indexes in watch tracker
2021-11-01 17:12:58 -07:00
Kubernetes Prow Robot
764e219469
Merge pull request #105946 from prameshj/exclude-autoscaler-nodes
Remove nodes with Cluster Autoscaler taint from LB backends in service controller
2021-11-01 15:43:53 -07:00
Mark Rossetti
522bf81d83 HostProcess e2e tests to validate command / workingDir paramters
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2021-11-01 15:40:54 -07:00
Mark Rossetti
d16c1f1004 Move WindowsHostProcessContainers feature-gate to Beta
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2021-11-01 14:48:56 -07:00
Pavithra Ramesh
62799e33ee Remove nodes with Cluster Autoscaler taint from LB backends. 2021-11-01 14:41:21 -07:00
Tim Allclair
afad341759 Cache fast-path metrics & update unit tests 2021-11-01 14:23:00 -07:00
Tim Allclair
6c273020d3 [PodSecurity] Avoid the LegcayRegistry for metrics serving 2021-11-01 14:23:00 -07:00
Tim Allclair
21692e1683 [PodSecurity] Add error & exemption metrics 2021-11-01 14:22:58 -07:00
Tim Allclair
e46928c0b1 [PodSecurity] Fix up metrics & add tests
Update pod security metrics to match the spec in the KEP.
2021-11-01 14:11:19 -07:00
Kubernetes Prow Robot
ac2d872ed9
Merge pull request #105908 from stlaz/ps_annotations
[PodSecurity] Add annotations denoting the exemption reason and the enforcement policy used
2021-11-01 13:17:46 -07:00
Wojciech Tyczyński
21ec77dc19 Enable support for indexes in WatchTracker 2021-11-01 20:51:40 +01:00
Wojciech Tyczyński
12746f4bc1 P&F: Update WatchTracker interface to pass more information 2021-11-01 20:35:18 +01:00
Jiahui Feng
a4f6152743 generated: ./hack/update-vendor.sh 2021-11-01 10:00:00 -07:00
Kubernetes Prow Robot
76694983a1
Merge pull request #105930 from wojtek-t/pf_watch_support_7
P&F: Update and cleanup mutating work estimator
2021-11-01 07:33:18 -07:00
Mike Dame
4960d0976a Wire contexts to Core controllers 2021-11-01 10:29:00 -04:00
Jan Safranek
bc0c1bf1c5 Fixed unit test SELinux support
Previously, an error from GetSELinuxSupport was treated as a filesystem did
not support SELinux. Now the error is treated separately.
2021-11-01 15:11:40 +01:00
Jan Safranek
7b07b1ef0e Add shortcut for SELinux detection
Skip parsing of /proc/mounts if SELinux is disabled on the machine.
2021-11-01 14:32:48 +01:00
Stanislav Laznicka
037daeb4fd
podsecurity: add an annotation informing about which policy was enforced 2021-11-01 13:27:13 +01:00
Stanislav Laznicka
65f88c675c
podsecurity: distinguish between audit and audit violation annotations 2021-11-01 13:27:11 +01:00
Stanislav Laznicka
4a79488ac2
podsecurity: annotations on responses allowed by exemption 2021-11-01 13:24:38 +01:00
Kubernetes Prow Robot
657412713b
Merge pull request #102637 from charlesxsh/fix-migrate-sever
fix potential deadlock
2021-11-01 04:17:19 -07:00
Mengjiao Liu
e262e3ad2f Migrate assume_cache.go to structured logging 2021-11-01 17:43:39 +08:00