Commit Graph

36472 Commits

Author SHA1 Message Date
Kubernetes Submit Queue
9a899b92ae Merge pull request #29605 from lojies/addportvalidate
Automatic merge from submit-queue

add port validate when --port is set or --expose=true

```shell
$ kubectl run nginx --image=nginx --port=88888 --expose=true
The Deployment "nginx" is invalid.
spec.template.spec.containers[0].ports[0].containerPort: Invalid value: 88888: must be between 1 and 65535, inclusive
$ kubectl run nginx --image=nginx --port=0 --expose=true
error: --port must be a positive integer when exposing a service
```

1. when port is greater than 65535, port is required between 1 and 65535 and deployment 'nginx' can not be created.
2. when port is less than 1, port is not validated and deployment 'nginx' can be created. But service will be created failed.

so i add this change:
when --port is set or --expose=true, validate port range so that error reported can be the same when port is greater than 65535 or less than 1.
And this can also find the port  range error before creating the deployment other than during creating the deployment.
2016-09-26 17:25:30 -07:00
Chao Xu
7249c9bd8a fix TestCreateWithNonExistentOwner
remove the use of gc.QueuesDrained
2016-09-26 16:51:56 -07:00
Kubernetes Submit Queue
ea688f5e44 Merge pull request #31276 from juanvallejo/jvallejo_update-dry-run-create
Automatic merge from submit-queue

Update kubectl create message when using --dry-run

`kubectl create <resource> <name> --dry-run` provides a misleading success
message.

When commands such as `kubectl new-app node` are run with a
`--dry-run` flag, they make this clear by appending a "(DRY RUN)"
string to the final output. `kubectl create <resource>  <name> --dry-run`
does not do this, providing a potentially misleading output.

This patch appends a "(DRY RUN)" string to the end of a successful
message of `kubectl create` subcommands that support the `--dry-run` flag.

`kubectl create quota quota --dry-run`
```
resourcequota "quota" created
```

`kubectl create quota quota --dry-run`
```
resourcequota "quota" created (DRY RUN)
```

**Release note**:
```release-note
release-note-none
```
2016-09-26 16:01:17 -07:00
Chao Xu
a397e306a4 run client-gen
run copy.sh
2016-09-26 15:40:36 -07:00
Chao Xu
e17e0b19ab remove special clientrepo code from main repository gcp plugin
rename plugin/pkg/client/auth/plugins.go package name to auth

add the plugin import line in client-gen

update import_known_versions for release_1_5 clientset

change copy.sh
2016-09-26 15:40:29 -07:00
Kubernetes Submit Queue
f429d8f082 Merge pull request #33509 from ivan4th/fix-daemon-set-namespace-handling-for-predicates
Automatic merge from submit-queue

Fix DaemonSet namespace handling for predicates

In order to determine whether a node should run its daemon pod,
DaemonController creates a dummy pod based on DaemonSet's template and
then uses scheduler predicates (currently GeneralPredicates) to test
whether such pod can be run by the node. The problem was that
DaemonController was not setting Namespace for the dummy pod. This was
not affecting currently used GeneralPredicates but this problem could
bite later when some namespace-dependent predicates are added to
GeneralPredicates or directly to DaemonController's node checks
(e.g. pod affinity).

Stumbled upon it while working on e2e test for #31136
2016-09-26 15:21:22 -07:00
Jordan Liggitt
5599ca3be5
Decorate authenticated users with system:authenticated group 2016-09-26 17:19:00 -04:00
Jordan Liggitt
0c36c5e556
Add anonymous auth to the auth chain 2016-09-26 17:19:00 -04:00
Jordan Liggitt
174e454874
Allow short-circuiting union auth on error 2016-09-26 17:18:05 -04:00
Jordan Liggitt
0f3baaad50
Create GroupAdder authenticator wrapper 2016-09-26 17:18:05 -04:00
Jordan Liggitt
0dbcad1763
Add anonymous authenticator 2016-09-26 17:18:05 -04:00
Paul Morie
b1f91bd510 Move Kubelet pod-management code into kubelet_pods.go 2016-09-26 17:16:59 -04:00
Kubernetes Submit Queue
987aef1f64 Merge pull request #31190 from hongchaodeng/r2
Automatic merge from submit-queue

Pass SelectionPredicate instead of Filter to storage layer

Depends on #31189 (first commit).

ref: #29888

What?
This PR removes the filtering logic and passes SelectionPredicate to storage layer.

Why?
Filter doesn't provide enough information of and isn't the right abstraction for indexing. We need to pass in SelectionPredicate instead.
2016-09-26 14:09:10 -07:00
Kubernetes Submit Queue
3efed287b4 Merge pull request #32231 from timothysc/re-re-http2
Automatic merge from submit-queue

Default HTTP2 on, post fixes from #29001

This reverts commit 8cb799c789.

Enables HTTP2 on by default post fixes from https://github.com/kubernetes/kubernetes/issues/29001 for 1.5 

NOTE:  We are nearing lb connection limits at current thresholds. 

/cc @bradfitz @lavalamp @smarterclayton
2016-09-26 13:26:46 -07:00
Clayton Coleman
9bfa63dbba
Unwrap aggregates of size 1 when writing errors
Also, only use aggregate in get when we actually are dealing with
multiple errors.
2016-09-26 15:56:38 -04:00
Ryan Hitchman
9b7f347e93 Make upload-to-gcs.sh use a different prefix for tests in other repos.
For kubernetes/test-infra#476.

Also, put the repo in the build metadata so Gubernator can link to the
right thing for postsubmit jobs.

For PR #$NUM in a given repo, the logs will go to these places:

	kubernetes/kubernetes => /pr-logs/pull/$NUM
	kubernetes/test-infra => /pr-logs/pull/test-infra/$NUM
	google/cadvisor => /pr-logs/pull/google_cadvisor/$NUM

Tested with a manual harness. Note that this leaves the latest/indirect
untouched as well as postsubmit jobs-- *job names* are still unique, the
main issue was that PR numbers might collide. Disturbing as little
structure as possible reduces how many things will break.
2016-09-26 12:42:49 -07:00
Phillip Wittrock
2a59f57778 Merge pull request #33506 from pwittrock/release-notes
Fix issues in 1.4 release notes
2016-09-26 12:31:21 -07:00
Phillip Wittrock
b4361a2bb5 Fix issues in 1.4 release notes
- Release script un-munging
- More specific links
2016-09-26 12:24:28 -07:00
Ivan Shvedunov
5651f822fd Fix DaemonSet namespace handling for predicates
In order to determine whether a node should run its daemon pod,
DaemonController creates a dummy pod based on DaemonSet's template and
then uses scheduler predicates (currently GeneralPredicates) to test
whether such pod can be run by the node. The problem was that
DaemonController was not setting Namespace for the dummy pod. This was
not affecting currently used GeneralPredicates but this problem could
bite later when some namespace-dependent predicates are added to
GeneralPredicates or directly to DaemonController's node checks
(e.g. pod affinity).

Stumbled upon it while working on e2e test for #31136
2016-09-26 22:14:28 +03:00
Kubernetes Submit Queue
273f02c8b2 Merge pull request #33448 from Random-Liu/fix-dockershim-unit-test-flake
Automatic merge from submit-queue

Use fakeclock correctly in dockershim unit test.

Fixes https://github.com/kubernetes/kubernetes/issues/33428.

/cc @feiskyer @yujuhong
2016-09-26 11:59:11 -07:00
Phillip Wittrock
d94e1f82cf Merge pull request #33499 from pwittrock/release-notes
Fix pod security docs link in release notes
2016-09-26 11:54:04 -07:00
Phillip Wittrock
0e22d072a3 Update CHANGELOG.md for v1.4.0. 2016-09-26 11:48:00 -07:00
Random-Liu
2141e230a6 Add oom score adj in new CRI implementation. 2016-09-26 11:39:02 -07:00
Jeff Grafton
13a3313957 Bundle kubemark in test tarball instead of server tarball 2016-09-26 11:06:48 -07:00
Phillip Wittrock
ded3db20b8 Fix pod security docs link in release notes 2016-09-26 11:01:48 -07:00
Joe Finney
52cfe25351 Un-xmlWrap the Test function. 2016-09-26 10:59:38 -07:00
Kubernetes Submit Queue
19a2a10354 Merge pull request #33389 from Random-Liu/lifecycle-hook
Automatic merge from submit-queue

CRI: Fix lifecycle hook and add container lifecycle node e2e test

This PR:
1) Adds pod spec missing handling in kuberuntime. (1st commit)
2) Adds container lifecycle hook node e2e test. (2nd commit)

@yujuhong @feiskyer
2016-09-26 10:48:35 -07:00
Phillip Wittrock
2ad256d259 Merge pull request #33441 from quinton-hoole/2016-09-24-update-release-notes-for-federation
Update release notes for Federation features.
2016-09-26 10:45:03 -07:00
Mike Danese
b421bf4315 build kube-discovery and kubeadm with release 2016-09-26 10:20:04 -07:00
Kubernetes Submit Queue
2a74012052 Merge pull request #33487 from deads2k/mesos-01-disconnect
Automatic merge from submit-queue

disconnect contrib/mesos

Partially addresses to https://github.com/kubernetes/kubernetes/issues/33283.

This just disconnects `contrib/mesos` from the rest of the `kubernetes/kubernetes` repo.  This leaves the code in place so that it can be used to prime a new repo once there's a champion and owner.
2016-09-26 10:07:11 -07:00
Hongchao Deng
6f3ac807fd pass SelectionPredicate instead of Filter to storage layer 2016-09-26 09:47:19 -07:00
Kubernetes Submit Queue
234be5a1d0 Merge pull request #32575 from wojtek-t/concurrent_priorities
Automatic merge from submit-queue

Compute priorities in parallel

Ref #24246
2016-09-26 09:31:47 -07:00
Michail Kargakis
0a843a50ba controller: don't retry deployments with overlapping selectors
Returning an error will cause the deployment to be requeued. We should
just emit an event for deployments with overlapping selectors and silently
drop then out of the queue. This should be transitioned to a Condition
once we have them.
2016-09-26 17:59:51 +02:00
Kubernetes Submit Queue
06a23dddbe Merge pull request #33097 from gmarek/static-ip-creation
Automatic merge from submit-queue

Wait until master IP is visible

Hopefully fix #32789 (see: https://github.com/kubernetes/kubernetes/pull/33085#issuecomment-248322464)

It's a pretty far-fetched, but this might fix our GCE cluster startup problems. @mikedanese @fejta @wojtek-t
2016-09-26 08:52:23 -07:00
Timothy St. Clair
009f87719b Fix server initialization for http2 and go 1.7 2016-09-26 10:28:18 -05:00
deads2k
4e2f819695 add tests proving rbac rule matches 2016-09-26 11:27:24 -04:00
deads2k
87ff84a7b0 add system:discovery role 2016-09-26 11:27:24 -04:00
Jordan Liggitt
1812fe70a3
Log test error 2016-09-26 11:21:38 -04:00
Kubernetes Submit Queue
2750c778d4 Merge pull request #33294 from deads2k/rbac-08-compact-init
Automatic merge from submit-queue

start creating controller SA roles.  start with just one

This creates a clusterrole for the replicationcontroller controller.  It also streamlines the rule creation code and I'll use this role as practice for wiring up RBAC rules.

@kubernetes/sig-auth 
@ericchiang Jordan is ooto, mind taking a look?
2016-09-26 08:14:01 -07:00
Timothy St. Clair
d5e3832bc0 Revert "Revert "Follow on for 1.4 to default HTTP2 on by default""
This reverts commit 8cb799c789.
2016-09-26 10:09:26 -05:00
Timothy St. Clair
a8dbab6631 Update etcd godep to 3.0.10 to fix known watch issue. 2016-09-26 10:05:55 -05:00
Kubernetes Submit Queue
69083bcfce Merge pull request #33281 from deads2k/client-12-simplify-adapter
Automatic merge from submit-queue

remove the clientset adapter

This removes the clientset adapter entirely.  There is one focused adapter that remains in a single e2e test.  Every other reference was removed.
2016-09-26 07:35:08 -07:00
Jordan Liggitt
1a43b01d3c
Fix cache expiration check 2016-09-26 10:31:33 -04:00
deads2k
2fbc98196c disconnect contrib/mesos 2016-09-26 10:16:15 -04:00
Jordan Liggitt
6cb0db2651
Allow testing LRUExpireCache with fake clock 2016-09-26 10:16:08 -04:00
Phillip Wittrock
7f63058d7d Merge pull request #33486 from erictune/chlog
Add note about init container status reporting
2016-09-26 07:15:42 -07:00
gmarek
f7d0615e2b Wait until master IP is visible 2016-09-26 15:56:31 +02:00
Kubernetes Submit Queue
5d9ccd1221 Merge pull request #33427 from davidopp/owner
Automatic merge from submit-queue

Make @k82cn assignee for contrib/mesos/OWNERS and remove everyone else

@k82cn is going to be the maintainer for contrib/mesos going forward.

cc/ @eparis
2016-09-26 06:56:15 -07:00
Kubernetes Submit Queue
eed1e02346 Merge pull request #33012 from wojtek-t/informer_in_route_controller
Automatic merge from submit-queue

Use Informer framework in route controller
2016-09-26 06:56:06 -07:00
deads2k
b330b0a220 start creating controller SA roles. start with just one 2016-09-26 09:31:36 -04:00