Commit Graph

102468 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
81065fd085
Merge pull request #103532 from thockin/fix-91459-service-update-allocs
Service: Fix semantics for Update wrt allocations
2021-07-08 05:59:05 -07:00
Kubernetes Prow Robot
a2b1f00a8b
Merge pull request #103522 from atiratree/fix-translations-location
fix translations location in update-translations.sh
2021-07-08 05:58:53 -07:00
Anago GCB
62d7a417fa CHANGELOG: Update directory for v1.22.0-beta.1 release 2021-07-08 12:15:38 +00:00
Davanum Srinivas
40f1db8d2d
update license gathering script for forked code
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-08 07:48:19 -04:00
Kubernetes Prow Robot
388c2d901d
Merge pull request #103560 from sejr/podsecurity-validate-configuration
[PodSecurity] Add ValidatePodSecurityConfiguration
2021-07-08 03:05:13 -07:00
Kubernetes Prow Robot
1edf50192e
Merge pull request #103536 from mengjiao-liu/clean-master-term-test
Clean up the remaining master names in test/integration
2021-07-08 03:05:05 -07:00
Kubernetes Prow Robot
33431f542b
Merge pull request #103534 from wojtek-t/pf_queue_picker_refinements
Refinements to pick queue logic in P&F
2021-07-08 03:04:53 -07:00
Kubernetes Prow Robot
e326c00bc5
Merge pull request #103562 from neolit123/1.22-fix-upgrade-image-pull
kubeadm: statically default the "from cluster" InitConfiguration
2021-07-08 01:56:53 -07:00
Li Bo
79e230ea21 fix kubelet panic when DynamicKubeletConfig enabled 2021-07-08 16:20:51 +08:00
Lars Ekman
b6b3a69284 Don't set sysctl net.ipv4.vs.conn_reuse_mode for kernels >=5.9 2021-07-08 09:41:12 +02:00
boenn
369c4a2b98 Use cmp.Diff() replace reflect and diagnosis 2021-07-08 15:13:11 +08:00
Kubernetes Prow Robot
9c4905e7af
Merge pull request #103548 from dims/drop-hashicorp-lru
Drop hashicorp lru - switch to the lru impl in k8s.io/utils
2021-07-08 00:12:53 -07:00
Jordan Liggitt
7f9d2eda82 limit warnings to requests that would otherwise succeed, reformat warning message 2021-07-08 02:19:30 -04:00
Jordan Liggitt
36907db929 PodSecurity: Drop field path from container visitor 2021-07-08 02:19:30 -04:00
Jordan Liggitt
7895399077 PodSecurity: seLinuxOptions: regenerate files 2021-07-08 02:19:30 -04:00
Jordan Liggitt
d541970751 PodSecurity: seLinuxOptions: cleanup
rename to seLinuxOptions
make message consistent
add unit tests for message
consolidate integration test fixtures
2021-07-08 02:19:28 -04:00
Jordan Liggitt
19c8ab297c PodSecurity: sysctls: cleanup
Add documentation and unit tests for messages
2021-07-08 02:19:28 -04:00
Jordan Liggitt
e178695c25 PodSecurity: seccompProfile_baseline: regenerate files 2021-07-08 02:19:28 -04:00
Jordan Liggitt
bebf612967 PodSecurity: seccompProfile_baseline: cleanup
Make messages consistent
Add unit tests for messages
Consolidate integration test fixtures
Rename to seccompProfile_baseline
2021-07-08 02:19:28 -04:00
Jordan Liggitt
2af08d1a5a PodSecurity: seccompProfile_restricted: regenerate files 2021-07-08 02:19:27 -04:00
Jordan Liggitt
88a1241299 PodSecurity: seccompProfile_restricted: cleanup
Switch from field paths to container names in messages
Add unit tests for messages
Consolidate integration test fixtures
2021-07-08 02:19:27 -04:00
Jordan Liggitt
43146d4377 PodSecurity: runAsNonRoot: regenerate files 2021-07-08 02:19:27 -04:00
Jordan Liggitt
5fc06591a2 PodSecurity: runAsNonRoot: cleanup
Improve message and details
Add unit tests
Consolidate integration test fixtures
2021-07-08 02:19:27 -04:00
Jordan Liggitt
edb7cdb02a PodSecurity: restrictedVolumes: regenerate files 2021-07-08 02:19:26 -04:00
Jordan Liggitt
676240a342 PodSecurity: restrictedVolumes: cleanup
Updated forbidden reason/details
Added unit test to exercise all volume types
Consolidated fixtures
2021-07-08 02:19:26 -04:00
Jordan Liggitt
4a69c57992 PodSecurity: procMount: cleanup 2021-07-08 02:19:26 -04:00
Jordan Liggitt
f9b8dfd0e6 PodSecurity: privileged: cleanup 2021-07-08 02:19:26 -04:00
Jordan Liggitt
7c70467400 PodSecurity: windowsHostProcess: regenerate files 2021-07-08 02:19:26 -04:00
Jordan Liggitt
9dce1d6a49 PodSecurity: windowsHostProcess: cleanup
Rename to windowsHostProcess
Format reason/details
Add unit tests
2021-07-08 02:19:25 -04:00
Jordan Liggitt
45485bb7ae PodSecurity: hostPorts: cleanup
Reformat message
Add unit test to exercise message/details
2021-07-08 02:19:25 -04:00
Jordan Liggitt
f709cf05f4 PodSecurity: hostPathVolumes: regenerate files 2021-07-08 02:19:25 -04:00
Jordan Liggitt
a39c448684 PodSecurity: hostPathVolumes: cleanup
Rename id to hostPathVolumes
Simplify message construction
Add unit test to exercise messages
Simplify integration test fixtures
2021-07-08 02:19:24 -04:00
Jordan Liggitt
826c57701c PodSecurity: hostNamespaces: cleanup
Use slice instead of set to accumulate errors
Add unit test to exercise message
Update docs to clarify undefined values are permitted
2021-07-08 02:19:24 -04:00
Jordan Liggitt
62b71175e7 PodSecurity: restricted capabilities: regenerate files 2021-07-08 02:19:24 -04:00
Jordan Liggitt
f10dfc6e30 PodSecurity: restricted capabilities: cleanup
Fix formatting of container names,
Add unit test for containers missing drop, containers with invalid adds
Consolidate integration test fixtures
2021-07-08 02:19:24 -04:00
Jordan Liggitt
bd4dc42a72 PodSecurity: baseline capabilities: regenerate files 2021-07-08 02:19:24 -04:00
Jordan Liggitt
809abf4f5b PodSecurity: baseline capabilities: cleanup
Rename to capabilities_baseline
Add unit test exercising forbidden reason and details
Consolidate integration test fixtures
2021-07-08 02:19:23 -04:00
Jordan Liggitt
b390e9e32d PodSecurity: appArmorProfile: cleanup
Also allow  values
Add unit test exercising forbidden reason/detail
Clean up forbidden reason construction
2021-07-08 02:19:23 -04:00
Jordan Liggitt
8291f8490b PodSecurity: allowPrivilegeEscalation: regenerate files 2021-07-08 02:19:23 -04:00
Jordan Liggitt
1e2886341a PodSecurity: allowPrivilegeEscalation: cleanup
Make forbidden details more compact
Add unit test exercising forbidden message/details
Consolidate fixtures
2021-07-08 02:19:23 -04:00
Jordan Liggitt
648b970718 PodSecurity: add message helper 2021-07-08 02:19:22 -04:00
Jordan Liggitt
92541f46e6 Restore ability to print long strings 2021-07-08 01:53:01 -04:00
Shiming Zhang
5d80665b0a Fix dbus config path for GracefulNodeShutdown e2e 2021-07-08 10:41:44 +08:00
Davanum Srinivas
6c72fbaa89
update vendor after switch
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:37 -04:00
Davanum Srinivas
79d0c6cdc1
switch from golang-lru to the one in k8s.io/utils
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:37 -04:00
Davanum Srinivas
3a221b3332
update to new k8s.io/utils
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:30 -04:00
Harry Zhang
a3f57886a2 fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total 2021-07-07 19:07:49 -07:00
Samuel Roth
a6b30e9629 podsecurity: added ValidatePodSecurityConfiguration 2021-07-07 21:59:05 -04:00
Li Bo
c3d9b10ca8 feature: support Memory QoS for cgroups v2 2021-07-08 09:26:46 +08:00
Kubernetes Prow Robot
f915aa39e8
Merge pull request #103541 from jbartosik/bump-addon-manager
Bump version of Addon Resizer used by Metrics Server
2021-07-07 18:09:29 -07:00