Clayton Coleman
64c669bd0a
Add type logging to certificate manager
...
Kubelet cert rotation involves two certificate manager instances
(one for client and one for server certs) and the log lines are
identical and confusing. Since certificate manager is a utility
library it is also inappropriate to simply assume klog output is
sufficient.
certificate.Manager now accepts a Name and Logf function on its
config struct to identify the purpose of the manager and to
provide a way to redirect where output should go. If Name is
absent, the name is defaulted from the SignerName, and if that
is not found then the name is set to "client auth" if that is
a provided key usage, or "certificate" otherwise. If Logf is
not provided it defaults to klog.V(2). as today. The name is printed
in "foo: bar" form on every line, but can be converted to structured
logging in the future. The log level is not customizable and it
is up to the caller to decide whether that is an issue.
Some log messages are slightly cleaned up to more clearly indicate
their intent. One log message is removed in a utility function that
was already at v(4) and less likely to be needed.
The default behavior of the certificate manager is as before and
the kubelet now identifies the server and client signerName as
separate entities:
I0414 19:07:33.590419 1539 certificate_manager.go:263] kubernetes.io/kube-apiserver-client-kubelet: Rotating certificates
E0414 19:07:33.594154 1539 certificate_manager.go:464] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the master: cannot create certificate signing request: Post "https://...
2021-04-19 22:10:36 -04:00
Kubernetes Prow Robot
1eccb41fa8
Merge pull request #101248 from deads2k/integration
...
update more integration tests for v1beta1 removal
2021-04-19 18:54:56 -07:00
Kubernetes Prow Robot
651a7a6f6b
Merge pull request #101245 from deads2k/test-cmd
...
update test-cmd to avoid removed beta APIs
2021-04-19 18:54:44 -07:00
Kubernetes Prow Robot
7552ca9f56
Merge pull request #101093 from wzshiming/fix/startup-probe
...
Fix `startupProbe` behaviour changed
2021-04-19 18:54:32 -07:00
Lubomir I. Ivanov
6b6ae146cd
kubeadm: change API URL for "kubeadm config print"
...
There is a new API link for godoc. Also link to the anchor / list
of APIs instead of pinning to a specific version.
2021-04-20 03:47:27 +03:00
Lubomir I. Ivanov
4cba7dcc43
kubeadm: enable v1beta3 accross the code base
...
- scheme: switch to:
utilruntime.Must(scheme.SetVersionPriority(v1beta3.SchemeGroupVersion))
- change all imports in the code base from v1beta2 to v1beta3
- rename all import aliases for kubeadmapiv1beta2 to "kubeadmapiv".
this allows smaller diffs when changing the default public API.
2021-04-20 03:47:27 +03:00
Lubomir I. Ivanov
c2bddf3998
kubeadm: fix unit tests for v1beta1 removal
2021-04-20 03:47:27 +03:00
Lubomir I. Ivanov
02b455b565
kubeadm: add v1beta3 copied from v1beta2
...
Add a new versioned API v1beta3.
2021-04-20 03:47:27 +03:00
Kubernetes Prow Robot
46b0ad1327
Merge pull request #101207 from vinayakankugoyal/sshproxy
...
If kube-apiserver is running as non-root then set the permissions of …
2021-04-19 17:24:33 -07:00
Jiaming Xu
5f8dd349d1
Add exit code log when container died
...
update log exit code logic
adjust log exit code logic
fix invalid memory access in unit test
adjust log
update log message
address latest comment
change logging format
remove space in key of log
address latest comments
address comments
2021-04-20 00:19:16 +00:00
Joseph Anttila Hall
05bcc72dc2
kube-master-installation: reboot on failure.
...
Also some minor reliability tweaks.
2021-04-19 17:16:21 -07:00
Kubernetes Prow Robot
6157361dd7
Merge pull request #101155 from zshihang/bound
...
allow multiple of --service-account-issuer
2021-04-19 15:55:58 -07:00
James Sturtevant
02a182f5e2
updates to clarify the image promotion process
2021-04-19 15:49:27 -07:00
Kubernetes Prow Robot
6c309ab6d4
Merge pull request #101228 from lojies/fixkubectlcompletion
...
code cleanup: fix broken link in kubectl completion
2021-04-19 13:31:42 -07:00
Vinayak Goyal
94e34da471
If kube-apiserver is running as non-root then set the permissions of /etc/srv/sshproxy accordingly.
2021-04-19 13:16:06 -07:00
John Howard
a849c8998c
Update kube-openapi and gnostic dependencies
...
Pulling in https://github.com/kubernetes/kube-openapi/pull/220
2021-04-19 12:24:05 -07:00
Basant Amarkhed
e15d811652
Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code)
2021-04-19 19:06:55 +00:00
Kubernetes Prow Robot
bd67aeff26
Merge pull request #101012 from tnqn/kubelet-panic
...
Fix panic when killing container fails
2021-04-19 11:05:42 -07:00
David Eads
e6113c5fe6
update openapi overlap test for crd v1
2021-04-19 13:55:32 -04:00
David Eads
b199047fa6
remove outdated extensions group test
2021-04-19 13:55:32 -04:00
David Eads
b74c542de5
skip printing test for removed APIs
2021-04-19 13:55:32 -04:00
Shihang Zhang
297ad30610
dnat to 169.254.169.252 for metadata server traffic
2021-04-19 10:47:51 -07:00
Shihang Zhang
925900317e
allow multiple of --service-account-issuer
2021-04-19 09:54:11 -07:00
Kubernetes Prow Robot
4925cb66c9
Merge pull request #101238 from loburm/move_deprecated
...
Add required fields to fluentd-gcp-scaler-policy CRD.
2021-04-19 08:02:36 -07:00
David Eads
2fb8420756
update test-cmd to avoid removed beta APIs
2021-04-19 10:06:37 -04:00
David Eads
4ac8dfc3b6
update CLI helper finding CRDs to use CRD v1
2021-04-19 10:05:43 -04:00
Marian Lobur
41e39dd1fa
Add required fields to fluentd-gcp-scaler-policy CRD.
2021-04-19 16:01:46 +02:00
wangyysde
17c09a06f2
remove GAed feature gate:SCTPSupport
...
Signed-off-by: wangyysde <net_use@bzhy.com>
2021-04-19 21:41:30 +08:00
David Eads
2e07319356
remove CSR v1beta1 tests since the API is no longer avaiable and CSRs are short term
2021-04-19 09:39:41 -04:00
Kubernetes Prow Robot
5a92454f5e
Merge pull request #101232 from justaugustus/pub-bot-go
...
publishing: Use go1.15.11 for 1.20 and 1.19 release branches
2021-04-19 02:58:36 -07:00
Patrick Ohly
93d1e373eb
storage e2e: remove obsolete function
...
SkipRedundantSuite was replaced by SkipUnsupportedTests. We don't need
both.
2021-04-19 11:11:47 +02:00
Stephen Augustus
b376c2866b
publishing: Use go1.15.11 for 1.20 and 1.19 release branches
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-04-19 03:45:00 -04:00
卢振兴10069964
84df3a213f
code cleanup: fix broken link in kubectl completion
2021-04-19 14:15:48 +08:00
Hong Xu
fbdb065498
TestGetPatchSetsForPathMustBeDirectory: Ensure the error type is os.PathError
...
Ensure the tested error is an os.PathError instead of only non-nil.
2021-04-18 20:41:59 -07:00
Kubernetes Prow Robot
425e33bd50
Merge pull request #101100 from springasa/springasa-patch-1
...
Simplify the repeat lines in build/root/Makefile
2021-04-18 11:16:35 -07:00
Kubernetes Prow Robot
4239837f23
Merge pull request #100545 from xuhdev/scale-replica-flag
...
Validate scale's --current-replicas flag
2021-04-18 00:12:34 -07:00
Kubernetes Prow Robot
6a667de8d8
Merge pull request #99448 from JornShen/use_exist_utils_nets_replace_parseExcludedCIDRs
...
cleanup parseExcludedCIDRs
2021-04-17 19:32:36 -07:00
Kubernetes Prow Robot
c1f6a956fc
Merge pull request #101203 from mtougeron/endpointslices-default-rbac
...
Add endpointslices to default edit & view RBAC policies
2021-04-17 13:20:35 -07:00
Kubernetes Prow Robot
9f5573e83f
Merge pull request #101211 from aojea/nosnat
...
e2e create pods only on schedulable nodes
2021-04-17 10:32:34 -07:00
Kubernetes Prow Robot
0f1d105f8d
Merge pull request #100970 from apelisse/add-subresource-managedfields
...
Add subresource managedfields
2021-04-17 07:42:34 -07:00
Kubernetes Prow Robot
09bd596875
Merge pull request #101151 from mborsz/nodehealth
...
Add "node-high" priority-level
2021-04-17 03:46:34 -07:00
Antonio Ojea
0695bc45cf
e2e create pods only on schedulable nodes
...
We were avoiding the scheduled using the pod.Spec.NodeName directly,
however, once we switched to using the node selector, the no_snat
e2e test started to fail because was trying to schedule pods on
nodes with taints, hence, failing the test.
2021-04-17 12:05:40 +02:00
Kubernetes Prow Robot
d090d17cb5
Merge pull request #101023 from Nordix/ipvs-cleanup-localhost
...
Disable localhost:nodeport for proxy-mode=ipvs
2021-04-16 22:22:10 -07:00
Iceber Gu
c75bd4a535
client-go/cache: fix the AddIfNotPresent method of the DeltaFIFO
...
Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
2021-04-17 11:18:38 +08:00
Kubernetes Prow Robot
38ff5f6884
Merge pull request #101206 from justaugustus/go116
...
[go1.16] Update to go1.16.3
2021-04-16 19:52:22 -07:00
Kubernetes Prow Robot
889f1c3951
Merge pull request #101084 from robscott/endpointslice-ip-validation
...
Updating EndpointSlice validation to match Endpoints validation
2021-04-16 17:10:21 -07:00
Stephen Augustus
fac97f8a9b
[go1.16] Update to go1.16.3
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-04-16 19:56:51 -04:00
Antoine Pelisse
e477c31307
fieldmanager: Comment test broken by status being separated from main resource
2021-04-16 14:26:05 -07:00
Andrea Nodari
93dffdc1af
Generated code
2021-04-16 14:24:19 -07:00
Andrea Nodari
862d256195
Add "subresource" field to ManagedFieldEntry
...
This field is useful to namespace the managed field entries of a
subresource and differentiate them from the ones of the main resource.
2021-04-16 14:13:18 -07:00