Commit Graph

100183 Commits

Author SHA1 Message Date
Clayton Coleman
64c669bd0a
Add type logging to certificate manager
Kubelet cert rotation involves two certificate manager instances
(one for client and one for server certs) and the log lines are
identical and confusing. Since certificate manager is a utility
library it is also inappropriate to simply assume klog output is
sufficient.

certificate.Manager now accepts a Name and Logf function on its
config struct to identify the purpose of the manager and to
provide a way to redirect where output should go. If Name is
absent, the name is defaulted from the SignerName, and if that
is not found then the name is set to "client auth" if that is
a provided key usage, or "certificate" otherwise. If Logf is
not provided it defaults to klog.V(2). as today. The name is printed
in "foo: bar" form on every line, but can be converted to structured
logging in the future. The log level is not customizable and it
is up to the caller to decide whether that is an issue.

Some log messages are slightly cleaned up to more clearly indicate
their intent. One log message is removed in a utility function that
was already at v(4) and less likely to be needed.

The default behavior of the certificate manager is as before and
the kubelet now identifies the server and client signerName as
separate entities:

I0414 19:07:33.590419    1539 certificate_manager.go:263] kubernetes.io/kube-apiserver-client-kubelet: Rotating certificates
E0414 19:07:33.594154    1539 certificate_manager.go:464] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the master: cannot create certificate signing request: Post "https://...
2021-04-19 22:10:36 -04:00
Kubernetes Prow Robot
1eccb41fa8
Merge pull request #101248 from deads2k/integration
update more integration tests for v1beta1 removal
2021-04-19 18:54:56 -07:00
Kubernetes Prow Robot
651a7a6f6b
Merge pull request #101245 from deads2k/test-cmd
update test-cmd to avoid removed beta APIs
2021-04-19 18:54:44 -07:00
Kubernetes Prow Robot
7552ca9f56
Merge pull request #101093 from wzshiming/fix/startup-probe
Fix `startupProbe` behaviour changed
2021-04-19 18:54:32 -07:00
Lubomir I. Ivanov
6b6ae146cd kubeadm: change API URL for "kubeadm config print"
There is a new API link for godoc. Also link to the anchor / list
of APIs instead of pinning to a specific version.
2021-04-20 03:47:27 +03:00
Lubomir I. Ivanov
4cba7dcc43 kubeadm: enable v1beta3 accross the code base
- scheme: switch to:
utilruntime.Must(scheme.SetVersionPriority(v1beta3.SchemeGroupVersion))
- change all imports in the code base from v1beta2 to v1beta3
- rename all import aliases for kubeadmapiv1beta2 to "kubeadmapiv".
this allows smaller diffs when changing the default public API.
2021-04-20 03:47:27 +03:00
Lubomir I. Ivanov
c2bddf3998 kubeadm: fix unit tests for v1beta1 removal 2021-04-20 03:47:27 +03:00
Lubomir I. Ivanov
02b455b565 kubeadm: add v1beta3 copied from v1beta2
Add a new versioned API v1beta3.
2021-04-20 03:47:27 +03:00
Kubernetes Prow Robot
46b0ad1327
Merge pull request #101207 from vinayakankugoyal/sshproxy
If kube-apiserver is running as non-root then set the permissions of …
2021-04-19 17:24:33 -07:00
Jiaming Xu
5f8dd349d1 Add exit code log when container died
update log exit code logic

adjust log exit code logic

fix invalid memory access in unit test

adjust log

update log message

address latest comment

change logging format

remove space in key of log

address latest comments

address comments
2021-04-20 00:19:16 +00:00
Joseph Anttila Hall
05bcc72dc2 kube-master-installation: reboot on failure.
Also some minor reliability tweaks.
2021-04-19 17:16:21 -07:00
Kubernetes Prow Robot
6157361dd7
Merge pull request #101155 from zshihang/bound
allow multiple of --service-account-issuer
2021-04-19 15:55:58 -07:00
James Sturtevant
02a182f5e2 updates to clarify the image promotion process 2021-04-19 15:49:27 -07:00
Kubernetes Prow Robot
6c309ab6d4
Merge pull request #101228 from lojies/fixkubectlcompletion
code cleanup: fix broken link in kubectl completion
2021-04-19 13:31:42 -07:00
Vinayak Goyal
94e34da471 If kube-apiserver is running as non-root then set the permissions of /etc/srv/sshproxy accordingly. 2021-04-19 13:16:06 -07:00
John Howard
a849c8998c Update kube-openapi and gnostic dependencies
Pulling in https://github.com/kubernetes/kube-openapi/pull/220
2021-04-19 12:24:05 -07:00
Basant Amarkhed
e15d811652 Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code) 2021-04-19 19:06:55 +00:00
Kubernetes Prow Robot
bd67aeff26
Merge pull request #101012 from tnqn/kubelet-panic
Fix panic when killing container fails
2021-04-19 11:05:42 -07:00
David Eads
e6113c5fe6 update openapi overlap test for crd v1 2021-04-19 13:55:32 -04:00
David Eads
b199047fa6 remove outdated extensions group test 2021-04-19 13:55:32 -04:00
David Eads
b74c542de5 skip printing test for removed APIs 2021-04-19 13:55:32 -04:00
Shihang Zhang
297ad30610 dnat to 169.254.169.252 for metadata server traffic 2021-04-19 10:47:51 -07:00
Shihang Zhang
925900317e allow multiple of --service-account-issuer 2021-04-19 09:54:11 -07:00
Kubernetes Prow Robot
4925cb66c9
Merge pull request #101238 from loburm/move_deprecated
Add required fields to fluentd-gcp-scaler-policy CRD.
2021-04-19 08:02:36 -07:00
David Eads
2fb8420756 update test-cmd to avoid removed beta APIs 2021-04-19 10:06:37 -04:00
David Eads
4ac8dfc3b6 update CLI helper finding CRDs to use CRD v1 2021-04-19 10:05:43 -04:00
Marian Lobur
41e39dd1fa Add required fields to fluentd-gcp-scaler-policy CRD. 2021-04-19 16:01:46 +02:00
wangyysde
17c09a06f2 remove GAed feature gate:SCTPSupport
Signed-off-by: wangyysde <net_use@bzhy.com>
2021-04-19 21:41:30 +08:00
David Eads
2e07319356 remove CSR v1beta1 tests since the API is no longer avaiable and CSRs are short term 2021-04-19 09:39:41 -04:00
Kubernetes Prow Robot
5a92454f5e
Merge pull request #101232 from justaugustus/pub-bot-go
publishing: Use go1.15.11 for 1.20 and 1.19 release branches
2021-04-19 02:58:36 -07:00
Patrick Ohly
93d1e373eb storage e2e: remove obsolete function
SkipRedundantSuite was replaced by SkipUnsupportedTests. We don't need
both.
2021-04-19 11:11:47 +02:00
Stephen Augustus
b376c2866b publishing: Use go1.15.11 for 1.20 and 1.19 release branches
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-04-19 03:45:00 -04:00
卢振兴10069964
84df3a213f code cleanup: fix broken link in kubectl completion 2021-04-19 14:15:48 +08:00
Hong Xu
fbdb065498 TestGetPatchSetsForPathMustBeDirectory: Ensure the error type is os.PathError
Ensure the tested error is an os.PathError instead of only non-nil.
2021-04-18 20:41:59 -07:00
Kubernetes Prow Robot
425e33bd50
Merge pull request #101100 from springasa/springasa-patch-1
Simplify the repeat lines in build/root/Makefile
2021-04-18 11:16:35 -07:00
Kubernetes Prow Robot
4239837f23
Merge pull request #100545 from xuhdev/scale-replica-flag
Validate scale's --current-replicas flag
2021-04-18 00:12:34 -07:00
Kubernetes Prow Robot
6a667de8d8
Merge pull request #99448 from JornShen/use_exist_utils_nets_replace_parseExcludedCIDRs
cleanup parseExcludedCIDRs
2021-04-17 19:32:36 -07:00
Kubernetes Prow Robot
c1f6a956fc
Merge pull request #101203 from mtougeron/endpointslices-default-rbac
Add endpointslices to default edit & view RBAC policies
2021-04-17 13:20:35 -07:00
Kubernetes Prow Robot
9f5573e83f
Merge pull request #101211 from aojea/nosnat
e2e create pods only on schedulable nodes
2021-04-17 10:32:34 -07:00
Kubernetes Prow Robot
0f1d105f8d
Merge pull request #100970 from apelisse/add-subresource-managedfields
Add subresource managedfields
2021-04-17 07:42:34 -07:00
Kubernetes Prow Robot
09bd596875
Merge pull request #101151 from mborsz/nodehealth
Add "node-high" priority-level
2021-04-17 03:46:34 -07:00
Antonio Ojea
0695bc45cf e2e create pods only on schedulable nodes
We were avoiding the scheduled using the pod.Spec.NodeName directly,
however, once we switched to using the node selector, the no_snat
e2e test started to fail because was trying to schedule pods on
nodes with taints, hence, failing the test.
2021-04-17 12:05:40 +02:00
Kubernetes Prow Robot
d090d17cb5
Merge pull request #101023 from Nordix/ipvs-cleanup-localhost
Disable localhost:nodeport for proxy-mode=ipvs
2021-04-16 22:22:10 -07:00
Iceber Gu
c75bd4a535 client-go/cache: fix the AddIfNotPresent method of the DeltaFIFO
Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
2021-04-17 11:18:38 +08:00
Kubernetes Prow Robot
38ff5f6884
Merge pull request #101206 from justaugustus/go116
[go1.16] Update to go1.16.3
2021-04-16 19:52:22 -07:00
Kubernetes Prow Robot
889f1c3951
Merge pull request #101084 from robscott/endpointslice-ip-validation
Updating EndpointSlice validation to match Endpoints validation
2021-04-16 17:10:21 -07:00
Stephen Augustus
fac97f8a9b [go1.16] Update to go1.16.3
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-04-16 19:56:51 -04:00
Antoine Pelisse
e477c31307 fieldmanager: Comment test broken by status being separated from main resource 2021-04-16 14:26:05 -07:00
Andrea Nodari
93dffdc1af Generated code 2021-04-16 14:24:19 -07:00
Andrea Nodari
862d256195 Add "subresource" field to ManagedFieldEntry
This field is useful to namespace the managed field entries of a
subresource and differentiate them from the ones of the main resource.
2021-04-16 14:13:18 -07:00