3727 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
8e56a34195 Merge pull request #102966 from SergeyKanzhelev/deprecateDynamicKubeletConfig
deprecate and disable by default DynamicKubeletConfig feature flag
2021-07-07 17:05:15 -07:00
Kubernetes Prow Robot
ac554af79b Merge pull request #103142 from serathius/etcd-3.5.0
Upgrade etcd to 3.5.0
2021-07-07 12:40:22 -07:00
Kubernetes Prow Robot
5e3bed6399 Merge pull request #101433 from SergeyKanzhelev/patch-1
Make the service account error more apparent
2021-07-05 03:23:13 -07:00
Stephen Augustus
c24dfe528a cluster,hack: Use community infra GCS bucket for retrieving CI builds
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-07-03 17:04:54 -04:00
Sergey Kanzhelev
dffc2a60a2 deprecate and disable by default DynamicKubeletConfig feature flag 2021-07-02 23:53:11 +00:00
Kubernetes Prow Robot
57720afb7e Merge pull request #103387 from SergeyKanzhelev/makeSureToSplitNPDHashesByArch
make sure to split NPD hashes by architecture when upgrading to 0.8.9
2021-07-02 13:38:46 -07:00
Kubernetes Prow Robot
a331cf74b7 Merge pull request #102050 from pohly/fix/deflake-metrics-proxy
remove metrics proxy
2021-07-02 12:30:10 -07:00
Marian Lobur
5d80d6e7c3 Make cpu request of kube proxy configurable by env variable. 2021-07-02 16:00:56 +02:00
Patrick Ohly
c91496dda0 cluster: enable debug handlers on GCE master nodes
This is needed for testing metrics support via the secure port
of kube-scheduler and kube-controller-manager. To access that
port, port-forwarding is used.
2021-07-02 10:38:49 +02:00
Piotr Tabor
de442ef860 Retry hostname->IP: [Errno -2] Name or service not known
During cluster configuration, the hostname is getting resolved to IP,
as etcd requires IP address as listening address.

Due to connectivity flakes or delayed network inititalization, sometimes
the IP fails to be resolved to a name with following error:
```
[Errno -2] Name or service not known
```
that leads to attempt to run etcd with empty flag.

The PR adds a proper retry (up to 5 minutes) in case the connectivity
problems happens.

I considered alternatives like: `getent hosts foo`, but unfortunetelly thay
can return IPv6 that etcd is not ready for (yet).
2021-07-01 12:20:07 +02:00
Sergey Kanzhelev
210c610d66 make sure to split NPD hashes by architecture when upgrading to 0.8.9 2021-07-01 08:12:35 +00:00
Kubernetes Prow Robot
d787eaa4d5 Merge pull request #103332 from mcshooter/updateNPDVersion
Update NPD release version and include windows defender config
2021-06-30 01:19:02 -07:00
Kubernetes Prow Robot
61ee139a08 Merge pull request #103070 from jeremyje/logspam
GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam.
2021-06-29 18:29:02 -07:00
Michelle Tandya
03f85e9ade Update NPD release version and include windows defender config 2021-06-30 00:00:32 +00:00
Kubernetes Prow Robot
ebcb4a2d88 Merge pull request #103104 from pacoxu/npd-088
update npd to v0.8.8
2021-06-29 02:30:40 -07:00
pacoxu
ffdf3f5007 update node-problem-detector npd to v0.8.8
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-Authored-By: vteratipally <vteratipally@users.noreply.github.com>
2021-06-29 09:35:32 +08:00
Marek Siarkowicz
ebe550bd48 Upgrade etcd to 3.5.0 2021-06-24 09:15:17 +02:00
Kubernetes Prow Robot
e120459000 Merge pull request #102952 from wpedrak/master
Specify etcdctl version in livenessProbe
2021-06-22 18:28:22 -07:00
pacoxu
f05f30943d kube-apiserver in gce: use --api-audiences as --service-account-api-audiences is deprecated
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-06-22 11:09:46 +08:00
Jeremy Edwards
44360b315c GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam. 2021-06-21 23:46:27 +00:00
Jeremy Edwards
7839668877 GCE Windows: Set TCP/IP parameters to keep idle connections alive on GCE. 2021-06-21 23:00:32 +00:00
Mauricio Poppe
e2061cfcd8 Expose envvar CSI_PROXY_VERSION 2021-06-21 18:33:23 +00:00
wpedrak
6cb448c10e Specify etcdctl version for livenessProbe
`--command-timeout` is supported in `ETCDCTL_API` version 3 and it is NOT supported in `ETCDCTL_API` version 2. Up to etcd 3.3 (inclusive) default version of `ETCDCTL_API` was 2. This change explicitly defines used `ETCDCTL_API` and allows usage of etcd versions below 3.4.
2021-06-21 16:12:32 +02:00
Vinayak Goyal
774d228637 remove the path if it exists before writing pki data.
if setfacl is called before chmod g+r at anypoint during the lifetime of
the cluster then the default group does not have read permissions on the
file. so we explicitly grant the default group read permissions. See
https://gist.github.com/mmdriley/85ca34f711acbec4b1b94902add488e5 for a
repro.
2021-06-18 11:03:37 -07:00
Kubernetes Prow Robot
b43e4ec89b Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits
kube-scheduler: stop using insecure serving bits
2021-06-15 13:42:12 -07:00
Kubernetes Prow Robot
b766721332 Merge pull request #102814 from cheftako/master
Update K/K to use ANP v0.0.20
2021-06-14 19:00:33 -07:00
Jan Chaloupka
7560f33e27 kube-scheduler: stop using insecure serving bits 2021-06-14 22:50:53 +02:00
Kubernetes Prow Robot
1400be60ff Merge pull request #102495 from jeremyje/fb177
GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression.
2021-06-11 17:03:01 -07:00
Walter Fender
9f7d61c520 Upgrade ANP components to v0.0.20.
Pick up new metrics to help with debugging and monitoring.
Pick up GRPC keep alive on frontend tunnel.
Server now using apps/options.
2021-06-11 09:02:04 -07:00
Joseph Anttila Hall
9d514b2de4 Konnectivity: tune flags for larger clusters (5k nodes). 2021-06-10 14:05:44 -07:00
Marek Siarkowicz
12447bc803 Upgrade etcd server version to 3.5.0-rc.0 2021-06-09 17:00:05 +02:00
Kubernetes Prow Robot
028bffba58 Merge pull request #102661 from Jefftree/patch-4
Default GCE testing to using konnectivity
2021-06-07 11:45:08 -07:00
Kubernetes Prow Robot
3d2a7c146e Merge pull request #102370 from JacobX33/master
Remove set errexit from etcd manifest
2021-06-07 08:16:40 -07:00
Jeffrey Ying
7a63dff88b Update konnectivity default 2021-06-07 11:06:28 -04:00
Kubernetes Prow Robot
9d27400fe2 Merge pull request #102040 from njuptlzf/fix_conversion
Fix auditing failed of request: encoding failed
2021-06-05 19:58:38 -07:00
njuptlzf
7b0fbb7292 add audit log test cases for cross-group subresource 2021-06-06 09:52:05 +08:00
Kubernetes Prow Robot
74af3b712d Merge pull request #102297 from deads2k/ssh-tunnels
remove --ssh- options, deprecated 13 releases, that only work on GCE
2021-06-05 10:40:50 -07:00
Kubernetes Prow Robot
e6a8bc9fbe Merge pull request #90368 from serathius/remove-legacy-metrics
Remove legacy metrics client from podautoscaler
2021-06-05 08:44:38 -07:00
Marek Siarkowicz
4ebc0c94a4 Remove legacy metrics client from podautoscaler 2021-06-04 23:06:32 +02:00
Paco Xu
7f06d0d553 add NoExecute toleration for konnectivity agent 2021-06-04 17:39:02 +08:00
David Eads
ae603a38bc remove -ssh-user from cluster scripts for GCE 2021-06-03 17:53:09 -04:00
Jeremy Edwards
47a7fcb17b GCE Windows: Only create NPD kubeconfig when the file path is defined. 2021-06-02 21:15:45 +00:00
Walter Fender
355be99390 Default GCE testing to using konnectivity
Turning GRPC based Konnectivity testing on id advance of
removing the SSHTunnel code.
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=25
shows the feature to be stable and it should remain that way.
2021-06-01 16:53:41 -07:00
Jeremy Edwards
3cb4f3e1bf GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression. 2021-06-01 16:25:21 +00:00
Kubernetes Prow Robot
bc8acbc43e Merge pull request #102328 from lentzi90/update-cni-plugins
Update CNI plugins v0.9.1
2021-05-28 10:16:46 -07:00
Jakub Sroka
ac17d03e76 Remove set errexit from etcd manifest
There were cases where this caused etcd to crashloop. It seems lesser evil to let migrator fail instead.
2021-05-27 14:25:35 +02:00
Kubernetes Prow Robot
d541872f9a Merge pull request #102239 from Haleygo/clean-up-AlgorithmProvider-flag-and-pkg
clean up algorithmprovider pkg and remove scheduler deprecated algorithm-provider flag
2021-05-27 00:54:23 -07:00
Lennart Jern
507710b50f Update CNI plugins v0.9.1
ref: https://github.com/containernetworking/plugins/releases/tag/v0.9.1
Signed-off-by: Lennart Jern <lennart.jern@est.tech>
2021-05-26 11:02:04 +03:00
Haleygo
2769e99dba remove scheduler deprecated algorithm-provider flag and clean up algorithmprovider pkg 2021-05-26 13:19:44 +08:00
Sascha Grunert
b167fc24d7 Update pause image to v3.5
Update dependencies and the test images to use pause 3.5. We also
provide a changelog entry for the new container image version.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-05-25 09:04:46 +02:00