github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
101,985 Commits 1 Branch 31 Tags 1,019 MiB
012bfaf98d
Commit Graph

10264 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
b139db1539
Merge pull request #99573 from pandaamanda/apiserver_identity_validate 
cleanup: wrap the apiserver identity validation
 2021-03-08 19:23:19 -08:00
Rob Scott
f07be06a19
Adding support for TopologyAwareHints to kube-proxy 2021-03-08 15:37:47 -08:00
Jan Safranek
219cbc818a Refactor CSI migration plugin manager to get featureGates as a parameter 
This allows caller to provide fake ones for testing of various corner cases
(migration on A/D controller disabled while enabled on kubelet).
 2021-03-08 13:50:01 +01:00
Kubernetes Prow Robot
59012258ca
Merge pull request #99904 from neolit123/1.21-health-check-master-taint 
kubeadm: add missing toleration for upgrade health check
 2021-03-07 03:45:42 -08:00
Swetha Repakula
108fd44f7c Graduate EndpointSlice feature gate to GA 2021-03-06 15:58:47 -08:00
Swetha Repakula
1925d94b18 Graduate EndpointSlice Controllers to GA 
- EndpointSlice controller will stop writing to Topology field
 - EndpointSlice controller will only provide NodeName and Zone on
 EndpointSlices
 2021-03-06 15:58:47 -08:00
Kubernetes Prow Robot
36244f31ef
Merge pull request #99662 from swetharepakula/eps-ga-api-changes 
Graduate EndpointSlice API to GA
 2021-03-06 15:23:54 -08:00
Kubernetes Prow Robot
0849d1bea1
Merge pull request #99613 from xh4n3/master 
fix wrong NumCPU in kube-proxy under static CPU policy
 2021-03-06 14:21:41 -08:00
Lubomir I. Ivanov
3e95f9d491 kubeadm: add missing taint for upgrade health check 
This is part of the "master" -> "control-plane" rename
that we missed. It's not critical for 1.21 as the
"control-plane" taint is still not added to CP nodes,
but it would be best to add the toleration preemptively
like the KEP planned.
 2021-03-06 23:14:11 +02:00
Abu Kashem
71199664be
use request received timestamp in httplog 2021-03-05 15:34:17 -05:00
Swetha Repakula
a9891b4b9b Graduate EndpointSlice API to GA 
* Removes discovery v1alpha1 API
  * Replaces per Endpoint Topology with a read only DeprecatedTopology
  in GA API
  * Adds per Endpoint Zone field in GA API
 2021-03-05 12:02:41 -08:00
xiongzhongliang
c7bf5506ee cleanup: wrap the apiserver identity validation 2021-03-06 00:57:02 +08:00
Maciej Szulik
78f51f8fa5
Switch cronjob controller to batch/v1 2021-03-05 14:03:34 +01:00
xiongzhongliang
4a24a08f93 Optimize some codes 2021-03-05 18:23:39 +08:00
Kubernetes Prow Robot
7863e8f891
Merge pull request #99248 from pandaamanda/kubelet_duplicate_default_value 
remove duplicate default message for some flag
 2021-03-05 01:56:22 -08:00
xh4n3
d6bc98fc5a fix wrong NumCPU in kube-proxy under static CPU policy 
Signed-off-by: xh4n3 <xyn1016@gmail.com>
 2021-03-05 12:38:05 +08:00
Kubernetes Prow Robot
a6bfc7d7a9
Merge pull request #99646 from rajansandeep/remove-kube-dns 
[kubeadm]: Remove the deprecated kube-dns as an option in kubeadm
 2021-03-04 14:41:12 -08:00
Kubernetes Prow Robot
983cac7f96
Merge pull request #97000 from mlevesquedion/avoid-logging-headers 
Avoid logging headers from kubelet configuration
 2021-03-04 13:38:22 -08:00
Sandeep Rajan
62542bb1ec add validation to indicate kube-dns is no longer supported 2021-03-04 14:57:52 -05:00
Kubernetes Prow Robot
504b86ced7
Merge pull request #99471 from neolit123/1.21-default-systemd-cgroup-driver 
kubeadm: set the kubelet cgroup driver to "systemd" during "init"
 2021-03-04 11:00:38 -08:00
Sandeep Rajan
b8a1bd6a6c remove the deprecated kube-dns as an option in kubeadm 2021-03-04 12:12:54 -05:00
Kubernetes Prow Robot
9d34bfd601
Merge pull request #99736 from deads2k/beta-policy 
clean usage of admissionregistration/v1beta1 from integration tests
 2021-03-04 05:42:22 -08:00
Kubernetes Prow Robot
15213128e1
Merge pull request #99687 from pacoxu/dual-stack/follow-up-1 
cleanup: disable dual stack for some manifest UT
 2021-03-04 00:29:23 -08:00
Kubernetes Prow Robot
457d8576e5
Merge pull request #99660 from deads2k/bump-burst-for-kcm-discovery 
increase discovery burst for kube-controller-manager
 2021-03-04 00:28:55 -08:00
Kubernetes Prow Robot
0d8aae99f9
Merge pull request #98269 from neolit123/1.21-kubeadm-add-lb-label 
kubeadm: exclude control plane nodes from external LBs
 2021-03-04 00:27:59 -08:00
Kubernetes Prow Robot
e5538fa94f
Merge pull request #98210 from cici37/fix 
Fix flag passing in CCM
 2021-03-03 14:40:01 -08:00
David Eads
a473ef6c0a use direct etcd creation to verify migrated v1beta1 admissionwebhooks 2021-03-03 17:33:27 -05:00
David Eads
8b55bdc405 increase discovery burst for kube-controller-manager 2021-03-03 10:41:34 -05:00
Kubernetes Prow Robot
b0ba6c0b76
Merge pull request #98984 from SataQiu/fix-kubeadm-20210211 
kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false
 2021-03-03 01:53:20 -08:00
pacoxu
496deb6df9 cleanup: disable dual stack for some manifest UT 2021-03-03 16:00:20 +08:00
cici37
408258c6d5 Update to use cliflag.NamedFlagSets 2021-03-02 13:23:44 -08:00
Kubernetes Prow Robot
ec1b6ce53a
Merge pull request #99236 from pacoxu/enable-cadvisor-json-endpoints/cleanup 
Deprecate cAdvisor json metrics collected by Kubelet
 2021-03-02 12:16:07 -08:00
Kubernetes Prow Robot
4a56d8c19a
Merge pull request #99103 from liggitt/prefer-v1 
Prefer v1 storage versions
 2021-03-02 12:15:48 -08:00
Kubernetes Prow Robot
445cb0609d
Merge pull request #99574 from pacoxu/feature/check-ipv6-site-warnings 
kubeadm: a warning to user as ipv6 site-local is deprecated
 2021-03-02 11:11:43 -08:00
Jordan Liggitt
4515889574 Prefer v1 storage versions 2021-03-02 12:06:13 -05:00
Kubernetes Prow Robot
e4e9c31218
Merge pull request #98572 from justaugustus/go116 
[go1.16] Update to go1.16
 2021-03-02 08:57:19 -08:00
Lubomir I. Ivanov
b6ff320507 kubeadm: set the kubelet cgroup driver to "systemd" during "init" 
The kubeadm documentation instructs users to set the container
runtime driver to "systemd", since kubeadm manages a kubelet via
the systemd init system. The kubelet default however is "cgroupfs".
For new clusters set the driver to "systemd" unless the user
is explicit about it. The same defaulting would not happen
during "upgrade".
 2021-03-02 18:39:39 +02:00
pacoxu
3c33ceab04 log a warning if ipv6 site-local addresses is using as it shouldn't be deprecated 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
 2021-03-02 21:51:28 +08:00
pacoxu
cd54bd94e9 deprecate cAdvisor json metrics collected by Kubelet 
- remove unused code for cadvisor json metrics collected

Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-03-02 15:36:21 +08:00
Kubernetes Prow Robot
3727aa47d9
Merge pull request #99084 from gxglls/imporve-kubelet-comment 
kubelet: Imporve cmd comment for how kubelet works
 2021-03-01 23:11:20 -08:00
Stephen Augustus
d9435800b6 Fixup golang.org/x/term staticcheck warnings 
Errors from staticcheck:
cmd/preferredimports/preferredimports.go:38:2:
  package golang.org/x/crypto/ssh/terminal is deprecated:
  this package moved to golang.org/x/term.  (SA1019)
vendor/k8s.io/client-go/plugin/pkg/client/auth/exec/exec.go:36:2:
  package golang.org/x/crypto/ssh/terminal is deprecated:
  this package moved to golang.org/x/term.  (SA1019)
vendor/k8s.io/client-go/tools/clientcmd/auth_loaders.go:26:2:
  package golang.org/x/crypto/ssh/terminal is deprecated:
  this package moved to golang.org/x/term.  (SA1019)

Please review the above warnings. You can test via:
  hack/verify-staticcheck.sh <failing package>
If the above warnings do not make sense, you can exempt the line or
file. See:
  https://staticcheck.io/docs/#ignoring-problems

generated:
- hack/update-internal-modules.sh
- hack/lint-dependencies.sh
- hack/update-vendor.sh

Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-02 01:08:21 -05:00
Kubernetes Prow Robot
ef47564f46
Merge pull request #99247 from KofClubs/delete-redundancy-kubelet-options.go 
Deleted a redundant line from #91275
 2021-03-01 21:09:36 -08:00
Kubernetes Prow Robot
33035a3fdf
Merge pull request #99586 from zgfh/update-kubeadm-upgrade-description 
update kubeadm upgrade description
 2021-03-01 18:19:41 -08:00
cici37
9b3d42f20a Address comments. 2021-03-01 16:36:56 -08:00
cici37
716122ccec Update NodeIPAM wrapper 2021-03-01 13:51:59 -08:00
cici37
69fee369c9 Update extension mechanism and related sample. 2021-03-01 10:22:22 -08:00
cici37
9849079d4e Address review comments 2021-03-01 10:22:18 -08:00
cici37
b669f04648 Modify integration test to fill CCM test gap 2021-03-01 10:22:16 -08:00
cici37
27aaee2b40 Move initialize cloud provider with client builder reference inside controller start func 2021-03-01 10:22:10 -08:00
cici37
498fa39af2 Separate example func and add README.md 2021-03-01 10:22:09 -08:00
cici37
52bab024af Separate func 2021-03-01 10:21:57 -08:00
cici37
7b0a6db097 Add demonstration of wiring nodeIPAMController config object 2021-03-01 10:21:52 -08:00
cici37
4729fa49e1 Remove cloud provider name as input parameter. 2021-03-01 10:21:49 -08:00
cici37
2b3d2303a5 Fix flag passing in CCM. 2021-03-01 10:21:46 -08:00
Alan Zhu
8ffdc674b2 update kubeadm upgrade description 
Signed-off-by: Alan Zhu <zg.zhu@daocloud.io>
 2021-03-01 20:42:57 +08:00
SataQiu
2ba178c92c kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false 2021-03-01 11:19:47 +08:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Kubernetes Prow Robot
4880b996b5
Merge pull request #99433 from navist2020/fix/kubeadm/out_info 
Replace yml with yaml
 2021-02-28 09:50:39 -08:00
Kubernetes Prow Robot
601a584b52
Merge pull request #99387 from KofClubs/optimize-getProxyMode-kube-proxy 
Optimized function getProxyMode
 2021-02-26 11:32:28 -08:00
liuxu
385b7d7ff0 fix --event-qps and --event-burst 2021-02-26 17:05:04 +08:00
Kubernetes Prow Robot
1ddc4afcf8
Merge pull request #99294 from pacoxu/kubeadm/dual-stack 
kubeadm: promote DualStack feature gate to Beta
 2021-02-25 20:16:15 -08:00
Lubomir I. Ivanov
108d1dc56a kubeadm: pass pod-infra-container-image for all CRs 
Pass the flag --pod-infra-container-image to the kubelet not only
for Docker but for all CRs.

This flag tells the kubelet to special case the image and not garbage
collect it.
 2021-02-26 02:47:00 +02:00
Kubernetes Prow Robot
4fefc856db
Merge pull request #99213 from AliceZhang2016/affinity 
parse pod's node affinity once in preFilter
 2021-02-25 10:01:24 -08:00
navist2020
c5d8da019a Replace yml with yaml 2021-02-25 11:52:34 +08:00
Mengxue Zhang
4fb8e343c0 parse pod's node affinity once in preFilter 2021-02-25 00:21:32 +00:00
Monis Khan
343a3d1882
csr signers: increase the number of workers 
This change updates the number of workers that the CSR signing
controllers use.  If a large number of certificates (especially
short lived ones) are approved at the same time, it can take the
signing controllers a long time to process them serially.  The
NewCSRSigningController logic is already go routine safe.

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-02-24 15:50:52 -05:00
xiaofei.sun
fd62f32125 Scheduler: remove pkg/apis/core/field_constants.go 2021-02-24 18:06:29 +08:00
Kubernetes Prow Robot
e0862fb144
Merge pull request #99233 from pandaamanda/hardcoding_apiserver_completion 
fix some hardcoding
 2021-02-23 18:26:59 -08:00
Zhang Zhanpeng
10111eb499 Optimized function getProxyMode 
Signed-off-by: Zhang Zhanpeng <zhanpeng.zhang@daocloud.io>
 2021-02-24 10:17:11 +08:00
xiongzhongliang
ac0f4977d4 remove duplicate default message for some flag 
remove duplicate default message for some flag
 2021-02-23 22:24:52 +08:00
Lukasz Szaszkiewicz
662cc70c70 KCM: specifies the upper-bound timeout limit for outgoing requests 
Previously no timeout was set.
Requests without explicit timeout might potentially hang forever and lead to starvation of the application.
 2021-02-23 13:08:19 +01:00
Kubernetes Prow Robot
1768ee824b
Merge pull request #99159 from hasheddan/depcheck-name 
Fix dependencycheck binary name
 2021-02-23 03:56:04 -08:00
Kubernetes Prow Robot
3378bb996c
Merge pull request #99313 from neolit123/1.21-update-kubeadm-owners 
kubeadm: include appovers under reviewers in OWNERS
 2021-02-22 23:48:03 -08:00
Kubernetes Prow Robot
54d48d2b80
Merge pull request #98033 from zshihang/rootca 
move RootCAConfigMap to ga
 2021-02-22 22:24:02 -08:00
Kubernetes Prow Robot
d6c7476ab3
Merge pull request #99155 from soltysh/convert_release 
Add kubectl-convert to client-binaries
 2021-02-22 17:24:15 -08:00
Shihang Zhang
cbf6e38bbd move RootCAConfigMap to ga 2021-02-22 15:59:27 -08:00
Kubernetes Prow Robot
186f934e4c
Merge pull request #98346 from mortent/checkForScalePDBs 
Check if resources implement scale in disruption controller
 2021-02-22 13:58:03 -08:00
Lubomir I. Ivanov
e8f2d888a3 kubeadm: include appovers under reviewers in OWNERS 
Looks like there is a bit of an issue in the Bluderbuss (Prow plugin)
where it prefers to pick reviewers from a parent OWNERS files,
instead of using an approver from a current OWNERS file as
an additional reviewer.
 2021-02-22 20:02:09 +02:00
Kubernetes Prow Robot
d88d9ac3b4
Merge pull request #98845 from justaugustus/zeitgeist 
hack: Use zeitgeist instead of cmd/verifydependencies
 2021-02-22 09:23:43 -08:00
Maciej Szulik
0a0c80c553
Add kubectl-convert to client-binaries 2021-02-22 17:01:34 +01:00
Stephen Augustus
5ac3c56476 generated: Run ./hack/update-bazel.sh 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-02-22 08:48:04 -05:00
Stephen Augustus
71008247dc hack: Use zeitgeist instead of cmd/verifydependencies 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-02-22 08:48:02 -05:00
pacoxu
829b0cde81 kubeadm: promote DualStack feature gate to Beta 2021-02-22 16:03:49 +08:00
Shihang Zhang
1095778dcc remove secret-based sa token client builder 2021-02-21 22:00:40 -08:00
Kubernetes Prow Robot
972ae2f2c2
Merge pull request #99187 from CaoDonghui123/fixKubeadm-1 
Delete duplicate logs for kubeadm upgrade versions
 2021-02-21 15:19:41 -08:00
Kubernetes Prow Robot
d475352bcb
Merge pull request #99194 from pacoxu/fix/kubeadm-hostnamecheck 
kubeadm: perform a host name check on init / join
 2021-02-20 23:07:42 -08:00
Kubernetes Prow Robot
031f2afbba
Merge pull request #98931 from michaelbeaumont/kubelet_well_known 
Move pkg/kubelet/apis to k8s.io/kubelet/pkg/apis
 2021-02-20 11:55:41 -08:00
Zhang Zhanpeng
b0b4867ba8 Deleted a redundant line missing from #91275 
Signed-off-by: Zhang Zhanpeng <zhanpeng.zhang@daocloud.io>
 2021-02-20 10:55:38 +08:00
pacoxu
2c89fa4a59 add hostname check in kubeadm join: warning log only 
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
 2021-02-20 09:50:25 +08:00
xiongzhongliang
00bfd28fbd fix some hardcoding 
fix some hardcoding
 2021-02-20 01:27:54 +08:00
caodonghui
f7469a0a31 Delete duplicate logs 2021-02-19 09:19:11 +08:00
Kubernetes Prow Robot
9fb1aa92f2
Merge pull request #99127 from danwinship/non-dual-stack-proxy 
Make kube-proxy check if IPv6 is really supported before assuming dual-stack
 2021-02-18 08:46:51 -08:00
hasheddan
4825b60ee4
Fix dependencycheck binary name 
The dependencycheck binary name was vendorcheck, which was the original
name of the tool. This updates it to dependencycheck.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-02-17 12:40:42 -06:00
Dan Winship
95c6a488d8 Make kube-proxy check if IPv6 is really supported before assuming dual-stack 2021-02-17 09:11:15 -05:00
Kubernetes Prow Robot
d0a433fa45
Merge pull request #98458 from SaranBalaji90/profiling 
Add support to disable /debug/pprof and /debug/flags/v endpoint
 2021-02-16 10:12:58 -08:00
Kubernetes Prow Robot
1f3fa2a6ea
Merge pull request #99082 from syswu/fix_a_typo 
correct typo in kubeadm init phase command
 2021-02-16 09:20:58 -08:00
Nikhita Raghunath
6cef3a4e33 *: remove nikhiljindal from OWNERS 2021-02-16 10:59:26 +05:30
Nikhita Raghunath
6b12c96a9b *: remove madhusudancs from reviewers 2021-02-16 10:59:26 +05:30
Nikhita Raghunath
b11516d69f *: move gmarek to emeritus_approvers 2021-02-16 10:59:19 +05:30
Bob Killen
1a9e95d672
cmd/kubemark: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek from an
approver to an emeritus_approver.
 2021-02-14 15:17:48 -05:00
ziyin.lu
b64b2feb0c kubelet: Imporve cmd comment for how kubelet works 2021-02-14 23:16:21 +08:00
Heng WU
ace6b47298
Update addons.go 2021-02-14 21:04:43 +08:00
Kubernetes Prow Robot
b2b8c1f18d
Merge pull request #98980 from syswu/missing_return_nil 
catching errors for 'kubeadm join'
 2021-02-11 21:32:47 -08:00
Sri Saran Balaji Vellore Rajakumar
af05a7eca3 Refactor Kubelet Server to take kubeConfiguration instead of multiple fields 2021-02-11 16:15:35 -08:00
Sri Saran Balaji Vellore Rajakumar
51cdf4e97b Add support to disable /debug/pprof and /debug/flags/v endpoint 
Co-authored-by: xiaofei.sun <sunxiaofei@kuaishou.com>
Co-authored-by: SaranBalaji90 <srisaranbalaji@gmail.com>
 2021-02-11 15:56:53 -08:00
Kubernetes Prow Robot
2d153fe04e
Merge pull request #98969 from khenidak/beta-feature 
upgrade IPv6DualStack feature to beta and turn on by default
 2021-02-11 11:53:37 -08:00
Heng WU
4b7f6d8750
Update joinconfiguration.go 2021-02-11 09:57:08 +08:00
Heng WU
0bb842637c
Update joinconfiguration.go 2021-02-11 09:08:11 +08:00
Kubernetes Prow Robot
838bb6a567
Merge pull request #98663 from gavinfish/sched-remove-plugin-pt 
Scheduler: change config.Plugins from pointers to objects
 2021-02-10 15:36:15 -08:00
Khaled (Kal) Henidak
3e56ddae67 upgrade IPv6DualStack feature to beta and turn on by default 2021-02-10 23:14:05 +00:00
drfish
74315f9c56 Change config.Plugins from pointers to objects 2021-02-10 23:45:59 +08:00
Michael Beaumont
a5a6762d33
Move pkg/kubelet/apis to k8s.io/kubelet/pkg/apis 2021-02-09 21:37:39 +01:00
Kubernetes Prow Robot
943e67c01f
Merge pull request #95479 from mgjeong/feature-memory-manager-working 
Memory manager
 2021-02-09 03:40:56 -08:00
Kubernetes Prow Robot
fcb55645a9
Merge pull request #98547 from neolit123/1.21-update-kubeadm-owners 
kubeadm: update OWNERS for 1.21
 2021-02-09 00:45:16 -08:00
Kubernetes Prow Robot
2b7c61b1bb
Merge pull request #98205 from pacoxu/build/pauses 
update pause image to 3.4.1 and also update the change log
 2021-02-08 18:20:58 -08:00
Artyom Lukianov
932134034c memory manager: update API constant to have camel case format 
Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:10:02 +02:00
Artyom Lukianov
7561a0f96e memory manager: provide new flag var to parse reserved-memory parameter 
The new flag will parse the `--reserved-memory` flag straight forward
to the []kubeletconfig.MemoryReservation variable instead of parsing
it to the middle map representation.

It gives us possibility to get rid of a lot of unneeded code and use the single
presentation for the reserved-memory.

Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:10:01 +02:00
Artyom Lukianov
ff2a110920 memory manager: provide the new type to contain resources for each NUMA node 
Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:10:00 +02:00
Artyom Lukianov
24be74e759 memory manager: update bazel files 
Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:09:59 +02:00
Krzysztof Wiatrzyk
711e85af24 memory manager: adding additional tests for server.go file, for parseReservedMemoryConfig() function. 2021-02-09 00:54:58 +02:00
Artyom Lukianov
93accb51e4 memory manager: add memory manager flag under kubelet options and kubelet config 
The commit also includes generated files after `make generated_files`.

Signed-off-by: Byonggon Chun <bg.chun@samsung.com>
 2021-02-09 00:54:58 +02:00
Kubernetes Prow Robot
f266f60da9
Merge pull request #98839 from Mattias-/kubeadm-fix-config-print-placeholder 
kubeadm: Fix placeholder in config print help text
 2021-02-08 11:54:43 -08:00
Kubernetes Prow Robot
0867767d6e
Merge pull request #98882 from kvaps/flatten-adminconfig 
kubeadm: flatten admin.conf for cluster-info generation
 2021-02-08 09:26:28 -08:00
Andrei Kvapil
9de0b2bf46
kubeadm: flatten admin.conf for cluster-info 2021-02-08 17:22:01 +01:00
Mattias Appelgren
7e80d4d191 kubeadm: Fix placeholder in config print help text 2021-02-06 18:32:45 +01:00
hasheddan
8ae6a20485
kubeadm: drop explicit constant override in version test 
The k8s release bucket constant is not longer overriden in network tests
because the fetcher is mocked rather than using httptest.NewServer. See
previous implementation in
https://github.com/kubernetes/kubernetes/pull/49119/files#diff-82f2b09991047d4a1884d53dedadd64a473d5c4dc75293514e71773ceedf08e2R128

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-02-06 11:03:00 -06:00
hasheddan
1d164d0747
kubeadm: get k8s CI version markers from k8s infra bucket 
Updates kubeadm version resolution to use kubernetes community infra
bucket to fetch appropriate k8s ci versions. The images are already
being pulled from the kubernetes community infra bucket meaning that a
mismatch can occur when the ci version is fetched from the google infra
bucket and the image is not yet present on k8s infra.

Follow-up to kubernetes/kubernetes#97087

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-02-06 10:59:15 -06:00
pacoxu
f681edf58e kubeadm: improve error message about node subnet size validation 
Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>
Co-authored-by: SataQiu <1527062125@qq.com>
Co-authored-by: driazati <david.riazati@gatech.edu>
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
 2021-02-05 23:29:26 +08:00
pacoxu
8946f26769 update pause to 3.4.1 for kubelet/kubeadm 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-02-05 21:33:01 +08:00
Morten Torkildsen
96ea28aa77 Check if resources implement scale in disruption controller 2021-02-03 20:19:35 -08:00
Sean McGinnis
874ceb0fdf
Improve wording in kubeadm upgrade plan 
Originally raised as an issue with invalid versions to plan, but it has
been determined with air gapped environments and development versions it
is not possible to fully address that issue.

But one thing that was identified was that we can do a better job in how
we output the upgrade plan information. Kubeadm outputs the requested
version as "Latest stable version", though that may not actually be the
case. For this instance, we want to change this to "Target version" to
be a little more accurate.

Then in the component upgrade table that is emitted, the last column of
AVAILABLE isn't quite right either. Also changing this to TARGET to
reflect that this is the version we are targetting to upgrade to,
regardless of its availability.

There could be some improvements in checking available versions,
particularly in air gapped environments, to make sure we actually have
access to the requested version. But this at least clarifies some of the
output a bit.

Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
 2021-02-03 09:44:15 -06:00
Kubernetes Prow Robot
074a517720
Merge pull request #98706 from roycaihw/flake/storage-version-integration-healthz 
storage version integration test: check the test server's health before running
 2021-02-02 21:32:28 -08:00
Kubernetes Prow Robot
356ee4c83a
Merge pull request #98254 from changshuchao/scheduler-config-help-line 
Fix the kube-scheduler binary's description of the --config parameter…
 2021-02-02 19:40:28 -08:00
Haowei Cai
dc047b183b storage version integration test: check the test server's health before running 
we disabled the /healthz check because our test blocks one post-start
hook from finishing. Instead we should check all the other /healthz/...
endpoints before running the tests
 2021-02-02 18:31:53 -08:00
Kubernetes Prow Robot
d2659101bf
Merge pull request #98325 from deads2k/update-default-authorizer 
Update delegated authorization options default to eliminate unnecessary SARs
 2021-02-02 11:38:28 -08:00
Kubernetes Prow Robot
645c40fcf6
Merge pull request #98638 from neolit123/1.21-optimize-unit-tests-certs 
kubeadm: introduce static defaults for unit tests
 2021-02-02 03:20:29 -08:00
Lubomir I. Ivanov
f27555b890 kubeadm: optimize tests in pki_helpers_tests.go 
Reduce the number of calls to algorithm.GenerateKey()
but try not to reduce coverage.
 2021-02-02 04:25:06 +02:00
Kubernetes Prow Robot
f81220975e
Merge pull request #98257 from lingsamuel/etcd-lease-max-count 
lease manager limit max objects attached to a lease
 2021-02-01 14:52:27 -08:00
Kubernetes Prow Robot
6aef7ca013
Merge pull request #98553 from mtaufen/said-ga 
Graduate ServiceAccountIssuerDiscovery to GA
 2021-02-01 13:42:01 -08:00
Kubernetes Prow Robot
6e50e64cb3
Merge pull request #98664 from liggitt/kubeadm-key-fixtures 
Use private key fixtures for kubeadm unit tests
 2021-02-01 12:50:06 -08:00
Michael Taufen
6aa80d9172 Graduate ServiceAccountIssuerDiscovery to GA 
Waiting on KEP updates first:
https://github.com/kubernetes/enhancements/pull/2363
 2021-02-01 11:44:23 -08:00
Lubomir I. Ivanov
afea70f9ae kubeadm: update OWNERS for 1.21 2021-02-01 20:14:00 +02:00
Lubomir I. Ivanov
6578e0f6c5 kubeadm: introduce static defaults for unit tests 
Add DefaultedStaticInitConfiguration() which can be
used instead of DefaultedInitConfiguration() during unit tests.

The later can be slow since it performs dynamic defaulting.
 2021-02-01 19:43:57 +02:00
Jordan Liggitt
8761972f68 Use private key fixtures for kubeadm unit tests 2021-02-01 10:06:10 -05:00
Ling Samuel
c8db72c38c
api-server add --lease-max-object-count 
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com>
 2021-02-01 18:20:59 +08:00
Kubernetes Prow Robot
c04058418f
Merge pull request #98243 from Jiawei0227/unregister-plugin 
Disable in-tree plugin without enabling CSI migration
 2021-01-29 12:59:48 -08:00
changshuchao
7d8e07bd17 Fix the kube-scheduler binary's description of the --config parameter is inaccurate 
Signed-off-by: changshuchao <chang.shuchao1@zte.com.cn>
 2021-01-29 18:04:57 +08:00
Lubomir I. Ivanov
01ea75e36d kubeadm: exclude control plane nodes from external LBs 
Apply the label:
"node.kubernetes.io/exclude-from-external-load-balancers"

To control plane nodes to preserve backwards compatibility
with the legacy mode where "master" nodes were excluded from
LBs.
 2021-01-26 20:42:58 +02:00
David Eads
62230d3c46 update delegated authz defaults in kube binaries 2021-01-26 12:53:24 -05:00
Kubernetes Prow Robot
76d1292930
Merge pull request #98059 from jprzychodzen/ld-kcm 
[kube-controller-manager] Lower timeout for leaderelection resourcelock
 2021-01-26 02:36:34 -08:00
Jiawei Wang
bda557b4bc Disable in-tree plugin without enabling CSI migration 
This commit replaces the CSIMigrationXXXComplete flag
with InTreePluginXXUnregister flag. This new flag will
be a superset of the CSIMigrationXXXComplete. But this
decouple the plugin unregister from CSI migration. So
if a K8s distribution want to go directly with CSI and
do not support in-tree, they can use this flag directly.

Testing:
1. Enable the InTreePluginXXUnregister and not CSIMigrationXXX,
verify that the PVC using old plugin name will have error
saying cannot find the plugin
2. Enable both the InTreePluginXXUnregister and CSIMigrationXXX
verify that the PVC using old plugin name will start to use
the migrated CSI plugin
 2021-01-22 16:58:51 -08:00
Kubernetes Prow Robot
0da0d186a6
Merge pull request #96675 from pacoxu/fix/volume-stats-agg-period 
fix: volume stats disabled when value is negative.(Currently, 0 means defualt 1m)
 2021-01-19 22:17:58 -08:00
Kubernetes Prow Robot
cf2fceb11f
Merge pull request #98136 from chymy/kubeadm-ep 
kubeadm: APIEndpointFromString verifies ip
 2021-01-19 07:29:45 -08:00
chymy
081d78f635 kubeadm: APIEndpointFromString verifies ip 
Signed-off-by: chymy <chang.min1@zte.com.cn>
 2021-01-19 18:36:55 +08:00
Kubernetes Prow Robot
d70ee902fd
Merge pull request #97858 from lyzs90/pull-real-node-images 
Pull hollow node images from real nodes
 2021-01-18 06:25:44 -08:00
Kubernetes Prow Robot
8bf42039e6
Merge pull request #96552 from pandaamanda/klog_fmt 
use klog.Info and klog.Warning when had no format
 2021-01-15 17:57:43 -08:00
Kubernetes Prow Robot
fe58a937bd
Merge pull request #96857 from jnummelin/kubelet-cri-endpoint-help 
Finetune container-runtime-endpoint option help text
 2021-01-15 16:17:43 -08:00
Kubernetes Prow Robot
7791bbe978
Merge pull request #98008 from RA489/min_support_ver 
kubeadm: Update versions for 1.21
 2021-01-15 14:50:04 -08:00
Kubernetes Prow Robot
e1c1fd9edf
Merge pull request #97880 from justinsb/spelling 
Fix spelling typos: scheduable -> schedulable
 2021-01-15 03:43:51 -08:00
RA489
fe91902d08 kubeadm: Update versions for 1.21 2021-01-15 16:36:34 +05:30
Kubernetes Prow Robot
4a595bd373
Merge pull request #97372 from ihgann/master 
Fix bug in Member Exists Join for Kubeadm etcd join
 2021-01-14 12:45:30 -08:00
Kubernetes Prow Robot
81811a4eb8
Merge pull request #97958 from jprzychodzen/leader-election-kube-scheduler 
[kube-scheduler] Lower timeout for leaderelection resourcelock
 2021-01-14 08:55:18 -08:00
Kubernetes Prow Robot
d067c2e95d
Merge pull request #97087 from SataQiu/change-ci-image-repo 
kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images
 2021-01-14 08:55:04 -08:00
Jakub Przychodzeń
87924e53f0 [kube-controller-manager] Lower timeout for leaderelection resourcelock 
Migrate how resource lock and leader election config is generated to new way, hidding kubeClient. This also halfs kubeClient timeout, making it an useful value.

If timeout is equal to RenewDeadline and we hit client timeout on request, there will be no retry, as RenewDeadline part will cancel the context and lose leader election. So setting a timeout to value at least equal to RenewDeadline is pointless.

Setting it as half of RenewDeadline is a heuristic to resolve this missing retry problem without adding additional parameter.
 2021-01-14 10:49:42 +01:00
RA489
546b0a704d kubeadm: Update versions for 1.21 2021-01-13 18:03:34 +05:30
Kubernetes Prow Robot
bd947dfc65
Merge pull request #97919 from neolit123/1.21-fix-coredns-migration-preflight 
kubeadm: trim leading "v" when running CoreDNS migration preflight
 2021-01-12 06:12:25 -08:00
Jakub Przychodzeń
93cf797c50 [Kube-scheduler] Lower timeout for leaderelection resourcelock 
Migrate how resource lock and leader election config is generated to new
way, hidding kubeClient. This also halfs kubeClient timeout, making it
an useful value.
 2021-01-12 11:06:44 +01:00
Kubernetes Prow Robot
1f5c1b6d91
Merge pull request #96722 from adtac/apfvalidation 
APF: make command-line args validation error more descriptive
 2021-01-11 18:38:37 -08:00
Kubernetes Prow Robot
e054aa268e
Merge pull request #97480 from lingsamuel/etcd-lease-max-size 
apiserver add lease object count metric
 2021-01-11 08:39:20 -08:00
Lubomir I. Ivanov
3b5e698cb2 kubeadm: trim leading "v" when running CoreDNS migration preflight 
During upgrade the coredns migration library seems to require
that the input version doesn't have the "v" prefix".

Fixes a bug where the user cannot run commands such as
"kubeadm upgrade plan" if they have `v1.8.0` installed.

Assuming this is caused by the fact that previously the image didn't
have a "v" prefix.
 2021-01-11 18:21:19 +02:00
Ling Samuel
7e9fe39cd7
apiserver add metric etcd_lease_object_counts 
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com>
 2021-01-11 21:22:07 +08:00
Justin SB
8797738c02 Fix spelling typos: scheduable -> schedulable 
Bulk fix of a common typo.
 2021-01-09 12:59:33 -05:00
he.qingguo
6f1c8de85c Fix typo of BoostrapToken in kubeadmin-type.go] 
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
 2021-01-09 16:16:29 +08:00
lyzs90
7b3322f677 Pull hollow node images from real nodes 2021-01-09 00:12:56 +08:00
Kubernetes Prow Robot
43ce28b995
Merge pull request #97625 from pacoxu/fix/kubeadm-token-warning 
kubeadm: avoid detection of the container runtime for commands that do not need it
 2021-01-05 11:47:10 -08:00
Kubernetes Prow Robot
07bd985724
Merge pull request #96561 from ialidzhikov/cleanup/csi-node-info 
Remove CSINodeInfo feature gate
 2021-01-05 11:46:00 -08:00
Kubernetes Prow Robot
1f64838041
Merge pull request #96854 from changshuchao/run-test1 
Optimize some irregular variable names
 2021-01-05 10:29:59 -08:00
changshuchao
854b74d9e2 Optimize some irregular variable names 
Signed-off-by: changshuchao <chang.shuchao1@zte.com.cn>
 2021-01-06 02:54:18 +08:00
pacoxu
bd3a74fece use default unkown sock for kubeadm cmd if cri detect is not needed 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-01-05 22:30:42 +08:00
Kubernetes Prow Robot
17bb2fc050
Merge pull request #97706 from knight42/refactor/kubeadm-certs-to-stable 
refactor(kubeadm): remove the "alpha certs" command
 2021-01-05 04:50:10 -08:00
Kubernetes Prow Robot
42fe1d3405
Merge pull request #97620 from rajansandeep/patch-1 
[kubeadm]: CoreDNS preflight: Parse correct version syntax
 2021-01-05 04:49:58 -08:00
Kubernetes Prow Robot
242e07dc3c
Merge pull request #97290 from neolit123/1.21-kubeadm-improve-token-error-messages 
kubeadm: improve the error messages when validating discovery CA hash
 2021-01-04 22:55:59 -08:00
Jian Zeng
394fb5617f refactor(kubeadm): remove the "alpha certs" command 2021-01-05 11:18:36 +08:00
Sandeep Rajan
a9ba7b06f0 CoreDNS preflight: Remove "v" from version 
Corrects the error: "CoreDNS will not be upgraded: cannot migrate up to 'v1.8.0' from '1.7.0'"
 2021-01-04 20:26:03 -05:00
Kubernetes Prow Robot
ffe74b2cf1
Merge pull request #97336 from maaoBit/remove_cleanup-ipvs 
remove --cleanup-ipvs flag of kube-proxy
 2021-01-04 08:41:57 -08:00
he.qingguo
5faa19ede8 Fix Spelling error about [workflow] for kubeadm 
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
 2020-12-31 16:00:53 +08:00
Jian Zeng
57d563403b refactor(kubeadm): remove deprecated command "alpha selfhosting pivot" 2020-12-31 13:47:15 +08:00
maao
d001b9b72a remove --cleanup-ipvs flag of kube-proxy 
Signed-off-by: maao <maao420691301@gmail.com>
 2020-12-31 11:29:38 +08:00
Jian Zeng
5ae687ecc6 feat(kubeadm): graduate command "kubeconfig user" 2020-12-30 10:24:23 +08:00
Kubernetes Prow Robot
80be1d6c72
Merge pull request #96429 from rajansandeep/coredns180-kubeadm 
[kubeadm]: Bump CoreDNS version to 1.8.0
 2020-12-29 13:19:48 -08:00
Kubernetes Prow Robot
88a05df5ff
Merge pull request #97266 from robbiemcmichael/kubeadm-validate-cert-chains 
kubeadm: support certificate chain validation
 2020-12-24 11:32:26 -08:00
Robbie McMichael
9022f24aed kubeadm: tests for certificate chain validation 2020-12-24 23:49:04 +08:00
Robbie McMichael
de8821acd3 kubeadm: support certificate chain validation 
Fixes an issue where some kubeadm phases fail if a certificate file
contains a certificate chain with one or more intermediate CA
certificates. The validation algorithm has been changed from requiring
that a certificate was signed directly by the root CA to requiring that
there is a valid certificate chain back to the root CA.
 2020-12-24 23:41:10 +08:00
Kubernetes Prow Robot
9858bc2925
Merge pull request #97452 from 249043822/br-cleanup-kubctl111 
remove unused funcs for kubeadm tests
 2020-12-23 17:04:26 -08:00
Kubernetes Prow Robot
6d76ece4d6
Merge pull request #97413 from SataQiu/fix-kubeadm-join-command-20201221 
kubeadm: clean redundant whitespace for join command template
 2020-12-23 10:18:26 -08:00
KeZhang
0abed09a6a remove unused funcs for kubeadm tests 2020-12-22 19:37:30 +08:00
Abel Barrera Duran
52979da973 32bit > 4GB integer overflow edge case fix 2020-12-21 13:12:42 -05:00
SataQiu
3a2ffbf70a kubeadm: clean redundant whitespace for join command template 2020-12-21 11:27:22 +08:00
Ian Gann
dc70c79a00 Fix bug in Member Exists Join for Kubeadm etcd join 
In kubeadm etcd join there is a a bug that exists where,
if a peer already exists in etcd, it attempts to mitigate
by continuing and generating the etcd manifest file. However,
this existing "member name" may actually be unset, causing
subsequent etcd consistency checks to fail.

This change checks if the member name is empty - if it is,
it sets the member name to the node name, and resumes.
 2020-12-17 11:54:02 -08:00
Nicole Han
b80abf6d34 update cloud-controller-manager samples to read --cloud-config flag 2020-12-15 10:56:22 -08:00
Lubomir I. Ivanov
429b7e2272 kubeadm: improve the error messages when validating discovery CA hash 
The error messages when the user feeds an invalid discovery token CA
hash are vague. Make sure to:
- Print the list of supported hash formats (currently only "sha256").
- Wrap the error from pubKeyPins.Allow() with a descriptive message.
 2020-12-14 20:13:36 +02:00
Kubernetes Prow Robot
6fc51bc528
Merge pull request #97244 from pacoxu/fix/97234 
etcd version for 1.19 is 3.4.13 for cve fixes
 2020-12-14 02:17:29 -08:00
Antonio Ojea
2e4aed2d4a bind-address flag usage 2020-12-11 18:47:24 +01:00
pacoxu
920dc25531 etcd version for 1.19 is 3.4.13 for cve fixes 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-12-11 23:37:38 +08:00
ialidzhikov
bc432124a2 Remove CSINodeInfo feature gate 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2020-12-10 09:58:22 +02:00
Kubernetes Prow Robot
74b4f3d015
Merge pull request #97009 from lingsamuel/etcd-config-reuse-duration 
apiserver add --lease-reuse-duration-seconds to config lease reuse duration
 2020-12-08 21:06:16 -08:00
Kubernetes Prow Robot
870d69e8af
Merge pull request #96928 from mysunshine92/kubelet-help-enable-cadvisor-json-endpoints 
Update the help text for kubelet's enable-cadvisor-json-endpoints flag to explicitly mention that it has no effect on the /stats/summary endpoint.
 2020-12-08 21:04:41 -08:00
Kubernetes Prow Robot
2282b3c258
Merge pull request #96872 from cici37/moveFeature 
Move IPv6DualStack to k8s.io/controller-manager
 2020-12-08 20:04:16 -08:00
Kubernetes Prow Robot
03aba080a6
Merge pull request #96860 from pacoxu/fix/96833 
fix kube-dns federations check in kubeadm upgrade dns check preflight
 2020-12-08 20:04:07 -08:00
Kubernetes Prow Robot
9a175b9b2a
Merge pull request #96223 from SataQiu/fix-scheduler-20201104 
scheduler: parse Pod's Node affinity once in PreScore phase
 2020-12-08 17:28:06 -08:00
Kubernetes Prow Robot
9c35c491f0
Merge pull request #91450 from gaurav1086/kube_proxy_test_fix_goroutine_leak 
kube-proxy-test: fix goroutine leak
 2020-12-08 16:28:08 -08:00
pacoxu
4901855fdd fix doc/comments error: volume stats agg period default value 1m and disable when it is negative like -1s. 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-12-07 11:46:54 +08:00
SataQiu
fa04c55ee6 kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-12-06 14:59:12 +08:00
Ling Samuel
c99567005d
apiserver add --lease-reuse-duration-seconds to config lease reuse duration 
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com>
 2020-12-04 19:19:49 +08:00
Michaël Lévesque-Dion
046ec59a8b use 'masked' instead of 'redacted' 2020-12-03 11:01:41 -05:00
Michaël Lévesque-Dion
0841b13e37 use deepcopy to actually operate on a copy 2020-12-02 14:44:11 -05:00
Michaël Lévesque-Dion
ec271c0e4f use a copy of the config 2020-12-02 12:57:17 -05:00
Sandeep Rajan
2eabd9d832 fix migration logic 
modify addon test to cover the entire migration logic
 2020-12-02 12:53:07 -05:00
Michaël Lévesque-Dion
4ab4801139 avoid logging kubelet configuration headers 2020-12-01 18:36:48 -05:00
wangyamei
f6d7cab203 Update the help text for kubelet's enable-cadvisor-json-endpoints flag to explicitly mention that it has no effect on the /stats/summary endpoint.enable-cadvisor-json-endpoints 2020-11-28 21:59:57 +08:00
Paco Xu
4525f3fef8 coredns dep.Severity is newdefault, not newDefault 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-11-27 18:17:02 +08:00
SataQiu
2b38078de1 scheduler: parse Pod's Node affinity once in PreScore phase 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-11-26 11:19:52 +08:00
cici37
4d201764dc Move feature IPv6DualStack to k8s.io/controller-manager 2020-11-25 15:42:13 -08:00
pacoxu
05f9e500ad fix kubeadm upgrade dns check preflight 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-11-25 21:07:25 +08:00
Jussi Nummelin
3f284fa892 Finetune container-runtime-endpoint option help text 
Signed-off-by: Jussi Nummelin <jussi.nummelin@gmail.com>
 2020-11-25 10:04:34 +00:00
Adhityaa Chandrasekar
39fb8ced93 APF: make command-line args validation error more descriptive 
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2020-11-19 20:37:06 +00:00
Jordan Liggitt
09bdf76b8a Plumb event recorder to garbage collector controller 2020-11-17 10:42:45 -05:00
Sandeep Rajan
40862c3b60 bump coredns to 1.8.0 2020-11-16 15:22:05 -05:00
Kubernetes Prow Robot
36f571404f
Merge pull request #96527 from adtac/apfbeta 
promote API priority and fairness types and APIs to beta
 2020-11-13 19:33:04 -08:00
yue9944882
849be447f5 APF: graduate API and types to beta 
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2020-11-13 23:20:39 +00:00
xiongzhongliang
90f4aeeea4 use klog.Info and klog.Warning when had no format 2020-11-14 00:55:06 +08:00
Kubernetes Prow Robot
da75c26648
Merge pull request #95978 from roycaihw/storage-version/gc 
Storage version garbage collector
 2020-11-12 18:36:37 -08:00
Kubernetes Prow Robot
cd21a1240a
Merge pull request #94866 from smarterclayton/scheduling_metrics 
scheduler: Implement resource metrics at /metrics/resources
 2020-11-12 18:36:23 -08:00
Haowei Cai
f675dac440 generated 2020-11-12 16:25:22 -08:00
Haowei Cai
ee9ace14c2 add storage version garbage collector 2020-11-12 16:21:00 -08:00
Kubernetes Prow Robot
ae95984e88
Merge pull request #96426 from damemi/print-scheduler-config 
Log defaulted kube-scheduler component config at startup
 2020-11-12 16:03:01 -08:00
Mike Dame
14fa76d92f Log defaulted kube-scheduler component config at startup 2020-11-12 16:03:11 -05:00
Kubernetes Prow Robot
e38b1b94f8
Merge pull request #96399 from andrewsykim/service-config 
move service controller config to k8s.io/cloud-provider/controllers/service/config
 2020-11-12 11:21:57 -08:00
Kubernetes Prow Robot
6c1a9bf177
Merge pull request #96385 from cici37/addingSamples 
Adding sample files to demonstrate how cloud providers leverage CCM
 2020-11-12 11:21:21 -08:00
Kubernetes Prow Robot
71331d8596
Merge pull request #96372 from serathius/sanitization-kubelet 
Add --experimental-logging-sanitization flag to kubelet
 2020-11-12 11:21:12 -08:00
Kubernetes Prow Robot
ee0d35895d
Merge pull request #96190 from soltysh/kubectl_staging 
Move the remaining kubectl bits to k8s.io/kubectl
 2020-11-12 11:20:23 -08:00
Clayton Coleman
264496cc41
scheduler: Implement resource metrics at /metrics/resources 
Implement pod resource metrics as described in KEP 1916. The new
`/metrics/resources` endpoint is exposed on the active scheduler
and reports kube_pod_resources* metrics that present the effective
requests and limits for all resources on the pods as calculated by
the scheduler and kubelet. This allows administrators using the
system to quickly perform resource consumption, reservation, and
pending utilization calculations when those metrics are read.
Because metrics calculation is on-demand, there is no additional
resource consumption incurred by the scheduler unless the endpoint
is scraped.
 2020-11-12 12:37:38 -05:00
Marek Siarkowicz
8e60d75c15 Add --experimental-logging-sanitization flag to Kubelet 
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
 2020-11-12 12:32:19 +01:00
sw.han
d070bff273 Add kubelet configuration flag 'topology-manager-scope' 
add kubelet config option.
* --topology-manager-scope=[ container | pod ]
* default=container

Signed-off-by: Krzysztof Wiatrzyk <k.wiatrzyk@samsung.com>
 2020-11-12 12:25:54 +01:00
Kubernetes Prow Robot
12d9183da0
Merge pull request #95718 from SergeyKanzhelev/runtimeClass2 
RuntimeClass GA
 2020-11-12 00:44:51 -08:00
Kubernetes Prow Robot
d233111f5b
Merge pull request #94196 from andrewsykim/registry-creds 
kubelet: add alpha credential provider plugins
 2020-11-11 19:59:11 -08:00
cici37
443f829703 Adding sample files to demonstrate how cloud provider leverage CCM. 2020-11-11 19:50:06 -08:00
Kubernetes Prow Robot
667d1c2c3f
Merge pull request #93370 from alaypatel07/add-new-cronjob-controller 
Add cronjob controller v2
 2020-11-11 15:42:50 -08:00
Sergey Kanzhelev
06da0e5e74 GA of RuntimeClass feature gate and API 2020-11-11 19:22:32 +00:00
Kubernetes Prow Robot
c3769096c6
Merge pull request #96439 from Huang-Wei/sched-policy-defaultpreemption 
Fix a bug that DefaultPreemption plugin is disabled when using scheduler policy
 2020-11-11 07:44:18 -08:00
Kubernetes Prow Robot
6b24a5796c
Merge pull request #95382 from neolit123/1.20-deprecate-master-label 
kubeadm: deprecate the "node-role.kubernetes.io/master" label / taint
 2020-11-11 06:06:10 -08:00
Wei Huang
47a7c374c6
Fix a bug that DefaultPreemption plugin is disabled when using scheduler policy 2020-11-10 17:48:32 -08:00
Alay Patel
38bb53555e update violation_exceptions.list and make generated 2020-11-10 17:32:06 -05:00
Alay Patel
8d7dd4415e add cronjob_controllerv2.go 2020-11-10 17:32:06 -05:00
Kubernetes Prow Robot
40ef0ad6e9
Merge pull request #95002 from p0lyn0mial/upstream-supress-err-conn-killed 
stop logging killing connection/stream because serving request timed out and response had been started
 2020-11-10 12:37:51 -08:00
Lubomir I. Ivanov
fb7ddf88e9 kubeadm: mark the "master" label/taint as deprecated 
- Mark the "node-role.kubernetes.io/master" key for labels
and taints as deprecated.
- During "kubeadm init/join" apply the label
"node-role.kubernetes.io/control-plane" to new control-plane nodes,
next to the existing "node-role.kubernetes.io/master" label.
- During "kubeadm upgrade apply", find all Nodes with the "master"
label and also apply the "control-plane" label to them
(if they don't have it).
- During upgrade health-checks collect Nodes labeled both "master"
and "control-plane".
- Rename the constants.ControlPlane{Taint|Toleraton} to
constants.OldControlPlane{Taint|Toleraton} to manage the transition.
- Mark constants.OldControlPlane{{Taint|Toleraton} as deprecated.
- Use constants.OldControlPlane{{Taint|Toleraton} instead of
constants.ControlPlane{Taint|Toleraton} everywhere.
- Introduce constants.ControlPlane{Taint|Toleraton}.
- Add constants.ControlPlaneToleraton to the kube-dns / CoreDNS
Deployments to make them anticipate the introduction
of the "node-role.kubernetes.io/control-plane:NoSchedule"
taint (constants.ControlPlaneTaint) on kubeadm control-plane Nodes.
 2020-11-10 22:10:13 +02:00
Andrew Sy Kim
b1e0decce1 move service controller config to k8s.io/cloud-provider/controllers/service/config 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-11-10 14:59:44 -05:00
Andrew Sy Kim
51441fd052 kubelet: support alpha credential provider exec plugins 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-11-10 13:44:06 -05:00
pigletfly
19a36d4b9a Remove duplicate import 2020-11-10 19:11:46 +08:00
Kubernetes Prow Robot
4261200724
Merge pull request #93873 from roycaihw/storage-version/handler 
Apiserver updates storageversions API and filters certain write requests during bootstrap
 2020-11-09 17:30:41 -08:00
Kubernetes Prow Robot
995e531a63
Merge pull request #93764 from cici37/ccmwrap 
Adding flexibility to CCM
 2020-11-09 13:44:28 -08:00
Tim Allclair
a439bc5572
Remove --redirect-container-streaming functionality (#95935) 
* Remove --redirect-container-streaming functionality

* Update bazel
 2020-11-09 11:50:11 -08:00
Kubernetes Prow Robot
10221a8dac
Merge pull request #94643 from lonng/simplify-code 
Avoid unnecessary calls if other error occurred
 2020-11-09 11:49:57 -08:00
Lukasz Szaszkiewicz
057986e32c stops puting a stacktrace of aborted requests in the logs 
Aborted requests are the ones that were disrupted with http.ErrAbortHandler.
For example, the timeout handler will panic with http.ErrAbortHandler when a response to the client has been already sent
and the timeout elapsed.

Additionally, a new metric requestAbortsTotal was defined to count aborted requests. The new metric allows for aggregation for each group, version, verb, resource, subresource and scope.
 2020-11-09 09:23:40 +01:00
Haowei Cai
1c2d446648 require APIServerIdentity to be enabled to run StorageVersionAPI 
without APIServerIdentity enabled, stale apiserver leases won't be GC'ed
and the same for stale storage version entries. In that case the storage
migrator won't operate correctly without manual intervention.
 2020-11-08 19:06:30 -08:00
Haowei Cai
b5b93004b5 generated 2020-11-08 18:53:40 -08:00
Chao Xu
fa1805cc5c Add an integration test. 
To make sure that the storage version filter can block certain requests until
the storage version updates are completed, and that the apiserver works
properly after the storage version updates are done.
 2020-11-08 18:53:40 -08:00
Chao Xu
7218978716 Add a generic filter that blocks certain write requests before 
StorageVersions are updated during apiserver bootstrap.

Also add a poststarthook to the aggregator which updates the
StorageVersions via the storageversion.Manager
 2020-11-08 18:53:40 -08:00
Kubernetes Prow Robot
2570a9d94c
Merge pull request #96306 from SataQiu/small-fix-20201106 
kubeadm: fix the lint failure where return value is not checked
 2020-11-07 11:43:37 -08:00
Kubernetes Prow Robot
281866b35c
Merge pull request #95533 from roycaihw/apiserver-lease-controller 
Add kube-apiserver lease controller
 2020-11-06 18:09:37 -08:00
Haowei Cai
3761a00e5b add kube-apiserver-lease-controller poststart hook 2020-11-06 13:33:08 -08:00
Kubernetes Prow Robot
b1b627072a
Merge pull request #96217 from p0lyn0mial/delegated-authn-webhook-token-timeout 
DelegatingAuthenticationOptions TokenReview client timeout
 2020-11-06 11:29:16 -08:00
SataQiu
50d0a40155 kubeadm: fix the lint failure where return value is not checked 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-11-06 20:53:58 +08:00
Maciej Szulik
523854a0e2
Generated changes 2020-11-06 12:04:39 +01:00
Maciej Szulik
9b8247e5dd
Move the remaining kubectl bits to k8s.io/kubectl 2020-11-06 12:04:39 +01:00
Maciej Szulik
2e74df97a4
Introduce kubectl-convert plugin 2020-11-06 12:04:36 +01:00
cici37
895a0a8d5e Adding config extension to CCM. 2020-11-06 02:42:44 -08:00
Kubernetes Prow Robot
8d6829fe1e
Merge pull request #95896 from zshihang/flag 
make flags of TokenRequest required
 2020-11-05 18:36:50 -08:00
Shihang Zhang
a5021a4ddf make flags of TokenRequest required 2020-11-05 10:40:56 -08:00
Shihang Zhang
4c593b268a default service-account-extend-token-expiration to true 2020-11-05 09:07:01 -08:00
Kubernetes Prow Robot
e0a51c9e6b
Merge pull request #93244 from Sh4d1/etcd_health_timeout 
Allow configuration of etcd healthcheck timeout
 2020-11-05 01:06:53 -08:00
Shihang Zhang
d40f0c43c4 separate RootCAConfigMap from BoundServiceAccountTokenVolume 2020-11-04 17:10:39 -08:00
Lukasz Szaszkiewicz
7340c3498a DelegatingAuthenticationOptions: allows for setting a timeout for the TokenReview client that is used by for the webhook authenticator 
Previously no timeout was set. Requests without explicit timeout might potentially hang forever and lead to starvation of the application.
When no timeout was specified a default one will be applied.
 2020-11-04 13:40:33 +01:00
Kubernetes Prow Robot
acc3910964
Merge pull request #95991 from serathius/datapolicy-kubeadm 
Add datapolicy tags to cmd/kubeadm directory
 2020-11-03 22:50:17 -08:00
Kubernetes Prow Robot
2ee1003430
Merge pull request #96051 from ravisantoshgudimetla/add-priority-flag 
[kubelet] Allow priority to be set for kubelet process on Windows
 2020-11-02 13:41:52 -08:00
ravisantoshgudimetla
784098f8b6 Build files 2020-11-03 01:19:00 +05:30
ravisantoshgudimetla
f4c2dcd030 [kubelet] Allow priority to be set for kubelet process on Windows 2020-11-03 01:18:59 +05:30
Kubernetes Prow Robot
d16112f76c
Merge pull request #96052 from wojtek-t/fix_watchcache_size 
Disable watchcache for events
 2020-11-02 07:30:53 -08:00
Abu Kashem
2f812c3194
set webhook retry backoff parameters for kubelet 2020-11-01 10:22:21 -05:00
Abu Kashem
53a1307f68
make backoff parameters configurable for webhook 
Currently webhook retry backoff parameters are hard coded, we want
to have the ability to configure the backoff parameters for webhook
retry logic.
 2020-11-01 10:18:25 -05:00
wojtekt
5a8f94cb30 Disable watchcache for events 2020-10-31 19:51:33 +01:00
Kubernetes Prow Robot
bf67247124
Merge pull request #93258 from zshihang/token 
mv TokenRequest and TokenRequestProjection to GA
 2020-10-30 16:36:51 -07:00
Kubernetes Prow Robot
4b65f70652
Merge pull request #95740 from cici37/moveCCM 
Move cloud-controller-manager to staging k8s.io/cloud-provider
 2020-10-30 13:48:51 -07:00
Marek Siarkowicz
8644f3ff83 Add datapolicy tags to cmd/kubeadm directory 2020-10-30 18:32:17 +01:00
Kubernetes Prow Robot
f2ed1b5580
Merge pull request #96016 from cici37/informer 
Move informer_factory to staging
 2020-10-30 00:44:06 -07:00
Kubernetes Prow Robot
d0bee69fc9
Merge pull request #94636 from hprateek43/cpu_threads_parameter 
Added config parameter for CPU threads
 2020-10-29 21:04:05 -07:00
cici37
9465d95ea6 Move CCM to staging k8s.io/cloud-provider 2020-10-29 20:50:23 -07:00
Shihang Zhang
ff641f6eb2 mv TokenRequest and TokenRequestProjection to GA 2020-10-29 20:47:01 -07:00
cici37
a91a2cdad6 Move informer_factory to staging 2020-10-29 12:20:33 -07:00
Kubernetes Prow Robot
1968e96165
Merge pull request #95856 from knight42/refactor/disable-apiserver-insecure-port 
refactor(apiserver): disable insecure port
 2020-10-29 10:47:58 -07:00
knight42
cfc2b330a7
refactor(apiserver): ignore the insecure flags 
Leave the insecure flags intact but stop serving on insecure port.
 2020-10-29 23:20:17 +08:00
Harsh Singh
1763688d71 Added config parameter for CPU threads 2020-10-29 12:16:10 +05:30
Kubernetes Prow Robot
8422116039
Merge pull request #95630 from masap/unit_test1 
test: Add service cluster IP range unit test
 2020-10-27 14:25:57 -07:00
Kubernetes Prow Robot
4df8d97af0
Merge pull request #95725 from p0lyn0mial/delegated-authz-sar-timeout 
sets explicit timeout for SubjectAccessReview client
 2020-10-27 03:37:59 -07:00
Kubernetes Prow Robot
3d6026499b
Merge pull request #95235 from andrewsykim/controlplane-egress-selector 
apiserver: support 'controlplane' as an egress selector type
 2020-10-26 14:45:59 -07:00
Khaled Henidak (Kal)
6675eba3ef
dual stack services (#91824) 
* api: structure change

* api: defaulting, conversion, and validation

* [FIX] validation: auto remove second ip/family when service changes to SingleStack

* [FIX] api: defaulting, conversion, and validation

* api-server: clusterIPs alloc, printers, storage and strategy

* [FIX] clusterIPs default on read

* alloc: auto remove second ip/family when service changes to SingleStack

* api-server: repair loop handling for clusterIPs

* api-server: force kubernetes default service into single stack

* api-server: tie dualstack feature flag with endpoint feature flag

* controller-manager: feature flag, endpoint, and endpointSlice controllers handling multi family service

* [FIX] controller-manager: feature flag, endpoint, and endpointSlicecontrollers handling multi family service

* kube-proxy: feature-flag, utils, proxier, and meta proxier

* [FIX] kubeproxy: call both proxier at the same time

* kubenet: remove forced pod IP sorting

* kubectl: modify describe to include ClusterIPs, IPFamilies, and IPFamilyPolicy

* e2e: fix tests that depends on IPFamily field AND add dual stack tests

* e2e: fix expected error message for ClusterIP immutability

* add integration tests for dualstack

the third phase of dual stack is a very complex change in the API,
basically it introduces Dual Stack services. Main changes are:

- It pluralizes the Service IPFamily field to IPFamilies,
and removes the singular field.
- It introduces a new field IPFamilyPolicyType that can take
3 values to express the "dual-stack(mad)ness" of the cluster:
SingleStack, PreferDualStack and RequireDualStack
- It pluralizes ClusterIP to ClusterIPs.

The goal is to add coverage to the services API operations,
taking into account the 6 different modes a cluster can have:

- single stack: IP4 or IPv6 (as of today)
- dual stack: IPv4 only, IPv6 only, IPv4 - IPv6, IPv6 - IPv4

* [FIX] add integration tests for dualstack

* generated data

* generated files

Co-authored-by: Antonio Ojea <aojea@redhat.com>
 2020-10-26 13:15:59 -07:00
Kubernetes Prow Robot
bdde4fb8f5
Merge pull request #93040 from cmluciano/cml/ipvsschedmodules 
ipvs: ensure selected scheduler kernel modules are loaded
 2020-10-26 10:25:17 -07:00
Lukasz Szaszkiewicz
2160cbc53f DelegatingAuthorizationOptions: exposes and sets a default timeout for SubjectAccessReview client 
previously no timeout was set. Requests without explicit timeout might potentially hang forever and lead to starvation of the application.
 2020-10-26 17:11:59 +01:00
Andrew Sy Kim
a0aebf96ec apiserver: support egress selection name 'controlplane' and deprecate 'master' 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-10-26 10:24:16 -04:00
Christopher M. Luciano
51ed242194
ipvs: check for existence of scheduler module and fail if not found 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-10-23 17:17:44 -04:00
Kubernetes Prow Robot
254f3e26ab
Merge pull request #95786 from Sh4d1/add_missing_kubeadm_patch 
fix: add missing patch flag for kubeadm init phase control-plane
 2020-10-23 02:27:45 -07:00
Kubernetes Prow Robot
3627a28279
Merge pull request #95723 from aojea/podcidr 
kubeadm: validate podSubnet against node-mask and serviceSubnet max size
 2020-10-23 01:35:45 -07:00
Kubernetes Prow Robot
1257bc5acb
Merge pull request #91474 from cici37/pkgController 
Cleanup CCM dependencies
 2020-10-22 23:17:45 -07:00
Antonio Ojea
4e14d1b9a3 kubeadm: validate node-cidr-mask are correct 2020-10-22 17:31:10 +02:00
Antonio Ojea
7fc6b4157b kubeadm validate maximum service subnet size 
Validate that the maximum service subnet size doesn't exceed the
limits.

Co-authored-by: Arvinderpal Wander <awander@gmail.com>
 2020-10-22 17:30:59 +02:00
Antonio Ojea
8b52995d32 kubeadm: validate podSubnet against node-cidr-mask 
the controller manager should validate the podSubnet against the node-mask
because if they are incorrect can cause the controller-manager to fail.

We don't need to calculate the node-cidr-masks, because those should
be provided by the user, if they are wrong we fail in validation.
 2020-10-22 16:24:13 +02:00
Patrik Cyvoct
5fc4b4ea8f
fix: add missing patch flag for kubeadm init phase control-plane 
Signed-off-by: Patrik Cyvoct <patrik@ptrk.io>
 2020-10-22 10:46:50 +02:00
Masashi Honma
b7630e4168 test: Add service cluster IP range unit test 
This PR adds trailing unit tests to check the service cluster IP range and
improves the code coverage of k8s.io/kubernetes/cmd/kube-apiserver/app from
5.7% to 6.2%.

1) Dual stack IPv4/IPv6
2) Invalid IPv4, IPv6 mask
3) missing IPv4, IPv6 mask
4) invalid IP address format

The tests 2, 3, 4 are suggsted by Antonio Ojea.
 2020-10-22 11:42:21 +09:00
Kubernetes Prow Robot
3fe372c3da
Merge pull request #95631 from alculquicondor/enable-default-spreading 
Graduate DefaultPodTopologySpread to beta
 2020-10-20 07:58:09 -07:00
Kubernetes Prow Robot
3175b59ac2
Merge pull request #94489 from ialidzhikov/fix/volume-expand 
Do not assume storageclass is still in-tree after csi migration
 2020-10-19 15:08:07 -07:00
cici37
95acec5a3b Move client_builder to k8s.io/controller-manager 2020-10-19 14:48:22 -07:00
Aldo Culquicondor
87c8349bdc Graduate DefaultPodTopologySpread to beta 
And set to enabled by default

Change-Id: Ie4cc4758c52492924cb0663450f2747908cb5882
 2020-10-19 16:58:09 -04:00
He Jie Xu
6e55b88725 Reorder default Filter plugins to have UnschedulableAndUnresolvable first 2020-10-14 09:40:51 +00:00
Kubernetes Prow Robot
475849eafa
Merge pull request #95426 from neolit123/1.20-add-output-to-generate-csr 
kubeadm: add some output to the generate-csr command
 2020-10-12 19:31:21 -07:00
Kubernetes Prow Robot
1dff024e64
Merge pull request #91014 from cici37/apiConfig 
Move cmd/controller-manager to k8s.io/controller-manager
 2020-10-12 15:17:22 -07:00
Lubomir I. Ivanov
bae6b93d5c kubeadm: add some output to the generate-csr command 
Currently the "generate-csr" command does not have any output.
Pass an io.Writer (bound to os.Stdout from /cmd) to the functions
responsible for generating the kubeconfig / certs keys and CSRs.

If nil is passed these functions don't output anything.
 2020-10-12 19:05:45 +03:00
SataQiu
646f4e2b62 make new command functions to keep private when they are not required to be public 2020-10-10 12:03:02 +08:00
James Sturtevant
78ca71857b
Update Windows Pause version to 1.4.0 2020-10-08 15:39:31 -07:00
cici37
ae8ce0d190 Move cmd/controller-manager to k8s.io/controller-manager and cloud specific configs to k8s.io/cloud-provider. 2020-10-08 13:23:16 -07:00
Dan Winship
75242fce7a kubelet: allow specifying dual-stack node IPs on bare metal 
Discussion is ongoing about how to best handle dual-stack with clouds
and autodetected IPs, but there is at least agreement that people on
bare metal ought to be able to specify two explicit IPs on dual-stack
hosts, so allow that.
 2020-10-07 17:25:54 -04:00
Patrik Cyvoct
2e430ba622
Allow configuration of etcd healthcheck timeout 
Signed-off-by: Patrik Cyvoct <patrik@ptrk.io>
 2020-10-07 19:13:19 +02:00
cici37
33e23c4005 Move cloud related feature gates to controller-manager 2020-10-05 10:19:08 -07:00
Kubernetes Prow Robot
aa1f912868
Merge pull request #94915 from Lion-Wei/fix-cleanup 
fix kube-proxy cleanup
 2020-09-30 06:21:24 -07:00
Kubernetes Prow Robot
902ed94bba
Merge pull request #95134 from zgfh/add_note_for_kubeadm_cert_renew 
kubeadm: add note for kubeadm cert renew
 2020-09-29 06:27:26 -07:00
Kubernetes Prow Robot
604569482f
Merge pull request #94504 from neolit123/1.20-warning-cert-bounds-client-side 
kubeadm: print warnings on invalid cert period instead of erroring out
 2020-09-29 02:49:25 -07:00
Alan Zhu
b9067e5a0c add note for kubeadm cert renew 2020-09-29 09:05:40 +08:00
Lubomir I. Ivanov
477c41f36d kubeadm: deprecate self-hosting support 
Deprecate the experimental command "alpha self-hosting" and its
sub-command "pivot" that can be used to create a self-hosting
control-plane from static Pods.
 2020-09-28 22:24:24 +03:00
Kubernetes Prow Robot
db9f1e91d9
Merge pull request #94988 from neolit123/1.20-tollerate-missing-ca-key-on-join 
kubeadm: warn but do not error out on missing CA keys on CP join
 2020-09-28 06:36:48 -07:00
Daniel Smith
13b6a929bc It's an 'Instance' of apiserver 2020-09-24 16:14:29 -04:00
Kubernetes Prow Robot
770eb2c4a0
Merge pull request #94871 from neolit123/1.20-kubeadm-remove-experimental-kustomize 
kubeadm: remove the --experimental-kustomize feature
 2020-09-24 08:16:06 -07:00
Lubomir I. Ivanov
7c783fa374 kubeadm: make the CP join handling of kubeconfig similar to "init" 
The kubeconfig phase of "kubeadm init" detects external CA mode
and skips the generation of kubeconfig files. The kubeconfig
handling during control-plane join executes
CreateJoinControlPlaneKubeConfigFiles() which requires the presence
of ca.key when preparing the spec of a kubeconfig file and prevents
usage of external CA mode.

Modify CreateJoinControlPlaneKubeConfigFiles() to skip generating
the kubeconfig files if external CA mode is detected.
 2020-09-24 18:12:00 +03:00
Lubomir I. Ivanov
05b77fe99f kubeadm: warn but do not error out on missing CA keys on CP join 
- Modify validateCACertAndKey() to print warnings for missing keys
instead of erroring out.
- Update unit tests.

This allows doing a CP node join in a case where the user has:
- copied shared certificates to the new CP node, but not copied
ca.key files, treating the cluster CAs as external
- signed other required certificates in advance
 2020-09-24 18:11:59 +03:00
Kubernetes Prow Robot
3aa546923c
Merge pull request #94586 from BedivereZero/master 
Stop container before remove for Docker
 2020-09-23 10:14:25 -07:00
Kubernetes Prow Robot
7a2812ca60
Merge pull request #94938 from yagonobre/certs-graduate 
Graduate kubeadm alpha certs command
 2020-09-23 08:36:10 -07:00
Yago Nobre
2f19cf7cbc Graduate kubeadm alpha certs command 2020-09-23 10:13:45 -03:00
Kubernetes Prow Robot
18782e9996
Merge pull request #94884 from arghya88/remove-deprecated-scheduler-metrics 
removing deprecated scheduler metrics
 2020-09-22 14:42:32 -07:00
Kubernetes Prow Robot
86a9087896
Merge pull request #89962 from wangrzneu/master 
make kubectl/kubeadm completion script support busybox
 2020-09-22 12:21:23 -07:00
Arghya Sadhu
c62f0dd165 removing deprecated scheduler metrics 2020-09-22 21:04:15 +05:30
knight42
36eb74a803
refactor(kubeadm): make alpha kubeconfig user command accpet --config 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-22 23:10:41 +08:00
Kubernetes Prow Robot
dd466bccde
Merge pull request #94527 from brahmaroutu/mount-utils-2 
Change code to use  staging/k8s.io/mount-utils
 2020-09-21 17:46:47 -07:00