github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
101,985 Commits 1 Branch 31 Tags 1,019 MiB
012bfaf98d
Commit Graph

10264 Commits

Author SHA1 Message Date
cici37
52bab024af Separate func 2021-03-01 10:21:57 -08:00
cici37
7b0a6db097 Add demonstration of wiring nodeIPAMController config object 2021-03-01 10:21:52 -08:00
cici37
4729fa49e1 Remove cloud provider name as input parameter. 2021-03-01 10:21:49 -08:00
cici37
2b3d2303a5 Fix flag passing in CCM. 2021-03-01 10:21:46 -08:00
Alan Zhu
8ffdc674b2 update kubeadm upgrade description 
Signed-off-by: Alan Zhu <zg.zhu@daocloud.io>
 2021-03-01 20:42:57 +08:00
SataQiu
2ba178c92c kubeadm: skip validating pod subnet against node-cidr-mask when allocate-node-cidrs is set to be false 2021-03-01 11:19:47 +08:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Kubernetes Prow Robot
4880b996b5
Merge pull request #99433 from navist2020/fix/kubeadm/out_info 
Replace yml with yaml
 2021-02-28 09:50:39 -08:00
Kubernetes Prow Robot
601a584b52
Merge pull request #99387 from KofClubs/optimize-getProxyMode-kube-proxy 
Optimized function getProxyMode
 2021-02-26 11:32:28 -08:00
liuxu
385b7d7ff0 fix --event-qps and --event-burst 2021-02-26 17:05:04 +08:00
Kubernetes Prow Robot
1ddc4afcf8
Merge pull request #99294 from pacoxu/kubeadm/dual-stack 
kubeadm: promote DualStack feature gate to Beta
 2021-02-25 20:16:15 -08:00
Lubomir I. Ivanov
108d1dc56a kubeadm: pass pod-infra-container-image for all CRs 
Pass the flag --pod-infra-container-image to the kubelet not only
for Docker but for all CRs.

This flag tells the kubelet to special case the image and not garbage
collect it.
 2021-02-26 02:47:00 +02:00
Kubernetes Prow Robot
4fefc856db
Merge pull request #99213 from AliceZhang2016/affinity 
parse pod's node affinity once in preFilter
 2021-02-25 10:01:24 -08:00
navist2020
c5d8da019a Replace yml with yaml 2021-02-25 11:52:34 +08:00
Mengxue Zhang
4fb8e343c0 parse pod's node affinity once in preFilter 2021-02-25 00:21:32 +00:00
Monis Khan
343a3d1882
csr signers: increase the number of workers 
This change updates the number of workers that the CSR signing
controllers use.  If a large number of certificates (especially
short lived ones) are approved at the same time, it can take the
signing controllers a long time to process them serially.  The
NewCSRSigningController logic is already go routine safe.

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-02-24 15:50:52 -05:00
xiaofei.sun
fd62f32125 Scheduler: remove pkg/apis/core/field_constants.go 2021-02-24 18:06:29 +08:00
Kubernetes Prow Robot
e0862fb144
Merge pull request #99233 from pandaamanda/hardcoding_apiserver_completion 
fix some hardcoding
 2021-02-23 18:26:59 -08:00
Zhang Zhanpeng
10111eb499 Optimized function getProxyMode 
Signed-off-by: Zhang Zhanpeng <zhanpeng.zhang@daocloud.io>
 2021-02-24 10:17:11 +08:00
xiongzhongliang
ac0f4977d4 remove duplicate default message for some flag 
remove duplicate default message for some flag
 2021-02-23 22:24:52 +08:00
Lukasz Szaszkiewicz
662cc70c70 KCM: specifies the upper-bound timeout limit for outgoing requests 
Previously no timeout was set.
Requests without explicit timeout might potentially hang forever and lead to starvation of the application.
 2021-02-23 13:08:19 +01:00
Kubernetes Prow Robot
1768ee824b
Merge pull request #99159 from hasheddan/depcheck-name 
Fix dependencycheck binary name
 2021-02-23 03:56:04 -08:00
Kubernetes Prow Robot
3378bb996c
Merge pull request #99313 from neolit123/1.21-update-kubeadm-owners 
kubeadm: include appovers under reviewers in OWNERS
 2021-02-22 23:48:03 -08:00
Kubernetes Prow Robot
54d48d2b80
Merge pull request #98033 from zshihang/rootca 
move RootCAConfigMap to ga
 2021-02-22 22:24:02 -08:00
Kubernetes Prow Robot
d6c7476ab3
Merge pull request #99155 from soltysh/convert_release 
Add kubectl-convert to client-binaries
 2021-02-22 17:24:15 -08:00
Shihang Zhang
cbf6e38bbd move RootCAConfigMap to ga 2021-02-22 15:59:27 -08:00
Kubernetes Prow Robot
186f934e4c
Merge pull request #98346 from mortent/checkForScalePDBs 
Check if resources implement scale in disruption controller
 2021-02-22 13:58:03 -08:00
Lubomir I. Ivanov
e8f2d888a3 kubeadm: include appovers under reviewers in OWNERS 
Looks like there is a bit of an issue in the Bluderbuss (Prow plugin)
where it prefers to pick reviewers from a parent OWNERS files,
instead of using an approver from a current OWNERS file as
an additional reviewer.
 2021-02-22 20:02:09 +02:00
Kubernetes Prow Robot
d88d9ac3b4
Merge pull request #98845 from justaugustus/zeitgeist 
hack: Use zeitgeist instead of cmd/verifydependencies
 2021-02-22 09:23:43 -08:00
Maciej Szulik
0a0c80c553
Add kubectl-convert to client-binaries 2021-02-22 17:01:34 +01:00
Stephen Augustus
5ac3c56476 generated: Run ./hack/update-bazel.sh 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-02-22 08:48:04 -05:00
Stephen Augustus
71008247dc hack: Use zeitgeist instead of cmd/verifydependencies 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-02-22 08:48:02 -05:00
pacoxu
829b0cde81 kubeadm: promote DualStack feature gate to Beta 2021-02-22 16:03:49 +08:00
Shihang Zhang
1095778dcc remove secret-based sa token client builder 2021-02-21 22:00:40 -08:00
Kubernetes Prow Robot
972ae2f2c2
Merge pull request #99187 from CaoDonghui123/fixKubeadm-1 
Delete duplicate logs for kubeadm upgrade versions
 2021-02-21 15:19:41 -08:00
Kubernetes Prow Robot
d475352bcb
Merge pull request #99194 from pacoxu/fix/kubeadm-hostnamecheck 
kubeadm: perform a host name check on init / join
 2021-02-20 23:07:42 -08:00
Kubernetes Prow Robot
031f2afbba
Merge pull request #98931 from michaelbeaumont/kubelet_well_known 
Move pkg/kubelet/apis to k8s.io/kubelet/pkg/apis
 2021-02-20 11:55:41 -08:00
Zhang Zhanpeng
b0b4867ba8 Deleted a redundant line missing from #91275 
Signed-off-by: Zhang Zhanpeng <zhanpeng.zhang@daocloud.io>
 2021-02-20 10:55:38 +08:00
pacoxu
2c89fa4a59 add hostname check in kubeadm join: warning log only 
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
 2021-02-20 09:50:25 +08:00
xiongzhongliang
00bfd28fbd fix some hardcoding 
fix some hardcoding
 2021-02-20 01:27:54 +08:00
caodonghui
f7469a0a31 Delete duplicate logs 2021-02-19 09:19:11 +08:00
Kubernetes Prow Robot
9fb1aa92f2
Merge pull request #99127 from danwinship/non-dual-stack-proxy 
Make kube-proxy check if IPv6 is really supported before assuming dual-stack
 2021-02-18 08:46:51 -08:00
hasheddan
4825b60ee4
Fix dependencycheck binary name 
The dependencycheck binary name was vendorcheck, which was the original
name of the tool. This updates it to dependencycheck.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-02-17 12:40:42 -06:00
Dan Winship
95c6a488d8 Make kube-proxy check if IPv6 is really supported before assuming dual-stack 2021-02-17 09:11:15 -05:00
Kubernetes Prow Robot
d0a433fa45
Merge pull request #98458 from SaranBalaji90/profiling 
Add support to disable /debug/pprof and /debug/flags/v endpoint
 2021-02-16 10:12:58 -08:00
Kubernetes Prow Robot
1f3fa2a6ea
Merge pull request #99082 from syswu/fix_a_typo 
correct typo in kubeadm init phase command
 2021-02-16 09:20:58 -08:00
Nikhita Raghunath
6cef3a4e33 *: remove nikhiljindal from OWNERS 2021-02-16 10:59:26 +05:30
Nikhita Raghunath
6b12c96a9b *: remove madhusudancs from reviewers 2021-02-16 10:59:26 +05:30
Nikhita Raghunath
b11516d69f *: move gmarek to emeritus_approvers 2021-02-16 10:59:19 +05:30
Bob Killen
1a9e95d672
cmd/kubemark: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek from an
approver to an emeritus_approver.
 2021-02-14 15:17:48 -05:00
ziyin.lu
b64b2feb0c kubelet: Imporve cmd comment for how kubelet works 2021-02-14 23:16:21 +08:00
Heng WU
ace6b47298
Update addons.go 2021-02-14 21:04:43 +08:00
Kubernetes Prow Robot
b2b8c1f18d
Merge pull request #98980 from syswu/missing_return_nil 
catching errors for 'kubeadm join'
 2021-02-11 21:32:47 -08:00
Sri Saran Balaji Vellore Rajakumar
af05a7eca3 Refactor Kubelet Server to take kubeConfiguration instead of multiple fields 2021-02-11 16:15:35 -08:00
Sri Saran Balaji Vellore Rajakumar
51cdf4e97b Add support to disable /debug/pprof and /debug/flags/v endpoint 
Co-authored-by: xiaofei.sun <sunxiaofei@kuaishou.com>
Co-authored-by: SaranBalaji90 <srisaranbalaji@gmail.com>
 2021-02-11 15:56:53 -08:00
Kubernetes Prow Robot
2d153fe04e
Merge pull request #98969 from khenidak/beta-feature 
upgrade IPv6DualStack feature to beta and turn on by default
 2021-02-11 11:53:37 -08:00
Heng WU
4b7f6d8750
Update joinconfiguration.go 2021-02-11 09:57:08 +08:00
Heng WU
0bb842637c
Update joinconfiguration.go 2021-02-11 09:08:11 +08:00
Kubernetes Prow Robot
838bb6a567
Merge pull request #98663 from gavinfish/sched-remove-plugin-pt 
Scheduler: change config.Plugins from pointers to objects
 2021-02-10 15:36:15 -08:00
Khaled (Kal) Henidak
3e56ddae67 upgrade IPv6DualStack feature to beta and turn on by default 2021-02-10 23:14:05 +00:00
drfish
74315f9c56 Change config.Plugins from pointers to objects 2021-02-10 23:45:59 +08:00
Michael Beaumont
a5a6762d33
Move pkg/kubelet/apis to k8s.io/kubelet/pkg/apis 2021-02-09 21:37:39 +01:00
Kubernetes Prow Robot
943e67c01f
Merge pull request #95479 from mgjeong/feature-memory-manager-working 
Memory manager
 2021-02-09 03:40:56 -08:00
Kubernetes Prow Robot
fcb55645a9
Merge pull request #98547 from neolit123/1.21-update-kubeadm-owners 
kubeadm: update OWNERS for 1.21
 2021-02-09 00:45:16 -08:00
Kubernetes Prow Robot
2b7c61b1bb
Merge pull request #98205 from pacoxu/build/pauses 
update pause image to 3.4.1 and also update the change log
 2021-02-08 18:20:58 -08:00
Artyom Lukianov
932134034c memory manager: update API constant to have camel case format 
Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:10:02 +02:00
Artyom Lukianov
7561a0f96e memory manager: provide new flag var to parse reserved-memory parameter 
The new flag will parse the `--reserved-memory` flag straight forward
to the []kubeletconfig.MemoryReservation variable instead of parsing
it to the middle map representation.

It gives us possibility to get rid of a lot of unneeded code and use the single
presentation for the reserved-memory.

Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:10:01 +02:00
Artyom Lukianov
ff2a110920 memory manager: provide the new type to contain resources for each NUMA node 
Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:10:00 +02:00
Artyom Lukianov
24be74e759 memory manager: update bazel files 
Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
 2021-02-09 01:09:59 +02:00
Krzysztof Wiatrzyk
711e85af24 memory manager: adding additional tests for server.go file, for parseReservedMemoryConfig() function. 2021-02-09 00:54:58 +02:00
Artyom Lukianov
93accb51e4 memory manager: add memory manager flag under kubelet options and kubelet config 
The commit also includes generated files after `make generated_files`.

Signed-off-by: Byonggon Chun <bg.chun@samsung.com>
 2021-02-09 00:54:58 +02:00
Kubernetes Prow Robot
f266f60da9
Merge pull request #98839 from Mattias-/kubeadm-fix-config-print-placeholder 
kubeadm: Fix placeholder in config print help text
 2021-02-08 11:54:43 -08:00
Kubernetes Prow Robot
0867767d6e
Merge pull request #98882 from kvaps/flatten-adminconfig 
kubeadm: flatten admin.conf for cluster-info generation
 2021-02-08 09:26:28 -08:00
Andrei Kvapil
9de0b2bf46
kubeadm: flatten admin.conf for cluster-info 2021-02-08 17:22:01 +01:00
Mattias Appelgren
7e80d4d191 kubeadm: Fix placeholder in config print help text 2021-02-06 18:32:45 +01:00
hasheddan
8ae6a20485
kubeadm: drop explicit constant override in version test 
The k8s release bucket constant is not longer overriden in network tests
because the fetcher is mocked rather than using httptest.NewServer. See
previous implementation in
https://github.com/kubernetes/kubernetes/pull/49119/files#diff-82f2b09991047d4a1884d53dedadd64a473d5c4dc75293514e71773ceedf08e2R128

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-02-06 11:03:00 -06:00
hasheddan
1d164d0747
kubeadm: get k8s CI version markers from k8s infra bucket 
Updates kubeadm version resolution to use kubernetes community infra
bucket to fetch appropriate k8s ci versions. The images are already
being pulled from the kubernetes community infra bucket meaning that a
mismatch can occur when the ci version is fetched from the google infra
bucket and the image is not yet present on k8s infra.

Follow-up to kubernetes/kubernetes#97087

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-02-06 10:59:15 -06:00
pacoxu
f681edf58e kubeadm: improve error message about node subnet size validation 
Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>
Co-authored-by: SataQiu <1527062125@qq.com>
Co-authored-by: driazati <david.riazati@gatech.edu>
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
 2021-02-05 23:29:26 +08:00
pacoxu
8946f26769 update pause to 3.4.1 for kubelet/kubeadm 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-02-05 21:33:01 +08:00
Morten Torkildsen
96ea28aa77 Check if resources implement scale in disruption controller 2021-02-03 20:19:35 -08:00
Sean McGinnis
874ceb0fdf
Improve wording in kubeadm upgrade plan 
Originally raised as an issue with invalid versions to plan, but it has
been determined with air gapped environments and development versions it
is not possible to fully address that issue.

But one thing that was identified was that we can do a better job in how
we output the upgrade plan information. Kubeadm outputs the requested
version as "Latest stable version", though that may not actually be the
case. For this instance, we want to change this to "Target version" to
be a little more accurate.

Then in the component upgrade table that is emitted, the last column of
AVAILABLE isn't quite right either. Also changing this to TARGET to
reflect that this is the version we are targetting to upgrade to,
regardless of its availability.

There could be some improvements in checking available versions,
particularly in air gapped environments, to make sure we actually have
access to the requested version. But this at least clarifies some of the
output a bit.

Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
 2021-02-03 09:44:15 -06:00
Kubernetes Prow Robot
074a517720
Merge pull request #98706 from roycaihw/flake/storage-version-integration-healthz 
storage version integration test: check the test server's health before running
 2021-02-02 21:32:28 -08:00
Kubernetes Prow Robot
356ee4c83a
Merge pull request #98254 from changshuchao/scheduler-config-help-line 
Fix the kube-scheduler binary's description of the --config parameter…
 2021-02-02 19:40:28 -08:00
Haowei Cai
dc047b183b storage version integration test: check the test server's health before running 
we disabled the /healthz check because our test blocks one post-start
hook from finishing. Instead we should check all the other /healthz/...
endpoints before running the tests
 2021-02-02 18:31:53 -08:00
Kubernetes Prow Robot
d2659101bf
Merge pull request #98325 from deads2k/update-default-authorizer 
Update delegated authorization options default to eliminate unnecessary SARs
 2021-02-02 11:38:28 -08:00
Kubernetes Prow Robot
645c40fcf6
Merge pull request #98638 from neolit123/1.21-optimize-unit-tests-certs 
kubeadm: introduce static defaults for unit tests
 2021-02-02 03:20:29 -08:00
Lubomir I. Ivanov
f27555b890 kubeadm: optimize tests in pki_helpers_tests.go 
Reduce the number of calls to algorithm.GenerateKey()
but try not to reduce coverage.
 2021-02-02 04:25:06 +02:00
Kubernetes Prow Robot
f81220975e
Merge pull request #98257 from lingsamuel/etcd-lease-max-count 
lease manager limit max objects attached to a lease
 2021-02-01 14:52:27 -08:00
Kubernetes Prow Robot
6aef7ca013
Merge pull request #98553 from mtaufen/said-ga 
Graduate ServiceAccountIssuerDiscovery to GA
 2021-02-01 13:42:01 -08:00
Kubernetes Prow Robot
6e50e64cb3
Merge pull request #98664 from liggitt/kubeadm-key-fixtures 
Use private key fixtures for kubeadm unit tests
 2021-02-01 12:50:06 -08:00
Michael Taufen
6aa80d9172 Graduate ServiceAccountIssuerDiscovery to GA 
Waiting on KEP updates first:
https://github.com/kubernetes/enhancements/pull/2363
 2021-02-01 11:44:23 -08:00
Lubomir I. Ivanov
afea70f9ae kubeadm: update OWNERS for 1.21 2021-02-01 20:14:00 +02:00
Lubomir I. Ivanov
6578e0f6c5 kubeadm: introduce static defaults for unit tests 
Add DefaultedStaticInitConfiguration() which can be
used instead of DefaultedInitConfiguration() during unit tests.

The later can be slow since it performs dynamic defaulting.
 2021-02-01 19:43:57 +02:00
Jordan Liggitt
8761972f68 Use private key fixtures for kubeadm unit tests 2021-02-01 10:06:10 -05:00
Ling Samuel
c8db72c38c
api-server add --lease-max-object-count 
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com>
 2021-02-01 18:20:59 +08:00
Kubernetes Prow Robot
c04058418f
Merge pull request #98243 from Jiawei0227/unregister-plugin 
Disable in-tree plugin without enabling CSI migration
 2021-01-29 12:59:48 -08:00
changshuchao
7d8e07bd17 Fix the kube-scheduler binary's description of the --config parameter is inaccurate 
Signed-off-by: changshuchao <chang.shuchao1@zte.com.cn>
 2021-01-29 18:04:57 +08:00
Lubomir I. Ivanov
01ea75e36d kubeadm: exclude control plane nodes from external LBs 
Apply the label:
"node.kubernetes.io/exclude-from-external-load-balancers"

To control plane nodes to preserve backwards compatibility
with the legacy mode where "master" nodes were excluded from
LBs.
 2021-01-26 20:42:58 +02:00
David Eads
62230d3c46 update delegated authz defaults in kube binaries 2021-01-26 12:53:24 -05:00
Kubernetes Prow Robot
76d1292930
Merge pull request #98059 from jprzychodzen/ld-kcm 
[kube-controller-manager] Lower timeout for leaderelection resourcelock
 2021-01-26 02:36:34 -08:00
Jiawei Wang
bda557b4bc Disable in-tree plugin without enabling CSI migration 
This commit replaces the CSIMigrationXXXComplete flag
with InTreePluginXXUnregister flag. This new flag will
be a superset of the CSIMigrationXXXComplete. But this
decouple the plugin unregister from CSI migration. So
if a K8s distribution want to go directly with CSI and
do not support in-tree, they can use this flag directly.

Testing:
1. Enable the InTreePluginXXUnregister and not CSIMigrationXXX,
verify that the PVC using old plugin name will have error
saying cannot find the plugin
2. Enable both the InTreePluginXXUnregister and CSIMigrationXXX
verify that the PVC using old plugin name will start to use
the migrated CSI plugin
 2021-01-22 16:58:51 -08:00
Kubernetes Prow Robot
0da0d186a6
Merge pull request #96675 from pacoxu/fix/volume-stats-agg-period 
fix: volume stats disabled when value is negative.(Currently, 0 means defualt 1m)
 2021-01-19 22:17:58 -08:00
Kubernetes Prow Robot
cf2fceb11f
Merge pull request #98136 from chymy/kubeadm-ep 
kubeadm: APIEndpointFromString verifies ip
 2021-01-19 07:29:45 -08:00
chymy
081d78f635 kubeadm: APIEndpointFromString verifies ip 
Signed-off-by: chymy <chang.min1@zte.com.cn>
 2021-01-19 18:36:55 +08:00
Kubernetes Prow Robot
d70ee902fd
Merge pull request #97858 from lyzs90/pull-real-node-images 
Pull hollow node images from real nodes
 2021-01-18 06:25:44 -08:00
Kubernetes Prow Robot
8bf42039e6
Merge pull request #96552 from pandaamanda/klog_fmt 
use klog.Info and klog.Warning when had no format
 2021-01-15 17:57:43 -08:00
Kubernetes Prow Robot
fe58a937bd
Merge pull request #96857 from jnummelin/kubelet-cri-endpoint-help 
Finetune container-runtime-endpoint option help text
 2021-01-15 16:17:43 -08:00
Kubernetes Prow Robot
7791bbe978
Merge pull request #98008 from RA489/min_support_ver 
kubeadm: Update versions for 1.21
 2021-01-15 14:50:04 -08:00
Kubernetes Prow Robot
e1c1fd9edf
Merge pull request #97880 from justinsb/spelling 
Fix spelling typos: scheduable -> schedulable
 2021-01-15 03:43:51 -08:00
RA489
fe91902d08 kubeadm: Update versions for 1.21 2021-01-15 16:36:34 +05:30
Kubernetes Prow Robot
4a595bd373
Merge pull request #97372 from ihgann/master 
Fix bug in Member Exists Join for Kubeadm etcd join
 2021-01-14 12:45:30 -08:00
Kubernetes Prow Robot
81811a4eb8
Merge pull request #97958 from jprzychodzen/leader-election-kube-scheduler 
[kube-scheduler] Lower timeout for leaderelection resourcelock
 2021-01-14 08:55:18 -08:00
Kubernetes Prow Robot
d067c2e95d
Merge pull request #97087 from SataQiu/change-ci-image-repo 
kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images
 2021-01-14 08:55:04 -08:00
Jakub Przychodzeń
87924e53f0 [kube-controller-manager] Lower timeout for leaderelection resourcelock 
Migrate how resource lock and leader election config is generated to new way, hidding kubeClient. This also halfs kubeClient timeout, making it an useful value.

If timeout is equal to RenewDeadline and we hit client timeout on request, there will be no retry, as RenewDeadline part will cancel the context and lose leader election. So setting a timeout to value at least equal to RenewDeadline is pointless.

Setting it as half of RenewDeadline is a heuristic to resolve this missing retry problem without adding additional parameter.
 2021-01-14 10:49:42 +01:00
RA489
546b0a704d kubeadm: Update versions for 1.21 2021-01-13 18:03:34 +05:30
Kubernetes Prow Robot
bd947dfc65
Merge pull request #97919 from neolit123/1.21-fix-coredns-migration-preflight 
kubeadm: trim leading "v" when running CoreDNS migration preflight
 2021-01-12 06:12:25 -08:00
Jakub Przychodzeń
93cf797c50 [Kube-scheduler] Lower timeout for leaderelection resourcelock 
Migrate how resource lock and leader election config is generated to new
way, hidding kubeClient. This also halfs kubeClient timeout, making it
an useful value.
 2021-01-12 11:06:44 +01:00
Kubernetes Prow Robot
1f5c1b6d91
Merge pull request #96722 from adtac/apfvalidation 
APF: make command-line args validation error more descriptive
 2021-01-11 18:38:37 -08:00
Kubernetes Prow Robot
e054aa268e
Merge pull request #97480 from lingsamuel/etcd-lease-max-size 
apiserver add lease object count metric
 2021-01-11 08:39:20 -08:00
Lubomir I. Ivanov
3b5e698cb2 kubeadm: trim leading "v" when running CoreDNS migration preflight 
During upgrade the coredns migration library seems to require
that the input version doesn't have the "v" prefix".

Fixes a bug where the user cannot run commands such as
"kubeadm upgrade plan" if they have `v1.8.0` installed.

Assuming this is caused by the fact that previously the image didn't
have a "v" prefix.
 2021-01-11 18:21:19 +02:00
Ling Samuel
7e9fe39cd7
apiserver add metric etcd_lease_object_counts 
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com>
 2021-01-11 21:22:07 +08:00
Justin SB
8797738c02 Fix spelling typos: scheduable -> schedulable 
Bulk fix of a common typo.
 2021-01-09 12:59:33 -05:00
he.qingguo
6f1c8de85c Fix typo of BoostrapToken in kubeadmin-type.go] 
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
 2021-01-09 16:16:29 +08:00
lyzs90
7b3322f677 Pull hollow node images from real nodes 2021-01-09 00:12:56 +08:00
Kubernetes Prow Robot
43ce28b995
Merge pull request #97625 from pacoxu/fix/kubeadm-token-warning 
kubeadm: avoid detection of the container runtime for commands that do not need it
 2021-01-05 11:47:10 -08:00
Kubernetes Prow Robot
07bd985724
Merge pull request #96561 from ialidzhikov/cleanup/csi-node-info 
Remove CSINodeInfo feature gate
 2021-01-05 11:46:00 -08:00
Kubernetes Prow Robot
1f64838041
Merge pull request #96854 from changshuchao/run-test1 
Optimize some irregular variable names
 2021-01-05 10:29:59 -08:00
changshuchao
854b74d9e2 Optimize some irregular variable names 
Signed-off-by: changshuchao <chang.shuchao1@zte.com.cn>
 2021-01-06 02:54:18 +08:00
pacoxu
bd3a74fece use default unkown sock for kubeadm cmd if cri detect is not needed 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-01-05 22:30:42 +08:00
Kubernetes Prow Robot
17bb2fc050
Merge pull request #97706 from knight42/refactor/kubeadm-certs-to-stable 
refactor(kubeadm): remove the "alpha certs" command
 2021-01-05 04:50:10 -08:00
Kubernetes Prow Robot
42fe1d3405
Merge pull request #97620 from rajansandeep/patch-1 
[kubeadm]: CoreDNS preflight: Parse correct version syntax
 2021-01-05 04:49:58 -08:00
Kubernetes Prow Robot
242e07dc3c
Merge pull request #97290 from neolit123/1.21-kubeadm-improve-token-error-messages 
kubeadm: improve the error messages when validating discovery CA hash
 2021-01-04 22:55:59 -08:00
Jian Zeng
394fb5617f refactor(kubeadm): remove the "alpha certs" command 2021-01-05 11:18:36 +08:00
Sandeep Rajan
a9ba7b06f0 CoreDNS preflight: Remove "v" from version 
Corrects the error: "CoreDNS will not be upgraded: cannot migrate up to 'v1.8.0' from '1.7.0'"
 2021-01-04 20:26:03 -05:00
Kubernetes Prow Robot
ffe74b2cf1
Merge pull request #97336 from maaoBit/remove_cleanup-ipvs 
remove --cleanup-ipvs flag of kube-proxy
 2021-01-04 08:41:57 -08:00
he.qingguo
5faa19ede8 Fix Spelling error about [workflow] for kubeadm 
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
 2020-12-31 16:00:53 +08:00
Jian Zeng
57d563403b refactor(kubeadm): remove deprecated command "alpha selfhosting pivot" 2020-12-31 13:47:15 +08:00
maao
d001b9b72a remove --cleanup-ipvs flag of kube-proxy 
Signed-off-by: maao <maao420691301@gmail.com>
 2020-12-31 11:29:38 +08:00
Jian Zeng
5ae687ecc6 feat(kubeadm): graduate command "kubeconfig user" 2020-12-30 10:24:23 +08:00
Kubernetes Prow Robot
80be1d6c72
Merge pull request #96429 from rajansandeep/coredns180-kubeadm 
[kubeadm]: Bump CoreDNS version to 1.8.0
 2020-12-29 13:19:48 -08:00
Kubernetes Prow Robot
88a05df5ff
Merge pull request #97266 from robbiemcmichael/kubeadm-validate-cert-chains 
kubeadm: support certificate chain validation
 2020-12-24 11:32:26 -08:00
Robbie McMichael
9022f24aed kubeadm: tests for certificate chain validation 2020-12-24 23:49:04 +08:00
Robbie McMichael
de8821acd3 kubeadm: support certificate chain validation 
Fixes an issue where some kubeadm phases fail if a certificate file
contains a certificate chain with one or more intermediate CA
certificates. The validation algorithm has been changed from requiring
that a certificate was signed directly by the root CA to requiring that
there is a valid certificate chain back to the root CA.
 2020-12-24 23:41:10 +08:00
Kubernetes Prow Robot
9858bc2925
Merge pull request #97452 from 249043822/br-cleanup-kubctl111 
remove unused funcs for kubeadm tests
 2020-12-23 17:04:26 -08:00
Kubernetes Prow Robot
6d76ece4d6
Merge pull request #97413 from SataQiu/fix-kubeadm-join-command-20201221 
kubeadm: clean redundant whitespace for join command template
 2020-12-23 10:18:26 -08:00
KeZhang
0abed09a6a remove unused funcs for kubeadm tests 2020-12-22 19:37:30 +08:00
Abel Barrera Duran
52979da973 32bit > 4GB integer overflow edge case fix 2020-12-21 13:12:42 -05:00
SataQiu
3a2ffbf70a kubeadm: clean redundant whitespace for join command template 2020-12-21 11:27:22 +08:00
Ian Gann
dc70c79a00 Fix bug in Member Exists Join for Kubeadm etcd join 
In kubeadm etcd join there is a a bug that exists where,
if a peer already exists in etcd, it attempts to mitigate
by continuing and generating the etcd manifest file. However,
this existing "member name" may actually be unset, causing
subsequent etcd consistency checks to fail.

This change checks if the member name is empty - if it is,
it sets the member name to the node name, and resumes.
 2020-12-17 11:54:02 -08:00
Nicole Han
b80abf6d34 update cloud-controller-manager samples to read --cloud-config flag 2020-12-15 10:56:22 -08:00
Lubomir I. Ivanov
429b7e2272 kubeadm: improve the error messages when validating discovery CA hash 
The error messages when the user feeds an invalid discovery token CA
hash are vague. Make sure to:
- Print the list of supported hash formats (currently only "sha256").
- Wrap the error from pubKeyPins.Allow() with a descriptive message.
 2020-12-14 20:13:36 +02:00
Kubernetes Prow Robot
6fc51bc528
Merge pull request #97244 from pacoxu/fix/97234 
etcd version for 1.19 is 3.4.13 for cve fixes
 2020-12-14 02:17:29 -08:00
Antonio Ojea
2e4aed2d4a bind-address flag usage 2020-12-11 18:47:24 +01:00
pacoxu
920dc25531 etcd version for 1.19 is 3.4.13 for cve fixes 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-12-11 23:37:38 +08:00
ialidzhikov
bc432124a2 Remove CSINodeInfo feature gate 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2020-12-10 09:58:22 +02:00
Kubernetes Prow Robot
74b4f3d015
Merge pull request #97009 from lingsamuel/etcd-config-reuse-duration 
apiserver add --lease-reuse-duration-seconds to config lease reuse duration
 2020-12-08 21:06:16 -08:00
Kubernetes Prow Robot
870d69e8af
Merge pull request #96928 from mysunshine92/kubelet-help-enable-cadvisor-json-endpoints 
Update the help text for kubelet's enable-cadvisor-json-endpoints flag to explicitly mention that it has no effect on the /stats/summary endpoint.
 2020-12-08 21:04:41 -08:00
Kubernetes Prow Robot
2282b3c258
Merge pull request #96872 from cici37/moveFeature 
Move IPv6DualStack to k8s.io/controller-manager
 2020-12-08 20:04:16 -08:00
Kubernetes Prow Robot
03aba080a6
Merge pull request #96860 from pacoxu/fix/96833 
fix kube-dns federations check in kubeadm upgrade dns check preflight
 2020-12-08 20:04:07 -08:00
Kubernetes Prow Robot
9a175b9b2a
Merge pull request #96223 from SataQiu/fix-scheduler-20201104 
scheduler: parse Pod's Node affinity once in PreScore phase
 2020-12-08 17:28:06 -08:00
Kubernetes Prow Robot
9c35c491f0
Merge pull request #91450 from gaurav1086/kube_proxy_test_fix_goroutine_leak 
kube-proxy-test: fix goroutine leak
 2020-12-08 16:28:08 -08:00
pacoxu
4901855fdd fix doc/comments error: volume stats agg period default value 1m and disable when it is negative like -1s. 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-12-07 11:46:54 +08:00
SataQiu
fa04c55ee6 kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-12-06 14:59:12 +08:00
Ling Samuel
c99567005d
apiserver add --lease-reuse-duration-seconds to config lease reuse duration 
Signed-off-by: Ling Samuel <lingsamuelgrace@gmail.com>
 2020-12-04 19:19:49 +08:00
Michaël Lévesque-Dion
046ec59a8b use 'masked' instead of 'redacted' 2020-12-03 11:01:41 -05:00
Michaël Lévesque-Dion
0841b13e37 use deepcopy to actually operate on a copy 2020-12-02 14:44:11 -05:00
Michaël Lévesque-Dion
ec271c0e4f use a copy of the config 2020-12-02 12:57:17 -05:00
Sandeep Rajan
2eabd9d832 fix migration logic 
modify addon test to cover the entire migration logic
 2020-12-02 12:53:07 -05:00
Michaël Lévesque-Dion
4ab4801139 avoid logging kubelet configuration headers 2020-12-01 18:36:48 -05:00
wangyamei
f6d7cab203 Update the help text for kubelet's enable-cadvisor-json-endpoints flag to explicitly mention that it has no effect on the /stats/summary endpoint.enable-cadvisor-json-endpoints 2020-11-28 21:59:57 +08:00
Paco Xu
4525f3fef8 coredns dep.Severity is newdefault, not newDefault 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-11-27 18:17:02 +08:00
SataQiu
2b38078de1 scheduler: parse Pod's Node affinity once in PreScore phase 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-11-26 11:19:52 +08:00
cici37
4d201764dc Move feature IPv6DualStack to k8s.io/controller-manager 2020-11-25 15:42:13 -08:00
pacoxu
05f9e500ad fix kubeadm upgrade dns check preflight 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2020-11-25 21:07:25 +08:00
Jussi Nummelin
3f284fa892 Finetune container-runtime-endpoint option help text 
Signed-off-by: Jussi Nummelin <jussi.nummelin@gmail.com>
 2020-11-25 10:04:34 +00:00
Adhityaa Chandrasekar
39fb8ced93 APF: make command-line args validation error more descriptive 
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2020-11-19 20:37:06 +00:00
Jordan Liggitt
09bdf76b8a Plumb event recorder to garbage collector controller 2020-11-17 10:42:45 -05:00
Sandeep Rajan
40862c3b60 bump coredns to 1.8.0 2020-11-16 15:22:05 -05:00
Kubernetes Prow Robot
36f571404f
Merge pull request #96527 from adtac/apfbeta 
promote API priority and fairness types and APIs to beta
 2020-11-13 19:33:04 -08:00
yue9944882
849be447f5 APF: graduate API and types to beta 
Signed-off-by: Adhityaa Chandrasekar <adtac@google.com>
 2020-11-13 23:20:39 +00:00
xiongzhongliang
90f4aeeea4 use klog.Info and klog.Warning when had no format 2020-11-14 00:55:06 +08:00
Kubernetes Prow Robot
da75c26648
Merge pull request #95978 from roycaihw/storage-version/gc 
Storage version garbage collector
 2020-11-12 18:36:37 -08:00
Kubernetes Prow Robot
cd21a1240a
Merge pull request #94866 from smarterclayton/scheduling_metrics 
scheduler: Implement resource metrics at /metrics/resources
 2020-11-12 18:36:23 -08:00
Haowei Cai
f675dac440 generated 2020-11-12 16:25:22 -08:00
Haowei Cai
ee9ace14c2 add storage version garbage collector 2020-11-12 16:21:00 -08:00
Kubernetes Prow Robot
ae95984e88
Merge pull request #96426 from damemi/print-scheduler-config 
Log defaulted kube-scheduler component config at startup
 2020-11-12 16:03:01 -08:00
Mike Dame
14fa76d92f Log defaulted kube-scheduler component config at startup 2020-11-12 16:03:11 -05:00
Kubernetes Prow Robot
e38b1b94f8
Merge pull request #96399 from andrewsykim/service-config 
move service controller config to k8s.io/cloud-provider/controllers/service/config
 2020-11-12 11:21:57 -08:00
Kubernetes Prow Robot
6c1a9bf177
Merge pull request #96385 from cici37/addingSamples 
Adding sample files to demonstrate how cloud providers leverage CCM
 2020-11-12 11:21:21 -08:00
Kubernetes Prow Robot
71331d8596
Merge pull request #96372 from serathius/sanitization-kubelet 
Add --experimental-logging-sanitization flag to kubelet
 2020-11-12 11:21:12 -08:00
Kubernetes Prow Robot
ee0d35895d
Merge pull request #96190 from soltysh/kubectl_staging 
Move the remaining kubectl bits to k8s.io/kubectl
 2020-11-12 11:20:23 -08:00
Clayton Coleman
264496cc41
scheduler: Implement resource metrics at /metrics/resources 
Implement pod resource metrics as described in KEP 1916. The new
`/metrics/resources` endpoint is exposed on the active scheduler
and reports kube_pod_resources* metrics that present the effective
requests and limits for all resources on the pods as calculated by
the scheduler and kubelet. This allows administrators using the
system to quickly perform resource consumption, reservation, and
pending utilization calculations when those metrics are read.
Because metrics calculation is on-demand, there is no additional
resource consumption incurred by the scheduler unless the endpoint
is scraped.
 2020-11-12 12:37:38 -05:00
Marek Siarkowicz
8e60d75c15 Add --experimental-logging-sanitization flag to Kubelet 
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
 2020-11-12 12:32:19 +01:00
sw.han
d070bff273 Add kubelet configuration flag 'topology-manager-scope' 
add kubelet config option.
* --topology-manager-scope=[ container | pod ]
* default=container

Signed-off-by: Krzysztof Wiatrzyk <k.wiatrzyk@samsung.com>
 2020-11-12 12:25:54 +01:00
Kubernetes Prow Robot
12d9183da0
Merge pull request #95718 from SergeyKanzhelev/runtimeClass2 
RuntimeClass GA
 2020-11-12 00:44:51 -08:00
Kubernetes Prow Robot
d233111f5b
Merge pull request #94196 from andrewsykim/registry-creds 
kubelet: add alpha credential provider plugins
 2020-11-11 19:59:11 -08:00
cici37
443f829703 Adding sample files to demonstrate how cloud provider leverage CCM. 2020-11-11 19:50:06 -08:00
Kubernetes Prow Robot
667d1c2c3f
Merge pull request #93370 from alaypatel07/add-new-cronjob-controller 
Add cronjob controller v2
 2020-11-11 15:42:50 -08:00
Sergey Kanzhelev
06da0e5e74 GA of RuntimeClass feature gate and API 2020-11-11 19:22:32 +00:00
Kubernetes Prow Robot
c3769096c6
Merge pull request #96439 from Huang-Wei/sched-policy-defaultpreemption 
Fix a bug that DefaultPreemption plugin is disabled when using scheduler policy
 2020-11-11 07:44:18 -08:00
Kubernetes Prow Robot
6b24a5796c
Merge pull request #95382 from neolit123/1.20-deprecate-master-label 
kubeadm: deprecate the "node-role.kubernetes.io/master" label / taint
 2020-11-11 06:06:10 -08:00
Wei Huang
47a7c374c6
Fix a bug that DefaultPreemption plugin is disabled when using scheduler policy 2020-11-10 17:48:32 -08:00
Alay Patel
38bb53555e update violation_exceptions.list and make generated 2020-11-10 17:32:06 -05:00
Alay Patel
8d7dd4415e add cronjob_controllerv2.go 2020-11-10 17:32:06 -05:00
Kubernetes Prow Robot
40ef0ad6e9
Merge pull request #95002 from p0lyn0mial/upstream-supress-err-conn-killed 
stop logging killing connection/stream because serving request timed out and response had been started
 2020-11-10 12:37:51 -08:00
Lubomir I. Ivanov
fb7ddf88e9 kubeadm: mark the "master" label/taint as deprecated 
- Mark the "node-role.kubernetes.io/master" key for labels
and taints as deprecated.
- During "kubeadm init/join" apply the label
"node-role.kubernetes.io/control-plane" to new control-plane nodes,
next to the existing "node-role.kubernetes.io/master" label.
- During "kubeadm upgrade apply", find all Nodes with the "master"
label and also apply the "control-plane" label to them
(if they don't have it).
- During upgrade health-checks collect Nodes labeled both "master"
and "control-plane".
- Rename the constants.ControlPlane{Taint|Toleraton} to
constants.OldControlPlane{Taint|Toleraton} to manage the transition.
- Mark constants.OldControlPlane{{Taint|Toleraton} as deprecated.
- Use constants.OldControlPlane{{Taint|Toleraton} instead of
constants.ControlPlane{Taint|Toleraton} everywhere.
- Introduce constants.ControlPlane{Taint|Toleraton}.
- Add constants.ControlPlaneToleraton to the kube-dns / CoreDNS
Deployments to make them anticipate the introduction
of the "node-role.kubernetes.io/control-plane:NoSchedule"
taint (constants.ControlPlaneTaint) on kubeadm control-plane Nodes.
 2020-11-10 22:10:13 +02:00
Andrew Sy Kim
b1e0decce1 move service controller config to k8s.io/cloud-provider/controllers/service/config 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-11-10 14:59:44 -05:00
Andrew Sy Kim
51441fd052 kubelet: support alpha credential provider exec plugins 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-11-10 13:44:06 -05:00
pigletfly
19a36d4b9a Remove duplicate import 2020-11-10 19:11:46 +08:00
Kubernetes Prow Robot
4261200724
Merge pull request #93873 from roycaihw/storage-version/handler 
Apiserver updates storageversions API and filters certain write requests during bootstrap
 2020-11-09 17:30:41 -08:00
Kubernetes Prow Robot
995e531a63
Merge pull request #93764 from cici37/ccmwrap 
Adding flexibility to CCM
 2020-11-09 13:44:28 -08:00
Tim Allclair
a439bc5572
Remove --redirect-container-streaming functionality (#95935) 
* Remove --redirect-container-streaming functionality

* Update bazel
 2020-11-09 11:50:11 -08:00
Kubernetes Prow Robot
10221a8dac
Merge pull request #94643 from lonng/simplify-code 
Avoid unnecessary calls if other error occurred
 2020-11-09 11:49:57 -08:00
Lukasz Szaszkiewicz
057986e32c stops puting a stacktrace of aborted requests in the logs 
Aborted requests are the ones that were disrupted with http.ErrAbortHandler.
For example, the timeout handler will panic with http.ErrAbortHandler when a response to the client has been already sent
and the timeout elapsed.

Additionally, a new metric requestAbortsTotal was defined to count aborted requests. The new metric allows for aggregation for each group, version, verb, resource, subresource and scope.
 2020-11-09 09:23:40 +01:00
Haowei Cai
1c2d446648 require APIServerIdentity to be enabled to run StorageVersionAPI 
without APIServerIdentity enabled, stale apiserver leases won't be GC'ed
and the same for stale storage version entries. In that case the storage
migrator won't operate correctly without manual intervention.
 2020-11-08 19:06:30 -08:00
Haowei Cai
b5b93004b5 generated 2020-11-08 18:53:40 -08:00
Chao Xu
fa1805cc5c Add an integration test. 
To make sure that the storage version filter can block certain requests until
the storage version updates are completed, and that the apiserver works
properly after the storage version updates are done.
 2020-11-08 18:53:40 -08:00
Chao Xu
7218978716 Add a generic filter that blocks certain write requests before 
StorageVersions are updated during apiserver bootstrap.

Also add a poststarthook to the aggregator which updates the
StorageVersions via the storageversion.Manager
 2020-11-08 18:53:40 -08:00
Kubernetes Prow Robot
2570a9d94c
Merge pull request #96306 from SataQiu/small-fix-20201106 
kubeadm: fix the lint failure where return value is not checked
 2020-11-07 11:43:37 -08:00
Kubernetes Prow Robot
281866b35c
Merge pull request #95533 from roycaihw/apiserver-lease-controller 
Add kube-apiserver lease controller
 2020-11-06 18:09:37 -08:00
Haowei Cai
3761a00e5b add kube-apiserver-lease-controller poststart hook 2020-11-06 13:33:08 -08:00
Kubernetes Prow Robot
b1b627072a
Merge pull request #96217 from p0lyn0mial/delegated-authn-webhook-token-timeout 
DelegatingAuthenticationOptions TokenReview client timeout
 2020-11-06 11:29:16 -08:00
SataQiu
50d0a40155 kubeadm: fix the lint failure where return value is not checked 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-11-06 20:53:58 +08:00
Maciej Szulik
523854a0e2
Generated changes 2020-11-06 12:04:39 +01:00
Maciej Szulik
9b8247e5dd
Move the remaining kubectl bits to k8s.io/kubectl 2020-11-06 12:04:39 +01:00
Maciej Szulik
2e74df97a4
Introduce kubectl-convert plugin 2020-11-06 12:04:36 +01:00
cici37
895a0a8d5e Adding config extension to CCM. 2020-11-06 02:42:44 -08:00
Kubernetes Prow Robot
8d6829fe1e
Merge pull request #95896 from zshihang/flag 
make flags of TokenRequest required
 2020-11-05 18:36:50 -08:00
Shihang Zhang
a5021a4ddf make flags of TokenRequest required 2020-11-05 10:40:56 -08:00
Shihang Zhang
4c593b268a default service-account-extend-token-expiration to true 2020-11-05 09:07:01 -08:00
Kubernetes Prow Robot
e0a51c9e6b
Merge pull request #93244 from Sh4d1/etcd_health_timeout 
Allow configuration of etcd healthcheck timeout
 2020-11-05 01:06:53 -08:00
Shihang Zhang
d40f0c43c4 separate RootCAConfigMap from BoundServiceAccountTokenVolume 2020-11-04 17:10:39 -08:00
Lukasz Szaszkiewicz
7340c3498a DelegatingAuthenticationOptions: allows for setting a timeout for the TokenReview client that is used by for the webhook authenticator 
Previously no timeout was set. Requests without explicit timeout might potentially hang forever and lead to starvation of the application.
When no timeout was specified a default one will be applied.
 2020-11-04 13:40:33 +01:00
Kubernetes Prow Robot
acc3910964
Merge pull request #95991 from serathius/datapolicy-kubeadm 
Add datapolicy tags to cmd/kubeadm directory
 2020-11-03 22:50:17 -08:00
Kubernetes Prow Robot
2ee1003430
Merge pull request #96051 from ravisantoshgudimetla/add-priority-flag 
[kubelet] Allow priority to be set for kubelet process on Windows
 2020-11-02 13:41:52 -08:00
ravisantoshgudimetla
784098f8b6 Build files 2020-11-03 01:19:00 +05:30
ravisantoshgudimetla
f4c2dcd030 [kubelet] Allow priority to be set for kubelet process on Windows 2020-11-03 01:18:59 +05:30
Kubernetes Prow Robot
d16112f76c
Merge pull request #96052 from wojtek-t/fix_watchcache_size 
Disable watchcache for events
 2020-11-02 07:30:53 -08:00
Abu Kashem
2f812c3194
set webhook retry backoff parameters for kubelet 2020-11-01 10:22:21 -05:00
Abu Kashem
53a1307f68
make backoff parameters configurable for webhook 
Currently webhook retry backoff parameters are hard coded, we want
to have the ability to configure the backoff parameters for webhook
retry logic.
 2020-11-01 10:18:25 -05:00
wojtekt
5a8f94cb30 Disable watchcache for events 2020-10-31 19:51:33 +01:00
Kubernetes Prow Robot
bf67247124
Merge pull request #93258 from zshihang/token 
mv TokenRequest and TokenRequestProjection to GA
 2020-10-30 16:36:51 -07:00
Kubernetes Prow Robot
4b65f70652
Merge pull request #95740 from cici37/moveCCM 
Move cloud-controller-manager to staging k8s.io/cloud-provider
 2020-10-30 13:48:51 -07:00
Marek Siarkowicz
8644f3ff83 Add datapolicy tags to cmd/kubeadm directory 2020-10-30 18:32:17 +01:00
Kubernetes Prow Robot
f2ed1b5580
Merge pull request #96016 from cici37/informer 
Move informer_factory to staging
 2020-10-30 00:44:06 -07:00
Kubernetes Prow Robot
d0bee69fc9
Merge pull request #94636 from hprateek43/cpu_threads_parameter 
Added config parameter for CPU threads
 2020-10-29 21:04:05 -07:00
cici37
9465d95ea6 Move CCM to staging k8s.io/cloud-provider 2020-10-29 20:50:23 -07:00
Shihang Zhang
ff641f6eb2 mv TokenRequest and TokenRequestProjection to GA 2020-10-29 20:47:01 -07:00
cici37
a91a2cdad6 Move informer_factory to staging 2020-10-29 12:20:33 -07:00
Kubernetes Prow Robot
1968e96165
Merge pull request #95856 from knight42/refactor/disable-apiserver-insecure-port 
refactor(apiserver): disable insecure port
 2020-10-29 10:47:58 -07:00
knight42
cfc2b330a7
refactor(apiserver): ignore the insecure flags 
Leave the insecure flags intact but stop serving on insecure port.
 2020-10-29 23:20:17 +08:00
Harsh Singh
1763688d71 Added config parameter for CPU threads 2020-10-29 12:16:10 +05:30
Kubernetes Prow Robot
8422116039
Merge pull request #95630 from masap/unit_test1 
test: Add service cluster IP range unit test
 2020-10-27 14:25:57 -07:00
Kubernetes Prow Robot
4df8d97af0
Merge pull request #95725 from p0lyn0mial/delegated-authz-sar-timeout 
sets explicit timeout for SubjectAccessReview client
 2020-10-27 03:37:59 -07:00
Kubernetes Prow Robot
3d6026499b
Merge pull request #95235 from andrewsykim/controlplane-egress-selector 
apiserver: support 'controlplane' as an egress selector type
 2020-10-26 14:45:59 -07:00
Khaled Henidak (Kal)
6675eba3ef
dual stack services (#91824) 
* api: structure change

* api: defaulting, conversion, and validation

* [FIX] validation: auto remove second ip/family when service changes to SingleStack

* [FIX] api: defaulting, conversion, and validation

* api-server: clusterIPs alloc, printers, storage and strategy

* [FIX] clusterIPs default on read

* alloc: auto remove second ip/family when service changes to SingleStack

* api-server: repair loop handling for clusterIPs

* api-server: force kubernetes default service into single stack

* api-server: tie dualstack feature flag with endpoint feature flag

* controller-manager: feature flag, endpoint, and endpointSlice controllers handling multi family service

* [FIX] controller-manager: feature flag, endpoint, and endpointSlicecontrollers handling multi family service

* kube-proxy: feature-flag, utils, proxier, and meta proxier

* [FIX] kubeproxy: call both proxier at the same time

* kubenet: remove forced pod IP sorting

* kubectl: modify describe to include ClusterIPs, IPFamilies, and IPFamilyPolicy

* e2e: fix tests that depends on IPFamily field AND add dual stack tests

* e2e: fix expected error message for ClusterIP immutability

* add integration tests for dualstack

the third phase of dual stack is a very complex change in the API,
basically it introduces Dual Stack services. Main changes are:

- It pluralizes the Service IPFamily field to IPFamilies,
and removes the singular field.
- It introduces a new field IPFamilyPolicyType that can take
3 values to express the "dual-stack(mad)ness" of the cluster:
SingleStack, PreferDualStack and RequireDualStack
- It pluralizes ClusterIP to ClusterIPs.

The goal is to add coverage to the services API operations,
taking into account the 6 different modes a cluster can have:

- single stack: IP4 or IPv6 (as of today)
- dual stack: IPv4 only, IPv6 only, IPv4 - IPv6, IPv6 - IPv4

* [FIX] add integration tests for dualstack

* generated data

* generated files

Co-authored-by: Antonio Ojea <aojea@redhat.com>
 2020-10-26 13:15:59 -07:00
Kubernetes Prow Robot
bdde4fb8f5
Merge pull request #93040 from cmluciano/cml/ipvsschedmodules 
ipvs: ensure selected scheduler kernel modules are loaded
 2020-10-26 10:25:17 -07:00
Lukasz Szaszkiewicz
2160cbc53f DelegatingAuthorizationOptions: exposes and sets a default timeout for SubjectAccessReview client 
previously no timeout was set. Requests without explicit timeout might potentially hang forever and lead to starvation of the application.
 2020-10-26 17:11:59 +01:00
Andrew Sy Kim
a0aebf96ec apiserver: support egress selection name 'controlplane' and deprecate 'master' 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-10-26 10:24:16 -04:00
Christopher M. Luciano
51ed242194
ipvs: check for existence of scheduler module and fail if not found 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-10-23 17:17:44 -04:00
Kubernetes Prow Robot
254f3e26ab
Merge pull request #95786 from Sh4d1/add_missing_kubeadm_patch 
fix: add missing patch flag for kubeadm init phase control-plane
 2020-10-23 02:27:45 -07:00
Kubernetes Prow Robot
3627a28279
Merge pull request #95723 from aojea/podcidr 
kubeadm: validate podSubnet against node-mask and serviceSubnet max size
 2020-10-23 01:35:45 -07:00
Kubernetes Prow Robot
1257bc5acb
Merge pull request #91474 from cici37/pkgController 
Cleanup CCM dependencies
 2020-10-22 23:17:45 -07:00
Antonio Ojea
4e14d1b9a3 kubeadm: validate node-cidr-mask are correct 2020-10-22 17:31:10 +02:00
Antonio Ojea
7fc6b4157b kubeadm validate maximum service subnet size 
Validate that the maximum service subnet size doesn't exceed the
limits.

Co-authored-by: Arvinderpal Wander <awander@gmail.com>
 2020-10-22 17:30:59 +02:00
Antonio Ojea
8b52995d32 kubeadm: validate podSubnet against node-cidr-mask 
the controller manager should validate the podSubnet against the node-mask
because if they are incorrect can cause the controller-manager to fail.

We don't need to calculate the node-cidr-masks, because those should
be provided by the user, if they are wrong we fail in validation.
 2020-10-22 16:24:13 +02:00
Patrik Cyvoct
5fc4b4ea8f
fix: add missing patch flag for kubeadm init phase control-plane 
Signed-off-by: Patrik Cyvoct <patrik@ptrk.io>
 2020-10-22 10:46:50 +02:00
Masashi Honma
b7630e4168 test: Add service cluster IP range unit test 
This PR adds trailing unit tests to check the service cluster IP range and
improves the code coverage of k8s.io/kubernetes/cmd/kube-apiserver/app from
5.7% to 6.2%.

1) Dual stack IPv4/IPv6
2) Invalid IPv4, IPv6 mask
3) missing IPv4, IPv6 mask
4) invalid IP address format

The tests 2, 3, 4 are suggsted by Antonio Ojea.
 2020-10-22 11:42:21 +09:00
Kubernetes Prow Robot
3fe372c3da
Merge pull request #95631 from alculquicondor/enable-default-spreading 
Graduate DefaultPodTopologySpread to beta
 2020-10-20 07:58:09 -07:00
Kubernetes Prow Robot
3175b59ac2
Merge pull request #94489 from ialidzhikov/fix/volume-expand 
Do not assume storageclass is still in-tree after csi migration
 2020-10-19 15:08:07 -07:00
cici37
95acec5a3b Move client_builder to k8s.io/controller-manager 2020-10-19 14:48:22 -07:00
Aldo Culquicondor
87c8349bdc Graduate DefaultPodTopologySpread to beta 
And set to enabled by default

Change-Id: Ie4cc4758c52492924cb0663450f2747908cb5882
 2020-10-19 16:58:09 -04:00
He Jie Xu
6e55b88725 Reorder default Filter plugins to have UnschedulableAndUnresolvable first 2020-10-14 09:40:51 +00:00
Kubernetes Prow Robot
475849eafa
Merge pull request #95426 from neolit123/1.20-add-output-to-generate-csr 
kubeadm: add some output to the generate-csr command
 2020-10-12 19:31:21 -07:00
Kubernetes Prow Robot
1dff024e64
Merge pull request #91014 from cici37/apiConfig 
Move cmd/controller-manager to k8s.io/controller-manager
 2020-10-12 15:17:22 -07:00
Lubomir I. Ivanov
bae6b93d5c kubeadm: add some output to the generate-csr command 
Currently the "generate-csr" command does not have any output.
Pass an io.Writer (bound to os.Stdout from /cmd) to the functions
responsible for generating the kubeconfig / certs keys and CSRs.

If nil is passed these functions don't output anything.
 2020-10-12 19:05:45 +03:00
SataQiu
646f4e2b62 make new command functions to keep private when they are not required to be public 2020-10-10 12:03:02 +08:00
James Sturtevant
78ca71857b
Update Windows Pause version to 1.4.0 2020-10-08 15:39:31 -07:00
cici37
ae8ce0d190 Move cmd/controller-manager to k8s.io/controller-manager and cloud specific configs to k8s.io/cloud-provider. 2020-10-08 13:23:16 -07:00
Dan Winship
75242fce7a kubelet: allow specifying dual-stack node IPs on bare metal 
Discussion is ongoing about how to best handle dual-stack with clouds
and autodetected IPs, but there is at least agreement that people on
bare metal ought to be able to specify two explicit IPs on dual-stack
hosts, so allow that.
 2020-10-07 17:25:54 -04:00
Patrik Cyvoct
2e430ba622
Allow configuration of etcd healthcheck timeout 
Signed-off-by: Patrik Cyvoct <patrik@ptrk.io>
 2020-10-07 19:13:19 +02:00
cici37
33e23c4005 Move cloud related feature gates to controller-manager 2020-10-05 10:19:08 -07:00
Kubernetes Prow Robot
aa1f912868
Merge pull request #94915 from Lion-Wei/fix-cleanup 
fix kube-proxy cleanup
 2020-09-30 06:21:24 -07:00
Kubernetes Prow Robot
902ed94bba
Merge pull request #95134 from zgfh/add_note_for_kubeadm_cert_renew 
kubeadm: add note for kubeadm cert renew
 2020-09-29 06:27:26 -07:00
Kubernetes Prow Robot
604569482f
Merge pull request #94504 from neolit123/1.20-warning-cert-bounds-client-side 
kubeadm: print warnings on invalid cert period instead of erroring out
 2020-09-29 02:49:25 -07:00
Alan Zhu
b9067e5a0c add note for kubeadm cert renew 2020-09-29 09:05:40 +08:00
Lubomir I. Ivanov
477c41f36d kubeadm: deprecate self-hosting support 
Deprecate the experimental command "alpha self-hosting" and its
sub-command "pivot" that can be used to create a self-hosting
control-plane from static Pods.
 2020-09-28 22:24:24 +03:00
Kubernetes Prow Robot
db9f1e91d9
Merge pull request #94988 from neolit123/1.20-tollerate-missing-ca-key-on-join 
kubeadm: warn but do not error out on missing CA keys on CP join
 2020-09-28 06:36:48 -07:00
Daniel Smith
13b6a929bc It's an 'Instance' of apiserver 2020-09-24 16:14:29 -04:00
Kubernetes Prow Robot
770eb2c4a0
Merge pull request #94871 from neolit123/1.20-kubeadm-remove-experimental-kustomize 
kubeadm: remove the --experimental-kustomize feature
 2020-09-24 08:16:06 -07:00
Lubomir I. Ivanov
7c783fa374 kubeadm: make the CP join handling of kubeconfig similar to "init" 
The kubeconfig phase of "kubeadm init" detects external CA mode
and skips the generation of kubeconfig files. The kubeconfig
handling during control-plane join executes
CreateJoinControlPlaneKubeConfigFiles() which requires the presence
of ca.key when preparing the spec of a kubeconfig file and prevents
usage of external CA mode.

Modify CreateJoinControlPlaneKubeConfigFiles() to skip generating
the kubeconfig files if external CA mode is detected.
 2020-09-24 18:12:00 +03:00
Lubomir I. Ivanov
05b77fe99f kubeadm: warn but do not error out on missing CA keys on CP join 
- Modify validateCACertAndKey() to print warnings for missing keys
instead of erroring out.
- Update unit tests.

This allows doing a CP node join in a case where the user has:
- copied shared certificates to the new CP node, but not copied
ca.key files, treating the cluster CAs as external
- signed other required certificates in advance
 2020-09-24 18:11:59 +03:00
Kubernetes Prow Robot
3aa546923c
Merge pull request #94586 from BedivereZero/master 
Stop container before remove for Docker
 2020-09-23 10:14:25 -07:00
Kubernetes Prow Robot
7a2812ca60
Merge pull request #94938 from yagonobre/certs-graduate 
Graduate kubeadm alpha certs command
 2020-09-23 08:36:10 -07:00
Yago Nobre
2f19cf7cbc Graduate kubeadm alpha certs command 2020-09-23 10:13:45 -03:00
Kubernetes Prow Robot
18782e9996
Merge pull request #94884 from arghya88/remove-deprecated-scheduler-metrics 
removing deprecated scheduler metrics
 2020-09-22 14:42:32 -07:00
Kubernetes Prow Robot
86a9087896
Merge pull request #89962 from wangrzneu/master 
make kubectl/kubeadm completion script support busybox
 2020-09-22 12:21:23 -07:00
Arghya Sadhu
c62f0dd165 removing deprecated scheduler metrics 2020-09-22 21:04:15 +05:30
knight42
36eb74a803
refactor(kubeadm): make alpha kubeconfig user command accpet --config 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-22 23:10:41 +08:00
Kubernetes Prow Robot
dd466bccde
Merge pull request #94527 from brahmaroutu/mount-utils-2 
Change code to use  staging/k8s.io/mount-utils
 2020-09-21 17:46:47 -07:00
Kubernetes Prow Robot
4304f4bdbd
Merge pull request #94869 from neolit123/1.20-remove-upgrade-node-kubelet-flag 
kubeadm: remove the --kubelet-version flag for "upgrade node"
 2020-09-21 12:55:52 -07:00
Kubernetes Prow Robot
f682c4f142
Merge pull request #94816 from neolit123/1.20-relax-kubeconfig-server-validation 
kubeadm: relax the validation of kubeconfig server URLs
 2020-09-21 10:04:33 -07:00
Kubernetes Prow Robot
6568625dc7
Merge pull request #94919 from fabriziopandini/remove-kubeadm-audit 
Remove kubeadm audit package
 2020-09-20 08:38:29 -07:00
Kubernetes Prow Robot
fcbeee92f5
Merge pull request #94347 from povsister/kube-proxy-help-msg 
Make kubeconfig command-line help message of kube-proxy more precise
 2020-09-19 17:32:29 -07:00
fabriziopandini
66b8847dbf Remove kubeadm audit package 2020-09-19 17:20:39 +02:00
ialidzhikov
3bc560225e Do not assume storageclass is still in-tree after csi migration 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2020-09-19 17:33:19 +03:00
Lion-Wei
dbb5438b33 fix kube-proxy cleanup 2020-09-19 17:48:20 +08:00
Kubernetes Prow Robot
b86e725694
Merge pull request #91785 from mattcary/filtereddial 
Specify a DialContext in storage plugin clients
 2020-09-18 15:08:27 -07:00
wfender
bb58d95f0b Add cheftako to KCM owners. 2020-09-18 09:39:07 -07:00
Lubomir I. Ivanov
8ece27bf4b kubeadm: remove the --experimental-kustomize feature 
The feature was replaced by --experimental-patches and deprecated in
1.19.
 2020-09-18 03:49:53 +03:00
Matthew Cary
299a296c7a update-bazel 
Change-Id: Iebc99ee13587f0cd4c43ab85c7295d458d679d1e
 2020-09-18 00:44:39 +00:00
Matthew Cary
f2e23afcf1 Adds filtering of hosts to DialContexts. 
The provided DialContext wraps existing clients' DialContext in an attempt to
preserve any existing timeout configuration. In some cases, we may replace
infinite timeouts with golang defaults.

- scaleio: tcp connect/keepalive values changed from 0/15 to 30/30
- storageos: no change
 2020-09-18 00:07:32 +00:00
Matthew Cary
74dbf274d9 update storageos vendor for FilteredDial change 2020-09-18 00:07:32 +00:00
Lubomir I. Ivanov
71856675a4 kubeadm: remove the --kubelet-version flag for "upgrade node" 
The flag was deprecated as it is problematic since it allows
overrides of the kubelet configuration that is downloaded
from the cluster during upgrade.

Kubeadm node upgrades already download the KubeletConfiguration
and store it in the internal ClusterConfiguration type. It is then
only a matter of writing that KubeletConfiguration to disk.
 2020-09-18 01:03:38 +03:00
wfender
ecf3bfe3b1 Adding cheftako to CCM owners. 2020-09-17 14:52:53 -07:00
Srini Brahmaroutu
fbe5daed73 Change code to use staging/k8s.io/mount-utils 2020-09-16 21:51:24 -07:00
Kubernetes Prow Robot
218a2b078b
Merge pull request #94765 from zhanw15/patch-1 
kubeadm init phase upload-certs: add flag --kubeconfig
 2020-09-16 19:20:44 -07:00
Kubernetes Prow Robot
3ba141173c
Merge pull request #94668 from neolit123/1.20-kubeadm-remove-dkc 
kubeadm: remove the "alpha kubelet config enable-dynamic" command
 2020-09-16 14:05:21 -07:00
Lubomir I. Ivanov
edaef35eac kubeadm: relax the validation of kubeconfig server URLs 
For external CA users that have prepared the kubeconfig files
for components, they might wish to provide a custom API server URL.
When performing validation on these kubeconfig files, instead of
erroring out on such custom URLs, show a klog Warning.

This allows flexibility around topology setup, where users
wish to make the kubeconfigs point to the ControlPlaneEndpoint instead
of the LocalAPIEndpoint.

Fix validation in ValidateKubeconfigsForExternalCA expecting
all kubeconfig files to use the CPE. The kube-scheduler and
kube-controller-manager now use LAE.
 2020-09-16 01:52:09 +03:00
Kubernetes Prow Robot
e7b9453972
Merge pull request #93537 from timuthy/enhancement.move-resourcequota 
Move ResourceQuota admission to k8s.io/apiserver lib
 2020-09-15 12:26:58 -07:00
povsister
a290e9aa02 Update kubeconfig command-line help message for kube-proxy 2020-09-15 12:07:01 +08:00
Kubernetes Prow Robot
54df1fdc90
Merge pull request #94090 from deads2k/podpreset 
remove pod presets
 2020-09-14 10:43:13 -07:00
Kubernetes Prow Robot
5dd2676bf6
Merge pull request #94555 from SataQiu/fix-crisocket-warning-20200905 
Fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR
 2020-09-14 09:41:12 -07:00
Kubernetes Prow Robot
7ffc46924f
Merge pull request #94102 from neolit123/1.19-fix-etcd-700-perms 
kubeadm: adjust the logic around etcd data directory creation
 2020-09-14 09:40:59 -07:00
David Eads
c0c033b12f generated 2020-09-14 09:24:41 -04:00
David Eads
c7911a384c remove pod presets 2020-09-14 09:24:40 -04:00
zhanwang
ae03350e30
kubeadm init phase upload-certs: add flag --kubeconfig 2020-09-14 17:48:20 +08:00
Michaël Lévesque-Dion
fbd62d55af avoid logging token in RunDeleteTokens 2020-09-11 13:28:52 -04:00
Kubernetes Prow Robot
d39214ade1
Merge pull request #94603 from wojtek-t/migrate_leader_election_to_leases_todos 
Migrate scheduler, controller-manager and cloud-controller-manager to use LeaseLock
 2020-09-11 00:08:14 -07:00
Kubernetes Prow Robot
56b9a69d39
Merge pull request #90439 from SataQiu/dual-stack-node-cidr-20200424 
Dual-stack: make nodeipam compatible with existing single-stack clusters when dual-stack feature gate become enabled by default
 2020-09-10 19:34:14 -07:00
Lubomir I. Ivanov
daef96c3f2 kubeadm: remove stray "alpha phase" command 
This command had a TODO to be removed once kubeadm init phases are
added. Remove the command as init phases are in place already.
 2020-09-11 03:40:11 +03:00
Lubomir I. Ivanov
a5a29c54cc kubeadm: remove the "alpha kubelet config enable-dynamic" command 
The command was deprecated in 1.19 and can be removed in 1.20.
 2020-09-11 03:40:11 +03:00
Kubernetes Prow Robot
6085d90897
Merge pull request #92064 from roycaihw/storage-version/serve-api 
Serve storage-versions API in kube-apiserver
 2020-09-10 10:45:48 -07:00
wojtekt
805c1753cd Migrate scheduler, controller-manager and cloud-controller-manager to lease lock. 2020-09-10 11:57:18 +02:00
SataQiu
c318973cec fix the bug that kubeadm tries to call 'docker info' even if the CRI socket was for another CR 2020-09-10 14:05:36 +08:00
Akhilesh2412
1a0f69bca3 kubeadm: Update versions for 1.20 
This PR specifies minimum control plane version,
kubelet version and current K8s version for v1.20.

Signed-off-by: Kommireddy Akhilesh <akhileshkommireddy2412@gmail.com>
 2020-09-10 02:51:13 +05:30
Lubomir I. Ivanov
b5b9698fbf kubeadm: print warnings on invalid cert period instead of erroring out 
Client side period validation of certificates should not be
fatal, as local clock skews are not so uncommon. The validation
should be left to the running servers.

- Remove this validation from TryLoadCertFromDisk().
- Add a new function ValidateCertPeriod(), that can be used for this
purpose on demand.
- In phases/certs add a new function CheckCertificatePeriodValidity()
that will print warnings if a certificate does not pass period
validation, and caches certificates that were already checked.
- Use the function in a number of places where certificates
are loaded from disk.
 2020-09-09 20:53:13 +03:00
Kubernetes Prow Robot
5566dc93c4
Merge pull request #94508 from andrewsykim/remove-cni-alpha 
kubelet: remove alpha warnings for CNI flags
 2020-09-09 09:07:08 -07:00
Kubernetes Prow Robot
293a53f2c0
Merge pull request #94140 from derekwaynecarr/pid-ga 
Promote PidLimits to GA
 2020-09-09 06:35:52 -07:00
Lonng
8fe3b7f8b7 Avoid unnecessary calls if other error occurred 
Signed-off-by: Lonng <heng@lonng.org>
 2020-09-09 16:35:08 +08:00
Chao Xu
86dd4ce3b5 Let kube-apiserver host the storage version API 
Co-authored-by: Haowei Cai <haoweic@google.com>
 2020-09-08 19:14:36 -07:00
Kubernetes Prow Robot
3cf80090f0
Merge pull request #93044 from Huang-Wei/rm-sched-podInformer 
Initialize scheduler's podInformer in sharedInformerFactory
 2020-09-08 17:49:52 -07:00
Wei Huang
d8def59871
Initialize scheduler's podInformer in sharedInformerFactory 
Scheduler's specific podInfomer is now initialized inside the sahredInformerFactory.
 2020-09-08 12:57:17 -07:00
Kubernetes Prow Robot
8728450be1
Merge pull request #94179 from ddymko/golint-fix-azuredd 
fix golint for pkg/volume/azure_dd
 2020-09-08 12:29:53 -07:00
Kubernetes Prow Robot
92042fe6ea
Merge pull request #72671 from yanghaichao12/dev0108 
validate KubeletCgroups and KubeReservedCgroup
 2020-09-08 07:33:43 -07:00
BedivereZero
437c166199 Stop container before remove for Docker 2020-09-08 15:42:03 +08:00
Kubernetes Prow Robot
4e9bdd481e
Merge pull request #94471 from kshitijcode/kubelet-taint-fix-93608 
Added support for register-with-taints setting #93608
 2020-09-07 01:33:41 -07:00
David Dymko
cda0070f28 fix golint for pkg/volume/azure_dd 2020-09-05 09:44:27 -04:00
Kubernetes Prow Robot
32ab6713df
Merge pull request #94535 from liggitt/kubeadm-unit-fix 
Speed up slow Kubeadm unit tests, avoid mutating global variables
 2020-09-04 20:01:42 -07:00
Jordan Liggitt
c0ba2364b5 Run slow kubeadm upgrade tests in parallel 2020-09-04 13:36:45 -04:00
Jordan Liggitt
24481db023 Ensure kubeadm tests have unique names 2020-09-04 13:36:29 -04:00
Jordan Liggitt
7e01e38334 Avoid mutating global variables in kubeadm certs phases 2020-09-04 13:36:10 -04:00
Jordan Liggitt
6125e6b65a Deflake TestSetup 2020-09-04 11:50:56 -04:00
Kubernetes Prow Robot
3cdfdfccc9
Merge pull request #94506 from neolit123/1.20-coredns-remove-supported-version-check 
kubeadm: remove the CoreDNS check for supported image digests
 2020-09-04 07:37:41 -07:00
Andrew Sy Kim
76386cf3c3 kubelet: remove alpha warnings for CNI flags 
CNI is no longer alpha and is widely used by almost every Kubernetes cluster, we should remove the alpha warnings that were originally added from the early days of CNI

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-09-04 09:35:34 -04:00
Kubernetes Prow Robot
0edbf2554a
Merge pull request #94479 from knight42/feat/kubeadm-etcd-pod-resource-requests 
kubeadm: apply resource requests in the etcd pod spec
 2020-09-04 06:25:41 -07:00
Tim Usner
70d440bc7e Move ResourceQuota admission to k8s.io/apiserver 2020-09-04 14:53:52 +02:00
knight42
2ebd293780
feat(kubeadm): specify resource requests in etcd pod spec 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-04 11:54:21 +08:00
Lubomir I. Ivanov
4bb75a462f kubeadm: remove the CoreDNS check for supported image digests 
The isCoreDNSVersionSupported() check assumes that
there is a running kubelet, that manages the CoreDNS containers.

If the containers are being created it is not possible to fetch
their image digest. To workaround that, a poll can be used in
isCoreDNSVersionSupported() and wait for the CoreDNS Pods
are expected to be running. Depending on timing and CNI
yet to be installed this can cause problems related to
addon idempotency of "kubeadm init", because if the CoreDNS
Pods are waiting for another step they will never get running.

Remove the function isCoreDNSVersionSupported() and assume that
the version is always supported. Rely on the Corefile migration
library to error out if it must.
 2020-09-04 05:27:04 +03:00
Kubernetes Prow Robot
317540a28c
Merge pull request #87054 from changyaowei/kubelet_cmd 
Made the flag which defined in cadvisor can be used when kubelet config start cmd
 2020-09-03 12:31:41 -07:00
Kubernetes Prow Robot
be1d43a097
Merge pull request #93992 from prabhu43/kubeadm-kubeconfig-clustername 
Make clustername configurable in generation of kubeconfig using kubeadm command
 2020-09-03 11:13:41 -07:00
Kshitij Sharma
e4dee9cff3 Added support for register-with-taints setting #93608 2020-09-03 22:23:20 +05:30
Lubomir I. Ivanov
ebf163684a kubeadm: adjust the logic around etcd data directory creation 
- Ensure the directory is created with 0700 via a new function
called CreateDataDirectory().
- Call this function in the init phases instead of the manual call
to MkdirAll.
- Call this function when joining control-plane nodes with local etcd.

If the directory creation is left to the kubelet via the
static Pod hostPath mounts, it will end up with 0755
which is not desired.
 2020-09-03 18:38:54 +03:00
Kubernetes Prow Robot
c19e050aee
Merge pull request #94299 from zouyee/pending 
fix kubeadm update coredns with skip pending pod
 2020-09-03 08:17:54 -07:00
Kubernetes Prow Robot
92ba3eb793
Merge pull request #93275 from xlgao-zju/check-mem 
kubeadm: Add a preflight check that the control-plane node has at least 1700MB of RAM
 2020-09-03 08:17:40 -07:00
Kubernetes Prow Robot
8e29d9563d
Merge pull request #94385 from loopever/fix-typo 
fix typos in cmd/kubeadm
 2020-09-03 03:41:55 -07:00
zounengren
fc0bda5a3c fix kubeadm update coredns with skip pending pod 2020-09-03 10:42:59 +08:00
Kubernetes Prow Robot
0b92e8b16d
Merge pull request #94421 from rosti/kubeadm-fix-upgrade-plan 
kubeadm: Fix `upgrade plan` for air-gapped setups
 2020-09-02 18:21:54 -07:00
Kubernetes Prow Robot
0455c2d5e7
Merge pull request #94407 from lavalamp/big-rename 
Control Plane is a better name
 2020-09-02 14:49:55 -07:00
Kubernetes Prow Robot
2c12a81cb7
Merge pull request #94398 from neolit123/1.20-pin-control-plane-to-local-endpoint 
kubeadm: make the scheduler and KCM connect to the local API endpoint
 2020-09-02 12:09:19 -07:00
Daniel Smith
a86afc12df update scripts 2020-09-02 10:49:40 -07:00
Daniel Smith
15e0e3e90e rename 2020-09-02 10:48:26 -07:00
Daniel Smith
75f835aa08 move port definitions to a common location 2020-09-02 10:48:25 -07:00
Rostislav M. Georgiev
6e2a70eac7 kubeadm: Fix upgrade plan for air-gapped setups 
A bug was discovered in the `enforceRequirements` func for `upgrade plan`.
If a command line argument that specifies the target Kubernetes version is
supplied, the returned `ClusterConfiguration` by `enforceRequirements` will
have its `KubernetesVersion` field set to the new version.
If no version was specified, the returned `KubernetesVersion` points to the
currently installed one.

This remained undetected for a couple of reasons
- It's only `upgrade plan` that allows for the version command line argument to
  be optional (in `upgrade plan` it's mandatory)
- Prior to 1.19, the implementation of `upgrade plan` did not make use of the
  `KubernetesVersion` returned by `enforceRequirements`.

`upgrade plan` supports this optional command line argument to enable
air-gapped setups (as not specifying a version on the command line will end up
looking for the latest version over the Interned).

Hence, the only option is to make `enforceRequirements` consistent in the
`upgrade plan` case and always return the currently installed version in the
`KubernetesVersion` field.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2020-09-02 12:52:02 +03:00
Kubernetes Prow Robot
27df218c72
Merge pull request #93702 from thtanaka/feature/fix-kubeadm-reset 
kubeadm: reset don't unmount /var/lib/kubelet if it is mounted
 2020-09-01 23:13:08 -07:00
Kubernetes Prow Robot
dd6c53d035
Merge pull request #93946 from alexzimmer96/68026-pkg-controller-resourcequota 
Refactor pkg/controllers/resourcequota to fix golint errors
 2020-09-01 19:41:06 -07:00
Kubernetes Prow Robot
d5e2db896e
Merge pull request #94395 from rosti/kubeadm-ensure-etcd-upgrades 
kubeadm: Ensure etcd manifests are regenerated upon upgrade
 2020-09-01 18:44:38 -07:00
Kubernetes Prow Robot
433c3d57cc
Merge pull request #94309 from liggitt/deprioritize-extensions 
Deprioritize extensions/v1beta1 in discovery
 2020-09-01 18:44:09 -07:00
Kubernetes Prow Robot
b49724d5fc
Merge pull request #94287 from jingyih/update_etcd_server_3p4p13 
Update default etcd server to 3.4.13
 2020-09-01 15:35:20 -07:00
Lubomir I. Ivanov
d9441906c4 kubeadm: make the scheduler and KCM connect to local endpoint 
Pinning the kube-controller-manager and kube-scheduler kubeconfig files
to point to the control-plane-endpoint can be problematic during
immutable upgrades if one of these components ends up contacting an N-1
kube-apiserver:
https://kubernetes.io/docs/setup/release/version-skew-policy/#kube-controller-manager-kube-scheduler-and-cloud-controller-manager
For example, the components can send a request for a non-existing API
version.

Instead of using the CPE for these components, use the LocalAPIEndpoint.
This guarantees that the components would talk to the local
kube-apiserver, which should be the same version, unless the user
explicitly patched manifests.
 2020-09-01 19:38:28 +03:00
Rostislav M. Georgiev
3bef5d2e0b kubeadm: Ensure etcd manifests are regenerated upon upgrade 
A check that verifies that kubeadm does not "upgrade" to an older release was
overly optimized by skipping upgrade if the new version is the same as the old
one. This somewhat makes sense, but that way changes in any of the etcd fields
in the ClusterConfiguration won't be applied if the etcd version is not
changed.

Hence, this simple change ensures that the upgrade is done even when no version
change takes place.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2020-09-01 15:47:33 +03:00
loopever
847e59186a fix typos in cmd/kubeadm 2020-09-01 10:09:45 +08:00
Hu Shuai
2be66feb49 Improve the prompt message when kubeadm init is successful 
Signed-off-by: Hu Shuai <hus.fnst@cn.fujitsu.com>
 2020-08-31 15:27:20 +08:00
Kubernetes Prow Robot
1aec0a0fe0
Merge pull request #94072 from Mr-Linus/patch-3 
Remove TODO in cmd/kube-scheduler/app/options/options.go
 2020-08-30 00:10:20 -07:00
Jordan Liggitt
81144d6c9a Deprioritize extensions/v1beta1 in discovery 2020-08-28 10:58:32 -04:00
jingyih
c96b93fbd4 Update default etcd server to 3.4.13 2020-08-28 21:19:24 +08:00
Kubernetes Prow Robot
0a1aa394b7
Merge pull request #92987 from nikhita/cleanup-owners-apimachinery 
apimachinery: remove inactive members from OWNERS
 2020-08-27 19:08:33 -07:00
Kubernetes Prow Robot
481830b396
Merge pull request #92847 from SergeyKanzhelev/sigNodeOwnersCleanUp 
SIG node owner files clean up
 2020-08-27 19:07:40 -07:00
Kubernetes Prow Robot
a39f9dfde7
Merge pull request #93626 from vikkyomkar/issue-2237 
[Cleanup] Removes usage of the k8s-master label (version marker)
 2020-08-27 11:52:09 -07:00
Kubernetes Prow Robot
8297d5f195
Merge pull request #93483 from ZhiFeng1993/remove-false-positive-warning 
Remove false positive warning in kubeadm cmd
 2020-08-27 11:51:54 -07:00
Kubernetes Prow Robot
f542e86779
Merge pull request #93834 from loopever/master 
fix typos in cmd/kubeadm and cmd/kube-scheduler
 2020-08-27 10:38:06 -07:00
Linus Lee 李俊江
89303e23b5
Update options.go 2020-08-28 00:11:13 +08:00
Kubernetes Prow Robot
888f9c2c93
Merge pull request #93848 from nikhita/cleanup-apiserver-owners 
apiserver: remove inactive members from OWNERS
 2020-08-27 06:41:53 -07:00
Kubernetes Prow Robot
f588ad9c59
Merge pull request #94035 from zhouya0/scheduler_stop_using_legacy_scheme 
Scheduler authorization should stop using legacy scheme
 2020-08-27 04:49:26 -07:00
Kubernetes Prow Robot
be69ccc287
Merge pull request #94016 from mrueg/oyaml 
kubeadm: Separate argument key/value in log msg
 2020-08-27 04:49:16 -07:00
Kubernetes Prow Robot
50acbe6a59
Merge pull request #93885 from RobertKielty/93883 
kubeadm: add test name output for RunInitNodeChecks and RunJoinNodeChecks
 2020-08-27 04:47:44 -07:00
Derek Carr
6f2153986a Promote PidLimits to GA 2020-08-24 13:57:48 -04:00
Prabhu Jayakumar
bdd0ccaddb
Allow to configure clustername in creation of kubeconfig using kubeadm command 
Signed-off-by: Prabhu Jayakumar <j.prabhu91@gmail.com>
 2020-08-20 22:59:23 +05:30
Alexander Zimmermann
86dc0364f4
Refactored pkg/controllers/resourcequota 
* Fixed golint issues
* Removed redundant package import names
* Improved some variables and names

Co-authored-by: Mike Danese <mikedanese@gmail.com>
 2020-08-20 14:37:27 +02:00
zhouya0
3a237dd367 Scheduler auth stop using legacy scheme 2020-08-16 18:49:15 +08:00