Commit Graph

765 Commits

Author SHA1 Message Date
Kir Kolyshkin
ab5b77944e kubelet/cm: don't set Devices
Since runc 1.0.0 it is now sufficient to have SkipDevices: true.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2021-06-30 16:17:35 -07:00
Sascha Grunert
b167fc24d7 Update pause image to v3.5
Update dependencies and the test images to use pause 3.5. We also
provide a changelog entry for the new container image version.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2021-05-25 09:04:46 +02:00
Kubernetes Prow Robot
63014d87cd Merge pull request #101013 from pacoxu/mac-ut/skips
skip some UT on mac for dockershim
2021-05-24 20:10:20 -07:00
Kubernetes Prow Robot
6850e0abf2 Merge pull request #100218 from aojea/unitflakes1
unit test using metrics must reset the global registry
2021-04-29 23:01:57 -07:00
pacoxu
fd7bb771f9 skip linux ut on mac in pkg/kubelet/dockershim
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-04-23 15:43:41 +08:00
Kubernetes Prow Robot
62876fb406 Merge pull request #101085 from lojies/fixbrokenlinkindockersandbox
fix a broken link in docker_sandbox.go
2021-04-22 13:19:06 -07:00
卢振兴10069964
feab44c273 fix a broken link in docker_sandbox.go 2021-04-14 09:01:37 +08:00
pacoxu
49e7700cef exec test should not run in Parallel as feature gate is not locked
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-04-13 14:15:43 +08:00
Kubernetes Prow Robot
3eac797255 Merge pull request #100200 from jackfrancis/ctx-respect-ExecProbeTimeout
respect ExecProbeTimeout=false for dockershim
2021-04-10 22:55:59 -07:00
Kubernetes Prow Robot
86fdf7b56e Merge pull request #99487 from chymy/fix-staticcheck0226
Fix staticcheck failures for pkg/controller/replicaset and pkg/kubelet/dockershim
2021-04-08 14:28:17 -07:00
Jack Francis
5a43067915 respect ExecProbeTimeout 2021-04-07 12:38:19 -07:00
Antonio Ojea
3a1f656491 reset metrics on dockerhim unit tests 2021-03-13 21:17:56 +01:00
chymy
c28be0baab Fix staticcheck failures for pkg/controller/replicaset and pkg/kubelet/dockershim 2021-03-11 22:16:05 -05:00
zhongjun.li
cbc0d55912 logcheck: check Windows files 2021-03-11 17:40:07 +08:00
Kubernetes Prow Robot
a10a694f56 Merge pull request #99875 from bobbypage/bump-cadvisor
vendor: cAdvisor v0.39.0
2021-03-09 11:05:58 -08:00
Artyom Lukianov
0370768650 Pass cpuset.mems to the dockershim during container creation
Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
2021-03-09 14:29:12 +02:00
David Porter
904cb67267 Fixes after runc libcontainer and docker update
- libcontainer renamed
  `github.com/opencontainers/runc/libcontainer/configs` to
  `github.com/opencontainers/runc/libcontainer/devices` so use the new
  references

- Update `dockershim` `ContainerCreate` call after docker update to
  v20.10.2
2021-03-08 22:10:29 -08:00
Kubernetes Prow Robot
40d8aed6f3 Merge pull request #99585 from Iceber/fix-finished-at
dockershim: fix started and finished timestamp of the container status
2021-03-08 20:47:28 -08:00
Kubernetes Prow Robot
a6a66c3594 Merge pull request #98939 from yangjunmyfm192085/run-test16
Structured Logging migration: modify dockershim and network part logs of kubelet.
2021-03-03 03:31:33 -08:00
Iceber Gu
aff9df2cf6 dockershim: fix started and finished timestamp of the container status
Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
2021-03-01 22:33:56 +08:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
chymy
e2f17aeb2a Remove unused func in kubernetes/pkg/kubelet/dockershim
Signed-off-by: chymy <chang.min1@zte.com.cn>
2021-02-23 06:36:22 -05:00
Dan Winship
95c6a488d8 Make kube-proxy check if IPv6 is really supported before assuming dual-stack 2021-02-17 09:11:15 -05:00
JunYang
7735cf7f26 Structured Logging migration: modify dockershim and network part logs of kubelet.
Signed-off-by: JunYang <yang.jun22@zte.com.cn>
2021-02-14 16:01:47 +08:00
Khaled (Kal) Henidak
32b9e31c23 ammend tests to ensure feat gate is off when expected (beta: gate is always on) 2021-02-10 23:58:55 +00:00
Kubernetes Prow Robot
b9b11d3100 Merge pull request #98510 from jsturtevant/windows-metrics-access-denied
Ignore transient errors when gathering stats for Windows Containers in Dockershim
2021-02-09 10:25:30 -08:00
Kubernetes Prow Robot
2b7c61b1bb Merge pull request #98205 from pacoxu/build/pauses
update pause image to 3.4.1 and also update the change log
2021-02-08 18:20:58 -08:00
pacoxu
8946f26769 update pause to 3.4.1 for kubelet/kubeadm
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-02-05 21:33:01 +08:00
Antonio Ojea
ad4776ba54 dockershim hostport respect IPFamily 2021-02-05 08:51:33 +01:00
Antonio Ojea
f7d86e8b1c dockershim hostport manager use HostIP
the hostport manager was not taking into consideration the hostIP
when binding the socket of the hostPort, causing that the same
HostPort can not be used with different IP addresses.
2021-02-05 08:51:33 +01:00
James Sturtevant
3da0d99d52 Ignore transient errors when gather stats 2021-02-02 13:56:51 -08:00
Kubernetes Prow Robot
ee2b7a5049 Merge pull request #98049 from pacoxu/enhancements/redir-links
fix all keps links 404 for kep folder migration
2021-02-01 21:48:28 -08:00
pacoxu
a10bdfed09 fix all keps links 404 for kep folder migration
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-02-01 19:41:59 +08:00
Kubernetes Prow Robot
6fae18523d Merge pull request #98019 from cynepco3hahue/specify_resource_during_container_creation_cpu_manager
cpu manager: specify the container CPU set during the creation
2021-01-25 14:15:12 -08:00
Kubernetes Prow Robot
236470431f Merge pull request #97141 from wawa0210/remove-hyperv
remove experimental windows container hyper-v support with Docker
2021-01-20 15:33:12 -08:00
Artyom Lukianov
38dc7509f8 cpu manager: specify the container CPU set during the creation
We can set the container cpuset.cpus diring the creation and it
will not need to call to update resources after the container creation.

Additional side effect of the change, that the runc process that responsible
to create the container will run with the same CPU affinity because the
runc runs on the cpuset provided in the config.json arg.

It will allow to prevent undesirable interupts on isolated CPUs.

Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
2021-01-20 17:53:33 +02:00
Kubernetes Prow Robot
cff7d7ba0a Merge pull request #97764 from pacoxu/fix/windows-cgroup
kubeadm should ignore cgroup driver check on Windows node
2021-01-19 22:18:11 -08:00
wawa0210
ea9df6361b remove windows container hyper-v support 2021-01-14 22:49:34 +08:00
pacoxu
71d70f7a83 ignore cgroup driver check in windows node upgrade
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-01-13 10:01:35 +08:00
Jay Li
4ea18b6e1e fix privileged config of Pod Sandbox 2020-11-26 12:30:55 +08:00
Andrew Sy Kim
a59189e213 kubelet: dockershim should return grpc status with DeadlineExceeded code
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-16 22:51:59 -05:00
Kubernetes Prow Robot
fe37798329 Merge pull request #94115 from andrewsykim/fix-dockershim-exec
kubelet: respect exec probe timeouts
2020-11-09 16:08:55 -08:00
Tim Allclair
a439bc5572 Remove --redirect-container-streaming functionality (#95935)
* Remove --redirect-container-streaming functionality

* Update bazel
2020-11-09 11:50:11 -08:00
Andrew Sy Kim
4bb30c3b0e kubelet: add feature gate check for exec probe timeouts
This change also involves adding a custom error type for probe timeouts
so that the kubelet exec prober can distinguish between failed probes
that have exited or probes that have timed out.

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-09 13:05:09 -05:00
Andrew Sy Kim
8ef299552b kubelet: allow dockershim exec timeouts to be longer than 10s
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-09 13:03:28 -05:00
Andrew Sy Kim
1dc5fb0190 kubelet: respect dockershim exec timeout
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-11-09 13:03:28 -05:00
Kubernetes Prow Robot
eaa7b48c96 Merge pull request #95534 from oomichi/add-unit-tests-to-Exec
Add unit tests for dockershim/exec.go
2020-11-02 15:20:15 -08:00
Khaled Henidak (Kal)
6675eba3ef dual stack services (#91824)
* api: structure change

* api: defaulting, conversion, and validation

* [FIX] validation: auto remove second ip/family when service changes to SingleStack

* [FIX] api: defaulting, conversion, and validation

* api-server: clusterIPs alloc, printers, storage and strategy

* [FIX] clusterIPs default on read

* alloc: auto remove second ip/family when service changes to SingleStack

* api-server: repair loop handling for clusterIPs

* api-server: force kubernetes default service into single stack

* api-server: tie dualstack feature flag with endpoint feature flag

* controller-manager: feature flag, endpoint, and endpointSlice controllers handling multi family service

* [FIX] controller-manager: feature flag, endpoint, and endpointSlicecontrollers handling multi family service

* kube-proxy: feature-flag, utils, proxier, and meta proxier

* [FIX] kubeproxy: call both proxier at the same time

* kubenet: remove forced pod IP sorting

* kubectl: modify describe to include ClusterIPs, IPFamilies, and IPFamilyPolicy

* e2e: fix tests that depends on IPFamily field AND add dual stack tests

* e2e: fix expected error message for ClusterIP immutability

* add integration tests for dualstack

the third phase of dual stack is a very complex change in the API,
basically it introduces Dual Stack services. Main changes are:

- It pluralizes the Service IPFamily field to IPFamilies,
and removes the singular field.
- It introduces a new field IPFamilyPolicyType that can take
3 values to express the "dual-stack(mad)ness" of the cluster:
SingleStack, PreferDualStack and RequireDualStack
- It pluralizes ClusterIP to ClusterIPs.

The goal is to add coverage to the services API operations,
taking into account the 6 different modes a cluster can have:

- single stack: IP4 or IPv6 (as of today)
- dual stack: IPv4 only, IPv6 only, IPv4 - IPv6, IPv6 - IPv4

* [FIX] add integration tests for dualstack

* generated data

* generated files

Co-authored-by: Antonio Ojea <aojea@redhat.com>
2020-10-26 13:15:59 -07:00
Kenichi Omichi
11b1307b25 Add unit tests for dockershim/exec.go
When trying to fix a dockershim issue, there were not any unit tests
for dockershim/exec.go and it was difficult to add the corresponding
unit test for the bug.
This adds the unit tests for avoiding such situation in the future.
2020-10-14 02:04:43 +00:00
Kubernetes Prow Robot
0969e666dc Merge pull request #93066 from AnishShah/network-plugin-metrics
kubelet: add operations count and error count metrics to network plugin manager
2020-10-05 15:16:19 -07:00