Antoni Zawodny
15e491eb2f
Update kube-addon-manager to v9.1.1
2020-05-20 09:50:20 +02:00
Yuwen Ma
1aa67fc525
Switch core master base images from debian to distroless
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-09 06:55:00 -04:00
Walter Fender
339918d206
Add admin account on master for kube-up
...
Creates a master local admin account.
If you are on the master you can now run kubectl.
For issue 87481.
2020-05-06 17:19:58 -07:00
Vinayak Goyal
7a5f4c47de
Run kube-scheduler and kube-addon-manager as non root
2020-04-16 14:50:04 -07:00
Kubernetes Prow Robot
c0be582ca5
Merge pull request #89269 from Jefftree/network-proxy-beta
...
Use v1beta1 for egress selector config
2020-04-09 18:07:49 -07:00
Kubernetes Prow Robot
c7abf44a19
Merge pull request #88856 from yaseenhamdulay/patch-1
...
Create etcd user in cloud-init master.yaml rather than in configure-h…
2020-03-27 20:41:53 -07:00
Antonio Ojea
33810a99d9
cluster: ipvs conntrack module vs kernel version
...
We should use 'nf_conntrack' instead of 'nf_conntrack_ipv4'
for linux kernel >= 4.19
2020-03-21 11:23:28 +01:00
Jefftree
936f7665cf
network proxy alpha -> beta
2020-03-19 11:49:47 -07:00
yaseenhamdulay
5de3c64ad0
Create etcd user in cloud-init master.yaml rather than in configure-helper.sh
...
An etcd unix user is currently created in configure-helper.sh if it does not exist
on the master.
cloud-init is the only supported mechanism to add users on COS VMs. If an attempt
is made to add a key using OS Login or the instance metadata mechanism the
google_accounts_daemon will race with useradd and potentially attempt to use
the same UID. This will lock out any attempt to SSH into the VM. We therefore
migrate to using cloud-init to create this user and prevent this issue from occurring.
2020-03-19 11:05:42 +00:00
Jefftree
6fd748e2c5
exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly
2020-03-05 16:59:55 -08:00
Jefftree
06abedb063
Allow both GRPC and http-connect mode to be toggled
2020-03-05 16:16:59 -08:00
Jefftree
2a98cb7f8b
Use GRPC mode for network proxy
2020-03-02 15:54:52 -08:00
Jefftree
0989770135
Update network proxy to v0.0.7
2020-03-02 10:09:00 -08:00
Jefftree
4c54241c3d
Support token authentication for network proxy
2020-03-01 17:24:48 -08:00
Kubernetes Prow Robot
831dae75bf
Merge pull request #88185 from vinayakankugoyal/appendandreplace
...
append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.…
2020-02-26 13:33:19 -08:00
Vinayak Goyal
388ebfe7d0
append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.sh fails for prefixes that contain quotes and = sign.
2020-02-24 17:35:36 -08:00
Jefftree
725d2b6a8f
Network Proxy: GRPC + HTTP Connect with UDS
2020-02-20 10:19:37 -08:00
Davanum Srinivas
8f764b113e
Support for adding test-handler for containerd
2020-02-10 20:43:40 -05:00
Davanum Srinivas
c4ef6a94b3
Add gid to config.toml only when docker group is present
...
If we don't install docker and install just containerd apt packages,
there is no docker group. In this scenario, we should not add the gid to
config.toml
2020-02-08 17:53:37 -05:00
Davanum Srinivas
2c93aa6ec3
Ensure kubectl is available in PATH by explicitly exporting the script
2020-02-07 09:05:07 -05:00
Davanum Srinivas
f20e17e9dd
python snippets should work on both old and new python versions
2020-02-05 11:22:56 -05:00
Walter Fender
1dd53fd3ba
Fix issue with GCE scripts assuming Python2.
...
For bug #87482 .
Newer OSs are now defaulting to Python3.
This breaks the kube-up scripts for GCE.
Adding code to detect this and explicitly use Python2.
2020-01-23 15:05:04 -08:00
Kubernetes Prow Robot
127c47caf4
Merge pull request #85512 from serathius/remove-cluster-monitoring
...
Remove cluster-monitoring
2019-12-17 21:05:57 -08:00
Kubernetes Prow Robot
4a62b3ac6d
Merge pull request #86329 from mml/core_pattern
...
Set core_pattern to an absolute path.
2019-12-17 19:48:11 -08:00
Matt Liggett
ec24d3c7e8
Set core_pattern to an absolute path.
...
Change-Id: I71e848783c05dc75b2232e05dd2ed3aa9a983e23
2019-12-11 15:05:48 -08:00
Marek Siarkowicz
31fb04fa98
Remove cluster-monitoring
...
Heapster is deprecated and no longer supported
2019-12-09 11:25:20 +01:00
Kubernetes Prow Robot
c213196f0a
Merge pull request #85014 from dekkagaijin/master
...
let standalone npd use kubelet credentials
2019-11-14 17:50:30 -08:00
Xing Yang
3324722e07
VolumeSnapshot CRD v1beta1: Enable VolumeSnapshotDataSource feature gate and update e2e tests
2019-11-11 02:34:24 +00:00
Jake Sanders
42a06f58c6
let standalone npd use kubelet credentials
...
Signed-off-by: Jake Sanders <jsand@google.com>
2019-11-08 14:50:41 -08:00
Kubernetes Prow Robot
a8e819746d
Merge pull request #83442 from serathius/remove-prometheus-addon
...
Remove prometheus addon
2019-10-29 01:34:43 -07:00
Kubernetes Prow Robot
13de6868fe
Merge pull request #81075 from mborsz/mtls
...
Add mtls support to add/remove-replica
2019-10-22 23:18:13 -07:00
Maciej Borsz
7ee8a02eee
Add mtls support to add/remove-replica
2019-10-22 14:59:16 +02:00
Kubernetes Prow Robot
99d40d3d44
Merge pull request #80137 from ialidzhikov/enh/better-naming
...
Rename dashboard-controller.yaml to dashboard-deployment.yaml
2019-10-16 05:51:41 -07:00
ialidzhikov
b3dcbbf98c
Rename dashboard-controller.yaml to dashboard-deployment.yaml
...
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-10-15 13:55:06 +03:00
immutablet
b6b55519ca
Isolate the logic related to the configuration of kube-apiserver into a separate script.
2019-10-11 11:34:09 -07:00
Kubernetes Prow Robot
00096d8fed
Merge pull request #83366 from mwwolters/admission-control-flag
...
Switch from admission-control flag to enable-admission-plugins
2019-10-05 04:35:11 -07:00
Kubernetes Prow Robot
52a3cb06ef
Merge pull request #82845 from prameshj/custom-nodelocal
...
Update nodelocaldns yaml to use image with custom Stubdomains support
2019-10-04 16:31:13 -07:00
Marek Siarkowicz
887e84e330
Remove Prometheus addon and it's tests
...
Prometheus addon was developed for exterimental and test purpose only.
As readme states it should not be used by anyone.
2019-10-03 14:15:58 +02:00
Maciej Borsz
2d9a9f7713
Revert "Revert "Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers."""
2019-10-02 09:22:02 +02:00
Mark Wolters
f7bf17bc2f
Switch from admission-control flag to enable-admission-plugins
2019-10-01 09:21:33 -07:00
Kubernetes Prow Robot
6610260cc4
Merge pull request #78466 from yuwenma/revert-77904-revert-76396-reapply-75624
...
Revert "Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers.""
2019-10-01 01:21:33 -07:00
Zheng Chen
3972e5c3e7
using STACKDRIVER_ENDPOINT to set exporter sd endpoint according to cluster env
2019-09-26 14:00:59 -04:00
Kubernetes Prow Robot
5cdf18e348
Merge pull request #82624 from qingling128/master
...
Upgrade stackdriver-logging-agent image to 1.6.17 to fix CVEs.
2019-09-18 17:30:59 -07:00
Pavithra Ramesh
7a7f856e22
Support running custom nodelocaldns yaml in gce.
2019-09-12 12:53:53 -07:00
Ling Huang
dc9db4b413
Upgrade stackdriver-logging-agent image to 1.6.17 to fix CVEs.
...
Change-Id: Ic37a8d3663d616e7d196353efd9a0164da724728
2019-09-12 04:02:08 -04:00
Kubernetes Prow Robot
0dbb93125f
Merge pull request #82579 from mm4tt/etcd_expose_metrics
...
Expose etcd metric port in tests
2019-09-11 22:53:35 -07:00
Matt Matejczyk
fbbb4ebeca
Expose etcd metric port in tests
...
This is to allow scraping etcd metrics in scalabiblity tests.
This was already done in
https://github.com/kubernetes/kubernetes/pull/77657 , but then the logic
got changed when introducing mtls in
https://github.com/kubernetes/kubernetes/pull/77561 and the new etcd
metric port 2382 is currently only exposed on localhost.
Ref. https://github.com/kubernetes/perf-tests/issues/786
2019-09-11 13:57:00 +02:00
Kubernetes Prow Robot
f48659e9fd
Merge pull request #81681 from zhenglol/sd_test_endpoint
...
override stackdriver endpoint in event-exporter in test cluster
2019-09-10 14:32:00 -07:00
Zhen Wang
d874dbfcb1
Bump NPD version to v0.7 for GCI
2019-08-27 22:26:30 -07:00
Kubernetes Prow Robot
d52b212189
Merge pull request #79908 from wenjiaswe/remove-aggregator-ca-key
...
Remove unused aggregator ca key
2019-08-23 13:31:18 -07:00