Giuseppe Scrivano
0d2a493a8f
kubelet: skip setting the devices cgroup
...
use the new libcontainer feature of skipping setting the devices
cgroup. This is necessary on cgroup v2 to avoid leaking a eBPF
program every time the cgroup is re-configured.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com >
2020-07-09 09:37:46 +02:00
Kubernetes Prow Robot
1e3eeba9fa
Merge pull request #91577 from knabben/kubelet-bootstrap
...
kubelet: remove the --bootstrap-checkpoint-path feature
2020-07-09 00:03:41 -07:00
Kubernetes Prow Robot
4ee555252c
Merge pull request #83710 from edwardstudy/ed/typo
...
Fix comment typos in pkg/kubelet/prober
2020-07-09 00:02:58 -07:00
Paulo Gomes
b451563560
Add seccomp least privilege for kuberuntime
2020-07-08 22:03:29 +01:00
Ted Yu
a76a959294
Respect grace period when removing mirror pod
...
Signed-off-by: Ted Yu <yuzhihong@gmail.com >
2020-07-08 13:38:24 -07:00
Joel Smith
f34b586d01
Include pod /etc/hosts in ephemeral storage calculation for eviction
2020-07-08 12:58:11 -06:00
Anthony ARNAUD
056d73b1a1
Add deviceManager in windows container manager
2020-07-08 18:22:16 +02:00
Kubernetes Prow Robot
5afc42de95
Merge pull request #78373 from tedyu/sort-init-container
...
Sort init container statuses using non-nested loop
2020-07-07 09:13:58 -07:00
Quan Tian
b2b082f54f
Don't create a new sandbox for pod with RestartPolicyOnFailure if all containers succeeded
...
The kubelet would attempt to create a new sandbox for a pod whose
RestartPolicy is OnFailure even after all container succeeded. It caused
unnecessary CRI and CNI calls, confusing logs and conflicts between the
routine that creates the new sandbox and the routine that kills the Pod.
This patch checks the containers to start and stops creating sandbox if
no container is supposed to start.
2020-07-07 22:49:48 +08:00
Kubernetes Prow Robot
7e75a5ef43
Merge pull request #87273 from SaranBalaji90/kubelet-log-file
...
Add support for disabling /logs endpoint in kubelet
2020-07-07 04:09:58 -07:00
Kevin Klues
26cb650655
Remove unnecessary union after call to GetPreferredAllocation()
...
There is no need to try and allocate already-allocated devices again.
2020-07-07 06:35:57 +00:00
Kevin Klues
67ecc11c44
Harden callGetPreferredAllocationIfAvailable() return value
...
Previously, we didn't check the contents of the result after calling out
to the plugin endpoint. This could have resulted in errors if the plugin
returned either 'nil' or an empty result. This patch fixes this.
2020-07-07 06:35:57 +00:00
Kevin Klues
d87365494a
Fix bug in call to callGetPreferredAllocationIfAvailable()
...
Previously, we were passing the variable 'devices' to this function,
when we should have been passing 'allocated'. This bug crept in due to a
variable name change that didn't propogate its way through the entire
function. The tests added in the previous commit would have caught this.
2020-07-07 06:35:57 +00:00
Kevin Klues
d551ab1e78
Add tests to check paramaters passed to GetPreferredAllocation()
...
These tests uncovered some small bugs that will be fixed in a subsequent
set of commits.
2020-07-07 06:35:57 +00:00
Fei Xu
34826c82be
Return err when create ContainerLogsDir failed
2020-07-07 09:36:35 +08:00
Sergey Kanzhelev
933a2ca634
SIG node owner files clean up
2020-07-07 00:22:05 +00:00
Kubernetes Prow Robot
a26e5881d8
Merge pull request #92786 from answer1991/feature/enhance-bootstrap-certificate
...
make Kubelet bootstrap certificate signal aware
2020-07-06 09:52:52 -07:00
Sri Saran Balaji Vellore Rajakumar
05240c9218
Add support for disabling /logs endpoint in kubelet
2020-07-06 07:52:30 -07:00
chenjun.cj
db71941775
make Kubelet bootstrap certificate signal aware
2020-07-06 22:30:27 +08:00
Paulo Gomes
8976e3620f
Add seccomp enforcement and validation based on new GA fields
...
Adds seccomp validation.
This ensures that field and annotation values must match when present.
Co-authored-by: Sascha Grunert <sgrunert@suse.com >
2020-07-06 09:13:25 +01:00
Kubernetes Prow Robot
efb56da4a5
Merge pull request #92665 from klueska/upstream-add-get-preferred-allocation-api
...
Add GetPreferredAllocation() call to the v1beta1 device plugin API
2020-07-03 20:31:16 -07:00
Kevin Klues
5bd0db0b1f
Add new test cases for GetPreferredAllocation() in allocation path
2020-07-03 13:01:32 +00:00
Kevin Klues
83f18d9975
Remove unnecessary field from TestTopologyAlignedAllocation() test cases
2020-07-03 13:01:32 +00:00
Kevin Klues
bb08fd1135
Add a simple endpoint test for GetPreferredAllocation()
...
More extensive tests that exercise the allocation logic are to follow.
2020-07-03 13:01:32 +00:00
Kevin Klues
cbd405d85c
Update existing tests in support of GetPreferredallocation()
2020-07-03 13:01:32 +00:00
Kevin Klues
a780ccff5b
Updates logic in devicesToAllocate() to call GetPreferredAllocation()
2020-07-02 22:07:27 +00:00
Kevin Klues
bb56a09133
Add callGetPreferredAllocationIfAvailable() function in devicemanager
...
This function mimics what is already done for the conditional call to
PreStartContainer() via the callPreStartContainerIfNeeded() function.
2020-07-02 22:07:27 +00:00
Kevin Klues
abf87c99c6
Add GetPreferredAllocation() as a supported device plugin endpoint
2020-07-02 15:15:50 +00:00
Kevin Klues
32c047a52e
Update device plugin stub with new GetPreferredAllocation() call
2020-07-02 15:15:48 +00:00
Kevin Klues
c45f1317eb
Fix some whitespacing and comments in devicemanager
2020-07-02 15:15:44 +00:00
Kubernetes Prow Robot
13a4a71e99
Merge pull request #91532 from afrouzMashaykhi/log-flag-kubelet
...
add --logging-format flag to kubelet
2020-07-02 06:40:46 -07:00
Kubernetes Prow Robot
ce5c89a144
Merge pull request #91896 from aojea/bumpcni
...
bump cni library version to v0.8.0
2020-07-01 23:12:16 -07:00
amash
b92b04e7cd
add default for loggingconfiguration struct
2020-07-01 22:28:27 +04:30
Antonio Ojea
6f79600e73
bump cni library version to v0.8.0
...
last CNI library release is 0.7.1 from Jun 11, 2019.
Since then, there was introduced new feature and bugfixes.
Currently, this library is only being used by dockershim,
the other CRI plugins are vendoring it directly
However, this will help also to mitigate some of the issues with the
CI jobs that are still using dockershim.
Signed-off-by: Antonio Ojea <antonio.ojea.garcia@gmail.com >
2020-07-01 18:09:19 +02:00
amash
3ab25f1876
add LoggingConfiguration struct to component-base/config
2020-07-01 20:07:01 +04:30
amash
ac8d2e8978
add loggingConfig struct to kubelet config
2020-07-01 20:07:01 +04:30
amash
ba8189a4f2
add --logging-format flag to kubelet
2020-07-01 20:07:01 +04:30
Kubernetes Prow Robot
2e91b56af0
Merge pull request #87909 from alena1108/feb6cleanup
...
Removed unnecessary not nil check in node registration process
2020-07-01 07:10:49 -07:00
Kubernetes Prow Robot
dcdeed97cd
Merge pull request #91499 from lo24/intf-fix
...
fix a regression that TestValidateNodeIPParam never actually works
2020-06-30 02:52:05 -07:00
Kubernetes Prow Robot
850080c41f
Merge pull request #91867 from yan-dblinf/fix_golint_failures_pkg_kubelet_lifecycle
...
Fix golint failures in pkg/kubelet/lifecycle
2020-06-30 00:02:42 -07:00
Kubernetes Prow Robot
677dfbab3c
Merge pull request #91360 from liuxu623/fix-emptyDir-sizeLimit
...
Fix if don't set ephemeral-storage limit emptyDir's sizeLimit doesn't work
2020-06-29 18:33:58 -07:00
Kubernetes Prow Robot
a03db636da
Merge pull request #91366 from giuseppe/cgroupfs-cgroupv2
...
vendor: update google/cadvisor and opencontainers/runc
2020-06-26 04:17:31 -07:00
Kubernetes Prow Robot
14c69640d0
Merge pull request #87166 from jingxu97/Jan/mountcheckfix
...
Fix issue in kubelet getMountedVolumePathListFromDisk
2020-06-25 09:45:39 -07:00
Kubernetes Prow Robot
4a91ecb976
Merge pull request #91863 from knabben/kubelet-memcg-notification
...
Moving Kubelet kernel-memgc-notification to configuration file
2020-06-25 00:20:37 -07:00
Kubernetes Prow Robot
9a3276548b
Merge pull request #91956 from kinvolk/rata/fix-kubelet-log-on-kill
...
kubelet: Fix log typo when killing a container
2020-06-24 13:30:38 -07:00
Kubernetes Prow Robot
b0e974e1aa
Merge pull request #92239 from matthyx/more-tests
...
Add tests covering startup probe without readiness
2020-06-24 10:32:13 -07:00
Giuseppe Scrivano
5d6dc8d19c
cadvisor: add Disk metrics with LocalStorageCapacityIsolation
...
needed for cadvisor commit e3affc1b79faa2901d7210948e92a5416166eb28
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com >
2020-06-24 18:39:52 +02:00
Giuseppe Scrivano
e94aebf4cb
pkg/kubelet: adapt to new libcontainer API
...
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com >
2020-06-24 18:39:51 +02:00
Kubernetes Prow Robot
14d9b5d758
Merge pull request #92325 from brianpursley/sync-pod-log
...
Add pod and container name in log message when container fails to start
2020-06-24 04:55:18 -07:00
Amim Knabben
c39cf28ed3
Moving Kubelet kernel-memgc-notification to configuration file
2020-06-24 06:44:00 -04:00