github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
110,078 Commits 1 Branch 31 Tags 1,019 MiB
22cb7ac766
Commit Graph

10107 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
dd95f3ab5a
Merge pull request #100980 from ibabou/update-containerd-path 
Update the containerd runtime binary path - gce
 2021-04-11 06:21:59 -07:00
Kubernetes Prow Robot
99301e672b
Merge pull request #100436 from vinayakankugoyal/apiservernonroot 
Fix kube-apiserver manifest.
 2021-04-10 20:29:35 -07:00
Antonio Ojea
93f4727aab gce configure containerd default_runtime_name 
move config to v2
 2021-04-11 00:48:22 +02:00
“Ibrahim
ec38cfcd15 Update the containerd runtime binary path - gce 2021-04-09 23:36:58 +00:00
jindijamie
7e7a6284be update debian-base to buster-v1.5.0 for CVEs 2021-04-09 19:27:10 +00:00
Kubernetes Prow Robot
5b038e6cff
Merge pull request #100635 from cindy52/etcd/rootless 
Run the etcd as non-root
 2021-04-09 05:19:37 -07:00
Sascha Grunert
33e0e035ea
Update cri-tools to v1.21.0 
This updates crictl to the latest available release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-04-09 11:05:13 +02:00
Kubernetes Prow Robot
16082557cd
Merge pull request #100353 from zshihang/master 
strip prefix 'v' in coredns version if exists
 2021-04-08 20:29:55 -07:00
Kubernetes Prow Robot
96db2323a4
Merge pull request #100041 from vteratipally/update_npd_version 
bump npd version to latest v0.8.7
 2021-04-08 17:10:55 -07:00
Kubernetes Prow Robot
d8f3794b83
Merge pull request #68004 from saravanan30erd/fluentd-es 
isolate logging resources in separate namespace
 2021-04-08 14:26:31 -07:00
Cindy Guo
9f058079d2 run etcd as nonroot 
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com>
 2021-04-08 20:51:45 +00:00
Kubernetes Prow Robot
efad544195
Merge pull request #100257 from swetharepakula/glbc-rbac-services 
Add `service/status` glbc rbac permissions
 2021-04-07 07:53:53 -07:00
Ben Hu
a2d094797d Use GKE specific configuration in startup scripts in GKE deployment. 2021-04-02 00:10:53 +00:00
Vinayak Goyal
4b3271a542 Fix kube-apiserver manifest. 2021-03-21 16:24:56 -07:00
“Ibrahim
bc3f6c1be9 Fix the containerd service check 2021-03-19 23:35:05 +00:00
saravanan palanisamy
b9696ae455 remove namespace for clusterRoleBinding object - fluentd-es addon 2021-03-19 12:08:14 +04:00
Shihang Zhang
d313e69c9d strip prefix 'v' in coredns version if exists 2021-03-18 10:38:06 -07:00
Maciej Szulik
a3a26171d1
Run GCE unit tests as non-root 2021-03-18 12:14:24 +01:00
Kubernetes Prow Robot
158e1464ec
Merge pull request #99971 from ibabou/update-containerd 
Update containerd config for gce
 2021-03-16 15:56:56 -07:00
Kubernetes Prow Robot
0649dfbb52
Merge pull request #99990 from aojea/unboundv 
fix cluster util.sh unbound variable
 2021-03-16 07:24:35 -07:00
saravanan palanisamy
f0a95b80b3 update version for addon fluentd ES 2021-03-16 09:39:14 +04:00
Swetha Repakula
6e95ac1ce9 Add service/status glbc rbac permissions 2021-03-15 13:01:06 -07:00
saravanan palanisamy
f8f2dd76ca isolate logging resources in separate namespace 2021-03-13 13:42:32 +04:00
Wilson E. Husin
998edc84c7 Use Distroless base instead of static 2021-03-12 21:37:36 -08:00
Wilson E. Husin
aeef7e2f15 Add default value to KUBE_BASE_IMAGE_REGISTRY 2021-03-12 14:59:18 -08:00
Wilson E. Husin
b1c049efd8 Use configurable BASEIMAGE and RUNNERIMAGE 
Following example on /cluster/images/etcd/Makefile
 2021-03-12 13:20:35 -08:00
Kubernetes Prow Robot
23d4b3b4f0
Merge pull request #99965 from swetharepakula/glbc-rbac 
Add GLBC roles for IngressClass & GCPIngressParams
 2021-03-11 03:02:25 -08:00
Swetha Repakula
a8c5110f65 Add GLBC roles for IngressClass & GCPIngressParams 2021-03-10 16:36:54 -08:00
Stephen Augustus
13ef775df2 [go1.16] Update to go1.16.1 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-10 19:06:57 -05:00
Kubernetes Prow Robot
a5b5a685ec
Merge pull request #95655 from vteratipally/docker_daemon_json 
Moving docker options to daemon.json
 2021-03-10 15:00:23 -08:00
varsha teratipally
90983f66e4 Moving docker options to daemon.json 
As per the new docker guidelines about customizing the options
like adding registry-mirrors, moving the options to daemon.json
 2021-03-10 19:14:48 +00:00
Varsha Teratipally
82434ec818 bump npd version to latest v0.8.7 2021-03-09 22:48:27 +00:00
Wilson E. Husin
00d2a17b2a Use kubeconformance binary, deprecate gorunner and run_e2e 
Actual name change will take place later as it involves changes to test-infra and other repositories
 2021-03-09 13:41:36 -08:00
Jeremy Edwards
60df5606d6 Add Windows Defender exclusion for unpigz.exe 2021-03-09 19:52:25 +00:00
Antonio Ojea
6787d464ca fix cluster util.sh unbound variable 2021-03-09 09:18:23 +01:00
“Ibrahim
875396744f Update containerd config for gce 2021-03-09 01:13:44 +00:00
Wilson E. Husin
be3719a357 Use distroless/base:latest for Conformance image 
Going with the guess that nonroot is the problem of creating
/tmp/results/e2e.log in container

Removing manual creation of /tmp/results as well
 2021-03-08 16:18:10 -08:00
Wilson E. Husin
6d52c00084 Add binaries to PATH, use ENTRYPOINT 
Signed-off-by: Wilson E. Husin <wilsonehusin@gmail.com>
 2021-03-08 14:51:09 -08:00
Wilson Husin
3d281e952c Add /tmp/results directory with nonroot ownership 
Signed-off-by: Wilson Husin <whusin@vmware.com>
 2021-03-08 14:51:09 -08:00
Wilson Husin
4fafd1afef Use distroless to build Conformance image 
In order to avoid noisy / false positive CVE image scanning, Conformance
image is now be built based on Distroless.

Signed-off-by: Wilson Husin <whusin@vmware.com>
 2021-03-08 14:51:08 -08:00
Kubernetes Prow Robot
2d3acce39b
Merge pull request #99752 from pacoxu/coredns/promote 
update cluster/dns/coredns to 1.8.0 as kubeadm
 2021-03-08 12:07:28 -08:00
Benjamin Elder
03576473ce don't search bazel output paths for binaries 2021-03-07 12:47:00 -08:00
Kubernetes Prow Robot
1485c6b76f
Merge pull request #99822 from dekkagaijin/addon 
Update kube-addon-manager to v9.1.4
 2021-03-06 12:50:37 -08:00
Kubernetes Prow Robot
b33b426dd0
Merge pull request #99742 from ibabou/containerd-register 
Update gce Containerd initialization to handle the runtime existence case
 2021-03-06 12:50:05 -08:00
Jake Sanders
fb40ab2cde Update kube-addon-manager to v9.1.4 2021-03-04 22:39:46 -08:00
Kubernetes Prow Robot
96be00df69
Merge pull request #99749 from pacoxu/nodecache-1.17.0 
update node local dns to 1.17.0 for IPv6 support/hosts/trace plugins
 2021-03-04 20:32:43 -08:00
pacoxu
2185bb40d5 update clustere/dns/coredns to 1.8.0 as kubeadm 2021-03-05 09:38:15 +08:00
Kubernetes Prow Robot
379773630f
Merge pull request #97037 from neiljerram/calico-ip-autodetect 
Calico: set IP=autodetect so preempted nodes learn new IP
 2021-03-04 17:32:21 -08:00
Kubernetes Prow Robot
a2157b36b7
Merge pull request #98806 from rikatz/remove-extension-prune 
Remove extensions v1beta1 from addon manager and kubectl prune
 2021-03-04 14:40:47 -08:00
Kubernetes Prow Robot
7c4a9823f5
Merge pull request #99793 from pjh/log-message-fix 
Repair quotes for some Windows log messages
 2021-03-04 13:39:40 -08:00
Kubernetes Prow Robot
a7147bb113
Merge pull request #98968 from liggitt/kam-lease 
Switch add-on manager to use lease for leader election
 2021-03-04 13:38:39 -08:00
Kubernetes Prow Robot
9d353ef277
Merge pull request #99691 from amwat/metadata-project 
[cluster/gce] Target the correct project while adding kubeconfig metadata to the master
 2021-03-04 00:29:31 -08:00
“Ibrahim
e58a0905de Update gce Containerd initialization to handle runtime existence case 2021-03-04 03:46:30 +00:00
pacoxu
a38ed2c5ce update node local dns to 1.17.0 for debian base chagne 2021-03-04 10:49:55 +08:00
Peter Hornyack
bacf7394cd Repair quotes for some Windows log messages 2021-03-03 12:40:53 -08:00
Amit Watve
d65a46c9c9 Target the correct project while adding master kubeconfig metadata. 2021-03-03 00:47:43 -08:00
Peter Hornyack
3d2e9600d9 Dump detailed service information during Windows node startup 2021-03-02 15:55:40 -08:00
Stephen Augustus
3c2824e3db [go1.16] go.mod: update to go1.16 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-02 00:38:00 -05:00
Stephen Augustus
274133fe11 [go1.16] Update to go1.16 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-02 00:38:00 -05:00
Hiroshi Hatake
bf9f019c7d fluentd-elasticsearch: Add mechanism to load simple sniffer class to prevent unexpected sniffering 2021-03-01 11:03:24 +09:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Benjamin Elder
88f13fb17f drop unused sh_test targets 2021-02-25 23:11:39 -08:00
wojtekt
3a5d4d25bf Set progress-notify-interval to 5s for GCE provider 2021-02-25 17:23:24 +01:00
Kubernetes Prow Robot
9694e42099
Merge pull request #96134 from vinayakankugoyal/apiservernonroot 
Run kube-apiserver as non-root.
 2021-02-23 18:26:51 -08:00
Kubernetes Prow Robot
f4801a7c85
Merge pull request #98799 from claudiubelu/images/cleanup-run 
images: Removes containers after they've run
 2021-02-22 22:24:11 -08:00
Vinayak Goyal
c63ff05e6d Run kube-apiserver as non-root. 2021-02-22 20:48:16 -08:00
Kubernetes Prow Robot
874877fa44
Merge pull request #99216 from ruiwen-zhao/remove_modprobe 
Remove modprobe configs from configure-helper
 2021-02-22 17:24:32 -08:00
Kubernetes Prow Robot
b6e4c1c71a
Merge pull request #99242 from liu-cong/arm64 
Add arm64 support for GCE node configuration
 2021-02-19 16:55:41 -08:00
Kubernetes Prow Robot
1f27dcf70c
Merge pull request #99059 from vinayakankugoyal/dockerfile2 
Use ARG and --build-arg instead of sed for etcd image.
 2021-02-19 15:33:41 -08:00
Cong Liu
03709c0ece Add arm64 support for GCE node configuration 
Fix typo

Add TODO
 2021-02-19 14:22:26 -08:00
ruiwen-zhao
c053b232ba Remove modprobe configs from configure-helper 2021-02-18 22:57:44 +00:00
Jeremy Edwards
82417fe763 Add GCE Kubernetes option to enable Windows DSR. 2021-02-17 01:34:36 +00:00
Kubernetes Prow Robot
111d82f87f
Merge pull request #98974 from dekkagaijin/master 
Update kube-addon-manager image to v9.1.2
 2021-02-16 13:45:27 -08:00
Kubernetes Prow Robot
13bcc023f9
Merge pull request #98487 from pjh/readme-e2e 
Update e2e test instructions in GCE Windows README
 2021-02-16 11:55:33 -08:00
Kubernetes Prow Robot
f81235605a
Merge pull request #99074 from mrbobbytables/update-cluster 
cluster/* Remove inactive members from OWNERS
 2021-02-14 18:51:06 -08:00
Bob Killen
0298ab0473
cluster/kubemark: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek from an
approver to an emeritus_approver.
 2021-02-14 14:17:52 -05:00
Bob Killen
ffcb4b953c
cluster/images/kubemark: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek from an
approver to an emeritus_approver.
 2021-02-14 14:17:52 -05:00
Bob Killen
64f1eb7270
cluster/gce: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek and
jingax10 from approvers to emeritus_approvers.
 2021-02-14 14:17:52 -05:00
Bob Killen
9269f216a6
cluster/addons/kube-proxy: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves jingax10 from
an approver to an emeritus_approver.
 2021-02-14 14:17:31 -05:00
Bob Killen
8c06778a91
cluster/addons/dashboard: remove out-of-date MAINTAINERS.md 2021-02-14 10:13:44 -05:00
Bob Killen
2d433de8e0
cluster/addons/dashboard: remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves byrk from
approver to emeritus_approver.
 2021-02-14 10:13:44 -05:00
Vinayak Goyal
81df4d7dc4 Use ARG and --build-arg instead of sed for etcd image. 2021-02-13 01:07:27 -08:00
Kubernetes Prow Robot
f2be0bc1c7
Merge pull request #99024 from vinayakankugoyal/dockerfile3 
Use ARG instead of sed to set the base image for addon-manager.
 2021-02-12 20:41:04 -08:00
Vinayak Goyal
ad1e2ffab0 Use ARG instead of sed to set the base image for addon-manager. 2021-02-12 03:11:56 -08:00
Vinayak Goyal
a83519b5bf Use ARG instead of sed in the conformance image. 2021-02-12 02:55:33 -08:00
Benjamin Elder
299c561b10 portably configure tempdir in configure-helper.sh 
fixes a `make test` failure on macOS
 2021-02-12 01:15:14 -08:00
Jake Sanders
927eaffe19 Update kube-addon-manager image to v9.1.2 2021-02-11 09:38:39 -08:00
Kubernetes Prow Robot
e25b0cb6db
Merge pull request #98911 from Jeffwan/jiaxin/update_kubemark_args 
Remove CONTENT_TYPE in kubemark hollow template
 2021-02-11 01:48:15 -08:00
Kubernetes Prow Robot
20b03f6365
Merge pull request #90442 from joakimr-axis/joakimr-axis_gci-configure.sh 
Fix shellcheck failures in cluster/gce/gci/configure.sh
 2021-02-10 19:36:15 -08:00
Kubernetes Prow Robot
7fcd66c985
Merge pull request #98339 from monotek/fluentd112 
updated fluentd and all plugins
 2021-02-10 17:58:16 -08:00
Joakim Roubert
3dd3211c81 Fix shellcheck failures in cluster/gce/gci/configure.sh 
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2021-02-10 19:23:31 +01:00
Jordan Liggitt
c7e084eec0 Switch add-on manager to use lease for leader election 2021-02-10 12:05:03 -05:00
Joakim Roubert
8bf2836e41 Fix remaining shellcheck issues in cluster/gce/util.sh 
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2021-02-10 10:07:45 +01:00
Kubernetes Prow Robot
b87ae556b3
Merge pull request #95865 from joakimr-axis/joakimr-axis_master-helper.sh 
Fix shellcheck issues in cluster/gce/gci/master-helper.sh
 2021-02-09 17:43:00 -08:00
Jiaxin Shan
4b796c359e Remove CONTENT_TYPE in kubemark hollow template 
CONTENT_TYPE in this case is `kube-api-content-type=application/vnd.kubernetes.protobuf` and it can be removed since
 we don’t see a need for setting it differently in the tests.

Signed-off-by: Jiaxin Shan <seedjeffwan@gmail.com>
 2021-02-09 11:04:44 -08:00
Joakim Roubert
ec9065f2c1 Update after review comment 2021-02-09 09:54:55 +01:00
Joakim Roubert
c33672b010 Update after review comment 
Change-Id: Icc2281b98a0240e177f6d8b625a8ddc4f4161b79
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2021-02-09 09:50:51 +01:00
Joakim Roubert
251c4111d5 Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch splits declaration and assignment for local variables where
shellcheck triggers risk of shadowing warnings. Some missing exports
also added, and an unused variable was removed.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2021-02-09 09:50:51 +01:00
Kubernetes Prow Robot
6389c13960
Merge pull request #94463 from joakimr-axis/joakimr-axis_util.sh_internal 
Fix some shellcheck warnings/errors in cluster/gce/util.sh
 2021-02-08 23:51:52 -08:00
Kubernetes Prow Robot
2b7c61b1bb
Merge pull request #98205 from pacoxu/build/pauses 
update pause image to 3.4.1 and also update the change log
 2021-02-08 18:20:58 -08:00
Kubernetes Prow Robot
3534e31ade
Merge pull request #98834 from cpanato/go1158 
[go1.15] Update to go1.15.8
 2021-02-06 15:35:11 -08:00
Carlos Panato
8b5bf8ef91
[go1.15] Update to go1.15.8 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-02-06 15:55:39 +01:00
Kubernetes Prow Robot
96a98e50af
Merge pull request #98790 from jkh52/master 
Bump konnectivity-client to v0.0.15
 2021-02-05 16:33:11 -08:00
Kubernetes Prow Robot
ce1ee6461a
Merge pull request #98773 from mtaufen/said-fqdn 
Use FQDN for SERVICEACCOUNT_ISSUER in tests
 2021-02-05 05:40:52 -08:00
pacoxu
d9b63439d2 update gce cluster windows infra image 2021-02-05 21:39:48 +08:00
Ricardo Pchevuzinske Katz
25f3cf5550 Remove extensions v1beta1 from addon manager and kubectl prune 2021-02-05 09:38:28 -03:00
Claudiu Belu
41cdd40a2e images: Removes containers after they've run 
Not all instances of docker run has the --rm argument, which means that they'll
persist after they've finished. This can cause storage to remain occupied needlessly.
 2021-02-05 10:07:26 +00:00
Joseph Anttila Hall
6812a9c610 Bump network proxy images to v0.0.15 2021-02-05 00:35:33 -08:00
Michelle Tandya
904f0b628b Disable sample submission and MAPS Reporting from Windows Defender 
Include logging when setting windows defender preferences

Log Window Defender preferences to show configuration changes

Move Defender configuration to be a part of Set-PrerequisiteOptions
 2021-02-04 23:02:09 +00:00
Michael Taufen
8418fd9b15 Use FQDN for SERVICEACCOUNT_ISSUER in tests 2021-02-04 10:40:40 -08:00
hasheddan
20679f31d1
Build conformance image with DOCKER_CLI_EXPERIMENTAL enabled 
In order to use buildx with docker versions prior to v20.10 experimental
features must be enabled. Setting at build time ensures that they are
in case they have not already been at the environment scope.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-02-01 13:17:28 -06:00
Joakim Roubert
ba7e23620a Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch uses shell internals instead of sed and awk where suitable
and also uses lower/upper classes for tr instead of a-z and A-Z.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2021-01-30 09:32:07 +01:00
Sascha Grunert
e9fbdff7c6
Switch to docker buildx for conformance image 
The conformance test image previously used the `FROM --platform …`
syntax which is something we (SIG Release) consider as deprecated.

Therefore we now switch to `docker buildx`, which can specify the
`--platform` directly.

Signed-off-by: Sascha Grunert <mail@saschagrunert.de>
 2021-01-29 11:36:52 +01:00
Kubernetes Prow Robot
b77c886043
Merge pull request #94456 from joakimr-axis/joakimr-axis_util.sh_shellcheckdisables 
Fix some shellcheck warnings/errors in cluster/gce/util.sh
 2021-01-28 22:49:40 -08:00
Sascha Grunert
1acaf32cff
Bump debian-base to v1.4.0 and debian-iptables to v1.5.0 
Both images are now sane multi-architecture images and should fix the
kube-proxy container image in the same way.

Signed-off-by: Sascha Grunert <mail@saschagrunert.de>
 2021-01-28 13:47:09 +01:00
Peter Hornyack
8211582e2d Update e2e test instructions in GCE Windows README 2021-01-27 11:03:47 -08:00
Carlos Panato
e76fc62258
[go1.15] Update to go1.15.7 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-01-27 11:43:01 +01:00
Kubernetes Prow Robot
de4d771d3b
Merge pull request #97934 from mattcary/loopback-upstream 
Disallow local loopback for volume hosts
 2021-01-27 01:13:40 -08:00
Matthew Cary
9a7dcd36c1 Disallow local loopback for volume hosts 
Change-Id: Ic356c3f859057153cfad97327f1938792a1a512c
 2021-01-26 17:12:51 -08:00
pacoxu
6a795f5f51 update etcd revision to 2 for next build 3.4.13-2 2021-01-26 15:29:26 +08:00
pacoxu
f76be691a2 update debian-base to buster-v1.3.0 for CVEs 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-01-26 14:10:20 +08:00
Kubernetes Prow Robot
1a67280508
Merge pull request #98037 from vinayakankugoyal/kube-controller-manager-crp 
Update configure-helper.sh to early exit from start-kube-controller-m…
 2021-01-25 12:38:59 -08:00
André Bauer
fffe6275a5 updated fluentd and all plugins 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2021-01-24 14:45:57 +01:00
Kubernetes Prow Robot
7b3f0cd5ca
Merge pull request #98286 from jeremyje/win20h2 
Fix GCE Windows Smoke Test and Support 2004 and 20H2.
 2021-01-22 12:21:39 -08:00
Kubernetes Prow Robot
1bb0108574
Merge pull request #98284 from pjh/install-docker-on-node-start 
GCE Windows: add 20H2; install docker when nodes are started
 2021-01-22 11:31:26 -08:00
Peter Hornyack
21592c23e1 GCE Windows: add 20H2; install docker when nodes are started 2021-01-22 09:58:22 -08:00
Jeremy Edwards
7575611fd5 Fix GCE Windows Smoke Test and Support 2004 and 20H2. 2021-01-22 01:14:50 +00:00
Peter Hornyack
313ac4751c Improve the Windows GCE README 2021-01-21 15:42:37 -08:00
Vinayak Goyal
31807032e0 Update configure-helper.sh to early exit from start-kube-controller-manager if kube-controller-manager is deployed through CRP. 2021-01-20 16:22:46 -08:00
Kubernetes Prow Robot
1bfa1d4619
Merge pull request #98055 from qingsenLi/20210114 
fix typo and decs in apiserver_etcd_test.go
 2021-01-19 18:49:58 -08:00
Kubernetes Prow Robot
176c4c7916
Merge pull request #96823 from hasheddan/cleanup-cos-doc 
Cleanup GCI / COS README.md
 2021-01-19 17:07:59 -08:00
Peter Hornyack
edd58b1a4e Repair pigz URL 
New Windows nodes are failing to start with:

windows-startup-script-ps1: Failed to download file from https://storage.googleapis.com/gke-release/winnode/pigz/prod/gke_windows/pigz/release/5/20201104-134221/pigz-$PIGZ_VERSION.zip.

With this fix, the nodes start successfully.
 2021-01-14 16:12:05 -08:00
Kubernetes Prow Robot
9da11e294f
Merge pull request #97868 from mtaufen/pki-tmpfs 
Mount /var/lib/kubelet/pki on tmpfs
 2021-01-14 10:47:04 -08:00
10177505
deb509a068 fix typo and decs 2021-01-14 16:55:45 +08:00
Kubernetes Prow Robot
5e7d62ecfc
Merge pull request #97967 from rajibmitra/master 
Update cri-tools to v1.20.0
 2021-01-13 13:27:15 -08:00
hasheddan
baccf02ab0
Switch to debian:stable-slim for conformance image base 
The currently used debian:stretch-slim does not support s390x arch in
its multi-arch build. We opt to use stable-slim instead of pulling in
different base images for each platform build.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-01-13 08:49:27 -06:00
hasheddan
bc262d6e85
Specify BASEIMAGE platform for conformance image 
Updates conformance image Dockerfile to specify platform for BASEIMAGE
and sets correct ARCH in Makefile.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2021-01-13 08:46:01 -06:00
rajibmitra
69aae7aa6c Update cri-tools to v1.20.0 
Signed-off-by: rajibmitra <rajib.jolite@gmail.com>
 2021-01-12 19:02:51 +05:30
Michael Taufen
9f9e235b9d Mount /var/lib/kubelet/pki on tmpfs 
This helps avoid some rare instances of corrupt cert files
that cause Kubelet to crash-loop after node reboots, e.g.
if Kubelet opens the file during the shutdown but is unable
to write it.
 2021-01-08 18:04:35 -08:00
Kubernetes Prow Robot
8b5aeeedb4
Merge pull request #97742 from benhxy/apiserver-cipher 
Configure --tls-cipher-suites on kube-apiserver
 2021-01-08 13:44:29 -08:00
Ben Hu
d4e75baae1 Fix comment on comment 2021-01-08 20:24:59 +00:00
Jian Zeng
8c1971e17c chore(gce): pass auth flags to KCM and KS 
Pass flags `--authentication-kubeconfig` and
`--authorization-kubeconfig` to controller-manager and scheduler,
so that we could grab metrics from their secure ports in tests.
 2021-01-06 12:56:39 +08:00
Kubernetes Prow Robot
97a3e9e7e8
Merge pull request #97621 from vbannai/bug-fix 
Bug fix
 2021-01-05 17:10:19 -08:00
Ben Hu
624b214481 Configure --tls-cipher-suites on kube-apiserver. 2021-01-06 00:31:39 +00:00
Kubernetes Prow Robot
83a87775b0
Merge pull request #97536 from heqg/unused01 
Remove duplicate nodeSelector for kube-dns
 2021-01-05 11:46:36 -08:00
Kubernetes Prow Robot
506156842c
Merge pull request #97666 from heqg/duplicate-nodeSelector 
Remove duplicate nodeSelector for kube-dns in kube-dns.yaml.base
 2021-01-04 17:05:58 -08:00
Kubernetes Prow Robot
5e405fdcff
Merge pull request #96276 from ruiwen-zhao/device_plugin_path 
Update nvidia-gpu-device-plugin addon image path
 2021-01-04 09:33:57 -08:00
he.qingguo
89c1ab4025 Remove duplicate nodeSelector for kube-dns in kube-dns.yaml.base 
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
 2021-01-04 11:31:30 +08:00
Vinay Bannai
e74ef5301a Updating the version to the recent tag. 2020-12-30 13:13:55 -08:00
Vinay Bannai
a15bc5954c The l7-default-backend/defult-http-backend now points to a new version of the 404-server-with-metrics. 
Uses new container registry: gcr.io/google-container with the new version for the ingress-gce-404-server-with-metrics-amd64:v1.10.11
 2020-12-30 13:13:55 -08:00
he.qingguo
da509d2ea2 Remove duplicate nodeSelector for kube-dns 
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
 2020-12-28 11:20:45 +08:00
Kubernetes Prow Robot
0a839c6c3b
Merge pull request #97447 from amwat/legacylogdump 
Fix incorrect literal quotes in logdump path
 2020-12-24 21:46:27 -08:00
Amit Watve
c954bc61a5 fix literal quotes in logdump path. 2020-12-24 00:23:32 -08:00
Sergey Kanzhelev
d78db9f161 configure docker on containerd nodes so it wouldn't reserver 172.17 subnet 2020-12-23 18:49:57 +00:00
David Xia
0756e54dfc
Fix typo in comment 2020-12-21 20:02:20 -05:00
Antoni Zawodny
58ea69f094 Make log-dump's deprecation note up-to-date 2020-12-15 09:58:09 +01:00
Ben Hu
9581c40887 Revert "Use host IP instead of localhost for control plane component kubeconfig files." 
This reverts commit 49afcfa5f2.
 2020-12-11 22:36:39 +00:00
Kubernetes Prow Robot
0e2bf1e49f
Merge pull request #96470 from jeremyje/gkewinpigz 
Install pigz for GCE Windows Nodes.
 2020-12-11 12:47:30 -08:00
Maciej Borsz
7f09d59215 Migrate etcd's livenessProbe to etcdctl endpoint health. 
Change-Id: Ie19c844050c75e3d1c4b431d09ba0ac851c5317b
 2020-12-11 12:43:02 +01:00
Kubernetes Prow Robot
ee8983705a
Merge pull request #96679 from stmcginnis/appspot-cleanup 
Remove stale analytics links from docs
 2020-12-10 23:17:22 -08:00
Jeremy Edwards
797ad961b8 Fix missing type error in Get-RemoteFile by loading System.Net.Http assembly. 2020-12-10 21:18:15 +00:00
Jeremy Edwards
3b8f32dd90 Install pigz for GCE Windows Nodes. 2020-12-09 06:38:59 +00:00
Kubernetes Prow Robot
fbc8ca6096
Merge pull request #97132 from prameshj/patch-5 
Upgrade to nodecache 1.16.0 image
 2020-12-08 22:02:00 -08:00
Kubernetes Prow Robot
cad9a8277d
Merge pull request #97127 from liggitt/revert-etcd-host-ip 
Revert "iAdd host IP to etcd listen client URLs."
 2020-12-08 22:01:52 -08:00
Kubernetes Prow Robot
7b4fc68f52
Merge pull request #97011 from towca/patch-5 
Bump Cluster Autoscaler to v1.20.0
 2020-12-08 21:06:25 -08:00
Kubernetes Prow Robot
c0b173f108
Merge pull request #96994 from jeremyje/gceowners 
Add jeremyje to cluster/gce/OWNERS
 2020-12-08 21:05:59 -08:00
Kubernetes Prow Robot
9b885eb0cb
Merge pull request #96969 from spencer-p/bump-kubectl 
Bump kubectl in addon manager to 1.19
 2020-12-08 21:05:18 -08:00
Kubernetes Prow Robot
d2e7abb153
Merge pull request #96839 from vinayakankugoyal/crp 
Update configure-helper.sh to early exit from start-kube-scheduler if…
 2020-12-08 20:03:51 -08:00
Kubernetes Prow Robot
d63a62d7bb
Merge pull request #96661 from jeremyje/fastboot 
Significantly improve download artifact latencies on GCE Windows node boot.
 2020-12-08 18:35:05 -08:00
Kubernetes Prow Robot
56d7f138de
Merge pull request #96622 from vinayakankugoyal/groupfix 
If the file already exists we need to grant group read permissions ex…
 2020-12-08 17:29:59 -08:00
prameshj
9ec84ee87c
Use nodecache 1.16.0 image with CoreDNS 1.7 2020-12-08 10:40:36 -08:00
Jordan Liggitt
8820dc4522 Revert "iAdd host IP to etcd listen client URLs." 
This reverts commit 8b4e164a78.
 2020-12-08 11:37:13 -05:00
Jeremy Edwards
90fa9de0dc Add jeremyje to cluster/gce/OWNERS 2020-12-04 23:47:36 +00:00
Neil Jerram
10eb1d4d6e Calico: set IP=autodetect so preempted nodes learn new IP 
With preemptible nodes, a cluster node (with a given hostname) can
boot the first time with IP1, then be preempted and boot again with
different IP2.

With IP="", Calico will autodetect IP1 on first boot, but will not
perform autodetection on subsequent boots and so will not release IP1
and detect IP2 instead.

With IP=autodetect, Calico will perform autodetection on all boots,
which is what we want.
 2020-12-03 10:26:31 +00:00
Kuba Tużnik
9efbd914f6
Bump Cluster Autoscaler to v1.20.0 2020-12-02 11:10:54 +01:00
Jeremy Edwards
155bda010a Significantly improve download artifact latencies on GCE Windows node boot. 2020-12-02 06:59:51 +00:00
Spencer Peterson
da684bcd6f Bump kubectl in addon manager to 1.19 2020-11-30 23:01:19 +00:00
Vinayak Goyal
18644cb1b2 Update configure-helper.sh to early exit from start-kube-scheduler if kube-scheduler is deployed through CRP. 2020-11-24 12:01:22 -08:00
Stephen Augustus
2407a70cc7 [go1.15] Update to go1.15.5 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-11-23 20:49:56 -05:00
hasheddan
1bf7de6239
Remove broken analytics tracking link 
Removes embedded tracking pixel which appears to be broken.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2020-11-23 18:05:10 -06:00
hasheddan
b24f224ff2
Fix formatting in GCI / COS docs 
Fixes a few formatting issues in GCI / COS README.md.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
 2020-11-23 18:01:30 -06:00
Kubernetes Prow Robot
b2ecd1b3a3
Merge pull request #96716 from tosi3k/bump-npd-to-v0.8.5 
Bump node-problem-detector to v0.8.5
 2020-11-21 06:33:33 -08:00
Antoni Zawodny
8f2dd3aaab Bump node-problem-detector to v0.8.5 2020-11-20 20:00:25 +01:00
Mike Danese
7fc57a207e gce: move iptables rule to mangle 
This avoids a conflict with rules that calico installs. Also, acquire
the lock everywhere.
 2020-11-18 11:28:03 -08:00
Sean McGinnis
be131457ef
Remove stale analytics links from docs 
Many README files and other docs contained a link to a an appspot
tracking app that is no longer active. Following the links leads to an
error about Go 1.9 no longer being supported. Go 1.9 support was dropped
in appspot in 2019 and disabled June 2020.

This also resulted in a broken image link displaying when viewing these
files on GitHub. Since the app is no longer functioning, and since it
causes a potentially (but granted, minor) confusing error to display,
this just removes those links as I don't believe they are needed
anymore.

Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
 2020-11-18 07:04:48 -06:00
Antoni Zawodny
7acd8b50c8 Add a deprecation note to k/k/cluster/log-dump directory 2020-11-17 13:21:27 +01:00
Joakim Roubert
f9ca218872 Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch adds shellcheck disables where we deliberately want to
have the current code that shellcheck triggers on.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-11-17 08:05:54 +01:00
vinayak goyal
c2ea6842a7 If the file already exists we need to grant group read permissions explicitly. 2020-11-16 22:59:30 +00:00
Casey Davenport
07002e41bb Update Calico to use a non-conflicting route table range 2020-11-16 09:54:02 -08:00
Kubernetes Prow Robot
84d15ca322
Merge pull request #93765 from jeremyje/restartsd 
Configure StackdriverLogging Windows service to restart on failure.
 2020-11-12 23:26:23 -08:00
Kubernetes Prow Robot
9a85031a25
Merge pull request #96027 from lizhuqi/fluentd-config-update 
Add keep_time_key setting to fluentd configuration
 2020-11-12 16:02:39 -08:00
Kubernetes Prow Robot
b0b7604f8f
Merge pull request #96469 from xing-yang/update_snapshot_crds_2 
Update snapshot CRDs
 2020-11-12 13:17:20 -08:00
Kubernetes Prow Robot
fd6bd36081
Merge pull request #96389 from Jefftree/kas-013 
Bump network proxy to v0.0.14
 2020-11-12 11:21:39 -08:00
Kubernetes Prow Robot
72a7f94bdd
Merge pull request #88412 from stafot/add_nodelocalcache_service 
Add node-local-dns headless service
 2020-11-12 11:17:08 -08:00
Jeremy Edwards
26cdcde3d5 Configure StackdriverLogging Windows service to restart on failure. 2020-11-11 21:04:21 -08:00
xing-yang
763a15e38b Update snapshot CRDs 2020-11-11 15:58:46 +00:00
Kubernetes Prow Robot
5d5ff49b9b
Merge pull request #96383 from xing-yang/update_snapshot_crds 
Update snapshot CRDs to v1
 2020-11-11 05:11:49 -08:00
Kubernetes Prow Robot
8b3da41e8f
Merge pull request #96388 from Jefftree/enable_konn_default 
Set enable konnectivity service to true by default
 2020-11-10 17:53:40 -08:00
Jefftree
58001e847d Bump kas to v0.0.14 2020-11-10 17:22:41 -08:00
Kubernetes Prow Robot
fe9fd060c9
Merge pull request #96237 from jingxu97/nov/konnect 
Add nodeSelector for konnectivity daemonSet
 2020-11-10 14:45:32 -08:00
Marcel Zięba
6e598a96ff Forbid creating clusters with more than 100 nodes without vpc-native 2020-11-10 15:58:25 +00:00
Jefftree
c8716d4672 Set enable konnectivity service to true by default 2020-11-09 15:34:35 -08:00
xing-yang
6acf5fab00 Update snapshot CRDs to v1 2020-11-09 22:01:35 +00:00
Jing Xu
d6e805b38c Add nodeSelector for konnectivity daemonSet 
konnectivity agent daemonSet can only run on Linux node. Add node
selector to the yaml file

Change-Id: I3a4790bbfe95a39d9b668443d59dcaa72fb4cd0d
 2020-11-07 23:12:31 -08:00
Kubernetes Prow Robot
d39562fd93
Merge pull request #95863 from RaunakShah/snap_e2e 
Volume snapshot e2e test to validate PVC finalizer
 2020-11-05 10:53:06 -08:00
ruiwen-zhao
9c9c552090 Update nvidia-gpu-device-plugin addon image path 2020-11-05 18:25:00 +00:00
Kubernetes Prow Robot
9a469d28e0
Merge pull request #96228 from MrHohn/dns-owner 
Adding an owner for addon/dns folder
 2020-11-04 15:47:30 -08:00
Kubernetes Prow Robot
169683b05f
Merge pull request #95975 from jingxu97/oct/csiproxyversion 
Update csi-proxy version
 2020-11-04 14:46:53 -08:00
shahra
e95af138b5 Volume snapshot e2e test to validate 
VolumeSnapshotContent and PVC finalizer
 2020-11-04 14:08:24 -08:00
Zihong Zheng
2dfd77067e Adding an owner for addon/dns folder 2020-11-04 10:38:48 -08:00
Kubernetes Prow Robot
9108c430db
Merge pull request #95791 from floryut/update_nodelocaldns 
Update nodelocaldns yaml to use 1.15.16 image
 2020-11-03 22:50:03 -08:00
Kubernetes Prow Robot
f7cfe3ba0f
Merge pull request #95076 from dougsland/deprecate-delete-local-data 
kubectl: deprecate --delete-local-data
 2020-11-03 05:50:15 -08:00
Kubernetes Prow Robot
8b59fe9612
Merge pull request #95938 from coffeepac/repair-cluster-discovery 
use current method signatures
 2020-10-30 01:34:06 -07:00
Julie Qi
9987d34016 Add keep_time_key setting to fluentd configuration 2020-10-29 16:44:00 -07:00
wojtekt
eb63da77ea Allow for configuring etcd progress notify interval on GCE 2020-10-29 15:43:51 +01:00
Kubernetes Prow Robot
7a20fcf6ef
Merge pull request #95890 from barney-s/winlog_add_fluentd 
If image has stack driver agent installed, use it.
 2020-10-28 22:42:59 -07:00
Pat Christopher
a30d2f6908
pin to latest k8s version 2020-10-28 19:49:57 -07:00
Pat Christopher
94ee60acc6
more versions 2020-10-28 19:49:57 -07:00
Pat Christopher
bf9e72eadd
rev versions 2020-10-28 19:49:57 -07:00
Pat Christopher
e5c20ca50a
use current method signatures 2020-10-28 19:49:57 -07:00
Jing Xu
5790971267 Update csi-proxy version 
update csi-proxy version to 0.2.2
change log https://github.com/kubernetes-csi/csi-proxy/blob/master/CHANGELOG/CHANGELOG-0.2.2.md

Change-Id: I19a7a6776970eb0056287792bb2676cece5b8063
 2020-10-28 19:45:45 -07:00
Kubernetes Prow Robot
f3c957c349
Merge pull request #95947 from wojtek-t/bump_gce_master_sizes 
Update function setting master node size for GCE
 2020-10-28 18:36:58 -07:00
Barni S
73916e5a9b If image has stackdriver agent installed, use it. 
Check if stackdriver agent is preinstalled in the image. If so configure and use it.
Else check for fluentbit agent
 2020-10-28 13:34:44 -04:00
Kubernetes Prow Robot
53d63fb748
Merge pull request #95943 from aojea/upgradejob 
fix unbound variable on upgrade
 2020-10-28 06:39:56 -07:00
wojtekt
f69cc2cd96 Update function setting master node size for GCE 2020-10-28 13:04:26 +01:00
Kubernetes Prow Robot
1a645c2135
Merge pull request #95743 from benhxy/apiserver-health 
Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck.
 2020-10-28 04:03:56 -07:00
Kubernetes Prow Robot
63eacc22c1
Merge pull request #95912 from khs1994/patch-1 
fixed addons fluentd-elasticsearch statefulset format error
 2020-10-28 01:05:55 -07:00
Antonio Ojea
7c3bd972e9 fix unbound variable on upgrade 2020-10-28 09:05:29 +01:00
Kubernetes Prow Robot
3523555aab
Merge pull request #95771 from vinayakankugoyal/fluentbit 
Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke…
 2020-10-27 10:36:48 -07:00
Ben Hu
8416c5cc51 Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck. 2020-10-27 16:25:27 +00:00
Kang Huaishuai
ba41d45870
fixed addons fluentd-elasticsearch statefulset format error 
Signed-off-by: Kang Huaishuai <khs1994@khs1994.com>
 2020-10-27 20:06:15 +08:00
Joakim Roubert
434611b3fb Fix shellcheck issues in cluster/gce/gci/master-helper.sh 
Based on PR 88582 by gavinfish that was closed due to inactivity.
Contains a few updates.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-10-27 08:58:48 +01:00
Kubernetes Prow Robot
d0e06cf3e0
Merge pull request #95843 from varunmar/update-ip-masq-agent 
Bump ip-masq-agent version to pick up CVE fixes
 2020-10-26 11:23:16 -07:00
Kubernetes Prow Robot
557885d5d7
Merge pull request #91788 from rahulkjoshi/detect-local-mode 
Add option to specify detect-local-mode during cluster configuration
 2020-10-26 10:25:02 -07:00
Kubernetes Prow Robot
c492e5bfb7
Merge pull request #95858 from monotek/fluent-es-xpack 
added xpack gem to enable ilm support in fluentd-es-image
 2020-10-26 09:29:15 -07:00
Kubernetes Prow Robot
53b2973440
Merge pull request #95844 from MrHohn/ip-masq-owner 
Add MrHohn as an owner of the ip-masq-agent addon
 2020-10-26 00:45:02 -07:00
André Bauer
f6475ca56c removed whitspace 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-10-25 19:27:43 +01:00
André Bauer
72e9737255 added xpack gem to enable ilm support in fluentd-es-image 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-10-25 19:19:08 +01:00
Kubernetes Prow Robot
5935fcd704
Merge pull request #95766 from towca/jtuznik/ca-params-fix 
Properly quote flags passed to Cluster Autoscaler
 2020-10-23 20:47:00 -07:00
Kubernetes Prow Robot
1f756e4a37
Merge pull request #92669 from Jefftree/netproxy-configure-helper 
Separate network proxy flag for apiserver egress and starting pods
 2020-10-23 16:47:00 -07:00
Zihong Zheng
0ca88cda17 Add MrHohn as an owner of ip-masq-agent addon 2020-10-23 16:01:03 -07:00
Varun Marupadi
69e37cbcf3 Bump ip-masq-agent version to pick up CVE fixes 2020-10-23 14:41:58 -07:00
Vinayak Goyal
83c1ce0225 Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane. 2020-10-23 12:14:26 -07:00
Rahul Joshi
889446810c Add configuration options to specify --detect-local-mode on kube-proxy. 2020-10-23 12:12:59 -07:00
Kubernetes Prow Robot
c44633276b
Merge pull request #95563 from tosi3k/log-dump-verification 
Return non-zero code on logexporter failures
 2020-10-23 00:11:58 -07:00
Kubernetes Prow Robot
1257bc5acb
Merge pull request #91474 from cici37/pkgController 
Cleanup CCM dependencies
 2020-10-22 23:17:45 -07:00
Kubernetes Prow Robot
e850fa6a6c
Merge pull request #95209 from benhxy/gke/kubeconfig 
Use host IP instead of localhost for GKE control plane kubeconfig
 2020-10-22 22:15:49 -07:00
Jefftree
0e5d057755 Rename flags 2020-10-22 08:43:28 -07:00
Jefftree
ed52ad3f25 Add SETUP_KONNECTIVITY_SERVICE flag 2020-10-22 08:43:28 -07:00
Jefftree
7820b05467 Separate network proxy flag for apiserver egress and starting pods 2020-10-22 08:43:27 -07:00
Jakub Tużnik
236ade027b Properly quote flags passed to Cluster Autoscaler 
In the current implementation, the flags are not put between quotes,
and so the Cluster Autoscaler manifest doesn't parse as valid JSON.
 2020-10-22 15:10:39 +02:00
Florian Ruynat
af3347280b Update nodelocaldns yaml to use 1.15.16 image 2020-10-22 14:18:34 +02:00
Antoni Zawodny
e42a8dbe38 Return non-zero code on logexporter failures 2020-10-21 17:38:43 +02:00
Daniel Gutowski
6c8b1ab266 Fix default values for logrotate in /var/log/ 2020-10-21 09:18:32 +00:00
Ben Hu
49afcfa5f2 Use host IP instead of localhost for control plane component kubeconfig files. 
This is a part of work to allow control plane components to be moved off hostNetwork.
 2020-10-20 22:47:33 +00:00
Ben Hu
8b4e164a78 iAdd host IP to etcd listen client URLs. 
Allow kube-apiserver to use host IP to connect to etcd.
Update etcd/migrate to allow additional client listening URLs.
 2020-10-20 16:43:52 +00:00
cici37
95acec5a3b Move client_builder to k8s.io/controller-manager 2020-10-19 14:48:22 -07:00
Kubernetes Prow Robot
db8258ca58
Merge pull request #95506 from benhxy/gke/etcd-migrate 
Add client listening URLs configuration to etcd migrate.
 2020-10-17 11:00:12 -07:00
Kubernetes Prow Robot
a5dceab0ce
Merge pull request #95580 from jayunit100/jayunit100/pillarnodelocal 
support multiple bind records (fie nodelocaldns  test regression)
 2020-10-16 22:24:12 -07:00
Kubernetes Prow Robot
22a0a89c40
Merge pull request #95625 from eddiezane/ez/use-gsutil-get-kube 
Use gsutil to download kube binaries and release artifacts
 2020-10-16 17:18:13 -07:00
Ben Hu
e8fcc44286 Add client listening URLs flag to etcd migrate. 2020-10-16 23:10:54 +00:00
jayunit100
aefe930562 support multiple bind records (fie nodelocaldns test regression), by 
first replacing PILLAR_ and then replacing other vars.
 2020-10-16 14:28:55 -04:00
Eddie Zaneski
cebb1b3393
Use gsutil to download kube binaries and release 
Default to using gsutil to download kube artifacts to avoid network
interruptions.

Signed-off-by: Eddie Zaneski <eddiezane@gmail.com>
 2020-10-16 09:56:25 -06:00
Barni S
847ae378ef Fix windows node startup failures. 
1. cd to root dir before removing temp installer path. It was failing because we were trying to remove while being in the same dir.
2. Expand variables in a regular string and use it in the command. Expansion was failing in single quotes.
 2020-10-15 16:17:22 -04:00
Kubernetes Prow Robot
b3d4b8ed8a
Merge pull request #93912 from barney-s/fluentbit_win 
Use fluentbit as logging agent. Replace stackdriver
 2020-10-14 18:45:50 -07:00
Barni S
bbe7b2ebed Use fluentbit as logging agent. Replace stackdriver 2020-10-14 18:27:09 -04:00
Kubernetes Prow Robot
5c5d26786e
Merge pull request #94987 from zshihang/fix-upgrade 
fix upgrade test
 2020-10-13 17:23:54 -07:00
Antoni Zawodny
7e895db627 Fix log dumping for GKE 2020-10-13 18:46:08 +02:00
Kubernetes Prow Robot
dee62a7267
Merge pull request #95412 from saikat-royc/snapshot-controller-bump 
Upgrade snapshot controller to 3.0.0
 2020-10-12 11:32:49 -07:00
Kubernetes Prow Robot
c1e5e6a556
Merge pull request #93836 from jayunit100/salt_cleanup_92835 
remove __pillar__ refs
 2020-10-11 17:58:47 -07:00
Kubernetes Prow Robot
a4a7b574b3
Merge pull request #94465 from joakimr-axis/joakimr-axis_util.sh_arrays 
Fix some shellcheck warnings/errors in cluster/gce/util.sh
 2020-10-09 20:34:59 -07:00
Kubernetes Prow Robot
fb3e2c42ef
Merge pull request #95444 from xing-yang/addon_snapshot_owners 
Update addons volumesnapshots owners file
 2020-10-09 18:09:08 -07:00
Kubernetes Prow Robot
ff0ef98f34
Merge pull request #95424 from caseydavenport/calico-v3.16.2 
Update to Calico v3.16.2
 2020-10-09 18:08:59 -07:00
Kubernetes Prow Robot
33fd5552bb
Merge pull request #95418 from vinayakankugoyal/pki 
Update write-pki-data to give read permissions to KUBE_PKI_READERS_GR…
 2020-10-09 18:08:47 -07:00
Shihang Zhang
079cd8ddc2 fix upgrade test 2020-10-09 15:28:28 -07:00
Kubernetes Prow Robot
4fbf5df52b
Merge pull request #95388 from ii/policy 
Enable Logging of event requests to audit log in cluster/gce/gci/configure-helper.sh
 2020-10-09 14:08:48 -07:00
xing-yang
263c4d70f6 Update addons volumesnapshots owners file 2020-10-09 13:44:24 +00:00
Hippie Hacker
b1e3a2ac7a Clarify that we don't audit events due to performance impact 2020-10-09 13:30:20 +13:00
Vinayak Goyal
7cbe8070bc Update write-pki-data to give read permissions to KUBE_PKI_READERS_GROUP, for components running as non-root to be able to read the credentials. 2020-10-08 16:25:43 -07:00
Casey Davenport
39dd16d58d Update to Calico v3.16.2 2020-10-08 16:05:45 -07:00
Joseph Anttila Hall
2f318bdd57 API server: fix default_konnectivity_socket_path typo. 
Make it consistent with configure-helper.sh
 2020-10-08 13:19:05 -07:00
Saikat Roychowdhury
5a3632df55 Upgrade snapshot controller to 3.0.0 2020-10-08 19:04:54 +00:00
Joakim Roubert
d4dd0ad53c log-dump.sh: Fix shellcheck issues 
Mitigate the shellcheck warning for the assignment of local variable.
Add rest of shellcheck fixes from #88349

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-10-08 13:58:00 +02:00
Shihang Zhang
e0dcfbf9c2 make download-or-bust compatible with both sha512/sha1 2020-10-06 15:16:26 -07:00
Kubernetes Prow Robot
446da13de1
Merge pull request #94975 from zshihang/hash 
replace sha1 with sha512
 2020-10-06 13:00:42 -07:00
Joakim Roubert
2868e07b98 Update after code review 
Change-Id: I89b66f2bdcb68be7eee325e6246183638d3983b3
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-10-06 08:40:05 +02:00
Joakim Roubert
62ee0f5a1a Update cluster/gce/util.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-10-06 08:37:12 +02:00
Joakim Roubert
e924c3568e Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch fixes the use of arrays.

Change-Id: I6c7f7eaf89387ed96c7b2ddf4fbb4627ec2c6075
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-10-06 08:37:12 +02:00
Kubernetes Prow Robot
bbbab14216
Merge pull request #95311 from karan/startup-console-logs 
Send gce node startup scripts logs to console and journal
 2020-10-05 17:58:19 -07:00
Kubernetes Prow Robot
3f7e26dece
Merge pull request #95242 from jingxu97/sep/gate 
Add gate to install CSI proxy
 2020-10-05 15:16:42 -07:00
Kubernetes Prow Robot
add19e4680
Merge pull request #95168 from jingxu97/sep/image 
Update Windows image patch version
 2020-10-05 15:16:32 -07:00
Kubernetes Prow Robot
64f8bf24a6
Merge pull request #95243 from MrHohn/kube-addon-staging-2 
Update addon-manager makefile to use the new staging repo - take two
 2020-10-05 14:22:20 -07:00
Karan Goel
f707db32cc Send node startup scripts to console and journal 2020-10-05 13:25:28 -07:00
Kubernetes Prow Robot
0ef37070dc
Merge pull request #95271 from monotek/fluentd1113 
updates fluentd docker image and all plugins
 2020-10-05 08:31:06 -07:00
Kubernetes Prow Robot
5bfbb98dfa
Merge pull request #95284 from coffeepac/pc/es-addon-1.18 
v1.18 support changes
 2020-10-04 02:37:05 -07:00
André Bauer
ba83b7758c removed links to soon deprecated helm stable repo & added artifact hub link 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-10-04 10:10:23 +02:00
Pat Christopher
76aa430389
get kibana up to speed with es 2020-10-03 23:15:09 -05:00
Pat Christopher
47b009550b
rev version of stateful set 2020-10-03 22:58:13 -05:00
Pat Christopher
60272a7730
v1.18 support changes 2020-10-03 22:54:17 -05:00
André Bauer
b803d4bbec use new fluentd image in daemonset 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-10-03 11:38:50 +02:00
André Bauer
6c7776bbe0 updated fluentd and all plugins 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-10-03 11:28:46 +02:00
Jing Xu
d02f3a84e1 Add gate to install CSI proxy 
Add a gate ENABLE_CSI_PROXY to enable/disable csi proxy installation.
The default value is true
 2020-10-02 16:37:08 -07:00
Zihong Zheng
9009530d1c Update addon-manager makefile to use the new staging repo - for real 2020-10-01 15:39:25 -07:00
Kubernetes Prow Robot
deebe6619a
Merge pull request #94457 from joakimr-axis/oakimr-axis_util.sh_cat 
Fix some shellcheck warnings/errors in cluster/gce/util.sh
 2020-10-01 14:39:19 -07:00
Kubernetes Prow Robot
15fae4eadb
Merge pull request #95200 from MrHohn/addon-manager-staging 
Update Makefile to point to the new addon manager gcr repo
 2020-10-01 11:49:32 -07:00
Zihong Zheng
7a315d6942 Update Makefile to point to the new addon manager gcr repo 2020-09-30 13:54:00 -07:00
Jing Xu
f973c1d96e Add CSI proxy log to fluentd 
Add csi proxy log
 2020-09-29 22:57:31 -07:00
Jing Xu
ef3e4391c4 Update Windows image patch version 
Update Windows image version to the latest one. This one includes a fix
for unix domain socket
 2020-09-29 22:46:38 -07:00
Kubernetes Prow Robot
5254b755cd
Merge pull request #95075 from jingxu97/sep/csiproxylog 
Add csiproxy log
 2020-09-28 19:49:25 -07:00
Douglas Schilling Landgraf
625e47aaa2 kubectl: deprecate --delete-local-data 
The option --delete-local-data according with users is not clear.
This patch deprecate --delete-local-data in favor of --delete-emptydir-data.

Reference:
https://github.com/kubernetes/kubernetes/issues/80228

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
 2020-09-27 10:03:52 -04:00
Kubernetes Prow Robot
c8ebc8ab75
Merge pull request #95077 from mikedanese/mds-block 
gce: redirect handshake server requests to metadata-concealment too
 2020-09-25 22:36:47 -07:00
Mike Danese
cc5b12cdff gce: redirect handshake server requests to metadata-concealment too 2020-09-25 17:50:53 -07:00
Kubernetes Prow Robot
b39a9a943f
Merge pull request #94983 from Jefftree/update-netproxy 
Bump konnectivity-client to v0.0.12
 2020-09-25 17:37:02 -07:00
Jing Xu
ec8c7aa171 Add csiproxy log 
add csiproxy log
 2020-09-25 13:39:40 -07:00
Kubernetes Prow Robot
3ac763c393
Merge pull request #94056 from tosi3k/logexporter-per-zone 
Enable per-zone logexporter pods creation
 2020-09-25 08:01:11 -07:00
Antoni Zawodny
e453a1feb7 Enable per-zone logexporter pods creation 2020-09-25 15:45:49 +02:00
Kubernetes Prow Robot
3777ca7c2a
Merge pull request #94784 from vteratipally/revert-94669-revert-94634-master 
"Switch cos version to M85""
 2020-09-24 20:45:11 -07:00
Kubernetes Prow Robot
88fb266583
Merge pull request #93762 from spencer-p/create-resource-respects-ensureexists 
Fix kube-addon-manager overwriting resources with EnsureExists set
 2020-09-24 17:59:11 -07:00
varsha teratipally
7b2ef398a3 switching to stable version 2020-09-25 00:39:29 +00:00
Spencer Peterson
bd44ef811d Fix kube-addon-manager overwriting resources with EnsureExists 
The addon manager readme states

> - Addons with label `addonmanager.kubernetes.io/mode=EnsureExists` will be checked for
> existence only. Users can edit these addons as they want.

However, the start_addon function was using `kubectl apply` to create
resources regardless of mode. This change switches between `kubectl
create` and `kubectl apply` depending on mode.

Additionally implemented tests for create_resource fn

 - Refactor functions and main executable
 - Quick tests in bash
 - Tests for Reconcile, EnsureExists behavior
 - Check for completeness with multi resource configs
 2020-09-24 21:26:56 +00:00
Kubernetes Prow Robot
062fe2ebf1
Merge pull request #95025 from knight42/fix/ingress-gce-e2e 
fix: correct glbc ClusterRole
 2020-09-24 09:24:43 -07:00
knight42
91bd11681a
fix: correct glbc ClusterRole 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-24 16:14:36 +08:00
Shihang Zhang
e99dbbde62 replace sha1 with sha512 2020-09-23 11:27:20 -07:00
Varun Marupadi
04a51cac17 Allow the lifecycle of kube-proxy to be managed independently of the startup scripts for GCE 
Introduces a new env variable KUBE_PROXY_DISABLE which causes the configure scripts to skip over
the creation of both static pods as well as daemonset addons for kube-proxy.
When false, the behavior falls back to the default today, which is to rely on the value of
KUBE_PROXY_DAEMONSET to decide whether to start static pods on the nodes or an addon on the
master.
 2020-09-22 20:37:35 -07:00
Kubernetes Prow Robot
7363aa1e21
Merge pull request #94951 from prameshj/patch-4 
Update nodelocaldns yaml to use 1.15.14 image
 2020-09-22 14:42:42 -07:00
Jefftree
300c88cf47 Bump network proxy images to v0.0.12 2020-09-22 13:26:56 -07:00
Kubernetes Prow Robot
1bb1702a45
Merge pull request #94458 from joakimr-axis/joakimr-axis_util.sh_calc 
Fix some shellcheck warnings/errors in cluster/gce/util.sh
 2020-09-22 12:23:30 -07:00
Kubernetes Prow Robot
6b39cdf376
Merge pull request #93305 from alculquicondor/lssd-ephemeral 
Mount kubelet and container runtime rootdir on LSSD
 2020-09-22 12:22:06 -07:00
Kubernetes Prow Robot
dbaaed3592
Merge pull request #92140 from ash2k/ash2k/fix-error-check 
Fix error check logic in test
 2020-09-22 12:21:38 -07:00
prameshj
d730e5f87e
Update nodelocaldns yaml to use 1.15.14 image 2020-09-21 15:31:55 -07:00
Maciej Borsz
3d055ac1f4 log-dump.sh: Do not modify logexporter-daemonset.yaml in-place. 
Right now, each invocation of log-dump.sh modifies
logexporter-daemonset.yaml code which makes it hard to develop and leads
to unpredictable results of multiple calls with different parameters.
 2020-09-21 16:27:54 +02:00
Jing Xu
0752b78081 Remove testcluster check for csi proxy 
Remove testcluster check for csi proxy after it is beta
 2020-09-18 16:15:17 -07:00
Kubernetes Prow Robot
2aa1cd25f3
Merge pull request #94842 from jingxu97/sep/csiproxy 
Update csi proxy to v0.2.1
 2020-09-17 15:38:47 -07:00
Stephen Augustus
c67713a1ef cluster/images/etcd: Build etcd:3.4.13-1 image 
- Uses debian-base:buster-v1.2.0

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-17 13:06:27 -04:00
Stephen Augustus
06b0570444 build: Update to debian-base:buster-v1.2.0 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-17 13:06:27 -04:00
Kubernetes Prow Robot
9707537b72
Merge pull request #94267 from lizhuqi/hostname-override 
Override hostname with instance name
 2020-09-17 04:18:45 -07:00
Jing Xu
8241f9264e Update csi proxy to v0.2.1 
Update csi proxy to v0.2.1
 2020-09-16 17:36:06 -07:00
Kubernetes Prow Robot
aed5ffd195
Merge pull request #94449 from justaugustus/go115 
[go1.15] Update to go1.15.2
 2020-09-15 15:15:19 -07:00
vteratipally
8f22a58dda
Revert "Revert "Switch cos version to M85"" 2020-09-14 15:16:41 -07:00
Kubernetes Prow Robot
f5a54e3f58
Merge pull request #94671 from jingxu97/sep/csiproxybeta 
Update csi-proxy to use beta version
 2020-09-14 13:03:25 -07:00
Kubernetes Prow Robot
79cc8be2cd
Merge pull request #94769 from justaugustus/aug-cluster 
cluster/images: Add justaugustus as reviewer
 2020-09-14 11:49:12 -07:00
Aldo Culquicondor
2ae4eeb3ea Mount kubelet and container runtime rootdir on LSSD 
When environment variable NODE_LOCAL_SSD_EPHEMERAL=true,
create a RAID 0 array on all attached SSDs to mount:

- kubelet root dir
- container runtime root dir
- pod logs dir

Those directories account for all ephemeral storage.
An array is not created when there is only one SSD.

Change-Id: I22137f1d83fc19e9ef58a556d7461da43e4ab9bd
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-09-14 14:32:28 -04:00
David Eads
c7911a384c remove pod presets 2020-09-14 09:24:40 -04:00
Stephen Augustus
cca9a8c320 cluster/images: Add justaugustus as reviewer 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-09-14 09:09:05 -04:00
Mike Danese
d182ecc1f9 output go_binary rule directly from go_binary_conditional_pure 
And same for go_test_conditional_pure.

Instead of aliasing. Aliases are annoying in a number of ways. This is
specifically bugging me now because they make the action graph harder to
analyze programmatically. By using aliases here, we would need to handle
potentially aliased go_binary targets and dereference to the effective
target.

The comment references an issue with `pure = select(...)` which appears
to be resolved considering this now builds.
 2020-09-11 13:19:37 -07:00
Kubernetes Prow Robot
1b8c7585f3
Merge pull request #94726 from pradvenkat/gpu-device-plugin-addon 
gpu device plugin uses EnsureExists addon mode
 2020-09-11 13:04:09 -07:00
Pradeep Venkatachalam
00ecbcc866 gpu device plugin uses EnsureExists addon mode 2020-09-11 10:19:57 -07:00
Joakim Roubert
82db7cf4f5 Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch adds quotes for those yaml-quote arguments that do not
already have it.

Change-Id: Iee0fb79e41aa4aff7de0df93a25aee781e574934
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-09-11 08:29:55 +02:00
Kubernetes Prow Robot
1b5802fd5d
Merge pull request #94461 from joakimr-axis/joakimr-axis_util.sh_file 
Fix some shellcheck warnings/errors in cluster/gce/util.sh
 2020-09-10 16:10:29 -07:00
Kubernetes Prow Robot
0627c35411
Merge pull request #93781 from kisieland/allow-to-switch-off-logrotate 
Disable log rotation of kubernetes and pod logs
 2020-09-10 16:10:14 -07:00
Kubernetes Prow Robot
0fd10997df
Merge pull request #94669 from vteratipally/revert-94634-master 
Revert "Switch cos version to M85"
 2020-09-10 10:46:17 -07:00
jay vyas
c6a4a87ff2 pillar_dns_server remove change so as not to break tooling in the near term in the kubernetes/dns repo 2020-09-10 13:04:04 -04:00
Jing Xu
555c8dbd1b Update csi-proxy to use beta version 
This PR update csi-proxy version, remove diskutil.exe and set up log
file
 2020-09-09 18:43:39 -07:00
Kubernetes Prow Robot
058b4d60a3
Merge pull request #94241 from lmm/calico-v3.15 
Update Calico to v3.15.2
 2020-09-09 17:59:44 -07:00
vteratipally
244718a9eb
Revert "Switch cos version to M85" 2020-09-09 16:52:05 -07:00
Kubernetes Prow Robot
47c450776f
Merge pull request #94634 from vteratipally/master 
Switch cos version to M85
 2020-09-09 07:33:52 -07:00
Kubernetes Prow Robot
a42dde2e97
Merge pull request #91568 from ialidzhikov/enh/cpva 
Update Calico cpva to v0.8.3
 2020-09-08 19:17:52 -07:00
varsha teratipally
34467c27f9 Switch cos version to M85 2020-09-08 23:06:19 +00:00
Matt Matejczyk
67f9d69eaf Revert "fix cluster/log-dump/log-dump.sh shellcheck failures" 
This reverts commit 742701622a.

It broke log dumping, see https://github.com/kubernetes/kubernetes/pull/88349#issuecomment-688385378
 2020-09-07 17:13:33 +02:00
Kubernetes Prow Robot
8da7c92a2f
Merge pull request #93975 from avr1254/master 
Removed broken link to Analytics
 2020-09-03 06:16:09 -07:00
Daniel Gutowski
adf7ed4241 Allow to disable logrotation of kubernetes and pod logs 
Make logrotate disabled by default
 2020-09-03 11:21:44 +00:00
Joakim Roubert
36d056a29b Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch adds whitespace handling for the $file variable(s).

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-09-03 12:02:50 +02:00
Joakim Roubert
3f3958deea Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch cleans up the use of arithmetic shell functionality.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-09-03 11:34:03 +02:00
Joakim Roubert
e773c5d19b Fix some shellcheck warnings/errors in cluster/gce/util.sh 
This patch removes superfluous use of cat.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-09-03 09:07:06 +02:00
Kubernetes Prow Robot
8aaa7515e5
Merge pull request #94374 from jingxu97/Aug/csiproxyservice 
Start CSI proxy as service
 2020-09-02 18:21:40 -07:00
Jing Xu
28ab3488b6 Start CSI proxy as service 
Now CSI proxy can support starting as service. Update node startup
script to create and start it as service
 2020-09-02 13:28:09 -07:00
Kubernetes Prow Robot
80ada96466
Merge pull request #88349 from BenTheElder/shell-dump 
fix cluster/log-dump/log-dump.sh shellcheck failures
 2020-09-02 09:03:07 -07:00
Shihang Zhang
38f040c0a8 bind metadata proxy to 0.0.0.0 2020-09-01 18:34:02 -07:00
Kubernetes Prow Robot
b49724d5fc
Merge pull request #94287 from jingyih/update_etcd_server_3p4p13 
Update default etcd server to 3.4.13
 2020-09-01 15:35:20 -07:00
Stephen Augustus
e59d9f372d Update CNI plugins to v0.8.7 
ref: https://github.com/containernetworking/plugins/releases/tag/v0.8.7

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-08-31 09:01:07 -04:00
jay vyas
1693c111be Getting rid of the Salt DNS replacements, addded / back. 2020-08-30 09:11:27 +00:00
Kubernetes Prow Robot
f65f868aa0
Merge pull request #94294 from millermatt/patch-1 
Remove duplicate nodeSelector
 2020-08-29 15:44:49 -07:00
Julie Qi
16f85883c4 Override hostname with instance name 2020-08-28 18:03:40 -07:00
Kubernetes Prow Robot
b440ecc315
Merge pull request #93095 from pjbgf/migrate-seccomp-usage-to-ga 
Update yaml files to use seccomp GA syntax
 2020-08-28 12:35:49 -07:00
Kubernetes Prow Robot
b02b84870c
Merge pull request #94307 from xmudrii/update-cri-tools 
Update cri-tools to v1.19.0
 2020-08-28 10:40:03 -07:00
Kubernetes Prow Robot
a9d1482710
Merge pull request #93311 from logicalhan/monitoring-role 
Add bootstrap policy for monitoring endpoints
 2020-08-28 06:36:52 -07:00
Marko Mudrinić
084bc9db43
Update cri-tools to v1.19.0 2020-08-28 15:34:42 +02:00
jingyih
c96b93fbd4 Update default etcd server to 3.4.13 2020-08-28 21:19:24 +08:00
Benjamin Elder
742701622a fix cluster/log-dump/log-dump.sh shellcheck failures 2020-08-28 00:35:11 -07:00
Kubernetes Prow Robot
2ded1e0c59
Merge pull request #92990 from nikhita/cleanup-owners-cluster-addons 
cluster/addons/metadata-proxy: cleanup inactive members from OWNERS
 2020-08-27 22:32:53 -07:00
Matt Miller
908823dc80
Remove duplicate nodeSelector 
Make the yaml valid.
 2020-08-28 00:02:35 -05:00
Kubernetes Prow Robot
fd20de89d9
Merge pull request #90433 from joakimr-axis/joakimr-axis_configure-helper.sh 
Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh
 2020-08-27 19:05:47 -07:00
Kubernetes Prow Robot
2e59a17dc1
Merge pull request #92288 from zhijianli88/cleanup-tempfiles 
Cleanup tempfiles
 2020-08-27 17:56:54 -07:00
Kubernetes Prow Robot
1d04741aae
Merge pull request #93471 from lemonli/node-local-dns-cache 
nodelocaldns.yaml: remove force_tcp option which used for external dn…
 2020-08-27 16:05:57 -07:00
Kubernetes Prow Robot
39cf26f4a4
Merge pull request #93849 from nikhita/cleanup-dashboard-owners 
cluster/addons/dashboard: remove inactive members from OWNERS
 2020-08-27 07:43:53 -07:00
Kubernetes Prow Robot
f16da811eb
Merge pull request #94260 from jingyih/update_etcd_makefile_3p4p13 
Update etcd makefile to build v3.4.13 image
 2020-08-27 06:42:58 -07:00
Kubernetes Prow Robot
39af44718e
Merge pull request #93909 from msau42/update-snapshot 
Update snapshot controller to use k8s.gcr.io
 2020-08-27 04:47:57 -07:00
Kubernetes Prow Robot
2b4c03b6ae
Merge pull request #94052 from jeremyje/windoc 
Simplify and de-lint GCE Windows kube-up docs.
 2020-08-26 22:15:19 -07:00
jingyih
45318e8190 Update etcd makefile to build 3.4.13 image 2020-08-27 03:33:51 +08:00
Laurence Man
7848248dbf Update Calico to v3.15.2 2020-08-26 02:52:06 +00:00
Spencer Hance
b13898d6e9 Add rbac patch permissions for system:controller:glbc ingresses/status 2020-08-20 20:34:23 -07:00
Jeremy Edwards
9a315cc2ec Simplify and de-lint GCE Windows kube-up docs. 2020-08-17 10:23:39 -07:00
Kubernetes Prow Robot
529c13471b
Merge pull request #93789 from jingxu97/Aug/csiproxy 
Add test cluster check when starting csi proxy
 2020-08-14 19:50:18 -07:00
Arjun Ramachandrula
dcc1ab176d Removed broken link to Analytics 2020-08-13 16:03:37 -04:00
Paulo Gomes
8f8f1bad72
Update yaml files to use seccomp GA syntax 2020-08-13 08:45:36 +01:00
Stephen Augustus
21863237a7 cluster/images/etcd: Build etcd@3.4.9-3 using debian-base@v2.1.3 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-08-11 23:20:06 -04:00
Michelle Au
8fce14a9e9 Update snapshot controller to use k8s.gcr.io 
Change-Id: I30005efec519840142bc7151aeaa543912a2f84b
 2020-08-11 18:34:24 -07:00
Nikhita Raghunath
8cb10ca415 cluster/addons/dashboard: remove inactive members from OWNERS 
As a part of cleaning up inactive members (who haven't been active since
beginning of 2019) from OWNERS files, this commit removes konryd and
cheld from the list of reviewers.
 2020-08-10 15:13:28 +05:30
Jing Xu
116465bb04 Add test cluster check when starting csi proxy 
Add the check for test cluster when starting csi proxy
 2020-08-07 14:46:38 -07:00
Manjunath A Kumatagi
f48cdfb9b9 Add missing ppc64le architecture in the get-kube* scripts 2020-08-07 11:14:09 +05:30
Kubernetes Prow Robot
aa0632208e
Merge pull request #93577 from vivekbagade/master 
Update Cluster Autoscaler version to 1.19.0
 2020-08-05 06:42:28 -07:00
Stephen Augustus
876a6c85ed cluster/images/etcd: Build etcd@3.4.9-2 using debian-base@v2.1.2 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-08-04 01:16:57 -04:00
Stephen Augustus
87e13f7665 build: Update to debian-base@v2.1.0 and debian-iptables@v12.1.1 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-08-04 01:15:24 -04:00
Vivek Bagade
2e4a329b35 Update Cluster Autoscaler version to 1.19.0 2020-07-31 14:13:22 +02:00
lemonli
97f50fb0b5 nodelocaldns.yaml: remove force_tcp option which used for external dns query 2020-07-27 18:29:29 +08:00
Jordan Liggitt
247fcdfda5 [go1.15] go.mod: update to go1.15 2020-07-25 16:45:02 -04:00
Jordan Liggitt
f33dc28094 generated: hack/update-hack-tools.sh && hack/update-vendor.sh 2020-07-25 16:45:02 -04:00
Kubernetes Prow Robot
7348ab957c
Merge pull request #93356 from justaugustus/vdf 
[VDF] Normalize container image references to k8s.gcr.io
 2020-07-25 02:58:17 -07:00
Han Kang
f57611970c add bootstrap policy for monitoring roles 
(we enable metrics and pprof by default, but that doesn't mean
 we should have full cluster-admin access to use those endpoints)

Change-Id: I20cf1a0c817ffe3b7fb8e5d3967f804dc063ab03

remove pprof but add read access to detailed health checks

Change-Id: I96c0997be2a538aa8c689dea25026bba638d6e7d

add base health check endpoints and remove the todo for flowcontrol, as there is an existing ticket

Change-Id: I8a7d6debeaf91e06d8ace3cb2bd04d71ef3e68a9

drop blank line

Change-Id: I691e72e9dee3cf7276c725a12207d64db88f4651
 2020-07-24 09:21:55 -07:00
Nikhita Raghunath
3a74f461a2 Revert "Merge pull request #93160 from logicalhan/triage-instrumentation" 
This reverts commit 1ed2cf1895, reversing
changes made to 04ecdb9eb6.
 2020-07-24 18:09:07 +05:30
Nikhita Raghunath
c00dae0607 Revert "Merge pull request #93156 from logicalhan/triage-api-machinery" 
This reverts commit 32438cf269, reversing
changes made to bb6a6aa391.
 2020-07-24 13:01:02 +05:30
Kubernetes Prow Robot
1ed2cf1895
Merge pull request #93160 from logicalhan/triage-instrumentation 
auto triage sig-instrumentation tagged PRs
 2020-07-23 11:19:26 -07:00
Stephen Augustus
99dd7570eb [VDF] Remove references to gcr.io/google-containers 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-07-22 16:10:12 -04:00
Stephen Augustus
90c223fa5c [VDF] Remove references to us.gcr.io/k8s-artifacts-prod 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-07-22 16:08:30 -04:00
Kubernetes Prow Robot
32438cf269
Merge pull request #93156 from logicalhan/triage-api-machinery 
automatically assign triage labels to api-machinery tagged PRs
 2020-07-21 19:52:34 -07:00
Jared Burns
402eea882d Update fluent-es-image components for better ES 7.x compatibility 2020-07-21 08:27:04 -07:00
Kubernetes Prow Robot
4804fbe4c1
Merge pull request #93121 from liggitt/resource-quota 
kube-up: limit critical pods to kube-system by default
 2020-07-19 00:00:50 -07:00
Kubernetes Prow Robot
f9ad7db9a6
Merge pull request #92349 from jingyih/update_etcd_server_3p4p9 
Update default etcd server to 3.4.9
 2020-07-17 07:53:01 -07:00
Jordan Liggitt
3b323b2ef0 Limit critical pods to kube-system by default 2020-07-17 09:52:19 -04:00
Han Kang
f3c02d7221 auto triage sig-instrumentation tagged PRs 
Change-Id: Ibae7373fb197485aeb222f1455515178cc3b4d13
 2020-07-16 13:48:25 -07:00
Han Kang
9129dbc98b automatically assign triage labels to api-machinery tagged PRs 
Change-Id: Ifcc8a85d190d6370423af27f6e6c4c90b8472981
 2020-07-16 13:13:59 -07:00
Kubernetes Prow Robot
03509f3087
Merge pull request #92974 from Ghazgkull/patch-1 
Update to version 2.5.1 of the fluent-plugin-kubernetes_metadata_filter
 2020-07-16 02:03:41 -07:00
Kubernetes Prow Robot
2003246285
Merge pull request #92955 from mm4tt/addon-resizer 
Bump addon-resizer for metrics-server to 1.8.11
 2020-07-12 07:00:24 -07:00
Kubernetes Prow Robot
a2978e3ddb
Merge pull request #92718 from rajansandeep/kube-up-coredns1.7.0 
[kube-up]: Bump CoreDNS to v1.7.0
 2020-07-12 01:46:01 -07:00
Nikhita Raghunath
9c87dfb0fe cluster/addons/metadata-proxy: cleanup inactive members from OWNERS 2020-07-11 21:03:04 +05:30
Jared Burns
15bf1b1630
Bump image version 2020-07-11 08:12:00 -07:00
Jared Burns
29cdaad79e
Update to version 2.5.1 of the fluent-plugin-kubernetes_metadata_filter 2020-07-10 13:31:46 -07:00
Mateusz Matejczyk
e07f2a6b1d Bump addon-resizer for metrics-server to 1.8.11 
The current version, 1.8.10, is vulnerable to https://github.com/kubernetes/autoscaler/issues/3294
 2020-07-10 08:34:55 +02:00
jingyih
e9bf1c3c90 Update default etcd server to 3.4.9 2020-07-08 14:16:40 +08:00
Jeff Grafton
089a1af421 Move ixdy to emeritus 2020-07-06 10:39:56 -07:00
Kubernetes Prow Robot
c430183fff
Merge pull request #91854 from bsdnet/gci 
Update the COS E2E image policy
 2020-07-02 06:41:15 -07:00
Kubernetes Prow Robot
dbf6c456a2
Merge pull request #91835 from jingxu97/June/csi 
Add csi-proxy installation into node setup script
 2020-07-02 06:41:00 -07:00
Kubernetes Prow Robot
eee27e8f44
Merge pull request #92652 from rajansandeep/podaffinity 
Add back anti-affinity to CoreDNS pods
 2020-07-02 04:17:29 -07:00
Kubernetes Prow Robot
adf2cd40ae
Merge pull request #92668 from michaelmdresser/fix-kubeup-acls-mb 
Fix an unnecessary failure during kube-up during bucket ACL setting and make bucket in the configured project
 2020-07-01 23:14:27 -07:00
Kubernetes Prow Robot
94e1c54735
Merge pull request #92655 from BenTheElder/cleanup-some-owners 
Cleanup some owners
 2020-07-01 23:14:08 -07:00
Kubernetes Prow Robot
61342e398e
Merge pull request #92562 from bsdnet/newbranch 
Fix sig-node-containerd/containerd-e2e-gci
 2020-07-01 23:13:38 -07:00
Jing Xu
57d0dc540d Add csi-proxy installation into node setup script 
This PR follows the same step to install and start csi-proxy as kubelet
binary
 2020-07-01 15:08:29 -07:00
Sandeep Rajan
adffc7fcca kube-up: update coredns to v1.7.0 2020-07-01 14:58:29 -04:00
Roy Yang
f86b720cf6 Update the COS E2E image policy 
Signed-off-by: Roy Yang <royyang@google.com>
 2020-06-30 15:24:35 -07:00
Michael Dresser
902a4db5fc Fixes an unnecessary failure during kube-up 
Also corrects bucket creation to use the project env var
 2020-06-30 21:05:55 +00:00
Sandeep Rajan
12bced9bfb add back anti-affinity 2020-06-30 11:29:29 -04:00
Kubernetes Prow Robot
908847c01e
Merge pull request #91526 from maciaszczykm/dashboard-v2.0.1 
Bump Dashboard to v2.0.1
 2020-06-30 05:28:06 -07:00
Kubernetes Prow Robot
6257f83f88
Merge pull request #92569 from dims/tolerate-slightly-different-containerd-urls 
Tolerate slightly different containerd urls
 2020-06-29 18:35:08 -07:00
Kubernetes Prow Robot
de491f11b1
Merge pull request #92444 from dims/additional-check-for-containerd-for-better-loading-images 
Additional test for loading images with containerd
 2020-06-29 18:34:40 -07:00
Joakim Roubert
0c48e0e1bb Find what fails pull-kubernetes-e2e-gce-ubuntu-containerd 
Change-Id: I7919d03926880cd9c93c61a07ada645ebfe32a89
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 09:43:37 +02:00
Joakim Roubert
b529485f65 Review update 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:58 +02:00
Joakim Roubert
605be2216b Sync with master 
Add fixes for newly added code.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:58 +02:00
Joakim Roubert
196ae34f9b Remove previously added '' no longer needed 
Adapt to changes on master since the first commit here.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
a20a005986 No quotes needed/wanted for CURL_RETRY_CONNREFUSED 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
1b9e9c6fe6 Add fix for run-kube-controller-manager-as-non-root 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
11f6d43747 Updates after review 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
4abf7da53e Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
3e211386c1 Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
d66456fe01 Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
6e8504003b Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
0c899b2bc2 Mitigate newly added shellcheck issues 
Issues not present when the original patch was created have now also
been fixed.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
826274c867 Updates after code review 
Add double quotes at assignments as requested by phenixblue.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:55 +02:00
Joakim Roubert
3fb0d1c15d Update after code review 
Simplified local variable declaration as suggested by phenixblue.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:55 +02:00
Joakim Roubert
1f9704c713 Code review update 
Change-Id: I384a73efe995c529fb4b3636cb9639eafb90787f
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-06-29 08:43:55 +02:00
Joakim Roubert
80a8566a8c Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh 
Change-Id: Ic8fca2509a7cb07f4170eaf25a878036d18ba51c
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-06-29 08:43:55 +02:00
Davanum Srinivas
a653c21479
Tolerate slightly different containerd urls 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-27 06:41:19 -04:00
Benjamin Elder
7dfe160c0c sort cluster/ OWNERS 2020-06-26 21:52:29 -07:00
Benjamin Elder
62eb860ddf spiffxp should be a cluster reviewer 2020-06-26 21:51:40 -07:00
Benjamin Elder
839223f6c8 Katharine is no longer active 2020-06-26 21:50:57 -07:00
Roy Yang
1b13308edb Fix sig-node-containerd/containerd-e2e-gci 
Signed-off-by: Roy Yang <royyang@google.com>
 2020-06-26 18:38:27 -07:00
Jordan Liggitt
a36aa9c31e Stop enabling alpha runtimeclass API 2020-06-25 20:29:11 -04:00
Kubernetes Prow Robot
a8abba5a17
Merge pull request #92498 from wojtek-t/bump_etcd_version 
Bump etcd revision after changes to migrate script
 2020-06-25 09:46:18 -07:00
Kubernetes Prow Robot
4a91ecb976
Merge pull request #91863 from knabben/kubelet-memcg-notification 
Moving Kubelet kernel-memgc-notification to configuration file
 2020-06-25 00:20:37 -07:00
wojtekt
c0e930f176 Bump etcd revision after changes to migrate script 2020-06-25 07:56:29 +02:00
Kubernetes Prow Robot
dc0122ca6a
Merge pull request #92286 from wojtek-t/migrate_if_needed_golang 
Merge migrate-if-needed etcd bash script with golang binary
 2020-06-24 10:32:27 -07:00
Amim Knabben
c39cf28ed3 Moving Kubelet kernel-memgc-notification to configuration file 2020-06-24 06:44:00 -04:00
Kubernetes Prow Robot
ca372d3ca5
Merge pull request #92422 from joakimr-axis/joakimr-axis_wait-until-stable 
util.sh: Replace wait-until-stable with wait-until --stable
 2020-06-24 02:00:13 -07:00
Kubernetes Prow Robot
c3a6a66592
Merge pull request #92395 from sambdavidson/vip-sni-fix 
Added missing apiserver config var.
 2020-06-24 01:59:54 -07:00
Davanum Srinivas
2d7c47d2be
Additional test for loading images with containerd 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-23 18:21:59 -04:00
Jonathan Sun
2f7874bd4b Install firewall logging rules to log metadata server access for unauthorized components. 2020-06-23 11:22:05 -07:00
Joakim Roubert
db9d6d0bff util.sh: Replace wait-until-stable with wait-until --stable 
This change follows the recommendation from the CI logs:

"WARNING: `gcloud compute instance-groups managed wait-until-stable` is
deprecated. Please use `gcloud compute instance-groups managed
wait-until --stable` instead."

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-23 13:30:52 +02:00
Li Zhijian
02eaa4f354 cleanup tempfiles in unit test 
Signed-off-by: Li Zhijian <lizhijian@cn.fujitsu.com>
 2020-06-23 11:47:18 +08:00
Samuel Davidson
31ae200ebf fix for missing kube-env var in SNI config 2020-06-22 13:33:42 -07:00
wojtekt
2a7978e2be Merge migrate-if-needed etcd bash script 2020-06-22 20:45:58 +02:00
Kubernetes Prow Robot
d140769e4d
Merge pull request #92344 from jherrera123/restore-docker-focal-version 
Restore docker focal version in gci nodes
 2020-06-21 15:28:39 -07:00
Kubernetes Prow Robot
4c8207dc1e
Merge pull request #92314 from dims/set-better-default-for-loading-images-2 
Set better default commands for loading images - take 2
 2020-06-21 05:12:39 -07:00
Kubernetes Prow Robot
c6011f2d54
Merge pull request #91390 from vinayakankugoyal/nonroot 
Updating kube-controller-manager to run as non-root.
 2020-06-21 00:56:38 -07:00
Jesus Herrera
9714f3ac86 Restore docker focal version 2020-06-20 11:16:25 -04:00
Kubernetes Prow Robot
219c856ce2
Merge pull request #91555 from daixiang0/scr 
*.sh: cleanup all white noise
 2020-06-20 05:26:53 -07:00
Kubernetes Prow Robot
2d1c417934
Merge pull request #92258 from SidneyShen/node-boot-nvme-disk-fix 
Add logic to check if local NVMe SSDs in node boot-up script
 2020-06-19 11:38:14 -07:00
Kubernetes Prow Robot
4369eb3155
Merge pull request #92083 from alculquicondor/sched_config_script 
Support kube-scheduler component-config in GCE init scripts
 2020-06-19 11:36:53 -07:00
Kubernetes Prow Robot
87e6ec493c
Merge pull request #90223 from caesarxuchao/remove-unused-var 
Remove unused network proxy variables and functions
 2020-06-19 11:36:14 -07:00
Davanum Srinivas
60bd17a61f
Set better default commands for loading images - take 2 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-19 14:25:12 -04:00
Kubernetes Prow Robot
bfa6eb1772
Merge pull request #91964 from wenjiaswe/etcdNameComment 
Add a comment to keep etcd name in sync and change `hostname` to `HOSTNAME`
 2020-06-18 19:05:40 -07:00
Wenjia Zhang
0da9c3e379 Add a comment to keep etcd name in sync and change hostname to HOSTNAME 2020-06-18 11:11:12 -07:00
Kubernetes Prow Robot
6bb668c3c4
Merge pull request #92204 from dims/check-for-either-docker-or-containerd-getting-active 
Check for either docker or containerd getting active
 2020-06-18 06:03:21 -07:00
Kubernetes Prow Robot
c83c4d5453
Merge pull request #92184 from dims/set-better-default-for-loading-images 
Set better default commands for loading images
 2020-06-18 06:02:52 -07:00
Xinning Shen
27658f8241 Add logic to check if local NVMe SSDs in node boot-up script 
Current logic would assume all the NVMe disks are data disks and
applicable for reformat and mount. This will cause the issue when
booting disk is also NVMe disk, which will fail the node boot up. This
change will check if any additional NVMe disks are required/specified
and skip the reformat step otherwise.
 2020-06-18 08:48:43 +00:00
Chao Xu
06d034f3c8 remove unnecessary certs generation 2020-06-16 23:47:10 -07:00
Kubernetes Prow Robot
1f629ca4a2
Merge pull request #92150 from sambdavidson/sniflagfix 
Fix to configure-kubeapiserver.sh error.
 2020-06-16 19:24:12 -07:00
Kubernetes Prow Robot
78774eb5ee
Merge pull request #92078 from jingyih/update_etcd_makefile_for_3p4p9 
Update etcd makefile to build 3.4.9 image
 2020-06-16 19:23:43 -07:00
Kubernetes Prow Robot
51aac92f69
Merge pull request #91922 from Jefftree/netproxy-009 
Upgrade apiserver-network-proxy to v0.0.9
 2020-06-16 19:22:39 -07:00
Davanum Srinivas
01183e51f0
Check for either Docker or Containerd getting active for e2e_node tests 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-16 20:08:01 -04:00
Davanum Srinivas
fbb4bb0003
Set better default commands for loading images 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-16 07:47:02 -04:00
Kubernetes Prow Robot
0a1e58913c
Merge pull request #92123 from YangLu1031/improveStackdriverInstallation 
Stabilize StackdriverLogging installation
 2020-06-16 04:04:05 -07:00