Commit Graph

10107 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
3534e31ade
Merge pull request #98834 from cpanato/go1158
[go1.15] Update to go1.15.8
2021-02-06 15:35:11 -08:00
Carlos Panato
8b5bf8ef91
[go1.15] Update to go1.15.8
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-02-06 15:55:39 +01:00
Kubernetes Prow Robot
96a98e50af
Merge pull request #98790 from jkh52/master
Bump konnectivity-client to v0.0.15
2021-02-05 16:33:11 -08:00
Kubernetes Prow Robot
ce1ee6461a
Merge pull request #98773 from mtaufen/said-fqdn
Use FQDN for SERVICEACCOUNT_ISSUER in tests
2021-02-05 05:40:52 -08:00
pacoxu
d9b63439d2 update gce cluster windows infra image 2021-02-05 21:39:48 +08:00
Ricardo Pchevuzinske Katz
25f3cf5550 Remove extensions v1beta1 from addon manager and kubectl prune 2021-02-05 09:38:28 -03:00
Claudiu Belu
41cdd40a2e images: Removes containers after they've run
Not all instances of docker run has the --rm argument, which means that they'll
persist after they've finished. This can cause storage to remain occupied needlessly.
2021-02-05 10:07:26 +00:00
Joseph Anttila Hall
6812a9c610 Bump network proxy images to v0.0.15 2021-02-05 00:35:33 -08:00
Michelle Tandya
904f0b628b Disable sample submission and MAPS Reporting from Windows Defender
Include logging when setting windows defender preferences

Log Window Defender preferences to show configuration changes

Move Defender configuration to be a part of Set-PrerequisiteOptions
2021-02-04 23:02:09 +00:00
Michael Taufen
8418fd9b15 Use FQDN for SERVICEACCOUNT_ISSUER in tests 2021-02-04 10:40:40 -08:00
hasheddan
20679f31d1
Build conformance image with DOCKER_CLI_EXPERIMENTAL enabled
In order to use buildx with docker versions prior to v20.10 experimental
features must be enabled. Setting at build time ensures that they are
in case they have not already been at the environment scope.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2021-02-01 13:17:28 -06:00
Joakim Roubert
ba7e23620a Fix some shellcheck warnings/errors in cluster/gce/util.sh
This patch uses shell internals instead of sed and awk where suitable
and also uses lower/upper classes for tr instead of a-z and A-Z.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2021-01-30 09:32:07 +01:00
Sascha Grunert
e9fbdff7c6
Switch to docker buildx for conformance image
The conformance test image previously used the `FROM --platform …`
syntax which is something we (SIG Release) consider as deprecated.

Therefore we now switch to `docker buildx`, which can specify the
`--platform` directly.

Signed-off-by: Sascha Grunert <mail@saschagrunert.de>
2021-01-29 11:36:52 +01:00
Kubernetes Prow Robot
b77c886043
Merge pull request #94456 from joakimr-axis/joakimr-axis_util.sh_shellcheckdisables
Fix some shellcheck warnings/errors in cluster/gce/util.sh
2021-01-28 22:49:40 -08:00
Sascha Grunert
1acaf32cff
Bump debian-base to v1.4.0 and debian-iptables to v1.5.0
Both images are now sane multi-architecture images and should fix the
kube-proxy container image in the same way.

Signed-off-by: Sascha Grunert <mail@saschagrunert.de>
2021-01-28 13:47:09 +01:00
Peter Hornyack
8211582e2d Update e2e test instructions in GCE Windows README 2021-01-27 11:03:47 -08:00
Carlos Panato
e76fc62258
[go1.15] Update to go1.15.7
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-01-27 11:43:01 +01:00
Kubernetes Prow Robot
de4d771d3b
Merge pull request #97934 from mattcary/loopback-upstream
Disallow local loopback for volume hosts
2021-01-27 01:13:40 -08:00
Matthew Cary
9a7dcd36c1 Disallow local loopback for volume hosts
Change-Id: Ic356c3f859057153cfad97327f1938792a1a512c
2021-01-26 17:12:51 -08:00
pacoxu
6a795f5f51 update etcd revision to 2 for next build 3.4.13-2 2021-01-26 15:29:26 +08:00
pacoxu
f76be691a2 update debian-base to buster-v1.3.0 for CVEs
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-01-26 14:10:20 +08:00
Kubernetes Prow Robot
1a67280508
Merge pull request #98037 from vinayakankugoyal/kube-controller-manager-crp
Update configure-helper.sh to early exit from start-kube-controller-m…
2021-01-25 12:38:59 -08:00
André Bauer
fffe6275a5 updated fluentd and all plugins
Signed-off-by: André Bauer <monotek23@gmail.com>
2021-01-24 14:45:57 +01:00
Kubernetes Prow Robot
7b3f0cd5ca
Merge pull request #98286 from jeremyje/win20h2
Fix GCE Windows Smoke Test and Support 2004 and 20H2.
2021-01-22 12:21:39 -08:00
Kubernetes Prow Robot
1bb0108574
Merge pull request #98284 from pjh/install-docker-on-node-start
GCE Windows: add 20H2; install docker when nodes are started
2021-01-22 11:31:26 -08:00
Peter Hornyack
21592c23e1 GCE Windows: add 20H2; install docker when nodes are started 2021-01-22 09:58:22 -08:00
Jeremy Edwards
7575611fd5 Fix GCE Windows Smoke Test and Support 2004 and 20H2. 2021-01-22 01:14:50 +00:00
Peter Hornyack
313ac4751c Improve the Windows GCE README 2021-01-21 15:42:37 -08:00
Vinayak Goyal
31807032e0 Update configure-helper.sh to early exit from start-kube-controller-manager if kube-controller-manager is deployed through CRP. 2021-01-20 16:22:46 -08:00
Kubernetes Prow Robot
1bfa1d4619
Merge pull request #98055 from qingsenLi/20210114
fix typo and decs in apiserver_etcd_test.go
2021-01-19 18:49:58 -08:00
Kubernetes Prow Robot
176c4c7916
Merge pull request #96823 from hasheddan/cleanup-cos-doc
Cleanup GCI / COS README.md
2021-01-19 17:07:59 -08:00
Peter Hornyack
edd58b1a4e Repair pigz URL
New Windows nodes are failing to start with:

windows-startup-script-ps1: Failed to download file from https://storage.googleapis.com/gke-release/winnode/pigz/prod/gke_windows/pigz/release/5/20201104-134221/pigz-$PIGZ_VERSION.zip.

With this fix, the nodes start successfully.
2021-01-14 16:12:05 -08:00
Kubernetes Prow Robot
9da11e294f
Merge pull request #97868 from mtaufen/pki-tmpfs
Mount /var/lib/kubelet/pki on tmpfs
2021-01-14 10:47:04 -08:00
10177505
deb509a068 fix typo and decs 2021-01-14 16:55:45 +08:00
Kubernetes Prow Robot
5e7d62ecfc
Merge pull request #97967 from rajibmitra/master
Update cri-tools to v1.20.0
2021-01-13 13:27:15 -08:00
hasheddan
baccf02ab0
Switch to debian:stable-slim for conformance image base
The currently used debian:stretch-slim does not support s390x arch in
its multi-arch build. We opt to use stable-slim instead of pulling in
different base images for each platform build.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2021-01-13 08:49:27 -06:00
hasheddan
bc262d6e85
Specify BASEIMAGE platform for conformance image
Updates conformance image Dockerfile to specify platform for BASEIMAGE
and sets correct ARCH in Makefile.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2021-01-13 08:46:01 -06:00
rajibmitra
69aae7aa6c Update cri-tools to v1.20.0
Signed-off-by: rajibmitra <rajib.jolite@gmail.com>
2021-01-12 19:02:51 +05:30
Michael Taufen
9f9e235b9d Mount /var/lib/kubelet/pki on tmpfs
This helps avoid some rare instances of corrupt cert files
that cause Kubelet to crash-loop after node reboots, e.g.
if Kubelet opens the file during the shutdown but is unable
to write it.
2021-01-08 18:04:35 -08:00
Kubernetes Prow Robot
8b5aeeedb4
Merge pull request #97742 from benhxy/apiserver-cipher
Configure --tls-cipher-suites on kube-apiserver
2021-01-08 13:44:29 -08:00
Ben Hu
d4e75baae1 Fix comment on comment 2021-01-08 20:24:59 +00:00
Jian Zeng
8c1971e17c chore(gce): pass auth flags to KCM and KS
Pass flags `--authentication-kubeconfig` and
`--authorization-kubeconfig` to controller-manager and scheduler,
so that we could grab metrics from their secure ports in tests.
2021-01-06 12:56:39 +08:00
Kubernetes Prow Robot
97a3e9e7e8
Merge pull request #97621 from vbannai/bug-fix
Bug fix
2021-01-05 17:10:19 -08:00
Ben Hu
624b214481 Configure --tls-cipher-suites on kube-apiserver. 2021-01-06 00:31:39 +00:00
Kubernetes Prow Robot
83a87775b0
Merge pull request #97536 from heqg/unused01
Remove duplicate nodeSelector for kube-dns
2021-01-05 11:46:36 -08:00
Kubernetes Prow Robot
506156842c
Merge pull request #97666 from heqg/duplicate-nodeSelector
Remove duplicate nodeSelector for kube-dns in kube-dns.yaml.base
2021-01-04 17:05:58 -08:00
Kubernetes Prow Robot
5e405fdcff
Merge pull request #96276 from ruiwen-zhao/device_plugin_path
Update nvidia-gpu-device-plugin addon image path
2021-01-04 09:33:57 -08:00
he.qingguo
89c1ab4025 Remove duplicate nodeSelector for kube-dns in kube-dns.yaml.base
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
2021-01-04 11:31:30 +08:00
Vinay Bannai
e74ef5301a Updating the version to the recent tag. 2020-12-30 13:13:55 -08:00
Vinay Bannai
a15bc5954c The l7-default-backend/defult-http-backend now points to a new version of the 404-server-with-metrics.
Uses new container registry: gcr.io/google-container with the new version for the ingress-gce-404-server-with-metrics-amd64:v1.10.11
2020-12-30 13:13:55 -08:00
he.qingguo
da509d2ea2 Remove duplicate nodeSelector for kube-dns
Signed-off-by: he.qingguo <he.qingguo@zte.com.cn>
2020-12-28 11:20:45 +08:00
Kubernetes Prow Robot
0a839c6c3b
Merge pull request #97447 from amwat/legacylogdump
Fix incorrect literal quotes in logdump path
2020-12-24 21:46:27 -08:00
Amit Watve
c954bc61a5 fix literal quotes in logdump path. 2020-12-24 00:23:32 -08:00
Sergey Kanzhelev
d78db9f161 configure docker on containerd nodes so it wouldn't reserver 172.17 subnet 2020-12-23 18:49:57 +00:00
David Xia
0756e54dfc
Fix typo in comment 2020-12-21 20:02:20 -05:00
Antoni Zawodny
58ea69f094 Make log-dump's deprecation note up-to-date 2020-12-15 09:58:09 +01:00
Ben Hu
9581c40887 Revert "Use host IP instead of localhost for control plane component kubeconfig files."
This reverts commit 49afcfa5f2.
2020-12-11 22:36:39 +00:00
Kubernetes Prow Robot
0e2bf1e49f
Merge pull request #96470 from jeremyje/gkewinpigz
Install pigz for GCE Windows Nodes.
2020-12-11 12:47:30 -08:00
Maciej Borsz
7f09d59215 Migrate etcd's livenessProbe to etcdctl endpoint health.
Change-Id: Ie19c844050c75e3d1c4b431d09ba0ac851c5317b
2020-12-11 12:43:02 +01:00
Kubernetes Prow Robot
ee8983705a
Merge pull request #96679 from stmcginnis/appspot-cleanup
Remove stale analytics links from docs
2020-12-10 23:17:22 -08:00
Jeremy Edwards
797ad961b8 Fix missing type error in Get-RemoteFile by loading System.Net.Http assembly. 2020-12-10 21:18:15 +00:00
Jeremy Edwards
3b8f32dd90 Install pigz for GCE Windows Nodes. 2020-12-09 06:38:59 +00:00
Kubernetes Prow Robot
fbc8ca6096
Merge pull request #97132 from prameshj/patch-5
Upgrade to nodecache 1.16.0 image
2020-12-08 22:02:00 -08:00
Kubernetes Prow Robot
cad9a8277d
Merge pull request #97127 from liggitt/revert-etcd-host-ip
Revert "iAdd host IP to etcd listen client URLs."
2020-12-08 22:01:52 -08:00
Kubernetes Prow Robot
7b4fc68f52
Merge pull request #97011 from towca/patch-5
Bump Cluster Autoscaler to v1.20.0
2020-12-08 21:06:25 -08:00
Kubernetes Prow Robot
c0b173f108
Merge pull request #96994 from jeremyje/gceowners
Add jeremyje to cluster/gce/OWNERS
2020-12-08 21:05:59 -08:00
Kubernetes Prow Robot
9b885eb0cb
Merge pull request #96969 from spencer-p/bump-kubectl
Bump kubectl in addon manager to 1.19
2020-12-08 21:05:18 -08:00
Kubernetes Prow Robot
d2e7abb153
Merge pull request #96839 from vinayakankugoyal/crp
Update configure-helper.sh to early exit from start-kube-scheduler if…
2020-12-08 20:03:51 -08:00
Kubernetes Prow Robot
d63a62d7bb
Merge pull request #96661 from jeremyje/fastboot
Significantly improve download artifact latencies on GCE Windows node boot.
2020-12-08 18:35:05 -08:00
Kubernetes Prow Robot
56d7f138de
Merge pull request #96622 from vinayakankugoyal/groupfix
If the file already exists we need to grant group read permissions ex…
2020-12-08 17:29:59 -08:00
prameshj
9ec84ee87c
Use nodecache 1.16.0 image with CoreDNS 1.7 2020-12-08 10:40:36 -08:00
Jordan Liggitt
8820dc4522 Revert "iAdd host IP to etcd listen client URLs."
This reverts commit 8b4e164a78.
2020-12-08 11:37:13 -05:00
Jeremy Edwards
90fa9de0dc Add jeremyje to cluster/gce/OWNERS 2020-12-04 23:47:36 +00:00
Neil Jerram
10eb1d4d6e Calico: set IP=autodetect so preempted nodes learn new IP
With preemptible nodes, a cluster node (with a given hostname) can
boot the first time with IP1, then be preempted and boot again with
different IP2.

With IP="", Calico will autodetect IP1 on first boot, but will not
perform autodetection on subsequent boots and so will not release IP1
and detect IP2 instead.

With IP=autodetect, Calico will perform autodetection on all boots,
which is what we want.
2020-12-03 10:26:31 +00:00
Kuba Tużnik
9efbd914f6
Bump Cluster Autoscaler to v1.20.0 2020-12-02 11:10:54 +01:00
Jeremy Edwards
155bda010a Significantly improve download artifact latencies on GCE Windows node boot. 2020-12-02 06:59:51 +00:00
Spencer Peterson
da684bcd6f Bump kubectl in addon manager to 1.19 2020-11-30 23:01:19 +00:00
Vinayak Goyal
18644cb1b2 Update configure-helper.sh to early exit from start-kube-scheduler if kube-scheduler is deployed through CRP. 2020-11-24 12:01:22 -08:00
Stephen Augustus
2407a70cc7 [go1.15] Update to go1.15.5
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-11-23 20:49:56 -05:00
hasheddan
1bf7de6239
Remove broken analytics tracking link
Removes embedded tracking pixel which appears to be broken.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2020-11-23 18:05:10 -06:00
hasheddan
b24f224ff2
Fix formatting in GCI / COS docs
Fixes a few formatting issues in GCI / COS README.md.

Signed-off-by: hasheddan <georgedanielmangum@gmail.com>
2020-11-23 18:01:30 -06:00
Kubernetes Prow Robot
b2ecd1b3a3
Merge pull request #96716 from tosi3k/bump-npd-to-v0.8.5
Bump node-problem-detector to v0.8.5
2020-11-21 06:33:33 -08:00
Antoni Zawodny
8f2dd3aaab Bump node-problem-detector to v0.8.5 2020-11-20 20:00:25 +01:00
Mike Danese
7fc57a207e gce: move iptables rule to mangle
This avoids a conflict with rules that calico installs. Also, acquire
the lock everywhere.
2020-11-18 11:28:03 -08:00
Sean McGinnis
be131457ef
Remove stale analytics links from docs
Many README files and other docs contained a link to a an appspot
tracking app that is no longer active. Following the links leads to an
error about Go 1.9 no longer being supported. Go 1.9 support was dropped
in appspot in 2019 and disabled June 2020.

This also resulted in a broken image link displaying when viewing these
files on GitHub. Since the app is no longer functioning, and since it
causes a potentially (but granted, minor) confusing error to display,
this just removes those links as I don't believe they are needed
anymore.

Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
2020-11-18 07:04:48 -06:00
Antoni Zawodny
7acd8b50c8 Add a deprecation note to k/k/cluster/log-dump directory 2020-11-17 13:21:27 +01:00
Joakim Roubert
f9ca218872 Fix some shellcheck warnings/errors in cluster/gce/util.sh
This patch adds shellcheck disables where we deliberately want to
have the current code that shellcheck triggers on.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-11-17 08:05:54 +01:00
vinayak goyal
c2ea6842a7 If the file already exists we need to grant group read permissions explicitly. 2020-11-16 22:59:30 +00:00
Casey Davenport
07002e41bb Update Calico to use a non-conflicting route table range 2020-11-16 09:54:02 -08:00
Kubernetes Prow Robot
84d15ca322
Merge pull request #93765 from jeremyje/restartsd
Configure StackdriverLogging Windows service to restart on failure.
2020-11-12 23:26:23 -08:00
Kubernetes Prow Robot
9a85031a25
Merge pull request #96027 from lizhuqi/fluentd-config-update
Add keep_time_key setting to fluentd configuration
2020-11-12 16:02:39 -08:00
Kubernetes Prow Robot
b0b7604f8f
Merge pull request #96469 from xing-yang/update_snapshot_crds_2
Update snapshot CRDs
2020-11-12 13:17:20 -08:00
Kubernetes Prow Robot
fd6bd36081
Merge pull request #96389 from Jefftree/kas-013
Bump network proxy to v0.0.14
2020-11-12 11:21:39 -08:00
Kubernetes Prow Robot
72a7f94bdd
Merge pull request #88412 from stafot/add_nodelocalcache_service
Add node-local-dns headless service
2020-11-12 11:17:08 -08:00
Jeremy Edwards
26cdcde3d5 Configure StackdriverLogging Windows service to restart on failure. 2020-11-11 21:04:21 -08:00
xing-yang
763a15e38b Update snapshot CRDs 2020-11-11 15:58:46 +00:00
Kubernetes Prow Robot
5d5ff49b9b
Merge pull request #96383 from xing-yang/update_snapshot_crds
Update snapshot CRDs to v1
2020-11-11 05:11:49 -08:00
Kubernetes Prow Robot
8b3da41e8f
Merge pull request #96388 from Jefftree/enable_konn_default
Set enable konnectivity service to true by default
2020-11-10 17:53:40 -08:00
Jefftree
58001e847d Bump kas to v0.0.14 2020-11-10 17:22:41 -08:00
Kubernetes Prow Robot
fe9fd060c9
Merge pull request #96237 from jingxu97/nov/konnect
Add nodeSelector for konnectivity daemonSet
2020-11-10 14:45:32 -08:00
Marcel Zięba
6e598a96ff Forbid creating clusters with more than 100 nodes without vpc-native 2020-11-10 15:58:25 +00:00
Jefftree
c8716d4672 Set enable konnectivity service to true by default 2020-11-09 15:34:35 -08:00
xing-yang
6acf5fab00 Update snapshot CRDs to v1 2020-11-09 22:01:35 +00:00
Jing Xu
d6e805b38c Add nodeSelector for konnectivity daemonSet
konnectivity agent daemonSet can only run on Linux node. Add node
selector to the yaml file

Change-Id: I3a4790bbfe95a39d9b668443d59dcaa72fb4cd0d
2020-11-07 23:12:31 -08:00
Kubernetes Prow Robot
d39562fd93
Merge pull request #95863 from RaunakShah/snap_e2e
Volume snapshot e2e test to validate PVC finalizer
2020-11-05 10:53:06 -08:00
ruiwen-zhao
9c9c552090 Update nvidia-gpu-device-plugin addon image path 2020-11-05 18:25:00 +00:00
Kubernetes Prow Robot
9a469d28e0
Merge pull request #96228 from MrHohn/dns-owner
Adding an owner for addon/dns folder
2020-11-04 15:47:30 -08:00
Kubernetes Prow Robot
169683b05f
Merge pull request #95975 from jingxu97/oct/csiproxyversion
Update csi-proxy version
2020-11-04 14:46:53 -08:00
shahra
e95af138b5 Volume snapshot e2e test to validate
VolumeSnapshotContent and PVC finalizer
2020-11-04 14:08:24 -08:00
Zihong Zheng
2dfd77067e Adding an owner for addon/dns folder 2020-11-04 10:38:48 -08:00
Kubernetes Prow Robot
9108c430db
Merge pull request #95791 from floryut/update_nodelocaldns
Update nodelocaldns yaml to use 1.15.16 image
2020-11-03 22:50:03 -08:00
Kubernetes Prow Robot
f7cfe3ba0f
Merge pull request #95076 from dougsland/deprecate-delete-local-data
kubectl: deprecate --delete-local-data
2020-11-03 05:50:15 -08:00
Kubernetes Prow Robot
8b59fe9612
Merge pull request #95938 from coffeepac/repair-cluster-discovery
use current method signatures
2020-10-30 01:34:06 -07:00
Julie Qi
9987d34016 Add keep_time_key setting to fluentd configuration 2020-10-29 16:44:00 -07:00
wojtekt
eb63da77ea Allow for configuring etcd progress notify interval on GCE 2020-10-29 15:43:51 +01:00
Kubernetes Prow Robot
7a20fcf6ef
Merge pull request #95890 from barney-s/winlog_add_fluentd
If image has stack driver agent installed, use it.
2020-10-28 22:42:59 -07:00
Pat Christopher
a30d2f6908
pin to latest k8s version 2020-10-28 19:49:57 -07:00
Pat Christopher
94ee60acc6
more versions 2020-10-28 19:49:57 -07:00
Pat Christopher
bf9e72eadd
rev versions 2020-10-28 19:49:57 -07:00
Pat Christopher
e5c20ca50a
use current method signatures 2020-10-28 19:49:57 -07:00
Jing Xu
5790971267 Update csi-proxy version
update csi-proxy version to 0.2.2
change log https://github.com/kubernetes-csi/csi-proxy/blob/master/CHANGELOG/CHANGELOG-0.2.2.md

Change-Id: I19a7a6776970eb0056287792bb2676cece5b8063
2020-10-28 19:45:45 -07:00
Kubernetes Prow Robot
f3c957c349
Merge pull request #95947 from wojtek-t/bump_gce_master_sizes
Update function setting master node size for GCE
2020-10-28 18:36:58 -07:00
Barni S
73916e5a9b If image has stackdriver agent installed, use it.
Check if stackdriver agent is preinstalled in the image. If so configure and use it.
Else check for fluentbit agent
2020-10-28 13:34:44 -04:00
Kubernetes Prow Robot
53d63fb748
Merge pull request #95943 from aojea/upgradejob
fix unbound variable on upgrade
2020-10-28 06:39:56 -07:00
wojtekt
f69cc2cd96 Update function setting master node size for GCE 2020-10-28 13:04:26 +01:00
Kubernetes Prow Robot
1a645c2135
Merge pull request #95743 from benhxy/apiserver-health
Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck.
2020-10-28 04:03:56 -07:00
Kubernetes Prow Robot
63eacc22c1
Merge pull request #95912 from khs1994/patch-1
fixed addons fluentd-elasticsearch statefulset format error
2020-10-28 01:05:55 -07:00
Antonio Ojea
7c3bd972e9 fix unbound variable on upgrade 2020-10-28 09:05:29 +01:00
Kubernetes Prow Robot
3523555aab
Merge pull request #95771 from vinayakankugoyal/fluentbit
Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke…
2020-10-27 10:36:48 -07:00
Ben Hu
8416c5cc51 Use host IP instead of 127.0.0.1 for kube-apiserver healthcheck. 2020-10-27 16:25:27 +00:00
Kang Huaishuai
ba41d45870
fixed addons fluentd-elasticsearch statefulset format error
Signed-off-by: Kang Huaishuai <khs1994@khs1994.com>
2020-10-27 20:06:15 +08:00
Joakim Roubert
434611b3fb Fix shellcheck issues in cluster/gce/gci/master-helper.sh
Based on PR 88582 by gavinfish that was closed due to inactivity.
Contains a few updates.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-10-27 08:58:48 +01:00
Kubernetes Prow Robot
d0e06cf3e0
Merge pull request #95843 from varunmar/update-ip-masq-agent
Bump ip-masq-agent version to pick up CVE fixes
2020-10-26 11:23:16 -07:00
Kubernetes Prow Robot
557885d5d7
Merge pull request #91788 from rahulkjoshi/detect-local-mode
Add option to specify detect-local-mode during cluster configuration
2020-10-26 10:25:02 -07:00
Kubernetes Prow Robot
c492e5bfb7
Merge pull request #95858 from monotek/fluent-es-xpack
added xpack gem to enable ilm support in fluentd-es-image
2020-10-26 09:29:15 -07:00
Kubernetes Prow Robot
53b2973440
Merge pull request #95844 from MrHohn/ip-masq-owner
Add MrHohn as an owner of the ip-masq-agent addon
2020-10-26 00:45:02 -07:00
André Bauer
f6475ca56c removed whitspace
Signed-off-by: André Bauer <monotek23@gmail.com>
2020-10-25 19:27:43 +01:00
André Bauer
72e9737255 added xpack gem to enable ilm support in fluentd-es-image
Signed-off-by: André Bauer <monotek23@gmail.com>
2020-10-25 19:19:08 +01:00
Kubernetes Prow Robot
5935fcd704
Merge pull request #95766 from towca/jtuznik/ca-params-fix
Properly quote flags passed to Cluster Autoscaler
2020-10-23 20:47:00 -07:00
Kubernetes Prow Robot
1f756e4a37
Merge pull request #92669 from Jefftree/netproxy-configure-helper
Separate network proxy flag for apiserver egress and starting pods
2020-10-23 16:47:00 -07:00
Zihong Zheng
0ca88cda17 Add MrHohn as an owner of ip-masq-agent addon 2020-10-23 16:01:03 -07:00
Varun Marupadi
69e37cbcf3 Bump ip-masq-agent version to pick up CVE fixes 2020-10-23 14:41:58 -07:00
Vinayak Goyal
83c1ce0225 Grant group KUBE_POD_LOG_READERS_GROUP access to read pod logs on gke control-plane. 2020-10-23 12:14:26 -07:00
Rahul Joshi
889446810c Add configuration options to specify --detect-local-mode on kube-proxy. 2020-10-23 12:12:59 -07:00
Kubernetes Prow Robot
c44633276b
Merge pull request #95563 from tosi3k/log-dump-verification
Return non-zero code on logexporter failures
2020-10-23 00:11:58 -07:00
Kubernetes Prow Robot
1257bc5acb
Merge pull request #91474 from cici37/pkgController
Cleanup CCM dependencies
2020-10-22 23:17:45 -07:00
Kubernetes Prow Robot
e850fa6a6c
Merge pull request #95209 from benhxy/gke/kubeconfig
Use host IP instead of localhost for GKE control plane kubeconfig
2020-10-22 22:15:49 -07:00
Jefftree
0e5d057755 Rename flags 2020-10-22 08:43:28 -07:00
Jefftree
ed52ad3f25 Add SETUP_KONNECTIVITY_SERVICE flag 2020-10-22 08:43:28 -07:00
Jefftree
7820b05467 Separate network proxy flag for apiserver egress and starting pods 2020-10-22 08:43:27 -07:00
Jakub Tużnik
236ade027b Properly quote flags passed to Cluster Autoscaler
In the current implementation, the flags are not put between quotes,
and so the Cluster Autoscaler manifest doesn't parse as valid JSON.
2020-10-22 15:10:39 +02:00
Florian Ruynat
af3347280b Update nodelocaldns yaml to use 1.15.16 image 2020-10-22 14:18:34 +02:00
Antoni Zawodny
e42a8dbe38 Return non-zero code on logexporter failures 2020-10-21 17:38:43 +02:00
Daniel Gutowski
6c8b1ab266 Fix default values for logrotate in /var/log/ 2020-10-21 09:18:32 +00:00
Ben Hu
49afcfa5f2 Use host IP instead of localhost for control plane component kubeconfig files.
This is a part of work to allow control plane components to be moved off hostNetwork.
2020-10-20 22:47:33 +00:00
Ben Hu
8b4e164a78 iAdd host IP to etcd listen client URLs.
Allow kube-apiserver to use host IP to connect to etcd.
Update etcd/migrate to allow additional client listening URLs.
2020-10-20 16:43:52 +00:00
cici37
95acec5a3b Move client_builder to k8s.io/controller-manager 2020-10-19 14:48:22 -07:00
Kubernetes Prow Robot
db8258ca58
Merge pull request #95506 from benhxy/gke/etcd-migrate
Add client listening URLs configuration to etcd migrate.
2020-10-17 11:00:12 -07:00
Kubernetes Prow Robot
a5dceab0ce
Merge pull request #95580 from jayunit100/jayunit100/pillarnodelocal
support multiple bind records (fie nodelocaldns  test regression)
2020-10-16 22:24:12 -07:00
Kubernetes Prow Robot
22a0a89c40
Merge pull request #95625 from eddiezane/ez/use-gsutil-get-kube
Use gsutil to download kube binaries and release artifacts
2020-10-16 17:18:13 -07:00
Ben Hu
e8fcc44286 Add client listening URLs flag to etcd migrate. 2020-10-16 23:10:54 +00:00
jayunit100
aefe930562 support multiple bind records (fie nodelocaldns test regression), by
first replacing PILLAR_ and then replacing other vars.
2020-10-16 14:28:55 -04:00
Eddie Zaneski
cebb1b3393
Use gsutil to download kube binaries and release
Default to using gsutil to download kube artifacts to avoid network
interruptions.

Signed-off-by: Eddie Zaneski <eddiezane@gmail.com>
2020-10-16 09:56:25 -06:00
Barni S
847ae378ef Fix windows node startup failures.
1. cd to root dir before removing temp installer path. It was failing because we were trying to remove while being in the same dir.
2. Expand variables in a regular string and use it in the command. Expansion was failing in single quotes.
2020-10-15 16:17:22 -04:00
Kubernetes Prow Robot
b3d4b8ed8a
Merge pull request #93912 from barney-s/fluentbit_win
Use fluentbit as logging agent. Replace stackdriver
2020-10-14 18:45:50 -07:00
Barni S
bbe7b2ebed Use fluentbit as logging agent. Replace stackdriver 2020-10-14 18:27:09 -04:00
Kubernetes Prow Robot
5c5d26786e
Merge pull request #94987 from zshihang/fix-upgrade
fix upgrade test
2020-10-13 17:23:54 -07:00
Antoni Zawodny
7e895db627 Fix log dumping for GKE 2020-10-13 18:46:08 +02:00
Kubernetes Prow Robot
dee62a7267
Merge pull request #95412 from saikat-royc/snapshot-controller-bump
Upgrade snapshot controller to 3.0.0
2020-10-12 11:32:49 -07:00
Kubernetes Prow Robot
c1e5e6a556
Merge pull request #93836 from jayunit100/salt_cleanup_92835
remove __pillar__ refs
2020-10-11 17:58:47 -07:00
Kubernetes Prow Robot
a4a7b574b3
Merge pull request #94465 from joakimr-axis/joakimr-axis_util.sh_arrays
Fix some shellcheck warnings/errors in cluster/gce/util.sh
2020-10-09 20:34:59 -07:00
Kubernetes Prow Robot
fb3e2c42ef
Merge pull request #95444 from xing-yang/addon_snapshot_owners
Update addons volumesnapshots owners file
2020-10-09 18:09:08 -07:00
Kubernetes Prow Robot
ff0ef98f34
Merge pull request #95424 from caseydavenport/calico-v3.16.2
Update to Calico v3.16.2
2020-10-09 18:08:59 -07:00
Kubernetes Prow Robot
33fd5552bb
Merge pull request #95418 from vinayakankugoyal/pki
Update write-pki-data to give read permissions to KUBE_PKI_READERS_GR…
2020-10-09 18:08:47 -07:00
Shihang Zhang
079cd8ddc2 fix upgrade test 2020-10-09 15:28:28 -07:00
Kubernetes Prow Robot
4fbf5df52b
Merge pull request #95388 from ii/policy
Enable Logging of event requests to audit log in cluster/gce/gci/configure-helper.sh
2020-10-09 14:08:48 -07:00
xing-yang
263c4d70f6 Update addons volumesnapshots owners file 2020-10-09 13:44:24 +00:00
Hippie Hacker
b1e3a2ac7a Clarify that we don't audit events due to performance impact 2020-10-09 13:30:20 +13:00
Vinayak Goyal
7cbe8070bc Update write-pki-data to give read permissions to KUBE_PKI_READERS_GROUP, for components running as non-root to be able to read the credentials. 2020-10-08 16:25:43 -07:00
Casey Davenport
39dd16d58d Update to Calico v3.16.2 2020-10-08 16:05:45 -07:00
Joseph Anttila Hall
2f318bdd57 API server: fix default_konnectivity_socket_path typo.
Make it consistent with configure-helper.sh
2020-10-08 13:19:05 -07:00
Saikat Roychowdhury
5a3632df55 Upgrade snapshot controller to 3.0.0 2020-10-08 19:04:54 +00:00
Joakim Roubert
d4dd0ad53c log-dump.sh: Fix shellcheck issues
Mitigate the shellcheck warning for the assignment of local variable.
Add rest of shellcheck fixes from #88349

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-10-08 13:58:00 +02:00
Shihang Zhang
e0dcfbf9c2 make download-or-bust compatible with both sha512/sha1 2020-10-06 15:16:26 -07:00
Kubernetes Prow Robot
446da13de1
Merge pull request #94975 from zshihang/hash
replace sha1 with sha512
2020-10-06 13:00:42 -07:00
Joakim Roubert
2868e07b98 Update after code review
Change-Id: I89b66f2bdcb68be7eee325e6246183638d3983b3
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2020-10-06 08:40:05 +02:00
Joakim Roubert
62ee0f5a1a Update cluster/gce/util.sh
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
2020-10-06 08:37:12 +02:00
Joakim Roubert
e924c3568e Fix some shellcheck warnings/errors in cluster/gce/util.sh
This patch fixes the use of arrays.

Change-Id: I6c7f7eaf89387ed96c7b2ddf4fbb4627ec2c6075
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-10-06 08:37:12 +02:00
Kubernetes Prow Robot
bbbab14216
Merge pull request #95311 from karan/startup-console-logs
Send gce node startup scripts logs to console and journal
2020-10-05 17:58:19 -07:00
Kubernetes Prow Robot
3f7e26dece
Merge pull request #95242 from jingxu97/sep/gate
Add gate to install CSI proxy
2020-10-05 15:16:42 -07:00
Kubernetes Prow Robot
add19e4680
Merge pull request #95168 from jingxu97/sep/image
Update Windows image patch version
2020-10-05 15:16:32 -07:00
Kubernetes Prow Robot
64f8bf24a6
Merge pull request #95243 from MrHohn/kube-addon-staging-2
Update addon-manager makefile to use the new staging repo - take two
2020-10-05 14:22:20 -07:00
Karan Goel
f707db32cc Send node startup scripts to console and journal 2020-10-05 13:25:28 -07:00
Kubernetes Prow Robot
0ef37070dc
Merge pull request #95271 from monotek/fluentd1113
updates fluentd docker image and all plugins
2020-10-05 08:31:06 -07:00
Kubernetes Prow Robot
5bfbb98dfa
Merge pull request #95284 from coffeepac/pc/es-addon-1.18
v1.18 support changes
2020-10-04 02:37:05 -07:00
André Bauer
ba83b7758c removed links to soon deprecated helm stable repo & added artifact hub link
Signed-off-by: André Bauer <monotek23@gmail.com>
2020-10-04 10:10:23 +02:00
Pat Christopher
76aa430389
get kibana up to speed with es 2020-10-03 23:15:09 -05:00
Pat Christopher
47b009550b
rev version of stateful set 2020-10-03 22:58:13 -05:00
Pat Christopher
60272a7730
v1.18 support changes 2020-10-03 22:54:17 -05:00
André Bauer
b803d4bbec use new fluentd image in daemonset
Signed-off-by: André Bauer <monotek23@gmail.com>
2020-10-03 11:38:50 +02:00
André Bauer
6c7776bbe0 updated fluentd and all plugins
Signed-off-by: André Bauer <monotek23@gmail.com>
2020-10-03 11:28:46 +02:00
Jing Xu
d02f3a84e1 Add gate to install CSI proxy
Add a gate ENABLE_CSI_PROXY to enable/disable csi proxy installation.
The default value is true
2020-10-02 16:37:08 -07:00
Zihong Zheng
9009530d1c Update addon-manager makefile to use the new staging repo - for real 2020-10-01 15:39:25 -07:00
Kubernetes Prow Robot
deebe6619a
Merge pull request #94457 from joakimr-axis/oakimr-axis_util.sh_cat
Fix some shellcheck warnings/errors in cluster/gce/util.sh
2020-10-01 14:39:19 -07:00
Kubernetes Prow Robot
15fae4eadb
Merge pull request #95200 from MrHohn/addon-manager-staging
Update Makefile to point to the new addon manager gcr repo
2020-10-01 11:49:32 -07:00
Zihong Zheng
7a315d6942 Update Makefile to point to the new addon manager gcr repo 2020-09-30 13:54:00 -07:00
Jing Xu
f973c1d96e Add CSI proxy log to fluentd
Add csi proxy log
2020-09-29 22:57:31 -07:00
Jing Xu
ef3e4391c4 Update Windows image patch version
Update Windows image version to the latest one. This one includes a fix
for unix domain socket
2020-09-29 22:46:38 -07:00
Kubernetes Prow Robot
5254b755cd
Merge pull request #95075 from jingxu97/sep/csiproxylog
Add csiproxy log
2020-09-28 19:49:25 -07:00
Douglas Schilling Landgraf
625e47aaa2 kubectl: deprecate --delete-local-data
The option --delete-local-data according with users is not clear.
This patch deprecate --delete-local-data in favor of --delete-emptydir-data.

Reference:
https://github.com/kubernetes/kubernetes/issues/80228

Signed-off-by: Douglas Schilling Landgraf <dougsland@redhat.com>
2020-09-27 10:03:52 -04:00
Kubernetes Prow Robot
c8ebc8ab75
Merge pull request #95077 from mikedanese/mds-block
gce: redirect handshake server requests to metadata-concealment too
2020-09-25 22:36:47 -07:00
Mike Danese
cc5b12cdff gce: redirect handshake server requests to metadata-concealment too 2020-09-25 17:50:53 -07:00
Kubernetes Prow Robot
b39a9a943f
Merge pull request #94983 from Jefftree/update-netproxy
Bump konnectivity-client to v0.0.12
2020-09-25 17:37:02 -07:00
Jing Xu
ec8c7aa171 Add csiproxy log
add csiproxy log
2020-09-25 13:39:40 -07:00
Kubernetes Prow Robot
3ac763c393
Merge pull request #94056 from tosi3k/logexporter-per-zone
Enable per-zone logexporter pods creation
2020-09-25 08:01:11 -07:00
Antoni Zawodny
e453a1feb7 Enable per-zone logexporter pods creation 2020-09-25 15:45:49 +02:00
Kubernetes Prow Robot
3777ca7c2a
Merge pull request #94784 from vteratipally/revert-94669-revert-94634-master
"Switch cos version to M85""
2020-09-24 20:45:11 -07:00
Kubernetes Prow Robot
88fb266583
Merge pull request #93762 from spencer-p/create-resource-respects-ensureexists
Fix kube-addon-manager overwriting resources with EnsureExists set
2020-09-24 17:59:11 -07:00
varsha teratipally
7b2ef398a3 switching to stable version 2020-09-25 00:39:29 +00:00
Spencer Peterson
bd44ef811d Fix kube-addon-manager overwriting resources with EnsureExists
The addon manager readme states

> - Addons with label `addonmanager.kubernetes.io/mode=EnsureExists` will be checked for
> existence only. Users can edit these addons as they want.

However, the start_addon function was using `kubectl apply` to create
resources regardless of mode. This change switches between `kubectl
create` and `kubectl apply` depending on mode.

Additionally implemented tests for create_resource fn

 - Refactor functions and main executable
 - Quick tests in bash
 - Tests for Reconcile, EnsureExists behavior
 - Check for completeness with multi resource configs
2020-09-24 21:26:56 +00:00
Kubernetes Prow Robot
062fe2ebf1
Merge pull request #95025 from knight42/fix/ingress-gce-e2e
fix: correct glbc ClusterRole
2020-09-24 09:24:43 -07:00
knight42
91bd11681a
fix: correct glbc ClusterRole
Signed-off-by: knight42 <anonymousknight96@gmail.com>
2020-09-24 16:14:36 +08:00
Shihang Zhang
e99dbbde62 replace sha1 with sha512 2020-09-23 11:27:20 -07:00
Varun Marupadi
04a51cac17 Allow the lifecycle of kube-proxy to be managed independently of the startup scripts for GCE
Introduces a new env variable KUBE_PROXY_DISABLE which causes the configure scripts to skip over
the creation of both static pods as well as daemonset addons for kube-proxy.
When false, the behavior falls back to the default today, which is to rely on the value of
KUBE_PROXY_DAEMONSET to decide whether to start static pods on the nodes or an addon on the
master.
2020-09-22 20:37:35 -07:00
Kubernetes Prow Robot
7363aa1e21
Merge pull request #94951 from prameshj/patch-4
Update nodelocaldns yaml to use 1.15.14 image
2020-09-22 14:42:42 -07:00
Jefftree
300c88cf47 Bump network proxy images to v0.0.12 2020-09-22 13:26:56 -07:00
Kubernetes Prow Robot
1bb1702a45
Merge pull request #94458 from joakimr-axis/joakimr-axis_util.sh_calc
Fix some shellcheck warnings/errors in cluster/gce/util.sh
2020-09-22 12:23:30 -07:00
Kubernetes Prow Robot
6b39cdf376
Merge pull request #93305 from alculquicondor/lssd-ephemeral
Mount kubelet and container runtime rootdir on LSSD
2020-09-22 12:22:06 -07:00
Kubernetes Prow Robot
dbaaed3592
Merge pull request #92140 from ash2k/ash2k/fix-error-check
Fix error check logic in test
2020-09-22 12:21:38 -07:00
prameshj
d730e5f87e
Update nodelocaldns yaml to use 1.15.14 image 2020-09-21 15:31:55 -07:00
Maciej Borsz
3d055ac1f4 log-dump.sh: Do not modify logexporter-daemonset.yaml in-place.
Right now, each invocation of log-dump.sh modifies
logexporter-daemonset.yaml code which makes it hard to develop and leads
to unpredictable results of multiple calls with different parameters.
2020-09-21 16:27:54 +02:00
Jing Xu
0752b78081 Remove testcluster check for csi proxy
Remove testcluster check for csi proxy after it is beta
2020-09-18 16:15:17 -07:00
Kubernetes Prow Robot
2aa1cd25f3
Merge pull request #94842 from jingxu97/sep/csiproxy
Update csi proxy to v0.2.1
2020-09-17 15:38:47 -07:00
Stephen Augustus
c67713a1ef cluster/images/etcd: Build etcd:3.4.13-1 image
- Uses debian-base:buster-v1.2.0

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-17 13:06:27 -04:00
Stephen Augustus
06b0570444 build: Update to debian-base:buster-v1.2.0
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-17 13:06:27 -04:00
Kubernetes Prow Robot
9707537b72
Merge pull request #94267 from lizhuqi/hostname-override
Override hostname with instance name
2020-09-17 04:18:45 -07:00
Jing Xu
8241f9264e Update csi proxy to v0.2.1
Update csi proxy to v0.2.1
2020-09-16 17:36:06 -07:00
Kubernetes Prow Robot
aed5ffd195
Merge pull request #94449 from justaugustus/go115
[go1.15] Update to go1.15.2
2020-09-15 15:15:19 -07:00
vteratipally
8f22a58dda
Revert "Revert "Switch cos version to M85"" 2020-09-14 15:16:41 -07:00
Kubernetes Prow Robot
f5a54e3f58
Merge pull request #94671 from jingxu97/sep/csiproxybeta
Update csi-proxy to use beta version
2020-09-14 13:03:25 -07:00
Kubernetes Prow Robot
79cc8be2cd
Merge pull request #94769 from justaugustus/aug-cluster
cluster/images: Add justaugustus as reviewer
2020-09-14 11:49:12 -07:00
Aldo Culquicondor
2ae4eeb3ea Mount kubelet and container runtime rootdir on LSSD
When environment variable NODE_LOCAL_SSD_EPHEMERAL=true,
create a RAID 0 array on all attached SSDs to mount:

- kubelet root dir
- container runtime root dir
- pod logs dir

Those directories account for all ephemeral storage.
An array is not created when there is only one SSD.

Change-Id: I22137f1d83fc19e9ef58a556d7461da43e4ab9bd
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2020-09-14 14:32:28 -04:00
David Eads
c7911a384c remove pod presets 2020-09-14 09:24:40 -04:00
Stephen Augustus
cca9a8c320 cluster/images: Add justaugustus as reviewer
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-09-14 09:09:05 -04:00
Mike Danese
d182ecc1f9 output go_binary rule directly from go_binary_conditional_pure
And same for go_test_conditional_pure.

Instead of aliasing. Aliases are annoying in a number of ways. This is
specifically bugging me now because they make the action graph harder to
analyze programmatically. By using aliases here, we would need to handle
potentially aliased go_binary targets and dereference to the effective
target.

The comment references an issue with `pure = select(...)` which appears
to be resolved considering this now builds.
2020-09-11 13:19:37 -07:00
Kubernetes Prow Robot
1b8c7585f3
Merge pull request #94726 from pradvenkat/gpu-device-plugin-addon
gpu device plugin uses EnsureExists addon mode
2020-09-11 13:04:09 -07:00
Pradeep Venkatachalam
00ecbcc866 gpu device plugin uses EnsureExists addon mode 2020-09-11 10:19:57 -07:00
Joakim Roubert
82db7cf4f5 Fix some shellcheck warnings/errors in cluster/gce/util.sh
This patch adds quotes for those yaml-quote arguments that do not
already have it.

Change-Id: Iee0fb79e41aa4aff7de0df93a25aee781e574934
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-09-11 08:29:55 +02:00
Kubernetes Prow Robot
1b5802fd5d
Merge pull request #94461 from joakimr-axis/joakimr-axis_util.sh_file
Fix some shellcheck warnings/errors in cluster/gce/util.sh
2020-09-10 16:10:29 -07:00
Kubernetes Prow Robot
0627c35411
Merge pull request #93781 from kisieland/allow-to-switch-off-logrotate
Disable log rotation of kubernetes and pod logs
2020-09-10 16:10:14 -07:00
Kubernetes Prow Robot
0fd10997df
Merge pull request #94669 from vteratipally/revert-94634-master
Revert "Switch cos version to M85"
2020-09-10 10:46:17 -07:00
jay vyas
c6a4a87ff2 pillar_dns_server remove change so as not to break tooling in the near term in the kubernetes/dns repo 2020-09-10 13:04:04 -04:00
Jing Xu
555c8dbd1b Update csi-proxy to use beta version
This PR update csi-proxy version, remove diskutil.exe and set up log
file
2020-09-09 18:43:39 -07:00
Kubernetes Prow Robot
058b4d60a3
Merge pull request #94241 from lmm/calico-v3.15
Update Calico to v3.15.2
2020-09-09 17:59:44 -07:00
vteratipally
244718a9eb
Revert "Switch cos version to M85" 2020-09-09 16:52:05 -07:00
Kubernetes Prow Robot
47c450776f
Merge pull request #94634 from vteratipally/master
Switch cos version to M85
2020-09-09 07:33:52 -07:00
Kubernetes Prow Robot
a42dde2e97
Merge pull request #91568 from ialidzhikov/enh/cpva
Update Calico cpva to v0.8.3
2020-09-08 19:17:52 -07:00
varsha teratipally
34467c27f9 Switch cos version to M85 2020-09-08 23:06:19 +00:00
Matt Matejczyk
67f9d69eaf Revert "fix cluster/log-dump/log-dump.sh shellcheck failures"
This reverts commit 742701622a.

It broke log dumping, see https://github.com/kubernetes/kubernetes/pull/88349#issuecomment-688385378
2020-09-07 17:13:33 +02:00
Kubernetes Prow Robot
8da7c92a2f
Merge pull request #93975 from avr1254/master
Removed broken link to Analytics
2020-09-03 06:16:09 -07:00
Daniel Gutowski
adf7ed4241 Allow to disable logrotation of kubernetes and pod logs
Make logrotate disabled by default
2020-09-03 11:21:44 +00:00
Joakim Roubert
36d056a29b Fix some shellcheck warnings/errors in cluster/gce/util.sh
This patch adds whitespace handling for the $file variable(s).

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-09-03 12:02:50 +02:00
Joakim Roubert
3f3958deea Fix some shellcheck warnings/errors in cluster/gce/util.sh
This patch cleans up the use of arithmetic shell functionality.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-09-03 11:34:03 +02:00
Joakim Roubert
e773c5d19b Fix some shellcheck warnings/errors in cluster/gce/util.sh
This patch removes superfluous use of cat.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-09-03 09:07:06 +02:00
Kubernetes Prow Robot
8aaa7515e5
Merge pull request #94374 from jingxu97/Aug/csiproxyservice
Start CSI proxy as service
2020-09-02 18:21:40 -07:00
Jing Xu
28ab3488b6 Start CSI proxy as service
Now CSI proxy can support starting as service. Update node startup
script to create and start it as service
2020-09-02 13:28:09 -07:00
Kubernetes Prow Robot
80ada96466
Merge pull request #88349 from BenTheElder/shell-dump
fix cluster/log-dump/log-dump.sh shellcheck failures
2020-09-02 09:03:07 -07:00
Shihang Zhang
38f040c0a8 bind metadata proxy to 0.0.0.0 2020-09-01 18:34:02 -07:00
Kubernetes Prow Robot
b49724d5fc
Merge pull request #94287 from jingyih/update_etcd_server_3p4p13
Update default etcd server to 3.4.13
2020-09-01 15:35:20 -07:00
Stephen Augustus
e59d9f372d Update CNI plugins to v0.8.7
ref: https://github.com/containernetworking/plugins/releases/tag/v0.8.7

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-08-31 09:01:07 -04:00
jay vyas
1693c111be Getting rid of the Salt DNS replacements, addded / back. 2020-08-30 09:11:27 +00:00
Kubernetes Prow Robot
f65f868aa0
Merge pull request #94294 from millermatt/patch-1
Remove duplicate nodeSelector
2020-08-29 15:44:49 -07:00
Julie Qi
16f85883c4 Override hostname with instance name 2020-08-28 18:03:40 -07:00
Kubernetes Prow Robot
b440ecc315
Merge pull request #93095 from pjbgf/migrate-seccomp-usage-to-ga
Update yaml files to use seccomp GA syntax
2020-08-28 12:35:49 -07:00
Kubernetes Prow Robot
b02b84870c
Merge pull request #94307 from xmudrii/update-cri-tools
Update cri-tools to v1.19.0
2020-08-28 10:40:03 -07:00
Kubernetes Prow Robot
a9d1482710
Merge pull request #93311 from logicalhan/monitoring-role
Add bootstrap policy for monitoring endpoints
2020-08-28 06:36:52 -07:00
Marko Mudrinić
084bc9db43
Update cri-tools to v1.19.0 2020-08-28 15:34:42 +02:00
jingyih
c96b93fbd4 Update default etcd server to 3.4.13 2020-08-28 21:19:24 +08:00
Benjamin Elder
742701622a fix cluster/log-dump/log-dump.sh shellcheck failures 2020-08-28 00:35:11 -07:00
Kubernetes Prow Robot
2ded1e0c59
Merge pull request #92990 from nikhita/cleanup-owners-cluster-addons
cluster/addons/metadata-proxy: cleanup inactive members from OWNERS
2020-08-27 22:32:53 -07:00
Matt Miller
908823dc80
Remove duplicate nodeSelector
Make the yaml valid.
2020-08-28 00:02:35 -05:00
Kubernetes Prow Robot
fd20de89d9
Merge pull request #90433 from joakimr-axis/joakimr-axis_configure-helper.sh
Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh
2020-08-27 19:05:47 -07:00
Kubernetes Prow Robot
2e59a17dc1
Merge pull request #92288 from zhijianli88/cleanup-tempfiles
Cleanup tempfiles
2020-08-27 17:56:54 -07:00
Kubernetes Prow Robot
1d04741aae
Merge pull request #93471 from lemonli/node-local-dns-cache
nodelocaldns.yaml: remove force_tcp option which used for external dn…
2020-08-27 16:05:57 -07:00
Kubernetes Prow Robot
39cf26f4a4
Merge pull request #93849 from nikhita/cleanup-dashboard-owners
cluster/addons/dashboard: remove inactive members from OWNERS
2020-08-27 07:43:53 -07:00
Kubernetes Prow Robot
f16da811eb
Merge pull request #94260 from jingyih/update_etcd_makefile_3p4p13
Update etcd makefile to build v3.4.13 image
2020-08-27 06:42:58 -07:00
Kubernetes Prow Robot
39af44718e
Merge pull request #93909 from msau42/update-snapshot
Update snapshot controller to use k8s.gcr.io
2020-08-27 04:47:57 -07:00
Kubernetes Prow Robot
2b4c03b6ae
Merge pull request #94052 from jeremyje/windoc
Simplify and de-lint GCE Windows kube-up docs.
2020-08-26 22:15:19 -07:00
jingyih
45318e8190 Update etcd makefile to build 3.4.13 image 2020-08-27 03:33:51 +08:00
Laurence Man
7848248dbf Update Calico to v3.15.2 2020-08-26 02:52:06 +00:00
Spencer Hance
b13898d6e9 Add rbac patch permissions for system:controller:glbc ingresses/status 2020-08-20 20:34:23 -07:00
Jeremy Edwards
9a315cc2ec Simplify and de-lint GCE Windows kube-up docs. 2020-08-17 10:23:39 -07:00
Kubernetes Prow Robot
529c13471b
Merge pull request #93789 from jingxu97/Aug/csiproxy
Add test cluster check when starting csi proxy
2020-08-14 19:50:18 -07:00
Arjun Ramachandrula
dcc1ab176d Removed broken link to Analytics 2020-08-13 16:03:37 -04:00
Paulo Gomes
8f8f1bad72
Update yaml files to use seccomp GA syntax 2020-08-13 08:45:36 +01:00
Stephen Augustus
21863237a7 cluster/images/etcd: Build etcd@3.4.9-3 using debian-base@v2.1.3
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-08-11 23:20:06 -04:00
Michelle Au
8fce14a9e9 Update snapshot controller to use k8s.gcr.io
Change-Id: I30005efec519840142bc7151aeaa543912a2f84b
2020-08-11 18:34:24 -07:00
Nikhita Raghunath
8cb10ca415 cluster/addons/dashboard: remove inactive members from OWNERS
As a part of cleaning up inactive members (who haven't been active since
beginning of 2019) from OWNERS files, this commit removes konryd and
cheld from the list of reviewers.
2020-08-10 15:13:28 +05:30
Jing Xu
116465bb04 Add test cluster check when starting csi proxy
Add the check for test cluster when starting csi proxy
2020-08-07 14:46:38 -07:00
Manjunath A Kumatagi
f48cdfb9b9 Add missing ppc64le architecture in the get-kube* scripts 2020-08-07 11:14:09 +05:30
Kubernetes Prow Robot
aa0632208e
Merge pull request #93577 from vivekbagade/master
Update Cluster Autoscaler version to 1.19.0
2020-08-05 06:42:28 -07:00
Stephen Augustus
876a6c85ed cluster/images/etcd: Build etcd@3.4.9-2 using debian-base@v2.1.2
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-08-04 01:16:57 -04:00
Stephen Augustus
87e13f7665 build: Update to debian-base@v2.1.0 and debian-iptables@v12.1.1
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-08-04 01:15:24 -04:00
Vivek Bagade
2e4a329b35 Update Cluster Autoscaler version to 1.19.0 2020-07-31 14:13:22 +02:00
lemonli
97f50fb0b5 nodelocaldns.yaml: remove force_tcp option which used for external dns query 2020-07-27 18:29:29 +08:00
Jordan Liggitt
247fcdfda5 [go1.15] go.mod: update to go1.15 2020-07-25 16:45:02 -04:00
Jordan Liggitt
f33dc28094 generated: hack/update-hack-tools.sh && hack/update-vendor.sh 2020-07-25 16:45:02 -04:00
Kubernetes Prow Robot
7348ab957c
Merge pull request #93356 from justaugustus/vdf
[VDF] Normalize container image references to k8s.gcr.io
2020-07-25 02:58:17 -07:00
Han Kang
f57611970c add bootstrap policy for monitoring roles
(we enable metrics and pprof by default, but that doesn't mean
 we should have full cluster-admin access to use those endpoints)

Change-Id: I20cf1a0c817ffe3b7fb8e5d3967f804dc063ab03

remove pprof but add read access to detailed health checks

Change-Id: I96c0997be2a538aa8c689dea25026bba638d6e7d

add base health check endpoints and remove the todo for flowcontrol, as there is an existing ticket

Change-Id: I8a7d6debeaf91e06d8ace3cb2bd04d71ef3e68a9

drop blank line

Change-Id: I691e72e9dee3cf7276c725a12207d64db88f4651
2020-07-24 09:21:55 -07:00
Nikhita Raghunath
3a74f461a2 Revert "Merge pull request #93160 from logicalhan/triage-instrumentation"
This reverts commit 1ed2cf1895, reversing
changes made to 04ecdb9eb6.
2020-07-24 18:09:07 +05:30
Nikhita Raghunath
c00dae0607 Revert "Merge pull request #93156 from logicalhan/triage-api-machinery"
This reverts commit 32438cf269, reversing
changes made to bb6a6aa391.
2020-07-24 13:01:02 +05:30
Kubernetes Prow Robot
1ed2cf1895
Merge pull request #93160 from logicalhan/triage-instrumentation
auto triage sig-instrumentation tagged PRs
2020-07-23 11:19:26 -07:00
Stephen Augustus
99dd7570eb [VDF] Remove references to gcr.io/google-containers
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-07-22 16:10:12 -04:00
Stephen Augustus
90c223fa5c [VDF] Remove references to us.gcr.io/k8s-artifacts-prod
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-07-22 16:08:30 -04:00
Kubernetes Prow Robot
32438cf269
Merge pull request #93156 from logicalhan/triage-api-machinery
automatically assign triage labels to api-machinery tagged PRs
2020-07-21 19:52:34 -07:00
Jared Burns
402eea882d Update fluent-es-image components for better ES 7.x compatibility 2020-07-21 08:27:04 -07:00
Kubernetes Prow Robot
4804fbe4c1
Merge pull request #93121 from liggitt/resource-quota
kube-up: limit critical pods to kube-system by default
2020-07-19 00:00:50 -07:00
Kubernetes Prow Robot
f9ad7db9a6
Merge pull request #92349 from jingyih/update_etcd_server_3p4p9
Update default etcd server to 3.4.9
2020-07-17 07:53:01 -07:00
Jordan Liggitt
3b323b2ef0 Limit critical pods to kube-system by default 2020-07-17 09:52:19 -04:00
Han Kang
f3c02d7221 auto triage sig-instrumentation tagged PRs
Change-Id: Ibae7373fb197485aeb222f1455515178cc3b4d13
2020-07-16 13:48:25 -07:00
Han Kang
9129dbc98b automatically assign triage labels to api-machinery tagged PRs
Change-Id: Ifcc8a85d190d6370423af27f6e6c4c90b8472981
2020-07-16 13:13:59 -07:00
Kubernetes Prow Robot
03509f3087
Merge pull request #92974 from Ghazgkull/patch-1
Update to version 2.5.1 of the fluent-plugin-kubernetes_metadata_filter
2020-07-16 02:03:41 -07:00
Kubernetes Prow Robot
2003246285
Merge pull request #92955 from mm4tt/addon-resizer
Bump addon-resizer for metrics-server to 1.8.11
2020-07-12 07:00:24 -07:00
Kubernetes Prow Robot
a2978e3ddb
Merge pull request #92718 from rajansandeep/kube-up-coredns1.7.0
[kube-up]: Bump CoreDNS to v1.7.0
2020-07-12 01:46:01 -07:00
Nikhita Raghunath
9c87dfb0fe cluster/addons/metadata-proxy: cleanup inactive members from OWNERS 2020-07-11 21:03:04 +05:30
Jared Burns
15bf1b1630
Bump image version 2020-07-11 08:12:00 -07:00
Jared Burns
29cdaad79e
Update to version 2.5.1 of the fluent-plugin-kubernetes_metadata_filter 2020-07-10 13:31:46 -07:00
Mateusz Matejczyk
e07f2a6b1d Bump addon-resizer for metrics-server to 1.8.11
The current version, 1.8.10, is vulnerable to https://github.com/kubernetes/autoscaler/issues/3294
2020-07-10 08:34:55 +02:00
jingyih
e9bf1c3c90 Update default etcd server to 3.4.9 2020-07-08 14:16:40 +08:00
Jeff Grafton
089a1af421 Move ixdy to emeritus 2020-07-06 10:39:56 -07:00
Kubernetes Prow Robot
c430183fff
Merge pull request #91854 from bsdnet/gci
Update the COS E2E image policy
2020-07-02 06:41:15 -07:00
Kubernetes Prow Robot
dbf6c456a2
Merge pull request #91835 from jingxu97/June/csi
Add csi-proxy installation into node setup script
2020-07-02 06:41:00 -07:00
Kubernetes Prow Robot
eee27e8f44
Merge pull request #92652 from rajansandeep/podaffinity
Add back anti-affinity to CoreDNS pods
2020-07-02 04:17:29 -07:00
Kubernetes Prow Robot
adf2cd40ae
Merge pull request #92668 from michaelmdresser/fix-kubeup-acls-mb
Fix an unnecessary failure during kube-up during bucket ACL setting and make bucket in the configured project
2020-07-01 23:14:27 -07:00
Kubernetes Prow Robot
94e1c54735
Merge pull request #92655 from BenTheElder/cleanup-some-owners
Cleanup some owners
2020-07-01 23:14:08 -07:00
Kubernetes Prow Robot
61342e398e
Merge pull request #92562 from bsdnet/newbranch
Fix sig-node-containerd/containerd-e2e-gci
2020-07-01 23:13:38 -07:00
Jing Xu
57d0dc540d Add csi-proxy installation into node setup script
This PR follows the same step to install and start csi-proxy as kubelet
binary
2020-07-01 15:08:29 -07:00
Sandeep Rajan
adffc7fcca kube-up: update coredns to v1.7.0 2020-07-01 14:58:29 -04:00
Roy Yang
f86b720cf6 Update the COS E2E image policy
Signed-off-by: Roy Yang <royyang@google.com>
2020-06-30 15:24:35 -07:00
Michael Dresser
902a4db5fc Fixes an unnecessary failure during kube-up
Also corrects bucket creation to use the project env var
2020-06-30 21:05:55 +00:00
Sandeep Rajan
12bced9bfb add back anti-affinity 2020-06-30 11:29:29 -04:00
Kubernetes Prow Robot
908847c01e
Merge pull request #91526 from maciaszczykm/dashboard-v2.0.1
Bump Dashboard to v2.0.1
2020-06-30 05:28:06 -07:00
Kubernetes Prow Robot
6257f83f88
Merge pull request #92569 from dims/tolerate-slightly-different-containerd-urls
Tolerate slightly different containerd urls
2020-06-29 18:35:08 -07:00
Kubernetes Prow Robot
de491f11b1
Merge pull request #92444 from dims/additional-check-for-containerd-for-better-loading-images
Additional test for loading images with containerd
2020-06-29 18:34:40 -07:00
Joakim Roubert
0c48e0e1bb Find what fails pull-kubernetes-e2e-gce-ubuntu-containerd
Change-Id: I7919d03926880cd9c93c61a07ada645ebfe32a89
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 09:43:37 +02:00
Joakim Roubert
b529485f65 Review update
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:58 +02:00
Joakim Roubert
605be2216b Sync with master
Add fixes for newly added code.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:58 +02:00
Joakim Roubert
196ae34f9b Remove previously added '' no longer needed
Adapt to changes on master since the first commit here.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:57 +02:00
Joakim Roubert
a20a005986 No quotes needed/wanted for CURL_RETRY_CONNREFUSED
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:57 +02:00
Joakim Roubert
1b9e9c6fe6 Add fix for run-kube-controller-manager-as-non-root
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:57 +02:00
Joakim Roubert
11f6d43747 Updates after review
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:57 +02:00
Joakim Roubert
4abf7da53e Update cluster/gce/gci/configure-helper.sh
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
2020-06-29 08:43:56 +02:00
Joakim Roubert
3e211386c1 Update cluster/gce/gci/configure-helper.sh
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
2020-06-29 08:43:56 +02:00
Joakim Roubert
d66456fe01 Update cluster/gce/gci/configure-helper.sh
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
2020-06-29 08:43:56 +02:00
Joakim Roubert
6e8504003b Update cluster/gce/gci/configure-helper.sh
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
2020-06-29 08:43:56 +02:00
Joakim Roubert
0c899b2bc2 Mitigate newly added shellcheck issues
Issues not present when the original patch was created have now also
been fixed.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:56 +02:00
Joakim Roubert
826274c867 Updates after code review
Add double quotes at assignments as requested by phenixblue.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:55 +02:00
Joakim Roubert
3fb0d1c15d Update after code review
Simplified local variable declaration as suggested by phenixblue.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-29 08:43:55 +02:00
Joakim Roubert
1f9704c713 Code review update
Change-Id: I384a73efe995c529fb4b3636cb9639eafb90787f
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2020-06-29 08:43:55 +02:00
Joakim Roubert
80a8566a8c Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh
Change-Id: Ic8fca2509a7cb07f4170eaf25a878036d18ba51c
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2020-06-29 08:43:55 +02:00
Davanum Srinivas
a653c21479
Tolerate slightly different containerd urls
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-06-27 06:41:19 -04:00
Benjamin Elder
7dfe160c0c sort cluster/ OWNERS 2020-06-26 21:52:29 -07:00
Benjamin Elder
62eb860ddf spiffxp should be a cluster reviewer 2020-06-26 21:51:40 -07:00
Benjamin Elder
839223f6c8 Katharine is no longer active 2020-06-26 21:50:57 -07:00
Roy Yang
1b13308edb Fix sig-node-containerd/containerd-e2e-gci
Signed-off-by: Roy Yang <royyang@google.com>
2020-06-26 18:38:27 -07:00
Jordan Liggitt
a36aa9c31e Stop enabling alpha runtimeclass API 2020-06-25 20:29:11 -04:00
Kubernetes Prow Robot
a8abba5a17
Merge pull request #92498 from wojtek-t/bump_etcd_version
Bump etcd revision after changes to migrate script
2020-06-25 09:46:18 -07:00
Kubernetes Prow Robot
4a91ecb976
Merge pull request #91863 from knabben/kubelet-memcg-notification
Moving Kubelet kernel-memgc-notification to configuration file
2020-06-25 00:20:37 -07:00
wojtekt
c0e930f176 Bump etcd revision after changes to migrate script 2020-06-25 07:56:29 +02:00
Kubernetes Prow Robot
dc0122ca6a
Merge pull request #92286 from wojtek-t/migrate_if_needed_golang
Merge migrate-if-needed etcd bash script with golang binary
2020-06-24 10:32:27 -07:00
Amim Knabben
c39cf28ed3 Moving Kubelet kernel-memgc-notification to configuration file 2020-06-24 06:44:00 -04:00
Kubernetes Prow Robot
ca372d3ca5
Merge pull request #92422 from joakimr-axis/joakimr-axis_wait-until-stable
util.sh: Replace wait-until-stable with wait-until --stable
2020-06-24 02:00:13 -07:00
Kubernetes Prow Robot
c3a6a66592
Merge pull request #92395 from sambdavidson/vip-sni-fix
Added missing apiserver config var.
2020-06-24 01:59:54 -07:00
Davanum Srinivas
2d7c47d2be
Additional test for loading images with containerd
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-06-23 18:21:59 -04:00
Jonathan Sun
2f7874bd4b Install firewall logging rules to log metadata server access for unauthorized components. 2020-06-23 11:22:05 -07:00
Joakim Roubert
db9d6d0bff util.sh: Replace wait-until-stable with wait-until --stable
This change follows the recommendation from the CI logs:

"WARNING: `gcloud compute instance-groups managed wait-until-stable` is
deprecated. Please use `gcloud compute instance-groups managed
wait-until --stable` instead."

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
2020-06-23 13:30:52 +02:00
Li Zhijian
02eaa4f354 cleanup tempfiles in unit test
Signed-off-by: Li Zhijian <lizhijian@cn.fujitsu.com>
2020-06-23 11:47:18 +08:00
Samuel Davidson
31ae200ebf fix for missing kube-env var in SNI config 2020-06-22 13:33:42 -07:00
wojtekt
2a7978e2be Merge migrate-if-needed etcd bash script 2020-06-22 20:45:58 +02:00
Kubernetes Prow Robot
d140769e4d
Merge pull request #92344 from jherrera123/restore-docker-focal-version
Restore docker focal version in gci nodes
2020-06-21 15:28:39 -07:00
Kubernetes Prow Robot
4c8207dc1e
Merge pull request #92314 from dims/set-better-default-for-loading-images-2
Set better default commands for loading images - take 2
2020-06-21 05:12:39 -07:00
Kubernetes Prow Robot
c6011f2d54
Merge pull request #91390 from vinayakankugoyal/nonroot
Updating kube-controller-manager to run as non-root.
2020-06-21 00:56:38 -07:00
Jesus Herrera
9714f3ac86 Restore docker focal version 2020-06-20 11:16:25 -04:00
Kubernetes Prow Robot
219c856ce2
Merge pull request #91555 from daixiang0/scr
*.sh: cleanup all white noise
2020-06-20 05:26:53 -07:00
Kubernetes Prow Robot
2d1c417934
Merge pull request #92258 from SidneyShen/node-boot-nvme-disk-fix
Add logic to check if local NVMe SSDs in node boot-up script
2020-06-19 11:38:14 -07:00
Kubernetes Prow Robot
4369eb3155
Merge pull request #92083 from alculquicondor/sched_config_script
Support kube-scheduler component-config in GCE init scripts
2020-06-19 11:36:53 -07:00
Kubernetes Prow Robot
87e6ec493c
Merge pull request #90223 from caesarxuchao/remove-unused-var
Remove unused network proxy variables and functions
2020-06-19 11:36:14 -07:00
Davanum Srinivas
60bd17a61f
Set better default commands for loading images - take 2
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-06-19 14:25:12 -04:00
Kubernetes Prow Robot
bfa6eb1772
Merge pull request #91964 from wenjiaswe/etcdNameComment
Add a comment to keep etcd name in sync and change `hostname` to `HOSTNAME`
2020-06-18 19:05:40 -07:00
Wenjia Zhang
0da9c3e379 Add a comment to keep etcd name in sync and change hostname to HOSTNAME 2020-06-18 11:11:12 -07:00
Kubernetes Prow Robot
6bb668c3c4
Merge pull request #92204 from dims/check-for-either-docker-or-containerd-getting-active
Check for either docker or containerd getting active
2020-06-18 06:03:21 -07:00
Kubernetes Prow Robot
c83c4d5453
Merge pull request #92184 from dims/set-better-default-for-loading-images
Set better default commands for loading images
2020-06-18 06:02:52 -07:00
Xinning Shen
27658f8241 Add logic to check if local NVMe SSDs in node boot-up script
Current logic would assume all the NVMe disks are data disks and
applicable for reformat and mount. This will cause the issue when
booting disk is also NVMe disk, which will fail the node boot up. This
change will check if any additional NVMe disks are required/specified
and skip the reformat step otherwise.
2020-06-18 08:48:43 +00:00
Chao Xu
06d034f3c8 remove unnecessary certs generation 2020-06-16 23:47:10 -07:00
Kubernetes Prow Robot
1f629ca4a2
Merge pull request #92150 from sambdavidson/sniflagfix
Fix to configure-kubeapiserver.sh error.
2020-06-16 19:24:12 -07:00
Kubernetes Prow Robot
78774eb5ee
Merge pull request #92078 from jingyih/update_etcd_makefile_for_3p4p9
Update etcd makefile to build 3.4.9 image
2020-06-16 19:23:43 -07:00
Kubernetes Prow Robot
51aac92f69
Merge pull request #91922 from Jefftree/netproxy-009
Upgrade apiserver-network-proxy to v0.0.9
2020-06-16 19:22:39 -07:00
Davanum Srinivas
01183e51f0
Check for either Docker or Containerd getting active for e2e_node tests
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-06-16 20:08:01 -04:00
Davanum Srinivas
fbb4bb0003
Set better default commands for loading images
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-06-16 07:47:02 -04:00
Kubernetes Prow Robot
0a1e58913c
Merge pull request #92123 from YangLu1031/improveStackdriverInstallation
Stabilize StackdriverLogging installation
2020-06-16 04:04:05 -07:00
Kubernetes Prow Robot
b0af921e80
Merge pull request #92060 from lemonli/fix/dns-horizontal-autoscaler
update version to 1.8.1 in addon dns-horizontal-autoscaler.yaml
2020-06-15 23:26:18 -07:00
Yang Lu
0239a7d857 Stabilize stackdriver installation 2020-06-15 18:50:25 -07:00
Samuel Davidson
3958ecb5c7 Fix to configure-kubeapiserver.sh error.
It no no longer errors and exits if
env-var OLD_LOAD_BALANCER_IP is undefined.
2020-06-15 11:42:05 -07:00
Aldo Culquicondor
55242bf3c9 Support kube-scheduler component-config in GCE init scripts
Taking precedence over some existing flags.

Signed-off-by: Aldo Culquicondor <acondor@google.com>
2020-06-15 09:41:18 -04:00
Mikhail Mazurskiy
b75ea1b052
Fix error check logic
If copy finished file (err == nil) then
use the error returned from out.Close()
2020-06-15 22:00:56 +10:00
Kubernetes Prow Robot
29f96dfa2d
Merge pull request #92063 from jingxu97/June/docker
Add WINDOWS_CONTAINER_RUNTIME env variable and set default to docker for windows node
2020-06-14 18:53:56 -07:00
Kubernetes Prow Robot
79960095dd
Merge pull request #91124 from barney-s/update_win_sd
Bump Stackdriver version to 1.11
2020-06-13 00:33:56 -07:00
Jing Xu
953597134b Add WINDOWS_CONTAINER_RUNTIME env vairable
Now the default value of container runtime for linux is changed to
containerd. However, containerd is not ready to be used in Windows node.
THis PR adds a new env varabile to handle container runtime setup for
windows nodes. This way, linux and windows can set up their owe container runtime.
By default, linux uses containerd while windows uses dockerd
2020-06-12 17:22:12 -07:00
Jefftree
c6b2b1fad3 Add health port to network proxy 2020-06-12 16:44:56 -07:00
jingyih
303273d0e9 Update etcd makefile to build 3.4.9 image 2020-06-12 09:20:33 -07:00
Kubernetes Prow Robot
e7ca64fbe1
Merge pull request #92042 from kubernetes/revert-90400-1737
Revert "fix cross build conformance image error"
2020-06-12 02:24:35 -07:00
Kubernetes Prow Robot
eff58cc003
Merge pull request #92034 from YangLu1031/master
Flush cache to disk to persist configuration status
2020-06-12 02:24:25 -07:00
Kubernetes Prow Robot
c5ef7ee997
Merge pull request #92031 from dims/fix-default-runtime-endpoint-for-docker
fix default CONTAINER_RUNTIME_ENDPOINT for docker
2020-06-12 02:24:11 -07:00
lemonli
e421575243 update version to 1.8.1 in addon dns-horizontal-autoscaler.yaml 2020-06-12 10:50:54 +08:00
Carlos Tadeu Panato Junior
305d65837d
Revert "fix cross build conformance image error" 2020-06-11 18:01:40 +02:00
Kubernetes Prow Robot
06e3aeccc4
Merge pull request #89089 from losipiuk/lo/remove-endpoints-rbac-ca
Remove endpoints RBAC for Cluster Autoscaler
2020-06-11 08:18:56 -07:00
Yang Lu
c84eb12357 Flush cache to disk to persist setup status 2020-06-11 05:15:30 -07:00
Davanum Srinivas
66015ff654
fix default CONTAINER_RUNTIME_ENDPOINT for docker
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-06-11 06:41:17 -04:00
Jordan Liggitt
ac5ec4aa80 Adjust admission webhook auth config for default-enabled admission plugins 2020-06-10 13:46:30 -04:00
Kubernetes Prow Robot
47e79c73cb
Merge pull request #91684 from dims/use-containerd-as-default-in-cluster-kube-up
Use containerd as default in kube-up.sh
2020-06-09 14:49:21 -07:00
Wenjia Zhang
d162e09a26 -a 2020-06-08 19:59:32 -07:00
Davanum Srinivas
1731cb30f5
Use containerd as default in kube-up.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-06-07 14:34:50 -04:00
Kubernetes Prow Robot
db152fdd7d
Merge pull request #91756 from wojtek-t/remove_etcd_empty_dir_cleanup
Remove etcd-empty-dir-cleanup image
2020-06-05 15:30:24 -07:00
Kubernetes Prow Robot
3509b46fc6
Merge pull request #91612 from bsdnet/gci
Improve COS image document for E2E test
2020-06-05 15:30:00 -07:00
Kubernetes Prow Robot
5de465e67d
Merge pull request #91581 from monotek/fluentd-metadatafilter-fix
[fluentd] update gemfile to fix metadata plugin bug
2020-06-05 15:29:46 -07:00
Kubernetes Prow Robot
65821acd87
Merge pull request #91796 from pjh/repair-powershell
Repair syntax error in Windows-GCE startup script
2020-06-05 01:53:43 -07:00
wojtekt
7a9d46a8bc Remove etcd-empty-dir-cleanup image 2020-06-05 08:41:31 +02:00
wojtekt
ee27e5b8be Remove all references to etcd-empty-dir-cleanup. 2020-06-05 08:41:31 +02:00
Kubernetes Prow Robot
2dc408abb3
Merge pull request #91729 from wojtek-t/addon_resizer_1_8_10
Bump addon-resizer image to 1.8.10
2020-06-04 18:00:12 -07:00
Kubernetes Prow Robot
c0455a1853
Merge pull request #91154 from liggitt/signer-duration
Mark experimental-cluster-signing-duration deprecated, add --cluster-signing-duration
2020-06-04 17:59:45 -07:00
Peter Hornyack
0a4f3f64a7 Repair syntax error in Windows-GCE startup script 2020-06-04 17:45:38 -07:00
wojtekt
b1f4bfb03e Bump addon-resizer image 2020-06-04 19:28:07 +02:00
Kubernetes Prow Robot
0615d4c3e8
Merge pull request #91635 from cpanato/GH-86267
get-kube.sh: fix order to get the binaries from the right bucket
2020-06-02 21:36:17 -07:00
Vinayak Goyal
8daa9e6f77 Updating kube-controller-manager to run as non-root. 2020-06-02 14:07:00 -07:00
Roy Yang
3336d59ab2 Update COS/GCI document
Signed-off-by: Roy Yang <royyang@google.com>
2020-06-01 14:34:31 -07:00
Kubernetes Prow Robot
c5444496d5
Merge pull request #91564 from saschagrunert/update-cri-tools
Update cri-tools to v1.18.0 (#2)
2020-06-01 13:10:14 -07:00
Carlos Panato
715aa8b733
get-kube.sh: fix order to get the binaries from the right bucket 2020-06-01 17:59:33 +02:00
André Bauer
7433364bb4 update gemfile to fix metadata plugin bug
Signed-off-by: André Bauer <monotek23@gmail.com>
2020-05-29 13:52:41 +02:00
ialidzhikov
32d9336283 Update Calico cpva to v0.8.3
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2020-05-29 12:39:46 +03:00
Sascha Grunert
d2fc2d282d
Update cri-tools to v1.18.0
This updates cri-tools to the latest release as well as pointing the
artifacts to the new Google Cloud Bucket `k8s-artifacts-cri-tools`.

This reverts commit ce1840d253.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-05-29 10:56:02 +02:00
Xiang Dai
e09bc312cb *.sh: cleanup all white noise
Signed-off-by: Xiang Dai <long0dai@foxmail.com>
2020-05-29 09:56:00 +08:00
wojtekt
5d93888f20 Bump addon resizer to 1.8.9 version 2020-05-28 19:37:01 +02:00
Marcin Maciaszczyk
e5af792ad2 Bump Dashboard to v2.0.1 2020-05-28 13:08:53 +02:00
Kubernetes Prow Robot
c1707541d8
Merge pull request #91456 from tosi3k/propagate-am-whitelist-override
Propagate KUBECTL_PRUNE_WHITELIST_OVERRIDE to master kube-env
2020-05-27 02:20:40 -07:00
Kubernetes Prow Robot
bc06f367d4
Merge pull request #91466 from prameshj/dns-autoscaler
Include Unschedulable nodes to compute kube-dns replica in DNS autoscaler.
2020-05-26 19:13:28 -07:00
Kubernetes Prow Robot
f91c1ef60e
Merge pull request #91370 from justaugustus/cni
Update CNI to v0.8.6
2020-05-26 13:38:01 -07:00
Pavithra Ramesh
10f300313e Include unschedulable nodes to compute dns replica
This change picks up the new flag added to cluster autoscaler to include
unschedulable nodes when computing number of DNS replica. This fixes an
issue where cordoning large nodepools can cause a big drop in the number
of kube-dns replicas and cause existing workloads to see DNS outage.
2020-05-26 12:08:14 -07:00
Antoni Zawodny
b1bd5113d4 Propagate KUBECTL_PRUNE_WHITELIST_OVERRIDE to master kube-env 2020-05-26 15:58:15 +02:00
Kubernetes Prow Robot
f01d848c48
Merge pull request #91329 from dims/switch-kube-controller-manager-to-distroless-image
Switch kube-controller-manager to distroless image
2020-05-22 17:23:10 -07:00
Stephen Augustus
b692502a9d Update CNI to v0.8.6
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-05-22 17:48:56 -04:00
Kubernetes Prow Robot
10caa46f6b
Merge pull request #91300 from dims/move-to-latest-etcd-3.4.7-2
Switch over to new etcd 3.4.7-2 image
2020-05-22 04:14:37 -07:00
Kubernetes Prow Robot
cb044a950c
Merge pull request #91343 from neolit123/1.19-fix-cluster-readme
cluster/README.md: update notes about content
2020-05-21 21:28:37 -07:00
Kubernetes Prow Robot
9e06faa1fb
Merge pull request #91240 from tosi3k/bump-am-version
Update kube-addon-manager to v9.1.1
2020-05-21 19:40:37 -07:00
Davanum Srinivas
b1742f19ef
Switch kube-controller-manager to distroless image
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-21 22:33:54 -04:00
Davanum Srinivas
bd835d8a1c
Switch over to new etcd 3.4.7-2 image
Add a safety switch to stop doing anything if migrate failed. We
previously just ignored the exit code from migrate utility

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-21 22:16:08 -04:00
Lubomir I. Ivanov
eb4f64b25f cluster/README.md: update notes about content
- Adjust the link to point at https://kubernetes.io/docs/setup/
to alternative solutions.
https://kubernetes.io/docs/getting-started-guides already redirects to
https://kubernetes.io/docs/setup/ and it does not contain details on
/cluster usage.
- Remove notes about the contents of the folder, leaving only the
deprecation notice and link to alternatives.
2020-05-22 00:55:18 +03:00
Kubernetes Prow Robot
a49da364eb
Merge pull request #90093 from ialidzhikov/enh/cpva
Update Calico cpva to v0.8.2
2020-05-21 14:44:37 -07:00
Kubernetes Prow Robot
c97c61ebe8
Merge pull request #91304 from karan/gcireviewer
add karan to gci reviewer
2020-05-20 19:42:20 -07:00
Kubernetes Prow Robot
52358fe010
Merge pull request #91228 from sambdavidson/iprotflags
Add SNI flags usage to configure-*.sh
2020-05-20 19:41:30 -07:00
Kubernetes Prow Robot
2f883e5802
Merge pull request #90618 from jingxu97/Mar/windows
Install diskutil into GCE  windows node
2020-05-20 19:40:33 -07:00
Samuel Davidson
20b37d6c5a Add IP rotation flags and env-vars to configure-*.sh 2020-05-20 13:07:37 -07:00
Karan Goel
451592c6a5 add karan to gci reviewer 2020-05-20 10:42:42 -07:00
Jacek Kaniuk
57caa27b8d Do not add kube-apiserver performance flags if already set 2020-05-20 19:05:16 +02:00
Antoni Zawodny
15e491eb2f Update kube-addon-manager to v9.1.1 2020-05-20 09:50:20 +02:00
Kubernetes Prow Robot
cf13f8d994
Merge pull request #91261 from tosi3k/am-patch-1
Fix permissions in kube-addon-manager
2020-05-19 22:02:28 -07:00
Kubernetes Prow Robot
d17947ea3a
Merge pull request #91171 from dims/switch-etcd-to-bash-static
Switch to static bash and distroless image for etcd
2020-05-19 22:02:19 -07:00
Kubernetes Prow Robot
b5eb3831c3
Merge pull request #91239 from jprzychodzen/revert-cri-tools
Revert "Update cri-tools to v1.18.0"
2020-05-19 20:35:27 -07:00
Jing Xu
e71acffdfe Install diskutil into GCE windows node
This PR installs a utility diskutil.exe into GCE windows node. This is a
workaround for csiproxy be able to get disk id by name. This utility
will be placed once issue is addressed.
2020-05-19 18:36:16 -07:00
Davanum Srinivas
c1c2b663f0
Add cloudbuild.yaml for etcd
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-19 17:05:24 -04:00
Davanum Srinivas
c225d13abc
Switch to static bash for etcd
- use bash-static and avoid dragging in all of debian-base
- use distroless as the base image
- the shell script needs a `cp` utility, add a go based one for just
  files (no support for directories!)
- Rework the calls to `mv` and recursive `cp` in the code
- we don't need to support windows in this container image
- the test case was slightly off as it was assuming that the old
  directory was copied into the new directory, but the desired
  functionality is that all files in the old directory should be in the
  new directory.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-19 17:05:24 -04:00
Davanum Srinivas
5c966e3beb
Use staging-csi to work around quay.io availability
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-19 12:51:54 -04:00
Antoni Zawodny
3c5585bfd9 Fix permissions in kube-addon-manager 2020-05-19 17:40:09 +02:00
Jakub Przychodzeń
ce1840d253 Revert "Update cri-tools to v1.18.0"
This reverts commit 4b3e023659.
2020-05-19 11:19:39 +02:00
Kubernetes Prow Robot
1e2ddd1261
Merge pull request #89461 from wawa0210/change-ip-masq-os-label
[Trival] beta.kubernetes.io/os deprecated since v1.14, are targeted for removal in v1.18
2020-05-18 17:43:49 -07:00
Kubernetes Prow Robot
e215a8772c
Merge pull request #91210 from tosi3k/dont-log-node-ip-range-to-stdout
Log user provided NODE_IP_RANGE to stdout instead of stderr
2020-05-18 13:34:08 -07:00
Antoni Zawodny
5ec2ff2d20 Remove logging user provided NODE_IP_RANGE to stderr 2020-05-18 16:59:27 +02:00
Sascha Grunert
4b3e023659
Update cri-tools to v1.18.0
Bump cri-tools to the latest version and update test scripts.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-05-18 13:38:41 +02:00
Davanum Srinivas
07d88617e5
Run hack/update-vendor.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-16 07:54:33 -04:00
Davanum Srinivas
442a69c3bd
switch over k/k to use klog v2
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-16 07:54:27 -04:00
Kubernetes Prow Robot
9d3406c27b
Merge pull request #91136 from tosi3k/am-version-update
Bump addon-manager's version to v9.1.0
2020-05-15 23:02:41 -07:00
Jordan Liggitt
950ed38996 Mark experimental-cluster-signing-duration deprecated, add --cluster-signing-duration 2020-05-15 14:09:58 -04:00
Antoni Zawodny
f2c22addf5 Bump addon-manager's version to v9.1.0 2020-05-15 12:52:46 +02:00
Kubernetes Prow Robot
e6433bd76b
Merge pull request #91018 from tosi3k/am-whitelist-configuration
Allow overriding the default list of resources of list in addon-manager
2020-05-15 02:48:11 -07:00
张潇
fdef0a6767
beta.kubernetes.io/os is already deprecated 2020-05-15 08:27:06 +08:00
Barni S
d826b4b05c Bump Stackdriver version to 1.11 2020-05-14 18:45:17 -04:00
Kubernetes Prow Robot
b8be11e3fc
Merge pull request #90995 from prameshj/nodelocal-image
Use the latest node-cache image.
2020-05-12 08:25:28 -07:00
Antoni Zawodny
ca90cf6049 Allow overriding the default list of resources of list in addon-manager 2020-05-12 12:50:05 +02:00
Tim Hockin
d681a04541 Force LICENSES refresh on GCE images
Some test images have it baked in.
2020-05-11 14:25:26 -07:00
Pavithra Ramesh
1ea97db78a Use the latest node-cache image.
The image has debian base 2.0.0, some stability fixes and also uses
UDP to connect to stubDomains configured via kube-dns configmap.
2020-05-11 13:10:27 -07:00
Yuwen Ma
1aa67fc525
Switch core master base images from debian to distroless
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-09 06:55:00 -04:00
Kubernetes Prow Robot
785aadca7f
Merge pull request #90248 from prameshj/affinitydns
Add back anti-affinity to kube-dns pods.
2020-05-09 00:43:51 -07:00
Kubernetes Prow Robot
7d53ecee37
Merge pull request #90575 from thockin/fix_license_again
Reorganize vendor licenses again (revert #85220)
2020-05-08 23:03:51 -07:00
Tim Hockin
325ea6e3c2 Restructure licenses again (revert cd4474a)
This moves licenses of vendored code from one monolith file into a tree
of individual files for easier reviews.  This fixes both the bash and
bazel paths.
2020-05-07 21:48:59 -07:00
Tim Hockin
9213616a23 Add better debug when GCE cluster turnups fail 2020-05-07 19:43:32 -07:00
Walter Fender
339918d206 Add admin account on master for kube-up
Creates a master local admin account.
If you are on the master you can now run kubectl.
For issue 87481.
2020-05-06 17:19:58 -07:00
Kubernetes Prow Robot
14eb291084
Merge pull request #90751 from yliaog/windep
Removed leftover comments for the deleted function Get_MgmtSubnet
2020-05-05 20:03:09 -07:00
Kubernetes Prow Robot
d8a513ef99
Merge pull request #90697 from justaugustus/base-images
base-images: Use new debian-base:v2.1.0 and build new debian-iptables:v12.1.0
2020-05-05 18:01:23 -07:00
Kubernetes Prow Robot
27f06962d8
Merge pull request #90744 from prameshj/kubedns-version
Bump up the kube-dns version to 1.15.10
2020-05-05 12:39:22 -07:00
Stephen Augustus
d95dcc61f3 cluster/images/etcd: Bump etcd image tags for new debian-base
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-05-05 15:16:38 -04:00
Yu Liao
eb6ee368b9 Removed leftover comments for the deleted function Get_MgmtSubnet 2020-05-04 21:25:51 -07:00
Pavithra Ramesh
069381edec Bump up the kube-dns version to 1.15.10 2020-05-04 16:14:53 -07:00
Pavithra Ramesh
aaa0d12cc7 Add back anti-affinity to kube-dns pods.
This change also updates to the latest kube-dns images. The
anti-affinity change was previously rolled back in https://github.com/kubernetes/kubernetes/pull/59357
Adding this back as there have been imrpovements in scheduler
performance since.
2020-05-04 15:40:19 -07:00
Davanum Srinivas
0d38f21932
Use bionic repo for docker as focal is not yet available
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-03 16:50:49 -04:00
Stephen Augustus
64300d8fff deps: Update dependents to use debian-base:v2.1.0
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-05-02 23:09:09 -04:00
Stephen Augustus
f828821eea releng: Point debian-base image references to K8s Infra
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-05-02 22:51:40 -04:00
Kubernetes Prow Robot
4a7360debf
Merge pull request #90665 from justaugustus/base-images
cleanup: Base image workflow improvements
2020-05-02 01:54:26 -07:00
Stephen Augustus
410b388ad0 build: Fix base image versions on dependents
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
2020-05-01 20:39:07 -04:00
Kubernetes Prow Robot
628b413f8e
Merge pull request #90400 from zhlhahaha/1737
fix cross build conformance image error
2020-05-01 09:34:30 -07:00
Kubernetes Prow Robot
15d6c9a5ea
Merge pull request #90605 from yliaog/windep
switched to default non-masquerade destination ranges
2020-05-01 00:41:54 -07:00
Jie Shen
c71a25e912
Fix shellcheck warnings/errors in cluster/gce/upgrade.sh (#88576)
* Fix shellcheck warnings/errors in cluster/gce/upgrade.sh

* Update cluster/gce/upgrade.sh

Co-Authored-By: Slava Semushin <slava.semushin@gmail.com>

Co-authored-by: Slava Semushin <slava.semushin@gmail.com>
2020-04-30 21:26:06 -07:00
Kubernetes Prow Robot
29e6bff03a
Merge pull request #90420 from neolit123/1.19-remove-cluster-juju
/cluster: remove juju
2020-04-30 15:55:37 -07:00
Yu Liao
9684c13fba switched to default non-masquerade destination ranges 2020-04-30 12:29:34 -07:00
Kubernetes Prow Robot
7229e13036
Merge pull request #90423 from neolit123/1.19-move-cluster-bash-to-util
/cluster: add / update OWNERS labels
2020-04-29 04:52:24 -07:00
ialidzhikov
20d44dfbfe Update Calico cpva to v0.8.2
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2020-04-28 09:36:14 +03:00
Kubernetes Prow Robot
62880cb122
Merge pull request #90421 from neolit123/1.19-remove-cluster-clientbin
/cluster: cleanup clientbin.sh
2020-04-27 22:26:33 -07:00
Lubomir I. Ivanov
b4bbf0a69f /cluster: cleanup clientbin.sh
clientbin.sh is only used in kubectl.sh. It contains logic
for finding a binary that was build from the k/k tree
and for printing errors if the binary cannot be found.

- Remove clientbin.sh
- Remove references of clientbin.sh from /cluster/BUILD
- Use hack/lib/util.sh's kube::util::find-binary for finding the binary
2020-04-28 00:27:33 +03:00
Kubernetes Prow Robot
e494b0788b
Merge pull request #89543 from bartekzurawski/fix-kube-up-gce-private-restart
Set ip alias route on kubernetes-master during booting
2020-04-24 09:38:07 -07:00
Howard Zhang
7550ea0ab3 fix cross build conformance image error
After using docker buildx build --platform,
conformance image can build from correct
architecture debian:stretch-slim image.

Signed-off-by: Howard Zhang <howard.zhang@arm.com>
2020-04-24 16:10:43 +08:00
Lubomir I. Ivanov
c0387ab3ac /cluster: add / update OWNERS 2020-04-24 03:21:07 +03:00
Lubomir I. Ivanov
b08cd0e2cb remove /cluster/juju
Juju changed home and was cleaned up in 422a7ec49.
Remove the "provider" leftover in /cluster/juju.

No references were found in k/test-infra, k/k.
2020-04-23 23:58:14 +03:00
Joakim Roubert
bf77061cb1 Fix shellcheck failures in cluster/pre-existing/util.sh
This is merely bringing PR #82059 back to life in a contemporary
context, so all cred should go to k-toyoda-pi (and BenTheElder).

Change-Id: I7cf33e50adabbd23d18348448c21c6255502c1ba
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2020-04-23 16:02:48 +02:00
Kubernetes Prow Robot
53374fa519
Merge pull request #90343 from neolit123/1.19-remove-kubernetes-anywhere
remove kubernetes-anywhere from this repository
2020-04-22 19:22:24 -07:00
Kubernetes Prow Robot
1bcd49d5cd
Merge pull request #90156 from vinayakankugoyal/nonroot
Run kube-scheduler and kube-addon-manager as non root
2020-04-22 19:21:46 -07:00
Lubomir I. Ivanov
ad63ad7d40 cluster: cleanup unused scripts
Verified with k/k and k/test-infra.

- restore-from-backup.sh
Performs restoration of etcd snapshots and the logic seems valid
on a quick look, but doesn't seem to be used anywhere in our infra.
I suspect this is used on demand for local testing, but /cluster root
doesn't seem like the right place for it at this point.
- test-*.sh
Gikgo related calls but these bash scripts seem unused in the infra.
2020-04-22 03:45:56 +03:00
Lubomir I. Ivanov
820c87c069 remove kubernetes-anywhere from this repository
The project has been deprecated since Dec 2018 and is unused.

Cleanup in:
- /test/e2e/framework/
- /cluster/
2020-04-21 22:52:51 +03:00
toyoda
a01b1dada5 Fix shellcheck failure in cluster/gce/config-default.sh 2020-04-17 16:11:58 +09:00
Vinayak Goyal
7a5f4c47de Run kube-scheduler and kube-addon-manager as non root 2020-04-16 14:50:04 -07:00
Kubernetes Prow Robot
3b00d7dce5
Merge pull request #89415 from wiremind/fluent-plugin-kubernetes_metadata_filter
cluster addons: fluentd-elasticsearch: update gems.
2020-04-14 22:00:03 -07:00
Kubernetes Prow Robot
aed3f05495
Merge pull request #88459 from joakimr-axis/joakimr-axis_config-test.sh
Fix shellcheck warnings/errors in cluster/gce/config-test.sh
2020-04-14 15:38:02 -07:00
Bartek Żurawski
3e4744c736 Set ip alias route on kubernetes-master during booting 2020-04-15 00:03:05 +02:00
Kubernetes Prow Robot
ea2d784545
Merge pull request #89895 from jingyih/update_etcd_server_3p4p7
Update default etcd server to 3.4.7 in k8s v1.19
2020-04-14 12:34:06 -07:00
jingyih
394df132bd Update default etcd server to 3.4.7 2020-04-13 14:37:56 -07:00
Stavros Foteinopoulos
ff144a17ea
Add node-local-dns headless service 2020-04-13 09:58:34 +03:00
Kubernetes Prow Robot
c0be582ca5
Merge pull request #89269 from Jefftree/network-proxy-beta
Use v1beta1 for egress selector config
2020-04-09 18:07:49 -07:00
Kubernetes Prow Robot
08e1fd3bb9
Merge pull request #89970 from liggitt/static-priority
Fix priorityClassName typo, add numeric priority to static pods
2020-04-09 07:49:57 -07:00
Joakim Roubert
21bef7536c Fix shellcheck warnings/errors in cluster/gce/config-test.sh
Change-Id: I3760337aa345ca5b801587ea12c971a95168f7d7
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2020-04-09 08:30:13 +02:00
Lubomir I. Ivanov
9bbd321fec remove /cluster/kubeadm.sh and /test/cmd/kubeadm.sh
/cluster/kubeadm.sh is used to find the kubeadm binary.
This file is legacy and is removed.

Remove /test/cmd/kubeadm.sh. This file contains a function that is used
to build kubeadm and invoke "make test". Move the function contents
to hack/make-rules/test-cmd.cmd.

Stop sourcing /test/cmd/kubeadm.sh in /test/cmd/legacy-script.sh.

Also remove the --kubeadm-path invocation as this can be handled
with an env. variable directly.
2020-04-09 00:47:15 +03:00
Jordan Liggitt
5534c12dad Fix priorityClass typo, add numeric priority to static pods 2020-04-08 15:33:39 -04:00
Kubernetes Prow Robot
4ae223fbff
Merge pull request #84904 from clarklee92/FixShellCheck
Fix shell check
2020-04-06 19:09:58 -07:00
Kubernetes Prow Robot
c158001bbc
Merge pull request #89825 from tosi3k/log-dump-ssh-timeout
Enable timeout for SSH-ing to non-logexported nodes
2020-04-06 07:15:46 -07:00
Antoni Zawodny
15160168e5 Apply PR fixes 2020-04-06 14:53:02 +02:00
Kubernetes Prow Robot
fa6b9bec81
Merge pull request #89759 from cheftako/master
Switch COS image to m81.
2020-04-04 02:57:46 -07:00
Antoni Zawodny
6e34409f2b Enable timeout for SSH-ing to non-logexported nodes 2020-04-03 17:05:58 +02:00
Kubernetes Prow Robot
d721cb4c71
Merge pull request #89760 from jprzychodzen/le-enable-extra-services
Enable env defined services to dump in logexporter
2020-04-03 06:09:45 -07:00
Kubernetes Prow Robot
81a0e2f62b
Merge pull request #85923 from MrHohn/sig-gcp-owner-file
Migrate OWNERS file to apply the area/provider/gcp label
2020-04-02 19:03:46 -07:00
Mateusz Matejczyk
9639464e43 Propagate CONCURRENT_SERVICE_SYNCS to node env 2020-04-02 14:38:41 +02:00
Jakub Przychodzeń
2b533f9720 Enable env defined services to dump in logexporter 2020-04-02 09:38:39 +02:00
Walter Fender
31393df6ee Switch COS image to m81. 2020-04-02 00:18:31 -07:00
Kubernetes Prow Robot
6a552da932
Merge pull request #89664 from spiffxp/ignore-list-resources-fails
Allow list-resources.sh to continue if a resource fails to list
2020-03-31 20:03:41 -07:00
Kubernetes Prow Robot
a256498ba4
Merge pull request #89661 from pjh/gce-win-pause-bump
Bump GCE Windows pause image version
2020-03-30 17:09:19 -07:00
Kubernetes Prow Robot
103fb552ad
Merge pull request #89634 from YangLu1031/master
Fix dumping docker images log
2020-03-30 17:09:02 -07:00
Aaron Crickenberger
52653195f6 Allow list-resources.sh to continue if a resource fails to list
The list-resources.sh script is used solely by our CI, specifically
kubernetes/test-infra/kubetest with the --check-leaked-resources
flag. Currently if a single resource fails to list, we fail the entire
job.

I think this is too brittle. A review of previous issues on
kubernetes/kubernetes that relate to failure of this script shows that
the issues usually resolve themselves, or would be caught by the diff
of before/after.

Let's instead allow the script to continue listing all resources,
and let kubetest's resource diff fail the job.
2020-03-30 12:01:29 -07:00
Peter Hornyack
72f58ae4ff Bump GCE Windows pause image version
pause-win:1.2.1 is based on the March Windows container base images for
both LTSC 2019 and SAC 1909.
2020-03-30 11:30:53 -07:00
Kubernetes Prow Robot
24d8a17f70
Merge pull request #89601 from pjh/gce-march-images
Update GCE Windows node images with March's Windows updates
2020-03-30 08:22:29 -07:00
Kubernetes Prow Robot
93400b4347
Merge pull request #89578 from oxddr/bump-logexporter
Bump logexporter to v20200327-9ba073aa98
2020-03-30 04:45:53 -07:00
Yang Lu
735ab684ce Fix docker image log dump 2020-03-29 08:43:50 -07:00
Kubernetes Prow Robot
c7abf44a19
Merge pull request #88856 from yaseenhamdulay/patch-1
Create etcd user in cloud-init master.yaml rather than in configure-h…
2020-03-27 20:41:53 -07:00
Peter Hornyack
55df85ba37 Update GCE Windows node images with March's Windows updates 2020-03-27 15:44:08 -07:00
Kubernetes Prow Robot
edbbb6a89f
Merge pull request #89571 from oxddr/enable-logexporter
Revert "Revert "log-dump.sh: allow to dump extra log files""
2020-03-27 14:36:16 -07:00
Janek Łukaszewicz
875e39e37a Bump logexporter to v20200327-9ba073aa98 2020-03-27 16:17:15 +01:00
Kubernetes Prow Robot
3842a92f5f
Merge pull request #89413 from zhouya0/remove_prometheus_references_from_etcd_version_monitor
Remove prometheus references from etcd version monitor
2020-03-27 06:56:23 -07:00
Janek Łukaszewicz
4f0816ebf2 Revert "Revert "log-dump.sh: allow to dump extra log files""
This reverts commit c20e604377.
2020-03-27 12:23:17 +01:00
Peter Hornyack
3583816112 Fix INFRA_CONTAINER variable references
Tested:
NUM_NODES=2 NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true \
  KUBERNETES_NODE_PLATFORM=windows \
  LOGGING_STACKDRIVER_RESOURCE_TYPES=new \
  KUBE_UP_AUTOMATIC_CLEANUP=true \
  WINDOWS_NODE_OS_DISTRIBUTION=win2019 \
  ./cluster/kube-up.sh
2020-03-26 19:30:39 -07:00
Kubernetes Prow Robot
08ce946e09
Merge pull request #89257 from jprzychodzen/fix-create
Util script - move variables setting for replicated master to outer if
2020-03-26 14:10:36 -07:00
Kubernetes Prow Robot
a9f6b93b62
Merge pull request #89498 from sambdavidson/mount-tweak
Changed readonly to true and type to "File" for authn/authz config.
2020-03-26 12:48:43 -07:00
Kubernetes Prow Robot
295b53f7b4
Merge pull request #89214 from jingyih/update_etcd_server_3p4p4
Update default etcd server to 3.4.4 in k8s v1.19
2020-03-26 01:14:24 -07:00
Samuel Davidson
c70cd1e82f Changed readonly to true and type to File for authn/authz config. 2020-03-25 17:45:27 -07:00
Yaseen Hamdulay
58f78a53ee Add ssh_redirect_user 2020-03-24 11:30:48 +00:00
Cédric de Saint Martin
335bfe0911 cluster add-ons: fluentd: update gems.
In particular, update fluent-plugin-kubernetes_metadata_filter to 2.4.5 to solve a potential high apiserver request count.
2020-03-24 08:59:13 +01:00
zhouya0
04d06d2f23 Remove prometheus references from etcd version monitor 2020-03-24 14:23:26 +08:00
Kubernetes Prow Robot
de877ec26e
Merge pull request #89327 from aojea/conntrack
cluster: ipvs conntrack module vs kernel version
2020-03-22 13:28:44 -07:00
Kubernetes Prow Robot
2ede416104
Merge pull request #89309 from yliaog/windep
infra_container is passed in as env variable
2020-03-21 04:10:44 -07:00
Antonio Ojea
33810a99d9 cluster: ipvs conntrack module vs kernel version
We should use 'nf_conntrack' instead of 'nf_conntrack_ipv4'
for linux kernel >= 4.19
2020-03-21 11:23:28 +01:00
Yu Liao
50c0827856 infra_container is passed in as env variable 2020-03-20 10:50:25 -07:00
Michael S. Fischer
c6fa1391f5 nodelocaldns: have Prometheus collect metrics 2020-03-20 08:40:33 -07:00
Jakub Przychodzeń
f48268d13b Util script - move variables setting for replicated master to outer if 2020-03-20 12:42:44 +01:00
Jefftree
936f7665cf network proxy alpha -> beta 2020-03-19 11:49:47 -07:00
yaseenhamdulay
5de3c64ad0 Create etcd user in cloud-init master.yaml rather than in configure-helper.sh
An etcd unix user is currently created in configure-helper.sh if it does not exist
on the master.

cloud-init is the only supported mechanism to add users on COS VMs. If an attempt
is made to add a key using OS Login or the instance metadata mechanism the
google_accounts_daemon will race with useradd and potentially attempt to use
the same UID. This will lock out any attempt to SSH into the VM. We therefore
migrate to using cloud-init to create this user and prevent this issue from occurring.
2020-03-19 11:05:42 +00:00
Kubernetes Prow Robot
f899ad704a
Merge pull request #89069 from enj/enj/i/drop_password_file
Remove support for basic authentication
2020-03-18 22:24:20 -07:00
Kubernetes Prow Robot
51b2d02717
Merge pull request #88676 from dims/remove-hyperkube
Remove hyperkube and debian-hyperkube-base images
2020-03-18 06:36:48 -07:00
Kubernetes Prow Robot
1a334335bc
Merge pull request #88215 from kublr/fix/addon-manager
fix addon manager failing to elect leader on masters with _ in the hostname
2020-03-18 01:44:47 -07:00
jingyih
f9e0e4c6b4 Update default etcd server to 3.4.4 2020-03-18 00:27:46 -07:00
Kubernetes Prow Robot
3667411297
Merge pull request #88865 from caesarxuchao/add-cheftako-owner
Add cheftako as an owner of cluster/
2020-03-17 19:27:45 -07:00
Kubernetes Prow Robot
c53909498c
Merge pull request #88810 from oxddr/logdump-better-logging
log-dump.sh: better logging in case of error from listing GCS
2020-03-17 19:27:08 -07:00
Kubernetes Prow Robot
fbbe9bba8c
Merge pull request #88806 from monotek/fluent-elasticsearch-290
updated fluentd to 1.9.2 & use docker builder pattern in dockerfile
2020-03-17 19:26:55 -07:00
Davanum Srinivas
e6cdc0e0f3
Remove hyperkube 2020-03-17 21:33:50 -04:00
Kubernetes Prow Robot
5011621fe5
Merge pull request #88653 from oxddr/log-dump-extra-files
Bump logexporter version to v20200227-da16e1b17
2020-03-17 16:21:46 -07:00
Kubernetes Prow Robot
8055c92e26
Merge pull request #88125 from mwwolters/flex2healthz
Switch flexvolume_node_setup.sh from kubelet RO port to healthz port
2020-03-17 16:20:07 -07:00
Kubernetes Prow Robot
a6f209c1c0
Merge pull request #86259 from rajansandeep/corednsto1.6.6-kube-up
Bump CoreDNS version to 1.6.7 [kube-up]
2020-03-17 16:19:26 -07:00
Kubernetes Prow Robot
ff21f45680
Merge pull request #89095 from losipiuk/lo/ca-1.18.0
Bump Cluster-Autoscaler to 1.18.0
2020-03-13 07:04:40 -07:00
Kubernetes Prow Robot
3524a5a32a
Merge pull request #89097 from jpbetz/patch-1
Fix unbound variable error in gce/configure.sh
2020-03-12 20:48:38 -07:00
Kubernetes Prow Robot
6847b2aeba
Merge pull request #88955 from pradeepnss/patch-1
Add tolerations with effect "NoExecute" and "NoSchedule" to allow sch…
2020-03-12 18:12:39 -07:00
Joe Betz
23c358d883
Fix unbound variable error in gce/configure.sh
Looks like UBUNTU_INSTALL_RUNC_VERSION should be optional here.
2020-03-12 16:41:25 -07:00
Łukasz Osipiuk
c957b2509f Bump Cluster-Autoscaler to 1.18.0 2020-03-12 21:33:18 +01:00
Łukasz Osipiuk
02915ef179 Remove endpoints RBAC for Cluster Autoscaler 2020-03-12 17:56:45 +01:00
Srinivasa Satya Pradeep Nekkalapudi
66491d2d89 Add tolerations with effect "NoExecute" and "NoSchedule" to allow schedule of nodelocaldns pods on node pools with taints
Currently if we define taints on all node pools in a cluster then nodelocaldns pods wont get scheduled on those node pools. Also in GKE as the daemonset has reconcile flag set tolerations cannot be added. So adding these tolerations will allow nodelocaldns pods to get scheduled on all node pools.
2020-03-11 18:27:13 -07:00
Monis Khan
df292749c9
Remove support for basic authentication
This change removes support for basic authn in v1.19 via the
--basic-auth-file flag.  This functionality was deprecated in v1.16
in response to ATR-K8S-002: Non-constant time password comparison.

Similar functionality is available via the --token-auth-file flag
for development purposes.

Signed-off-by: Monis Khan <mok@vmware.com>
2020-03-11 20:55:47 -04:00
Łukasz Osipiuk
6be4d0a705 Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1 2020-03-11 16:16:30 +01:00
Kubernetes Prow Robot
f8ff8f4420
Merge pull request #88641 from antoninbas/fix-regex-in-conformance-tests-runner
Fix default regular expressions in conformance tests runner
2020-03-09 23:33:35 -07:00
Kubernetes Prow Robot
988982a1f7
Merge pull request #88048 from mtaufen/provider-info-e2etest
Add e2e test for validating JWTs as OIDC tokens
2020-03-06 17:59:34 -08:00