github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
110,078 Commits 1 Branch 31 Tags 1,019 MiB
22cb7ac766
Commit Graph

10935 Commits

Author SHA1 Message Date
Prasad Katti
124386eaa0 Fix identation in kubeadm api docs 2020-05-17 14:05:34 -07:00
Prasad Katti
89fa53f064 Update kubeadm test TestValidateToken 
- Remove some duplicate testcases
- Add token to error message
 2020-05-16 23:46:18 -07:00
Kubernetes Prow Robot
5bace30840
Merge pull request #91148 from liggitt/kubelet-client-metric 
Add kubelet_certificate_manager_client_ttl_seconds gauge
 2020-05-16 19:00:24 -07:00
Kubernetes Prow Robot
b170451caa
Merge pull request #90183 from dims/update-kubernetes-to-klog-v2 
Update kubernetes to klog v2
 2020-05-16 18:59:51 -07:00
Amim Knabben
8459c9b6f4 Moving enable-server and provider-id 2020-05-16 21:34:13 -04:00
Kubernetes Prow Robot
694a9c242e
Merge pull request #90970 from johscheuer/add-readiness-to-controlplane 
kubeadm: use two separate checks on /livez and /readyz for the kube-apiserver
 2020-05-16 07:36:49 -07:00
Kubernetes Prow Robot
45bfd14ee3
Merge pull request #90174 from tnqn/certdir-default-value 
Delete the wrong comment about CertDirectory of kubelet
 2020-05-16 07:36:03 -07:00
Davanum Srinivas
07d88617e5
Run hack/update-vendor.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-16 07:54:33 -04:00
Davanum Srinivas
442a69c3bd
switch over k/k to use klog v2 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-16 07:54:27 -04:00
Jordan Liggitt
950ed38996 Mark experimental-cluster-signing-duration deprecated, add --cluster-signing-duration 2020-05-15 14:09:58 -04:00
Jordan Liggitt
2408d8101f Fix kubelet client certificate gauge 2020-05-15 12:57:34 -04:00
cici37
f52636330a Moving leaderelectionconfig to k8s.io/component-base 2020-05-15 09:08:20 -07:00
xphoniex
64cca18f4f move KubeletStartPhase past config writing phase(s) 2020-05-15 11:06:52 +00:00
Kubernetes Prow Robot
9e88546f30
Merge pull request #91065 from SataQiu/fix-kubeadm-20200513 
kubeadm: log more information when missing the necessary config element
 2020-05-15 02:49:17 -07:00
Kubernetes Prow Robot
c096a37226
Merge pull request #89158 from alena1108/mar16 
Kubelet doc: clarification for api-qps/burst flags
 2020-05-14 17:04:58 -07:00
Kubernetes Prow Robot
5bda0c1b3b
Merge pull request #83726 from cofyc/fix56180 
scheduler: Move all volume binding code into VolumeBinding plugin
 2020-05-14 10:08:23 -07:00
Johannes M. Scheuermann
9a1cbc2711 Use livez and readyz endpoint for API server probes 2020-05-14 17:41:05 +02:00
SataQiu
281f44628f kubeadm: log more information when missing the necessary config element 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-05-14 10:07:03 +08:00
Kubernetes Prow Robot
40b0f4f6cb
Merge pull request #90565 from alculquicondor/cleanup-sched-config 
Remove wrapper around base LeaderElectionConfiguration
 2020-05-13 15:59:05 -07:00
Kubernetes Prow Robot
2ca3347dc0
Merge pull request #90499 from knabben/kubelet-testing-flags 
Deprecating Kubelet not used testing flags
 2020-05-13 15:58:37 -07:00
Kubernetes Prow Robot
3b024339bd
Merge pull request #90645 from neolit123/1.19-fix-retry-etcd-member-add 
kubeadm: fix flakes when performing etcd MemberAdd on slower setups
 2020-05-13 06:04:26 -07:00
Paulo Gomes
e7ced21235
Invert error validation 2020-05-13 09:19:17 +01:00
Kubernetes Prow Robot
977aeab3e5
Merge pull request #90987 from andrewsykim/service-controller-fixup 
service controller: clean up unit tests
 2020-05-13 00:19:13 -07:00
Kubernetes Prow Robot
2f381e06e5
Merge pull request #90872 from mikedanese/integ 
fix some fixture path calculations
 2020-05-13 00:18:54 -07:00
Mike Danese
bd290e924f fix some fixture path calculations 
Current calculations assume that -trimpath is not passed to go tool
compile, which is not the case for test binaries built with bazel. This
causes issues for integration tests right now but is generally not
correct.

The approach taken here is a bit of a hack but it works on the
assumption that if and only if trimpath is passed, we are running under
bazel. I didn't see a good spot for pkgPath(), so I just copied it
around.
 2020-05-12 15:34:55 -07:00
Kubernetes Prow Robot
89ba90573f
Merge pull request #90788 from xlgao-zju/delete-prepull-ds 
kubeadm: delete pre-pull ds and add pull images check in upgrade apply and upgrade node
 2020-05-12 12:08:22 -07:00
Andrew Sy Kim
758c25de2f service controller: store feature gate in local fields for better testability 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-05-12 13:40:54 -04:00
cici37
fd694fa947 Remove CloudControllerManagerPort to k8s.io/cloud_provider 2020-05-12 01:15:16 -07:00
Yecheng Fu
c14b749521 scheduler/volumebinding: move all volume binding logic into VolumeBinding plugin 2020-05-12 10:13:05 +08:00
Kubernetes Prow Robot
b5f67110ed
Merge pull request #87746 from mattjmcnaughton/mattjmcnaughton/poc-compiling-kubelet-wo-docker 
Support compiling Kubelet w/o docker/docker
 2020-05-09 12:01:51 -07:00
Kubernetes Prow Robot
c0dab07d7e
Merge pull request #90680 from andrewsykim/update-owners 
move inactive SIG Cloud Provider approvers to emeritus_approvers
 2020-05-09 07:24:04 -07:00
Kubernetes Prow Robot
b8dd18380f
Merge pull request #90733 from cici37/legacyschema 
Remove //pkg/api/legacyscheme from CCM and CM
 2020-05-09 00:44:19 -07:00
Kubernetes Prow Robot
8d718b1ef5
Merge pull request #90731 from deads2k/csr-separate-signer-flags 
refactor the CSR controller into distinct controllers to allow easy
 2020-05-09 00:44:05 -07:00
cici37
50ea7a0435 Remove pkg/api/legacyscheme from cmd/controller-manager 2020-05-08 09:49:22 -07:00
Kubernetes Prow Robot
2e4bab8065
Merge pull request #90840 from rosti/kubeadm-move-kubelet-featuregates 
kubeadm: Move IPv6DualStack feature gate to component config
 2020-05-08 05:24:09 -07:00
Kubernetes Prow Robot
90f7ae54ac
Merge pull request #90657 from alculquicondor/default-plugin-args 
Move Plugin Args defaults to versioned packages
 2020-05-08 02:03:42 -07:00
Johannes M. Scheuermann
4c5b46d2ae Move validation in own function with tests 2020-05-08 08:52:34 +02:00
Xianglin Gao
a169305207 kubeadm: add pull images check in upgrade apply and upgrade node 
Signed-off-by: Xianglin Gao <xianglin.gxl@alibaba-inc.com>
 2020-05-08 12:42:54 +08:00
Kubernetes Prow Robot
87e5d4e4de
Merge pull request #90630 from nilo19/cleanup/add-import-restrictions-to-ccm 
Add .import-restrictions file to cmd/cloud-controller-manager
 2020-05-07 17:19:42 -07:00
cici37
399b6b50f0 Remove //pkg/api/legacyscheme from CCM 2020-05-07 16:36:14 -07:00
mattjmcnaughton
34c8f51dcb
Remove all uses of dockershim from cmd/kubelet 
We can remove all uses of `dockershim` from `cmd/kubelet`, by just
passing the docker options to the kubelet in their pure form, instead of
using them to create a `dockerClientConfig` (which is defined in
dockershim). We can then construct the `dockerClientConfig` only when we
actually need it.
 2020-05-07 17:18:49 -04:00
mattjmcnaughton
53adde65ce
Remove ExperimentalDockershim from kubelet 
Remove one of two uses of Dockershim in `cmd/kubelet`. The other is for
creating a docker client which we pass to the Kubelet... we will handle
that refactor in a separate diff.

I'm fairly confident, though need to double check, that no one is
actually using this experimental dockershim behavior. If they are, I
think we will want to find a new way to support it (that doesn't require
using the Kubelet only to launch Dockershim).
 2020-05-07 17:18:48 -04:00
Rostislav M. Georgiev
b46259b7af kubeadm: Move IPv6DualStack feature gate to component config 
kubeadm is setting the IPv6DualStack feature gate in the command line of the kubelet.
However, the kubelet is gradually moving away from command line flags towards component config use.
Hence, we should set the IPv6DualStack feature gate in the component config instead.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2020-05-07 14:28:07 +03:00
Aldo Culquicondor
2935480cc8 Move Plugin Args defaults to versioned packages 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-05-06 18:00:23 -04:00
Xianglin Gao
6c6a702a99 kubeadm: delete prepull ds 
Signed-off-by: Xianglin Gao <xianglin.gxl@alibaba-inc.com>
 2020-05-06 15:52:19 +08:00
David Eads
83035890ad refactor the CSR controller into distinct controllers to allow easy configuration of multiple signing keys 2020-05-05 10:18:04 -04:00
Kubernetes Prow Robot
dc6c640a12
Merge pull request #90375 from cici37/removeConfigz 
move pkg/util/configz to k8s.io/component-base
 2020-05-04 13:46:09 -07:00
Brian Pursley
f8cd4a06ef Fixed bug that caused TestKubeletDefault to fail when run on systems that have systemd-resolved active 2020-05-04 11:55:54 -04:00
Andrew Sy Kim
4117d79e7c move inactive SIG Cloud Provider approvers to emeritus_approvers 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-05-01 17:31:17 -04:00
Kubernetes Prow Robot
8caddda753
Merge pull request #90513 from SataQiu/fix-kubeadm-20200427 
kubeadm: do not set deprecated '--cgroup-driver' flag in kubeadm-flags.env, it will be set in config.yaml
 2020-05-01 00:40:32 -07:00
Amim Knabben
fe9eb1ba46 Migrating Kubelet testing flags to configuration 2020-04-30 22:12:39 -04:00
Lubomir I. Ivanov
1c430ff30f kubeadm: fix flakes when performing etcd MemberAdd on slower setups 
In slower setups it can take more time for the existing cluster
to be in a healthy state, so the existing backoff of ~50 seconds
is apparently not sufficient.

The client dial can also fail for similar reasons.

Improve kubeadm's join toleration of adding new etcd members.
Wrap both the client dial and member add in a longer backoff
(up to ~200 seconds).

This particular change should be backported to the support skew.
In a future change for master, all etcd client operations should be
make consistent so that the etcd logic is in a sane state.
 2020-04-30 18:53:29 +03:00
Kubernetes Prow Robot
8dd93ca94c
Merge pull request #90309 from alculquicondor/plugin-args-decoding 
Use internal config types in scheduling plugin args
 2020-04-30 05:32:18 -07:00
Kubernetes Prow Robot
8876563700
Merge pull request #90360 from tnozicka/fix-client-ca-reload 
Fix client-ca dynamic reload in apiserver
 2020-04-30 01:10:18 -07:00
t-qini
a0a6a7e28c Add .import-restrictions file to cmd/cloud-controller-manager 2020-04-30 15:49:58 +08:00
Aldo Culquicondor
98d1e241f1 Use internal config types in scheduling plugin args 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-04-29 17:07:10 -04:00
cici37
7f4d19167e Move pkg/util/configz to k8s.io/component-base 2020-04-29 12:17:25 -07:00
Kubernetes Prow Robot
a26c34e470
Merge pull request #90381 from cici37/features 
Remove CCM's dependency: pkg/features
 2020-04-29 11:42:24 -07:00
cici37
722ab792b4 Use IPv6DualStack as const to avoid extra dep. 2020-04-29 09:06:10 -07:00
Tomas Nozicka
b22a170d46 Fix client-ca dynamic reload in apiserver 2020-04-29 16:03:09 +02:00
Kubernetes Prow Robot
0c3c2cd6ac
Merge pull request #89660 from pjferrell/kubectl-jsonpath-nonprimitive-types 
client-go/util/jsonpath: resolve #16707 by outputting json for non-primitive types
 2020-04-28 22:56:25 -07:00
Aldo Culquicondor
29f5adee7f Remove wrapper around base LeaderElectionConfiguration 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-04-28 15:44:35 -04:00
Aaron Crickenberger
81881e4a12 prune .import-restrictions 
specifically:

- cmd/kubeadm/.import-restrictions
  - we don't need to explicitly allow k8s.io repos (external or published)
- rm pkg/controller/.import-restrictions
  - pkg/client/unversioned was removed in 59042
- pkg/kubectl/.import-restrictions
  - pkg/printers is no longer used
  - pkg/api was masking all of the pkg/apis prefixes
- rm staging/src/k8s.io/code-generator/cmd/lister-gen/.import-restrictions
  - noop / empty file
- test/e2e/framework/.import-restrictions
  - we don't need to explicitly allow k8s.io repos (external or published)
 2020-04-28 08:41:36 -07:00
Aaron Crickenberger
f306a0dbb4 convert .import-restrictions to yaml 
yaml has comments, so we can explain why we have certain rules or
certain prefixes

for those files that weren't already commented yaml, I converted them to
yaml and took a best guess at comments based on the PRs that introduced
or updated them
 2020-04-28 08:41:36 -07:00
SataQiu
afb1ea44b9 kubeadm: do not set deprecated '--cgroup-driver' flag in kubeadm-flags.env, this value will be set in config.yaml 2020-04-27 15:32:10 +08:00
Kubernetes Prow Robot
f8297af392
Merge pull request #90284 from wawa0210/kubelet-nodename-clean 
Remove duplicate calculation nodename、hostname、hostnameOverridden when kubelet is initialized
 2020-04-24 12:15:34 -07:00
Kubernetes Prow Robot
9706b70213
Merge pull request #90411 from johscheuer/improve-error-message 
Improve error message when service cidr is to small
 2020-04-24 03:16:21 -07:00
Kubernetes Prow Robot
340ac700e5
Merge pull request #90424 from prasadkatti/master 
kubeadm: update service check log to include service name
 2020-04-23 23:30:44 -07:00
Johannes M. Scheuermann
889648d6e5 Improve the error message for the service cidr check 2020-04-24 07:46:31 +02:00
Kubernetes Prow Robot
30cefca5a6
Merge pull request #89128 from vincent178/move-runonce-kubeletconfiguration 
move runonce from flag to config
 2020-04-23 17:20:07 -07:00
Prasad Katti
b4e026a1ea kubeadm: update service check log to include service name 2020-04-23 16:51:39 -07:00
wawa0210
40da2c521a
Remove duplicate calculation nodename 、hostname 、hostnameOverridden 2020-04-24 07:49:33 +08:00
Kubernetes Prow Robot
0acf2f0983
Merge pull request #90320 from neolit123/1.19-kubeadm-dont-use-sleep-on-upgrade 
kubeadm: do not use /bin/sleep during upgrade pre-pull
 2020-04-23 12:32:21 -07:00
Kubernetes Prow Robot
613cd04d8c
Merge pull request #90064 from neolit123/1.19-fix-authz-warning 
kubeadm: fix misleading warning for authz modes
 2020-04-23 12:32:06 -07:00
Johannes M. Scheuermann
4211c2dccc Improve error message when service cidr is to small 2020-04-23 20:18:13 +02:00
Kubernetes Prow Robot
52243decf1
Merge pull request #90394 from SataQiu/fix-kubeadm-20200422 
kubeadm: fix the bug that kubeadm does not really respect resolvConf value set by user if systemd-resolved is active
 2020-04-23 08:51:25 -07:00
Kubernetes Prow Robot
95a81f2776
Merge pull request #90328 from SataQiu/fix-kubeadm-20200421 
kubeadm: ensure image-pull-timeout flag is respected during upgrade phase
 2020-04-23 08:51:11 -07:00
SataQiu
28b9a4e0d6 kubeadm: set resolv-conf via the kubelet config file rather than cli flag 2020-04-23 15:07:48 +08:00
Kubernetes Prow Robot
15ed3b36d1
Merge pull request #90235 from cici37/addflag 
Remove CCM dependency pkg/util/flag
 2020-04-22 19:22:14 -07:00
Lubomir I. Ivanov
425552f2c9 kubeadm: do not use /bin/sleep during upgrade pre-pull 
Use an init container that performs the pre-pull of a component
and then start an instance of "pause" as a regular container to
get the DaemonSet Pod in a Running state.

More details on this change in the code comments.
 2020-04-23 04:17:49 +03:00
Kubernetes Prow Robot
43cd2ff239
Merge pull request #89549 from happinesstaker/sa-rotate 
Monitoring safe rollout of time-bound service account token.
 2020-04-22 17:01:58 -07:00
Kubernetes Prow Robot
791b4bbeea
Merge pull request #85266 from serathius/refactor-show-hidden-metric 
Refactor show-hidden-metric-for-version flag
 2020-04-22 17:01:44 -07:00
Jiajie Yang
ae0e52d28c Monitoring safe rollout of time-bound service account token. 2020-04-22 11:59:16 -07:00
cici37
15c844031f Remove CCM dependency pkg/util/flag 2020-04-22 10:06:11 -07:00
Jie Shen
363bb39142
Use utils.net to parse ports instead of atoi (#89120) 2020-04-21 20:55:52 -07:00
SataQiu
449b39a450 kubeadm: ensure image-pull-timeout flag is respected during upgrade phase 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-04-21 16:35:04 +08:00
tangcong
90481a9596 fix kubeadm staticcheck err 2020-04-21 06:54:42 +08:00
Kubernetes Prow Robot
8b0a7dea1d
Merge pull request #90297 from deads2k/silence-usage 
stop printing usage help when the server commands exit
 2020-04-20 14:05:49 -07:00
David Eads
871d6dd8bb stop printing usage help when the server commands exit 2020-04-20 08:29:52 -04:00
Kubernetes Prow Robot
b2689edfdd
Merge pull request #88371 from dharmab/scheduler-synopsis 
Improve scheduler CLI description
 2020-04-17 13:15:36 -07:00
Quan Tian
23e54301ab Delete the wrong comment about CertDirectory of kubelet 
The default value of CertDirectory was changed to /var/lib/kubelet/pki.
 2020-04-18 00:37:27 +08:00
renzheng.wang
ff888f3a43 make kubectl/kubeadm completion script support busybox 2020-04-16 21:50:22 +08:00
Kubernetes Prow Robot
b35fdbc037
Merge pull request #89904 from alculquicondor/raw-extension-plugin-args 
Use RawExtension and Object for external and internal, respectively, scheduling plugin args
 2020-04-15 15:22:59 -07:00
Kubernetes Prow Robot
1df63e7dc7
Merge pull request #88510 from steveazz/steveazz/68026-rlimit 
Fix golint issues for `pkg/util/rlimit`
 2020-04-15 15:22:45 -07:00
Phil Ferrell
ba386aba4f client-go: change jsonpath output of non-primitive types from Go-syntax to JSON 
kubectl: add --output jsonpath-as-json to print a json array of results
kubeadm: fix test case using jsonpath result of non-primitive type
 2020-04-15 14:58:20 -07:00
Dharma Bellamkonda
49bcf18cc5 Improve scheduler CLI description 2020-04-15 14:14:45 -06:00
Kubernetes Prow Robot
b30bfa6f76
Merge pull request #90163 from SataQiu/fix-kubeadm-20200415 
kubeadm: fix some mistakes about log output
 2020-04-15 11:36:33 -07:00
Kubernetes Prow Robot
7f1d09f439
Merge pull request #89593 from neolit123/1.19-skip-kube-proxy-on-upgrade 
kubeadm: skip kube-proxy/dns upgrades on missing ConfigMaps
 2020-04-15 11:36:00 -07:00
SataQiu
004a61a46c kubeadm: fix some mistakes about log output 2020-04-15 14:32:46 +08:00
Lubomir I. Ivanov
83644dda30 kubeadm: update versions for 1.19 2020-04-14 23:27:35 +03:00
Kubernetes Prow Robot
ea2d784545
Merge pull request #89895 from jingyih/update_etcd_server_3p4p7 
Update default etcd server to 3.4.7 in k8s v1.19
 2020-04-14 12:34:06 -07:00
Kubernetes Prow Robot
6c499314cd
Merge pull request #88480 from savitharaghunathan/kubelet_flag_migration_1 
Kubelet flag migration - Part 1
 2020-04-14 12:33:39 -07:00
Steve Azzopardi
4936cd476b
Fix golint issues for pkg/util/rlimit 
pkg/util/rlimit/rlimit_linux.go:25:1: exported function RlimitNumFiles should have comment or be unexported
pkg/util/rlimit/rlimit_linux.go:25:6: func name will be used as rlimit.RlimitNumFiles by other packages, and that stutters; consider calling this NumFiles
pkg/util/rlimit/rlimit_unsupported.go:25:1: exported function RlimitNumFiles should have comment or be unexported
pkg/util/rlimit/rlimit_unsupported.go:25:6: func name will be used as rlimit.RlimitNumFiles by other packages, and that stutters; consider calling this NumFiles

Ref: https://github.com/kubernetes/kubernetes/issues/68026
 2020-04-14 21:00:41 +02:00
Lubomir I. Ivanov
44638a10e8 kubeadm: remove usage of the "certificates" API for cert renewal 
The flag "--use-api" for "alpha certs renew" was deprecated in 1.18.
Remove the flag and related logic that executes certificate renewal
using "api/certificates/v1beta1". kubeadm continues to be able
to create CSR files and renew using the local CA on disk.
 2020-04-14 21:57:37 +03:00
Kubernetes Prow Robot
105c0c6951
Merge pull request #88970 from mysunshine92/correct-NodeAllocatableRoot 
fix function NodeAllocatableRoot
 2020-04-14 11:04:13 -07:00
Aldo Culquicondor
ce05382b58 Use RawExtension and Object for external and internal scheduling plugin args, respectively 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-04-14 13:44:42 -04:00
Kubernetes Prow Robot
250884c9c1
Merge pull request #90127 from needkane/pr 
[cmd/kube-apiserver]  "return []error{} -> return nil" and "update annotation"
 2020-04-14 07:44:12 -07:00
needkane
97d6f2cfd3 (return []error{} -> return nil) and (update annotation) 2020-04-14 00:05:35 -04:00
vincent178
745b742de5 move runonce from flag to config 2020-04-14 06:00:43 +08:00
jingyih
394df132bd Update default etcd server to 3.4.7 2020-04-13 14:37:56 -07:00
Kubernetes Prow Robot
2624a4ad46
Merge pull request #80943 from obitech/yaml_meta 
Add a YAML MetaFactory
 2020-04-13 02:05:47 -07:00
Kubernetes Prow Robot
b17ddac4df
Merge pull request #78944 from avorima/golint_fix_job 
Fix golint errors in pkg/controller/job
 2020-04-12 21:57:47 -07:00
Kubernetes Prow Robot
3641d40a98
Merge pull request #90078 from SataQiu/staging-kubeadm-20200411 
kubeadm: remove the dependence on /pkg/features
 2020-04-12 12:09:47 -07:00
SataQiu
35f3f82029 kubeadm: remove the dependence on /pkg/features 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-04-12 15:05:44 +08:00
Kubernetes Prow Robot
ee6b88ddf9
Merge pull request #90000 from SataQiu/staging-scheduler-20200409 
scheduler: remove direct import to pkg/master/ports
 2020-04-11 10:46:01 -07:00
Kubernetes Prow Robot
eece89a253
Merge pull request #90031 from thockin/proxy-cleanup 
kube-proxy: Startup and updates logging
 2020-04-11 06:23:47 -07:00
SataQiu
41d3e44a2f scheduler: remove direct import to pkg/master/ports 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-04-11 13:56:53 +08:00
Tim Hockin
9551ecb7c3 Cleanup: Change "Ip" to "IP" in func and var names 2020-04-10 15:29:50 -07:00
Tim Hockin
efb24d44c6 Rename iptables IsIpv6 to IsIPv6 2020-04-10 15:29:50 -07:00
Lubomir I. Ivanov
6cfd772401 kubeadm: fix misleading warning for authz modes 
kubeadm init prints:
  W0410 23:02:10.119723   13040 manifests.go:225] the default kube-apiserver
  authorization-mode is "Node,RBAC"; using "Node,RBAC"

Add a new function compareAuthzModes() and a unit test for it.
Make sure the warning is printed only if the user modes don't match
the defaults.
 2020-04-10 23:45:40 +03:00
Lubomir I. Ivanov
83a59c02f9 kubeadm: switch control-plane static Pods to "system-node-critical" 
Use the priority class "system-node-critical" to ensure
the control-plane static Pods have the highest possible priority.
 2020-04-10 23:05:33 +03:00
Kubernetes Prow Robot
2da163bcf5
Merge pull request #89588 from rosti/kubeadm-etcd-upgrade 
kubeadm: Use image tag as version of stacked etcd
 2020-04-09 18:08:03 -07:00
Kubernetes Prow Robot
e322da5ddc
Merge pull request #88585 from pancernik/plugin-args-api-config 
Add types for Scheduler plugin args to kube-scheduler.config.k8s.io
 2020-04-09 09:19:44 -07:00
Kubernetes Prow Robot
1634d9c120
Merge pull request #89982 from neolit123/1.19-fix-kubeadm-integration-tests 
cleanup the kubeadm integration tests and related scripts
 2020-04-09 04:55:44 -07:00
Kubernetes Prow Robot
d58224e4bc
Merge pull request #89929 from deads2k/flag-check 
add flag check to ensure that flowcontrol API is present
 2020-04-08 22:13:43 -07:00
Kubernetes Prow Robot
9d74a1e3db
Merge pull request #89724 from zhouya0/add_missing_build_info_metric 
Add missing kube build version info metrics
 2020-04-08 20:11:44 -07:00
Lubomir I. Ivanov
a18502615e kubeadm-init: allow overriding the dry-run temp directory 
Allow overriding the dry-run temporary directory with
an env. variable (KUBEADM_INIT_DRYRUN_DIR).

Use the same variable in test/cmd/init_test.go.
This allows running integration tests as non-root.
 2020-04-09 01:20:24 +03:00
Lubomir I. Ivanov
04933f3a94 cmd/kubeadm/test/cmd: refactor _test.go files 
Make getKubeadmPath() fetch the KUBEADM_PATH env. variable.
Panic if it's missing. Don't handle the "--kubeadm-path"
flag. Remove the same flag from the BUILD bazel test rule.

Don't handle "--kubeadm-cmd-skip" usage of this flag is missing
from the code base.

Remove usage of "kubeadmCmdSkip" as the flag "--kubeadm-cmd-skip"
is never passed.
 2020-04-09 00:47:16 +03:00
Marek Siarkowicz
24321b2d4e Refactor show-hidden-metric-for-version flag 2020-04-08 22:42:14 +02:00
Lubomir I. Ivanov
d4de1a571a kubeadm: skip kube-proxy and DNS upgrades on missing ConfigMaps 
If the kube-proxy/dns ConfigMap are missing, show warnings and assume
that these addons were skipped during "kubeadm init",
and that their redeployment on upgrade is not desired.

TODO: remove this once "kubeadm upgrade apply" phases are supported:
https://github.com/kubernetes/kubeadm/issues/1318
 2020-04-08 22:58:42 +03:00
Rafał Wicha
c4d20ca8a8 Add types for Scheduler plugin args to kube-scheduler.config.k8s.io 2020-04-08 20:23:56 +01:00
Kubernetes Prow Robot
5123c3a018
Merge pull request #89867 from gongguan/ipvs-check 
remove duplicate ipvs check
 2020-04-07 16:45:57 -07:00
David Eads
45c2f4534c add flag check to ensure that flowcontrol API is present 2020-04-07 15:08:50 -04:00
louisgong
d6ea9d7c4c remove duplicate ipvs check 2020-04-07 23:12:09 +08:00
Kubernetes Prow Robot
cf144eb485
Merge pull request #89656 from dashpole/json_flag 
specify in the flag help text that --enable-cadvisor-json-endpoints d…
 2020-04-06 17:47:48 -07:00
Kubernetes Prow Robot
cabf5d1cdc
Merge pull request #89350 from SataQiu/fix-kube-proxy-20200323 
kube-proxy: treat failure to bind to a port as fatal
 2020-04-06 17:47:20 -07:00
Kubernetes Prow Robot
b984f59fa3
Merge pull request #89735 from rosti/kubeadm-fix-bootstrap-wait 
kubeadm join: Properly wait for TLS bootstrapping
 2020-04-06 11:19:48 -07:00
Kubernetes Prow Robot
4f90253b58
Merge pull request #89596 from neolit123/1.19-fix-misleading-warning-on-jcp 
kubeadm: remove misleading warning on kubeadm join
 2020-04-03 04:27:45 -07:00
Kubernetes Prow Robot
dd35908c7f
Merge pull request #89298 from gavinfish/scheuler-config-alph1 
Remove kubescheduler.config.k8s.io/v1alpha1
 2020-04-02 21:39:59 -07:00
Kubernetes Prow Robot
3c4017c2d0
Merge pull request #89785 from andrewsykim/log-ipvs-err 
ipvs: log err from CanUseIPVSProxier
 2020-04-02 17:24:00 -07:00
Kubernetes Prow Robot
b7aaa59b49
Merge pull request #89585 from cwdsuzhou/March/proxy_kernel 
add `kernelspace` to flag description of kube-proxy
 2020-04-02 12:43:02 -07:00
Andrew Sy Kim
e3656db5bc ipvs: log err from CanUseIPVSProxier 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-04-02 13:48:15 -04:00
Rostislav M. Georgiev
d2c4426e97 kubeadm join: Wait longer for TLS bootstrapping 
The TLS bootstrapping timeout is increased to 5 minutes with a retry
once every 5 seconds. Failing fast if the kubelet is not healthy is also
preserved.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2020-04-02 16:44:39 +03:00
Kubernetes Prow Robot
ad4bd386eb
Merge pull request #86752 from SataQiu/fix-kubelet-20191231 
Add error handler for rlimit.RlimitNumFiles
 2020-04-01 22:14:38 -07:00
SataQiu
871b90ba23 kube-proxy: add '--bind-address-hard-fail' flag to treat failure to bind to a port as fatal 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-04-02 13:13:10 +08:00
Tim Hockin
c27ceb6449
Edit log string 2020-04-01 15:34:29 -07:00
zhouya0
4d3d722ebc Add missing kube build info metric 2020-04-01 17:04:45 +08:00
Kubernetes Prow Robot
0804667ff1
Merge pull request #89151 from jingyih/add_metric_etcd_db_size 
apiserver: add a metric exposing etcd database size
 2020-03-31 12:37:00 -07:00
jingyih
922ec728de Add a metric exposing etcd database size 2020-03-31 09:02:38 -07:00
Tim Hockin
15632b10cb Clean up kube-proxy metrics startup 2020-03-30 10:29:14 -07:00
Tim Hockin
8747ba9370 Clean up kube-proxy healthz startup 
Make the healthz package simpler, move retries back to caller.
 2020-03-30 10:29:14 -07:00
David Ashpole
3ec1043f83 specify in the flag help text that --enable-cadvisor-json-endpoints defaults to false 2020-03-30 09:32:33 -07:00
Rostislav M. Georgiev
c8b7e5739c kubeadm: Use image tag as version of stacked etcd 
kubeadm uses image tags (such as `v3.4.3-0`) to specify the version of
etcd. However, the upgrade code in kubeadm uses the etcd client API to
fetch the currently deployed version. The result contains only the etcd
version without the additional information (such as image revision) that
is normally found in the tag. As a result it would refuse an upgrade
where the etcd versions match and the only difference is the image
revision number (`v3.4.3-0` to `v3.4.3-1`).

To fix the above issue, the following changes are done:
- Replace the existing etcd version querying code, that uses the etcd
  client library, with code that returns the etcd image tag from the
  local static pod manifest file.
- If an etcd `imageTag` is specified in the ClusterConfiguration during
  upgrade, use that tag instead. This is done regardless if the tag was
  specified in the configuration stored in the cluster or with a new
  configuration supplied by the `--config` command line parameter.
  If no custom tag is specified, kubeadm will select one depending on
  the desired Kubernetes version.
- `kubeadm upgrade plan` no longer prints upgrade information about
  external etcd. It's the user's responsibility to manage it in that
  case.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2020-03-30 16:28:45 +03:00
Kubernetes Prow Robot
9cbb46e39f
Merge pull request #89602 from kvaps/fix-rejoin 
Kubeadm: fix Ready condition check
 2020-03-28 00:11:52 -07:00
caiweidong
986a7431ce Add 'kernel' to the comments of proxy-mode 2020-03-28 11:55:37 +08:00
kvaps
68dcc17155 Kubeadm: fix Ready condition check 2020-03-27 23:55:18 +01:00
Lubomir I. Ivanov
63b3bd1826 kubeadm: fix unit test requiring admin.conf and root 2020-03-28 00:43:39 +02:00
Lubomir I. Ivanov
e56b4c3172 kubeadm: remove misleading warning on kubeadm join 
If the user does not provide --config or --control-plane
but provides some other flags such as --certificate-key
kubeadm is supposed to print a warning.

The logic around printing the warning is bogus. Implement
proper checks of when to print the warning.
 2020-03-27 23:09:59 +02:00
Kubernetes Prow Robot
c1fc466cdd
Merge pull request #88854 from bart0sh/PR0088-kubeadm-redesign-printAvailableUpgrades 
kubeadm: redesign printAvailableUpgrades function
 2020-03-27 05:14:23 -07:00
Kubernetes Prow Robot
903f1e63f9
Merge pull request #89537 from neolit123/1.19-kubeadm-add-get-node-rbac 
kubeadm: add missing RBAC for getting nodes on "upgrade apply"
 2020-03-26 20:06:23 -07:00
Lubomir I. Ivanov
6f99791021 kubeadm: add missing RBAC for getting nodes on "upgrade apply" 
b117a928 added a new check during "join" whether a Node with
the same name exists in the cluster.

When upgrading from 1.17 to 1.18 make sure the required RBAC
by this check is added. Otherwise "kubeadm join" will complain that
it lacks permissions to GET a Node.
 2020-03-26 22:02:55 +02:00
Rostislav M. Georgiev
fbfd44f337 kubeadm: Fix panic in isCoreDNSVersionSupported 
A narrow assumption of what is contained in the `imageID` fields for the
CoreDNS pods causes a panic upon upgrade.
Fix this by using a proper regex to match a trailing SHA256 image digest
in `imageID` or return an error if it cannot find it.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2020-03-26 20:26:32 +02:00
yameiwang
6783f991c3 fix function NodeAllocatableRoot 2020-03-26 18:48:05 +08:00
Kubernetes Prow Robot
295b53f7b4
Merge pull request #89214 from jingyih/update_etcd_server_3p4p4 
Update default etcd server to 3.4.4 in k8s v1.19
 2020-03-26 01:14:24 -07:00
notpad
52ad3d95f7 Add test for algorithm provider and policy config file 2020-03-24 23:18:32 +08:00
Ed Bartosh
0eac66d647 kubeadm: refactor printAvailableUpgrades 
Split printAvailableUpgrades into 2 functions:

- genUpgradePlan that handles business logic
- printUpgradePlan that outputs upgrade plan
 2020-03-24 12:47:52 +02:00
Ed Bartosh
e5d6536ade add UpgradePlan to the kubeadm.output API group 2020-03-24 12:47:42 +02:00
Kubernetes Prow Robot
907d4c1bb9
Merge pull request #89381 from dashpole/comment_disable_readonly 
Add comment explaining when to remove cadvisor json endpoints
 2020-03-23 20:31:19 -07:00
David Ashpole
b4ed7273da add comment explaining when to remove the --enable-cadvisor-json-endpoints 2020-03-23 12:52:00 -07:00
gavinfish
1865a104a9 Remove kubescheduler.config.k8s.io/v1alpha1 2020-03-21 15:11:48 +08:00
Kubernetes Prow Robot
72102c04c7
Merge pull request #88728 from notpad/feature/scheduler_e2e_test 
Add test for kube-scheduler command setup
 2020-03-19 20:30:36 -07:00
notpad
16015a691c Add test for kube-scheduler command setup 2020-03-20 07:36:47 +08:00
Davanum Srinivas
1d057da2f7
Move k8s.io/apiserver/pkg/util/term to k8s.io/component-base/term 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-03-19 07:18:09 -04:00
Kubernetes Prow Robot
f899ad704a
Merge pull request #89069 from enj/enj/i/drop_password_file 
Remove support for basic authentication
 2020-03-18 22:24:20 -07:00
jingyih
f9e0e4c6b4 Update default etcd server to 3.4.4 2020-03-18 00:27:46 -07:00
Kubernetes Prow Robot
d45fa525e7
Merge pull request #88945 from sandyleo26/kubeadm-check-windows-wrap-error-properly 
fix: #2056 check_windows wrap error properly
 2020-03-17 19:28:29 -07:00
Kubernetes Prow Robot
ed4c2dbf92
Merge pull request #88893 from kinvolk/invidian/kube-apiserver-so-reuseport 
kube-apiserver: use SO_REUSEPORT when creating listener
 2020-03-17 19:28:11 -07:00
Kubernetes Prow Robot
be2f9e74bf
Merge pull request #88811 from rajansandeep/invalidmigrationfail 
Ensure CoreDNS running when Corefile migration doesn't support current version
 2020-03-17 19:27:18 -07:00
Kubernetes Prow Robot
42c94f35a7
Merge pull request #88541 from cmluciano/cml/41ipvsfix 
ipvs: only attempt setting of sysctlconnreuse on supported kernels
 2020-03-17 16:21:28 -07:00
Kubernetes Prow Robot
393bb44ea9
Merge pull request #88515 from SataQiu/fix-kubelet-20200225 
kubelet: fix wrong flag types
 2020-03-17 16:21:10 -07:00
Alena Prokharchyk
2c6b149bf0 Kubelet doc: clarification for api-qps/burst flags 
Note that the flags don't rate limit the events and node heartbeat apis controlled by the diff set of flags
 2020-03-16 13:27:57 -07:00
Mateusz Gozdek
dfe1f968ac
kube-apiserver: use SO_REUSEPORT when creating listener on Unix systems 
So multiple instances of kube-apiserver can bind on the same address and
port, to provide seamless upgrades.

Signed-off-by: Mateusz Gozdek <mateusz@kinvolk.io>
 2020-03-13 23:55:57 +01:00
Christopher M. Luciano
d22e18ad4f
ipvs: only attempt setting of sysctlconnreuse on supported kernels 
This builds on previous work but only sets the sysctlConnReuse value
if the kernel is known to be above 4.19. To avoid calling GetKernelVersion
twice, I store the value from the CanUseIPVS method and then check the version
constraint at time of expected sysctl call.

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-12 13:16:00 -04:00
Monis Khan
df292749c9
Remove support for basic authentication 
This change removes support for basic authn in v1.19 via the
--basic-auth-file flag.  This functionality was deprecated in v1.16
in response to ATR-K8S-002: Non-constant time password comparison.

Similar functionality is available via the --token-auth-file flag
for development purposes.

Signed-off-by: Monis Khan <mok@vmware.com>
 2020-03-11 20:55:47 -04:00
Sandeep Rajan
fcd229e4bd ensure coredns running when migration fails 
add an additional check for coredns image sha

add a check to see if migration is required
 2020-03-11 11:32:32 -04:00
Ted Yu
ced2948fde Remove wait.Until for running Kubelet Bootstrap 
Signed-off-by: Ted Yu <yuzhihong@gmail.com>
 2020-03-11 08:30:00 -07:00
Savitha Raghunathan
3234d34714 moving volume plugin dir to kubelet config - part 1 2020-03-10 16:22:29 -04:00
changyaowei
b8278e99b8 Made containerd-namespace flag can be used when kubelet config start cmd 2020-03-10 14:26:28 +08:00
Satyadeep Musuvathy
e053fdd08a Add NodeCIDR for detect-local-mode 2020-03-09 13:44:34 -07:00
Sha Liu
12750ac64f kubeadm: wrap error properly in check_windows.go 2020-03-09 22:29:15 +11:00
skilxn-go
6b8fc8dc5e Move TaintBasedEvictions feature gates to GA 2020-03-09 10:49:00 +08:00
Jordan Liggitt
b7c2faf26c client-go dynamic client: add context to callers 2020-03-06 10:56:23 -05:00
Christian Huffman
c6fd25d100 Updated CSIDriver references 2020-03-06 08:21:26 -05:00
Kubernetes Prow Robot
5708511499
Merge pull request #88708 from mikedanese/deleteopts 
Migrate clientset metav1.DeleteOpts to pass-by-value
 2020-03-05 23:09:23 -08:00
Kubernetes Prow Robot
8b8dd79d53
Merge pull request #88768 from damemi/extenders-cc 
Add Extenders to v1alpha2 Component Config
 2020-03-05 20:04:28 -08:00
Mike Danese
76f8594378 more artisanal fixes 
Most of these could have been refactored automatically but it wouldn't
have been uglier. The unsophisticated tooling left lots of unnecessary
struct -> pointer -> struct transitions.
 2020-03-05 14:59:47 -08:00
Mike Danese
c58e69ec79 automated refactor 2020-03-05 14:59:46 -08:00
Mike Dame
1d7006c38d Add Extenders to scheduler v1alpha2 component config 2020-03-05 16:42:15 -05:00
Lubomir I. Ivanov
8943e443e8 kubeadm: deprecate the flag --use-api for cert renewal 
The KCM is moving to means of only singing apiserver (kubelet) client
and kubelet serving certificates. See:
  https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/20190607-certificates-api.md#signers
Up until now the experimental kubeadm functionality '--use-api'
under "kubeadm alpha certs renew" was using the KCM to sign *any*
certficate as long as the KCM has the root CA cert/key.

Post discussions with the kubeadm maintainers, it was decided that
this functionality should be removed from kubeadm due to the
requirement to have external signers for renewing the common
control-plane certificates that kubeadm manages.
 2020-03-05 03:37:00 +02:00
Kubernetes Prow Robot
5c5faed39b
Merge pull request #88287 from gab-satchi/master 
Windows specific kubelet flags in kubeadm-flags.env
 2020-03-04 13:18:52 -08:00
Gab Satch
9fabafdbb1 Windows specific kubelet flags in kubeadm-flags.env 
- Uses correct pause image for Windows
- Omits systemd specific flags
- Common build flags function to be used by Linux and Windows
- Uses user configured image repository for Windows pause image
 2020-03-04 11:05:53 -05:00
Kubernetes Prow Robot
c86aec0564
Merge pull request #88745 from mborsz/slice3 
Implement simple endpoint slice batching
 2020-03-03 03:03:38 -08:00
Maciej Borsz
49b11b5431 Implement simple endpoint slice batching 2020-03-03 08:16:42 +01:00
Kubernetes Prow Robot
90a622bbdb
Merge pull request #88512 from SataQiu/fix-kubeproxy-20200225 
kube-proxy: fix confusing default value for healthz and metrics bind address, deprecate healthz-port and metrics-port flag
 2020-03-02 14:49:53 -08:00
Kubernetes Prow Robot
e9d502e4fc
Merge pull request #88663 from deads2k/enable-profiling-by-default 
update kube-controller-manager and kube-scheduler to match kube-apiserver defaults
 2020-03-02 07:24:43 -08:00
Kubernetes Prow Robot
56987164f8
Merge pull request #88626 from yuzhiquan/patch-clean1 
(cleanup/scheduler): remove unused function
 2020-02-29 07:54:40 -08:00
yuzhiquanlong
3eec87cd91 update WithPlugin comment, in case remove function 2020-02-29 19:53:04 +08:00
Kubernetes Prow Robot
03b7f272c8
Merge pull request #88246 from munnerz/csr-signername-controllers 
Update CSR controllers & kubelet to respect signerName field
 2020-02-28 23:38:39 -08:00
Kubernetes Prow Robot
268d0a1d3a
Merge pull request #85870 from Jefftree/authn-netproxy 
Use Network Proxy with Authentication & Authorizer Webhooks
 2020-02-28 18:44:39 -08:00
David Eads
aa07992a44 update kube-controller-manager and kube-scheduler to match kube-apiserver defaults 2020-02-28 11:18:00 -05:00
Jefftree
1b38199ea8 pass Dialer instead of egressselector to webhooks 2020-02-27 17:47:23 -08:00
Jefftree
d318e52ffe authentication webhook via network proxy 2020-02-27 17:47:23 -08:00
Jonathan Tomer
711c1e1720 Rename --enable-inflight-quota-handler to --enable-priority-and-fairness. 
The old flag name doesn't make sense with the renamed API Priority and
Fairness feature, and it's still safe to change the flag since it hasn't done
anything useful in a released k8s version yet.
 2020-02-27 14:04:37 -08:00
Sandeep Rajan
da8453af6e fix unsupported bug 2020-02-27 10:39:47 -05:00
James Munnelly
a983356caa Add signerName field to CSR resource spec 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2020-02-27 10:17:55 +00:00
Kubernetes Prow Robot
e61a878e6d
Merge pull request #88482 from rajansandeep/fixunsupported 
[kubeadm]: Fix the CoreDNS preflight check for unsupported plugins
 2020-02-26 19:39:33 -08:00
Sandeep Rajan
ca5d394f6a fix the coredns preflight check for unsupported plugins 2020-02-26 15:08:05 -05:00
Aldo Culquicondor
07c4982245 Add unit and integration tests for multiple profiles support 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-02-26 10:14:03 -05:00
Kubernetes Prow Robot
6ec3ea855d
Merge pull request #85282 from serathius/flag-kubelet 
Add show-hidden-metrics-for-version to kubelet
 2020-02-26 03:54:26 -08:00
Kubernetes Prow Robot
5704bff0de
Merge pull request #84913 from serathius/metrics-scheduler 
Add show-hidden-metrics-for-version to scheduler
 2020-02-25 21:02:26 -08:00
Marek Siarkowicz
d44d5b35f3 Add show-hidden-metrics-for-version to kubelet 2020-02-25 20:46:34 +01:00
Aldo Culquicondor
c048858471 Support multiple scheduling profiles in a single scheduler 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-02-25 11:31:20 -05:00
SataQiu
a7d927f1e7 kubelet: fix wrong flag types 2020-02-25 18:04:44 +08:00
SataQiu
c261d12bbf kube-proxy: fix confusing default value for healthz and metrics bind address, deprecate healthz-port and metrics-port flag 2020-02-25 16:59:11 +08:00
Kubernetes Prow Robot
95504c32fe
Merge pull request #86260 from rajansandeep/corednsto1.6.6-kubeadm 
[kubeadm]: Bump CoreDNS version to 1.6.7
 2020-02-24 23:10:49 -08:00
Kubernetes Prow Robot
59870dad01
Merge pull request #87748 from satyasm/kep-local-cidr 
Refactor handling of local traffic detection.
 2020-02-24 19:06:48 -08:00
Kubernetes Prow Robot
f6525dbc81
Merge pull request #88087 from alculquicondor/mutiprofiles-api 
Add Schedulings Profiles to kubescheduler.config.k8s.io/v1alpha2
 2020-02-24 14:43:35 -08:00
Kubernetes Prow Robot
b68f869f43
Merge pull request #88434 from SataQiu/fix-kubeadm-20200223 
kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster
 2020-02-24 13:11:59 -08:00
Sandeep Rajan
a980cb7ead update coredns to 1.6.7 2020-02-24 15:00:55 -05:00
Kubernetes Prow Robot
4e79344501
Merge pull request #88467 from neolit123/1.18-print-volume-verbosity 
kubeadm: modify how component volumes are printed
 2020-02-24 11:03:15 -08:00
Kubernetes Prow Robot
116e27fc19
Merge pull request #86953 from rojkov/ecdsa 
kubeadm: allow creating a cluster with ECDSA keys
 2020-02-24 11:02:50 -08:00
Aldo Culquicondor
9e71741d06 Add Profiles to kubescheduler.config.k8s.io/v1alpha2 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-02-24 09:45:46 -05:00
Lubomir I. Ivanov
1b710a4c56 kubeadm: modify how component volumes are printed 
After the shift for init phases, GetStaticPodSpecs() from
app/phases/controlplane/manifests.go gets called on each control-plane
component sub-phase. This ends up calling the Printf from
AddExtraHostPathMounts() in app/phases/controlplane/volumes.go
multiple times printing the same volumes for different components.

- Remove the Printf call from AddExtraHostPathMounts().
- Print all volumes for a component in CreateStaticPodFiles() using klog
V(2).

Perhaps in the future a bigger refactor is needed here were a
single control-plane component spec can be requested instead of a
map[string]v1.Pod.
 2020-02-24 16:41:03 +02:00
Kubernetes Prow Robot
20e3288277
Merge pull request #88373 from SataQiu/fix-kubeadm-20200220 
kubeadm: fallback to a known etcd version if an unknown k8s version is passed
 2020-02-24 05:14:47 -08:00
Dmitry Rozhkov
109f5db5a3 kubeadm: allow creating a cluster with ECDSA keys 
The selected key type is defined by kubeadm's --feature-gates option:
if it contains PublicKeysECDSA=true then ECDSA keys will be generated
and used.

By default RSA keys are used still.

Signed-off-by: Dmitry Rozhkov <dmitry.rozhkov@linux.intel.com>
 2020-02-24 11:20:07 +02:00
SataQiu
2e23f84745 kubeadm: fallback to a known etcd version if an unknown k8s version is passed 2020-02-24 10:46:39 +08:00
Kubernetes Prow Robot
ac25069a05
Merge pull request #88436 from andrewsykim/ccm-client-builder-cleanup 
use ControllerClientBuilder from k8s.io/cloud-provider in cloud-controller-manager
 2020-02-23 15:04:46 -08:00
Kubernetes Prow Robot
b513f359a0
Merge pull request #88429 from taesunny/master 
Fix: cmd/kubeadm Typos in some error messages, comments
 2020-02-23 11:14:47 -08:00
andrewsykim
ed9492ad69 use ControllerClientBuilder from k8s.io/cloud-provider in cloud-controller-manager 
Signed-off-by: andrewsykim <kim.andrewsy@gmail.com>
 2020-02-23 06:40:20 -05:00
SataQiu
8067dd8470 kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster 2020-02-23 18:57:32 +08:00
Kubernetes Prow Robot
31b8c0d23d
Merge pull request #87656 from ereslibre/do-not-depend-on-cluster-status 
kubeadm: deprecate the `ClusterStatus` dependency
 2020-02-22 22:30:47 -08:00
Kubernetes Prow Robot
b893aa707e
Merge pull request #88052 from neolit123/1.18-renew-use-ca-in-kubeconfig 
kubeadm: update embedded CA in kubeconfig files on renewal
 2020-02-22 20:50:47 -08:00
Taesun Lee
d10e3da92d Fix typos in some error messages, comments 
- cmd/kubeadm
- RemoveContnainers -> RemoveContainers
- iterface -> interface
- stategicMergeSlice -> strategicMergeSlice
 2020-02-23 00:44:47 +09:00
Satyadeep Musuvathy
8c6956e5bb Refactor handling of local traffic detection. 2020-02-21 17:57:34 -08:00
Kubernetes Prow Robot
58fcca211f
Merge pull request #88359 from taesunny/master 
Fix: Typos in apiclient util.
 2020-02-20 19:50:46 -08:00
Kubernetes Prow Robot
58596b2bf5
Merge pull request #88347 from neolit123/1.18-kubeadm-update-constants 
kubeadm: update constants for 1.18
 2020-02-20 04:29:43 -08:00
Kubernetes Prow Robot
79b674d827
Merge pull request #84381 from Sh4d1/egress_selector_proxy_v2 
Use network proxy for proxy subresources
 2020-02-20 04:29:03 -08:00
Rafael Fernández López
3e59a0651f
kubeadm: optimize the upgrade path from ClusterStatus to annotations 
When doing the very first upgrade from a cluster that contains the
source of truth in the ClusterStatus struct, the new kubeadm logic
will try to retrieve this information from annotations.

This changeset adds to both etcd and apiserver endpoint retrieval the
special case in which they won't retry if we are in such cases. The
logic will retry if we find any unknown error, but will not retry in
the following cases:

- etcd annotations do not contain etcd endpoints, but the overall list
  of etcd pods is greater than 0. This means that we listed at least
  one etcd pod, but they are missing the annotation.

- API server annotation is not found on the api server pod for a given
  node name, but no errors aside from that one were found. This means
  that the API server pod is present, but is missing the annotation.

In both cases there is no point in retrying, and so, this speeds up the
upgrade path when coming from a previous existing cluster.
 2020-02-20 12:19:05 +01:00
Rafael Fernández López
b140c5d64b
kubeadm: remove ClusterStatus dependency 
While `ClusterStatus` will be maintained and uploaded, it won't be
used by the internal `kubeadm` logic in order to determine the etcd
endpoints anymore.

The only exception is during the first upgrade cycle (`kubeadm upgrade
apply`, `kubeadm upgrade node`), in which we will fallback to the
ClusterStatus to let the upgrade path add the required annotations to
the newly created static pods.
 2020-02-20 12:18:56 +01:00
Taesun Lee
97fc3e6139
Fix typos in apiclient util 
fix initalTimeout to initialTimeout
 2020-02-20 15:20:04 +09:00
Lubomir I. Ivanov
ad8bf3c139 kubeadm: do not pin unit tests to a version 2020-02-19 22:20:33 +02:00
Lubomir I. Ivanov
22319019ab kubeadm: update constants for 1.18 
- Include 1.19 as a supported etcd mapping.
- Update minimum and current versions.
 2020-02-19 21:40:46 +02:00
Kubernetes Prow Robot
5bd719b6a6
Merge pull request #86810 from bart0sh/PR0087-kubeadm-output-images 
kubeadm config images list: implement structured output
 2020-02-17 17:07:28 -08:00
Kubernetes Prow Robot
ea5cef1c65
Merge pull request #87870 from tedyu/restore-proxier-updater 
Use ProxierHealthUpdater directly to avoid panic
 2020-02-17 10:13:29 -08:00
Ed Bartosh
a31ccc7b99 kubeadm config images list: test structured output 
Implemented tests for 'kubeadm config images list' structured output.
 2020-02-17 17:26:17 +02:00
Ed Bartosh
23e4d05083 kubeadm config images list: implement structured output 
Used cli-runtime API to print image info in 5 formats:

  - TEXT (identical to the current output)
  - YAML
  - JSON
  - JSONPATH
  - Go template
 2020-02-17 17:23:08 +02:00
Ed Bartosh
be7e5b47fe kubeadm config images list: update output API 2020-02-17 17:23:08 +02:00
Benjamin Elder
d827f2634a update stale pause image comment 2020-02-14 14:03:19 -08:00
Benjamin Elder
1631825e44 bump pause to 3.2 in kubelet 2020-02-14 11:40:15 -08:00
Benjamin Elder
a00a1e39ef bump pause to 3.2 in kubeadm 2020-02-14 11:40:15 -08:00
Marek Siarkowicz
8b825d1511 Add show-hidden-metrics-for-version to scheduler 2020-02-14 10:14:31 +01:00
Kubernetes Prow Robot
029e1a06d7
Merge pull request #87967 from zhan849/harry/controller-queue-metrics 
register queue metrics in controller manager
 2020-02-13 16:55:11 -08:00
Kubernetes Prow Robot
77e8c75f32
Merge pull request #87754 from MikeSpreitzer/apf-filter5 
Add twice refactored filter and config consumer for API Priority and Fairness
 2020-02-13 16:54:46 -08:00
Kubernetes Prow Robot
35bb71d855
Merge pull request #88092 from yujuhong/rm-beta-labels 
Replace Beta OS/arch labels with the GA ones
 2020-02-13 14:14:02 -08:00
Yu-Ju Hong
bcd975aa65 Replace Beta OS/arch labels with the GA ones 
Beta OS/arch labels have been deprecated since 1.14.
This change replaces these labels with the GA ones.
 2020-02-13 09:38:51 -08:00
Aldo Culquicondor
99bda6fac0 Remove HardPodAffinityWeight from v1alpha2 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-02-13 11:59:56 -05:00
Patrik Cyvoct
6729bfd648
use network proxy for proxy subresources 
Signed-off-by: Patrik Cyvoct <patrik@ptrk.io>
 2020-02-13 14:42:34 +01:00
Kubernetes Prow Robot
8ca96f3e07
Merge pull request #80724 from cceckman/provider-info-e2e 
Provide OIDC discovery for service account token issuer
 2020-02-13 01:38:35 -08:00
skilxn-go
f5b7e3cca3 Rename PostFilter plugin to PreScore 2020-02-12 23:25:08 +08:00
Lubomir I. Ivanov
0ba5891519 kubeadm: update embedded CA in kubeconfig files on renewal 
While kubeadm does not support CA rotation,
the users might still attempt to perform this manually.
For kubeconfig files, updating to a new CA is not reflected
and users need to embed new CA PEM manually.

On kubeconfig cert renewal, always keep the embedded CA
in sync with the one on disk.

Includes a couple of typo fixes.
 2020-02-12 05:03:20 +02:00
Charles Eckman
5a176ac772 Provide OIDC discovery endpoints 
- Add handlers for service account issuer metadata.
- Add option to manually override JWKS URI.
- Add unit and integration tests.
- Add a separate ServiceAccountIssuerDiscovery feature gate.

Additional notes:
- If not explicitly overridden, the JWKS URI will be based on
  the API server's external address and port.

- The metadata server is configured with the validating key set rather
than the signing key set. This allows for key rotation because tokens
can still be validated by the keys exposed in the JWKs URL, even if the
signing key has been rotated (note this may still be a short window if
tokens have short lifetimes).

- The trust model of OIDC discovery requires that the relying party
fetch the issuer metadata via HTTPS; the trust of the issuer metadata
comes from the server presenting a TLS certificate with a trust chain
back to the from the relying party's root(s) of trust. For tests, we use
a local issuer (https://kubernetes.default.svc) for the certificate
so that workloads within the cluster can authenticate it when fetching
OIDC metadata. An API server cannot validly claim https://kubernetes.io,
but within the cluster, it is the authority for kubernetes.default.svc,
according to the in-cluster config.

Co-authored-by: Michael Taufen <mtaufen@google.com>
 2020-02-11 16:23:31 -08:00
Mike Spreitzer
73614ddd4e Added API Priority and Fairness filter and config consumer 2020-02-10 22:54:40 -05:00
Ted Yu
7a0690cd59 Use ProxierHealthUpdater directly to avoid panic 2020-02-10 09:41:09 -08:00
SataQiu
f2150587f3 kubeadm: remove 'kubeadm upgrade node config' 2020-02-10 18:28:41 +08:00
Harry Zhang
63f0078ccc register queue metrics in controller manager 2020-02-09 14:41:17 -08:00
Kubernetes Prow Robot
abe6321296 Merge pull request #87952 from mikedanese/opts 
add *Options to Create, Update, and Patch in generated clientsets
 2020-02-08 20:43:53 -08:00
Kubernetes Prow Robot
415b3ed950 Merge pull request #87944 from SataQiu/kubeadm-2020020802 
kubeadm: remove 'kubeadm alpha kubelet config download'
 2020-02-08 14:46:57 -08:00
Kubernetes Prow Robot
887ccc483c Merge pull request #87942 from SataQiu/kubeadm-2020020801 
kubeadm: deprecate --kubelet-version command line option
 2020-02-08 14:46:44 -08:00
Kubernetes Prow Robot
a280a967a5 Merge pull request #87853 from alculquicondor/fix/options_test 
Do lenient decoding only for kubescheduler.config.k8s.io/v1alpha1
 2020-02-08 14:46:21 -08:00
Kubernetes Prow Robot
20dca67a8a Merge pull request #87453 from aojea/kubeadm_dual 
kubeadm: dual-stack validation allow single stack
 2020-02-08 14:46:06 -08:00
Mike Danese
25651408ae generated: run refactor 2020-02-08 12:30:21 -05:00
Kubernetes Prow Robot
334d788f08 Merge pull request #87299 from mikedanese/ctx 
context in client-go
 2020-02-08 06:43:52 -08:00
Kubernetes Prow Robot
25501f8425
Merge pull request #87886 from RA489/rmbasheg 
remove bash examples/comments from the v1beta1 and v1beta2 APIs
 2020-02-08 00:21:52 -08:00
SataQiu
0714f814fe kubeadm: remove 'kubeadm alpha kubelet config download' 2020-02-08 14:52:33 +08:00
SataQiu
e167b44c17 kubeadm: deprecate --kubelet-version command line option 2020-02-08 12:56:25 +08:00
Mike Danese
3aa59f7f30 generated: run refactor 2020-02-07 18:16:47 -08:00
Aldo Culquicondor
2ffb13e822 Do lenient decoding only for kubescheduler config v1alpha1 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-02-07 15:41:00 -05:00
RA489
ad9d2d71c0 remove bash examples/comments from the v1beta1 and v1beta2 APIs 2020-02-07 11:27:02 +05:30
Antonio Ojea
6dda7adaf5
kubeadm: dual-stack validation allow single stack 
It turns out that the dual-stack feature enabled doesn't mean that
the cluster MUST be dual-stack, it only indicates that it MAY be
dual-stack but CAN be single-stack.

We should relax the validation to allow single-stack clusters
with dual-stack enabled.
 2020-02-05 12:23:10 +01:00
Tim Allclair
9d3670f358 Ensure testing credentials are labeled as such 2020-02-04 10:36:05 -08:00
Kubernetes Prow Robot
f81242916d
Merge pull request #81056 from neolit123/1.16-kubeadm-node-names 
kubeadm: prevent bootstrap of nodes with known names
 2020-02-01 03:35:20 -08:00
Kubernetes Prow Robot
5ced53c0c4
Merge pull request #87628 from alculquicondor/cc-v1alpha2 
Add kubescheduler.config.k8s.io/v1alpha2
 2020-01-30 16:59:33 -08:00
Aldo Culquicondor
3d83ef2e8e Autogenerated and build files for kubescheduler.config.k8s.io/v1alpha2 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-01-29 17:18:48 -05:00
Aldo Culquicondor
11c4bcd9dd Copy kubescheduler.config.k8s.io/v1alpha1 files onto v1alpha2 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-01-29 17:18:41 -05:00
Mike Danese
d55d6175f8 refactor 2020-01-29 08:50:45 -08:00
Elijah Oyekunle
07e3cca6d0 update existing import-restrictions files 2020-01-28 10:51:45 +01:00
Kubernetes Prow Robot
236eee1eba
Merge pull request #87505 from neolit123/1.18-handle-etcd-members-without-names 
kubeadm: improvements to the concurrent etcd member join support
 2020-01-26 08:51:02 -08:00
Lubomir I. Ivanov
b117a928a6 kubeadm: prevent bootstrap of nodes with known names 
If a Node name in the cluster is already taken and this Node is Ready,
prevent TLS bootsrap on "kubeadm join" and exit early.

This change requires that a new ClusterRole is granted to the
"system:bootstrappers:kubeadm:default-node-token" group to be
able get Nodes in the cluster. The same group already has access
to obtain objects such as the KubeletConfiguration and kubeadm's
ClusterConfiguration.

The motivation of this change is to prevent undefined behavior
and the potential control-plane breakdown if such a cluster
is racing to have two nodes with the same name for long periods
of time.

The following values are validated in the following precedence
from lower to higher:
- actual hostname
- NodeRegistration.Name (or "--node-name") from JoinConfiguration
- "--hostname-override" passed via kubeletExtraArgs

If the user decides to not let kubeadm know about a custom node name
and to instead override the hostname from a kubelet systemd unit file,
kubeadm will not be able to detect the problem.
 2020-01-26 18:50:54 +02:00
Lubomir I. Ivanov
a027c379f7 kubeadm: increase timeouts in the etcd client 
- Extend the exponential backoff for add/remove/... retry to
11 steps ~=106 seconds. From experiments for 3 and more members
the race can take more that ~=26 seconds.
- Increase the dialTimeout for client creation to 40 seconds.
20 seconds seems racy for 3 and more members.
 2020-01-25 00:48:05 +02:00
Lubomir I. Ivanov
5e0c0779a1 kubeadm: handle multiple members without names during concurrent join 
For the etcd client, amend AddMember() to handle a very
rare bug when multiple members can end up with the same
name. Match the member peer address and assign it the name of
the member we are adding. For the rest of the members with missing
names use their member IDs as name. The etcd node is not disrupted
by the unknown names.

The important aspects are:
- The number of members of the initial cluster must match
the members in the cluster.
- The member we are current adding is present in the initial cluster.
 2020-01-25 00:48:05 +02:00
Kubernetes Prow Robot
789dc873f6
Merge pull request #87440 from dims/switch-enable-cadvisor-json-endpoints-flag-to-false 
Default the --enable-cadvisor-endpoints flag to disabled
 2020-01-24 12:18:45 -08:00
Kubernetes Prow Robot
1249dd43ca
Merge pull request #86574 from SataQiu/deprecated-kube-dns 
kubeadm: kube-dns is deprecated and will not be supported in a future version
 2020-01-23 20:26:32 -08:00
Davanum Srinivas
bb587690fd
Default the --enable-cadvisor-endpoints flag to disabled 
As part of #68522, Switching off the cAdvisor v1 Json API that we expose
directly. These include /stats/, /stats/container, /stats/{podName}/{containerName},
and /stats/{namespace}/{podName}/{uid}/{containerName}
 2020-01-21 17:30:46 -05:00
Lubomir I. Ivanov
261f26075c kubeadm: remove the deprecated GA CoreDNS feature-gate 
The CoreDNS GA feature-gate in kubeadm was deprecated since 1.13.
The k8s policy is to remove the gate 2 releases after it transitions
to GA:
https://kubernetes.io/docs/reference/using-api/deprecation-policy/#deprecation

We kept it around for longer to prevent existing setups from breaking
as it caused minimal maintenance overhead.
 2020-01-21 04:54:47 +02:00
Kubernetes Prow Robot
08dd4f5478
Merge pull request #87357 from yutedz/apisvr-flow-cntl 
Add flowcontrol to apiVersionPriorities
 2020-01-19 17:07:36 -08:00
Ted Yu
34f0767137 Add flowcontrol to apiVersionPriorities 2020-01-19 14:16:46 -08:00
Rob Scott
47b2593d59
Creating new EndpointSliceProxying feature gate for kube-proxy 
This creates a new EndpointSliceProxying feature gate to cover EndpointSlice
consumption (kube-proxy) and allow the existing EndpointSlice feature gate to
focus on EndpointSlice production only. Along with that addition, this enables
the EndpointSlice feature gate by default, now only affecting the controller.

The rationale here is that it's really difficult to guarantee all EndpointSlices
are created in a cluster upgrade process before kube-proxy attempts to consume
them. Although masters are generally upgraded before nodes, and in most cases,
the controller would have enough time to create EndpointSlices before a new node
with kube-proxy spun up, there are plenty of edge cases where that might not be
the case. The primary limitation on EndpointSlice creation is the API rate limit
of 20QPS. In clusters with a lot of endpoints and/or with a lot of other API
requests, it could be difficult to create all the EndpointSlices before a new
node with kube-proxy targeting EndpointSlices spun up.

Separating this into 2 feature gates allows for a more gradual rollout with the
EndpointSlice controller being enabled by default in 1.18, and EndpointSlices
for kube-proxy being enabled by default in the next release.
 2020-01-17 16:17:40 -08:00
Kubernetes Prow Robot
916edd922e
Merge pull request #86861 from SataQiu/fix-kubeadm-20200106 
kubeadm upgrades always persist the etcd backup for stacked
 2020-01-16 21:38:56 -08:00
Kubernetes Prow Robot
719b8aa5f3
Merge pull request #86709 from mwmix/scheduler_unit_tests 
Adding unit tests for kube-scheduler Config Complete() method.
 2020-01-16 13:14:31 -08:00
Kubernetes Prow Robot
d9bf22f8f7
Merge pull request #85281 from RainbowMango/pr_add_metrics_flag_to_controller_manager 
Allow show hidden metrics in kube-controller-manager
 2020-01-15 21:20:34 -08:00
Kubernetes Prow Robot
61d36e4a43
Merge pull request #85850 from danwinship/kubelet-ipv6-node-ip 
Allow "kubelet --node-ip ::" to mean prefer IPv6
 2020-01-13 17:41:08 -08:00
Kubernetes Prow Robot
3e8155ead3
Merge pull request #86899 from SataQiu/enable-pull-retry-20200107 
kubeadm: support automatic retry after failing to pull image
 2020-01-13 13:58:41 -08:00
SataQiu
c7234aa177 kubeadm: support automatic retry after failing to pull image 2020-01-11 15:10:56 +08:00
Kubernetes Prow Robot
28b8cfb473
Merge pull request #87005 from yuxiaobo96/k8s-unuseful 
Add a comment for function WithPlugin
 2020-01-10 12:24:36 -08:00
yuxiaobo
d2cfd4b82f apply review advice again 
Signed-off-by: yuxiaobo <yuxiaobogo@163.com>
 2020-01-10 16:47:30 +08:00
Kubernetes Prow Robot
f4e6ff84b3
Merge pull request #86529 from hase1128/kube-scheduler-reference 
Add simple reference to synopsis of kube-scheduler
 2020-01-09 13:29:06 -08:00
Kubernetes Prow Robot
720e6de6b9
Merge pull request #85168 from Jefftree/admission-wh-proxy 
Use Network Proxy for Admission Webhooks
 2020-01-08 16:07:40 -08:00
Jefftree
1289bdaba4 network proxy with admission wh 2020-01-08 15:01:38 -08:00
Matthew Mix
57f2d7ad6f Adding unit tests for kube-scheduler Config Complete() method. 2020-01-07 18:52:21 -05:00
Rostislav M. Georgiev
7f2d675ad0 kubeadm: Fix a false positive in a warning 
The warning message

```
[config] WARNING: Ignored YAML document with GroupVersionKind ...
```

is printed for all GVKs that are not part of the kubeadm core types.
This is wrong as the component config types are supported and successfully
parsed and used despite the fact that the warning is printed for them too.

Hence this simple fix first checks if the group of the GVK is a supported
component config group and the warning is printed only if it's not.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2020-01-07 17:55:50 +02:00
Dan Winship
ce68edf700 Allow "kubelet --node-ip ::" to mean prefer IPv6 2020-01-07 07:53:21 -05:00
Kubernetes Prow Robot
5373fa3f59
Merge pull request #82462 from vllry/dualstack-iptables 
Dualstack support for kube-proxy iptables mode
 2020-01-07 04:38:20 -08:00
louisgong
8d54a84507 fix kubemark use fake CRI 2020-01-07 11:39:58 +08:00
louisgong
324e5ce7e3 hollow-node use remote CRI 2020-01-07 11:00:45 +08:00
SataQiu
72559ec693 kubeadm upgrades always persist the etcd backup for stacked 2020-01-06 12:34:28 +08:00
Kubernetes Prow Robot
10dc4a0c79
Merge pull request #86822 from ahg-g/ahg-cleanup 
Cleanup deprecated scheduler functions/files
 2020-01-05 12:37:41 -08:00
Kubernetes Prow Robot
3760d24674
Merge pull request #86493 from aojea/kubeadmAddress 
kubeadm: use bind-address instead of address to configure the http probes
 2020-01-03 19:13:40 -08:00
Abdullah Gharaibeh
d31dcecd20 cleanup unused scheduler functions/files 2020-01-03 19:09:14 -05:00
Antonio Ojea
c0bc36c12e kubeadm: probe address for unspecified ips 
kubeadm deploys the apiserver, controller-manager and the scheduler
using liveness probes.
The bind-address option is used to configure the probe address, in
case this is configured with an unspecified address, the probe
will fail. When using an unspecified address the probe host field is
left empty, otherwise the bind-address is used.
 2020-01-04 00:42:15 +01:00
Kubernetes Prow Robot
b3c4c90a72
Merge pull request #86673 from ahg-g/ahg1-provider 
Define algorithm providers in terms of plugins
 2020-01-02 22:25:53 -08:00
SataQiu
2a83443782 add error handler of unix.Setrlimit 2020-01-03 10:49:06 +08:00
Kubernetes Prow Robot
09cb73a554
Merge pull request #86705 from neolit123/1.18-fix-ca-whitespace-comparison 
kubeadm: tolerate whitespace when validating user CA PEMs
 2019-12-31 23:35:40 -08:00
Abdullah Gharaibeh
a6b7b0d95e Define algorithm providers in terms of plugins. 2019-12-31 15:28:09 -05:00
Kubernetes Prow Robot
f772c9017c
Merge pull request #86609 from Pensu/kubeadm-ci-master 
Fixing regex for kubernetes version in kubeadm
 2019-12-30 14:29:39 -08:00
Lubomir I. Ivanov
453ac809c1 kubeadm: tolerate whitespace when validating user CA PEMs 
The function validateKubeConfig() can end up comparing
a user generated kubeconfig to a kubeconfig generated by kubeadm.

If a user kubeconfig has a CA that is base64 encoded with whitespace,
if said kubeconfig is loaded using clientcmd.LoadFromFile()
the CertificateAuthorityData bytes will be decoded from base64
and placed in the v1.Config raw. On the other hand a kubeconfig
generated by kubeadm will have the ca.crt parsed to a Certificate
object with whitespace ignored in the PEM input.

Make sure that validateKubeConfig() tolerates whitespace differences
when comparing CertificateAuthorityData.
 2019-12-30 22:16:41 +02:00
Peeyush Gupta
49884bca30 Fixing regex for kubernetes version in kubeadm 2019-12-30 21:12:24 +05:30
Kubernetes Prow Robot
33bba19372
Merge pull request #86553 from ajayktkp/kubeadm-1985 
validation.go: don't clamp the CIDR size calculations
 2019-12-28 16:27:38 -08:00
tanjunchen
b1e03256d7 alias kubeadmutil for k8s.io/kubernetes/cmd/kubeadm/app/util 2019-12-27 17:57:04 +08:00
Matthew Mix
013994a740 Updating minor grammar errors. 2019-12-26 13:48:19 -05:00
Ajay Kumar
7271a81921 validation.go: don't clamp the CIDR size calculations 
removed not required import, updated build
 2019-12-24 23:17:06 +05:30
Kubernetes Prow Robot
1ca0f89aa1
Merge pull request #86508 from kvaster/master 
On OpenRC ServiceIsActive should not report true if no such service exists
 2019-12-24 01:05:29 -08:00
SataQiu
803161d621 kubeadm: kube-dns is deprecated and will not be supported in a future version 2019-12-24 10:11:24 +08:00
kangsub song
237da6250b
change print log for unity when during kubeadm init 
change print log for unity when during kubeadm init
 2019-12-24 10:13:48 +09:00
SataQiu
107db83839 kubeadm: re-enable kubelet version check test in preflight 2019-12-22 16:49:39 +08:00
SataQiu
2497a1209b bump k8s.io/utils version 2019-12-21 14:54:44 +08:00
Antonio Ojea
7dc6c94395 kubeadm: use bind-address instead of address 
kubeadm removed the deprecated "--address" flag for controller-manager
and scheduler in favor of "--bind-address"

We should use bind-address to configure the manifest probe addresses.
 2019-12-20 22:03:49 +01:00
Viktor Kuzmin
947d696021 On OpenRC ServiceIsActive should not report true if no such service exists 2019-12-20 23:12:16 +03:00
Jin Hase
c715aacdc2 Add simple reference to synopsis of kube-scheduler 2019-12-20 20:55:35 +09:00
Jacek Kaniuk
4303be3d9f Revert pull request #85879 "hollow-node use remote CRI" 2019-12-19 10:52:35 +01:00
Kubernetes Prow Robot
8cd8784289
Merge pull request #78380 from hainesc/master 
Add test cases for a helper function in controller manager
 2019-12-18 18:25:55 -08:00
Kubernetes Prow Robot
814fc34cde
Merge pull request #85879 from gongguan/cri-kubemark 
hollow-node use remote CRI
 2019-12-18 06:01:57 -08:00
Kubernetes Prow Robot
2796ff8538
Merge pull request #85279 from RainbowMango/pr_add_metrics_flag_to_proxy 
Allow show hidden metrics in kube-proxy
 2019-12-18 00:57:57 -08:00
louisgong
e8e1cc9ee0 extract PreInitRuntimeService from NewMainKubelet 2019-12-18 11:48:29 +08:00
RainbowMango
6b33a77068 Adopt kubeadm and kubeproxy unit test after new config field added. 
Fix proxy unit test
 2019-12-18 11:09:26 +08:00
RainbowMango
4eb61e3f93 Deal with auto-generated files: 
- Update bazel by hack/update-bazel.sh
- make update
 2019-12-17 21:46:41 +08:00
RainbowMango
9b7d8712cf Add show hidden flag to kube-proxy 2019-12-17 21:46:41 +08:00
Andrew Sy Kim
db2c048db9 support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout 
Signed-off-by: Andrew Sy Kim <kiman@vmware.com>
 2019-12-17 04:35:08 -05:00
Vallery Lancey
23957a6b28 Allow kube-proxy iptables mode to support dual-stack, with the meta-proxier. 2019-12-16 22:50:25 -08:00
Kubernetes Prow Robot
078344c125
Merge pull request #86016 from robscott/endpointslice-windows-proxy 
Ensuring EndpointSlices are not used for Windows kube-proxy implementations
 2019-12-16 21:38:18 -08:00
Haines Chan
01f1cf3c96 Add test cases for a helper function in controller manager 2019-12-17 12:31:53 +08:00
carlory
2fe82075b4 fix staticcheck faulures in 'cmd' pkg 2019-12-16 18:32:54 +08:00
Kubernetes Prow Robot
6a919f2b54
Merge pull request #85903 from liggitt/disable-deprecated-apis 
Remove ability to re-enable serving deprecated APIs
 2019-12-13 16:19:36 -08:00
Jordan Liggitt
3df9e86a4e Remove ability to re-enable serving deprecated APIs 2019-12-13 12:21:33 -05:00
Lubomir I. Ivanov
effe299082 kubeadm: add basic validation around kubelet.conf parsing 
If the user has modified the kubelet.conf post TLS bootstrap
to become invalid, the function getNodeNameFromKubeletConfig() can
panic. This was observed to trigger in "kubeadm reset" use cases.

Add basic validation and unit tests around parsing the kubelet.conf
with the aforementioned function.
 2019-12-12 17:30:53 +02:00
Kubernetes Prow Robot
7b792c38e0
Merge pull request #85837 from pickledrick/coredns-replicas 
kubeadm: persist dns replica count on upgrade
 2019-12-12 05:12:31 -08:00
Peter Grant
0e4469cddd persist deployed DNS configuration during kubeadm upgrade 
Signed-off-by: Peter Grant <9246508+pickledrick@users.noreply.github.com>
 2019-12-12 08:55:15 +11:00
Kubernetes Prow Robot
55f81314cc
Merge pull request #85032 from jfbai/move-fmt-out-of-api 
refactor: move unwanted console output out of versiongetter API
 2019-12-09 08:38:02 -08:00
Kubernetes Prow Robot
2fbe432d23
Merge pull request #85857 from hnanni/patch-1 
Update checks.go
 2019-12-08 09:41:08 -08:00
Jianfei Bai
dfb6c3424f move unwanted console output out of versiongetter. 2019-12-08 10:26:27 +08:00
Rob Scott
dfa04bfc04
Ensuring EndpointSlices are not used for Windows kube-proxy implementations 2019-12-06 15:39:00 -08:00
Kubernetes Prow Robot
3994f52ee6
Merge pull request #85953 from St0rmingBr4in/verify-context-exists 
kubeadm: Throw an error if the currentContext does not exists
 2019-12-06 05:35:03 -08:00
Julien DOCHE
3e19201ec2 kubeadm: Throw an error if the currentContext does not exists 
Check if the CurrentContext exists in validateKubeConfig

Signed-off-by: Julien DOCHE <julien.doche@gmail.com>
 2019-12-06 10:15:26 +01:00
louisgong
0dd468039d inject remoteRuntime to kubelet dependency 2019-12-06 14:12:08 +08:00
Kubernetes Prow Robot
6a4216ba59
Merge pull request #85968 from liggitt/fix_bug_in_str_split 
Fix bug in apiserver service cidr split
 2019-12-05 15:55:39 -08:00
darshanime
f4d1674827 Refactor parsing logic for service IP and ranges, add tests 
Signed-off-by: darshanime <deathbullet@gmail.com>
 2019-12-05 15:35:20 -05:00
darshanime
fdd25ec968 Fix bug in apiserver service cluster cidr split 
Signed-off-by: darshanime <deathbullet@gmail.com>
 2019-12-05 15:35:20 -05:00
Lubomir I. Ivanov
bc22d70e2b
Revert "kubeadm: don't check if image exists before pulling" 2019-12-05 21:42:12 +02:00
bogard1203
09ede2fd98
Deleted extra 'phase' in command example 
Deleted extra 'phase' for 'kubeadm alpha kubelet config' command
 2019-12-04 23:45:45 +08:00
Kubernetes Prow Robot
c8b123e8e1
Merge pull request #85843 from Itxaka/kubeadm_docker_messages 
Enhance error message for failed controlplane init
 2019-12-04 04:08:57 -08:00
Itxaka
c355cadbb1
Enhance error message for failed controlplane init 
Currently if the controlplane fails to init, we print out a message
with some example commands that only show docker CLI.

This tries to improve that by printing the example commands for
docker, cri-o and containerd by checking the socket looking for
the default docker socket.
 2019-12-04 11:55:41 +01:00
Kubernetes Prow Robot
6d5eee88e0
Merge pull request #84624 from hwdef/fix-staticcheck 
cmd/kube-controller-manager: fix staticcheck warning
 2019-12-04 01:54:57 -08:00
louisgong
b469404d97 hollow-node use remote CRI 2019-12-04 17:07:04 +08:00
Kubernetes Prow Robot
674695c544
Merge pull request #85639 from rosti/kubeadm-cc-kind-to-group 
kubeadm: Group centric component configs
 2019-12-03 17:01:23 -08:00
Kubernetes Prow Robot
eff703de21
Merge pull request #84005 from yue9944882/chore/crd-internal-client-prune 
Prune internal clients from CRD apiserver
 2019-12-03 15:46:57 -08:00
Humberto Nanni
82206578cc
Update checks.go 
match https://github.com/kubernetes/release/pull/653 add
 2019-12-03 11:17:11 -06:00
yue9944882
81471c36b1 [generated] bazels and vendor/modules.txt 
[generated] bazels

bazel
 2019-12-04 00:49:28 +08:00
yue9944882
168f8f54f0 switch to v1 crd 
switch api helper functions to v1 CRD api

switch v1 CRD for apiserver internal

switch to v1 CRD for internal controllers

api storage/validation related changes

move local-defaulting utils private to prevent spreading

boilerplate

keep the subresource status/scale spec nil unless it's enabled

clean up empty space
 2019-12-04 00:49:26 +08:00
Kubernetes Prow Robot
c65c563487
Merge pull request #85412 from boluisa/1916-fix 
Kubeadm: upgrade apply & upgrade node always overwrite Kubeadm-env file
 2019-12-02 20:18:57 -08:00
hwdef
dddd631706 cmd/kube-controller-manager: fix staticcheck warning 2019-12-03 11:16:24 +08:00
Kubernetes Prow Robot
3769de9401
Merge pull request #85745 from aojea/kubeadm_etcd_ipv6 
kubeadm: default etcd address based on the IP family
 2019-12-02 15:02:58 -08:00
Rafael Fernández López
f0ea7bcf9e
kubeadm: set cluster name on the controller manager 
On kubeadm's configuration it's possible to set up the cluster
name. Forward this information to the controller manager's
`--cluster-name` argument.
 2019-12-02 18:32:50 +01:00
Babatunde Olu-Isa
af231b09e4 remove Kubeadm-env file overwrite from apply and node command 2019-12-01 15:28:59 -06:00
Rafael Fernández López
14fe7225c1
kubeadm: Improve resiliency in CreateOrMutateConfigMap 
CreateOrMutateConfigMap was not resilient when it was trying to Create
the ConfigMap. If this operation returned an unknown error the whole
operation would fail, because it was strict in what error it was
expecting right afterwards: if the error returned by the Create call
was a IsAlreadyExists error, it would work fine. However, if an
unexpected error (such as an EOF) happened, this call would fail.

We are seeing this error specially when running control plane node
joins in an automated fashion, where things happen at a relatively
high speed pace.

It was specially easy to reproduce with kind, with several control
plane instances. E.g.:

```
[upload-config] Storing the configuration used in ConfigMap "kubeadm-config" in the "kube-system" Namespace
I1130 11:43:42.788952     887 round_trippers.go:443] POST https://172.17.0.2:6443/api/v1/namespaces/kube-system/configmaps?timeout=10s  in 1013 milliseconds
Post https://172.17.0.2:6443/api/v1/namespaces/kube-system/configmaps?timeout=10s: unexpected EOF
unable to create ConfigMap
k8s.io/kubernetes/cmd/kubeadm/app/util/apiclient.CreateOrMutateConfigMap
	/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/cmd/kubeadm/app/util/apiclient/idempotency.go:65
```

This change makes this logic more resilient to unknown errors. It will
retry on the light of unknown errors until some of the expected error
happens: either `IsAlreadyExists`, in which case we will mutate the
ConfigMap, or no error, in which case the ConfigMap has been created.
 2019-11-30 22:48:16 +01:00
Antonio Ojea
335a3e9efb kubeadm: use correct IP family for etcd localhost 
kubeadm always use the IPv4 localhost address by defaultA for etcd

The probe hostname is obtained before the generation of the etcd
parameters, so it can't detect the right IP familiy for the
host of the probe.
This causes that with IPv6 clusters doesn't work because the probe
uses the IPv4 localhost address.

This patchs configures the right localhost address based on the used
AdvertiseAddress IP family.
 2019-11-30 17:25:30 +01:00
Kubernetes Prow Robot
85f8005cf0
Merge pull request #85468 from neolit123/1.17-discovery-token-fix 
kubeadm: simplify discover/token and add detailed unit tests
 2019-11-29 09:35:03 -08:00
Antonio Ojea
798d2fb75a
Fix comment typo 2019-11-29 13:38:47 +01:00
Lucas Käldström
b46e541eee Add a YAML MetaFactory 
- Use `schema.TypeMeta` instead of custom `struct` for VK
- More strict check on GVK after `Interpret` in `SplitYAMLDocuments`
- Adjust `Interpret` comment to include JSON
 2019-11-27 17:44:59 +08:00
Kubernetes Prow Robot
fe0a4749e3
Merge pull request #85654 from aramase/add-config-test 
add applyto tests for controller configs
 2019-11-26 16:51:33 -08:00
Lubomir I. Ivanov
ce68a89d26 kubeadm: simplify discover/token and add detailed unit tests 
- Add retrieveValidatedConfigInfo to be able to better unit
test the function.
- Break some of the logic in RetrieveValidatedConfigInfo into
helper functions.
- Pass JoinConfiguration.Discovery to RetrieveValidatedConfigInfo
instead of JoinConfiguration.
- Use the discovery timeout per API call to fetch cluster-info
(optionally the user value can be slit in 2).
- Add detailed unit tests for retrieveValidatedConfigInfo.
 2019-11-27 01:16:43 +02:00
Anish Ramasekar
18ba2643db
add applyto tests for controller configs 2019-11-26 13:02:12 -08:00
David Eads
3c1dc89d98 fix kube-apiserver poststarthook additions to avoid duplicating them 2019-11-26 14:05:06 -05:00
Kubernetes Prow Robot
2bc3804a0e
Merge pull request #81319 from neolit123/1.16-kubeadm-upgrade-health-check 
kubeadm: add a upgrade health check that deploys a Job
 2019-11-26 10:52:51 -08:00
Kubernetes Prow Robot
e51caab732
Merge pull request #85603 from bart0sh/PR008-kubeadm-dont-check-if-image-exists 
kubeadm: don't check if image exists before pulling
 2019-11-26 05:27:10 -08:00
Rostislav M. Georgiev
b881f19c8b kubeadm: Group centric component configs 
kubeadm's current implementation of component config support is "kind" centric.
This has its downsides. Namely:
- Kind names and numbers can change between config versions.
  Newer kinds can be ignored. Therefore, detection of a version change is
  considerably harder.
- A component config can have only one kind that is managed by kubeadm.
Thus a more appropriate way to identify component configs is required.

Probably the best solution identified so far is a config group.
A group name is unlikely to change between versions, while the kind names and
structure can.
Tracking component configs by group name allows us to:
- Spot more easily config version changes and manage alternate versions.
- Support more than one kind in a config group/version.
- Abstract component configs by hiding their exact structure.

Hence, this change rips off the old kind based support for component configs
and replaces it with a group name based one. This also has the following
extra benefits:
- More tests were added.
- kubeadm now errors out if an unsupported version of a known component group
  is used.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-26 13:55:28 +02:00
Arvinderpal Wander
e8ee8622b8 Add support for new dual-stack flags for kubernetes-controller- 
manager in kubeadm:
 - node-cidr-mask-size-ipv4
 - node-cidr-mask-size-ipv6
 2019-11-25 09:11:16 -08:00
Ed Bartosh
7898b3f0a8 kubeadm: update image pull tests 2019-11-25 15:04:28 +02:00
Ed Bartosh
f6f3738a00 kubeadm: don't check if image exists before pulling 
Removed image existence as kubeadm may miss
image tags if they're updated.
 2019-11-25 13:00:50 +02:00
Kubernetes Prow Robot
d50717d061
Merge pull request #85500 from aramase/fix-85491 
Set node cidr mask size ipv4/ipv6 config
 2019-11-23 12:09:50 -08:00
Kubernetes Prow Robot
f01a4d0608
Merge pull request #85265 from SataQiu/fix-kubeadm-20191114 
kubeadm: reset raises warnings if it cannot delete folders
 2019-11-22 17:30:17 -08:00
Lubomir I. Ivanov
906d3159b1 kubeadm: add a upgrade health check that deploys a Job 
- Add a new preflight check for upgrade that runs the pause container
with -v in a Job.
- Wait for the Job to complete and return an error after N seconds.
- Manually clean the Job because we don't have the TTL controller
enabled in kubeadm yet (it's still alpha).
 2019-11-22 18:04:40 +02:00
Arvinderpal Wander
c025cfcd9c Initialize FeatureGate map for KubeProxy config. #1929 2019-11-21 20:46:25 -08:00
Anish Ramasekar
7b478d15d5
Set node cidr mask size ipv4/ipv6 config 2019-11-20 22:08:58 -08:00
Ted Yu
5be960c34d Fill in default node cidr mask size when dual stack is not enabled 2019-11-20 19:50:33 -08:00
Benjamin Elder
820b7dfa1b fix providerless build post-CSI migration 2019-11-19 09:47:44 -08:00
Kubernetes Prow Robot
c3f8d700ac
Merge pull request #85367 from aramase/node-cidr-followup 
[kube controller manager] add comments for compatibility
 2019-11-15 19:09:54 -08:00
Kubernetes Prow Robot
01e1dcf429
Merge pull request #85351 from rosti/kubeadm-fix-kubelet-version-check 
kubeadm: Use only stdout when calling kubelet for its version
 2019-11-15 19:09:41 -08:00
Kubernetes Prow Robot
b8c29966cb
Merge pull request #85348 from ereslibre/validator-names 
kubeadm: use the right name for the no validator function
 2019-11-15 16:17:42 -08:00
Anish Ramasekar
128f33b26e
add comments for compatibility 2019-11-15 15:38:06 -08:00
Rostislav M. Georgiev
d425520806 kubeadm: Use only stdout when calling kubelet for its version 
Currently this uses the combined kubelet output (stdout + stderr), but this
causes parsing issues if the kubelet logs something on stderr.
Thus we ignore the entire stderr and use stdout only.

We do disable a couple of tests here. That is because the fakeexecer only
supports combined output and return a "not supported" error if `.Output()`
gets invoked thus permanently failing those.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-15 18:50:40 +02:00
Travis Rhoden
0c5c3d8bb9
Remove pkg/util/mount (moved out of tree) 
This patch removes pkg/util/mount completely, and replaces it with the
mount package now located at k8s.io/utils/mount. The code found at
k8s.io/utils/mount was moved there from pkg/util/mount, so the code is
identical, just no longer in-tree to k/k.
 2019-11-15 08:29:12 -07:00
Rafael Fernández López
d049eb71fa
kubeadm: use the right name for the no validator function 2019-11-15 16:03:40 +01:00
SataQiu
b7b10fc899 kubeadm: reset raises warnings if it cannot delete folders 2019-11-15 22:54:05 +08:00
Kubernetes Prow Robot
d9be37e926
Merge pull request #72046 from m1093782566/service-topology-api 
Service Topology implementation
 2019-11-15 02:57:42 -08:00
Kubernetes Prow Robot
ded6ee953c
Merge pull request #79993 from aramase/controller-manager-multiple-cidr 
Allow multiple node cidr masks in kube-controller-manager
 2019-11-14 23:23:42 -08:00
Roc Chan
31d623b4d7 Autogenerated files 2019-11-15 14:37:44 +08:00
Roc Chan
c9cf3f5b72 Service Topology implementation 
* Implement Service Topology for ipvs and iptables proxier
* Add test files
* API validation
 2019-11-15 13:36:43 +08:00
Kubernetes Prow Robot
372ebd24f5
Merge pull request #83098 from ddebroy/disable-intree 
CSI Migration phase 2: disable probing of in-tree plugins
 2019-11-14 20:51:42 -08:00
Anish Ramasekar
796faba4ac
Allow multiple node cidr masks in cm 
update tests

add comment

amend var name

update comment

add check for empty slice

fix tests

fix mask size in test

review feedback

add ipv4 and ipv6 flag for mask sizes

add to violation exception list

remove import alias

run update-openapi-spec

review feedback

run update-bazel

review feedback

review feedback
 2019-11-14 20:04:31 -08:00
Deep Debroy
129f15328b Disable in-tree plugins migrated to CSI 
Signed-off-by: Deep Debroy <ddebroy@docker.com>
 2019-11-14 17:28:21 -08:00
Kubernetes Prow Robot
12b18f200a
Merge pull request #85301 from robscott/endpointslice-beta-fix 
Ensuring EndpointSlice controller does not start when feature gate or API are disabled
 2019-11-14 16:39:17 -08:00
Jordan Liggitt
a5760dee81 Add support for --runtime-config=api/beta=false, --feature-gates=AllBeta=false 
Allow disabling all beta features and APIs
 2019-11-14 14:37:55 -05:00
Rob Scott
77df6bc9a8
Ensuring EndpointSlice controller does not start when feature gate or 
API are disabled
 2019-11-14 10:52:09 -08:00
Kubernetes Prow Robot
d1e8702d36
Merge pull request #85201 from fabriziopandini/add-retry-to-etcd 
kubeadm: add retry to etcd calls
 2019-11-14 07:07:34 -08:00
RainbowMango
0412369bcd Deal with auto-generated files: 
- Update bazel by hack/update-bazel.sh
 2019-11-14 20:34:38 +08:00
RainbowMango
c4f8c6eea7 Add flag for which to show hidden metrics to kube-controller-manager 2019-11-14 20:32:19 +08:00
fabriziopandini
0573a2227f add retry to etcd operations 2019-11-14 09:27:03 +01:00
Kubernetes Prow Robot
c6a38a9700
Merge pull request #85229 from liggitt/kubeadm-imports 
guard kubeadm dependencies on k8s.io/kubernetes
 2019-11-13 17:29:05 -08:00
Kubernetes Prow Robot
64f4be5b32
Merge pull request #84390 from robscott/endpointslice-beta 
Promoting EndpointSlices to beta
 2019-11-13 17:27:50 -08:00
Kubernetes Prow Robot
02af1dd62c
Merge pull request #85004 from deads2k/dynamic-agg-cert 
dynamic reload cluster authentication info for aggregated API servers
 2019-11-13 14:50:54 -08:00
Rob Scott
a7e589a8c6
Promoting EndpointSlices to beta 2019-11-13 14:20:19 -08:00
Kubernetes Prow Robot
f5df681b80
Merge pull request #85156 from chuckha/remove-infinte-poll 
[kubeadm] Remove nested retries
 2019-11-13 13:04:23 -08:00
Kubernetes Prow Robot
7d1580270a
Merge pull request #85151 from hypnoglow/scheduler-default-algo-source 
scheduler: make algorithm source an option
 2019-11-13 13:04:09 -08:00
Kubernetes Prow Robot
c33af5b2fe
Merge pull request #85108 from rajansandeep/prepcorednsfor1.17-kubeadm 
Bump CoreDNS version to 1.6.5 and update manifest
 2019-11-13 13:03:22 -08:00
Kubernetes Prow Robot
21df24cc06
Merge pull request #84292 from RainbowMango/pr_add_metrics_flag_to_apiserver 
Allow show hidden metrics in kube-apiserver
 2019-11-13 13:02:09 -08:00
Jordan Liggitt
752cda4fc4 guard kubeadm dependencies on k8s.io/kubernetes 2019-11-13 15:05:11 -05:00
Kubernetes Prow Robot
66e0ca800d
Merge pull request #85137 from rosti/kubeadm-amend-hyperkube-deprecation 
kubeadm: Amend the hyperkube deprecation change
 2019-11-13 09:28:09 -08:00
Kubernetes Prow Robot
4f6aa5a921
Merge pull request #85091 from fabriziopandini/alpha-certs-reads-incluster-config 
kubeadm: alpha certs command should read in-cluster config
 2019-11-13 09:27:42 -08:00
Kubernetes Prow Robot
9648d56765
Merge pull request #84118 from neolit123/1.17-kubeadm-add-kubelet-post-phase 
kubeadm: enable kubelet client certificate rotation on primary CP nodes
 2019-11-13 09:25:13 -08:00
David Eads
3fbfe60ed2 make client authentication optional for test kube-apiserver 2019-11-13 10:25:28 -05:00
Chuck Ha
8fcf892498
Remove an infinite poll 
This infinite poll can make kubeadm init/join hang forever due
to a lack of function cancelling.

Signed-off-by: Chuck Ha <chuckh@vmware.com>
 2019-11-13 10:10:41 -05:00
Lubomir I. Ivanov
431fd630ff kubeadm: enable kubelet client certificate rotation on primary CP nodes 
- Don't always print to stdout that the kubelet is starting.
instead delegate this to the callers of TryStartKubelet.
- Add a new root kubeadm init phase called "kubelet-finalize"
- Add a sub-phase to "kubelet-finalize"
called "experimental-cert-rotation"
- "cert-rotation" performs the following actions:
  - tries to guess if kubelet client cert rotation is enabled
  - update the kubelet.conf to use the rotatable cert/key
 2019-11-13 15:49:33 +02:00
David Eads
3aede35b3b dynamic reload cluster authentication info for aggregated API servers 2019-11-13 07:54:27 -05:00
Igor Zibarev
6350095d3c scheduler: make algorithm source an option 
Changes scheduler.New so that algorithm source is moved from the
parameter to an option. The default algorithm source is source with the
DefaultProvider.
 2019-11-13 10:22:29 +03:00
RainbowMango
b2fbdee9bb Deal with auto-generated files. 
- Update bazel by hack/update-bazel.sh
 2019-11-13 10:32:53 +08:00
RainbowMango
ac0562b00c Add metrics flag to show hidden metrics to kube-apiserver 2019-11-13 10:32:52 +08:00
Kubernetes Prow Robot
eedfb6bc7a
Merge pull request #79223 from rosti/kubeadm-component-configs-versioned 
kubeadm: component configs versioned
 2019-11-12 15:38:11 -08:00
Kubernetes Prow Robot
ea2750eaa6
Merge pull request #84718 from yastij/remove-validators 
remove system validators package from kubeadm and use k8s.io/system-validators
 2019-11-12 11:50:53 -08:00
Kubernetes Prow Robot
94efa988f4
Merge pull request #84813 from deads2k/admission-feature-gates 
remove global variable dependency from admission plugins
 2019-11-12 10:23:14 -08:00
Sandeep Rajan
f931dad722 bump coredns version and update manifest 2019-11-12 13:05:09 -05:00
Kubernetes Prow Robot
36373b37fd
Merge pull request #84672 from hwdef/fix-staticcheck2 
cmd:fix staticcheck warning
 2019-11-12 09:06:06 -08:00
Rostislav M. Georgiev
ec4840f0b2 kubeadm: Amend the hyperkube deprecation change 
The PR introducing 5bb8069 got merged accidentally (the CI robot not
respecting a hold). Hence, the feedback to that PR is merged separately.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-12 16:23:05 +02:00
Kubernetes Prow Robot
681d22428b
Merge pull request #84768 from liggitt/delegated-authnz-v1 
switch delegated authnz to v1 APIs
 2019-11-12 04:48:35 -08:00
fabriziopandini
a372dff648 alpha certs tries to read in-cluster config 2019-11-12 10:35:31 +01:00
Yassine TIJANI
b9fe59c93e remove system validators package from kubeadm and use k8s.io/system-validators instead 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-11-12 01:09:56 +01:00
Kubernetes Prow Robot
cf06a2efd6
Merge pull request #85095 from liggitt/protocol_errors 
Plumb configured acceptContentType to client config
 2019-11-11 14:46:58 -08:00
Kubernetes Prow Robot
e008523f76
Merge pull request #85092 from fabriziopandini/alpha-certs-skips-missing-certs 
kubeadm: alpha certs should skip missing files
 2019-11-11 14:46:47 -08:00
Jordan Liggitt
7349a824df generated 2019-11-11 17:19:12 -05:00
Jordan Liggitt
d54a70db5c Switch kubelet/aggregated API servers to use v1 subjectaccessreviews 2019-11-11 17:19:11 -05:00
Jordan Liggitt
5ef4fe959a Switch kubelet/aggregated API servers to use v1 tokenreviews 2019-11-11 17:19:10 -05:00
Kubernetes Prow Robot
fc0bf06983
Merge pull request #85044 from neolit123/1.17-deprecate-cri-socket-upgrade 
kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply"
 2019-11-11 12:56:37 -08:00
Jordan Liggitt
1cac7457a2 Plumb configured acceptContentType to client config 2019-11-11 10:54:38 -05:00
Rostislav M. Georgiev
5bb80694ec kubeadm: Deprecate hyperkube use 
As the hyperkube image is itself deprecated and moved out of tree, its use with
kubeadm gets deprecated too. Hence, deprecation messages will be printed when
it is used.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-11 17:03:25 +02:00
fabriziopandini
7d986a982c alpha certs skip missing files 2019-11-11 15:48:49 +01:00
Kubernetes Prow Robot
939e1e6488
Merge pull request #85043 from neolit123/1.17-enable-secure-ports 
kubeadm: use the secure ports for kube-scheduler and kcm health checks
 2019-11-10 13:27:01 -08:00
Lubomir I. Ivanov
ebfdb25c05 kubeadm: always use a short timeout for clientset creation 
ToClientSet() in kubeconfig.go creates a clientset from
the passed Config object (kubeconfig). For IP addresses
that are not reachable e.g. Get() calls for ConfigMaps
can block for a few minutes with the default timeout.

Modify the timeout to a shorter value by passing an override.
 2019-11-10 05:39:38 +02:00
Kubernetes Prow Robot
01676976c9
Merge pull request #85017 from LouisJackman/remove-goroutine-leak-in-kubeadm-wait 
Remove potential Goroutine leak in kubeadm wait.go
 2019-11-09 14:03:40 -08:00
Lubomir I. Ivanov
efc0ec5ffe kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply" 
Remove the flag "--cri-socket" from the "kubeadm upgrade apply"
command. It has been marked as deprecated since 1.14.
 2019-11-09 23:34:56 +02:00
Lubomir I. Ivanov
23ba857b50 kubeadm: use the secure ports for kube-scheduler and kcm health checks 
The insecure ports were deprecated in 1.12 and 1.13.
 2019-11-09 23:21:39 +02:00
Kubernetes Prow Robot
1ca74c7991
Merge pull request #85030 from ahg-g/ahg-nodestoscore 
Set default percentageOfNodesToScore in kube-scheduler back to "adaptive"
 2019-11-09 11:11:39 -08:00
Kubernetes Prow Robot
9920b733ba
Merge pull request #85024 from neolit123/1.17-fix-etcd-node-upgrade 
kubeadm: fix skipped etcd upgrade on secondary CP nodes
 2019-11-09 07:13:39 -08:00
Abdullah Gharaibeh
9fb380ceff set default percentageOfNodesToScore in kube-scheduler back to 0 (maning adaptive) 2019-11-09 06:34:06 -05:00
Kubernetes Prow Robot
49a9b6cadf
Merge pull request #84727 from danwinship/ipv6-bind 
fix apiserver to advertise IPv6 endpoints if bound to IPv6
 2019-11-08 18:44:24 -08:00
Lubomir I. Ivanov
cc0320d41a kubeadm: fix skipped etcd upgrade on secondary cp nodes 2019-11-09 03:59:59 +02:00
Kubernetes Prow Robot
3c7706bf9c
Merge pull request #84591 from TheLastProject/feature/print-join-as-admin-command 
Let token create help with joining a master
 2019-11-08 13:48:43 -08:00
Louis Jackman
62e314a556
Remove potential Goroutine leak in kubeadm wait.go 
There are two writes yet only one read on a non-buffered channel that is
created locally and not passed anywhere else.

Therefore, it could leak one of its two spawned Goroutines if either:
* The provided `f` takes longer than an erroneous result from
  `waiter.WaitForHealthyKubelet`, or;
* The provided `f` completes before an erroneous result from
  `waiter.WaitForHealthyKubelet`.

The fix is to add a one-element buffer so that the channel write happens
for the second Goroutine in these cases, allowing it to finish and freeing
references to the now-buffered channel, letting it to be GC'd.
 2019-11-08 21:05:19 +00:00
David Eads
675c2fb924 add featuregate inspection as admission plugin initializer 2019-11-08 13:07:40 -05:00
Kubernetes Prow Robot
ab1b374dd9
Merge pull request #84523 from rajansandeep/skipmigration 
Retain CoreDNS corefile when migration fails in kubeadm
 2019-11-08 09:00:29 -08:00
Kubernetes Prow Robot
ae15368355
Merge pull request #84351 from wojtek-t/promote_node_lease_to_GA 
Promote node lease to GA
 2019-11-08 09:00:15 -08:00
Sylvia van Os
dea6d6491a Add --certificate-key flag to token create 2019-11-07 21:27:31 +01:00
Kubernetes Prow Robot
84fcf126c1
Merge pull request #84662 from dims/script-based-hyperkube-to-avoid-dependencies 
Script based hyperkube to avoid dependencies
 2019-11-07 09:04:50 -08:00
Kubernetes Prow Robot
a5fe905be4
Merge pull request #82705 from deads2k/agg-authn-publish 
use controller to publish cluster authentication info
 2019-11-07 09:03:10 -08:00
Kubernetes Prow Robot
c843d9614c
Merge pull request #84888 from neolit123/1.17-fix-kube-proxy-env-vars 
kubeadm: fix an issue with the kube-proxy container env. variables
 2019-11-07 04:37:09 -08:00
Kubernetes Prow Robot
73b2c82b28
Merge pull request #83592 from jianzzha/opt-reserved-cpus 
added --reserved-cpus kubelet command option
 2019-11-06 22:14:42 -08:00
Lubomir I. Ivanov
0b4e5ee3b8 kubeadm: fix an issue with the kube-proxy container env. variables 
3993c42431 introduced the propagation of *_PROXY
host env. variables to the kube-proxy container.

To allow The NODE_NAME variable to be properly updated by the downward
API make, sure we preserve the existing variables when adding *_PROXY.
 2019-11-07 03:05:59 +02:00
Jordan Liggitt
297570e06a hack/update-vendor.sh 2019-11-06 17:42:34 -05:00
Kubernetes Prow Robot
e6287b05c0
Merge pull request #84812 from alculquicondor/fix/write-config 
Write scheduler configuration from config file
 2019-11-06 12:20:58 -08:00
Kubernetes Prow Robot
6ca4854ddf
Merge pull request #84774 from mm4tt/kubemark_owners 
Add sig-scalability-approvers/reviewers as kubemark approvers/reviewers
 2019-11-06 12:20:22 -08:00
Dan Winship
afa0b808f8 Fix apiserver to advertise IPv6 endpoints if bound to IPv6 
Also rename utilnet.ChooseBindAddress() to ResolveBindAddress(), to
better describe its functionality.
 2019-11-06 11:31:43 -05:00
Sandeep Rajan
16191db353 skip deployment update if migration fails 2019-11-06 10:55:54 -05:00
David Eads
be8af0de1b remove exist client hooks 2019-11-06 10:17:19 -05:00
David Eads
7351c86860 publish cluster authentication trust via controller 2019-11-06 10:17:19 -05:00
Davanum Srinivas
30965676f3
Drop cmd/hyperkube 2019-11-06 09:11:35 -05:00
Jianzhu Zhang
89dfd24483 added --reserved-cpus kubelet command option 2019-11-06 07:33:52 -05:00
Rostislav M. Georgiev
994df0d631 kubeadm: use versioned component configs 
This change removes dependencies on the internal types of the kubelet and
kube-proxy component configs. Along with that defaulting and validation is
removed as well. kubeadm will display a warning, that it did not verify the
component config upon load.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-06 14:15:57 +02:00
Matt Matejczyk
14e731924a Add sig-scalability-approvers/reviewers as kubemark approvers/reviewers 2019-11-06 08:51:49 +01:00
Alex Wang
e85ebccb57 enable profiling by default in the scheduler 2019-11-06 15:25:35 +08:00
Kubernetes Prow Robot
6f08d42dec
Merge pull request #84815 from alculquicondor/fix/config-validation 
Validate scheduler configuration from config file
 2019-11-05 22:19:18 -08:00
Kubernetes Prow Robot
17874d6db3
Merge pull request #84781 from Gerry-Lee/UseTimeUtilInsteadOfTimeSub 
Use time.Until instead of t.Sub(time.Now())
 2019-11-05 22:18:43 -08:00
Kubernetes Prow Robot
2aeacf025b
Merge pull request #84723 from hypnoglow/fix-golint-kubeapiserver 
Fix golint issues in pkg/kubeapiserver
 2019-11-05 22:18:20 -08:00
Mike Dame
9e2591f867 Change scheduler ComponentConfig fields to nilable 
As part of graduating the scheduler's component config to beta, we require configurable fields to be nilable pointers (see https://github.com/kubernetes/kubernetes/issues/78109). This enables the ability to distinguish between default and unset values. We are only applying this change to external types, and reacting in our defaulting logic. This also reverts existing internal component config fields which were pointers to be non-pointers, for consistency.
 2019-11-05 17:06:06 -05:00
Aldo Culquicondor
37efa751c7 Validate scheduler configuration from config file 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2019-11-05 15:12:46 -05:00
Aldo Culquicondor
49ea5afaf7 Write scheduler configuration from config file 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2019-11-05 14:35:02 -05:00
Igor Zibarev
03dfa1a641 Fix golint issues in pkg/kubeapiserver 2019-11-05 22:25:32 +03:00
Haiwei Li
696734a772 use time.Until instead of t.Sub(time.Now()) 2019-11-05 17:20:34 +08:00
Kubernetes Prow Robot
3e5f6bdaa4
Merge pull request #84129 from obitech/lenient_path_strict_decoding_kube_scheduler 
Add lenient decoding path for v1alpha1 kube-scheduler config
 2019-11-05 00:56:38 -08:00
wojtekt
ffad401b4e Promote NodeLease feature to GA 2019-11-05 09:01:12 +01:00
Kubernetes Prow Robot
aaa5707896
Merge pull request #84677 from mikedanese/cfssl 
remove cfssl dependencies
 2019-11-04 15:28:53 -08:00
Kubernetes Prow Robot
1d1385af91
Merge pull request #83474 from msau42/topology-ga 
CSI Topology ga
 2019-11-04 15:28:27 -08:00
Mike Danese
fe51712288 refactor into seperate authority package 2019-11-04 10:56:06 -08:00
hwdef
5c6ed21d34 cmd:fix staticcheck warning 2019-11-03 00:00:54 +08:00
Kubernetes Prow Robot
dc8880908f
Merge pull request #83832 from gongguan/deprecate_cleanup-ipvs_flag 
deprecate cleanup-ipvs flag
 2019-11-01 23:59:39 -07:00
louisgong
f147b6e555 deprecate cleanup-ipvs flag 2019-11-02 10:09:50 +08:00
Kubernetes Prow Robot
529d5dd4b2
Merge pull request #84626 from hwdef/fix-staticcheck1 
cmd/kubeadm/app: fix staticcheck warning
 2019-11-01 10:21:40 -07:00
hwdef
eae3e3ce8c cmd/kubeadm/app: fix staticcheck warning 2019-11-01 10:39:56 +08:00
Kubernetes Prow Robot
01d20c689f
Merge pull request #84286 from bart0sh/PR0083-kubeadm-Token-remove-ObjectMeta 
kubeadm: remove ObjectMeta from output.BootstrapTooken
 2019-10-31 10:21:53 -07:00
obitech
b15aba547a Add lenient decoding path for v1alpha1 kube-scheduler config 
This implements a lenient path for decoding a kube-scheduler config file.
The config file gets decoded with a strict serializer first, if that fails a lenient
CodecFactory that has just v1alpha1 registered into it is used for decoding. The lenient
path is to be dropped when support for v1alpha1 is dropped.

For more information on the discussion see #82924 and the linked PRs.
 2019-10-31 13:43:52 +01:00
Kubernetes Prow Robot
ef479c1a6f
Merge pull request #84559 from yastij/prox-env-kubeproxy 
propagate proxy env var to kube-proxy
 2019-10-31 04:15:37 -07:00
Kubernetes Prow Robot
7fd399e4be
Merge pull request #84143 from phenixblue/master 
Add lenient decoding path for v1alpha1 kube-proxy config
 2019-10-30 13:37:36 -07:00
Yassine TIJANI
3993c42431 propagate proxy env var to kube-proxy 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-30 16:18:43 +01:00
Kubernetes Prow Robot
e1d3cc74e5
Merge pull request #84329 from jingyih/update_etcd_server_to_3.4 
Update default etcd server to 3.4.3
 2019-10-30 02:30:52 -07:00
Joe Searcy
10879d3bd4 Add lenient decoding path for v1alpha1 kube-proxy 
Removed unneeded comments

Matched style from other PR's

Only print error when lenient decoding is successful

Update Bazel for BUILD

Comment out existing strict decoder tests

Added tests for leniant path

Added comments to explain test additions

Cleanup TODO's and tests

Add explicit newline for appended config
 2019-10-30 01:26:27 -04:00
Sandeep Rajan
7074f28dd2 retain corefile when migration fails 2019-10-29 12:11:59 -04:00
Kubernetes Prow Robot
c16f668799
Merge pull request #83881 from SataQiu/fix-kubelet-20191014 
Fix bug of kubelet enable-cadvisor-json-endpoints flag
 2019-10-29 05:52:43 -07:00
Jingyi Hu
706cde51c5 Update default etcd server to 3.4.3 2019-10-28 18:29:37 -07:00
Kubernetes Prow Robot
28887de8cd
Merge pull request #84476 from neolit123/1.17-docker-19.03 
kubeadm-validators: bump the latest validated Docker version to 19.03
 2019-10-28 17:49:08 -07:00
Kubernetes Prow Robot
b6c8f4916d
Merge pull request #84468 from neolit123/1.17-kubeadm-flex-volumes 
kubeadm: always mount a flex volume path for the controller-manager
 2019-10-28 14:09:39 -07:00
Kubernetes Prow Robot
486e2380bd
Merge pull request #83692 from yastij/fix-events-scheduler 
add a fallback for kube-scheduler  when events.k8s.io is disabled
 2019-10-28 14:08:43 -07:00
Michelle Au
fb6dfeb718 Convert attach-detach controller to use v1.CSINode 2019-10-28 13:41:13 -07:00
Lubomir I. Ivanov
772e2e4e39 kubeadm-validators: bump the latest validated Docker version to 19.03 2019-10-28 22:24:46 +02:00
Lubomir I. Ivanov
7fa571bdb5 kubeadm: always add a flex volume path for the controller-manager 
Checking if the path exists before creating the volume is
problematic because the path will be created regardless
after the initial call to "kubeadm init" and once the CM Pod
is running.

Then on subsequent calls to "kubeadm init" or the "control-plane"
phase the manifest for the CM will be different.

Always mount this path, but also consider the user provided
flag override from ClusterConfiguration.
 2019-10-28 20:21:15 +02:00
Yassine TIJANI
f970b34137 add a fallback for kube-scheduler when events.k8s.io is disabled 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-28 19:09:47 +01:00
wojtekt
ce499ac286 Migrate components to EndpointsLeases leader election lock 2019-10-28 09:09:03 +01:00
Kubernetes Prow Robot
41730db3f0
Merge pull request #84297 from liu-cong/custompred 
Convert NodeLabelPresence custom predicate to filter plugin.
 2019-10-26 09:57:23 -07:00
Kubernetes Prow Robot
d379ab2697
Merge pull request #84288 from wojtek-t/cleanup_conversions_registrations 
Cleanup conversions registrations
 2019-10-25 22:53:22 -07:00
Cong Liu
571cea0519 Convert NodeLabelPresence custom predicate to filter plugin. 2019-10-25 19:31:17 -04:00
Kubernetes Prow Robot
46b33af8ef
Merge pull request #84309 from hypnoglow/remove-test 
kubeadm: remove commented test
 2019-10-25 13:03:51 -07:00
Kubernetes Prow Robot
1732b435b3
Merge pull request #83822 from zouyee/proxy-remove 
set config.BindAddress to IPv4 address "127.0.0.1" if not specified
 2019-10-25 11:15:39 -07:00
Kubernetes Prow Robot
09f453ff83
Merge pull request #83987 from wenjiaswe/etcd_client_3_4_2 
Update etcd client to v3.4.3 in k8s v1.17
 2019-10-25 08:29:39 -07:00
zouyee
a3e0ac2951 set config.BindAddress to IPv4 address "127.0.0.1" if not specified 
Signed-off-by: Zou Nengren <zouyee1989@gmail.com>
 2019-10-25 21:46:41 +08:00
Jordan Liggitt
0e2f2dde4d Feature-gate CSINode and CSIDriver informer starts 2019-10-24 17:44:25 -04:00
Wenjia Zhang
660b17d0ae Pin dependencies and update vendors 2019-10-24 14:09:24 -07:00
Wenjia Zhang
9ead9373f3 Resolve uncompatibility from update: etcd CAFile -> TrustedCAFIle 2019-10-24 14:09:24 -07:00
Wenjia Zhang
3b274fad2a Replace github.com/coreos/etcd by go.etcd.io/etcd 2019-10-24 14:09:24 -07:00
Igor Zibarev
c1381282a3 kubeadm: remove commented test 
Removes commented test TestInitConfigurationMarshallingFromFile
as requested per https://github.com/kubernetes/kubeadm/issues/1431
 2019-10-24 22:58:01 +03:00
Kubernetes Prow Robot
09a251ce92
Merge pull request #84274 from liggitt/beta-gate-pdb-informers 
Feature-gate PDB informer starts
 2019-10-24 11:56:34 -07:00
wojtekt
7b6bcdf780 Autogenerated code 2019-10-24 20:21:00 +02:00
Ed Bartosh
ae95985908 kubeadm: remove ObjectMeta from output.BootstrapTooken 
metav1.TypeMeta is what needed to make a runtime object.
ObjectMeta is not needed and can be safely removed.
 2019-10-24 14:22:09 +03:00
Kubernetes Prow Robot
2c4cba8aa0
Merge pull request #82365 from jkaniuk/pod-gc 
Pod GC controller - use node lister
 2019-10-24 03:13:06 -07:00
Jordan Liggitt
feac7a40f5 Feature-gate PDB informer starts 2019-10-24 01:17:39 -04:00
David Eads
6beb96261e wire up a means to dynamically reload ca bundles for kube-apiserver 2019-10-23 11:01:56 -04:00
Jacek Kaniuk
39883f08bf Pod GC controller - use node lister 2019-10-23 16:54:54 +02:00
Cristian Dima
da759609dc in pkg/controller/service rename service_controller.go to controller.go 2019-10-23 01:52:19 +03:00
Kubernetes Prow Robot
9fa1bc8003
Merge pull request #83422 from yastij/remove-ipallocator 
remove ipallocator in favor of k/utils net package
 2019-10-22 12:52:13 -07:00
Yassine TIJANI
f984b4c7a2 remove ipallocator in favor of k/utils net package 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-22 18:37:13 +02:00
Ted Yu
a7231fc93a Close the file after reading in verifydependencies#main 2019-10-19 10:46:50 -07:00
draveness
1163a1d51e feat: update taint nodes by condition to GA 2019-10-19 09:17:41 +08:00
Bob Killen
d314695b31
Prune inactive owners from cmd/kube-controller-manager/OWNERS. 2019-10-17 06:29:26 -04:00
Kubernetes Prow Robot
4b58ef0e14
Merge pull request #83950 from yastij/update-reset-cni 
stop removing cni directories as they aren't installed by kubeadm
 2019-10-17 03:19:02 -07:00
Kubernetes Prow Robot
1dc5235d0a
Merge pull request #84012 from neolit123/revert-83339-1.17-master-cert-rotation 
Revert "kubeadm: enable kubelet certificate rotation on primary CP nodes"
 2019-10-17 01:47:39 -07:00
Kubernetes Prow Robot
bdc3f96838
Merge pull request #83989 from wojtek-t/remove_coordination_v1beta1 
Swtich nodelifecyclecontroller to coordination/v1
 2019-10-17 01:47:29 -07:00
Kubernetes Prow Robot
3719fcdffa
Merge pull request #82072 from draveness/feature/use-context-instead-of-channel 
feat(scheduler): use context in scheduler package
 2019-10-17 01:46:39 -07:00
Kubernetes Prow Robot
b4d3dc3718
Merge pull request #83932 from SataQiu/report-ca-expiration 
kubeadm: enhance certs check-expiration to show the expiration info of related CAs
 2019-10-16 20:54:51 -07:00
draveness
47a6c5b693 feat(scheduler): use context in the scheduler package 
+ Use context instead of stopCh
+ Add context to the scheduling framework interface
 2019-10-17 09:03:55 +08:00
Lubomir I. Ivanov
30db92004a
Revert "kubeadm: enable kubelet certificate rotation on primary CP nodes" 2019-10-16 20:45:55 +03:00
Kubernetes Prow Robot
1086b5e5cb
Merge pull request #83949 from bart0sh/PR0082-kubeadm-use-strings-in-TestTokenOutput 
kubeadm: use strings in TestTokenOutput
 2019-10-16 09:36:25 -07:00
Kubernetes Prow Robot
da552df5a0
Merge pull request #83910 from mrkm4ntr/scheduler-log-level 
Support dynamically set log level for kube-scheduler
 2019-10-16 09:34:47 -07:00
Yassine TIJANI
e591190cf2 stop removing cni directories as they aren't installed by kubeadm 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-16 17:07:13 +02:00
SataQiu
68f7c2ade9 kubeadm: enhance certs check-expiration to show the expiration info of related CAs 2019-10-16 22:52:01 +08:00
wojtekt
cf9203501e Swtich nodelifecyclecontroller to coordination/v1 2019-10-16 10:59:02 +02:00
Kubernetes Prow Robot
63cf2e260b
Merge pull request #83819 from mrbobbytables/emeritus-jbeda 
Move jbeda to emeritus status.
 2019-10-15 23:06:20 -07:00
Kubernetes Prow Robot
af6f302e46
Merge pull request #83498 from danwinship/proxy-health 
Fix kube-proxy healthz server for proxier sync loop changes
 2019-10-15 23:04:58 -07:00
Kubernetes Prow Robot
cb3b715de2
Merge pull request #83804 from jpbetz/etcd-3_3_17_server 
Upgrade to etcd server 3.3.17
 2019-10-15 12:50:09 -07:00
Ed Bartosh
3dedaf440b kubeadm: use strings in TestTokenOutput 
Used strings instead of bytes in the TestTokenOutput test cases as
expected output is a plain text.
This should also simplify the data representation and the test code
a bit.
 2019-10-15 16:32:05 +03:00
Kubernetes Prow Robot
46a29a0cc3
Merge pull request #71674 from grayluck/firewall-event-msg 
Change XPN firewall change msg. Should be required by security admin
 2019-10-14 21:09:51 -07:00
Shintaro Murakami
a86634bc17 Support dynamically set log level for kube-scheduler 2019-10-15 01:32:41 +09:00
SataQiu
90db2a479d fix bug of kubelet flag 2019-10-14 14:28:02 +08:00
Joe Betz
c92bd5e7b5 Upgrade to etcd server 3.3.17 2019-10-13 17:17:15 -07:00
Kubernetes Prow Robot
f0e1d394f1
Merge pull request #83661 from jfbai/fix-kubeadm-join 
Add warning when --certificate-key is set and --control-plane is not.
 2019-10-13 08:00:35 -07:00
Jianfei Bai
6dbf154d43 Add warning when --certificate-key is set and --control-plane is not. 2019-10-13 21:39:12 +08:00
Ahmad Diaa
4448a1cea9 move factory package to scheduler 2019-10-12 23:03:07 +02:00
Bob Killen
e65d8bb11f
Move jbeda to emeritus status. 2019-10-11 17:46:18 -04:00
Kubernetes Prow Robot
c980000176
Merge pull request #83663 from draveness/feature/add-shared-informers-factory 
feat(scheduler): expose SharedInformerFactory to the framework handle
 2019-10-11 09:29:40 -07:00
Kubernetes Prow Robot
833e8dc10b
Merge pull request #83736 from krzysied/kubemark_node_labels 
Kubemark node labels
 2019-10-11 05:17:47 -07:00
Krzysztof Siedlecki
4bdf48eb2a adding support for kubemark --node-labels flag 2019-10-11 11:26:42 +02:00
Kubernetes Prow Robot
4b2a326b2e
Merge pull request #83530 from neolit123/1.17-kubeadm-deprecate-upgrade-config 
kubeadm: add warning about 'upgrade apply/plan --config'
 2019-10-10 20:31:39 -07:00
draveness
ee4dec65b5 feat(scheduler): expose SharedInformerFactory to the framework handle 2019-10-11 10:23:21 +08:00
Kubernetes Prow Robot
a5e6ac0a95
Merge pull request #83694 from ahg-g/ahg-adv-config 
[migration phase 1] Make scheduler cache, volume binder and listers available when registering default plugins
 2019-10-10 19:00:21 -07:00
Lubomir I. Ivanov
276665c1a0 kubeadm: add warning about 'upgrade apply/plan --config' 
The flag has been problematic and abused by users.
While perhaps its original purpose was to be able to feed
a new version of the control-plane it also made it possible
to apply modifications to the ClusterConfiguration object
in the cluster. The lack of a feature in kubeadm for reconfiguration
of running clusters resulted in users using this flag for
the same purpose.

While it works for certain scenarios like updating
a static Pod for this control-plane only, it can result in
unexpected behavior if the user has for example fed a node name
different than the host name, when originally they created this node.

kubeadm 1.16 introduced the "kustomize" feature that
is a potential replacement for this user demand.

Add warning that this flag should not be used.
 2019-10-11 00:21:41 +03:00
Kubernetes Prow Robot
91b2a7af87
Merge pull request #83184 from odinuge/dynamic-kubelet-config 
Fix init order during starup for dynamic kubelet config
 2019-10-10 13:41:20 -07:00
Abdullah Gharaibeh
456df97745 made scheduler cache and volume binder available when instantiating factories for default plugins 2019-10-10 16:21:29 -04:00
Kubernetes Prow Robot
6284c9ab52
Merge pull request #83720 from bart0sh/PR0080-kubeadm-remove-OutputFlagSpecified 
kubeadm: remove OutputFlagSpecified from PrintFlags
 2019-10-10 07:32:12 -07:00
Kubernetes Prow Robot
4fb75e2f0d
Merge pull request #82616 from ghouscht/kubeadm-issue-1787 
kubeadm: preserve order of user specified apiserver authorization-mode
 2019-10-10 06:04:01 -07:00
Ed Bartosh
078f7a3537 kubeadm: remove OutputFlagSpecified from PrintFlags 
This field is not used in the kubeadm code. It was brought from
cli-runtime where it's used to support complex relationship between
command line parameters, which is not present in kubeadm.
 2019-10-10 12:53:05 +03:00
Kubernetes Prow Robot
a7e0b768ee
Merge pull request #78764 from bart0sh/PR0070-kubeadm-structured-output-v2 
Structured output for 'kubeadm token list'
 2019-10-09 14:50:54 -07:00
Kubernetes Prow Robot
0ff761b14f
Merge pull request #82927 from obitech/kube_proxy_strict_serializer 
Enable strict serializer in kube-proxy
 2019-10-09 11:05:50 -07:00
draveness
9646afb1f5 feat: add pod initial/max backoff duration to config API 2019-10-09 19:48:28 +08:00
Kubernetes Prow Robot
33809f24e6
Merge pull request #83556 from zouyee/kubeadminfo 
Complete output of docker info
 2019-10-08 20:00:04 -07:00
Kubernetes Prow Robot
72d052a444
Merge pull request #81797 from yastij/move-metrics-util 
move util/metrics to component-base
 2019-10-08 17:08:05 -07:00
Yassine TIJANI
c1487840bc move util/metrics to component-base 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-08 14:42:31 +02:00
Kubernetes Prow Robot
0f02a0fadf
Merge pull request #83605 from hwdef/fix-spelling-mistake 
cmd: fix spelling mistake
 2019-10-08 05:25:24 -07:00
Kubernetes Prow Robot
7a0801e1b8
Merge pull request #83339 from neolit123/1.17-master-cert-rotation 
kubeadm: enable kubelet certificate rotation on primary CP nodes
 2019-10-08 03:45:11 -07:00
Kubernetes Prow Robot
c4108c9b4a
Merge pull request #83090 from Klaven/rm_validator_errors 
Removal of kubernetes error dependencies
 2019-10-07 23:35:25 -07:00
hwdef
fea743b783 cmd: fix spelling mistake 2019-10-08 13:15:34 +08:00
Kubernetes Prow Robot
6564b34f9e
Merge pull request #83276 from Klaven/pr_v1beta1_dep 
Initial deprecation of kubeadm v1beta1 apis
 2019-10-07 22:15:11 -07:00
Kubernetes Prow Robot
c8d4d626d8
Merge pull request #83528 from neolit123/1.17-kubeadm-fix-upgrade-node 
kubeadm: fix wrong default value for the "upgrade node --certificate-renewal" flag
 2019-10-07 09:41:10 -07:00
Lubomir I. Ivanov
71cb27836d kubeadm: delete boostrap-kubelet.conf after TLS bootstrap on init 2019-10-07 18:41:58 +03:00
Lubomir I. Ivanov
2dedfddf81 kubeadm: add means to create Node objects via the API client 2019-10-07 18:41:57 +03:00
Lubomir I. Ivanov
02469a023f kubeadm: write boostrap-kubelet.conf during init 2019-10-07 15:22:08 +03:00
zouyee
361f20c874 Complete output of docker info 
Signed-off-by: Zou Nengren <zouyee1989@gmail.com>
 2019-10-07 19:24:15 +08:00
Kubernetes Prow Robot
cd1fbf7cd4
Merge pull request #83548 from yutedz/docker-info-cmd 
Show the complete docker info command
 2019-10-06 16:29:08 -07:00
Marek Counts
3a050344d0 Initial deprecation of kubeadm v1beta1 apis 2019-10-06 23:26:12 +00:00
Kubernetes Prow Robot
48b90db9c3
Merge pull request #83495 from tanjunchen/fix-typo 
remove the repeat word in documents
 2019-10-06 15:05:08 -07:00
Ted Yu
4a26579335 Show the complete docker info command 2019-10-06 11:26:18 -07:00
tanjunchen
de3cf23414 remove the repeat word in documents 2019-10-06 23:32:01 +08:00
Lubomir I. Ivanov
218e9a5f77 kubeadm: renew certificates on "upgrade node" by default 2019-10-05 19:13:57 +03:00
Lubomir I. Ivanov
79dd60e201 kubeadm: use CertificateRenewal constant for "upgrade apply" 2019-10-05 19:10:53 +03:00
Kubernetes Prow Robot
5a4c6c2b34
Merge pull request #83475 from fabriziopandini/127.0.0.1-as-advertise-address 
Kubeadm: allow users to use 127.0.0.1 as advertise address
 2019-10-04 13:23:26 -07:00
Kubernetes Prow Robot
6dde8daa76
Merge pull request #83030 from obitech/kube_scheduler_strict_serializer 
Enable strict serializer in kube-scheduler
 2019-10-04 10:22:04 -07:00
Kubernetes Prow Robot
7f6d7afb8e
Merge pull request #83314 from fabriziopandini/add-etcd-version 
kubeadm: add 1.18 entry in the etcd map
 2019-10-04 08:50:18 -07:00
Kubernetes Prow Robot
7ac65858bb
Merge pull request #82371 from deads2k/cert-reload-delegated 
add ability to authenticators for dynamic update of certs for delegated authn
 2019-10-04 08:50:04 -07:00
Dan Winship
0f10102c16 Better distinguish the two kinds of proxy health check servers 
Kube-proxy runs two different health servers; one for monitoring the
health of kube-proxy itself, and one for monitoring the health of
specific services. Rename them to "ProxierHealthServer" and
"ServiceHealthServer" to make this clearer, and do a bit of API
cleanup too.
 2019-10-04 10:37:58 -04:00
fabriziopandini
fd2c678b1c 127.0.0.1-as-advertise-address 2019-10-04 08:41:07 +02:00
Kubernetes Prow Robot
0a17315e18
Merge pull request #83418 from ahg-g/ahg-first-priority 
Refactor scheduler.New so that all framework-related parameters are options
 2019-10-03 10:00:11 -07:00
Abdullah Gharaibeh
30e7016ccf Refactor scheduler.New so that all framework-related parameters are passed as options 2019-10-03 11:39:59 -04:00
Kubernetes Prow Robot
5fbda60c14
Merge pull request #82077 from deads2k/poststart 
add ability to pre-configure poststarthooks for apiservers
 2019-10-03 08:16:10 -07:00
Ed Bartosh
ba0c84ade8 Test token output 
Tested JSON, YAML, Go Template and Text token output formats.
 2019-10-03 14:13:14 +03:00
Ed Bartosh
766e2a45f8 kubeadm token list: implement structured output 
Used cli-runtime API to print bootstrap tokens in 5 formats:

 - TEXT (identical to the current output)
 - YAML
 - JSON
 - JSONPATH
 - Go template
 2019-10-03 14:13:14 +03:00
Ed Bartosh
3765f21012 Add internal kubeadm output API 
Added internal structures and APIs to handle
kubeadm structured output.
 2019-10-03 14:13:00 +03:00
Ed Bartosh
8cee92dfa8 create new api group output.kubeadm.k8s.io 
This group contains APIs for handling kubeadm
structured output.
 2019-10-03 12:40:12 +03:00
Kubernetes Prow Robot
4afcba42be
Merge pull request #83261 from liggitt/yaml-limits 
limit yaml/json decode size
 2019-10-02 20:28:08 -07:00
Jordan Liggitt
8ef4566cef Limit YAML/JSON decode size 2019-10-02 21:52:19 -04:00
Kubernetes Prow Robot
f3981710db
Merge pull request #82473 from Nordix/kubeadm-dualstack-service-ip 
Kubeadm DualStack Support for List of Service IPs
 2019-10-02 11:26:08 -07:00
fabriziopandini
2ab2fc8cae make test pass 2019-10-02 12:10:58 +02:00
Rafael Fernández López
cd1ad5646e
kubeadm: add test to detect panics when given certain feature gates 
This integration test allows us to detect if a given feature gate will
panic kubeadm. This builds on the assumption that a golang panic makes
the process exit with the code 2.

These tests are not trying to check if the init process succeeds or
not, their only purpose is to ensure that the exit code of the
`kubeadm init` invocation is not 2, thus, reflecting a golang panic.

Some refactors had to be made to the test code, so we return the exit
code along with stdout and stderr.
 2019-10-01 20:37:37 +02:00
David Eads
51195dd860 add ability to authenticators for dynamic update of certs 2019-10-01 09:50:20 -04:00
David Eads
f14f4c933e add ability to pre-configure poststarthooks for apiservers 2019-10-01 09:08:18 -04:00
fabriziopandini
7c42fe77fe 1.18 entry in etcd map 2019-10-01 09:17:31 +02:00
yankaiz
bd03c3a096 Change XPN firewall change message, should be required by security admin. 
Add l7lbSrcRngsFlag to gce_loadbalancer.go so that ingress can have
fewer source ranges for l7 health checks.
 2019-09-30 11:19:42 -07:00
fabriziopandini
b77b8bdb47 bump versions for v1.17 cycle 2019-09-30 11:08:03 +02:00
Kubernetes Prow Robot
14e5adfc85
Merge pull request #82683 from davidz627/fix/translationStruct 
Refactor CSI Translation Library into a struct that is injected into various components to simplify unit testing
 2019-09-29 10:11:37 -07:00
Marek Counts
114d7855f3 Removal of kubernetes error dependancies 
removed kubernetes error deps
 2019-09-28 15:09:48 +00:00
Odin Ugedal
2292873fdd
Fix dynamic kubelet config init order 
If the metrics ain't created, the values will not be registered, and the
metrics will not be visible in the metric endpoint.

Therefore move init of dynamic kubelet config below the startup of the
kubelet server (and the init of metrics).
 2019-09-28 11:55:43 +02:00
Kubernetes Prow Robot
74d2822662
Merge pull request #72535 from tallclair/content-type 
Always set content-type & nosniff
 2019-09-27 18:43:39 -07:00
David Zhu
92cb06a2e7 Refactor CSI Translation Library into a struct that is injected into various components to simplify unit testing in future 2019-09-27 12:59:53 -07:00
Kubernetes Prow Robot
dd5efc420b
Merge pull request #82511 from abursavich/keyusage 
Fix typos in KeyUsage constant names
 2019-09-27 03:23:35 -07:00
Kubernetes Prow Robot
478c26c0dc
Merge pull request #82033 from logicalhan/reviewers 
add logicalhan to reviewers for api-machinery directories
 2019-09-26 16:55:37 -07:00
obitech
6acef2b94c Enable strict serializer with codec factory 
- Enabling strict serializer will throw errors on e.g. duplicate
  or unknown fields in YAML configs
- Add test cases for duplicate and unknown fields
 2019-09-26 17:41:07 +02:00
Kubernetes Prow Robot
ff8716f4cf
Merge pull request #83116 from neolit123/1.16-OWNERS 
kubeadm: update OWNERS for 1.16
 2019-09-25 13:52:48 -07:00
Lubomir I. Ivanov
bbee054adc kubeadm: update OWNERS for 1.16 2019-09-25 18:07:38 +03:00
Kubernetes Prow Robot
aba654f96b
Merge pull request #81744 from praseodym/fix-staticcheck-pkg/scheduler 
Fix staticcheck failures for pkg/scheduler/...
 2019-09-24 00:25:27 -07:00
Kubernetes Prow Robot
af98e6a92a
Merge pull request #82629 from cewood/add-log-version 
Add version logging to kubemark
 2019-09-23 14:55:40 -07:00
Mark Janssen
1a1b7001d6 Fix staticcheck failures for scheduler packages 
Errors from staticcheck:
cmd/kube-scheduler/app/server.go:297:27: prometheus.Handler is deprecated: Please note the issues described in the doc comment of InstrumentHandler. You might want to consider using promhttp.Handler instead.  (SA1019)
pkg/apis/scheduling/v1alpha1/defaults.go:27:6: func addDefaultingFuncs is unused (U1000)
pkg/apis/scheduling/v1beta1/defaults.go:27:6: func addDefaultingFuncs is unused (U1000)
test/e2e/scheduling/predicates.go:757:6: func verifyReplicasResult is unused (U1000)
test/e2e/scheduling/predicates.go:765:6: func getPodsByLabels is unused (U1000)
test/e2e/scheduling/predicates.go:772:6: func runAndKeepPodWithLabelAndGetNodeName is unused (U1000)
test/e2e/scheduling/limit_range.go:172:3: this value of pod is never used (SA4006)
test/e2e/scheduling/limit_range.go:177:3: this value of pod is never used (SA4006)
test/e2e/scheduling/limit_range.go:196:3: this value of pod is never used (SA4006)
test/e2e/scheduling/limit_range.go:201:3: this value of pod is never used (SA4006)
test/e2e/scheduling/limit_range.go:240:3: this value of pod is never used (SA4006)
test/e2e/scheduling/taints.go:428:13: this value of err is never used (SA4006)
test/e2e/scheduling/ubernetes_lite.go:219:2: this value of pods is never used (SA4006)
test/integration/scheduler/extender_test.go:78:4: this value of resp is never used (SA4006)
test/integration/volumescheduling/volume_binding_test.go:529:15: this result of append is never used, except maybe in other appends (SA4010)
test/integration/volumescheduling/volume_binding_test.go:538:15: this result of append is never used, except maybe in other appends (SA4010)
 2019-09-23 22:52:57 +02:00
obitech
f9b152abb0 Add strict serializer to codec factory in kube-proxy 2019-09-23 19:39:00 +02:00
Byron Wang
23b75cfcad fix map assignment to entry in nil map,when use --feature-gates in kubeadm 2019-09-20 20:39:26 +08:00
Marek Counts
dfbb6fb6bb replaced logs in validators to be warnings 
Originally kubeadm used klot in the validators to log
These logs are converted to warnings and klog was removed.
 2019-09-19 12:18:40 +00:00
Cameron Wood
aae0755fdc Add version logging to kubemark 2019-09-18 10:06:29 +02:00
Kubernetes Prow Robot
67d928acdc
Merge pull request #82096 from logicalhan/version-deletion 
remove pkg/version and some of redundant copies of it
 2019-09-17 14:27:16 -07:00
Kubernetes Prow Robot
e7090e8f5e
Merge pull request #81517 from danwinship/iptables-monitor 
drop firewalld monitoring, add better iptables monitor
 2019-09-17 10:58:02 -07:00
Kubernetes Prow Robot
3a19f1e80b
Merge pull request #82472 from draveness/feature/remove-feature-gates-in-1-17 
feat: cleanup several GA feature flags which should be removed in 1.17
 2019-09-17 06:58:24 -07:00
Han Kang
866ea74326 remove pkg/version and some of redundant copies of it 
Change-Id: Ia58367c1b1274bfb49c8a4784051463abaf795de
 2019-09-16 16:24:35 -07:00
Arvinderpal Wander
bacc06d8fc kubeadm --service-cluster-ip-range supports a comma seperated list 
of service subnets.

Update DNS, Cert, dry-run logic to support list of Service CIDRs.
Added unit tests for GetKubernetesServiceCIDR and updated
GetDNSIP() unit test to inclue dual-sack cases.
 2019-09-16 09:33:43 -07:00
Kubernetes Prow Robot
01c046836b
Merge pull request #82243 from jfbai/refactor-kubeadm-calls 
refactor: replace all calls to os.Exit() / CheckErr().
 2019-09-16 06:48:52 -07:00
Dan Winship
b6c3d5416a Drop iptables firewalld monitoring support 
The firewalld monitoring code was not well tested (and not easily
testable), would never be triggered on most platforms, and was only
being taken advantage of from one place (kube-proxy), which didn't
need it anyway since it already has its own resync loop.

Since the firewalld monitoring was the only consumer of pkg/util/dbus,
we can also now delete that.
 2019-09-15 15:35:40 -04:00
Kubernetes Prow Robot
af88acc812
Merge pull request #82704 from ahg-g/ahg-default-registry 
Resolved cycle dependency in framework plugins registration
 2019-09-13 18:06:40 -07:00
Abdullah Gharaibeh
3174d9c847 Added a noop plugin to make sure we have the dependencies worked out for the default registry of the scheduler framework. 2019-09-13 13:36:35 -04:00
Kubernetes Prow Robot
3ae81af183
Merge pull request #82521 from viviyww/master12 
Modify the log of kube-proxy
 2019-09-12 19:18:30 -07:00
Thomas Gosteli
40ab042f90 kubeadm: preserve order of user specified apiserver authorization-mode 2019-09-12 15:30:12 +02:00
Kubernetes Prow Robot
abfed68e16
Merge pull request #79758 from hzxuzhonghu/patch-5 
Remove duplicate logging
 2019-09-11 22:52:26 -07:00
Kubernetes Prow Robot
578bb43564
Merge pull request #82513 from beautytiger/kubeadm_upgrade_cleanup 
add line break in kubeadm upgrade logging message
 2019-09-11 21:24:20 -07:00
Kubernetes Prow Robot
99c4f1301d
Merge pull request #81667 from mnogu/fix-static-check-in-controller-manager 
Fix a static check failure in controller-manager
 2019-09-11 18:26:39 -07:00
Kubernetes Prow Robot
fa3dfa82b0
Merge pull request #82414 from SataQiu/kubeadm-20190906 
kubeadm: code clean up about kustomize
 2019-09-11 15:27:53 -07:00
Kubernetes Prow Robot
7ec4f4b4a6
Merge pull request #82391 from jiachengxu/apiserver-typo 
Fix a typo in cmd/kube-apiserver.
 2019-09-11 15:27:23 -07:00
Kubernetes Prow Robot
61b30b062e
Merge pull request #82329 from m3ngyang/node-ctrl-check 
don't start the cloud node controller if cloudprovider.Instances is not supported
 2019-09-11 15:26:08 -07:00
Kubernetes Prow Robot
1146e0c4ad
Merge pull request #82279 from deads2k/which-cert 
add identification for particular certificate controllers
 2019-09-11 15:25:00 -07:00
Tim Allclair
ef6cba0b36 Always set content-type & nosniff 2019-09-11 15:01:43 -07:00
Kubernetes Prow Robot
681df277f5
Merge pull request #82193 from yutedz/svr-evt-ret 
Early return after sending to errCh in Options#eventHandler
 2019-09-11 10:40:30 -07:00
Zhonghu Xu
fb3274759f Remove duplicate logging 2019-09-11 14:58:04 +08:00
yangweiwei
2edc0468e7 Modify the log of kube-proxy 
Modify the warning log of kube-proxy when we run kube-proxy server
with --proxy-mode, but in the config file, we omit it. Then it logs
like ""{"log":"W0905 09:14:40.321571       1 server_others.go:249]
Flag proxy-mode=\"\" unknown, assuming iptables proxy\n","stream":"stderr",
"time":"2019-09-05T09:14:40.321858964Z"} This may lead to confusion. I
think it should me modefied.
 2019-09-11 09:06:21 +08:00
Kubernetes Prow Robot
7e060eec79
Merge pull request #81908 from tedyu/etcd-cluster-avail 
Remove Client#ClusterAvailable from interface
 2019-09-10 17:42:46 -07:00
Kubernetes Prow Robot
1d016cc1d3
Merge pull request #81668 from darshanime/remove_default_service_cidr 
Deprecate default service IP CIDR
 2019-09-10 14:31:45 -07:00
Kubernetes Prow Robot
d5da17e58e
Merge pull request #81432 from logicalhan/clean-shared-metrics 
delete shared metrics (post metrics-stability migration)
 2019-09-10 14:30:32 -07:00
Guangming Wang
2bf3a07298 add line break in kubeadm upgrade logging message 
logging use Println instead of Printf
 2019-09-10 11:53:33 +08:00
Andy Bursavich
c9c7c5409a Fix typos in KeyUsage constant names 2019-09-09 18:39:56 -07:00
draveness
14dc59ee54 feat: remove EnableAggregatedDiscoveryTimeout feature gate 2019-09-09 09:55:54 +08:00
mengyang02
b4638519a9 init check for cloud node controller 2019-09-07 10:47:11 +08:00
SataQiu
c53f2f306a kubeadm: code clean up 2019-09-06 18:40:44 +08:00
Kubernetes Prow Robot
836b901658
Merge pull request #82348 from jpbetz/kubeadm-etcd-image-tag 
Use etcd image version suffixes in kubeadm
 2019-09-05 15:02:57 -07:00
Jiacheng Xu
637badc1f0
fix a typo in cmd/kube-apiserver. 2019-09-05 23:00:36 +02:00
Kubernetes Prow Robot
c8c1aeaa5c
Merge pull request #82248 from rosti/proxyless 
kubeadm: Fetching kube-proxy's config map is now optional
 2019-09-05 11:30:30 -07:00
Joe Betz
4c2b0731cb Simplify etcd image version usage in kubeadm 2019-09-05 10:28:23 -07:00
Joe Betz
5a3399f48d Add etcd image version to kubeadm 2019-09-05 10:27:53 -07:00
Kubernetes Prow Robot
61ecdba9ca
Merge pull request #82289 from robscott/endpointslice-fixes 
Fixing bugs related to Endpoint Slices
 2019-09-05 09:03:10 -07:00
Rostislav M. Georgiev
31b4c782c7 kubeadm: Fetching kube-proxy's config map is now optional 
Whenever kubeadm needs to fetch its configuration from the cluster, it gets
the component configuration of all supported components (currently only kubelet
and kube-proxy). However, kube-proxy is deemed an optional component and its
installation may be skipped (by skipping the addon/kube-proxy phase on init).
When kube-proxy's installation is skipped, its config map is not created and
all kubeadm operations, that fetch the config from the cluster, are bound to
fail with "not found" or "forbidden" (because of missing RBAC rules) errors.

To fix this issue, we have to ignore the 403 and 404 errors, returned on an
attempt to fetch kube-proxy's component config from the cluster.
The `GetFromKubeProxyConfigMap` function now supports returning nil for both
error and object to indicate just such a case.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-09-05 18:25:22 +03:00
Kubernetes Prow Robot
c4c64673d7
Merge pull request #82199 from dims/update-to-etcd-3.3.15-0-image 
Update default etcd server to 3.3.15 for kubernetes 1.16
 2019-09-05 06:35:10 -07:00
Jianfei Bai
fcfcd880fb refactor: replace all calls to os.Exit() / CheckErr(). 2019-09-05 10:16:53 +08:00
Rob Scott
8f9483d827
Fixing bugs related to Endpoint Slices 
This should fix a bug that could break masters when the EndpointSlice
feature gate was enabled. This was all tied to how the apiserver creates
and manages it's own services and endpoints (or in this case endpoint
slices). Consumers of endpoint slices also need to know about the
corresponding service. Previously we were trying to set an owner
reference here for this purpose, but that came with potential downsides
and increased complexity. This commit changes behavior of the apiserver
endpointslice integration to set the service name label instead of owner
references, and simplifies consumer logic to reference that (both are
set by the EndpointSlice controller).

Additionally, this should fix a bug with the EndpointSlice GenerateName
value that had previously been set with a "." as a suffix.
 2019-09-04 09:09:32 -07:00
Kubernetes Prow Robot
7e906ae145
Merge pull request #82047 from roberthbailey/owners 
Remove myself from reviewers across the repo
 2019-09-04 04:35:00 -07:00
David Eads
e8b5781499 add identification for particular certificate controllers 2019-09-03 14:05:04 -04:00
Alexander Kanevskiy
7fb4a2be41 kubeadm: Form correct URL for IPv6 in HTTPProxy check 
Force correct syntax on host/port in URL of HTTPProxy check
if the host argument is a raw IPv6 address string
 2019-09-03 16:04:04 +03:00
Muneyuki Noguchi
9f19665eb6 Fix a static check failure in controller-manager 2019-08-31 03:01:02 +00:00
Kubernetes Prow Robot
7d40536c81
Merge pull request #82024 from codenrhoden/mv-hostutil 
Move HostUtil to pkg/volume/util/hostutil
 2019-08-30 19:21:49 -07:00
Davanum Srinivas
8fbfdf8267
Update default etcd server to 3.3.15 for kubernetes 1.16 
Change-Id: I68f1a5e5339d83077a1a9f312c4e6e33848886c5
 2019-08-30 21:29:45 -04:00
Kubernetes Prow Robot
c86da8e2c1
Merge pull request #82048 from cheftako/kas-np4 
Add support for konnectivity service to the etcd3 client.
 2019-08-30 16:15:28 -07:00
Ted Yu
f1b314bf5a Early return after sending to errCh in Options#eventHandler 2019-08-30 13:18:33 -07:00
Kubernetes Prow Robot
a7ac8d4c0b
Merge pull request #82146 from deads2k/agg-discovery-timeout-2 
add a timeout for proxying discovery requests
 2019-08-30 11:23:00 -07:00
Kubernetes Prow Robot
887edd2273
Merge pull request #82099 from lmdaly/single-numa-node-policy 
Topology Manager Policy: single-numa-node
 2019-08-30 11:21:26 -07:00
Han Kang
d301e9c3a5 clean-up shared metrics code and remaining references (component-base's copy is a drop in replacement) 2019-08-30 10:41:52 -07:00
Walter Fender
edbb0fa2fe Add support for konnectivity service to the etcd3 client. 
If konnectivity service is enabled, the etcd client will now use it.
This did require moving a few methods to break circular dependencies.

Factored in feedback from lavalamp and wenjiaswe.
 2019-08-30 10:31:53 -07:00
Kubernetes Prow Robot
235f3ab3d9
Merge pull request #82127 from rajansandeep/bumpto1.6.2 
Bump CoreDNS version in Kubeadm to 1.6.2
 2019-08-30 09:40:23 -07:00
Travis Rhoden
935c23f2ad
Move HostUtil to pkg/volume/util/hostutil 
This patch moves the HostUtil functionality from the util/mount package
to the volume/util/hostutil package.

All `*NewHostUtil*` calls are changed to return concrete types instead
of interfaces.

All callers are changed to use the `*NewHostUtil*` methods instead of
directly instantiating the concrete types.
 2019-08-30 10:14:42 -06:00
Kubernetes Prow Robot
d3063c682b
Merge pull request #82103 from neolit123/1.16-kubeadm-fix-kubelet-rotate-certs-false 
kubeadm: fix a bug where the kubelet cert rotation was turned off
 2019-08-30 08:00:26 -07:00
Kubernetes Prow Robot
1ade4ce269
Merge pull request #82091 from khenidak/ipvs-dualstack 
dualstack: IPVS proxier
 2019-08-30 06:27:10 -07:00
David Eads
5521bf27c5 add temporary feature gate to allow disabling aggregated discovery timeout 2019-08-30 08:30:08 -04:00
Louise Daly
f6c085f60e Added Single NUMA Node Policy which ensure resource are 
aligned on a single NUMA node

Co-authored-by: Kevin Klues <kklues@nvidia.com>
 2019-08-30 07:17:17 +01:00
darshanime
aef96c34a9 Remove default service cidr 
Signed-off-by: darshanime <deathbullet@gmail.com>
 2019-08-30 11:14:25 +05:30
Kubernetes Prow Robot
7acb066dbc
Merge pull request #81969 from logicalhan/livez 
add `/livez` endpoint for liveness probing on the kube-apiserver
 2019-08-29 19:56:31 -07:00
Kubernetes Prow Robot
6c62ddc85b
Merge pull request #81435 from gyuho/with-block 
Block etcd client creation until connection is up
 2019-08-29 18:07:27 -07:00
Khaled Henidak(Kal)
ef75723564 ipvs dualstack: generated items 
co-authored-by: Lars Ekman <lars.g.ekman@est.tech>
 2019-08-29 23:38:25 +00:00
Khaled Henidak(Kal)
465255425e create meta-proxy for proxy-mode=ipvs (dualstack) 
co-authored-by: Lars Ekman <lars.g.ekman@est.tech>
 2019-08-29 23:37:37 +00:00
Kubernetes Prow Robot
4495d09282
Merge pull request #81430 from robscott/endpointslice-proxy 
Adding EndpointSlice support for kube-proxy ipvs and iptables proxiers
 2019-08-29 15:36:44 -07:00
Han Kang
aa1b2d6d35 add /livez as a liveness endpoint for kube-apiserver 
go fmt

make func private

refactor config_test

Two primary refactorings:

1. config test checkPath method is now each a distinct test
run (which makes it easier to see what is actually failing)

2. TestNewWithDelegate's root path check now parses the json output and
does a comparison against a list of expected paths (no more whitespace
and ordering issues when updating this test, yay).

go fmt

modify and simplify existing integration test for readyz/livez

simplify integration test

set default rbac policy rules for livez

rename a few functions and the entrypoint command line argument (and etcetera)

simplify interface for installing readyz and livez and make auto-register completion a bootstrapped check

untangle some of the nested functions, restructure the code
 2019-08-29 14:13:19 -07:00
Gyuho Lee
21f976bb78 cmd/kubeadm: remove "rpc/status" from import-restrictions 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-08-29 08:46:17 -07:00
Gyuho Lee
93b9545f48 vendor: update with "update-vendor.sh" script 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-08-29 08:46:02 -07:00
Gyuho Lee
eb1509a1d3 kubeadm/app/util/etcd: : block etcd client creation until connection is up 
The new etcd balancer (>3.3.14, 3.4.0) uses an asynchronous resolver for
endpoints. Without "WithBlock", the client may return before the
connection is up.

Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-08-29 08:38:29 -07:00
Ted Yu
2167321adb Remove Client#ClusterAvailable from interface 2019-08-29 07:40:34 -07:00
Kubernetes Prow Robot
85602f26d7
Merge pull request #81990 from tedyu/bld-metadata 
Correct func name WithBuildMetadata
 2019-08-29 07:28:23 -07:00
Sandeep Rajan
dce97a142c bump coredns version in kubeadm to 1.6.2 2019-08-29 10:13:05 -04:00
Kubernetes Prow Robot
7d241f0ec1
Merge pull request #81626 from logicalhan/proxy-migration 
migrate kube-proxy metrics to stability framework
 2019-08-29 05:30:23 -07:00
Kubernetes Prow Robot
d6bc4eb853
Merge pull request #81624 from logicalhan/cm-migration 
migrate controller-manager metrics to stability framework
 2019-08-29 05:30:09 -07:00
Rob Scott
9665c590c7
Adding EndpointSlice support for kube-proxy ipvs and iptables proxiers 2019-08-29 01:06:52 -07:00
Rob Scott
75f6c24923
Adding EndpointSlice controller 2019-08-28 21:13:27 -07:00
Kubernetes Prow Robot
550fb1bfc3
Merge pull request #79386 from khenidak/phase2-dualstack 
Phase 2 dualstack
 2019-08-28 20:39:56 -07:00
Lubomir I. Ivanov
c9b11980ff kubeadm: fix a bug where the kubelet cert rotation was turned off 
A recent commit added warnings for KubeletConfiguration and
KubeProxyConfiguration fields that kubeadm cares about and
does not recommend the user modifying them. Kubelet's
"rotateCertificates" cannot be handled using this function
as there is not way to figure out if the user has set it explicitly to
"false". Hardcode the value to "true" and add a comment about that.

Also apply the following changes to warnDefaultComponentConfigValue()
calls:
- use a local "kind" variable that defines the Kind we are warning about.
- fix wrong paths to fields.
 2019-08-29 02:43:44 +03:00
Kubernetes Prow Robot
af54eae69a
Merge pull request #81612 from rikatz/issue81060 
Remove watching Endpoints of Headless Services
 2019-08-28 14:44:25 -07:00
Kubernetes Prow Robot
6c9f26ca3a
Merge pull request #80766 from robscott/discovery-api 
Adding Discovery API for EndpointSlice
 2019-08-28 14:44:09 -07:00
Han Kang
e1bf0b4918 group imports properly 2019-08-28 12:49:54 -07:00
Han Kang
0895ac212d migrate kube-proxy metrics to stability framework 2019-08-28 12:49:54 -07:00
Han Kang
59db3ac27e migrate controller-manager metrics to stability framework 2019-08-28 12:26:57 -07:00
Kubernetes Prow Robot
b3b4305be5
Merge pull request #81903 from jfbai/fix-kubeadm-kubelet-default 
fix: make kubeadm set defaults to kubelet configuration only when no values are set.
 2019-08-28 12:01:41 -07:00
Khaled Henidak(Kal)
c27e0b029d phase 2: generated items 2019-08-28 16:11:46 +00:00
Khaled Henidak(Kal)
313a5c5734 phase 2: ipam filter secondary service cidr 2019-08-28 15:59:43 +00:00
Khaled Henidak(Kal)
93c06821e6 Phase 2: service and endpoint processing 2019-08-28 15:59:43 +00:00
Kubernetes Prow Robot
6e684875ab
Merge pull request #81954 from SataQiu/fix-schedule-20190826 
schedule code clean: using string prefix instead of MarkDeprecated
 2019-08-28 08:55:59 -07:00
Kubernetes Prow Robot
a927ed454c
Merge pull request #81576 from logicalhan/scheduler-migration 
migrate scheduler metrics to stability framework
 2019-08-28 08:55:12 -07:00
Jianfei Bai
ccc45880a7 fix: prevent overriding of certain kubelet security configuration parameters if the user wished to modify them. 2019-08-28 21:01:49 +08:00
Kubernetes Prow Robot
8af33f9733
Merge pull request #81946 from deads2k/cache 
add cache-control headers to kube-apiserver
 2019-08-28 05:11:39 -07:00
Han Kang
8da448dbe3 migrate scheduler metrics endpoint to metrics stability framework 2019-08-28 03:40:43 -07:00
Kubernetes Prow Robot
b98f622852
Merge pull request #81910 from fabriziopandini/kubeadm-Json6902-Patches 
kubeadm: add support for Json6902 Patches
 2019-08-28 03:09:54 -07:00
Kubernetes Prow Robot
de1cfa9bc1
Merge pull request #81787 from lmdaly/topology-manager-rename-strict-policy 
Renaming strict policy to restricted policy
 2019-08-28 01:38:04 -07:00
Robert Bailey
9d211ab352 Remove myself from reviewers across the repo so that PRs are no 
longer assigned to me by blunderbuss.

Move myself to be an emeritus approver for the cluster directory.
 2019-08-27 16:10:16 -07:00
Han Kang
6eee64c308 add stability level to aggregator metrics and drop blank line in cmd file 2019-08-27 12:45:01 -07:00
Han Kang
466980dd74 migrate kube-apiserver metrics to stability framework 2019-08-27 12:45:01 -07:00
Han Kang
b6831039b7 add logicalhan to reviewers for api-machinery directories 2019-08-27 10:40:29 -07:00
fabriziopandini
0e447d797f kubeadm Json6902 Patches 2019-08-27 14:14:35 +02:00
Ted Yu
8efa1c2a8f Correct func name WithBuildMetadata 2019-08-26 21:10:56 -07:00
Kubernetes Prow Robot
533daf6624
Merge pull request #81836 from fabriziopandini/fix-upgrade-checks 
kubeadm: fix upgrade checks
 2019-08-26 20:55:37 -07:00
Kubernetes Prow Robot
90cf189152
Merge pull request #81791 from yastij/remove-ipvs-checks 
remove the ipvs checks from the preflight checks
 2019-08-26 20:55:22 -07:00
Rob Scott
f80cee9280
Adding discovery/v1alpha1 API for EndpointSlices 2019-08-26 14:50:00 -07:00
Kubernetes Prow Robot
2c64627871
Merge pull request #81918 from tedyu/pki-comment 
Correct comment in CertOrKeyExist
 2019-08-26 10:20:37 -07:00
David Eads
f589c1213c add cache-control headers to kube-apiserver 2019-08-26 13:00:31 -04:00
SataQiu
cb8183c680 schedule code clean: using string prefix instead of MarkDeprecated 2019-08-27 00:03:29 +08:00
Ted Yu
55cc0e2957 Correct comment in CertOrKeyExist 2019-08-25 19:30:20 -07:00
Kubernetes Prow Robot
9a5b87a58b
Merge pull request #81821 from hwdef/fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go 
fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go
 2019-08-23 17:59:30 -07:00
fabriziopandini
885f81dc51 fix upgrade checks 2019-08-23 15:12:29 +02:00
Kubernetes Prow Robot
e232921c1f
Merge pull request #80353 from BenTheElder/tags 
simulate in-tree cloud provider removal with a build tag
 2019-08-23 04:55:31 -07:00
Kubernetes Prow Robot
9c736445f5
Merge pull request #79846 from aramase/fix-golint-pkg/proxy 
Fix golint failures in pkg/proxy
 2019-08-23 00:51:17 -07:00
Kubernetes Prow Robot
2d649c347f
Merge pull request #81701 from tedyu/init-cfg-convert 
Check error return from Scheme.Convert
 2019-08-22 23:27:42 -07:00
Kubernetes Prow Robot
39d5fc7501
Merge pull request #81656 from SataQiu/fix-kubeadm-static-20190820 
kubeadm: fix static check failures
 2019-08-22 23:27:28 -07:00
Kubernetes Prow Robot
9873f0bfe8
Merge pull request #81696 from tedyu/kubeadm-ipv6 
Remove check for addIPv6Checks which evaluates to true
 2019-08-22 22:04:13 -07:00
SataQiu
7a4cf591ea kubeadm: fix static check failures 2019-08-23 10:51:12 +08:00
hwdef
86dd72f345 fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go 2019-08-23 10:07:07 +08:00
Benjamin Elder
5a3301a59d s/nolegacyproviders/providerless/ 2019-08-22 15:30:56 -07:00
Kubernetes Prow Robot
59f5b3ddc4
Merge pull request #80937 from neolit123/1.16-error-stack-trace 
kubeadm: print the stack trace of an error for klog level v>=5
 2019-08-22 15:09:18 -07:00
Benjamin Elder
ece112524b hack/update-bazel.sh 2019-08-22 14:53:35 -07:00
Benjamin Elder
101de4a677 make it possible to start kube-api-server and kube-controller-manager without legacy cloud provider flags 2019-08-22 14:53:35 -07:00
Benjamin Elder
93c479793d make it possible to build kubelet without legacy cloud providers 2019-08-22 14:53:35 -07:00
Benjamin Elder
678d3f2841 add build tags to legacy provider code and make it possible to build kube-controller-manager without any legacyproviders or without particular legacy providers 2019-08-22 14:53:35 -07:00
Kubernetes Prow Robot
37651f1cef
Merge pull request #80368 from danwinship/iptables-checks 
iptables feature detection improvements
 2019-08-22 13:31:20 -07:00
Kubernetes Prow Robot
ca3e86e662
Merge pull request #81623 from neolit123/kernel-validator 
kubeadm: support any Linux kernel version newer than 3.10
 2019-08-22 11:12:59 -07:00
Lubomir I. Ivanov
2fc19136c1 kubeadm: print the stack trace of an error for klog level v>=5 
- replace all stray calls of os.Exit() to util.CheckError() instead
- CheckError() now checks if the klog verbosity level is >=5
and shows a stack trace of the error
- don't call klog.Fatal in version.go
 2019-08-22 20:09:54 +03:00
Yassine TIJANI
05326f8489 remove the ipvs checks from the preflight checks 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-08-22 17:10:22 +01:00
Kubernetes Prow Robot
d54c5163e0
Merge pull request #81458 from fabriziopandini/kubeadm-kustomize-ux 
kubeadm: kustomize-ux
 2019-08-22 05:46:32 -07:00
Kubernetes Prow Robot
8dea3310e5
Merge pull request #81376 from logicalhan/health-checks 
rename healthz methodNames to be more consistent w/ present day usages
 2019-08-22 03:48:32 -07:00
Louise Daly
2fb94231d0 Renaming strict policy to restricted policy 
Restricted policy will fail admission of guaranteed pods where
all requested resources are not available on a single NUMA Node
 2019-08-22 07:57:55 +01:00
Ricardo Pchevuzinske Katz
e389237171 Remove watching Endpoints of Headless Services 
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
 2019-08-21 16:37:09 -03:00
Kubernetes Prow Robot
17a1859370
Merge pull request #81494 from Klaven/remove_awk 
Removed awk from kubeadm reset
 2019-08-21 10:37:14 -07:00
Kubernetes Prow Robot
e1c2c677f1
Merge pull request #78033 from rajansandeep/corednsmigration 
Add the ability to migrate CoreDNS configmap in kubeadm
 2019-08-20 20:39:16 -07:00
Ted Yu
185c0a16ee Check error return from Scheme.Convert 2019-08-20 20:17:14 -07:00
Ted Yu
4639ced630 Remove check for addIPv6Checks which evaluates to true 2019-08-20 19:02:29 -07:00
Lubomir I. Ivanov
bec9c3678b kubeadm: support any kernel version newer than 3.10 
It seems undesirable that Kubernetes as a system should be
blocking a node if it's Linux kernel is way too new.

If such a problem even occurs we should exclude versions from
the list of supported versions instead of blocking users
from trying e.g. the latest 7.0.0-beta kernel because our
validators are not aware of this new version.
 2019-08-21 01:23:53 +03:00
Kubernetes Prow Robot
f17b608157
Merge pull request #81622 from neolit123/kubeadm-remove-blang 
kubeadm: do not use github.com/blang/semver in app/preflight
 2019-08-20 10:47:28 -07:00
Sandeep Rajan
6bb9eeeb1c move the corefile backup into a single configmap with a corefile-backup data key 2019-08-20 13:20:18 -04:00
Marek Counts
6845c66efb removed awk from kubeadm reset 
removed awk from kubeadm reset in favor of native go lang calls
that are not vulnerable to expantion.
 2019-08-20 15:53:40 +00:00
Lubomir I. Ivanov
0a0f6f8eec kubeadm: do not use github.com/blang/semver in app/preflight 
Usage of github.com/blang/semver is not needed and
k8s.io/apimachinery/pkg/util/version should be used instead
for semantic version parsing and version comparison.
 2019-08-20 14:06:52 +03:00
Kubernetes Prow Robot
66b0a0c17d
Merge pull request #81604 from tedyu/kubeadm-close-err 
Check the error return from listener close
 2019-08-19 15:09:44 -07:00
Ted Yu
158cf5d61a Check the error return from listener close 2019-08-19 09:26:35 -07:00
Sadlil Rhythom
3e6d483dd9 Fix Test for kubeadm/app/util/net.GetHostname 2019-08-19 14:38:19 +02:00
Kubernetes Prow Robot
acc57be085
Merge pull request #81559 from tedyu/static-pod-rm-unused 
Remove boolean waitForComponentRestart which is always true in upgradeComponent
 2019-08-18 21:18:03 -07:00
Kubernetes Prow Robot
ff22d824a8
Merge pull request #81572 from ernado/kube-proxy-fix-typo 
fix typo
 2019-08-18 17:12:03 -07:00
Aleksandr Razumov
2390e242b4
fix typo 2019-08-18 23:59:04 +03:00
Ted Yu
4f9d20e0f9 Remove boolean waitForComponentRestart which is always true in upgradeComponent 2019-08-17 18:50:55 -07:00
Kubernetes Prow Robot
ef397e5b36
Merge pull request #79604 from liggitt/crd-v1 
promote CRD to v1
 2019-08-16 21:44:08 -07:00
Kubernetes Prow Robot
2036ee5dde
Merge pull request #81465 from yanghaichao12/dev190815 
remove defaultedInternalConfig from kubeadm
 2019-08-16 17:03:06 -07:00
Kubernetes Prow Robot
3b85eeaa23
Merge pull request #81495 from Klaven/kubeadm_reset 
updated kubeadm reset wording to be more clear
 2019-08-16 14:06:18 -07:00
Kubernetes Prow Robot
9e60bedebe
Merge pull request #81385 from neolit123/etcd-probe 
kubeadm: use etcd's /health endpoint for it's liveness probe
 2019-08-16 14:06:09 -07:00
Jordan Liggitt
aa05715c0e generated 2019-08-16 13:13:40 -04:00
Kubernetes Prow Robot
e6d4273395
Merge pull request #79033 from Nordix/kubeadm-ds-pod-network-cidr 
Dual-Stack Integration with Kubeadm
 2019-08-16 05:06:31 -07:00
Kubernetes Prow Robot
b0dbdbeb00
Merge pull request #81347 from jfbai/tob-k8s-003 
Add http response code 301 and 503 to check.
 2019-08-15 23:08:45 -07:00
Lubomir I. Ivanov
99b64f1e8e kubeadm: use etcd's /health endpoint for it's liveness probe 
Etcd v3.3.0 added the --listen-metrics-urls flag which allows specifying
addition URLs to the already present /health and /metrics endpoints.

While /health and /metrics are enabled for URLS defined with
--listen-client-urls (v3+ ?) they do require HTTPS.

Replace the present etcdctl based liveness probe with a standard HTTP
GET v1.Probe that connects to http://127.0.0.1:2381/health.

These endpoints are not reachable from the outside and only available
for localhost connections.
 2019-08-16 01:06:49 +03:00
Marek Counts
e69feae028 updated kubeadm reset wording to be more clear 
updated kubeadm reset to be clear that it was best effort.
 2019-08-15 20:15:55 +00:00
Kubernetes Prow Robot
de3aed8023
Merge pull request #81306 from ravisantoshgudimetla/terminate-on-leader-election 
Scheduler should terminate on loosing leader lock
 2019-08-15 11:06:49 -07:00
Jordan Liggitt
6278447bde CRD v1: install/register types 2019-08-15 12:26:13 -04:00
Sandeep Rajan
6821d21260 add the ability to migrate coredns configmap 2019-08-15 10:09:32 -04:00
yanghaichao12
f54856952f remove defaultedInternalConfig fromr kubeadm 
remove defaultedInternalConfig from kubeadm
 2019-08-15 17:45:27 +08:00
Jianfei Bai
1d75a16b46 Add http response code 503 to check. 2019-08-15 15:52:54 +08:00
fabriziopandini
a92e7975d2 kubeadm-kustomize-ux 2019-08-15 09:14:31 +02:00
tariqibrahim
6df4f62d1c [kubernetes/kubeadm] fix minor nil issues in kudeadm code 2019-08-14 21:49:39 -07:00
Kubernetes Prow Robot
d5bdb7796a
Merge pull request #81386 from neolit123/1.17-kubeadm-etcd-map 
kubeadm: add v1.17 to the list versions that map to etcd version
 2019-08-14 12:46:51 -07:00
Kubernetes Prow Robot
a7c81c663d
Merge pull request #78775 from johscheuer/fix-kube-proxy-cleanup-error 
Check if options returning an error
 2019-08-14 07:26:26 -07:00
Johannes M. Scheuermann
352564714a Handle error correctly in kubee-proxy command 
Signed-off-by: Johannes M. Scheuermann <joh.scheuer@gmail.com>
 2019-08-14 07:41:09 +02:00
Kubernetes Prow Robot
e084c281ac
Merge pull request #72771 from yanghaichao12/proxy0110 
add a test case for HostnameOverride
 2019-08-13 21:38:23 -07:00
Lubomir I. Ivanov
3ecf3c6a44 kubeadm: add v1.17 to the list versions that map to etcd version 2019-08-14 01:49:25 +03:00
Han Kang
2e23788fda rename healthz methodNames to be more consistent w/ present day usages 2019-08-13 12:52:30 -07:00
Kubernetes Prow Robot
f7473e78f2
Merge pull request #81275 from SataQiu/fix-kubeadm-20190812 
kubeadm: cleanup unnecessary slice initialization statements
 2019-08-13 07:56:21 -07:00
Kubernetes Prow Robot
c08ee9d51b
Merge pull request #80905 from fabriziopandini/kubeadm-kustomize-core 
Kubeadm: kustomize core
 2019-08-13 07:55:55 -07:00
SataQiu
36bb0b9a53 kubeadm: cleanup unnecessary slice initialization statements 2019-08-12 23:42:56 +08:00
Kubernetes Prow Robot
ca6290538b
Merge pull request #81217 from SataQiu/fix-kubeadm-20190809 
kubeadm: change the permissions of generated CSR files from 0644 to 0600
 2019-08-12 08:21:13 -07:00
fabriziopandini
5eca049557 placeholders for follow-up PR on kustomize UX 2019-08-12 14:17:19 +02:00
fabriziopandini
97181595f0 kubeadm-kustomize-core 2019-08-12 14:16:51 +02:00
Kubernetes Prow Robot
c8c9d2e21c
Merge pull request #77167 from paulsubrata55/spaul-kube-proxy-fix 
Fix for kube-proxy to wait for some duration for the node to be defined.
 2019-08-09 19:47:14 -07:00
ravisantoshgudimetla
3a1354d590 Autogenerated files 2019-08-09 15:23:43 -04:00
ravisantoshgudimetla
e2b29cd508 Scheduler should terminate when it looses leader lock 2019-08-09 15:23:28 -04:00
Davanum Srinivas
413f22b0af
Deprecate the hyperkube support for cloud-controller-manager 
Change-Id: Id2e23beb2805795a3a9d54d0ddee43775a8e138c
 2019-08-09 15:01:10 -04:00
Arvinderpal Wander
3ac7ae60cc kubeadm --pod-network-cidr supports a comma separated list of pod 
CIDRs. This is a necesary change for dual-stack.
 2019-08-09 07:20:51 -07:00
Arvinderpal Wander
ec77598906 Update kubeproxy config validation to support list of comma 
separated pod CIDRs. Dual-stack feature must be enabled for the
validation to be done.
 2019-08-09 07:20:39 -07:00
Kubernetes Prow Robot
63e27a02ed
Merge pull request #81031 from chuckha/kubeadm-docs 
kubeadm: Fix some documentation errors
 2019-08-09 04:31:25 -07:00
SataQiu
2e35c6b5bb kubeadm: the permissions of generated CSR files are changed from 0644 to 0600 2019-08-09 17:36:26 +08:00
Kubernetes Prow Robot
63179a7f26
Merge pull request #81156 from SataQiu/fix-kubeadm-20190808 
Small fix for kubeadm version def.bzl
 2019-08-08 19:35:51 -07:00
Kubernetes Prow Robot
ee04128b05
Merge pull request #81084 from bart0sh/PR0078-kubeadm-remove-pkg-kubeapiserver-authorizer-modes-dependency 
kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes
 2019-08-08 12:35:20 -07:00
Chuck Ha
309cd1684f
kubeadm: Fix some documnetation errors 
Signed-off-by: Chuck Ha <chuckh@vmware.com>
 2019-08-08 11:34:19 -04:00
Kubernetes Prow Robot
9690201481
Merge pull request #81094 from andrewsykim/deprecate-cloud-provider-gce-lb-src-cidrs 
also deprecate --cloud-provider-gce-lb-src-cidrs flag in kube-apiserver
 2019-08-08 07:59:58 -07:00
Kubernetes Prow Robot
8923d4fd2d
Merge pull request #81059 from Songjoy/patch-7 
modify the spelling errors
 2019-08-08 07:59:33 -07:00
Kubernetes Prow Robot
62f1c4065b
Merge pull request #81029 from dims/drop-cloud-controller-manager-from-release-artifacts 
Drop cloud-controller-manager artifacts from k/k release
 2019-08-08 06:27:31 -07:00
Ed Bartosh
b4300ec24e kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes 
Moved 2 more constants from pkg/kubeapiserver/authorizer/modes
to kubeadm/app/constants module to remove dependency.
 2019-08-08 12:08:23 +03:00
SataQiu
11c92d190e fix kubeadm version def.bzl 2019-08-08 17:04:36 +08:00
Kubernetes Prow Robot
6d49d69c91
Merge pull request #80689 from Pothulapati/inotify 
Switch to k8s.io/utils/inotify
 2019-08-08 00:49:19 -07:00
Kubernetes Prow Robot
19e85a9092
Merge pull request #80502 from xigang/master 
Update CleanupAndExit and OnServiceSynced field comment and bugfix panic params in the construct method
 2019-08-07 20:10:06 -07:00
Kubernetes Prow Robot
fb5a0e0525
Merge pull request #78204 from stewart-yu/patch-1 
get rid of the redundancy field in kube-proxy option
 2019-08-07 20:09:17 -07:00
Kubernetes Prow Robot
4c315aa8d9
Merge pull request #78543 from cheftako/kas-np3 
Get network-proxy working with GCE.
 2019-08-07 14:44:44 -07:00
Andrew Sy Kim
651633cb70 also deprecate --cloud-provider-gce-lb-src-cidrs flag from kube-apiserver 
Signed-off-by: Andrew Sy Kim <kiman@vmware.com>
 2019-08-07 14:48:40 -04:00
Tarun Pothulapati
e3c21d6495 update dependencies to include k8s.io/utils/inotify 
Signed-off-by: Tarun Pothulapati <tarunpothulapati@outlook.com>
 2019-08-07 21:09:40 +05:30
Tarun Pothulapati
a7d007958e fix linting issues 
Signed-off-by: Tarun Pothulapati <tarunpothulapati@outlook.com>
 2019-08-07 21:00:53 +05:30
Tarun Pothulapati
f4e2907477 use k8s.io/utils/inotify instead of github.com/go-sigma/inotify 
Signed-off-by: Tarun Pothulapati <tarunpothulapati@outlook.com>
 2019-08-07 21:00:29 +05:30
Kubernetes Prow Robot
34db8e08c1
Merge pull request #81002 from zgfh/patch-10 
kubeadm:  fix name of CA spell error
 2019-08-07 03:12:49 -07:00
Kubernetes Prow Robot
aa6a077cfd
Merge pull request #80681 from ricky1993/customize_resource_name_and_namespace 
add options for name and namespace of leaderelection object
 2019-08-07 01:36:51 -07:00
Walter Fender
ebb65c5f4c Get network-proxy working with GCE. 
Got the proxy-server coming up in the master.
Added certs and have it comiung up with those certs.
Added a daemonset to run the network-agent.
Adding support for agent running as a sameon set on every node.

Added quick hack to test that proxy server/agent were correctly
tunneling traffic to the kubelet.

Added more WIP for reading network proxy configuration.
Get flags set correctly and fix connection services.
Adding missing ApplyTo
Added ConnectivityService.
Fixed build directives. Added connectivity service configuration.
Fixed log levels.
Fixed minor issues for feature turned off.
Fixed boilerplate and format.
Moved log dialer initialization earlier as per Liggits suggestion.
Fixed a few minor issues in the configuration for GCE.
Fixed scheme allocation
Adding unit test.
Added test for direct connectivity service.

Switching to injecting the Lookup method rather than using a Singleton.
First round of mikedaneses feedback.
Fixed deployment to use yaml and other changes suggested by MikeDanese.

Switched network proxy server/agent which are kebab-case not camelCase.
Picked up DIAL_RSP fix.
Factored in deads2k feedback.
Feedback from mikedanese
Factored in second round of feedback from David.
Fix path in verify.
Factored in anfernee's feedback.
First part of lavalamps feedback.
Factored in more changes from lavalamp and mikedanese.

Renamed network-proxy to konnectivity-server and konnectivity-agent.
Fixed tolerations and config file checking.
Added missing strptr
Finished lavalamps requested rename.
Disambiguating konnectivity service by renaming it egress selector.

Switched feature flag to KUBE_ENABLE_EGRESS_VIA_KONNECTIVITY_SERVICE
 2019-08-06 23:09:49 -07:00
Songjoy
eb30b3d41d
modify the spelling errors 
fix escluding to excluding
 2019-08-07 10:38:20 +08:00
Kubernetes Prow Robot
663796e624
Merge pull request #78345 from obitech/fix_golint_pkg_kubelet_stats_client 
Fix golint pkg/kubelet/stats/client.go
 2019-08-06 13:14:49 -07:00
Davanum Srinivas
adbd1800c8 Drop cloud-controller-manager artifacts from k/k release 2019-08-06 13:51:27 -04:00
Kubernetes Prow Robot
1220a8ae92
Merge pull request #80995 from zgfh/patch-8 
cleanup: fix log message error in test case
 2019-08-06 01:03:54 -07:00
Kubernetes Prow Robot
b29e187a45
Merge pull request #80992 from dzzg/patch-1 
cleanup: fix typo "contstruct" -> "construct"
 2019-08-05 23:44:07 -07:00
alan
cd2ecefb80 kubeadm: fix name of CA spell error 2019-08-06 12:01:28 +08:00
Kubernetes Prow Robot
da30406a9d
Merge pull request #80966 from neolit123/1.16-cleanup-file-discovery 
kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery
 2019-08-05 18:18:32 -07:00
Alan
11e333474e
cleanup: fix log message error in test case 2019-08-06 07:00:05 +08:00
dzzg
cd57039927
cleanup: fix typo "contstruct" -> "construct" 2019-08-06 06:22:46 +08:00
Kubernetes Prow Robot
74c0cc2790
Merge pull request #80951 from neolit123/1.16-sched-auth 
kubeadm: enable secure serving for the kube-scheduler
 2019-08-05 13:36:29 -07:00
Kubernetes Prow Robot
4824f823ad
Merge pull request #80919 from smarterclayton/disable_compression 
Disable gzip compression in core control plane components
 2019-08-05 09:09:49 -07:00
Kubernetes Prow Robot
040ce52a43
Merge pull request #80820 from mattmelgard/defer-delete-kubelet-bootstrap 
kubeadm: add a defer to kubelet bootstrap token deletion
 2019-08-05 02:57:48 -07:00
Lubomir I. Ivanov
540c272f7b kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery 
For file discovery, in case the user feeds a file for the CA
from the kubeconfig, make sure it's preloaded and embedded using
the new function EnsureCertificateAuthorityIsEmbedded().

This commit also applies cleanup:
- unroll validateKubeConfig() into ValidateConfigInfo() as this way
the default cluster can be re-used.
- in ValidateConfigInfo() reuse the variable config instead of creating
a new variable kubeconfig.
- make the Ensure* functions return descriptive errors instead of
wrapping the errors on the side of the callers.
 2019-08-05 03:23:41 +03:00
Lubomir I. Ivanov
e142bf6203 kubeadm: enable secure serving for the kube-scheduler 
Secure serving was already enabled for kube-controller-manager.
Do the same for kube-scheduler, by passing the flags
"authentication-kubeconfig" and "authorization-kubeconfig"
to the binary in the static Pod.

This change allows the scheduler to perform reviews on incoming
requests, such as:
- authentication.k8s.io/v1beta1 TokenReview
- authorization.k8s.io/v1 SubjectAccessReview

The authentication and authorization checks for "system:kube-scheduler"
users were previously enabled by PR 72491.
 2019-08-03 19:15:32 +03:00
chenyixiang
41a435a812 migrate scheduler options to resourceName & resourceNamespace 
Change-Id: I743eda488320c97c123b49018d7efcc57525b152
 2019-08-03 11:42:47 +08:00
Kubernetes Prow Robot
44f3aafc1a
Merge pull request #80867 from fabriziopandini/fix-certs-generation-for-external-etcd 
kubeadm: fix-certs-generation-for-external-etcd
 2019-08-02 20:28:06 -07:00
Clayton Coleman
33521b41d4
Disable gzip compression in core control plane components 
On local networks (such as the typical connection path between
control plane components) gzip compression increases CPU use and
end to end p99 latency rather than decreasing it. Disable compression
within the control plane components like a 1.15 cluster would be
configured.
 2019-08-02 16:18:15 -04:00
Kubernetes Prow Robot
40178ccf7f
Merge pull request #80894 from bart0sh/PR0077-kubeadm-simplified-returns 
kubeadm: simplified returns
 2019-08-02 12:40:35 -07:00
mattmelgard
f03bbe1b6d Add a defer to kubelet boostrap token deletion 2019-08-02 09:57:00 -06:00
Kubernetes Prow Robot
f6bc0ea03e
Merge pull request #80891 from bart0sh/PR0076-kubeadm-handle-joinControPlaneDoneTemp.Execute-errors 
handle joinControPlaneDoneTemp.Execute errors
 2019-08-02 08:44:05 -07:00
Kubernetes Prow Robot
564eff757c
Merge pull request #80862 from drpaneas/return_warnings 
kubeadm reset: replace Errorf with Warningf
 2019-08-02 04:54:11 -07:00
Ed Bartosh
6b21af79c2 kubeadm: simplified returns 2019-08-02 13:01:02 +03:00
Ed Bartosh
d0506f5a50 handle joinControPlaneDoneTemp.Execute errors 2019-08-02 12:37:57 +03:00
Kubernetes Prow Robot
547617a523
Merge pull request #80804 from olivierlemasle/add-join-timeout 
Make kubeadm join discovery wait for a finite time
 2019-08-01 13:38:41 -07:00
Kubernetes Prow Robot
f5c9d38a3f
Merge pull request #80833 from neolit123/1.16-update-version 
kubeadm: update the version constants for 1.16
 2019-08-01 11:52:44 -07:00
Kubernetes Prow Robot
93e6fb30f0
Merge pull request #74357 from lmdaly/topology-manager-container-manager 
Updates to container manager and internal container lifecycle to accommodate TopologyManager
 2019-08-01 11:52:17 -07:00
Dan Winship
a735c97356 kube-proxy: drop iptables version check 
Kube-proxy's iptables mode used to care whether utiliptables's
EnsureRule was able to use "iptables -C" or if it had to implement it
hackily using "iptables-save". But that became irrelevant when
kube-proxy was reimplemented using "iptables-restore", and no one ever
noticed. So remove that check.
 2019-08-01 12:05:31 -04:00
fabriziopandini
59fb766b42 fix-certs-generation-for-external-etcd 2019-08-01 17:51:33 +02:00
Panagiotis Georgiadis
f946a2500b kubeadm reset: replace Errorf with Warningf 2019-08-01 16:40:47 +02:00
Olivier Lemasle
5c61056432 Make discovery wait for a finite time 
Add a timeout to discovery in `kubeadm join`,
when using a discovery file.
 2019-08-01 13:17:45 +02:00
Kubernetes Prow Robot
3758426884
Merge pull request #80798 from xlgao-zju/ignore-not-found 
do not return error, when the ds is not found
 2019-07-31 22:37:03 -07:00
YueHonghui
d29f194474 add flag concurrent-statefulset-syncs to kube-controller-manager (#79169) 
* add flag `concurrent-statefulset-syncs` to set number of concurrent workers for statefulset controller

* change default value of ConcurrentStatefulSetSyncs from 1 to 5

* 1. fix doc comment of statefulset config types.go
2. add missing deps k8s.io/kubernetes/pkg/controller/statefulset/config

* add missing dep k8s.io/kubernetes/pkg/controller/statefulset/config/v1alpha1

* updated bazel BUILD files

* update kube-controller-manager options testcase

* fix codegen

* fix golint error

* fix testcase
 2019-07-31 22:36:14 -07:00
Lubomir I. Ivanov
8aa69ea502 kubeadm: update the supported version for 1.16 2019-08-01 05:57:25 +03:00
Lubomir I. Ivanov
e379164bc7 kubeadm: apply a number of _test fixes 
- common_test.go: use constants.CurrentKubernetesVersion
- diff_test.go: write temporary files instead of using testdata.
this allows us to not have to bump kubernetesVersions in the
testdata files (now removed)
- policy_test.go: apply fixes to tests that were previously passing,
but a bump in constants.go breaks them. these tests now work
for any version.
 2019-08-01 05:57:24 +03:00
Xianglin Gao
1b6ec47a04 do not return error, when the ds is not found 
Signed-off-by: Xianglin Gao <xianglin.gxl@alibaba-inc.com>
 2019-08-01 09:12:14 +08:00
Emrecan BATI
90ce2d50d3 Add GetKernelVersion to ipvs.KernelHandler interface 
ipvs `getProxyMode` test fails on mac as `utilipvs.GetRequiredIPVSMods`
try to reach `/proc/sys/kernel/osrelease` to find version of the running
linux kernel. Linux kernel version is used to determine the list of required
kernel modules for ipvs.

Logic to determine kernel version is moved to GetKernelVersion
method in LinuxKernelHandler which implements ipvs.KernelHandler.
Mock KernelHandler is used in the test cases.

Read and parse file is converted to go function instead of execing cut.
 2019-07-31 22:10:44 +03:00
Kubernetes Prow Robot
82a252ad74
Merge pull request #80676 from fabriziopandini/delete-bootstrap-kubelet.conf 
kubeadm: delete bootstrap-kubelet.conf after TLS bootstrap
 2019-07-31 00:24:47 -07:00
Kubernetes Prow Robot
5bfa3664fb
Merge pull request #80531 from Nordix/kubeadm-ds-FG-propagate 
Propagate kubeadm dual-stack feature-gate to all k8s components
 2019-07-31 00:24:21 -07:00
Kubernetes Prow Robot
000932d584
Merge pull request #80675 from fabriziopandini/fix-file-discovery 
Fix kubeadm file discovery
 2019-07-30 22:44:33 -07:00
Arvinderpal Wander
585ef375bb Kubeadm FG for dual-stack was introduced in #80145. This PR 
progagates the kubeadm FG to the individual k8scomponents
on the control-plane node.

* Note: Users who want to join worker nodes to the cluster
will have to specify the dual-stack FG to kubelet using the
nodeRegistration.kubeletExtraArgs option as part of their
join config. Alternatively, they can use KUBELET_EXTRA_ARGS.

kubeadm FG: kubernetes/kubeadm#1612
 2019-07-30 07:27:51 -07:00
chenyixiang
ee6e28b5cf add options for name and namespace of leaderelection object 
Change-Id: Iaa62f5f1c3b24a4cc567a840707d9eba7cf901b8
 2019-07-30 09:46:49 +08:00
Sean Sullivan
6c96a059dd Move pkg/kubectl/cmd/util and subdirs to staging 2019-07-29 13:08:41 -07:00
fabriziopandini
df08af0349 feedback 1 2019-07-29 10:48:23 +02:00
fabriziopandini
d63e778f6f fix-file-discovery 2019-07-27 19:19:29 +02:00
Kubernetes Prow Robot
23649560c0
Merge pull request #80301 from klueska/upstream-rename-topologymanager-preferred-best-effort 
Rename 'preferred' TopologyManager policy to 'best-effort'
 2019-07-27 09:25:56 -07:00
Kubernetes Prow Robot
12e462b21a
Merge pull request #80656 from seans3/move-kubectl-version 
Move pkg/kubectl/version to staging
 2019-07-27 07:33:56 -07:00
fabriziopandini
f4ad37d7ca delete-bootstrap-kubelet.conf 2019-07-27 15:36:24 +02:00
fabriziopandini
ada6b0ddf1 autogenerated 2019-07-27 15:21:24 +02:00
Kubernetes Prow Robot
9bae1bc568
Merge pull request #80648 from odinuge/kubeadm-upgrade-diff-err 
Fix error handling issue in kubeadm upgrade diff
 2019-07-26 20:16:48 -07:00
Kubernetes Prow Robot
44de947f0f
Merge pull request #80509 from mborsz/endpoints 
Add simple pod updates batching to endpoint controller.
 2019-07-26 20:16:36 -07:00
Kubernetes Prow Robot
1d49cd141a
Merge pull request #80619 from SataQiu/fix-cloud-controller-manager 
Follow up #80474: use correct format verb
 2019-07-26 16:52:23 -07:00
Sean Sullivan
fb44be2d97 Move pkg/kubectl/version to staging 2019-07-26 15:48:09 -07:00
Kubernetes Prow Robot
8f1eeacb78
Merge pull request #80573 from bart0sh/PR0075-kubeadm-handle-ResetClusterStatusForNode-errors 
kubeadm: handle ResetClusterStatusForNode errors
 2019-07-26 09:56:25 -07:00
Kubernetes Prow Robot
688f567698
Merge pull request #80307 from bart0sh/PR0073-kubeadm-remove-pkg-kubeapiserver-authorizer-modes-dependency 
kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes
 2019-07-26 09:55:59 -07:00
Odin Ugedal
2522e782dd Fix error handling issue in kubeadm upgrade 
The error was unintentionally set inside the scope of the if statement,
hiding possible errors.
 2019-07-26 18:51:29 +02:00
SataQiu
e35a7b1ba1 use correct format verb 2019-07-26 12:24:40 +08:00
Kubernetes Prow Robot
27dfcbe8a7
Merge pull request #80474 from SataQiu/fix-controllermanager-20190723 
Small Fix: Use correct format verb
 2019-07-25 20:47:58 -07:00
Kubernetes Prow Robot
bf2dd03083
Merge pull request #80318 from davidxia/fix-err-caps 
cleanup: fix some log and error capitalizations
 2019-07-25 10:41:28 -07:00
Ed Bartosh
5dd9d6a19f kubeadm: handle ResetClusterStatusForNode errors 
Handled errors returned by ResetClusterStatusForNode function when
resetting cluster status for a control-plane node.
 2019-07-25 15:45:59 +03:00
Kevin Klues
7eccc71c9e Rename 'preferred' TopologyManager policy to 'best-effort' 2019-07-25 10:44:36 +02:00
Ed Bartosh
70f82f0dda kubeadm: add forgotten error check 
'kubeadm config images pull' command ignores pulling errors due to
forgotten error check.

Added the check to correctly output errors if they occur.
 2019-07-24 17:44:22 +03:00
Maciej Borsz
2fae3cbcfe Add simple batching to endpoints controller 2019-07-24 11:36:53 +02:00
Louise Daly
9f0081cc36 Updates to container manager and internal container lifecycle to accommodate Topology Manager 
Co-authored-by: Conor Nolan <conor.nolan@intel.com>
 2019-07-24 08:09:38 +01:00
xigang
4ac81d7508 Update the CleanupAndExit field for the Options and the OnServiceSynced for the ServiceHandler comment 2019-07-24 09:40:29 +08:00
SataQiu
86f485541d use correct format verb 2019-07-23 18:12:42 +08:00
alan
ca8d5759ff
add link of kubeadm config doc 2019-07-22 22:44:30 +08:00
David Xia
fabfd950b1
cleanup: fix some log and error capitalizations 
Part of https://github.com/kubernetes/kubernetes/issues/15863
 2019-07-20 18:26:16 -04:00
Kubernetes Prow Robot
cfabadb0eb
Merge pull request #80296 from bart0sh/PR0072-remove-util-procfs-dependency 
kubeadm: remove dependency on pkg/util/procfs
 2019-07-20 00:40:54 -07:00
Ed Bartosh
2adb09f0e1 kubeadm: remove dependency on pkg/util/procfs 
Run pidof utility to determine if systemd-resolved is running
instead of calling procfs.PidOf.
 2019-07-19 19:09:53 +03:00
Ed Bartosh
d60fdcc6ff kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes 
moved constants from pkg/kubeapiserver/authorizer/modes
to kubeadm/app/constants module.
 2019-07-19 11:50:18 +03:00
RainbowMango
a4ca944d53 kubeadm should always fall back to client version when there is any internet issue 2019-07-19 15:13:47 +08:00
Ed Bartosh
d221148121 kubeadm: get rid of dependency on pkg/util/node 
Created local copy of GetHostname API to avoid
dependency to pkg/util/node.
 2019-07-17 18:49:39 +03:00
Kubernetes Prow Robot
683e405f31
Merge pull request #79418 from yue9944882/chore/prune-aggregator-internals 
Prune hub-type client/informer/lister from kube-aggregator
 2019-07-16 23:22:34 -07:00
Jordan Liggitt
a6db3fd6fa Update unit test with expected query parameters 2019-07-16 20:54:26 -04:00
Kubernetes Prow Robot
619a3985d0
Merge pull request #80206 from tedyu/sched-svr-dup 
Remove duplicate requestInfoResolver
 2019-07-16 15:24:43 -07:00
Ted Yu
a3f06c7e23 Remove duplicate requestInfoResolver 2019-07-16 10:53:07 -07:00
yue9944882
3b1624f0cc remove kube-aggregator/pkg/client/* 
use v1 api

[DO NOT REVIEW] bazel changes

code-gen script changes

update hack/update-vendor

remove useless interface type cast
 2019-07-16 23:11:15 +08:00
Kubernetes Prow Robot
8e3a2f2a5b
Merge pull request #80165 from SataQiu/fix-kubeadm-20190715 
kubeadm: fix the bug that bazel build does not respect hack/print-workspace-status.sh
 2019-07-16 03:55:24 -07:00
Kubernetes Prow Robot
7e7bb5cf3a
Merge pull request #80050 from chuckha/jsontags 
[kubeadm] Adds json struct tags to exposed API types
 2019-07-16 02:39:23 -07:00
Kubernetes Prow Robot
c30f024864
Merge pull request #78162 from hex108/registry 
Add support for writing out of tree custom scheduler plugins
 2019-07-15 23:29:24 -07:00
SataQiu
298909e20e kubeadm: use local copy of kubectl's version package 2019-07-16 09:51:10 +08:00
Kubernetes Prow Robot
ab8506fb9b
Merge pull request #80115 from gyuho/kubernetes-version 
kubeadm/*/phases/init/certs,kubeconfig: add "kubernetes-version" flag
 2019-07-15 16:33:37 -07:00
Kubernetes Prow Robot
768acf6009
Merge pull request #80145 from Nordix/kubeadm-ds-feature-gate 
Adds kubeadm feature-gate for dual-stack (IPv6DualStack)
 2019-07-15 14:54:14 -07:00
Chuck Ha
74ba11b0cd
[kubeadm] Adds json struct tags to exposed API types 
Signed-off-by: Chuck Ha <chuckh@vmware.com>
 2019-07-15 11:14:40 -04:00
Kubernetes Prow Robot
303509cdf5
Merge pull request #80103 from SataQiu/cleanup-kubeadm-20190712 
kubeadm: cleanup unnecessary k8sVer parameter for GetStaticPodSpecs
 2019-07-15 03:23:06 -07:00
Arvinderpal Wander
79e7a4c0da Adds kubeadm feature-gate for dual-stack (IPv6DualStack). 
Issue: #1612
 2019-07-14 19:44:48 -07:00
Kubernetes Prow Robot
ae67616110
Merge pull request #80025 from SataQiu/fix-kubeadm-diff-20190711 
kubeadm: support fetching configuration from the original cluster for 'upgrade diff'
 2019-07-12 20:19:04 -07:00
Kubernetes Prow Robot
676417ec7b
Merge pull request #80043 from dims/remove-deprecated-containerized-flag-in-kubelet 
Remove deprecated --containerized flag in kubelet
 2019-07-12 12:25:05 -07:00
Gyuho Lee
bad7a3fbbd kubeadm/*/phases/init/certs,kubeconfig: add "kubernetes-version" flag 
If empty "--kubernetes-version" is given (as it's not configurable now)
k8s.io/kubernetes/cmd/kubeadm/app/util/version.go.KubernetesReleaseVersion
will fetch the version from the internet.

But, this can fail:

% kubeadm init phase certs ca --cert-dir ...
unable to fetch file. URL: "https://dl.k8s.io/release/stable-1.txt", status: 502 Bad Gateway
failed to run commands: exit status 1

Can happen to other commands:

% kubeadm init phase kubeconfig controller-manager ...
% kubeadm init phase kubeconfig scheduler ...

This make "--kubernetes-version" configurable, so users can enable offline mode.

Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-07-12 11:05:43 -07:00
SataQiu
b23772df80 kubeadm: cleanup unnecessary k8sVer parameter for GetStaticPodSpecs 2019-07-13 00:26:07 +08:00
SataQiu
a49f62f786 kubeadm: support fetching configuration from the original cluster for 'upgrade diff' 2019-07-12 23:51:37 +08:00
Kubernetes Prow Robot
b0d08f6a47
Merge pull request #78447 from yastij/scheduler-eventf 
Migrate scheduler to use v1beta1 Event API
 2019-07-12 06:31:06 -07:00
Yassine TIJANI
08522f8e5a move scheduler to use v1beta1.events 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-07-12 11:39:01 +02:00
Kubernetes Prow Robot
eb9cec5cad
Merge pull request #80060 from yastij/improve-error-msg 
improve error messages for verifydependency
 2019-07-11 20:17:20 -07:00
Davanum Srinivas
3b2a61dead Remove deprecated --containerized flag in kubelet 
This flag was deprecated in 1.14
 2019-07-11 17:47:21 -04:00
Yassine TIJANI
32a139e442 improve error messages for verifydependency 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-07-11 23:47:10 +02:00
Kubernetes Prow Robot
91b26341f4
Merge pull request #78742 from smarterclayton/client_gc 
The garbage collector and quota counter should use the metadata client and protobuf to access resources
 2019-07-11 14:33:33 -07:00
Clayton Coleman
d631f9b7e9
Use metadata informers instead of dynamic informers in controller manager 
All controllers in controller-manager that deal with objects generically
work with those objects without needing the full object. Update the GC
and quota controller to use PartialObjectMetadata input objects which
is faster and more efficient.
 2019-07-11 12:18:52 -04:00
Clayton Coleman
637cc83341
Switch the garbage collector to use metadata client and protobuf 2019-07-11 12:18:51 -04:00
Jun Gong
5828223e75 Rename PluginOption to Option 2019-07-11 17:39:48 +08:00
Tarun Pothulapati
0833e4f6bf removed make-symlink flag and corresponding code in hyperkube 
Signed-off-by: Tarun Pothulapati <tarunpothulapati@outlook.com>
 2019-07-11 12:42:46 +05:30
Kubernetes Prow Robot
f2093cc383
Merge pull request #79366 from yastij/dep-path-update-yaml 
reference paths to bump dependencies
 2019-07-10 18:49:06 -07:00
Kubernetes Prow Robot
ca6cc69bd4
Merge pull request #78744 from smarterclayton/client_ns 
Update namespace controller to use the metadata client
 2019-07-10 18:48:53 -07:00
Kubernetes Prow Robot
e3a125a64e
Merge pull request #79979 from SataQiu/cleanup-kubeadm-20190710 
kubeadm: cleanup code about cobra
 2019-07-10 13:58:40 -07:00
Clayton Coleman
50fd47258d
Switch the namespace controller to use the metadata client 
The metadata client uses protobuf and returns only a subset of object
data (the metadata) which allows operations that act only on objects
generically to work much faster. Use the metadata client in the
namespace controller to reduce the amount of work the namespace controller
has to do in large namespaces.
 2019-07-10 14:31:18 -04:00
Yassine TIJANI
4bed9b7046 reference paths to update to bump dependencies 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-07-10 20:11:40 +02:00
SataQiu
b837f8d96f kubeadm: cleanup the code about cobra 2019-07-10 18:45:28 +08:00
Kubernetes Prow Robot
a29243775a
Merge pull request #79889 from mborsz/kubemarkclient 
Hollow-node should use separate client for heartbeats
 2019-07-10 02:44:25 -07:00
Maciej Borsz
ed41078f05 Hollow-node should use separate client for heartbeats. 2019-07-10 10:31:04 +02:00
Kubernetes Prow Robot
bd628bc792
Merge pull request #79128 from SataQiu/fix-kubeadm-20190618 
Update caddy vendor dependency to v1.0.1
 2019-07-10 00:12:37 -07:00
Kubernetes Prow Robot
b7faf3ef76
Merge pull request #79880 from SataQiu/clean-kubeadm-20190708 
kubeadm: move klog.InitFlags into app/kubeadm.go
 2019-07-09 10:12:42 -07:00
Kubernetes Prow Robot
4f917a06a9
Merge pull request #77467 from dixudx/csrsigning_controller_warning 
add warning logs for csr controllers
 2019-07-09 10:12:16 -07:00
Kubernetes Prow Robot
b45bfef437
Merge pull request #78473 from xichengliudui/deleteTODO 
delete TODO: remove when we stop supporting the legacy group version
 2019-07-09 06:34:03 -07:00
SataQiu
9657240197 update caddy vendor dependency to v1.0.1 2019-07-09 12:03:25 +08:00
SataQiu
7d5ece2e2c kubeadm: move klog.InitFlags into app/kubeadm.go 2019-07-09 10:42:22 +08:00
Anish Ramasekar
2878270f5b
Fix golint failures in pkg/proxy 
Review feedback - remove alias from imports

fix comments
 2019-07-08 11:48:33 -07:00
Dr. Stefan Schimanski
f82bc712de aggregator: wire OpenAPI correctly into PrepareRun flow 2019-07-08 13:59:00 +02:00
Dr. Stefan Schimanski
7c4329ed45 apiserver: chain delegated PrepareRun 2019-07-08 12:20:20 +02:00
Kubernetes Prow Robot
2aacecb8d7
Merge pull request #79648 from tnqn/kubeadm 
Fix descriptions of kubeadm
 2019-07-04 09:38:38 -07:00
Kubernetes Prow Robot
7340b6341a
Merge pull request #79677 from neolit123/etcd-add-retry 
kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry
 2019-07-04 05:44:28 -07:00
Quan Tian
0d732009cc Fix descriptions of kubeadm 
* Remove the example iptables cmd that potentially kills rules that user
  may be relying on
* Fixed a typo in description of phase bootstrap-token
 2019-07-04 04:43:32 -07:00
Benjamin Elder
13813bc560 cleanup bespoke ipv6 checking in kubeadm 2019-07-03 16:26:08 -07:00
Kubernetes Prow Robot
bbef01a202
Merge pull request #74411 from nolancon/topology-manager-flags-feature-gate 
Add feature gate and kubelet flags for Topology Manager
 2019-07-03 15:16:13 -07:00
Kubernetes Prow Robot
f87cc40b7f
Merge pull request #79728 from yastij/consolidate-coredns-versions 
consolidate coreDNS version to ease dependency bump
 2019-07-03 10:34:45 -07:00
Kubernetes Prow Robot
4c9fab5c40
Merge pull request #79270 from SataQiu/fix-kubeadm-2019062102 
kubeadm: add --control-plane-endpoint flag
 2019-07-03 07:50:33 -07:00
Yassine TIJANI
309ea4e802 consolidate coreDNS version to ease dependency bump 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-07-03 16:02:13 +02:00
Kubernetes Prow Robot
7bf55da3c2
Merge pull request #78789 from johscheuer/remove-experimental-note-for-ipvs 
Remove experimental note for ipvs in kube-proxy arguments
 2019-07-03 04:46:31 -07:00
Kubernetes Prow Robot
5f83eb721b
Merge pull request #79675 from mikedanese/safix 
Create a service account Getter when TokenRequest is enabled
 2019-07-02 19:58:42 -07:00
Kubernetes Prow Robot
090e5233f2
Merge pull request #72974 from sjenning/sysctl-kubeconfig 
kubelet: add allowed sysctl to KubeletConfiguration
 2019-07-02 19:58:29 -07:00
Kubernetes Prow Robot
a33840e023
Merge pull request #73977 from khenidak/ipv6dualstack 
ipv6 dual stack (Phase 1 - ALPHA)
 2019-07-02 18:07:12 -07:00
Lubomir I. Ivanov
25668531f7 kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry 
When adding a new etcd member the etcd cluster can enter a state
of vote, where any new members added at the exact same time will
fail with an error right away.

Implement exponential backoff retry around the MemberAdd call.

This solves a kubeadm problem when concurrently joining
control-plane nodes with stacked etcd members.

From experiment, a few retries with milliseconds apart are
sufficient to achieve the concurrent join of a 3xCP cluster.

Apply the same backoff to MemberRemove in case the concurrent
removal of members fails for similar reasons.
 2019-07-03 03:26:30 +03:00
Mike Danese
bc59028b09 Create a service account Getter when TokenRequest is enabled 
Fixes a nil panic when --service-account-lookup=false and TokenRequest
is enabled.
 2019-07-02 16:56:31 -07:00
Khaled Henidak(Kal)
2b77667718 vendor updates 2019-07-02 22:26:26 +00:00
Seth Jennings
0c7ce5a7d7 kubelet: add allowed sysctl to KubeletConfiguration 2019-07-02 12:19:47 -05:00
Khaled Henidak(Kal)
a51b8ce456 route controller + azure v6 routes 2019-07-02 15:39:06 +00:00
Khaled Henidak(Kal)
584d7103e2 node ipam controller for ipv6 dualstack 2019-07-02 15:39:06 +00:00
Kubernetes Prow Robot
003c4e5155
Merge pull request #77792 from neolit123/kubeadm-psp-upgrade-fix 
kubeadm: prevent PSP blocking of upgrade image prepull
 2019-07-02 04:01:08 -07:00
nolancon
705f97e171 Enable feature gate and kubelet flags for Topology Manager 
Nit: remove capitalization of preferred
Remove line from kubelet and add to separate PR for easier merge

nit: dependency added to separate PR

Add check to ensure strict policy cannot be set without feature gate enabled

Topology Manager runs "none" policy by default.

Added constants for policies and updated documentation.
 2019-07-02 06:50:17 +01:00
Kubernetes Prow Robot
6f73ab2219
Merge pull request #78908 from dcbw/cni-0.7.1-snapshot 
vendor: bump CNI to v0.7.1 snapshot
 2019-07-01 21:33:21 -07:00
Kubernetes Prow Robot
cdddcf9b48
Merge pull request #71170 from atlassian/rand-cleanup2 
Cleanup math/rand package usage
 2019-07-01 21:33:08 -07:00
Kubernetes Prow Robot
da0f51ffed
Merge pull request #78820 from haosdent/fix_typos 
Fix typos.
 2019-07-01 15:09:20 -07:00
Kubernetes Prow Robot
de8fb1c9f8
Merge pull request #79449 from neolit123/kubeadm-docker-validator 
kubeadm: don't use the Docker SDK in util/system/docker_validator*
 2019-07-01 11:07:32 -07:00
Dan Williams
8739ade3fa kubelet: add CNI cache dir option and plumb through to CNI and kubenet 
libcni 0.7.0 caches ADD operation results and allows the runtime to
retrieve these from the cache. In case the user wants a different
cache directory than the defaul, plumb that through like we do
for --cni-bin-dir and --cni-conf-dir.
 2019-07-01 12:14:07 -05:00
Kubernetes Prow Robot
c52df2a637
Merge pull request #79218 from neolit123/kubeadm-1.16-owners 
kubeadm: update OWNERS for 1.16
 2019-07-01 07:23:47 -07:00
Lubomir I. Ivanov
668d69799a kubeadm: prevent PSP blocking of upgrade image prepull 
If the cluster has a PSP that blocks Pods from running as root
the DS that handles upgrade prepull will fail to create its Pods.

Workaround that by adding a PodSecurityContext with RunAsUser=999.
 2019-07-01 16:15:54 +03:00
Kubernetes Prow Robot
7db459a11b
Merge pull request #79498 from SataQiu/fix-kubeadm-20190628 
kubeadm: fix bug for --cri-socket flag processing logic
 2019-07-01 06:09:20 -07:00
Lubomir I. Ivanov
cb56f91cc6 kubeadm: don't use the Docker SDK in util/system/docker_validator* 
Instead of creating a Docker client and fetching an Info object
from the docker enpoint, call the "docker info" command
and populate a local dockerInfo struct from JSON output.

Also
- add unit tests.
- update import boss and bazel.

This change affects "test/e2e_node/e2e_node_suite_test.go"
as it consumes this Docker validator by calling
"system.ValidateSpec()".
 2019-07-01 15:18:37 +03:00
Kubernetes Prow Robot
dd8a000a77
Merge pull request #79493 from odinuge/kube-cmd-double-print 
Remove duplicate error messages from cli commands
 2019-06-28 13:57:41 -07:00
Kubernetes Prow Robot
2501a9083d
Merge pull request #68513 from codenrhoden/mount-refactor 
Refactor util/mount interface in prep for moving out of k/k
 2019-06-28 13:57:28 -07:00
Kubernetes Prow Robot
d020a037b5
Merge pull request #79198 from damemi/kubectl-logs 
Move pkg/kubectl/util/logs to staging
 2019-06-28 12:43:07 -07:00
SataQiu
62c7f4317f kubeadm: fix bug for --cri-socket flag processing logic 2019-06-28 10:42:37 +08:00
Odin Ugedal
7caf51daa4
Remove duplicate error messages from cli commands 
Since we never use the cobras "SilenceErrors" or "SilenceUsage",
a command executed with "cmd.Execute()" will never return an error
without printing it.

The current behavior results in all error messages being printed twice:

Example:

$ kubectl abc
Error: unknown command "abc" for "kubectl"
Run 'kubectl --help' for usage.
unknown command "abc" for "kubectl"

This applies to all cli commands using Cobra. To verify, follow the code
path of the Execute function:

https://github.com/spf13/cobra/blob/c439c4fa0937/command.go#L793
Signed-off-by: Odin Ugedal <odin@ugedal.com>
 2019-06-27 21:55:14 +02:00
Mike Dame
f11e120978 update vendor 2019-06-27 15:18:46 -04:00
Mike Dame
a710a83aa9 Move pkg/util/logs to staging and update ref 2019-06-27 15:15:55 -04:00
Kubernetes Prow Robot
ed9f340add
Merge pull request #79305 from paivagustavo/clean-up-self-set-node-labels 
Clean up self-set node labels
 2019-06-27 11:37:21 -07:00
Gustavo Paiva
096bd5f5d8 block not allowed node labels on kubelet 2019-06-26 19:24:30 -03:00
Lubomir I. Ivanov
f87223fbf8 kubeadm: update OWNERS for 1.16 
- comment out Liz and Chuck until further notice.
Feel free to come back to kubeadm!!
- Add SataQiu as reviewer. Welcome.
- Add ereslibre as approver. Congrats!
 2019-06-27 00:01:05 +03:00
Benjamin Elder
c33ab5c78f fix KubeletConfiguration apiVersion 2019-06-25 23:59:32 -07:00
Kubernetes Prow Robot
41b817b92f
Merge pull request #79038 from yastij/move-jws 
move jws to k8s.io/cluster-bootstrap
 2019-06-25 17:01:29 -07:00
Fabio Bertinatto
00b0ab86af Update scheduler to use volume limits from CSINode 2019-06-25 16:30:54 +02:00
Kubernetes Prow Robot
415323ca9b
Merge pull request #78340 from sftim/20190524_docs_insecure_serving_fix 
Fix typo in kube-scheduler --port option help
 2019-06-25 07:06:39 -07:00
Yassine TIJANI
d3620dfa29 move jws to k8s.io/cluster-bootstrap 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-06-25 13:48:13 +02:00
Jun Gong
107e989454 Use WithOption to implment scheduler register 2019-06-25 17:03:21 +08:00
Kubernetes Prow Robot
ad095324bf
Merge pull request #79309 from draveness/feature/cleanup-CSIPersistentVolume-feature-gates 
feat: cleanup feature gates for CSIPersistentVolume
 2019-06-25 01:15:03 -07:00
Kubernetes Prow Robot
5267a3dc73
Merge pull request #79346 from ncdc/fix-max-port 
Fix insecure max bind port value to 65535 for scheduler & apiserver
 2019-06-24 22:20:34 -07:00
SataQiu
33b980272b kubeadm: add --control-plane-endpoint flag 2019-06-25 11:27:40 +08:00
Kubernetes Prow Robot
896c901684
Merge pull request #78929 from SataQiu/fix-kubeadm-20190612 
[kubeadm] cleanup deps on pkg/version
 2019-06-24 19:28:35 -07:00
draveness
8e9472ba79 feat: cleanup feature gates for CSIPersistentVolume 2019-06-25 09:00:12 +08:00
Kubernetes Prow Robot
6f0f62b2c4
Merge pull request #77211 from dixudx/bootstrap_token_refactor 
Bootstrap token refactor
 2019-06-24 13:36:36 -07:00
Andy Goldstein
9bba2c93ec
Fix max port value to 65535 
Signed-off-by: Andy Goldstein <goldsteina@vmware.com>
 2019-06-24 15:13:27 -04:00
Kubernetes Prow Robot
a5c727e26f
Merge pull request #79327 from SataQiu/cleanup-experimental-1.16 
kubeadm: cleanup ExperimentalControlPlane and ExperimentalUploadCerts
 2019-06-24 11:24:40 -07:00
Kubernetes Prow Robot
ddc4ed0365
Merge pull request #79335 from rosti/kubeadm-nuke-normalizer 
kubeadm: Stop using //pkg/util/normalizer
 2019-06-24 08:02:11 -07:00
Kubernetes Prow Robot
d1f342fb59
Merge pull request #79220 from rosti/fix-MarshalClusterConfigurationToBytes 
kubeadm: Retire MarshalClusterConfigurationToBytes
 2019-06-24 08:01:58 -07:00
Kubernetes Prow Robot
bc8ea43277
Merge pull request #78026 from Klaven/norm_kube_version 
seperation of network call in KubernetesReleaseVersion
 2019-06-24 06:27:57 -07:00
Rostislav M. Georgiev
94c56c81ba kubeadm: Retire MarshalClusterConfigurationToBytes 
MarshalClusterConfigurationToBytes has capabilities to output the component
configs, as separate YAML documents, besides the kubeadm ClusterConfiguration
kind. This is no longer necessary for the following reasons:

- All current use cases of this function require only the ClusterConfiguration.
- It will output component configs only if they are not the default ones. This
  can produce undeterministic output and, thus, cause potential problems.
- There are only hacky ways to dump the ClusterConfiguration only (without the
  component configs).

Hence, we simplify things by replacing the function with direct calls to the
underlaying MarshalToYamlForCodecs. Thus marshalling only ClusterConfiguration,
when needed.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-06-24 15:17:19 +03:00
Rostislav M. Georgiev
615e425d26 kubeadm: Stop using //pkg/util/normalizer 
Stop using //pkg/util/normalizer. Use local versions of LongDesc and Examples,
that do not require any external dependencies (other than the Go standard
library).

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-06-24 14:40:55 +03:00
SataQiu
c794929d1d kubeadm: cleanup ExperimentalControlPlane and ExperimentalUploadCerts 2019-06-24 11:52:57 +08:00
Brad Beam
b646ac4a0e fix: Use correct function to remove etcd member 
Signed-off-by: Brad Beam <brad.beam@talos-systems.com>
 2019-06-23 22:39:34 -05:00
Jun Gong
e9793c8bdb Pass registry parameter to scheduler instead of global singleton 2019-06-24 11:29:47 +08:00
Jun Gong
ea8e1e01c5 Add support for writing out of tree custom scheduler plugins 2019-06-24 10:43:47 +08:00
Kubernetes Prow Robot
d9b5aa2ea9
Merge pull request #79267 from SataQiu/fix-kubeadm-20190621 
kubeadm: cleanup command output
 2019-06-23 09:27:53 -07:00
Cheikhrouhou ines
81800964d8 fix typo heathcheck 2019-06-22 11:37:34 +02:00
Kubernetes Prow Robot
eee3e976d8
Merge pull request #78294 from vllry/kp-remove-resource-container 
Remove deprecated flag --resource-container from kube-proxy
 2019-06-22 00:38:12 -07:00
Marek Counts
eb6eb11748 added comment 2019-06-21 09:42:34 -04:00
Marek Counts
b66c4e8d45 updates based off reviews 2019-06-21 09:42:34 -04:00
Marek Counts
bf376e863c update to remove unused test 
commit will be squashed before merge
 2019-06-21 09:42:33 -04:00
Marek Counts
c8045049f3 updated tests to prevent false positive 
one test also proved it did not call the internet
but this was not fool proof as it did not return a string
and thus could be called with something expecting to fail.
 2019-06-21 09:42:33 -04:00
Marek Counts
aad2b573c6 seperation of network calls when getting version 
updated the network calls to be package local so tests could pass their
own implementation. A public interface was not provided as it would not
be likely this would ever be needed or wanted.
 2019-06-21 09:42:33 -04:00
SataQiu
3b4dbe6e30 kubeadm: cleanup command output 2019-06-21 16:31:55 +08:00
David Ashpole
883f33df6c kunsupported cgroup setup causes kubelet to emit a warning rather than exiting 2019-06-20 16:16:08 -07:00
Di Xu
5056161d4d auto-generated 2019-06-20 17:06:26 +08:00
Di Xu
af9ae4c11a refactor bootstrap token utils 2019-06-20 15:43:44 +08:00
Kubernetes Prow Robot
465e96535d
Merge pull request #78836 from dims/verify-import-aliases-during-typecheck 
Verify import aliases
 2019-06-19 21:11:01 -07:00
Lubomir I. Ivanov
14408bec87 kubeadm: improve the kubeconfig file validation phase 
When a kubeconfig file is read from disk it may lack the
propper mapping between contexts and clusters.

In such a case the kubeconfig phase backend will panic,
without throwing a sensible error.

Add nil checks for a couple of map operations in
validateKubeConfig().
 2019-06-19 15:12:22 +03:00
SataQiu
10ddd7caf0 kubeadm: cleanup deps on pkg/version 2019-06-18 11:01:30 +08:00
Han Kang
54dcf5c9c4 add readyz endpoint for kube-apiserver readiness checks 
add startup sequence duration and readyz endpoint

add rbac bootstrapping policy for readyz

add integration test around grace period and readyz

rename startup sequence duration flag

copy health checks to fields

rename health-check installed boolean, refactor clock injection logic

cleanup clock injection code

remove todo about poststarthook url registration from healthz
 2019-06-17 11:16:13 -07:00
Kubernetes Prow Robot
56066c820d
Merge pull request #79099 from SataQiu/fix-kubeadm-20190617 
kubeadm: cleanup deps on pkg/master/ports
 2019-06-17 09:42:28 -07:00
Kubernetes Prow Robot
d3bbe03b08
Merge pull request #79032 from yastij/move-initsystem 
move initsystem to kubeadm
 2019-06-17 09:42:15 -07:00
SataQiu
7e2e144f1b kubeadm: cleanup deps on pkg/master/ports 2019-06-17 21:27:02 +08:00
Kubernetes Prow Robot
1b6189ea68
Merge pull request #78695 from dims/sort-list-of-component-config-API-objects-in-cli 
Sort kubeadm CLI default params for component config API objects
 2019-06-17 05:54:23 -07:00
Yassine TIJANI
c3904bbce6 move initsystem to kubeadm 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-06-17 12:21:01 +02:00
Vallery Lancey
dc0f14312e Removed deprecated --resource-container flag from kube-proxy. 2019-06-16 08:36:42 -07:00
Davanum Srinivas
9f0050cb44
verify import aliases 
- Added scripts for update and verify
- golang AST code for scanning and fixing imports
- default regex allows it to run on just test/e2e.* file paths
- exclude verify-import-aliases.sh from running in CI jobs

Change-Id: I7f9c76f5525fb9a26ea2be60ea69356362957998
Co-Authored-By: Aaron Crickenberger <spiffxp@google.com>
 2019-06-15 22:31:39 -04:00
Kubernetes Prow Robot
a444f0fa1d
Merge pull request #79019 from rosti/kubeadm-nuke-ValidateDNS1123Subdomain 
kubeadm: Replace ValidateDNS1123Subdomain with IsDNS1123Subdomain
 2019-06-15 19:14:08 -07:00
Kubernetes Prow Robot
b2990bf796
Merge pull request #79025 from rosti/kubeadm-nuke-apiResource 
kubeadm: Don't use "//pkg/apis/core".Resource helper
 2019-06-15 12:56:34 -07:00
Kubernetes Prow Robot
30b1fbc809
Merge pull request #79021 from rosti/kubeadm-nuke-rbachelpers 
kubeadm: Don't use RBAC helpers
 2019-06-15 12:56:08 -07:00
Kubernetes Prow Robot
5e5394ae0d
Merge pull request #78803 from aerostitch/kubeadm_minor_typo 
kubeadm: fix minor typo in a comment
 2019-06-14 19:24:09 -07:00
Kubernetes Prow Robot
54f7e5269c
Merge pull request #78625 from Nordix/issue-1591-kubeadm-service-cidr 
Fix kubeadm service-cidr mapping to service-cluster-ip-rage for kube-controller-manager.
 2019-06-14 11:52:35 -07:00
Travis Rhoden
be7da5052f Refactor pkg/util/mount to be more reusable 
This patch refactors pkg/util/mount to be more usable outside of
Kubernetes. This is done by refactoring mount.Interface to only contain
methods that are not K8s specific. Methods that are not relevant to
basic mount activities but still have OS-specific implementations are
now found in a mount.HostUtils interface.
 2019-06-14 09:35:18 -06:00
Kubernetes Prow Robot
10fb09da4d
Merge pull request #78615 from mysunshine92/fix-kubeadm 
kubeadm:fix typo in controlplane.go
 2019-06-14 07:58:51 -07:00
Rostislav M. Georgiev
7ba7bdaa22 kubeadm: Don't use "//pkg/apis/core".Resource helper 
This helper is used in tests and pulls in unnecessary dependency, which should
not be used if kubeadm is to move to staging.
Replace with direct use of the GroupResource type.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-06-14 16:14:43 +03:00
Kubernetes Prow Robot
8f57a7bb49
Merge pull request #78575 from SataQiu/fix-kubeadm-20190531 
kubeadm: improve kubelet-config-x.y ConfigMap logic
 2019-06-14 05:33:04 -07:00
Kubernetes Prow Robot
fadb63c7eb
Merge pull request #78556 from neolit123/kubeadm-certs-order 
kubeadm: apply deterministic order to certificate phases
 2019-06-14 05:32:24 -07:00
Rostislav M. Georgiev
4ac6d7f501 kubeadm: Replace ValidateDNS1123Subdomain 
ValidateDNS1123Subdomain is a simple wrapper around IsDNS1123Subdomain, however
it's the only reason for us to pull k8s.io/kubernetes/pkg/apis/core/validation
as a dependency.
To avoid unnecessary dependencies, replace the use of ValidateDNS1123Subdomain
with IsDNS1123Subdomain.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-06-14 14:40:14 +03:00
Rostislav M. Georgiev
c394d0fd80 kubeadm: Don't use RBAC helpers 
RBAC construction helpers are part of the Kubernetes internal APIs. As such,
we cannot use them once we move to staging.
Hence, replace their use with manual RBAC rule construction.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-06-14 14:08:31 +03:00
Kubernetes Prow Robot
042b0d7e60
Merge pull request #77540 from SataQiu/fix-apiserver-20190507 
Mark deprecated kubelet-read-only-port
 2019-06-14 00:28:21 -07:00
Kubernetes Prow Robot
c6bc1639c3
Merge pull request #72178 from dims/remove-ovirt-photon-cloudstack-cloud-providers 
Remove ovirt/cloudstack/photon cloud providers
 2019-06-13 19:12:19 -07:00
Kubernetes Prow Robot
4f29960cb2
Merge pull request #78915 from ereslibre/retry-configmap-get-on-unauthorized 
kubeadm: Add ability to retry ConfigMap get if certain errors happen
 2019-06-12 13:00:19 -07:00
Mario Valderrama
dbbe68601f Fix golint errors in pkg/controller/job 2019-06-12 20:09:57 +02:00
Rafael Fernández López
26c9965a97
kubeadm: Add ability to retry ConfigMap get if certain errors happen 
During the control plane joins, sometimes the control plane returns an
expected error when trying to download the `kubeadm-config` ConfigMap.
This is a workaround for this issue until the root cause is completely
identified and fixed.

Ideally, this commit should be reverted in the near future.
 2019-06-12 17:49:27 +02:00
Sandeep Rajan
77466d4a65 [kubeadm] Add the upstream option in CoreDNS configmap 2019-06-11 21:19:43 -04:00
Haosdent Huang
7ce6e71891 Fix typos. 2019-06-11 01:52:14 +08:00
Davanum Srinivas
e0821ca3dd
Remove ovirt/cloudstack/photon cloud providers 
Change-Id: Iddb80bdc2a9d75d444b8a3cfe0b142acb78e9097
 2019-06-10 12:50:53 -04:00
Joseph Herlant
5ca6eaaba3
kubeadm: fix minor typo in a comment 2019-06-07 15:56:33 -07:00
Johannes M. Scheuermann
cd6718e3d2 Remove experimental note for ipvs in kube-proxy arguments 2019-06-07 15:47:44 +02:00
Kubernetes Prow Robot
544e93486d
Merge pull request #77312 from bjhaid/cleanup_kube_controller_manager 
Clean up kube-controller-manager.
 2019-06-05 15:22:13 -07:00
Arvinderpal Wander
7634cc01c5 Fix kubeadm service-cidr mapping to service-cluster-ip-rage for 
kube-controller-manager.

If a service CIDR that overlaps with the cluster CIDR is
specified to kube-controller-manager then kube-controller-
manager will incorrectly allocate node CIDRs that overlap
with the service CIDR. The fix ensure that kubeadm
maps the --service-cidr to --service-cluster-ip-range for use
by kube-controller-manager.

As per docs, --allocate-node-cidrs must be true for
--service-cluster-ip-range to be considered. It does not make
sense for --cluster-cidr to be unspecified but for
--service-cluster-ip-range and --allocate-node-cidrs to be
set, since the purpose of these options is to have the
controller-manager do the per node CIDR allocation. Also
note that --service-cluster-ip-range is passed to the
api-server, so the presence of *just*
--service-cluster-ip-range should not imply that
--allocate-node-cidrs should be true.

Resolves: kubernetes/kubeadm/issues/1591
 2019-06-05 06:53:32 -07:00
Davanum Srinivas
401a30c73a
Sort kubeadm CLI default params for component config API objects 
Change-Id: If4ba57d528f925de9d536b18c0e6d71fc6d63659
 2019-06-04 09:55:45 -04:00
fabriziopandini
dbb82ba99a fix-kubeadm-upgrade-node 2019-06-04 14:57:30 +02:00
Kubernetes Prow Robot
16aeec2485
Merge pull request #78545 from neolit123/kubeadm-revert-coredns-1.3.1 
kubeadm: revert CoreDNS to 1.3.1
 2019-06-03 14:51:29 -07:00
Kubernetes Prow Robot
71fe27eff5
Merge pull request #78586 from rosti/fix-deprecation-msg 
kubeadm: Fix deprecation message for a flag
 2019-06-02 05:12:12 -07:00
Kubernetes Prow Robot
79dc1d4c49
Merge pull request #78585 from neolit123/kubeadm-fix-upgrade-node 
kubeadm: fix conditional control-plane upgrade
 2019-06-02 03:02:14 -07:00
Kubernetes Prow Robot
cc30c0d9a4
Merge pull request #78399 from rikatz/remove-deprecated-conntrack-max 
Remove deprecated flag --conntrack-max from kube-proxy
 2019-06-01 17:26:14 -07:00
Kubernetes Prow Robot
9c807d483e
Merge pull request #78611 from odinuge/kubeadm-err-check 
Fix error handling for loading initCfg in kubeadm
 2019-06-01 15:38:14 -07:00
Ricardo Pchevuzinske Katz
82c42bb6ee Remove deprecated flag --conntrack-max from kube-proxy 2019-06-01 18:10:28 -03:00
Kubernetes Prow Robot
c81ae93159
Merge pull request #78542 from neolit123/kubeadm-mixed-cert-key 
kubeadm: disallow the mixture of --config and --certificate-key
 2019-06-01 09:51:07 -07:00
yameiwang
5cad3f969c kubeadm:fix typo in controlplane.go 2019-06-01 20:26:08 +08:00
Kubernetes Prow Robot
6b6bdc760a
Merge pull request #78504 from dashpole/deprecate_cadvisor_json 
Add kubelet flag to disable cadvisor json apis, and mark it deprecrated
 2019-06-01 04:44:55 -07:00
Kubernetes Prow Robot
9139adea23
Merge pull request #78344 from aramase/remove-cleanup-iptables 
Remove deprecated flag --cleanup-iptables from kube-proxy
 2019-05-31 23:22:46 -07:00
Kubernetes Prow Robot
5d1409a4bf
Merge pull request #78189 from ksubrmnn/initsystem 
Use Service Control Manager as the Windows Initsystem
 2019-05-31 22:02:34 -07:00
Kubernetes Prow Robot
227f34b33a
Merge pull request #77817 from smarterclayton/apicrd 
CRDs should support watch of protobuf PartialObjectMetadata
 2019-05-31 20:44:35 -07:00
Odin Ugedal
2fc9b3a670
Fix error handling for loading initCfg in kubeadm 
This fixes possible problems when kubeadm upgrade can't load the
InitConfig properly. Some new code introduced in
https://github.com/kubernetes/kubernetes/pull/75499 is placed between
the loading of the config and the error handling, hiding possible
errors.

This error cannot be ignored (as is the case now), since the cfg ptr.
returned from the configutil function will be nil in the case of an
error.

Signed-off-by: Odin Ugedal <odin@ugedal.com>
 2019-06-01 02:08:46 +02:00
Kubernetes Prow Robot
8305deb451
Merge pull request #77286 from bjhaid/cloud_controller_manager_cleanup 
Clean up cloud-controller-manager.
 2019-05-31 12:22:26 -07:00
Anish Ramasekar
aa07730275
Remove deprecated flag --cleanup-iptables from kube-proxy 
Remove deprecated flag --cleanup-iptables from kube-proxy

update license

update license
 2019-05-31 11:09:37 -07:00
Rostislav M. Georgiev
a402610d37 kubeadm: Fix deprecation message for a flag 
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-05-31 17:07:21 +03:00
Lubomir I. Ivanov
aede153310 kubeadm: fix conditional control-plane upgrade 
When a node is not a control-plane properly skip "control-plane"
upgrade phase.
 2019-05-31 16:25:46 +03:00
SataQiu
d79a5181f8 kubeadm: improve kubelet-config-x.y ConfigMap logic 2019-05-31 18:26:39 +08:00
Kubernetes Prow Robot
f49fe2a750
Merge pull request #72787 from dashpole/cadvisor_prefix_whitelist 
Only collect metrics for cgroups required by the summary API
 2019-05-31 00:28:26 -07:00
Lubomir I. Ivanov
2413713c4e kubeadm: apply deterministic order on certificate phases 
The existing logic already creates a proper "tree"
where a CA is always generated before the certs that are signed
by this CA, however the tree is not deterministic.

Always use the default list of certs when generating the
"kubeadm init phase certs" phases. Add a unit test that
makes sure that CA always precede signed certs in the default
lists.

This solves the problem where the help screen for "kubeadm
init" cert sub-phases can have a random order.
 2019-05-31 04:04:13 +03:00
Clayton Coleman
26a6cdda86
Set integration tests to use distinct namespaces 
TestWatchBasedManager was racing with the default namespace creation.
To fix that flake and to ensure integration tests using a shared etcd
don't accidentally overlap in the future, move the three main tests
using the default namespace to separate namespaces, and have
TestWatchBasedManager create that namespace before it runs.

Make StartTestServer wait for default namespace creation, which will
reduce other flakes until future changes completely remove use of default
namespace.

From a failed integration run:

	watch_manager_test.go:66: namespaces "default" not found
	watch_manager_test.go:66: namespaces "default" not found
	watch_manager_test.go:66: namespaces "default" not found
 2019-05-30 19:11:50 -04:00
Lubomir I. Ivanov
a49bc480b9 kubeadm: revert CoreDNS to 1.3.1 2019-05-30 23:31:54 +03:00
Lubomir I. Ivanov
d6f1dff1ce kubeadm: disallow the mixture of --config and --certificate-key 
Similar to --token, do not allow the mixture of --config and
--certificate-key.

If the user has fed a config, it is expected that the certificate
key should also be provided in the config and not from
the command line.
 2019-05-30 22:35:41 +03:00
David Ashpole
785d40923a add kubelet flag to disable cadvisor json apis, and mark it deprecrated 2019-05-30 10:39:45 -07:00
Kubernetes Prow Robot
44a3bf4755
Merge pull request #78452 from fabriziopandini/rename-ha-flags 
kubeadm: rename-ha-flags
 2019-05-30 02:25:13 -07:00
Kubernetes Prow Robot
de81752082
Merge pull request #78408 from fabriziopandini/upgrade-node-ha 
kubeadm: upgrade node for HA
 2019-05-30 00:32:58 -07:00
Kubernetes Prow Robot
4eab931f15
Merge pull request #78403 from rosti/v1beta2-doc-updates 
kubeadm: Update v1beta2 doc.go
 2019-05-30 00:32:20 -07:00
Kubernetes Prow Robot
05df640f33
Merge pull request #77994 from gnufied/csi-resize-migration 
Handle CSI volume resize migration.
 2019-05-29 21:28:43 -07:00
ksubrmnn
4d7ee1cd5a Use system calls to manage Windows services 2019-05-29 17:33:47 -07:00
fabriziopandini
67d76c46c7 autogenerated 2019-05-29 22:06:52 +02:00
fabriziopandini
c2faa3bfd1 kubeadm upgrade node 2019-05-29 22:06:42 +02:00
Kubernetes Prow Robot
38468e4338
Merge pull request #70536 from mysunshine92/golint-hostpath 
fix golint for pkg/volume/host_path
 2019-05-29 11:25:46 -07:00
Kubernetes Prow Robot
fa7c0e870f
Merge pull request #78313 from tallclair/mux 
Avoid the default server mux
 2019-05-29 07:58:59 -07:00
Kubernetes Prow Robot
6a0db7b189
Merge pull request #77739 from rosti/initclustersplit-v1beta2 
kubeadm: Remove ClusterConfiguration from InitConfiguration in v1beta2
 2019-05-29 07:58:28 -07:00
Kubernetes Prow Robot
0552186f37
Merge pull request #78297 from zanetworker/organize-kubeproxy-flags 
Organize kube-proxy flags
 2019-05-29 05:33:29 -07:00
Kubernetes Prow Robot
6e78282a82
Merge pull request #77611 from rohitsardesai83/deprecate-logs-handler-apiserver 
Fix 77515 Deprecate the option to enable the log handler for apiserver
 2019-05-29 05:32:47 -07:00
Kubernetes Prow Robot
ddb0b017f8
Merge pull request #78081 from yagonobre/reset-preflight 
Graduate kubeadm reset phases
 2019-05-29 03:10:24 -07:00
aaa
a55b9301da delete TODO: remove when we stop supporting the legacy group version 2019-05-29 06:04:16 -04:00
Rostislav M. Georgiev
5671ea9cf1 kubeadm: Remove ClusterConfiguration from InitConfiguration in v1beta2 
Ever since v1alpha3, InitConfiguration is containing ClusterConfiguration
embedded in it. This was done to mimic the internal InitConfiguration, which in
turn is used throughout the kubeadm code base as if it is the old
MasterConfiguration of v1alpha2.

This, however, is confusing to users who vendor in kubeadm as the embedded
ClusterConfiguration inside InitConfiguration is not marshalled to YAML.
For this to happen, special care must be taken for the ClusterConfiguration
field to marshalled separately.

Thus, to make things smooth for users and to reduce third party exposure to
technical debt, this change removes ClusterConfiguration embedding from
InitConfiguration.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-05-29 12:13:37 +03:00
Kubernetes Prow Robot
6118b8aa73
Merge pull request #77848 from yagonobre/certificate-key-command 
Add kubeadm alpha certs certificate-key command
 2019-05-28 22:20:48 -07:00
Yago Nobre
960083130b
kubeadm: graduate reset phases 2019-05-28 23:32:04 -03:00
fabriziopandini
f3b5cb2145 rename-ha-flags 2019-05-28 22:16:03 +02:00
Kubernetes Prow Robot
2f7eaa1ee3
Merge pull request #78053 from ksubrmnn/crisocket 
Implement CRI detection for Windows
 2019-05-28 07:17:58 -07:00
Rohit Sardesai
a50273f9d4 Fix 77515 Deprecate the option to enable the log handler for apiserver 2019-05-28 15:20:40 +05:30
obitech
2426ff8ae0 Change to EnableHTTPS in kube-apiserver options 2019-05-27 22:03:21 +02:00
Rostislav M. Georgiev
de1bd55e96 kubeadm: Update v1beta2 doc.go 
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-05-27 18:02:17 +03:00
Yago Nobre
0a005e3dac
Add kubeadm certificate-key command 2019-05-27 11:29:31 -03:00
yameiwang
7e1badd7fd fix typo worklow->workflow 2019-05-25 07:05:37 +08:00
Tim Bannister
82fd3e2fa7
Fix typo 
Write "HTTP" (and not "HTTPS") to describe plain HTTP.
 2019-05-24 23:55:55 +01:00
Zaalouk, Adel
27f8d363a9 Organize kube-proxy flags 2019-05-24 11:39:01 +02:00
Morten Torkildsen
f1883c9e8c Support scale subresource for PDBs (#76294) 
* Support scale subresource for PDBs

* Check group in finder functions

* Small fixes and more tests
 2019-05-23 22:24:17 -07:00
Kubernetes Prow Robot
73b8011d47
Merge pull request #75499 from marccarre/issues/74246-more-decl-kubeadm-cli-args 
Add ability to configure kubeadm's ignored pre-flight errors via InitConfiguration and JoinConfiguration
 2019-05-23 20:58:30 -07:00
stewart-yu
da375fb154 get rid of the redundancy field in kube-proxy option 2019-05-24 09:37:06 +08:00
Mikhail Mazurskiy
4ce1fb7d40
Cleanup math/rand package usage 2019-05-24 09:25:04 +10:00
ksubrmnn
310bafe658 Implement CRI detection for Windows 2019-05-23 09:54:53 -07:00
Kubernetes Prow Robot
1fba88884b
Merge pull request #78016 from gaorong/fix-closeAllConns 
kubelet: fix fail to close kubelet->API connections on heartbeat failure
 2019-05-23 08:38:28 -07:00
Rong Gao
1d07d30305 fix: failed to close kubelet->API connections on heartbeat failure 2019-05-23 22:18:14 +08:00
Marc Carré
7e2b4aa562
kubeadm errors now ignorable via v1beta2 config files (generated diff) 
This commit contains only changes generated by the build process.
Nothing here was manually changed.

Changes made to:
```
cmd/kubeadm/app/apis/kubeadm/validation/BUILD
cmd/kubeadm/app/cmd/BUILD
```
were generated by running:
````
./hack/update-bazel.sh
```
 2019-05-23 16:22:18 +09:00
Marc Carré
e706d27262
kubeadm errors now ignorable via v1beta2 config files 
Specifically, IgnorePreflightErrors in {Init,Join}Configuration's NodeRegistrationOptions can be used to achieve this.
See also: https://docs.google.com/document/d/1XnP67oO1i9VcDIpw42IzptnJsc5OQM-HTf8cVcjCR2w/edit
 2019-05-23 16:22:17 +09:00
Kubernetes Prow Robot
c6338cbb58
Merge pull request #76720 from xichengliudui/constant-block 
Using const() defines constants together
 2019-05-22 15:14:25 -07:00
Kubernetes Prow Robot
4f33b5f421
Merge pull request #77820 from dims/charrywanganthony-pr-71835-delete-kubelet-security-controls 
Remove deprecated Kubelet security controls
 2019-05-22 13:52:25 -07:00
Davanum Srinivas
c7dcb61e80
Same as defaulting allow-privileged to true 
Change-Id: Ib0337bd4eabf9c0cc0d3b0c5a865ed0c468ba370
 2019-05-21 08:51:16 -04:00
Kubernetes Prow Robot
81a61ae0e3
Merge pull request #77863 from fabriziopandini/certs-expiration 
Kubeadm: Add check certificate expiration command
 2019-05-19 12:47:10 -07:00
Kubernetes Prow Robot
c854f72dcb
Merge pull request #77507 from cuericlee/patch-1 
unexpected deleting of contents of mount points due to symbolic link …
 2019-05-19 09:23:10 -07:00
Kubernetes Prow Robot
0f31cc93b6
Merge pull request #74440 from yliaog/dynamic 
Switched to use dynamic shared informer for Garbage Collector.
 2019-05-18 12:23:12 -07:00
fabriziopandini
e4d87b0804 autogenerated 2019-05-18 16:28:44 +02:00
fabriziopandini
919826531c certs-expiration 2019-05-18 16:28:33 +02:00
Kubernetes Prow Robot
df4f033a4f
Merge pull request #77501 from JieJhih/scheduling/plugin 
add scheduling framework configuration
 2019-05-18 03:39:12 -07:00
Kubernetes Prow Robot
648cb98a44
Merge pull request #78030 from rajansandeep/bump1.5.0 
Bump CoreDNS version to 1.5.0 and update manifest
 2019-05-17 21:52:52 -07:00
Kubernetes Prow Robot
df8e241fb9
Merge pull request #76346 from caesarxuchao/delete-admission-objects 
Sending existing object to the webhook for the DELETE verb
 2019-05-17 20:26:22 -07:00
Yu Liao
05ebe91277 Switched to use dynamic shared informer for Garbage Collector. 2019-05-17 15:41:36 -07:00
JieJhih Jhang
2cd5fc54a1 add scheduling framework configuration 
update bazel build

fix get plugin config method

initialize only needed plugins

fix unit test

fix import duplicate package

update bazel

add docstrings

add weight field to plugin

add plugin to v1alpha1

add plugins at appropriate extension points

remove todo statement

fix import package file path

set plugin json schema

add plugin unit test to option

initial plugin in test integration

initialize only needed plugins

update bazel

rename func

change plugins needed logic

remove v1 alias

change the comment

fix alias shorter

remove blank line

change docstrings

fix map bool to struct

add some docstrings

add unreserve plugin

fix docstrings

move variable inside the for loop

make if else statement cleaner

remove plugin config from reserve plugin unit test

add plugin config and reduce unnecessary options for unit test

update bazel

fix race condition

fix permit plugin integration

change plugins to be pointer

change weight to int32

fix package alias

initial queue sort plugin

rename unreserve plugin

redesign plugin struct

update docstrings

check queue sort plugin amount

fix error message

fix condition

change plugin struct

add disabled plugin for unit test

fix docstrings

handle nil plugin set
 2019-05-18 06:30:28 +08:00
Kubernetes Prow Robot
e4cfb55b71
Merge pull request #77989 from ksubrmnn/kubeadm 
Use os package for Windows IsPrivilegedUserCheck
 2019-05-17 10:12:34 -07:00
Jordan Liggitt
0b88095a17 Switch admission webhook test to work with shared etcd 2019-05-17 09:54:14 -07:00
Hemant Kumar
405d33eae4 Add code to handle in-tree to CSI migration for resizing 2019-05-17 10:57:44 -04:00
Sandeep Rajan
0b28419412 bump coredns version to 1.5.0 and update manifest 2019-05-17 10:03:02 -04:00
Kubernetes Prow Robot
628e0d8333
Merge pull request #77946 from Klaven/deprecate_from 
Deprecation of the kubeadm config upload command
 2019-05-17 00:26:44 -07:00
Kubernetes Prow Robot
a6b546eb72
Merge pull request #77936 from liggitt/shorten-cert-wait 
Interrupt WaitForCertificate if desired kubelet serving cert changes
 2019-05-17 00:26:19 -07:00
Kubernetes Prow Robot
afd928b8bc
Merge pull request #77931 from fabriziopandini/etcd-supportedversion-1.16 
Kubeadm: Add etcd supported version for v1.16
 2019-05-16 20:40:16 -07:00
Tim Allclair
dd5c8e14fd Avoid the default server mux 2019-05-16 17:31:20 -07:00
Kubernetes Prow Robot
44de3f928a
Merge pull request #74009 from AdamDang/patch-27 
Fix the klog.Errorf message
 2019-05-16 16:26:27 -07:00
ksubrmnn
aa8efc5b94 Check User SIDs via os package 2019-05-16 12:24:26 -07:00
Jordan Liggitt
739a75fc32 Interrupt WaitForCertificate if desired kubelet serving cert changes 2019-05-16 15:14:47 -04:00
chaowang
9ba0d47465
Remove deprecated Kubelet security controls 
Change-Id: I9f770e6780b60e881092690f6f177d726f474fe3
 2019-05-16 13:33:52 -04:00
Kubernetes Prow Robot
d823fa23c6
Merge pull request #77847 from yagonobre/reset-phase 
Add phase runner to kubeadm reset
 2019-05-16 06:05:56 -07:00
Kubernetes Prow Robot
e1770e698e
Merge pull request #77780 from fabriziopandini/refactor-renewal-package 
Kubeadm: Refactor renewal package
 2019-05-16 02:55:46 -07:00
Kubernetes Prow Robot
aba8040669
Merge pull request #77189 from xiaojingchen/fix-golint-failures 
Fix golint failures in cmd/kube-controller-manager
 2019-05-15 22:56:34 -07:00
Marek Counts
c55eaa9b5a Deprecation of the kubeamd config upload command 
This also deprecated all the sub commands.
 2019-05-15 14:03:40 -04:00
fabriziopandini
545e494c5c Add etcd supported version for v1.16 2019-05-15 16:29:47 +02:00
fabriziopandini
1c897874bf autogenerated 2019-05-15 10:26:00 +02:00
fabriziopandini
6db533dd5b refactor certs renewal 2019-05-15 10:25:50 +02:00
SataQiu
4fcfb97179 improve validation message for join command 2019-05-15 12:46:45 +08:00
Eric
56ce743f7b kubeadm: fix a bug related to volume unmount if the kubelet run directory is a symbolic link 
unexpected deleting of contents of mount points due to symbolic link of KubeletRunDirectory
 2019-05-14 20:33:34 +08:00
Yago Nobre
97e22fb9b1
Update bazel 2019-05-14 03:06:50 -03:00
Yago Nobre
d92b0e2147
Add phase runner to kubeadm reset 2019-05-14 01:21:36 -03:00
stgleb
79b46f47f6 Fix typo in IPVS acronym 2019-05-13 20:33:37 +03:00
Kubernetes Prow Robot
f5a1ceb1fc
Merge pull request #77768 from yagonobre/upload-certs 
Improve error message when user provide invalid certificate key
 2019-05-12 19:24:08 -07:00
Kubernetes Prow Robot
ce6d65fbb9
Merge pull request #77400 from Klaven/arg_validation 
updated phase runner to enable custom arg validation
 2019-05-12 16:48:08 -07:00
Yago Nobre
54a308bdd7
Improve error message when user provide invalid certificate key 2019-05-12 18:26:11 -03:00
Kubernetes Prow Robot
b03367bd88
Merge pull request #77188 from SataQiu/fix-kubeadm-20190428 
Make KubernetesDir a true constant
 2019-05-11 08:02:12 -07:00
Kubernetes Prow Robot
aabd8f9beb
Merge pull request #77313 from bjhaid/cleanup_kube_proxy 
Clean up kube-proxy.
 2019-05-10 21:30:12 -07:00
Kubernetes Prow Robot
9e87f8d620
Merge pull request #77696 from bradhoekstra/fix-lint 
Fix some lint errors in pkg/proxy
 2019-05-10 17:56:37 -07:00
Kubernetes Prow Robot
9986f38ef3
Merge pull request #77631 from SataQiu/fix-issue-1559 
[kubeadm] skip cri detection for kubeadm token create
 2019-05-10 16:32:24 -07:00
David Ashpole
f8dff6bd5b only collect metrics for cgroups required by the summary API 2019-05-10 12:12:41 -07:00
Kubernetes Prow Robot
21bec91e89
Merge pull request #76659 from S-Chan/stephen_chan--lazy_initialize_signal_handling 
Lazily initialize signal handling for hyperkube apiserver and kubelet
 2019-05-10 08:35:59 -07:00
Marek Counts
2b69699f67 updated phase runner to enable custom arg validation 
currently sub phases cannot have custom arg validation and container commands can have args.
This removes phase container commands from taking args and enables custom args on the leaf phases
 2019-05-10 09:19:47 -04:00
Kubernetes Prow Robot
124926fba2
Merge pull request #77306 from bjhaid/cleanup_controller_manager 
Clean up controller-manager.
 2019-05-09 21:43:57 -07:00
Stephen Chan
7cbe2d6c5f move signal handling for hyperkube apiserver and kubelet commands out of hyperkube main command 2019-05-09 21:27:44 -07:00
Àbéjídé Àyodélé
a591a838e5 Clean up controller-manager. 
These are based on recommendation from
[staticcheck](http://staticcheck.io/).
 2019-05-10 00:43:46 +00:00
Brad Hoekstra
62e58a66aa Fix some lint errors in pkg/proxy 2019-05-09 16:48:29 -04:00
SataQiu
e28c7b1b59 skip cri detection for kubeadm token create 2019-05-09 23:44:17 +08:00
Àbéjídé Àyodélé
109f1c479e Clean up kube-proxy. 
These are based on recommendation from
[staticcheck](http://staticcheck.io/).

- Removes dead type/function along with the import that the function
introduced.
- Removes unused struct fields.
- Removes select nested in a tight for loop, the select does not have a
default, so it will be blocking.
 2019-05-09 14:39:03 +00:00
xiaojingchen
2b19a4db9e fix cmd/kube-controller-manager's golint failures 2019-05-09 17:56:08 +08:00
SataQiu
d46bd0dc7a make KubernetesDir a true constant 2019-05-09 17:16:59 +08:00
Kubernetes Prow Robot
eda5a296a8
Merge pull request #77513 from ereslibre/upload-cluster-configuration-after-upgrade 
kubeadm: upload the `ClusterConfiguration` during the upgrade
 2019-05-08 17:15:13 -07:00
Kubernetes Prow Robot
09c4e10333
Merge pull request #74021 from andrewsykim/move-features-component-base 
Move feature gate package from k8s.io/apiserver to k8s.io/component-base
 2019-05-08 13:06:34 -07:00
Daniel (Shijun) Qian
5268f69405 fix duplicated imports of k8s code (#77484) 
* fix duplicated imports of api/core/v1

* fix duplicated imports of client-go/kubernetes

* fix duplicated imports of rest code

* change import name to more reasonable
 2019-05-08 10:12:47 -07:00
Andrew Kim
c919139245 update import of generic featuregate code from k8s.io/apiserver/pkg/util/feature -> k8s.io/component-base/featuregate 2019-05-08 10:01:50 -04:00
Kubernetes Prow Robot
0ff81d04dc
Merge pull request #76953 from Rand01ph/fix#69896 
fix Remove hyperkube short aliases
 2019-05-08 04:54:34 -07:00
SataQiu
5724d14d54 mark deprecated kubelet-read-only-port 2019-05-07 19:03:12 +08:00
Kubernetes Prow Robot
5b34d95ec5
Merge pull request #77381 from JieJhih/network/golint 
Fix golint
 2019-05-07 00:23:54 -07:00
Kubernetes Prow Robot
a8787dac30
Merge pull request #76927 from mrkm4ntr/unnecessary-goroutine 
Do not generate unnecessary goroutines
 2019-05-06 21:31:53 -07:00
Di Xu
c6a992a01d add warning log for csr controllers 2019-05-07 11:51:36 +08:00
Kubernetes Prow Robot
f9c9ecdbb6
Merge pull request #77180 from fabriziopandini/renew-embedded-certs 
kubeadm: renew certificates embedded in kubeconfig files
 2019-05-06 15:30:06 -07:00
Rafael Fernández López
b6f4bb349b
kubeadm: upload the ClusterConfiguration during the upgrade 
During the upgrade process, `kubeadm` will take the current
`ClusterConfiguration`, update the `KubernetesVersion` to the latest
version, and call to `UploadConfiguration`.

This change makes sure that when the mutation happens, not only the
`ClusterStatus` is mutated, but the `ClusterConfiguration` object
inside the `kubeadm-config` ConfigMap as well; it will contain the
new `KubernetesVersion`.
 2019-05-06 18:21:55 +02:00
fabriziopandini
3076644f0b autogenerated 2019-05-06 16:48:35 +02:00
fabriziopandini
cf7f8acae2 renew-embedded-certs 2019-05-06 16:48:24 +02:00
Àbéjídé Àyodélé
9327c4bbbc Clean up kube-controller-manager. 
These are based on recommendation from
[staticcheck](http://staticcheck.io/).
 2019-05-06 14:41:33 +00:00
Kubernetes Prow Robot
0a83ed51b4
Merge pull request #77345 from rosti/omitempty-v1beta2 
kubeadm: Fix omitempty in v1beta2
 2019-05-04 12:13:37 -07:00
Kubernetes Prow Robot
ef550e6989
Merge pull request #75434 from cofyc/fix56098 
Refactor PV scheduling library into a separate package
 2019-05-03 22:17:38 -07:00
Kubernetes Prow Robot
e1fa195451
Merge pull request #76627 from timoreimann/handle-missing-gce-lb-flag-gracefully 
Suppress registering GCE LB provider flag if missing on CommandLine.
 2019-05-03 21:01:39 -07:00
Kubernetes Prow Robot
f29138c372
Merge pull request #77012 from rosti/certkey-v1beta2 
kubeadm: Add certificateKey field to v1beta2 config
 2019-05-03 15:11:39 -07:00
Kubernetes Prow Robot
7defecbc2c
Merge pull request #76327 from neolit123/kubeproxy-node-selector 
kubeadm: disable the kube-proxy DaemonSet on non-Linux nodes
 2019-05-03 04:08:18 -07:00
Rostislav M. Georgiev
81e3adc53b kubeadm: Fix omitempty in v1beta2 
There are a couple of problems with regards to the `omitempty` in v1beta1:

- It is not applied to certain fields. This makes emitting YAML configuration
  files in v1beta1 config format verbose by both kubeadm and third party Go
  lang tools. Certain fields, that were never given an explicit value would
  show up in the marshalled YAML document. This can cause confusion and even
  misconfiguration.

- It can be used in inappropriate places. In this case it's used for fields,
  that need to be always serialized. The only one such field at the moment is
  `NodeRegistrationOptions.Taints`. If the `Taints` field is nil, then it's
  defaulted to a slice containing a single control plane node taint. If it's
  an empty slice, no taints are applied, thus, the cluster behaves differently.
  With that in mind, a Go program, that uses v1beta1 with `omitempty` on the
  `Taints` field has no way to specify an explicit empty slice of taints, as
  this would get lost after marshalling to YAML.

To fix these issues the following is done in this change:

- A whole bunch of additional omitemptys are placed at many fields in v1beta2.
- `omitempty` is removed from `NodeRegistrationOptions.Taints`
- A test, that verifies the ability to specify empty slice value for `Taints`
  is included.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-05-03 12:59:41 +03:00
Kubernetes Prow Robot
005eb53ea1
Merge pull request #77278 from liggitt/enable-etcd-paging 
Enable API resource paging by default, by feature gate in sample-apiserver
 2019-05-02 23:36:16 -07:00
JieJhih Jhang
21e4f0039e fix golint 2019-05-03 14:31:51 +08:00
Rostislav M. Georgiev
1826e445fe kubeadm: Add certificateKey field to v1beta2 config 
This change introduces config fields to the v1beta2 format, that allow
certificate key to be specified in the config file. This certificate key is a
hex encoded AES key, that is used to encrypt certificates and keys, needed for
secondary control plane nodes to join. The same key is used for the decryption
during control plane join.
It is important to note, that this key is never uploaded to the cluster. It can
only be specified on either command line or the config file.
The new fields can be used like so:

---
apiVersion: kubeadm.k8s.io/v1beta2
kind: InitConfiguration
certificateKey: "yourSecretHere"
---
apiVersion: kubeadm.k8s.io/v1beta2
kind: JoinConfiguration
controlPlane:
  certificateKey: "yourSecretHere"
---

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-05-02 11:47:07 +03:00
Dmitry Rozhkov
a6d7920f44 kubeadm: do unit testing of actual public function 
Even though CreateServiceAccountKeyAndPublicKeyFiles() function is
an interface function it's not unittested. Instead it wraps a couple
of internal functions which are used only inside CreateServiceAccountKeyAndPublicKeyFiles()
and those internal functions are tested.

Rewrite the function to do only what it's intended to do and add unit
tests for it.
 2019-05-02 10:23:51 +03:00
Yecheng Fu
214ea1a9d3 Update scheduler to use new volume scheduling library 
To fix scheme issue, use k8s.io/client-go/kubernetes/scheme instead of
legacyscheme.
 2019-05-02 14:57:47 +08:00
Kubernetes Prow Robot
6d691c9985
Merge pull request #77307 from bjhaid/cleanup_genswaggertypedocs 
Clean up genswaggertypedocs.
 2019-05-01 23:29:08 -07:00
Àbéjídé Àyodélé
a2b0cb62a1 Clean up kubeadm. 
These are based on recommendation from
[staticcheck](http://staticcheck.io/).

- Remove unused struct fields
- Remove unused function
- Remove unused variables
- Remove unused constants.
- Miscellaneous cleanups
 2019-05-01 22:16:06 +00:00
Àbéjídé Àyodélé
fd5113aec1 Clean up genswaggertypedocs. 
These are based on recommendation from
[staticcheck](http://staticcheck.io/).
 2019-05-01 16:32:05 +00:00
Àbéjídé Àyodélé
664414cec0 Clean up cloud-controller-manager. 
These are based on recommendation from
[staticcheck](http://staticcheck.io/).
 2019-04-30 23:40:15 +00:00
Jordan Liggitt
90cd672ab6 Enable paging by default in etcd options, by feature flag in sample-apiserver 2019-04-30 17:49:34 -04:00
Àbéjídé Àyodélé
bd1d1f062a Remove unused var. 
The variable is unused as verified with:

https://cs.k8s.io/?q=skip&i=nope&files=cmd%2Fclicheck%2F.*&repos=kubernetes/kubernetes
 2019-04-30 18:01:33 +00:00
Kubernetes Prow Robot
a6558c6f10
Merge pull request #77257 from stgleb/remove_todo 
Remove todo and change comment
 2019-04-30 05:47:37 -07:00
stgleb
758d89c256 Remove todo and change comment 2019-04-30 13:34:25 +03:00
Kubernetes Prow Robot
cf22c56c7f
Merge pull request #75848 from bsalamat/framework_update 
Implement/update interfaces and skeleton for the scheduling framework
 2019-04-30 00:03:36 -07:00
Kubernetes Prow Robot
b9fbed1324
Merge pull request #76875 from JieJhih/proxy/file 
handle file close error
 2019-04-29 22:49:35 -07:00
Bobby (Babak) Salamat
83828bcb2d autogenerated files 2019-04-29 16:40:56 -07:00
Bobby (Babak) Salamat
77824f5135 Change scheduler constructors to receive a plugin registry. 2019-04-29 16:40:56 -07:00
Kubernetes Prow Robot
b5d9aa58e3
Merge pull request #77218 from neolit123/chroot-fix-flakes 
kubeadm: remove flaky unit tests for chroot
 2019-04-29 14:36:26 -07:00
Kubernetes Prow Robot
ad645fbb13
Merge pull request #77191 from stgleb/fix_log 
Change misleading log message
 2019-04-29 14:36:13 -07:00
Kubernetes Prow Robot
35b278447c
Merge pull request #76920 from sempr/master 
MOD: support wildcard DNS for apiserver certSANs
 2019-04-29 14:36:01 -07:00
Lubomir I. Ivanov
96e907348a kubeadm: remove flaky unit tests for chroot 
This unit test contains some hacks are causing the bazel-test
e2e job to flake very often. Instead of maintaining this
unit test remove it completely. It has little benefits
WRT testing app/util/chroot*.go.
 2019-04-29 20:49:09 +03:00
Dmitry Rozhkov
358659ef4d kubeadm: remove duplicated token.parsePEMCerts() 
The function parsePEMCerts() duplicates ParseCertsPEM() from
the "k8s.io/client-go/util/cert" package.
 2019-04-29 14:32:38 +03:00
stgleb
7bf9acd303 Change misleading log message 
Secret instead of configmap for
upload certs phase
 2019-04-29 03:06:11 +03:00
Kubernetes Prow Robot
c88b7cdd58
Merge pull request #76862 from fabriziopandini/fix-upgrade-certs-renew 
kubeadm: fix certs renewal during upgrade
 2019-04-27 12:30:20 -07:00
Subrata Paul
dd9402f451 Fix for kube-proxy to wait for some duration for the node to be defined 
Kube-proxy must atleast wait for some duration for the node to defined so that it can fetch the node IP. This node IP is currently used in ipvs proxier for the node-port services.
 2019-04-28 00:25:18 +05:30
Kubernetes Prow Robot
a0b8d1cbb8
Merge pull request #76732 from JieJhih/proxy/server 
os exit when option is true
 2019-04-27 11:18:21 -07:00
aaa
5cb91e5ae3 Using const() defines constants together 
Signed-off-by: aaa <1693291525@qq.com>

update pull request
Signed-off-by: xichengliudui <1693291525@qq.com>

update pull request
Signed-off-by: xichengliudui <1693291525@qq.com>

update pull request
Signed-off-by: xichengliudui <1693291525@qq.com>

update pull request
Signed-off-by: xichengliudui <1693291525@qq.com>

update pull request
Signed-off-by: xichengliudui <1693291525@qq.com>

update pull request
Signed-off-by: aaa <1693291525@qq.com>

update pull request reset marshal.go
 2019-04-27 11:07:01 -04:00
Kubernetes Prow Robot
829b6d82d3
Merge pull request #77032 from chenzhiwei/cgroup-driver 
use new method to detect cgroup driver
 2019-04-27 05:50:22 -07:00
Kubernetes Prow Robot
41f9f31592
Merge pull request #77153 from MrHohn/cmd-proxy-owner 
Add OWNERS file for cmd/kube-proxy
 2019-04-27 02:00:22 -07:00
Chen Zhiwei
79c436f48f use new method to detect cgroup driver 2019-04-27 08:39:18 +00:00
fabriziopandini
137137cbaa fix-upgrade-certs-renew 2019-04-27 09:58:17 +02:00
JieJhih
94731c5dcd
Merge branch 'master' into proxy/server 2019-04-27 13:48:29 +08:00
Kubernetes Prow Robot
3148eb750d
Merge pull request #76390 from rojkov/ecdsa-v2 
kubeadm: add support for ECDSA keys
 2019-04-26 19:56:23 -07:00
Zihong Zheng
028d4e8fe7 Add OWNERS file for cmd/kube-proxy 2019-04-26 17:22:29 -07:00
Kubernetes Prow Robot
4dc05dd9df
Merge pull request #76320 from JieJhih/config/kube_proxy 
support ipv6 in bind address
 2019-04-26 17:14:22 -07:00
Kubernetes Prow Robot
332d62a94a
Merge pull request #76710 from rosti/introduce-v1beta2 
kubeadm: Introduce v1beta2 config
 2019-04-26 10:38:27 -07:00
Kubernetes Prow Robot
59a86822cb
Merge pull request #77051 from chenzhiwei/bump-docker-version 
Bump minimum docker version to 1.13.1 in kubeadm
 2019-04-26 07:10:29 -07:00
Sempr
81e896e16f MOD: minor comment update for error message 2019-04-26 09:13:11 +08:00
Davanum Srinivas
edf8577654
Remove Rancher Credential Provider from upstream kubernetes 
This is useful only in rancher environment, they are using this in a
very old branch (1.6), they are currently at 2.2.x. There is just no
point in us carrying this code as this is not useful to anyone else
outside of the rancher environment. Let us please remove this code from
upstream.

Change-Id: I5196d0edd79a7809c3a04e6028ddbd01063f224b
 2019-04-25 19:10:01 -04:00
Rostislav M. Georgiev
9e1ac76c1a kubeadm: Introduce v1beta2 config 
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-04-25 17:10:04 +03:00
Chen Zhiwei
d4aaacfc18 Bump minimum docker version to 1.13.1 in kubeadm 2019-04-25 13:57:50 +00:00
fabriziopandini
d41c77f4d4 add-v1.15-etcd-version 2019-04-25 15:19:21 +02:00
Kubernetes Prow Robot
85015461b7
Merge pull request #76578 from SataQiu/fix-kubeadm-issue-1493 
[kubeadm] fix kubelet config bug for kubeadm init phase
 2019-04-25 04:34:46 -07:00
Dmitry Rozhkov
d125f3bddc kubeadm: add support for ECDSA keys 
kubeadm still generates RSA keys when deploying a node, but also
accepts ECDSA keys if they already exist pregenerated in the
directory specified in --cert-dir.
 2019-04-25 12:52:42 +03:00
yameiwang
f130e48deb fix golint errors in pkg/volume/host_path 2019-04-25 06:46:47 +08:00
Kubernetes Prow Robot
ce3ddcd5f6
Merge pull request #76933 from xichengliudui/update-prots 
Replace variables 10250 and 10255 with constants
 2019-04-24 12:25:13 -07:00
Kubernetes Prow Robot
5d37d6b9bf
Merge pull request #77000 from xichengliudui/move-SchemeGroupVersion-variable 
Move the SchemeGroupVersion variable into var()
 2019-04-24 08:40:08 -07:00
SataQiu
5b74f3d8ad fix kubelet config bug for kubeadm init phase 2019-04-24 22:05:10 +08:00
Kubernetes Prow Robot
3ba70b9b5e
Merge pull request #76923 from SataQiu/fix-kubeadm-20190423 
Fix validation message: apiServerEndpoints -> apiServerEndpoint
 2019-04-24 04:04:00 -07:00
JieJhih Jhang
48f431aae5 os exit when option is true 2019-04-24 16:32:11 +08:00
Kubernetes Prow Robot
36ccff1b27
Merge pull request #76821 from ereslibre/kubeadm-config-retry-on-conflict 
kubeadm: improve resiliency when conflicts arise when updating the kubeadm-config configmap
 2019-04-23 15:50:01 -07:00
Rand01ph
99dd9d3c8e fix Remove hyperkube short aliases 2019-04-24 01:12:35 +08:00
Kubernetes Prow Robot
44f254d55e
Merge pull request #76922 from xichengliudui/small-bug 
Fix two minor bugs in kubeadm
 2019-04-23 07:53:35 -07:00
Kubernetes Prow Robot
0f617a3825
Merge pull request #76500 from rojkov/issue-1399 
kubeadm: check all available CA certs against pinned certs
 2019-04-23 07:52:21 -07:00
Rafael Fernández López
bc8bafd825
kubeadm: improve resiliency when conflicts arise when updating the kubeadm-config ConfigMap 
Add the functionality to support `CreateOrMutateConfigMap` and `MutateConfigMap`.

* `CreateOrMutateConfigMap` will try to create a given ConfigMap object; if this ConfigMap
  already exists, a new version of the resource will be retrieved from the server and a
  mutator callback will be called on it. Then, an `Update` of the mutated object will be
  performed. If there's a conflict during this `Update` operation, retry until no conflict
  happens. On every retry the object is refreshed from the server to the latest version.

* `MutateConfigMap` will try to get the latest version of the ConfigMap from the server,
  call the mutator callback and then try to `Update` the mutated object. If there's a
  conflict during this `Update` operation, retry until no conflict happens. On every retry
  the object is refreshed from the server to the latest version.

Add unit tests for `MutateConfigMap`

* One test checks that in case of no conflicts, the update of the
  given ConfigMap happens without any issues.

* Another test mimics 5 consecutive CONFLICT responses when updating
  the given ConfigMap, whereas the sixth try it will work.
 2019-04-23 15:40:37 +02:00
Kubernetes Prow Robot
888b81b638
Merge pull request #76238 from Dieken/30s-ttl-for-coredns 
change default 5s ttl to 30s for coredns to be same with kube-dns/dnsmasq
 2019-04-23 06:20:09 -07:00
Kubernetes Prow Robot
ccf9556ddc
Merge pull request #76848 from Huang-Wei/fix-kubemark-proxy 
Fixed a kubemark panic when hollow-node is morphed as proxy
 2019-04-23 00:46:09 -07:00
Shintaro Murakami
f8e81337da Do not generate unnecessary goroutine 2019-04-23 16:22:14 +09:00
SataQiu
cd8fae5370 fix validation message: apiServerEndpoints -> apiServerEndpoint 2019-04-23 11:47:57 +08:00
Sempr
0c7d8722bf MOD: support Wildcard DNS for apiserver certSANs 2019-04-23 10:47:45 +08:00
Kubernetes Prow Robot
f9a3a22e35
Merge pull request #76769 from rojkov/kubeadm-drop-NewCACertAndKey 
kubeadm: drop duplicate function NewCACertAndKey
 2019-04-22 03:21:43 -07:00
aaa
2dd0ff8c61 Move the SchemeGroupVersion variable into var() 
update pull request
 2019-04-21 14:01:52 -04:00
aaa
220b07f2c8 Replace variables 10250 and 10255 with constants 
update pull request
 2019-04-21 13:01:09 -04:00
JieJhih Jhang
84d29664c4 handle file close error 2019-04-21 16:28:46 +08:00
Kubernetes Prow Robot
c0c1e148e3
Merge pull request #76859 from SataQiu/fix-kubeadm-20190420 
kubeadm: use 'errors.Errorf' instead of 'fmt.Errorf'
 2019-04-20 14:21:44 -07:00
Kubernetes Prow Robot
c262f9c7d9
Merge pull request #76865 from fabriziopandini/fix-certs-renewal 
kubeadm: fix kubeadm alpha cert renew error in case of external CA
 2019-04-20 11:45:45 -07:00
fabriziopandini
dc8331e385 fix-certs-renewal 2019-04-20 17:08:10 +02:00
aaa
a5b88f69e9 Fix two minor bugs in kubeadm 2019-04-20 06:42:36 -04:00
aaa
81c30cbeb0 kubeadm cleanup: master -> control-plane 
update pul request
 2019-04-20 06:15:19 -04:00
SataQiu
62dbd0fa0d use 'errors.Errorf' instead of 'fmt.Errorf' 2019-04-20 17:10:18 +08:00
Wei Huang
51149dad31
Fixed a kubemark panic when hollow-node is morphed as proxy 2019-04-19 14:40:53 -07:00
fabriziopandini
d94c5bac47 kubeadm-cleanup-unused-func 2019-04-19 22:30:44 +02:00
Kubernetes Prow Robot
29163600fe
Merge pull request #76796 from dims/remove-unused-methods 
Remove unused code
 2019-04-19 11:09:55 -07:00
Dmitry Rozhkov
580513ed66 kubeadm: drop duplicate function NewCACertAndKey 
The function certs.NewCACertAndKey() is just a wrapper around
pkiutil.NewCertificateAuthority() which doesn't add any
additional functionality.

Instead use pkiutil.NewCertificateAuthority() directly.
 2019-04-19 19:17:34 +03:00
Davanum Srinivas
7b8c9acc09
remove unused code 
Change-Id: If821920ec8872e326b7d85437ad8d2620807799d
 2019-04-19 08:36:31 -04:00
Vince Prignano
3f552264ca Update klog to 0.3.0 
Signed-off-by: Vince Prignano <vincepri@vmware.com>
 2019-04-18 08:33:06 -07:00
Kubernetes Prow Robot
cee320a809
Merge pull request #76534 from ping035627/k8s-190413 
Expect directory permissions to be 0700
 2019-04-18 06:22:09 -07:00
PingWang
e3dcd3c0a9 Expect directory permissions to be 0700 or less 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>

update the permissions to 0660

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

revert to 0750

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

update 0750 to 0700

Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-04-18 17:31:31 +08:00
JieJhih Jhang
08e320fa4e support ipv6 in bind address 
use split host port func instead trim specific character

add unit test for metrics and healthz bind address

recover import package

refactor set default kube proxy configuration

fix ipv4 condition

fix set default port condition

rewrite call function occasion to reduce error

set ipv6 default value

move get GetBindAddressHostPort to util

use one func to handle deprecated series

update bazel

define address type

return earlier in the error case

refactor set default kube proxy configuration logic

recover import package

preserve some of the original comments

add get default address func

add append port if needed unit test

rewrite unit test for deprecated flags

remove unused codes
 2019-04-17 15:31:42 +08:00
Kubernetes Prow Robot
2490e035d7
Merge pull request #71735 from dcbw/userspace-proxy-ratelimiting 
proxy/userspace: respect minSyncInterval
 2019-04-16 19:14:03 -07:00
Kubernetes Prow Robot
a404238d1c
Merge pull request #76638 from SataQiu/clean-command-kubeadm-20190416 
[kubeadm] clean up command description information for consistency and readability
 2019-04-16 16:20:45 -07:00
Matthew L Daniel
b0814869b0
Output missing cert or key name in DownloadCerts 
Otherwise the user does not know what key `kubeadm` is expecting, which makes troubleshooting harder
 2019-04-16 08:53:48 -07:00
SataQiu
3949ee0f79 clean up command description information for consistency and readability 2019-04-16 22:58:10 +08:00
Kubernetes Prow Robot
82e15dad1c
Merge pull request #76068 from yagonobre/simplify-version-bump 
Simplify kubeadm bump version on TestEtcdSupportedVersion
 2019-04-16 00:51:08 -07:00
Kubernetes Prow Robot
f294037a47
Merge pull request #76430 from mrkm4ntr/redundant-cache-sync-wait 
Remove redundant wait for cache sync
 2019-04-15 22:19:20 -07:00
Timo Reimann
16c150c15d Suppress registering GCE LB provider flag if missing on CommandLine. 
Fixes an issue with GCE-specific parameters breaking out-of-tree cloud
providers that do not host the flag in question.
 2019-04-15 21:06:04 +02:00
Kubernetes Prow Robot
631bf8cbc8
Merge pull request #76497 from SataQiu/fix-golint-20190413 
Fix golint failures of cmd/kube-proxy/app
 2019-04-15 10:26:53 -07:00
Kubernetes Prow Robot
a73730147c
Merge pull request #76564 from tedyu/adm-clean-all 
Cleanup as many dirs as possible in CleanupDirs
 2019-04-15 08:14:05 -07:00
Ted Yu
185f02dd1a Cleanup as many dirs as possible in CleanupDirs 
Signed-off-by: Ted Yu <yute@vmware.com>
 2019-04-15 06:10:33 -07:00
Kubernetes Prow Robot
f2659bcad8
Merge pull request #76572 from mkumatag/fix_flakey 
loop through next entry in stubDomainData if proxyIP == 0
 2019-04-15 05:14:05 -07:00
Dmitry Rozhkov
7f8fc5d189 kubeadm: check all available CA certs against pinned certs 
Currently kubeadm produces an error upon parsing multiple
certificates stored in the cluster-info configmap. Yet it
should check all available certificates in a scenario like
CA key rotation.

Check all available CA certs against pinned certificate hashes.

Fixes https://github.com/kubernetes/kubeadm/issues/1399
 2019-04-15 15:08:06 +03:00
Kubernetes Prow Robot
c09cfb7178
Merge pull request #76566 from tedyu/adm-rollback-err 
Return aggregate error from rollbackOldManifests
 2019-04-15 03:54:23 -07:00
Kubernetes Prow Robot
18533fe84f
Merge pull request #76545 from xichengliudui/update-DNSType-comments 
Update DNSType comments on compute.go
 2019-04-15 00:20:01 -07:00
Manjunath A Kumatagi
23153e3f04 loop through next entry in stubDomainData if proxyIP == 0 2019-04-14 20:14:01 -05:00
Kubernetes Prow Robot
299aa5d7a6
Merge pull request #76505 from rosti/fix-join-cri-detection 
kubeadm: Don't error out on join with --cri-socket override
 2019-04-14 14:30:00 -07:00
Ted Yu
3e0423926a Return aggregate error from rollbackOldManifests 2019-04-14 10:06:07 -07:00
SataQiu
8b7b2349c7 capitalize the first letter of the prompt for consistency 2019-04-14 19:10:51 +08:00
Kubernetes Prow Robot
0a59758c58
Merge pull request #76549 from xichengliudui/ends-with-newline 
Use fmt.printf() to end with a newline
 2019-04-13 15:26:00 -07:00
Shintaro Murakami
28b3cff13c Remove redundant wait for cache sync 2019-04-13 08:12:33 +09:00
SataQiu
cc199c74fc fix golint failures of cmd/kube-proxy/app 2019-04-13 06:20:52 +08:00
Rostislav M. Georgiev
2d4307db9f kubeadm: Don't error out on join with --cri-socket override 
In the case where newControlPlane is true we don't go through
getNodeRegistration() and initcfg.NodeRegistration.CRISocket is empty.
This forces DetectCRISocket() to be called later on, and if there is more than
one CRI installed on the system, it will error out, while asking for the user
to provide an override for the CRI socket. Even if the user provides an
override, the call to DetectCRISocket() can happen too early and thus ignore it
(while still erroring out).
However, if newControlPlane == true, initcfg.NodeRegistration is not used at
all and it's overwritten later on.
Thus it's necessary to supply some default value, that will avoid the call to
DetectCRISocket() and as initcfg.NodeRegistration is discarded, setting
whatever value here is harmless.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-04-12 17:25:11 +03:00
Davanum Srinivas
a6a89421c5
Remove genyaml binary 
Change-Id: I7a1ed6a475f8daedc79fcc86a0ad0ac2056065bd
 2019-04-12 08:31:29 -04:00
Xin Wang
9870e0e7b5 Fix typo cgroupDriver -> cgroup-driver 
Signed-off-by: Xin Wang <wileywang@yunify.com>
 2019-04-12 06:38:53 +08:00
Kubernetes Prow Robot
dca968b078
Merge pull request #76381 from rojkov/wrong-key 
kubeadm: use correct expected key when checking test results
 2019-04-11 05:22:11 -07:00
aaa
85901dd0e0 Update DNSType comments on compute.go 
update pull request

update pull request

update pull request

update pull request
 2019-04-10 11:43:18 -04:00
Dmitry Rozhkov
2d77d9a5a9 kubeadm: use correct expected key when checking test results 
Resulting key needs to be compared with the expected key which
was set for the test case, not just a key.
 2019-04-10 15:09:12 +03:00
aaa
980de9d38b Use fmt.printf() to end with a newline 
update pull request
 2019-04-10 03:27:25 -04:00
Kubernetes Prow Robot
c62cd6e3a4
Merge pull request #76047 from codenrhoden/mv-nsenter-mount 
Move nsenter mounter to pkg/volume/util/nsenter
 2019-04-09 09:55:59 -07:00
Lubomir I. Ivanov
46a3fb4bbd kubeadm: disable the kube-proxy DaemonSet on non-Linux nodes 
Windows worker nodes run kube-proxy as a Windows service.
In the future the kube-proxy DaemonSet might run on Windows nodes
too, but for now a temporary measure is needed to disable it.

Add a linux node selector in the kube-proxy manifest spec.
 2019-04-09 11:48:30 +03:00
Travis Rhoden
2253807760 Fix pkg/volume/util/nsenter linting errors 2019-04-08 10:43:54 -06:00
Travis Rhoden
1c045a09db Move nsenter mounter to pkg/volume/util/nsenter 
As part of moving pkg/util/mount out of tree, the NSEnter implementation
of mount.Interface needs to be relocated out of pkg/util/mount, as it is
K8s specific. This patch relocates that mounter implementation to
pkg/volume/util/nsenter.

Since the NSEnter mounter shares a lot of its logic with the Linux
mounter implementation, many of the previously private methods of the
Linux mounter are now made public to maintain that shared code.

Additionaly, it was observed that *all* mount.Interface implemenations
were using the same common method for IsNotMountPoint, so this patch
removes that method from the mount.Interface definition and just exports
the common implementation instead.
 2019-04-08 09:53:46 -06:00
Kubernetes Prow Robot
e47fc04adc
Merge pull request #76201 from mrueg/flags-fix 
kubeadm: Quote values in envFile
 2019-04-08 05:44:28 -07:00
Manuel Rüger
912794b302 kubeadm: Quote values on envFile 
See documentation: https://github.com/kubernetes/website/blob/master/content/en/docs/setup/independent/kubelet-integration.md#workflow-when-using-kubeadm-init

Signed-off-by: Manuel Rüger <manuel@rueg.eu>
 2019-04-08 09:23:35 +02:00
Yubao Liu
f7f51fab2a change default 5s ttl to 30s for coredns to be same with kube-dns/dnsmasq 2019-04-07 20:41:25 +08:00
Dan Williams
4b07f80d20 proxy: consolidate ServicesHandler/EndpointsHandler into ProxyProvider 
Proxies should be able to cleanly figure out when endpoints have been synced,
so make all ProxyProviders also implement EndpointsHandler and pass those
through to loadbalancers when required.
 2019-04-05 16:16:35 -05:00
Xing Yang
000ab86788 Move CSIDriver Lister to the controller 2019-04-05 12:20:11 -07:00
Kubernetes Prow Robot
84b561033e
Merge pull request #76175 from stealthybox/refactor-mediatype-loops 
Refactor loops over `SupportedMediaTypes()` where mediaType is used to match a single SerializerInfo{}
 2019-04-04 23:54:07 -07:00
Kubernetes Prow Robot
a4a4b4c1db
Merge pull request #76119 from SataQiu/improve-kubeadm-20190404 
Code refactor: replace repeated values with a constant
 2019-04-04 22:31:43 -07:00
Kubernetes Prow Robot
71f4c9a51c
Merge pull request #76109 from vllry/kubeproxy-autocleanup 
Remove kube-proxy autocleanup for inactive modes
 2019-04-04 22:31:31 -07:00
Kubernetes Prow Robot
990ee3c09c
Merge pull request #76116 from xichengliudui/patch-5 
Fix comments and function names are different
 2019-04-04 21:08:07 -07:00
Vallery Lancey
3c9989258a Fixed --cleanup-ipvs help text 2019-04-04 18:35:24 -07:00
leigh capili
47e52d2981 Refactor loops over SupportedMediaTypes() where mediaType is used to match a single SerializerInfo{} 
We have an existing helper function for this:  runtime.SerializerInfoForMediaType()

This is common prep-work for encoding runtime.Objects into JSON/YAML for transmission over the wire or writing to ComponentConfigs.
 2019-04-04 19:01:01 -06:00
Vallery Lancey
eff9b4036e Revert "Deprecated --cleanup-ipvs flag in kube-proxy" 
This reverts commit 4f1bb2bd2f.
 2019-04-04 16:59:05 -07:00
Kubernetes Prow Robot
d18dae53a5
Merge pull request #75432 from draveness/feature/use-devnull-instead-of-stdin 
feat: use ignore instead of stdin in genyaml cmd
 2019-04-04 13:21:18 -07:00
Vallery Lancey
4f1bb2bd2f Depricated --cleanup-ipvs flag in kube-proxy 2019-04-04 12:51:36 -07:00
qingsenLi
ccac84c12b delete some unused consts in kubeadm/app/constants/constants.go 2019-04-04 19:54:51 +08:00
SataQiu
4a200a2222 replace repeated values with a constant 2019-04-04 12:42:26 +08:00
lIuDuI
6f89267125
Fix comments and function names are different 2019-04-04 10:57:20 +08:00
Vallery Lancey
cdce2d0ef9 Removed cleanup for non-current kube-proxy modes in newProxyServer() 2019-04-03 15:27:21 -07:00
Kubernetes Prow Robot
d5b56f4ffc
Merge pull request #75988 from mcrute/add-mcrute-cloudprovider 
Add mcrute to cloudprovider related owners files
 2019-04-03 14:55:13 -07:00
Kubernetes Prow Robot
2c675818ed
Merge pull request #75866 from jmkeyes/kubeadm-config-image-repository-flag 
Provide imageRepository override for 'kubeadm config images' commands.
 2019-04-03 11:14:37 -07:00
Kubernetes Prow Robot
7cdd26e127
Merge pull request #76071 from qingsenLi/k8s190403 
fix some spelling error
 2019-04-03 05:31:53 -07:00
qingsenLi
1350446417 fix some spelling error 2019-04-04 00:07:19 +08:00
Kubernetes Prow Robot
628925672c
Merge pull request #76029 from SataQiu/improve-kubeadm-20190403 
Code improve: use constants instead of hard coding
 2019-04-03 05:31:41 -07:00
Kubernetes Prow Robot
0ec8ce0077
Merge pull request #76038 from MengZn/patch-1 
patch-reset
 2019-04-03 03:24:06 -07:00
Kubernetes Prow Robot
0f3867a830
Merge pull request #75948 from xichengliudui/addconstants 
Replace variables 10251 and 10252 with constants
 2019-04-03 03:23:55 -07:00
MengZeLee
52d8f5e19b patch-reset 
When we reset cluster, the program does not automatically delete it ($HOME/.kube/config).
We should prompt the user how to checkt
 2019-04-03 14:18:49 +08:00
Yago Nobre
cd605e7d14
Simplify kubeadm bump version on TestEtcdSupportedVersion 2019-04-03 01:28:07 -03:00
Kubernetes Prow Robot
3a9ffadebe
Merge pull request #76016 from ping035627/k8s-190402 
Extract Method for kubeadm
 2019-04-02 18:45:42 -07:00
SataQiu
9e051bb327 code improve: use constants instead of hard coding 2019-04-03 05:58:01 +08:00
Kubernetes Prow Robot
aa52140928
Merge pull request #75346 from seans3/version-fix 
kubectl: removes pkg/version dependency
 2019-04-02 10:19:18 -07:00
draveness
33e61267e3 feat: use bytes.NewReader(nil) instead of stdin in genyaml 2019-04-02 23:41:29 +08:00
PingWang
38fe68658d Extract Method for kubeadm 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-04-02 18:45:30 +08:00
Kubernetes Prow Robot
c3cc31797a
Merge pull request #75969 from rajansandeep/translationcheck 
Fix translation from kube-dns to CoreDNS Config to skip invalid values
 2019-04-01 22:44:35 -07:00
Mike Crute
85d72950eb Add mcrute to cloudprovider related owners files 2019-04-01 19:06:34 -07:00
Kubernetes Prow Robot
dd96b15e5d
Merge pull request #75931 from xichengliudui/Simplify-two-if 
Simplify two if (remove redundant code)
 2019-04-01 15:49:21 -07:00
Sandeep Rajan
deadefd385 Fix translation to skip invalid values 2019-04-01 15:15:39 -04:00
Kubernetes Prow Robot
255a73ffc6
Merge pull request #75939 from xichengliudui/conversion-constants 
Define common sentences as constants
 2019-04-01 10:03:25 -07:00
Kubernetes Prow Robot
13cde9e181
Merge pull request #75950 from qingsenLi/k8s190401-fix-Certifcate 
spelling error 'Certifcate'
 2019-04-01 06:38:58 -07:00
qingsenLi
703a397ee3 spelling error 'Certifcate' 2019-04-02 01:14:56 +08:00
SataQiu
694a5f1cdf use constant instead of hard coding 2019-04-01 13:29:47 +08:00
Kubernetes Prow Robot
e9c42a15f7
Merge pull request #73672 from WanLinghao/failure_domain_remove 
Remove dead code about failure-domains option in kube-scheduler
 2019-03-30 18:22:33 -07:00
Kubernetes Prow Robot
8f304510c5
Merge pull request #75900 from neolit123/fix-upgrade-plan 
kubeadm: fix "upgrade plan" not defaulting to a "stable" version
 2019-03-30 12:47:08 -07:00
Kubernetes Prow Robot
214340256f
Merge pull request #75874 from SataQiu/refactor-kubeadm-20190329 
Refactor code about setting KubernetesVersionFlag
 2019-03-29 23:53:33 -07:00
Kubernetes Prow Robot
c7a8596a39
Merge pull request #75867 from SataQiu/fix-kubeadm-golint-20190329 
Fix golint failures in cmd/kubeadm/app/util/system
 2019-03-29 17:33:57 -07:00
Lubomir I. Ivanov
d6328f1dbe kubeadm: fix "upgrade plan" not working without k8s version 
If the k8s version argument passed to "upgrade plan" is missing
the logic should perform the following actions:
- fetch a "stable" version from the internet.
- if that fails, fallback to the local client version.

Currentely the logic fails because the cfg.KubernetesVersion is
defaulted to the version of the existing cluster, which
then causes an early exit without any ugprade suggestions.

See app/cmd/upgrade/common.go::enforceRequirements():
  configutil.FetchInitConfigurationFromCluster(..)

Fix that by passing the explicit user value that can also be "".
This will then make the "offline getter" treat it as an explicit
desired upgrade target.

In the future it might be best to invert this logic:
- if no user k8s version argument is passed - default to the kubeadm
version.
- if labels are passed (e.g. "stable"), fetch a version from the
internet.
 2019-03-29 21:34:58 +02:00
Kubernetes Prow Robot
e6d274233c
Merge pull request #75646 from bart0sh/PR0066-kubeadm-token-delete-multiple 
kubeadm: implement deletion of multiple tokens
 2019-03-29 11:48:24 -07:00
SataQiu
4f6003b61f refactor code about setting KubernetesVersionFlag 2019-03-29 15:51:16 +08:00
SataQiu
a41c85ea07 fix golint failures in cmd/kubeadm/app/util/system 2019-03-29 12:03:25 +08:00
Joshua M. Keyes
03725f78b4 Provide imageRepository override for 'kubeadm config images' commands. 2019-03-28 20:53:39 -07:00
Kubernetes Prow Robot
91f40aec8a
Merge pull request #75847 from fabriziopandini/fix-external-etcd 
kubeadm: fix join control-plane with external-etcd
 2019-03-28 16:54:16 -07:00
Sean Sullivan
d4d6e19f1e kubectl: removes pkg/version dependency 2019-03-28 16:08:34 -07:00
fabriziopandini
f09d6388b2 fix-external-etcd 2019-03-28 23:25:18 +01:00
Kubernetes Prow Robot
c5114ee6c3
Merge pull request #75762 from SataQiu/fix-kubeadm-gates-20190327 
Fix none feature gates list
 2019-03-28 10:30:43 -07:00
SataQiu
c9cd3db627 fix none feature gates list 2019-03-28 20:11:47 +08:00
Kubernetes Prow Robot
6a277e0c4d
Merge pull request #75784 from bart0sh/PR0069-kubeadm-use-t.Run-in-app-phases 
kubeadm: use t.Run in app/phases
 2019-03-28 02:34:43 -07:00
Kubernetes Prow Robot
40a0647efa
Merge pull request #73380 from vllry/kube-proxy-cleanup 
Superficial kube-proxy cleanup
 2019-03-27 17:22:04 -07:00
Kubernetes Prow Robot
7131617d0c
Merge pull request #74399 from RA489/runpullimagescleanup 
Rename RunPullImagesCheck to PullControlPlaneImages
 2019-03-27 16:01:03 -07:00
Kubernetes Prow Robot
b9dbb458fb
Merge pull request #72384 from zhouhaibing089/quota-crd 
resourcequota: use dynamic informer
 2019-03-27 16:00:49 -07:00
Ed Bartosh
296df304a4 kubeadm: use t.Run in app/phases 
Used T.Run API for kubeadm tests in app/phases/*

This should improve testing output and make it more visible
which test is doing what.

Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
 2019-03-27 19:39:30 +01:00
zhouhaibing089
f58c2ae62d resourcequota: use dynamic informer 
The resource quota controller should use a dynamic informer so it
can create informer for custom resources.
 2019-03-27 11:08:24 -07:00
Kubernetes Prow Robot
5a6c66a729
Merge pull request #72454 from rojkov/kubeadm-fallback-version 
kubeadm: add final fallback to constants.CurrentKubernetesVersion
 2019-03-27 11:02:50 -07:00
Ed Bartosh
405a9715f1 kubeadm: implement deletion of multiple tokens 2019-03-27 11:00:40 +01:00
Kubernetes Prow Robot
2086f81546
Merge pull request #74678 from pmcalpine/lint-bs_cj 
Fix some golint failures for pkg/controller
 2019-03-26 15:10:16 -07:00
Kubernetes Prow Robot
531dbd409f
Merge pull request #75445 from shinytang6/enhance/fmt 
Replace all time.Now().Sub with time.Since
 2019-03-26 13:55:17 -07:00
Kubernetes Prow Robot
11d472ea01
Merge pull request #72179 from WanLinghao/sa_controller 
Migrate the controller to use TokenRequest and rotate token periodically
 2019-03-26 12:33:19 -07:00
Kubernetes Prow Robot
7dfcacd1cf
Merge pull request #75700 from logicalhan/reflector-cleanup 
cleanup of reflector metric code (finish removing unused code)
 2019-03-25 23:13:31 -07:00
Han Kang
f7c23b1c1d cleanup of reflector metric code (finish removing unused code) 2019-03-25 15:12:09 -07:00
Kubernetes Prow Robot
f3efd1d0b7
Merge pull request #75036 from bart0sh/PR0065-kubeadm-replace-RequiredIPVSKernelModulesAvailable-check 
kubeadm: reimplement IPVS check
 2019-03-25 13:24:38 -07:00
Kubernetes Prow Robot
3c9c7fca64
Merge pull request #75027 from ping035627/k8s-190306 
Add some logs for kubeadm join
 2019-03-25 03:23:07 -07:00
WanLinghao
244b244f9d Migrate the controller to use TokenRequest and rotate token periodically 2019-03-25 14:54:22 +08:00
PingWang
5a8174bd45 Add some logs for kubeadm join 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-03-25 10:07:47 +08:00
Kubernetes Prow Robot
9c53f24012
Merge pull request #75179 from rosti/kill-v1alpha3 
kubeadm: remove v1alpha3
 2019-03-22 17:02:21 -07:00
Clayton Coleman
7d53ad1fb0
Kubelet should request protobuf from the apiserver 
The kubelet was not asking for application/vnd.kubernetes.protobuf
on list and get calls. It looks like we lost that code when we
moved to cert rotation. Clean up the client initialization path
and make sure that all non-dynamic clients use protobuf by default.
 2019-03-22 12:42:20 -04:00
aaa
867ad233c6 Replace variables 10251 and 10252 with constants 
update pull request

update pull request
 2019-03-22 00:27:53 -04:00
Kubernetes Prow Robot
4499275cb9
Merge pull request #72800 from stewart-yu/stewart-component-base 
Move config local to every controller in KCM
 2019-03-21 19:26:19 -07:00
aaa
112da093ed Define common sentences as constants 
update pull request

update pull request

update pull request

update pull request

update pull request

update pull request
 2019-03-21 18:56:42 -04:00
aaa
5c8e550a29 Simplify two if 
update pull request

update pull request

update pull request

update pull request

update pull request

update pull request
 2019-03-21 18:32:00 -04:00
Kubernetes Prow Robot
0c93929298
Merge pull request #75178 from rosti/kill-commonconfig 
kubeadm: Cleanup CommonConfiguration
 2019-03-21 13:35:36 -07:00
Kubernetes Prow Robot
ad4727440c
Merge pull request #75185 from ereslibre/certs-integration 
kubeadm: add integration tests for certs transfer
 2019-03-21 05:17:36 -07:00
shinytang6
5c9f4d9dc6 replace time.Now().Sub with time.Since 2019-03-21 18:02:55 +08:00
Kubernetes Prow Robot
4940eae478
Merge pull request #75521 from fabriziopandini/kubeadm-owners 
Update kubeadm OWNERS file
 2019-03-20 15:05:00 -07:00
fabriziopandini
c799c8275f kubeadm-owners 2019-03-20 21:50:04 +01:00
Kubernetes Prow Robot
b1e7c20a07
Merge pull request #75318 from ymlong/fix-20190313 
Correcting a spelling error
 2019-03-20 09:53:24 -07:00
Kubernetes Prow Robot
59140d6474
Merge pull request #75295 from DataDog/lbernail/strict-arp-flag 
[kube-proxy/ipvs] Add flag to enable strict ARP
 2019-03-20 07:41:51 -07:00
Kubernetes Prow Robot
30071b31c7
Merge pull request #75261 from rosti/fix-fuzzer-cri 
kubeadm: Fix fuzzer test for NodeRegistrationOptions
 2019-03-20 05:25:05 -07:00
Kubernetes Prow Robot
cad1b4dbac
Merge pull request #75252 from d-kuro/feature/fix-typo 
Fixed typo
 2019-03-20 05:24:49 -07:00
Kubernetes Prow Robot
d583283195
Merge pull request #75251 from louiseveryd/fix-201903111 
fix typo
 2019-03-20 05:24:37 -07:00
Kubernetes Prow Robot
5e90834abe
Merge pull request #75102 from qingsenLi/k8s190307-fix-typo 
fix a typo
 2019-03-20 00:54:23 -07:00
Kubernetes Prow Robot
16b5f7d3c5
Merge pull request #67487 from tianshapjq/validate-system-kube-reserved 
validate systemReservedCgroup and kubeReservedCgroup
 2019-03-19 21:26:22 -07:00
Kubernetes Prow Robot
c7e56c7ea1
Merge pull request #74719 from vaamarnath/refactor-dir-create-for-dry-runs 
kubeadm: refactored directory fetch code
 2019-03-19 20:15:20 -07:00
Marques Johansson
10102cef3c Restore machine readability to the print-join-command output 
The output of `kubeadm token create --print-join-command` should be
usable by batch scripts. This issue was pointed out in:

https://github.com/kubernetes/kubeadm/issues/1454
 2019-03-19 17:50:04 -04:00
Peter McAlpine
ac88e13821 Fix lint warnings in pkg/controller/cronjob. 2019-03-19 14:36:26 -04:00
Peter McAlpine
4cfcf0519d Fix lint warnings in pkg/controller/bootstrap 2019-03-19 14:36:26 -04:00
Kubernetes Prow Robot
b61baea135
Merge pull request #75420 from fabriziopandini/fix-kubeadm-init-output 
fix kubeadm init output
 2019-03-18 06:07:11 -07:00
fabriziopandini
fcadf143a5 fix-kubeadm-init-output 2019-03-18 12:52:41 +01:00
WanLinghao
f510f49955 Remove dead code about failure-domains option in kube-scheduler 2019-03-18 14:25:04 +08:00
Kubernetes Prow Robot
ebea037729
Merge pull request #75431 from fabriziopandini/fix-external-ca 
fix kubeadm external CA Mode
 2019-03-17 06:28:56 -07:00
fabriziopandini
ff072aa639 fix-external-ca 2019-03-17 13:03:40 +01:00
Kubernetes Prow Robot
fe8b1e24ee
Merge pull request #75425 from liggitt/kubeadm-insecure-port 
Kubeadm insecure port
 2019-03-16 17:24:55 -07:00
Jordan Liggitt
d4591ea324 Revert "Stop using API server's --insecure-port" 
This reverts commit 5b64a98689.
 2019-03-16 16:24:49 -04:00
Kubernetes Prow Robot
1a24040447
Merge pull request #74781 from liggitt/http2-watch 
kubelet watch-manager test, restore watch-based manager default
 2019-03-16 12:52:56 -07:00
Rafael Fernández López
bc26c69b61
kubeadm: Allow certain certs/keys to be missing on the secret. 
Under certain circumstances, specially when using an insecure external
etcd cluster (no certificates), or when using external certificates (
no CA key), some keys inside the kubeadm-certs secret data can contain
the key with an empty value on the map.

When downloading certs just ignore those that are blank and inform the
user about it.
 2019-03-15 23:34:17 +01:00
Ed Bartosh
2914171ed4 kubeadm: reimplement IPVS check 
Used existing IPVS Proxier API CanUseIPVSProxier instead
of custom implementation.

Fixes kubernetes/kubeadm#975
 2019-03-14 16:52:21 +02:00
RA489
8bcc82a9e4 Rename RunPullImagesCheck to PullControlPlaneImages 2019-03-14 15:37:38 +05:30
Vallery Lancey
a23e442161 Fix a bad merge leftover in kube-proxy 2019-03-13 21:43:06 -07:00
Jordan Liggitt
f2a0c0342c Revert "Revert kubelet to default to ttl cache secret/configmap behavior" 
This reverts commit cd1c9f9018.
 2019-03-13 15:12:26 -07:00
Vallery Lancey
22ff746e4a
Merge branch 'master' into kube-proxy-cleanup 2019-03-13 13:31:48 -07:00
Amarnath
be8d1c24f1 kubeadm: refactored directory fetch code 2019-03-13 18:28:53 +05:30
ymlong
8be2a4c9f6 Correcting a spelling error 2019-03-13 11:15:50 +08:00
Laurent Bernaille
09f821ddb5 [kube-proxy/ipvs] Add flag to enable strict ARP 2019-03-12 15:56:22 +01:00
Kubernetes Prow Robot
eb6a1b651c
Merge pull request #72942 from caesarxuchao/expose-storage-version-hash 
Populate the storage version hash
 2019-03-11 21:36:36 -07:00
Kubernetes Prow Robot
bb8ccb6ce7
Merge pull request #74975 from dims/deprecate-make-symlink-parameter-in-hyperkube 
Deprecate make-symlink parameter in hyperkube
 2019-03-11 19:10:36 -07:00
Kubernetes Prow Robot
50bf223a05
Merge pull request #75224 from neolit123/certs-print-key-on-phase 
kubeadm: print key inside the upload-certs phase of init
 2019-03-11 12:00:15 -07:00
Chao Xu
887cb93d8d generated BUILD 
generated proto
 2019-03-11 10:26:56 -07:00
Chao Xu
3b618af0d4 Expose storage version hash 2019-03-11 10:26:56 -07:00
Rafael Fernández López
8737720a7d
kubeadm: add integration tests for certs transfer 
* Upload certificates: generate certificates and check that the kubeadm-certs
  secret is populated with the expected contents.

* Download certificates: given we have a kubeadm-certs secret, ensure that
  keys and certificates are copied on the expected target, and that depending
  on the secret nature they have the expected permissions.
 2019-03-11 16:27:37 +01:00
Rostislav M. Georgiev
2c4a3ae24c kubeadm: Fix fuzzer test for NodeRegistrationOptions 
The fuzzer test for NodeRegistrationOptions is defaulting the CRISocket member.
This is a left over from the times this member was statically defaulted in the
config. Now that the member is dynamically defaulted, setting CRISocket to foo
can cause issues to get undetected by the fuzzer test with this member.

The resolution is to stop setting CRISocket in the fuzzer test.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-03-11 14:09:53 +02:00
Kubernetes Prow Robot
f4d125320e
Merge pull request #75218 from ereslibre/fix-join-message 
kubeadm: fix join message if kubeadm-certs secret is not present
 2019-03-11 01:25:25 -07:00
d-kuro
4f301cc97a
Fix typo 2019-03-11 13:12:46 +09:00
liurui
0a1227c2b1 fix typo 2019-03-11 11:19:39 +08:00
Lubomir I. Ivanov
c5c4cd2580 kubeadm: print key inside the upload-certs phase of init 
The standalone execution of upload-certs phase does not print
the key that that user should use for the newly uploaded encrypted
secret. Print this key in the upload-certs phase in both
standalone mode or if executed in the standard init workflow.

Make it possible to omit the printing if the user passes
--skip-certificate-key-print.

Also:
- Uppercase string in Printf call in copycerts.go
- Don't use V(1) for the "Skipping phase" message in uploadcerts.go
instead always print a message that the user case use
--experimental-upload-certs. This solves a problem if the user tried
the standalone phase but didn't pass --experimental-upload-certs.
 2019-03-10 19:13:06 +02:00
Rafael Fernández López
b57c8e2c45
kubeadm: fix join message if kubeadm-certs secret is not present 
`kubeadm init phase upload-certs` requires --experimental-upload-certs
argument. Make this explicit in the error if the secret is missing.
 2019-03-08 22:34:11 +01:00
Vladimir Vivien
4ec7d2305d CSI Inline Volume - API changes 2019-03-08 12:35:07 -05:00
Rostislav M. Georgiev
36783eb88b kubeadm: remove v1alpha3 
Remove deprecated old v1alpha3 kubeadm config.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-03-08 14:54:51 +02:00
Rostislav M. Georgiev
4567e7e79e kubeadm: Cleanup CommonConfiguration 
CommonConfiguration is an interface, that aims at abstracting common
configuration of InitConfiguration and JoinConfiguration. It was never widely
used and never got too much functionality attached to it. With recent
developments in the kubeadm config field, it got even more out of touch with
reality and where things are going.
Thus, the only viable solution is to remove it completely.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-03-08 14:45:30 +02:00
Kubernetes Prow Robot
183e6cc190
Merge pull request #74433 from tallclair/runtimeclass-internal 
Migrate RuntimeClass from a CRD to an internal API
 2019-03-07 21:19:30 -08:00
David Zhu
7d2f4e97b8 Add ADC Fallback if Node doesn't have driver installed 2019-03-07 14:47:38 -08:00
qingsenLi
55d34ac97e fix a typo 2019-03-08 04:05:49 +08:00
Tim Allclair
222988bdda Migrate to internal node.k8s.io client 2019-03-07 11:57:12 -08:00
Tim Allclair
820a1dc96b Add node.k8s.io/v1beta1 API 2019-03-07 11:57:12 -08:00
Tim Allclair
63f61a6714 Migrate RuntimeClass to internal API 2019-03-07 11:07:54 -08:00
Kubernetes Prow Robot
f0418ac3c2
Merge pull request #75082 from neolit123/reset-clean-status 
kubeadm-reset: add means to clear the ClusterStatus
 2019-03-07 05:15:02 -08:00
Marek Counts
a9eea0a353 kubeadm-reset: add means to clear the ClusterStatus 
Add ResetClusterStatusForNode() that clears a certain
control-plane node's APIEndpoint from the ClusterStatus
key in the kubeadm ConfigMap on "kubeadm reset".
 2019-03-07 04:03:19 +02:00
Timothy St. Clair
ef31616e45 Revert "Merge pull request #74628 from hpandeycodeit/alpha_kubeconf" 
This reverts commit 7053e43b2e, reversing
changes made to d58ff3bfc0.
 2019-03-06 14:07:15 -06:00
Kubernetes Prow Robot
c360bac6e2
Merge pull request #75032 from rosti/win-test 
kubeadm: Don't hardcode temp path in a test
 2019-03-06 09:51:15 -08:00
Kubernetes Prow Robot
0e2c26829c
Merge pull request #75013 from neolit123/fix-join-flags 
kubeadm: amend flags for join phases
 2019-03-06 09:51:04 -08:00
Kubernetes Prow Robot
45e5f6053b
Merge pull request #74424 from liggitt/drop-k8s-io-node-labels 
Clean up self-set node labels
 2019-03-06 08:24:26 -08:00
Kubernetes Prow Robot
5ff303000a
Merge pull request #72685 from yagonobre/bump-minimum 
Bump minimum kubeadm supported version to v1.13
 2019-03-06 08:24:10 -08:00
Rostislav M. Georgiev
5a3b1a0c7c kubeadm: Don't hardcode temp path in a test 
Hardcoding a temp path of /tmp/... is not portable and can potentially cause
other issues (such as flakyness) too.
Use TempFile instead.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-03-06 12:27:31 +02:00
Kubernetes Prow Robot
e15ebcd632
Merge pull request #74952 from ping035627/k8s-190305 
Fix some typos
 2019-03-06 02:08:02 -08:00
Kubernetes Prow Robot
d7971e24f3
Merge pull request #74870 from neolit123/fix-join-phase 
kubeadm: update output of init, join reset commands
 2019-03-06 00:44:38 -08:00
Kubernetes Prow Robot
2b63efcd3e
Merge pull request #74671 from yagonobre/certificate-key 
Add certificate-key to kubeadm upload-certs phase, and improve init output
 2019-03-05 21:42:32 -08:00
Lubomir I. Ivanov
3e151ab546 kubeadm: amend flags for join phases 
Certain join phases have flags that are redundant:
- getControlPlanePreparePhaseFlags():
  - amend flags (use switch / case)
  - add example for the parent command
  - rename internal function and sub-phase "manifests"
    to "control-plane"
- getControlPlaneJoinPhaseFlags():
  - amend flags
  - remove MacroCommandLongDescription
 2019-03-06 04:59:35 +02:00
Yago Nobre
59d2f13850
Bump minimum kubeadm supported version to v1.12 2019-03-05 23:45:17 -03:00
Lubomir I. Ivanov
6f6b364b9c kubeadm: update output of init, join reset commands 
- move most unrelated to phases output to klog.V(1)
- rename some prefixes for consistency - e.g.
[kubelet] -> [kubelet-start]
- control-plane-prepare: print details for each generated CP
component manifest.
- uppercase the info text for all "[reset].." lines
- modify the text for one line in reset
 2019-03-06 03:17:35 +02:00
Davanum Srinivas
c75fc36889
Deprecate make-symlink parameter in hyperkube 
Change-Id: I07e7f5f2a4e9050de92d3f0230dae0f869b77529
 2019-03-05 13:00:38 -05:00
Yago Nobre
b1936853c4
Add certificate-key to kubeadm init upload-certs phase, and improve init output 2019-03-05 14:35:52 -03:00
Kubernetes Prow Robot
c525155b31
Merge pull request #74873 from neolit123/fix-join-phase-preflight 
kubeadm: add a flag to RunInitNodeChecks to indicate sec. control-plane
 2019-03-05 08:16:50 -08:00
Kubernetes Prow Robot
dccb8ab5b0
Merge pull request #74615 from andrewsykim/delete-pvl-controller 
Delete the out-of-tree PV labeler controller
 2019-03-05 08:16:03 -08:00
Kubernetes Prow Robot
6c31101257
Merge pull request #74283 from xing-yang/csi_crd_controller 
CSINodeInfo and CSIDriver Controller Changes
 2019-03-05 04:44:42 -08:00
PingWang
55dac4804f Fix some typos 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-03-05 17:58:09 +08:00
Kubernetes Prow Robot
9d0baa75f2
Merge pull request #74563 from vanduc95/fix-error-string 
fix error string should not be capitalized
 2019-03-04 19:27:36 -08:00
Lubomir I. Ivanov
af9e3fcfaa kubeadm: add a flag to RunInitNodeChecks to indicate sec. control-plane 
Add an extra flag isSecondaryControlPlane to RunInitNodeChecks
which can be used to indicate that the node we are checking is
a secondary control-plane. In such a case we skip some tests
that are already covered by  RunJoinNodeChecks and
RunOptionalJoinNodeChecks.
 2019-03-05 02:44:30 +02:00
Xing Yang
6265f4f78c CSINodeInfo/CSIDriver controller changes 
This is the 2nd PR to move CSINodeInfo/CSIDriver APIs to
v1beta1 core storage APIs. It includes controller side changes.
It depends on the PR with API changes:
https://github.com/kubernetes/kubernetes/pull/73883
 2019-03-04 16:41:58 -08:00
Lubomir I. Ivanov
269a07c077 kubeadm-reset: fetch init config only if client is non-nil 2019-03-04 04:14:51 +02:00
Kubernetes Prow Robot
37f0138278
Merge pull request #71874 from neolit123/fix-kubeconfig-path 
kubeadm: use DefValue for the --kubeconfig flag
 2019-03-03 17:28:44 -08:00
Kubernetes Prow Robot
1f6ea0455b
Merge pull request #74780 from pytimer/kubeadm-reduce 
kubeadm: reduce some functions number of parameters
 2019-03-03 04:23:24 -08:00
pytimer
f600348006 kubeadm: reduce some functions number of parameters 2019-03-03 15:16:19 +08:00
fabriziopandini
a3ed9f0c2c join-phases-texts 2019-03-02 21:52:04 +01:00
Kubernetes Prow Robot
e1b79abfec
Merge pull request #74831 from fabriziopandini/remove-discovery-flags 
Remove discovery flags from kubeadm join phases (when possible)
 2019-03-02 11:16:12 -08:00
fabriziopandini
5ecd74afbe remove-discovery-flags 2019-03-02 18:31:32 +01:00
stewart-yu
ecbd5427e7 auto-generated file 2019-03-02 12:55:26 +08:00
stewart-yu
fc54de589f fix all the reference about the API packages change 2019-03-02 12:54:33 +08:00
Kubernetes Prow Robot
d8d260a09d
Merge pull request #74755 from liggitt/kubelet-watch 
Revert kubelet to default to ttl cache secret/configmap behavior
 2019-03-01 19:14:14 -08:00
Kubernetes Prow Robot
fc30b38021
Merge pull request #74756 from fabriziopandini/cleanup-join-phases 
Cleanup join data struct
 2019-03-01 14:08:58 -08:00
Kubernetes Prow Robot
098075c458
Merge pull request #74797 from fabriziopandini/fix-go-vet-1.12 
kubeadm fix for go vet 1.12
 2019-03-01 12:49:18 -08:00
fabriziopandini
d0d843c588 fix-go-vet-1.12 2019-03-01 15:13:17 +01:00
Kubernetes Prow Robot
7514c49ec1
Merge pull request #74712 from feiskyer/fix-cri-endpoint-help 
Fix help message for --container-runtime-endpoint
 2019-03-01 03:47:16 -08:00
peibingit
d41ad755c1
Update types.go 2019-03-01 12:03:12 +08:00
Kubernetes Prow Robot
9fd7a4c2dc
Merge pull request #74751 from fabriziopandini/cleanup-join-phases-flags 
cleanup-join-phases-flags
 2019-02-28 17:52:30 -08:00
Jordan Liggitt
cd1c9f9018 Revert kubelet to default to ttl cache secret/configmap behavior 2019-02-28 17:54:22 -05:00
fabriziopandini
4c27d6a213 cleanup-join-phases 2019-02-28 23:37:25 +01:00
fabriziopandini
d102dac411 cleanup-join-phases-flags 2019-02-28 22:25:35 +01:00
Kubernetes Prow Robot
231279dcba
Merge pull request #74723 from rojkov/kubeadm-infof 
kubeadm: use Infoln instead of Infof where appropriate
 2019-02-28 11:51:57 -08:00
Kubernetes Prow Robot
e476ab63cc
Merge pull request #74596 from sttts/sttts-remove-postprocess-paths 
openapi: remove postprocessing for old paths, deprecated in 1.9
 2019-02-28 10:28:46 -08:00
Dmitry Rozhkov
bb8f4ac84f kubeadm: use Infoln instead of Infof where appropriate 2019-02-28 16:12:34 +02:00
Kubernetes Prow Robot
83fc13e640
Merge pull request #74511 from rojkov/kubeadm-refactor-enforceRequirements 
kubeadm: move duplicated code into enforceRequirements()
 2019-02-28 03:06:57 -08:00
Pengfei Ni
9ff480b7e4 Fix help message for --container-runtime-endpoint 2019-02-28 15:54:31 +08:00
Kubernetes Prow Robot
84dce4d119
Merge pull request #74393 from codenrhoden/refactor-subpath 
Refactor subpath out of pkg/util/mount
 2019-02-27 15:54:36 -08:00
Kubernetes Prow Robot
7053e43b2e
Merge pull request #74628 from hpandeycodeit/alpha_kubeconf 
Removed alpha kubeconfig command
 2019-02-27 14:40:16 -08:00
Himanshu Pandey
94b5945d53 Removed alpha kubeconfig command 2019-02-27 10:08:42 -08:00
Kubernetes Prow Robot
86c274043a
Merge pull request #74630 from xichengliudui/fixleftoverproblem 
Fix the legacy of #74479
 2019-02-26 19:40:36 -08:00
Travis Rhoden
2c4d748bed Refactor subpath out of pkg/util/mount 
This patch moves subpath functionality out of pkg/util/mount and into a
new package pkg/volume/util/subpath. NSEnter funtionality is maintained.
 2019-02-26 19:59:53 -07:00
Kubernetes Prow Robot
c6b2a87cdb
Merge pull request #74168 from ereslibre/join-download-certs 
kubeadm: Join download certs
 2019-02-26 16:50:24 -08:00
Kubernetes Prow Robot
e64336e94b
Merge pull request #74590 from vanduc95/cleanup-kubeadm-cont.6-20190226 
kubeadm cleanup: master -> control-plane (cont.6)
 2019-02-26 15:30:03 -08:00
Rafael Fernández López
d30b14d586
kubeadm: Implement certificate download for join 
This implements the certificate download for the join process. If certificates
have been uploaded during init (or explicitly on any master node) and the secret
is still present in the cluster, the join process will try to download the secret
data, decrypting it with the provided key in the new `--certificate-key` flag.
 2019-02-26 22:00:11 +01:00
Kubernetes Prow Robot
d476f20d79
Merge pull request #74479 from ping035627/k8s-190223 
Add port constants
 2019-02-26 12:44:47 -08:00
Kubernetes Prow Robot
be8a9b9637
Merge pull request #74422 from liggitt/client-version-methods 
Remove deprecated versionless client interface methods
 2019-02-26 12:44:24 -08:00
Kubernetes Prow Robot
c487757e88
Merge pull request #74410 from pytimer/kubeadm-fix 
kubeadm: reduce the number of fetch configuration when reset
 2019-02-26 12:44:14 -08:00
Andrew Kim
2901def8c3 delete the persistentvolume labeler controller 2019-02-26 14:23:20 -05:00
Jordan Liggitt
ca592a91d6 Update timeline for kubelet label restrictions 2019-02-26 11:42:23 -05:00
Kubernetes Prow Robot
6de09f69cb
Merge pull request #74584 from cqy0532/fixtypo 
fix typo kubeadm joiń -> kubeadm join
 2019-02-26 06:38:34 -08:00
Jordan Liggitt
d1e865ee34 Update client callers to use explicit versions 2019-02-26 08:36:30 -05:00
Dr. Stefan Schimanski
3b504c10c2 openapi: remove postprocessing for old paths, deprecated in 1.9 2019-02-26 14:17:44 +01:00
vanduc95
3759fcd4c8 kubeadm cleanup: master -> control-plane (cont.6) 2019-02-26 18:42:27 +07:00
pytimer
3306efd619 kubeadm: reduce the number of fetch configuration when reset 2019-02-26 19:40:42 +08:00
Kubernetes Prow Robot
465f7ebf43
Merge pull request #74557 from vanduc95/cleanup-kubeadm-cont.5-20190225 
kubeadm cleanup: master -> control-plane (cont.5)
 2019-02-26 03:10:20 -08:00
cqy0532
0a0fea60a0 fix typo kubeadm joiń -> kubeadm join 2019-02-26 17:26:41 +08:00
Kubernetes Prow Robot
4e8e3c2f02
Merge pull request #74559 from zhouxiaoninga/fixtypes 
Fix typo joiń -> join
 2019-02-25 23:12:11 -08:00
Kubernetes Prow Robot
8326ea71a3
Merge pull request #74403 from ping035627/k8s-190222 
Code cleanup and refactoring
 2019-02-25 20:28:09 -08:00
vanduc95
e580a9e5fa fix error string should not be capitalized 2019-02-26 10:10:45 +07:00
vanduc95
0296cfb2b8 kubeadm cleanup: master -> control-plane (cont.5) 2019-02-26 09:04:54 +07:00
PingWang
1a439cc646 Add port constants 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>

use pkg/master/ports constants

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

update-bazel

Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-02-26 09:18:15 +08:00
zhouxiaoning
802c751053 纠正join 2019-02-26 09:10:00 +08:00
Lubomir I. Ivanov
de5e17e6c3 kubeadm/phases: use common interfaces for init and join phases 
The custom sub-set interfaces in init/join phases as a pattern
have isolation benefits - e.g. when a consumer imports these
but we don't want them to be able to call all methods from
the original object that satisfies a complete interface.

On the other hand these sub-set interfaces under phases/init
and phases/join are private.

Expose a couple of new common interfaces:
- InitData from phases/init/data.go
- JoinData from phases/join/data.go

Use these interfaces in init/join phases accordingly instead
of the sub-set interfaces.

Use compile-time type assertion to verify that these
interfaces can be satisfied by init.go's initData and
join.go's joinData.

Add NO-OP objects called testInitData and joinInitData
that can be used for unit testing if embedded.
 2019-02-26 02:23:50 +02:00
Kubernetes Prow Robot
4b8ecd68f3
Merge pull request #74509 from ping035627/k8s-190225-1 
Fix typos
 2019-02-25 15:15:51 -08:00
Kubernetes Prow Robot
b22da83307
Merge pull request #74473 from vanduc95/cleanup-kubeadm-cont.4-20190223 
kubeadm cleanup: master -> control-plane (cont.4)
 2019-02-25 15:15:30 -08:00
Dmitry Rozhkov
226843fe28 kubeadm: move duplicated code into enforceRequirements() 
and to a new function getK8sVersionFromUserInput().

Also drop applyPlanFlags.ignorePreflightErrorsSet field which is not
a command line option.
 2019-02-25 16:26:20 +02:00
PingWang
88d6e89279 Fix typos 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-02-25 17:12:44 +08:00
RA489
a0ee4b471d Refactor etcd client function have same signatures in etcd.go 2019-02-25 12:54:12 +05:30
ducnv
e11916da8e kubeadm cleanup: master -> control-plane (cont.4) 2019-02-25 08:29:19 +07:00
Kubernetes Prow Robot
5312ade3d1
Merge pull request #74457 from neolit123/fix-kubeproxy-winkernel 
kubeadm: fix issue with missing kubeproxy fields in test data
 2019-02-23 14:05:15 -08:00
Lubomir I. Ivanov
b2cc473388 kubeadm: fix issue with missing kubeproxy fields in test data 2019-02-23 19:13:16 +02:00
Ed Bartosh
f8d235be9e kubeadm: fix url validation code 
Fixed nil pointer dereference in url validation code that
caused kubeamd panic:

  panic: runtime error: invalid memory address or nil pointer dereference
  [signal SIGSEGV: segmentation violation code=0x1 addr=0x8 pc=0xa7930c]

  goroutine 1 [running]:
  kubeadm/validation.ValidateURLs(0x40000bafe0, 0x2, 0x2, 0x1, 0x40002967b0, 0x0, 0x40002967b0, 0xf302a0)
    kubeadm/validation/validation.go:324 +0xcc
  kubeadm/validation.ValidateEtcd(0x400000b490, 0x4000296720, 0x0, 0x0, 0x0)
    kubeadm/validation/validation.go:291 +0x1f0
      ...

Fixes: kubernetes/kubeadm#1419

Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
 2019-02-23 16:48:22 +01:00
Kubernetes Prow Robot
8993fbc543
Merge pull request #74328 from daixiang0/delete-blank 
delete all duplicate empty blanks
 2019-02-23 01:43:58 -08:00
Kubernetes Prow Robot
686c4912e9
Merge pull request #73930 from ixdy/bazel-cgo-crossbuild 
bazel: initial support for cross-compilation
 2019-02-23 01:43:27 -08:00
Kubernetes Prow Robot
b5566c7818
Merge pull request #71896 from awly/client-go-keyutil 
client-go: extract new keyutil package from util/cert
 2019-02-23 01:43:16 -08:00
Kubernetes Prow Robot
1d2d2d0ab2
Merge pull request #74390 from vanduc95/cleanup-kubeadm-cont.3-20190222 
kubeadm cleanup: master -> control-plane (cont.3)
 2019-02-22 23:27:40 -08:00
Kubernetes Prow Robot
4938cc37d3
Merge pull request #73509 from mikedanese/cloudproviderdep 
enforce that cloud providers are only linked in main or app packages
 2019-02-22 21:49:31 -08:00
Kubernetes Prow Robot
e4302c96e1
Merge pull request #74428 from bart0sh/PR0063-kubeadm-remove-dead-code 
kubeadm: remove dead code
 2019-02-22 19:19:27 -08:00
vanduc95
57d04cafee kubeadm cleanup: master -> control-plane (cont.3) 2019-02-23 10:19:26 +07:00
Kubernetes Prow Robot
65cdd7e74a
Merge pull request #74400 from rojkov/kubeadm-refactor-etcdClient 
kubeadm: simplify creating etcdClient
 2019-02-22 19:19:16 -08:00
Xiang Dai
36065c6dd7 delete all duplicate empty blanks 
Signed-off-by: Xiang Dai <764524258@qq.com>
 2019-02-23 10:28:04 +08:00
Jeff Grafton
7a938eb541 Create work-around wrappers for pure attribute on go_binary and go_test 
This enables cgo when cross-compiling certain tests and binaries to
Linux, while disabling cgo for Windows and Darwin.
 2019-02-22 18:08:34 -08:00
Kubernetes Prow Robot
3afa003126
Merge pull request #73555 from bsalamat/priority_to_ga 
Graduate PriorityClass API to GA
 2019-02-22 16:14:49 -08:00
Ed Bartosh
39871f565d kubeadm: remove dead code 
Removed unused functions and variables from
the kubeadm codebase.
 2019-02-22 23:01:14 +01:00
Mike Danese
47043bcac1 enforce that cloud providers are only linked in main or app packages 2019-02-22 11:56:39 -08:00
Bobby (Babak) Salamat
453498fe2c Graduate PriorityClass to GA 2019-02-22 10:51:13 -08:00
PingWang
8fef7221a1 Code cleanup and refactoring 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-02-22 16:48:00 +08:00
Kubernetes Prow Robot
9e53b85d28
Merge pull request #74112 from pytimer/kubeadm-reset 
kubeadm: Remove etcd members from the etcd cluster when reset the nodes
 2019-02-22 00:19:40 -08:00
Dmitry Rozhkov
926d9012a4 kubeadm: simplify creating etcdClient 
There is no need to overshadow `client` with a transitive variable
used solely for transfering its value to `etcdClient`.
 2019-02-22 09:41:46 +02:00
Kubernetes Prow Robot
9dbc8912d9
Merge pull request #74355 from brb/kubeadm-support-kernel-5 
kubeadm: Support >= 5.0 Linux kernel
 2019-02-21 17:47:40 -08:00
pytimer
83f5296a14 kubeadm: Remove etcd member from the etcd cluster when reset the control plane node 2019-02-22 09:13:01 +08:00
Kubernetes Prow Robot
739af85d7a
Merge pull request #74064 from vanduc95/cleanup-kubeadm-cont.2-20190214 
kubeadm cleanup: master -> control-plane (cont.2)
 2019-02-21 10:43:07 -08:00
Martynas Pumputis
148b222d97 kubeadm: Support >= 5.0 Linux Kernel 
Signed-off-by: Martynas Pumputis <m@lambda.lt>
 2019-02-21 17:31:15 +01:00
Kubernetes Prow Robot
62ba022249
Merge pull request #74329 from ping035627/k8s-190221 
Delete unuse const and fix some typos
 2019-02-21 08:04:10 -08:00
Kubernetes Prow Robot
2721ca28ee
Merge pull request #74256 from rojkov/kubeadm-refactor-drop-newK8sVersionStr 
kubeadm: drop applyFlags.newK8sVersionStr field
 2019-02-21 08:03:58 -08:00
Kubernetes Prow Robot
7d75b73e1d
Merge pull request #74057 from liggitt/ingress-network-v1beta1 
Ingress extensions/v1beta1 -> networking.k8s.io/v1beta1
 2019-02-21 01:07:48 -08:00
Kubernetes Prow Robot
12647fa068
Merge pull request #74267 from dims/deprecate-containerized-kubelet-flag 
Deprecate containerized kubelet
 2019-02-20 21:41:56 -08:00
PingWang
ac132aae60 Delete unuse const and fix some typos 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-02-21 11:09:09 +08:00
vanduc95
ae1ec8826a kubeadm cleanup: master -> control-plane (cont.2) 2019-02-21 10:02:24 +07:00
xichengliudui
fb7bc5c4ea Fix the legacy of #74479 2019-02-20 17:09:30 -05:00
Jordan Liggitt
8c28d3f63c Add networking.k8s.io/v1beta1 Ingress 2019-02-20 16:41:14 -05:00
Kubernetes Prow Robot
c06ca11b5d
Merge pull request #70896 from ksubrmnn/overlay_dsr 
Adding Windows Overlay support to Kube Proxy
 2019-02-20 12:53:13 -08:00
Kubernetes Prow Robot
b4a2b63561
Merge pull request #73907 from yagonobre/init-upload-certs 
Add kubeadm init upload encrypted certs phase
 2019-02-20 11:33:44 -08:00
Kubernetes Prow Robot
b0f6857f92
Merge pull request #74277 from neolit123/fix-join-phase 
kubeadm/join: expose the KubeConfigPath() method to joinData
 2019-02-20 07:44:57 -08:00
Lubomir I. Ivanov
5db0c61788 kubeadm/join: expose the KubeConfigPath() method to joinData 
This fixes the following error:
"error execution phase control-plane-join/etcd:
control-plane-join phase invoked with an invalid data struct"

The problem here is that joinData cannot be type-asserted
to the interface type under controlplanejoin.go (controlPlaneJoinData)
because joinData lacks KubeConfigPath.

Given we use KubeConfigPath in more than one place for join
it makes sense to define define the method and make it return:
kubeadmconstants.GetAdminKubeConfigPath()
 2019-02-20 14:17:53 +02:00
Kubernetes Prow Robot
7b203c6809
Merge pull request #74137 from rajansandeep/readinessprobe 
Add readinessProbe to CoreDNS
 2019-02-19 16:24:04 -08:00
Davanum Srinivas
bcf6d39b3a
Deprecate containerized kubelet 
Change-Id: Ia82878d81822a2d7214bea21ffe9dde7087a315f
 2019-02-19 14:06:15 -05:00
Kubernetes Prow Robot
2911e86e0e
Merge pull request #73452 from RA489/graduate-control-plane-join-phase 
kubeadm: graduate control plane join phase
 2019-02-19 09:55:23 -08:00
Andrew Lytvynov
18458392ca Extract new keyutil package from client-go/util/cert 
This package contains public/private key utilities copied directly from
client-go/util/cert. All imports were updated.

Future PRs will actually refactor the libraries.

Updates #71004
 2019-02-19 09:48:59 -08:00
Kubernetes Prow Robot
cd07a336f1
Merge pull request #73775 from yagonobre/init-certs 
Remove todos from init upload certs
 2019-02-19 08:37:18 -08:00
Lubomir I. Ivanov
363c778d45 kubeadm: use DefValue for the --kubeconfig flag 
- Rename FindExistingKubeConfig to GetKubeConfigPath

- Cobra supports a DefValue option which can be used
to differentiate between the cases where the user set a flag
and when a flag was unset, while still adding a default value.
Use this in options/generic.go for the kubeconfig flag.

- Remove the GetKubeConfigPath() logic from `reset` and `upgrade`
as these are node level kubeadm commands.

- Default kubeconfig values to "" everywhere where GetKubeConfigPath
is used. This allows to search for existing kubeconfig locations.
 2019-02-19 17:35:37 +02:00
Kubernetes Prow Robot
0ffd59e403
Merge pull request #74154 from mbohlool/gimli 
Use Request Object interfaces instead of static scheme that is more appropriate for CRDs
 2019-02-19 07:21:53 -08:00
Sandeep Rajan
37c3d68a91 Add readinessProbe 2019-02-19 10:14:12 -05:00
Dmitry Rozhkov
45ed7ae051 kubeadm: drop applyFlags.newK8sVersionStr field 
The structure `applyFlags` is meant to keep a user's
input from command line and as such should be immutable.

Use either a variable or the validated `InitConfig.KubernetesVersion`
field instead.
 2019-02-19 15:42:32 +02:00
Rostislav M. Georgiev
f64baf755e kubeadm: Don't load deprecated configs 
Currently kubeadm supports a couple of configuration versions - v1alpha3 and
v1beta1. The former is deprecated, but still supported.

To discourage users from using it and to speedup conversion to newer versions,
we disable the loading of deprecated configurations by all kubeadm
sub-commands, but "kubeadm config migrate".

v1alpha3 is still present and supported at source level, but cannot be used
directly with kubeadm and some of its internal APIs.

The added benefit to this is, that users won't need to lookup for an old
kubeadm binary after upgrade, just because they were stuck with a deprecated
config version for too long.

To achieve this, the following was done:

- ValidateSupportedVersion now has an allowDeprecated boolean parameter, that
  controls if the function should return an error upon detecting deprecated
  config version. Currently the only deprecated version is v1alpha3.

- ValidateSupportedVersion is made package private, because it's not used
  outside of the package anyway.

- BytesToInitConfiguration and LoadJoinConfigurationFromFile are modified to
  disallow loading of deprecated kubeadm config versions. An error message,
  that points users to kubeadm config migrate is returned.

- MigrateOldConfig is still allowed to load deprecated kubeadm config versions.

- A bunch of tests were fixed to not expect success if v1alpha3 config is
  supplied.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-02-19 12:27:39 +02:00
Yago Nobre
79fd5f25a7 Add kubeadm init upload encrypted certs phase 2019-02-19 02:52:21 -03:00
RA489
6bbed9fef0 kubeadm: graduate control plane join phase 2019-02-19 11:09:00 +05:30
Yago Nobre
3a6c80c372 Remove todos from init certs phase 2019-02-18 21:33:19 -03:00
David Eads
ad740bbba5 allow apiservers to override the list of decorators 2019-02-18 14:47:09 -05:00
Kubernetes Prow Robot
9891824352
Merge pull request #74212 from rojkov/kubeadm-drop-applyFlags-newK8sVersion 
kubeadm: drop applyFlags.newK8sVersion field
 2019-02-18 10:37:42 -08:00
Kubernetes Prow Robot
c923a68470
Merge pull request #74024 from rosti/optimize-config-migrate 
kubeadm: Replace MigrateOldConfigFromFile
 2019-02-18 10:37:32 -08:00
Dmitry Rozhkov
a49dc107a3 kubeadm: drop applyFlags.newK8sVersion field 
since it's not a command line flag. Use a variable instead.
 2019-02-18 17:04:30 +02:00
Dmitry Rozhkov
193d0f21c4 kubeadm: use non-formatting constructor for new error 2019-02-18 09:51:53 +02:00
Mehdy Bohlool
cebb4ee2ac Remove the propagated scheme from the Admission chain 2019-02-16 13:28:47 -08:00
Kubernetes Prow Robot
16e08f3e53
Merge pull request #73408 from Klaven/component-base-flags 
Move flag util pkgs to k8s.io/component-base/cli
 2019-02-15 16:46:08 -08:00
Kubernetes Prow Robot
f47fbbfd32
Merge pull request #74131 from rojkov/kubeadm-refactor-SessionIsInteractive 
kubeadm: unhide the logic for non-interactiveness
 2019-02-15 14:05:30 -08:00
Kubernetes Prow Robot
fbee96d733
Merge pull request #73699 from pivotal-k8s/doc-links 
Update deprecated and broken links
 2019-02-15 14:05:09 -08:00
Kubernetes Prow Robot
256106e5d1
Merge pull request #74053 from SataQiu/fix-golint-20190214 
Fix golint failures on cmd/kubeadm/app/util/config
 2019-02-15 12:43:45 -08:00
Kubernetes Prow Robot
07da603b59
Merge pull request #74054 from vanduc95/cleanup-kubeadm-20190214 
kubeadm cleanup: master -> control-plane (cont.1)
 2019-02-15 07:53:15 -08:00
Marek Counts
160ed26c20 autogen files to support new project structure. 2019-02-15 10:29:31 -05:00
Marek Counts
7744f90830 Moved flag and globalflag 
Moved all flag code from `staging/src/k8s.io/apiserver/pkg/util/[flag|globalflag]` to `component-base/cli/[flag|globalflag]` except for the term function because of unwanted dependencies.
 2019-02-15 10:28:13 -05:00
Ben Moss
34ac4d9ee9 Update deprecated links 2019-02-15 09:13:07 -05:00
Dmitry Rozhkov
339a9c1c1b kubeadm: unhide the logic for non-interactiveness 
Currently we maintain the state of the mode of interactiveness
by updating flags.nonInteractiveMode even if the flag hasn't been
set by the user.

Since the computation of the mode is done only once it's easier
and less error prone to calculate the mode in the function
sessionIsInteractive() without mutating any flags.
 2019-02-15 14:37:27 +02:00
Kubernetes Prow Robot
808f2cf0ef
Merge pull request #72525 from justinsb/owners_should_not_be_executable 
Remove executable file permission from OWNERS files
 2019-02-14 23:55:45 -08:00
Kubernetes Prow Robot
b6ca168911
Merge pull request #74072 from bart0sh/PR0061-kubeadm-fix-failed-to-load-admin-kubeconfig 
kubeadm: fix kubeadm reset logic
 2019-02-14 17:05:41 -08:00
vanduc95
46247b2c93 kubeadm cleanup: master -> control-plane (cont.) 2019-02-15 06:49:31 +07:00
Kubernetes Prow Robot
08d0522730
Merge pull request #73844 from rojkov/kubeadm-restructure-upgradeVariables 
kubeadm: restructure upgradeVariables
 2019-02-14 07:25:36 -08:00
Ed Bartosh
7a8de82dfd kubeadm: fix kubeadm reset logic 
If /etc/kubeadm/amdin.conf doesn't exist kubeadm reset fails
with the error:
    failed to load admin kubeconfig: open /root/.kube/config: no such file or directory

Fixed by properly checking if file exists before using it.
 2019-02-14 12:57:25 +02:00
Rostislav M. Georgiev
f73ac0da3e kubeadm: Replace MigrateOldConfigFromFile 
MigrateOldConfigFromFile is a function, whose purpose is to migrate one config
into another. It is working OK for now, but it has some issues:

- It is incredibly inefficient. It can reload and re-parse a single config file
  for up to 3 times.

- Because of the reloads, it has to take a file containing the configuration
  (not a byte slice as most of the rest config functions). However, it returns
  the migrated config in a byte slice (rather asymmetric from the input
  method).

- Due to the above points it's difficult to implement a proper interface for
  deprecated kubeadm config versions.

To fix the issues of MigrateOldConfigFromFile, the following is done:

- Re-implement the function by removing the calls to file loading package
  public APIs and replacing them with newly extracted package private APIs that
  do the job with pre-provided input data in the form of
  map[GroupVersionKind][]byte.

- Take a byte slice of the input configuration as an argument. This makes the
  function input symmetric to its output. Also, it's now renamed to
  MigrateOldConfig to represent the change from config file path as an input
  to byte slice.

- As a bonus (actually forgotten from a previous change) BytesToInternalConfig
  is renamed to the more descriptive BytesToInitConfiguration.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-02-14 11:52:33 +02:00
Dr. Stefan Schimanski
af17cff6b0 kube-aggregator: rename New{Auto -> CRD}RegistrationController 2019-02-14 10:21:13 +01:00
Kubernetes Prow Robot
30c7df5cd8
Merge pull request #73987 from vanduc95/cleanup-kubeadm-20190213 
kubeadm cleanup: master -> control-plane
 2019-02-13 23:07:11 -08:00
Kubernetes Prow Robot
d8f0146138
Merge pull request #72214 from caesarxuchao/move-discovery 
Move cached discovery clients to their own packages
 2019-02-13 23:07:00 -08:00
Kubernetes Prow Robot
d01b01beb2
Merge pull request #74032 from tedyu/master 
Use Set to check whether flag name is allowed flag
 2019-02-13 20:33:17 -08:00
Kubernetes Prow Robot
5b600c5ce3
Merge pull request #73988 from SataQiu/kubeadm-cleanup-20190213 
kubeadm cleanup: master -> control-plane :)
 2019-02-13 20:32:57 -08:00
SataQiu
19c7f4cb0b fix golint failures on cmd/kubeadm/app/util/config 2019-02-14 12:11:24 +08:00
vanduc95
0e8941f7ec kubeadm cleanup: master -> control-plane 2019-02-14 09:18:42 +07:00
Kubernetes Prow Robot
888ff4097a
Merge pull request #73651 from RobertKrawitz/node_pids_limit 
Support total process ID limiting for nodes
 2019-02-13 17:31:18 -08:00
Ted Yu
71134a0d05 Use Set to check whether flag name is allowed flag 
Signed-off-by: Ted Yu <yute@vmware.com>
 2019-02-13 13:01:21 -08:00
Kubernetes Prow Robot
07428f7e5d
Merge pull request #73992 from SataQiu/golint-fix-20190213 
Fix golint failures on cmd/kubeadm/app
 2019-02-13 12:16:20 -08:00
Robert Krawitz
2597a1d97e Implement SupportNodePidsLimit, hand-tested 2019-02-13 14:56:17 -05:00
Kubernetes Prow Robot
a20c186d80
Merge pull request #73942 from rumshenoy/cleanup_constants 
Move all constants to a single `const (`
 2019-02-13 10:59:53 -08:00
Kubernetes Prow Robot
2bfbbc3141
Merge pull request #73998 from yagonobre/fix-mixed-args 
Allow the usage of --kubeconfig-dir and --config flags on kubeadm init
 2019-02-13 09:45:28 -08:00
SataQiu
7edea2b77f kubeadm cleanup: master -> control-plane 2019-02-13 23:13:31 +08:00
AdamDang
6e7132e9db
Fix the klog.Errorf message 
health server->healthz server
 2019-02-13 17:05:24 +08:00
Yago Nobre
277dfbbdeb Add --kubeconfig-dir to validate mixed arguments whitelist, and refactor ValidateMixedArguments 2019-02-13 04:06:26 -02:00
SataQiu
a957c83181 fix golint failures on cmd/kubeadm/app 2019-02-13 12:02:28 +08:00
Kubernetes Prow Robot
29403174fb
Merge pull request #73805 from caesarxuchao/resource-size-limit 
Adding a limit on the size of request body the apiserver will decode for write operations
 2019-02-12 15:10:57 -08:00
Chao Xu
1f2e2e61cf generated 2019-02-12 15:04:57 -08:00
Kubernetes Prow Robot
2981fb7a01
Merge pull request #73950 from SataQiu/cleanup-kubeadm-20190212 
kubeadm cleanup: master -> control-plane
 2019-02-12 12:40:11 -08:00
Kubernetes Prow Robot
51f5164f89
Merge pull request #73945 from neolit123/kubeadm-tests-non-linux 
kubeadm: remove nodefs.inodesFree test defaulting on non-Linux
 2019-02-12 12:40:01 -08:00
Chao Xu
3f21ca029a changing imports 2019-02-12 10:06:04 -08:00
Ramya Shenoy
26392c0acd Move all constants to a single const ( 
[#1400]
 2019-02-12 09:52:11 -08:00
Rafael Fernández López
30dc43ff86
kubeadm: set priority class name to system-cluster-critical for all master components 
Remove the deprecated `scheduler.alpha.kubernetes.io/critical-pod` pod annotation and use
the `priorityClassName` first class attribute instead, setting all master components to
`system-cluster-critical`.
 2019-02-12 17:50:36 +01:00
Lubomir I. Ivanov
19e89c32f5 kubeadm: remove nodefs.inodesFree test defaulting on non-Linux 
Add test files that exclude the field in question
under KubeletConfiguration -> evictionHard for non-Linux.

Add runtime abstraction for the test files in initconfiguration_tests.go
 2019-02-12 14:19:47 +02:00
SataQiu
ab9709ff70 kubeadm cleanup: master -> control-plane 2019-02-12 17:31:35 +08:00
Rostislav M. Georgiev
0dfc1d6ded kubeadm: Don't dump backtrace on reset 
The current code logs an error and full blown backtrace if we fail to remove
the containers upon reset. This creates unneeded, huge and rather scary log
message. Fix that by leaving just the error message.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-02-12 11:24:11 +02:00
Kubernetes Prow Robot
a1539747db
Merge pull request #73926 from alculquicondor/fix/kubelet-app-lint 
Fix cmd/kubelet/app lint issues
 2019-02-12 00:19:06 -08:00
Kubernetes Prow Robot
cdd235b4fb
Merge pull request #73526 from AdamDang/patch-22 
Update postprocessing_test.go
 2019-02-12 00:18:51 -08:00
Kubernetes Prow Robot
aa00afe231
Merge pull request #73649 from ojmhetar/coredns-priorityclass 
Add priority class to CoreDNS pods
 2019-02-11 22:55:45 -08:00
Kubernetes Prow Robot
73dc138cae
Merge pull request #73256 from deitch/doc-kubelet-nodename 
Update kubelet overview help doc
 2019-02-11 19:57:56 -08:00
Kubernetes Prow Robot
0ae81c986a
Merge pull request #67678 from caesarxuchao/remove-storage-versions-flag 
Remove storage versions flag
 2019-02-11 17:40:27 -08:00
Davanum Srinivas
1d430a4a73
Remove unnecessary prefixes from various .import-restrictions files 
Found using script:
https://gist.github.com/dims/384dea60754042f61d79233603034038

Just run using:
`find . -name .import-restrictions | xargs python ~/junk/sanitize-import-boss.py`

The removed entries are either packages that got moved/renamed/deleted
but are still not cleaned up from .import-restrictions files.

Change-Id: I92c400f74e6f012cc75539311ed4de280e25e918
 2019-02-11 16:47:28 -05:00
Chao Xu
27166e48b8 Loosing the request body size limit to 100MB to account for the size 
ratio between json and protobuf.
 2019-02-11 11:32:11 -08:00
Aldo Culquicondor
17a635448a Fix cmd/kubelet/app lint issues 2019-02-11 13:18:25 -05:00
Rostislav M. Georgiev
51197e4393 kubeadm: Refactor InitConfiguration init APIs 
Currently ConfigFileAndDefaultsToInternalConfig and
FetchConfigFromFileOrCluster are used to default and load InitConfiguration
from file or cluster. These two APIs do a couple of completely separate things
depending on how they were invoked. In the case of

ConfigFileAndDefaultsToInternalConfig, an InitConfiguration could be either
defaulted with external override parameters, or loaded from file.
With FetchConfigFromFileOrCluster an InitConfiguration is either loaded from
file or from the config map in the cluster.

The two share both some functionality, but not enough code. They are also quite
difficult to use and sometimes even error prone.

To solve the issues, the following steps were taken:

- Introduce DefaultedInitConfiguration which returns defaulted version agnostic
  InitConfiguration. The function takes InitConfiguration for overriding the
  defaults.

- Introduce LoadInitConfigurationFromFile, which loads, converts, validates and
  defaults an InitConfiguration from file.

- Introduce FetchInitConfigurationFromCluster that fetches InitConfiguration
  from the config map.

- Reduce, when possible, the usage of ConfigFileAndDefaultsToInternalConfig by
  replacing it with DefaultedInitConfiguration or LoadInitConfigurationFromFile
  invocations.

- Replace all usages of FetchConfigFromFileOrCluster with calls to
  LoadInitConfigurationFromFile or FetchInitConfigurationFromCluster.

- Delete FetchConfigFromFileOrCluster as it's no longer used.

- Rename ConfigFileAndDefaultsToInternalConfig to
  LoadOrDefaultInitConfiguration in order to better describe what the function
  is actually doing.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-02-11 14:45:34 +02:00
PingWang
d8e3d11c8b Fix function comment to consistent with its name 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2019-02-11 10:51:35 +08:00
Kubernetes Prow Robot
a1cc48bf59
Merge pull request #73837 from neolit123/preflight-docker-cgroup 
kubeadm: add a preflight check for Docker and cgroup driver
 2019-02-09 08:45:11 -08:00
Kubernetes Prow Robot
40a4c1f723
Merge pull request #73854 from RajatVaryani/master 
Fix linting in cmd/kubemark package
 2019-02-08 22:00:24 -08:00
Lubomir I. Ivanov
3b3b79fe2c autogenerated bazel 2019-02-08 19:31:22 +02:00
Lubomir I. Ivanov
1d032c40d3 kubeadm: add a preflight check for Docker and cgroup driver 
systemd is the recommended driver as per the setup of running
the kubelet using systemd as the init system. Add a preflight
check that throws a warning if this isn't the case.
 2019-02-08 19:31:22 +02:00
Kubernetes Prow Robot
b50c643be0
Merge pull request #73540 from rlenferink/patch-5 
Updated OWNERS files to include link to docs
 2019-02-08 09:05:56 -08:00
Rajat Varyani
17fd66946b Fix linting in cmd/kubemark package 2019-02-08 21:30:34 +05:30
Kubernetes Prow Robot
395e4c05ba
Merge pull request #73745 from rosti/refactor-JoinConfigFileAndDefaultsToInternalConfig 
kubeadm: refactor JoinConfigFileAndDefaultsToInternalConfig
 2019-02-08 06:54:16 -08:00
Rostislav M. Georgiev
09f753a94c kubeadm: refactor JoinConfigFileAndDefaultsToInternalConfig 
Currently JoinConfigFileAndDefaultsToInternalConfig is doing a couple of
different things depending on its parameters. It:

- loads a versioned JoinConfiguration from an YAML file.
- returns defaulted JoinConfiguration allowing for some overrides.

In order to make code more manageable, the following steps are taken:

- Introduce LoadJoinConfigurationFromFile, which loads a versioned
  JoinConfiguration from an YAML file, defaults it (both dynamically and
  statically), converts it to internal JoinConfiguration and validates it.

- Introduce DefaultedJoinConfiguration, which returns defaulted (both
  dynamically and statically) and verified internal JoinConfiguration.
  The possibility of overwriting defaults via versioned JoinConfiguration is
  retained.

- Re-implement JoinConfigFileAndDefaultsToInternalConfig to use
  LoadJoinConfigurationFromFile and DefaultedJoinConfiguration.

- Replace some calls to JoinConfigFileAndDefaultsToInternalConfig with calls to
  either LoadJoinConfigurationFromFile or DefaultedJoinConfiguration where
  appropriate.

- Rename JoinConfigFileAndDefaultsToInternalConfig to the more appropriate name
  LoadOrDefaultJoinConfiguration.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-02-08 14:00:02 +02:00
Dmitry Rozhkov
6ac76f9859 kubeadm: restructure upgradeVariables 2019-02-08 11:45:33 +02:00
Kubernetes Prow Robot
eac19a3ab9
Merge pull request #73616 from dims/move-part-of-kubelet-apis-well-known-lables 
move pkg/kubelet/apis/well_known_labels.go to staging/src/k8s.io/api/core/v1/
 2019-02-07 19:44:34 -08:00
Kubernetes Prow Robot
7d1dc61920
Merge pull request #73678 from ereslibre/do-not-create-etcd-datadir-dryrun 
kubeadm: do not create etcd datastore if we are in dryrun mode
 2019-02-07 15:49:53 -08:00
Kubernetes Prow Robot
920045652d
Merge pull request #73816 from mkumatag/fix_tmpdir 
Use ioutil.TempDir for temporary dir creation
 2019-02-07 13:33:19 -08:00
Chao Xu
b971b12d3c Adding a limit on the maximum bytes accepted to be decoded in a resource 
write request.
 2019-02-07 11:07:02 -08:00
Kubernetes Prow Robot
5b6a23f3af
Merge pull request #73798 from MalloZup/remove-wrong-string 
kubeadm: improve ux on infoMsg kubeconfig
 2019-02-07 10:20:34 -08:00
Manjunath A Kumatagi
782409255a Use ioutil.TempDir for temporary dir creating 2019-02-07 12:27:19 -05:00
Ojas M
ebb5b9436f Add priorityClassName to kubeadm kubedns manifest 2019-02-07 09:21:05 -08:00
Kubernetes Prow Robot
1b26097e1e
Merge pull request #73030 from tnozicka/fix-csr-list-watch 
Switch WaitForCertificate to informers to avoid broken watches
 2019-02-07 01:45:33 -08:00
Kubernetes Prow Robot
b00b5d4ac0
Merge pull request #73713 from caesarxuchao/bump-json-patch-again 
Importing the latest json patch and set the accumulated copy size limit
 2019-02-06 21:13:45 -08:00
Ojas M
b41bafac7c Add priorityClassName to kubeadm coredns manifest 2019-02-06 15:23:37 -08:00
dmaiocchi
83b808b3b0 kubeadm: improve ux on infoMsg kubeconfig 2019-02-06 23:27:12 +01:00
Chao Xu
f001f9e1db Set the maximum size increase the copy operations in a json patch can cause 2019-02-06 14:15:20 -08:00
Rafael Fernández López
981bf1930c
kubeadm: do not create etcd datastore if we are in dryrun mode 
This allows for kubeadm tests to pass when run with an unprivileged
user.
 2019-02-06 22:59:19 +01:00
Tomas Nozicka
a7588723f7 Switch WaitForCertificate to informers to avoid broken watches 2019-02-06 22:27:00 +01:00
Yago Nobre
e7a8ac1099
kubeadm: graduate kubelet start join phase 2019-02-06 01:35:28 -02:00
ksubrmnn
164f79e2d4 Update config tests 2019-02-05 10:39:23 -08:00
ksubrmnn
a47e99e37a Add Windows flags for KubeProxyConfiguration 2019-02-05 10:39:23 -08:00
Davanum Srinivas
b975573385
move pkg/kubelet/apis/well_known_labels.go to staging/src/k8s.io/api/core/v1/ 
Co-Authored-By: Weibin Lin <linweibin1@huawei.com>

Change-Id: I163b2f2833e6b8767f72e2c815dcacd0f4e504ea
 2019-02-05 13:39:07 -05:00
Kubernetes Prow Robot
667584cec0
Merge pull request #73728 from neolit123/kubeadm-remove-experimental-config 
kubeadm: remove warning about config usage
 2019-02-05 06:47:39 -08:00
Kubernetes Prow Robot
28fefba116
Merge pull request #73725 from fabriziopandini/kubeadm-organize-phases 
kubeadm: organize phases cmd
 2019-02-05 03:18:42 -08:00
Kubernetes Prow Robot
1e78fec9b4
Merge pull request #73718 from fabriziopandini/remove-kubeadm-alpha-preflight 
kubeadm: Remove kubeadm alpha preflight subcommand
 2019-02-04 18:28:36 -08:00
Lubomir I. Ivanov
b9816b1231 kubeadm: remove warning about config usage 2019-02-05 03:06:25 +02:00
Kubernetes Prow Robot
6a149864fb
Merge pull request #73285 from tallclair/typed-runtimeclass 
Migrate RuntimeClass support to the generated typed client
 2019-02-04 16:13:30 -08:00
fabriziopandini
64a7c0c7a5 autogenerated 2019-02-05 00:36:24 +01:00
fabriziopandini
f38217c75b kubeadm-organize-phases 2019-02-05 00:36:12 +01:00
Kubernetes Prow Robot
7e086471c4
Merge pull request #73663 from danielqsj/rflag 
remove flag repair-malformed-updates
 2019-02-04 14:33:31 -08:00
Roy Lenferink
b43c04452f Updated OWNERS files to include link to docs 2019-02-04 22:33:12 +01:00
fabriziopandini
7333cc79d6 remove-kubeadm-alpha-preflight 2019-02-04 21:57:55 +01:00
Kubernetes Prow Robot
9d6ebf6c78
Merge pull request #73467 from ashishranjan738/newpackage 
Refactor to use k8s.io/utils/net/ package instead of kubernetes/pkg/util/net/sets
 2019-02-04 11:43:14 -08:00
Kubernetes Prow Robot
664aafbf5c
Merge pull request #73337 from yuwenma/crashloop-controllers 
[Mitigate KCM CrashLooping] Add unittests for controllers' Init func
 2019-02-04 09:36:20 -08:00
Rafael Fernández López
031ce12dbd
kubeadm: graduate control plane prepare phase 2019-02-04 09:58:06 +01:00
Ashish Ranjan
7be223e798 Refactor to use k8s.io/utils/net/ package instead of kubernetes/pkg/util/net/sets 
Signed-off-by: Ashish Ranjan <ashishranjan738@gmail.com>
 2019-02-04 10:34:53 +05:30
danielqsj
2b8898b95e remove flag repair-malformed-updates 2019-02-02 20:54:35 +08:00