github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
97,283 Commits 1 Branch 31 Tags
2a13cbede8dd4328e20eb99084d0a4076e288fb8
Commit Graph

9810 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
40ef0ad6e9 Merge pull request #95002 from p0lyn0mial/upstream-supress-err-conn-killed 
stop logging killing connection/stream because serving request timed out and response had been started
 2020-11-10 12:37:51 -08:00
Lubomir I. Ivanov
fb7ddf88e9 kubeadm: mark the "master" label/taint as deprecated 
- Mark the "node-role.kubernetes.io/master" key for labels
and taints as deprecated.
- During "kubeadm init/join" apply the label
"node-role.kubernetes.io/control-plane" to new control-plane nodes,
next to the existing "node-role.kubernetes.io/master" label.
- During "kubeadm upgrade apply", find all Nodes with the "master"
label and also apply the "control-plane" label to them
(if they don't have it).
- During upgrade health-checks collect Nodes labeled both "master"
and "control-plane".
- Rename the constants.ControlPlane{Taint|Toleraton} to
constants.OldControlPlane{Taint|Toleraton} to manage the transition.
- Mark constants.OldControlPlane{{Taint|Toleraton} as deprecated.
- Use constants.OldControlPlane{{Taint|Toleraton} instead of
constants.ControlPlane{Taint|Toleraton} everywhere.
- Introduce constants.ControlPlane{Taint|Toleraton}.
- Add constants.ControlPlaneToleraton to the kube-dns / CoreDNS
Deployments to make them anticipate the introduction
of the "node-role.kubernetes.io/control-plane:NoSchedule"
taint (constants.ControlPlaneTaint) on kubeadm control-plane Nodes.
 2020-11-10 22:10:13 +02:00
Andrew Sy Kim
b1e0decce1 move service controller config to k8s.io/cloud-provider/controllers/service/config 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-11-10 14:59:44 -05:00
Andrew Sy Kim
51441fd052 kubelet: support alpha credential provider exec plugins 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2020-11-10 13:44:06 -05:00
pigletfly
19a36d4b9a Remove duplicate import 2020-11-10 19:11:46 +08:00
Kubernetes Prow Robot
4261200724 Merge pull request #93873 from roycaihw/storage-version/handler 
Apiserver updates storageversions API and filters certain write requests during bootstrap
 2020-11-09 17:30:41 -08:00
Kubernetes Prow Robot
995e531a63 Merge pull request #93764 from cici37/ccmwrap 
Adding flexibility to CCM
 2020-11-09 13:44:28 -08:00
Tim Allclair
a439bc5572 Remove --redirect-container-streaming functionality (#95935) 
* Remove --redirect-container-streaming functionality

* Update bazel
 2020-11-09 11:50:11 -08:00
Kubernetes Prow Robot
10221a8dac Merge pull request #94643 from lonng/simplify-code 
Avoid unnecessary calls if other error occurred
 2020-11-09 11:49:57 -08:00
Lukasz Szaszkiewicz
057986e32c stops puting a stacktrace of aborted requests in the logs 
Aborted requests are the ones that were disrupted with http.ErrAbortHandler.
For example, the timeout handler will panic with http.ErrAbortHandler when a response to the client has been already sent
and the timeout elapsed.

Additionally, a new metric requestAbortsTotal was defined to count aborted requests. The new metric allows for aggregation for each group, version, verb, resource, subresource and scope.
 2020-11-09 09:23:40 +01:00
Haowei Cai
1c2d446648 require APIServerIdentity to be enabled to run StorageVersionAPI 
without APIServerIdentity enabled, stale apiserver leases won't be GC'ed
and the same for stale storage version entries. In that case the storage
migrator won't operate correctly without manual intervention.
 2020-11-08 19:06:30 -08:00
Haowei Cai
b5b93004b5 generated 2020-11-08 18:53:40 -08:00
Chao Xu
fa1805cc5c Add an integration test. 
To make sure that the storage version filter can block certain requests until
the storage version updates are completed, and that the apiserver works
properly after the storage version updates are done.
 2020-11-08 18:53:40 -08:00
Chao Xu
7218978716 Add a generic filter that blocks certain write requests before 
StorageVersions are updated during apiserver bootstrap.

Also add a poststarthook to the aggregator which updates the
StorageVersions via the storageversion.Manager
 2020-11-08 18:53:40 -08:00
Kubernetes Prow Robot
2570a9d94c Merge pull request #96306 from SataQiu/small-fix-20201106 
kubeadm: fix the lint failure where return value is not checked
 2020-11-07 11:43:37 -08:00
Kubernetes Prow Robot
281866b35c Merge pull request #95533 from roycaihw/apiserver-lease-controller 
Add kube-apiserver lease controller
 2020-11-06 18:09:37 -08:00
Haowei Cai
3761a00e5b add kube-apiserver-lease-controller poststart hook 2020-11-06 13:33:08 -08:00
Kubernetes Prow Robot
b1b627072a Merge pull request #96217 from p0lyn0mial/delegated-authn-webhook-token-timeout 
DelegatingAuthenticationOptions TokenReview client timeout
 2020-11-06 11:29:16 -08:00
SataQiu
50d0a40155 kubeadm: fix the lint failure where return value is not checked 
Signed-off-by: SataQiu <1527062125@qq.com>
 2020-11-06 20:53:58 +08:00
Maciej Szulik
523854a0e2 Generated changes 2020-11-06 12:04:39 +01:00
Maciej Szulik
9b8247e5dd Move the remaining kubectl bits to k8s.io/kubectl 2020-11-06 12:04:39 +01:00
Maciej Szulik
2e74df97a4 Introduce kubectl-convert plugin 2020-11-06 12:04:36 +01:00
cici37
895a0a8d5e Adding config extension to CCM. 2020-11-06 02:42:44 -08:00
Kubernetes Prow Robot
8d6829fe1e Merge pull request #95896 from zshihang/flag 
make flags of TokenRequest required
 2020-11-05 18:36:50 -08:00
Shihang Zhang
a5021a4ddf make flags of TokenRequest required 2020-11-05 10:40:56 -08:00
Shihang Zhang
4c593b268a default service-account-extend-token-expiration to true 2020-11-05 09:07:01 -08:00
Kubernetes Prow Robot
e0a51c9e6b Merge pull request #93244 from Sh4d1/etcd_health_timeout 
Allow configuration of etcd healthcheck timeout
 2020-11-05 01:06:53 -08:00
Shihang Zhang
d40f0c43c4 separate RootCAConfigMap from BoundServiceAccountTokenVolume 2020-11-04 17:10:39 -08:00
Lukasz Szaszkiewicz
7340c3498a DelegatingAuthenticationOptions: allows for setting a timeout for the TokenReview client that is used by for the webhook authenticator 
Previously no timeout was set. Requests without explicit timeout might potentially hang forever and lead to starvation of the application.
When no timeout was specified a default one will be applied.
 2020-11-04 13:40:33 +01:00
Kubernetes Prow Robot
acc3910964 Merge pull request #95991 from serathius/datapolicy-kubeadm 
Add datapolicy tags to cmd/kubeadm directory
 2020-11-03 22:50:17 -08:00
Kubernetes Prow Robot
2ee1003430 Merge pull request #96051 from ravisantoshgudimetla/add-priority-flag 
[kubelet] Allow priority to be set for kubelet process on Windows
 2020-11-02 13:41:52 -08:00
ravisantoshgudimetla
784098f8b6 Build files 2020-11-03 01:19:00 +05:30
ravisantoshgudimetla
f4c2dcd030 [kubelet] Allow priority to be set for kubelet process on Windows 2020-11-03 01:18:59 +05:30
Kubernetes Prow Robot
d16112f76c Merge pull request #96052 from wojtek-t/fix_watchcache_size 
Disable watchcache for events
 2020-11-02 07:30:53 -08:00
Abu Kashem
2f812c3194 set webhook retry backoff parameters for kubelet 2020-11-01 10:22:21 -05:00
Abu Kashem
53a1307f68 make backoff parameters configurable for webhook 
Currently webhook retry backoff parameters are hard coded, we want
to have the ability to configure the backoff parameters for webhook
retry logic.
 2020-11-01 10:18:25 -05:00
wojtekt
5a8f94cb30 Disable watchcache for events 2020-10-31 19:51:33 +01:00
Kubernetes Prow Robot
bf67247124 Merge pull request #93258 from zshihang/token 
mv TokenRequest and TokenRequestProjection to GA
 2020-10-30 16:36:51 -07:00
Kubernetes Prow Robot
4b65f70652 Merge pull request #95740 from cici37/moveCCM 
Move cloud-controller-manager to staging k8s.io/cloud-provider
 2020-10-30 13:48:51 -07:00
Marek Siarkowicz
8644f3ff83 Add datapolicy tags to cmd/kubeadm directory 2020-10-30 18:32:17 +01:00
Kubernetes Prow Robot
f2ed1b5580 Merge pull request #96016 from cici37/informer 
Move informer_factory to staging
 2020-10-30 00:44:06 -07:00
Kubernetes Prow Robot
d0bee69fc9 Merge pull request #94636 from hprateek43/cpu_threads_parameter 
Added config parameter for CPU threads
 2020-10-29 21:04:05 -07:00
cici37
9465d95ea6 Move CCM to staging k8s.io/cloud-provider 2020-10-29 20:50:23 -07:00
Shihang Zhang
ff641f6eb2 mv TokenRequest and TokenRequestProjection to GA 2020-10-29 20:47:01 -07:00
cici37
a91a2cdad6 Move informer_factory to staging 2020-10-29 12:20:33 -07:00
Kubernetes Prow Robot
1968e96165 Merge pull request #95856 from knight42/refactor/disable-apiserver-insecure-port 
refactor(apiserver): disable insecure port
 2020-10-29 10:47:58 -07:00
knight42
cfc2b330a7 refactor(apiserver): ignore the insecure flags 
Leave the insecure flags intact but stop serving on insecure port.
 2020-10-29 23:20:17 +08:00
Harsh Singh
1763688d71 Added config parameter for CPU threads 2020-10-29 12:16:10 +05:30
Kubernetes Prow Robot
8422116039 Merge pull request #95630 from masap/unit_test1 
test: Add service cluster IP range unit test
 2020-10-27 14:25:57 -07:00
Kubernetes Prow Robot
4df8d97af0 Merge pull request #95725 from p0lyn0mial/delegated-authz-sar-timeout 
sets explicit timeout for SubjectAccessReview client
 2020-10-27 03:37:59 -07:00