Commit Graph

8825 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
eedfb6bc7a
Merge pull request #79223 from rosti/kubeadm-component-configs-versioned
kubeadm: component configs versioned
2019-11-12 15:38:11 -08:00
Kubernetes Prow Robot
ea2750eaa6
Merge pull request #84718 from yastij/remove-validators
remove system validators package from kubeadm and use k8s.io/system-validators
2019-11-12 11:50:53 -08:00
Kubernetes Prow Robot
94efa988f4
Merge pull request #84813 from deads2k/admission-feature-gates
remove global variable dependency from admission plugins
2019-11-12 10:23:14 -08:00
Kubernetes Prow Robot
36373b37fd
Merge pull request #84672 from hwdef/fix-staticcheck2
cmd:fix staticcheck warning
2019-11-12 09:06:06 -08:00
Kubernetes Prow Robot
681d22428b
Merge pull request #84768 from liggitt/delegated-authnz-v1
switch delegated authnz to v1 APIs
2019-11-12 04:48:35 -08:00
Yassine TIJANI
b9fe59c93e remove system validators package from kubeadm and use k8s.io/system-validators instead
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
2019-11-12 01:09:56 +01:00
Kubernetes Prow Robot
cf06a2efd6
Merge pull request #85095 from liggitt/protocol_errors
Plumb configured acceptContentType to client config
2019-11-11 14:46:58 -08:00
Kubernetes Prow Robot
e008523f76
Merge pull request #85092 from fabriziopandini/alpha-certs-skips-missing-certs
kubeadm: alpha certs should skip missing files
2019-11-11 14:46:47 -08:00
Jordan Liggitt
7349a824df generated 2019-11-11 17:19:12 -05:00
Jordan Liggitt
d54a70db5c Switch kubelet/aggregated API servers to use v1 subjectaccessreviews 2019-11-11 17:19:11 -05:00
Jordan Liggitt
5ef4fe959a Switch kubelet/aggregated API servers to use v1 tokenreviews 2019-11-11 17:19:10 -05:00
Kubernetes Prow Robot
fc0bf06983
Merge pull request #85044 from neolit123/1.17-deprecate-cri-socket-upgrade
kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply"
2019-11-11 12:56:37 -08:00
Jordan Liggitt
1cac7457a2 Plumb configured acceptContentType to client config 2019-11-11 10:54:38 -05:00
Rostislav M. Georgiev
5bb80694ec kubeadm: Deprecate hyperkube use
As the hyperkube image is itself deprecated and moved out of tree, its use with
kubeadm gets deprecated too. Hence, deprecation messages will be printed when
it is used.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2019-11-11 17:03:25 +02:00
fabriziopandini
7d986a982c alpha certs skip missing files 2019-11-11 15:48:49 +01:00
Kubernetes Prow Robot
939e1e6488
Merge pull request #85043 from neolit123/1.17-enable-secure-ports
kubeadm: use the secure ports for kube-scheduler and kcm health checks
2019-11-10 13:27:01 -08:00
Lubomir I. Ivanov
ebfdb25c05 kubeadm: always use a short timeout for clientset creation
ToClientSet() in kubeconfig.go creates a clientset from
the passed Config object (kubeconfig). For IP addresses
that are not reachable e.g. Get() calls for ConfigMaps
can block for a few minutes with the default timeout.

Modify the timeout to a shorter value by passing an override.
2019-11-10 05:39:38 +02:00
Kubernetes Prow Robot
01676976c9
Merge pull request #85017 from LouisJackman/remove-goroutine-leak-in-kubeadm-wait
Remove potential Goroutine leak in kubeadm wait.go
2019-11-09 14:03:40 -08:00
Lubomir I. Ivanov
efc0ec5ffe kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply"
Remove the flag "--cri-socket" from the "kubeadm upgrade apply"
command. It has been marked as deprecated since 1.14.
2019-11-09 23:34:56 +02:00
Lubomir I. Ivanov
23ba857b50 kubeadm: use the secure ports for kube-scheduler and kcm health checks
The insecure ports were deprecated in 1.12 and 1.13.
2019-11-09 23:21:39 +02:00
Kubernetes Prow Robot
1ca74c7991
Merge pull request #85030 from ahg-g/ahg-nodestoscore
Set default percentageOfNodesToScore in kube-scheduler back to "adaptive"
2019-11-09 11:11:39 -08:00
Kubernetes Prow Robot
9920b733ba
Merge pull request #85024 from neolit123/1.17-fix-etcd-node-upgrade
kubeadm: fix skipped etcd upgrade on secondary CP nodes
2019-11-09 07:13:39 -08:00
Abdullah Gharaibeh
9fb380ceff set default percentageOfNodesToScore in kube-scheduler back to 0 (maning adaptive) 2019-11-09 06:34:06 -05:00
Kubernetes Prow Robot
49a9b6cadf
Merge pull request #84727 from danwinship/ipv6-bind
fix apiserver to advertise IPv6 endpoints if bound to IPv6
2019-11-08 18:44:24 -08:00
Lubomir I. Ivanov
cc0320d41a kubeadm: fix skipped etcd upgrade on secondary cp nodes 2019-11-09 03:59:59 +02:00
Kubernetes Prow Robot
3c7706bf9c
Merge pull request #84591 from TheLastProject/feature/print-join-as-admin-command
Let token create help with joining a master
2019-11-08 13:48:43 -08:00
Louis Jackman
62e314a556
Remove potential Goroutine leak in kubeadm wait.go
There are two writes yet only one read on a non-buffered channel that is
created locally and not passed anywhere else.

Therefore, it could leak one of its two spawned Goroutines if either:
* The provided `f` takes longer than an erroneous result from
  `waiter.WaitForHealthyKubelet`, or;
* The provided `f` completes before an erroneous result from
  `waiter.WaitForHealthyKubelet`.

The fix is to add a one-element buffer so that the channel write happens
for the second Goroutine in these cases, allowing it to finish and freeing
references to the now-buffered channel, letting it to be GC'd.
2019-11-08 21:05:19 +00:00
David Eads
675c2fb924 add featuregate inspection as admission plugin initializer 2019-11-08 13:07:40 -05:00
Kubernetes Prow Robot
ab1b374dd9
Merge pull request #84523 from rajansandeep/skipmigration
Retain CoreDNS corefile when migration fails in kubeadm
2019-11-08 09:00:29 -08:00
Kubernetes Prow Robot
ae15368355
Merge pull request #84351 from wojtek-t/promote_node_lease_to_GA
Promote node lease to GA
2019-11-08 09:00:15 -08:00
Sylvia van Os
dea6d6491a Add --certificate-key flag to token create 2019-11-07 21:27:31 +01:00
Kubernetes Prow Robot
84fcf126c1
Merge pull request #84662 from dims/script-based-hyperkube-to-avoid-dependencies
Script based hyperkube to avoid dependencies
2019-11-07 09:04:50 -08:00
Kubernetes Prow Robot
a5fe905be4
Merge pull request #82705 from deads2k/agg-authn-publish
use controller to publish cluster authentication info
2019-11-07 09:03:10 -08:00
Kubernetes Prow Robot
c843d9614c
Merge pull request #84888 from neolit123/1.17-fix-kube-proxy-env-vars
kubeadm: fix an issue with the kube-proxy container env. variables
2019-11-07 04:37:09 -08:00
Kubernetes Prow Robot
73b2c82b28
Merge pull request #83592 from jianzzha/opt-reserved-cpus
added --reserved-cpus kubelet command option
2019-11-06 22:14:42 -08:00
Lubomir I. Ivanov
0b4e5ee3b8 kubeadm: fix an issue with the kube-proxy container env. variables
3993c42431 introduced the propagation of *_PROXY
host env. variables to the kube-proxy container.

To allow The NODE_NAME variable to be properly updated by the downward
API make, sure we preserve the existing variables when adding *_PROXY.
2019-11-07 03:05:59 +02:00
Jordan Liggitt
297570e06a hack/update-vendor.sh 2019-11-06 17:42:34 -05:00
Kubernetes Prow Robot
e6287b05c0
Merge pull request #84812 from alculquicondor/fix/write-config
Write scheduler configuration from config file
2019-11-06 12:20:58 -08:00
Kubernetes Prow Robot
6ca4854ddf
Merge pull request #84774 from mm4tt/kubemark_owners
Add sig-scalability-approvers/reviewers as kubemark approvers/reviewers
2019-11-06 12:20:22 -08:00
Dan Winship
afa0b808f8 Fix apiserver to advertise IPv6 endpoints if bound to IPv6
Also rename utilnet.ChooseBindAddress() to ResolveBindAddress(), to
better describe its functionality.
2019-11-06 11:31:43 -05:00
Sandeep Rajan
16191db353 skip deployment update if migration fails 2019-11-06 10:55:54 -05:00
David Eads
be8af0de1b remove exist client hooks 2019-11-06 10:17:19 -05:00
David Eads
7351c86860 publish cluster authentication trust via controller 2019-11-06 10:17:19 -05:00
Davanum Srinivas
30965676f3
Drop cmd/hyperkube 2019-11-06 09:11:35 -05:00
Jianzhu Zhang
89dfd24483 added --reserved-cpus kubelet command option 2019-11-06 07:33:52 -05:00
Rostislav M. Georgiev
994df0d631 kubeadm: use versioned component configs
This change removes dependencies on the internal types of the kubelet and
kube-proxy component configs. Along with that defaulting and validation is
removed as well. kubeadm will display a warning, that it did not verify the
component config upon load.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2019-11-06 14:15:57 +02:00
Matt Matejczyk
14e731924a Add sig-scalability-approvers/reviewers as kubemark approvers/reviewers 2019-11-06 08:51:49 +01:00
Alex Wang
e85ebccb57 enable profiling by default in the scheduler 2019-11-06 15:25:35 +08:00
Kubernetes Prow Robot
6f08d42dec
Merge pull request #84815 from alculquicondor/fix/config-validation
Validate scheduler configuration from config file
2019-11-05 22:19:18 -08:00
Kubernetes Prow Robot
17874d6db3
Merge pull request #84781 from Gerry-Lee/UseTimeUtilInsteadOfTimeSub
Use time.Until instead of t.Sub(time.Now())
2019-11-05 22:18:43 -08:00