github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,361 Commits 1 Branch 31 Tags
32783f75684e0e514b15f79023ba31485be07d9e
Commit Graph

13725 Commits

Author SHA1 Message Date
Tim Allclair
32783f7568 PodSecurity: Initial webhook implementation 2021-07-09 17:04:29 -07:00
Kubernetes Prow Robot
a0d77e5763 Merge pull request #103617 from liggitt/sparse-test 
[test-only]PodSecurity: make integration tests run sparsely
 2021-07-09 14:38:54 -07:00
Kubernetes Prow Robot
60756214d8 Merge pull request #103533 from jiahuif/feature/leader-migration/to-beta 
KEP-2436 Leader Migration: to beta
 2021-07-09 12:15:00 -07:00
Kubernetes Prow Robot
87ee0c06fb Merge pull request #103527 from tkashem/apf-fix-virtual-time 
apf: include seats from queued requests when advancing virtual clock
 2021-07-09 12:14:53 -07:00
Jordan Liggitt
c2aaf0667f PodSecurity: make integration tests run sparsely 2021-07-09 14:19:35 -04:00
Kubernetes Prow Robot
3ccfe94563 Merge pull request #100101 from deads2k/mutated-options 
prevent mutation of deletion options during delete collection
 2021-07-09 07:36:53 -07:00
Kubernetes Prow Robot
edbb0b9549 Merge pull request #103590 from rphillips/revert-102998-apf-width-list 
Revert "apiserver: add callback to get notified of object count"
 2021-07-09 06:01:33 -07:00
Kubernetes Prow Robot
f6df5a6818 Merge pull request #103589 from SergeyKanzhelev/updateHelpText 
update the help text of KubeletConfig following the DynamicKubletConf…
 2021-07-09 06:01:25 -07:00
Kubernetes Prow Robot
ace5482c9f Merge pull request #103457 from codearky/fix-yaml-terminator-wcomment 
Add YAML separator validation and avoid silent ignoration
 2021-07-09 06:01:06 -07:00
Abu Kashem
a570008cbd apf: fix virtual clock 2021-07-09 08:22:12 -04:00
Indeed
b14c10ae30 create LeaderMigrationConfiguration v1beta1 2021-07-08 21:20:19 -07:00
Indeed
40b2155ddb promote ControllerManagerLeaderMigration to beta. 2021-07-08 21:20:19 -07:00
Francesco Romani
6dccad45b4 smtalign: add auto generated code 
Files generate after running `make generated_files`.

Co-authored-by: Swati Sehgal <swsehgal@redhat.com>
Signed-off-by: Francesco Romani <fromani@redhat.com>
 2021-07-08 23:14:59 +02:00
Swati Sehgal
cc76a756e4 smtalign: add cpu-manager-policy-options flag in Kubelet 
In this patch we enhance the kubelet configuration to support
cpuManagerPolicyOptions.

In order to introduce SMT-awareness in CPU Manager, we introduce a
new flag in Kubelet to allow the user to specify an additional flag
called `cpumanager-policy-options` to allow the user to modify the
behaviour of static policy to strictly guarantee allocation of whole
core.

Co-authored-by: Francesco Romani <fromani@redhat.com>
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2021-07-08 23:14:59 +02:00
Kubernetes Prow Robot
97d6e4a66a Merge pull request #103574 from liggitt/restore-long-printing 
Restore ability to print long strings
 2021-07-08 14:02:18 -07:00
Kubernetes Prow Robot
72283f1bf6 Merge pull request #103558 from liggitt/podsecurity-check-cleanup 
PodSecurity message/check/fixture cleanups
 2021-07-08 14:02:10 -07:00
Kubernetes Prow Robot
103212febc Merge pull request #103470 from nilo19/bug/cherry-pick-679 
fix: return empty VMAS name if using standalone VM
 2021-07-08 14:02:01 -07:00
Kubernetes Prow Robot
694d6cd2b9 Merge pull request #103216 from dashpole/etcd_client_tracing 
Add distributed tracing to the etcd client
 2021-07-08 14:01:52 -07:00
Kubernetes Prow Robot
a9d7526864 Merge pull request #102970 from tkestack/feature-memory-qos 
Feature: Support memory qos with cgroups v2
 2021-07-08 14:01:36 -07:00
Kubernetes Prow Robot
fc4e7c17f4 Merge pull request #102928 from dprotaso/dynamic-client-backwards-compatible 
Simplify construction of the fake dynamic client
 2021-07-08 14:01:28 -07:00
Kubernetes Prow Robot
60e4be3151 Merge pull request #102049 from navist2020/kubectl/notUseParam 
Kubectl:remove Factory that not used
 2021-07-08 14:01:07 -07:00
David Eads
649b87aaf8 prevent mutation of deletion options during delete collection 2021-07-08 15:36:10 -04:00
Ryan Phillips
d95b14e1ab Revert "apiserver: add callback to get notified of object count" 2021-07-08 13:56:39 -05:00
Kubernetes Prow Robot
b765496650 Merge pull request #98817 from alculquicondor/job-completion-api 
Add Job.status.uncountedTerminatedPods for Job tracking
 2021-07-08 10:44:54 -07:00
Sergey Kanzhelev
7da1a0b230 update the help text of KubeletConfig following the DynamicKubletConfig feature deprecation 2021-07-08 16:38:11 +00:00
nobuhikosawai
41c5bca349 kubectl: update set command description to include cronjob resource (#102503) 
* kubectl: update set command description to include cronjob resource

* kubectl: update set command description to include statefulset resource

* kubectl: update set env description to remove job from resources that can update container env

* kubectl set tests: add cronjob resource and remove job resource

* go fmt
 2021-07-08 08:50:54 -07:00
Aldo Culquicondor
bb56a0bd04 Add Job.status.uncountedPodUIDs 
For tracking Job Pods that have finished but are not yet counted as failed or succeeded

And feature gate JobTrackingWithFinalizers

Change-Id: I3e080f3ec090922640384b692e88eaf9a544d3b5
 2021-07-08 15:31:59 +00:00
dprotaso
418fa71b6b Simplify use of the fake dynamic client 
With the introduction of GVK to the fake dynamic client it made using
the fake much more cumbersome.

Specifically:
- requires manual registration of list types
- mismatch between scheme types and passed in fixtures would result in errors

The PR changes the constructor method NewSimpleDynamicClient to do the following:
- rewire the schemes to unstructured types
- typed fixtures are converted to unstructured types
- automatically register fixture gvks with the scheme

This should make the dynamic client 'flexible' with it's inputs like it was
before
 2021-07-08 10:50:14 -04:00
Kubernetes Prow Robot
2cd5c54f39 Merge pull request #103565 from zhan849/harry/clean-scope-fix 
fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total
 2021-07-08 05:59:17 -07:00
Kubernetes Prow Robot
a2b1f00a8b Merge pull request #103522 from atiratree/fix-translations-location 
fix translations location in update-translations.sh
 2021-07-08 05:58:53 -07:00
Kubernetes Prow Robot
388c2d901d Merge pull request #103560 from sejr/podsecurity-validate-configuration 
[PodSecurity] Add ValidatePodSecurityConfiguration
 2021-07-08 03:05:13 -07:00
Kubernetes Prow Robot
33431f542b Merge pull request #103534 from wojtek-t/pf_queue_picker_refinements 
Refinements to pick queue logic in P&F
 2021-07-08 03:04:53 -07:00
Jordan Liggitt
7f9d2eda82 limit warnings to requests that would otherwise succeed, reformat warning message 2021-07-08 02:19:30 -04:00
Jordan Liggitt
36907db929 PodSecurity: Drop field path from container visitor 2021-07-08 02:19:30 -04:00
Jordan Liggitt
7895399077 PodSecurity: seLinuxOptions: regenerate files 2021-07-08 02:19:30 -04:00
Jordan Liggitt
d541970751 PodSecurity: seLinuxOptions: cleanup 
rename to seLinuxOptions
make message consistent
add unit tests for message
consolidate integration test fixtures
 2021-07-08 02:19:28 -04:00
Jordan Liggitt
19c8ab297c PodSecurity: sysctls: cleanup 
Add documentation and unit tests for messages
 2021-07-08 02:19:28 -04:00
Jordan Liggitt
e178695c25 PodSecurity: seccompProfile_baseline: regenerate files 2021-07-08 02:19:28 -04:00
Jordan Liggitt
bebf612967 PodSecurity: seccompProfile_baseline: cleanup 
Make messages consistent
Add unit tests for messages
Consolidate integration test fixtures
Rename to seccompProfile_baseline
 2021-07-08 02:19:28 -04:00
Jordan Liggitt
2af08d1a5a PodSecurity: seccompProfile_restricted: regenerate files 2021-07-08 02:19:27 -04:00
Jordan Liggitt
88a1241299 PodSecurity: seccompProfile_restricted: cleanup 
Switch from field paths to container names in messages
Add unit tests for messages
Consolidate integration test fixtures
 2021-07-08 02:19:27 -04:00
Jordan Liggitt
43146d4377 PodSecurity: runAsNonRoot: regenerate files 2021-07-08 02:19:27 -04:00
Jordan Liggitt
5fc06591a2 PodSecurity: runAsNonRoot: cleanup 
Improve message and details
Add unit tests
Consolidate integration test fixtures
 2021-07-08 02:19:27 -04:00
Jordan Liggitt
edb7cdb02a PodSecurity: restrictedVolumes: regenerate files 2021-07-08 02:19:26 -04:00
Jordan Liggitt
676240a342 PodSecurity: restrictedVolumes: cleanup 
Updated forbidden reason/details
Added unit test to exercise all volume types
Consolidated fixtures
 2021-07-08 02:19:26 -04:00
Jordan Liggitt
4a69c57992 PodSecurity: procMount: cleanup 2021-07-08 02:19:26 -04:00
Jordan Liggitt
f9b8dfd0e6 PodSecurity: privileged: cleanup 2021-07-08 02:19:26 -04:00
Jordan Liggitt
7c70467400 PodSecurity: windowsHostProcess: regenerate files 2021-07-08 02:19:26 -04:00
Jordan Liggitt
9dce1d6a49 PodSecurity: windowsHostProcess: cleanup 
Rename to windowsHostProcess
Format reason/details
Add unit tests
 2021-07-08 02:19:25 -04:00
Jordan Liggitt
45485bb7ae PodSecurity: hostPorts: cleanup 
Reformat message
Add unit test to exercise message/details
 2021-07-08 02:19:25 -04:00