github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
112,920 Commits 1 Branch 31 Tags 1,019 MiB
32c44b33e8
Commit Graph

46146 Commits

Author SHA1 Message Date
Jordan Liggitt
e55c9843ab
Regenerate openapi 2023-01-06 12:24:30 -05:00
Kubernetes Prow Robot
c549b59983
Merge pull request #114125 from sanposhiho/skip-reimplementation 
feature(scheduler): won't run Filter if PreFilter returned a Skip status
 2023-01-06 02:25:59 -08:00
Kubernetes Prow Robot
bd43394467
Merge pull request #114623 from Huang-Wei/feat/smart-preemption-identification 
Enhanced logic to identify eligible preemption node
 2023-01-06 00:23:59 -08:00
Kensei Nakada
e5b536755f feature(scheduler): won't run Filter if PreFilter returned a Skip status 2023-01-06 07:38:15 +00:00
Kubernetes Prow Robot
901c1de5ea
Merge pull request #114870 from mattcary/mutation 
Avoid mutation of PVC in stateful set controller shared cache
 2023-01-05 23:16:09 -08:00
Matthew Cary
ed18ab54ba Avoid mutation of PVC in stateful set controller shared cache 
Change-Id: Ieb8e443e460150d16524ca1c1fb3770f546b2c28
 2023-01-05 18:09:05 -08:00
Kubernetes Prow Robot
fcaa32bd99
Merge pull request #114725 from danwinship/kube-proxy-startup-cleanup 
(minor) kube-proxy startup cleanup
 2023-01-05 13:57:59 -08:00
Kubernetes Prow Robot
8dd70a16ad
Merge pull request #114699 from kerthcet/feat/distinguish-unschedulabel-with-unresolvable 
Distinguish between Unschedulable and UnschedulableAndUnresolvable in scheduler's PostFilter
 2023-01-05 12:53:57 -08:00
Kubernetes Prow Robot
e119680318
Merge pull request #114784 from TommyStarK/pkg-apis/replace-deprecated-pointer-function 
pkg/apis: Replace deprecated pointer function
 2023-01-05 11:08:09 -08:00
Wei Huang
9b64025f36
rename 'PreemptionByKubeScheduler' to 'PreemptionByScheduler' 2023-01-05 10:31:57 -08:00
Wei Huang
91742e2393
Enhanced logic to identify eligible preemption node 2023-01-05 10:31:57 -08:00
Kubernetes Prow Robot
67622be450
Merge pull request #114653 from kerthcet/cleanup/remove-waitstop 
Stop Cache in scheduler when tests tear down
 2023-01-05 09:11:59 -08:00
Kubernetes Prow Robot
cf272cf2c6
Merge pull request #110931 from claudiubelu/adds-unittests-3 
tests: Ports volume unit tests to Windows
 2023-01-05 05:31:58 -08:00
Kubernetes Prow Robot
d9af380f91
Merge pull request #114749 from danwinship/drop-endpointshandler 
Drop unused EndpointsHandler / EndpointsConfig from pkg/proxy/config
 2023-01-05 03:58:09 -08:00
TommyStarK
f166a52573 pkg/apis: Replace deprecated pointer function 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2023-01-05 11:48:05 +01:00
Kante Yin
2c205e291d Distinguish unschedulable with unresolvable in scheduler 
Before, in RunPostFilterPlugins, we didn't distinguish between unschedulable and unresolvable
because we only have one postFilterPlugin by default, now, we have at least two, we should
make sure that once a postFilterPlugin returns unresolvable, we'll return directly

Signed-off-by: Kante Yin <kerthcet@gmail.com>
 2023-01-05 16:59:19 +08:00
Kubernetes Prow Robot
492637878f
Merge pull request #111660 from pacoxu/key-encipherment-v1.26 
Key encipherment usage  v1.27
 2023-01-04 15:51:57 -08:00
Kubernetes Prow Robot
ac889a0251
Merge pull request #113581 from aimuz/verify-tls-secret 
Verify that the key matches the cert
 2023-01-04 14:29:58 -08:00
Kubernetes Prow Robot
c1ca3191d5
Merge pull request #114803 from TommyStarK/registry/replace-deprecated-pointer-function 
pkg/registry: Replace deprecated pointer function
 2023-01-04 04:48:00 -08:00
weizhi
575616cc72
fix: kubelet event about unattached volumes is incorrect (#112719) 
* fix kubelet event

* add ut

* fix ut
 2023-01-04 01:51:59 -08:00
TommyStarK
e2d8fc3f62 pkg/registry: Replace deprecated pointer function 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2023-01-04 10:38:09 +01:00
Kubernetes Prow Robot
3f752b5edf
Merge pull request #114629 from kerthcet/feat/change-return-type-of-Filter 
Modify the return type of RunFilterPlugins to *Status
 2023-01-03 15:31:31 -08:00
Kubernetes Prow Robot
5914f30fd7
Merge pull request #114757 from danwinship/drop-endpointstracker 
Drop unused Endpoints-tracking code from pkg/proxy/
 2023-01-03 10:35:35 -08:00
Kubernetes Prow Robot
12c71fdf1c
Merge pull request #113542 from ardaguclu/fix-shortname-disperancy 
Set singular names for core types to pass to discovery
 2023-01-03 09:29:43 -08:00
Kubernetes Prow Robot
b532f2b3e7
Merge pull request #112136 from pacoxu/migrate-runtime-endpoint-flags 
kubelet: migrate container runtime endpoint flag to config
 2023-01-03 09:29:31 -08:00
Michal Wozniak
c3d0e8ff05 Fix clearing rate limiter in disruption controller 2023-01-03 15:06:06 +01:00
Dan Winship
fe2b658ef5 Drop unused Endpoints-only tracking code in kube-proxy 
This leaves the code in a somewhat messy state but it can be improved
further later.
 2023-01-03 09:03:49 -05:00
Dan Winship
c78b057d85 Port TestUpdateEndpointsMap from Endpoints tracker to EndpointSlice 
This is an ugly-but-simple rewrite (particularly involving having to
rewrite "single Endpoints with multiple Subsets" as "multiple
EndpointSlices"). Can be cleaned up more later...

The slice code sorts the results slightly differently from the old
code in two cases, and it was simpler to just reorder the expectations
rather than fixing the comparison code. But other than that, the
expected results are exactly the same as before.
 2023-01-03 09:03:46 -05:00
Dan Winship
cc1847e6ee Port TestLastChangeTriggerTime from Endpoints tracker to EndpointSlice 
This exposed a bug in the EndpointSlice tracking code, which is that
we didn't properly reset the "last change time" when a slice was
deleted. (This means kube-proxy would report an erroneous value in the
"endpoint programming time" metric if a service was added/updated,
then deleted before kube-proxy processed the add/update, then later
added again.)
 2023-01-03 09:03:34 -05:00
Dan Winship
169604d906 Validate single-stack --nodeport-addresses sooner 
In the dual-stack case, iptables.NewDualStackProxier and
ipvs.NewDualStackProxier filtered the nodeport addresses values by IP
family before creating the single-stack proxiers. But in the
single-stack case, the kube-proxy startup code just passed the value
to the single-stack proxiers without validation, so they had to
re-check it themselves. Fix that.
 2023-01-03 09:01:45 -05:00
Dan Winship
e7ed7220eb Explicitly pass IP family to proxier 
Rather than re-determining it from the iptables object in both proxies.
 2023-01-03 09:01:45 -05:00
Kante Yin
49e7e80999 Modify the return type of RunFilterPlugins to *Status 
Before, the return type of RunFilterPlugins is a Map, but considering we'll return immediately
once we met unsuccessful status, this is not necessary.

Signed-off-by: Kante Yin <kerthcet@gmail.com>
 2023-01-03 14:33:58 +08:00
Kubernetes Prow Robot
6dc493bb83
Merge pull request #114750 from aojea/cleanup_allocator 
refactor current ipallocator
 2023-01-02 14:57:31 -08:00
Kubernetes Prow Robot
7759fdb940
Merge pull request #114528 from mpatlasov/fix-specModified-check 
Fix installDriverToCSINode(): do not skip CSINode update if Allocatable.Count changed
 2023-01-02 10:25:30 -08:00
Dan Winship
2ea105df63 Drop unused EndpointsHandler / EndpointsConfig from pkg/proxy/config 
(Also NoopEndpointSliceHandler since it's no longer possible for a
proxy implementation to no-op EndpointSlice handling.)
 2023-01-01 16:57:27 -05:00
Dan Winship
3da93e1fe4 "Port" HollowProxy from Endpoints to EndpointSlice 2023-01-01 16:57:25 -05:00
Claudiu Belu
96e99f564a tests: Ports volume unit tests to Windows (part 2) 
Ports the metrics_du unit tests to Windows.
Ports the hostutil unit tests to Windows.
 2023-01-01 00:18:31 +00:00
Dan Winship
886c4b0cf2 Drop Endpoints-tracking-specific TestEndpointsToEndpointsMap 
TestEndpointsToEndpointsMap tested code that only ran when using
Endpoints tracking rather than EndpointSlice tracking--which is to
say, never, any more. (TestEndpointsMapFromESC in
endpointslicecache_test.go is an equivalent EndpointSlice test.)
 2022-12-31 12:03:23 -05:00
Antonio Ojea
29ea5076ea refactor current ipallocator 
- rename files to match the allocator backend
- use t.Run for tests and cover large ranges
- add benchmarks
- check that thebitmap ip allocator satisfies the interface

goos: linux
goarch: amd64

pkg: k8s.io/kubernetes/pkg/registry/core/service/ipallocator
cpu: Intel(R) Xeon(R) CPU E5-2678 v3 @ 2.50GHz
BenchmarkAllocateNextIPv4Size1048574
BenchmarkAllocateNextIPv4Size1048574-24    	 1517683
7373 ns/op	     135 B/op	       8 allocs/op
BenchmarkAllocateNextIPv6Size65535
BenchmarkAllocateNextIPv6Size65535-24      	 5607438
193.9 ns/op	      18 B/op	       2 allocs/op
PASS
 2022-12-31 12:48:50 +00:00
Dan Winship
df7e4a9432 Belatedly port pkg/proxy/config Endpoints unit tests to EndpointSlice 2022-12-30 19:51:35 -05:00
Kushagra
80384bbb55 spelling mistake rectified 2022-12-29 17:55:17 +00:00
Kushagra
f380ef8b61 Misleading message when there are no metrics. 2022-12-29 10:57:43 +00:00
Paco Xu
160f015ef4 kubelet: add key encipherment usage only if it is rsa key 
remove allowOmittingUsageKeyEncipherment as it is always true

Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2022-12-27 16:04:25 +08:00
Kubernetes Prow Robot
68b96575a2
Merge pull request #114669 from Nordix/ipvs-remove-module-check 
Ipvs: remove module check
 2022-12-26 10:09:27 -08:00
Paco Xu
3ace3eb74b certificates default to tolerate no key encipherment 2022-12-26 23:15:21 +08:00
Kubernetes Prow Robot
685d639cb5
Merge pull request #114464 from Nordix/issue-114461 
Set permissions for timestamp directory before publishing update to avoid permission denied
 2022-12-24 16:11:26 -08:00
Lars Ekman
5ff705fd77 proxy/ipvs: Describe and handle a bug in moby/ipvs 
Handle https://github.com/moby/ipvs/issues/27
A work-around was already in place, but a segv would occur
when the bug is fixed. That will not happen now.
 2022-12-24 10:21:27 +01:00
Tero Saarni
96306f144a Set permissions on volume before publishing update 
This change fixes a race condition that was caused by setting the file owner,
group and mode non-atomically, after the updated files had been published.

Users who were running non-root containers, without GID 0 permissions, and
had removed read permissions from other users by setting defaultMode: 0440 or
similar, were getting intermittent permission denied errors when accessing
files on secret or configmap volumes or service account tokens on projected
volumes during update.
 2022-12-24 07:59:41 +02:00
Kubernetes Prow Robot
05ecc3d602
Merge pull request #114683 from thockin/remove_old_comment_proxy_valid_pod_addr 
Remove TODO about API proxy checking for svc
 2022-12-23 15:37:37 -08:00
Kubernetes Prow Robot
e96337606d
Merge pull request #114681 from thockin/nix_comments_about_ipv6_not_ready 
Remove old comments about IPv6 not being ready
 2022-12-23 15:37:26 -08:00