github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
55,472 Commits 1 Branch 31 Tags 1,019 MiB
4425841ce2
Commit Graph

512 Commits

Author SHA1 Message Date
Tim Hockin
5862a60ae7 Make IsDNS1123Subdomain return error strings 2016-05-19 08:57:49 -07:00
Tim Hockin
77eff06a53 Make IsDNS1123Label return error strings 2016-05-19 08:57:49 -07:00
k8s-merge-robot
4f09f51486 Merge pull request #24800 from thockin/validation_pt8-3 
Automatic merge from submit-queue

Make name validators return string slices

Part of the larger validation PR, broken out for easier review and merge.  Builds on previous PRs in the series.
 2016-05-19 02:15:27 -07:00
Kevin
52fb89ff73 implement taints and tolerations 2016-05-18 15:06:23 +00:00
Tim Hockin
152c86ab06 Make name validators return string slices 2016-05-18 00:48:01 -07:00
k8s-merge-robot
4ac32179bf Merge pull request #24798 from thockin/validation_pt8-1 
Automatic merge from submit-queue

Make IsQualifiedName return error strings

Part of the larger validation PR, broken out for easier review and merge.

@lavalamp FYI, but I know you're swamped, too.
 2016-05-14 22:14:17 -07:00
k8s-merge-robot
08440b5dcc Merge pull request #24836 from Clarifai/gpu-impl 
Automatic merge from submit-queue

WIP v0 NVIDIA GPU support

```release-note
* Alpha support for scheduling pods on machines with NVIDIA GPUs whose kubelets use the `--experimental-nvidia-gpus` flag, using the alpha.kubernetes.io/nvidia-gpu resource 
```

Implements part of #24071 for  #23587

I am not familiar with the scheduler enough to know what to do with the scores. Mostly punting for now.

Missing items from the implementation plan: limitranger, rkt support, kubectl
support and docs

cc @erictune @davidopp @dchen1107 @vishh @Hui-Zhi @gopinatht
 2016-05-12 14:04:15 -07:00
Tim Hockin
72955770f3 Make IsQualifiedName return error strings 2016-05-10 11:23:23 -07:00
Rudi Chiarito
362c763fca WIP v0 NVIDIA GPU support 
Implements part of #24071

I am not familiar with the scheduler enough to know what to do with the scores. Punting for now.

Missing items from the implementation plan: limitranger, rkt support, kubectl
support and user docs
 2016-05-09 19:20:05 -04:00
k8s-merge-robot
f2f3b49f58 Merge pull request #22575 from MikaelCluseau/wip-issue-20466 
Automatic merge from submit-queue

Add subPath to mount a child dir or file of a volumeMount

Allow users to specify a subPath in Container.volumeMounts so they can use a single volume for many mounts instead of creating many volumes. For instance, a user can now use a single PersistentVolume to store the Mysql database and the document root of an Apache server of a LAMP stack pod by mapping them to different subPaths in this single volume.

Also solves https://github.com/kubernetes/kubernetes/issues/20466.
 2016-05-08 08:45:15 -07:00
Kevin
82ba4f077e implement inter pod topological affinity and anti-affinity 2016-05-06 06:46:23 +00:00
Mikaël Cluseau
06900a934d Introduce subPath in VolumeMount 2016-05-06 15:08:41 +11:00
Chao Xu
a46b7775fc API changes for finalizers and system-wide garbage collector 2016-05-04 21:54:55 -07:00
Clayton Coleman
fdb110c859
Fix the rest of the code 2016-04-29 17:12:10 -04:00
Jordan Liggitt
1e5815872e Validate deletion timestamp doesn't change on update 2016-04-28 11:50:48 -04:00
André Martins
c1a360b1d5 Removing IPv4 enforcement on Endpoints 
Signed-off-by: André Martins <aanm90@gmail.com>
 2016-04-14 16:20:00 +01:00
goltermann
32d569d6c7 Fixing all the "composite literal uses unkeyed fields" Vet errors. 2016-03-25 15:25:09 -07:00
Paul Morie
24aade64f5 Validate that volume mountpoints are unique 2016-03-17 23:52:34 -04:00
Avesh Agarwal
427774306c Fix validation of resources (cpu, memory, storage) for limit range types. 2016-03-10 11:33:53 -05:00
k8s-merge-robot
0e3469dce3 Merge pull request #22183 from pmorie/config-quota 
Auto commit by PR queue bot
 2016-03-04 03:12:51 -08:00
k8s-merge-robot
de72b6be1b Merge pull request #21907 from justinsb/load_balancer_source_ranges 
Auto commit by PR queue bot
 2016-03-03 14:10:47 -08:00
Justin Santa Barbara
cb92133dfa LB Source Ranges: Move validation into API layer 
Had to move other things around too to avoid a weird api ->
cloudprovider dependency.

Also adding fixes per code reviews.

(This is a squash of the previously approved commits)
 2016-03-03 10:27:17 -05:00
Paul Morie
834776aa1f Add resource quota for ConfigMap 2016-03-02 09:59:51 -05:00
Tim Hockin
56be551416 Validate volume paths do not have ':' 2016-02-29 13:22:45 -08:00
derekwaynecarr
df064bd53d ResourceQuota API validation for scopes and new resource types 2016-02-26 20:34:14 -05:00
Jordan Liggitt
b502b8f6a1 Restore service port validation compatibility with 1.0/1.1 2016-02-23 21:27:44 -05:00
k8s-merge-robot
c91a79be45 Merge pull request #21199 from erictune/validation-helper 
Auto commit by PR queue bot
 2016-02-16 07:07:49 -08:00
derekwaynecarr
c5cb09405c Improve persistent volume claim validation 2016-02-15 15:13:53 -05:00
David Oppenheimer
66368efad5 Comment out NodeAffinity.RequiredDuringSchedulingRequiredDuringExecution 
because it is not yet implemented.
 2016-02-14 17:46:13 -08:00
Eric Tune
825dc470cc Add a validation helper function. 
I will use this in a subsequent PR as part of #12298
 2016-02-12 14:38:22 -08:00
Huamin Chen
d7e4b826b9 support Azure File Service volume 
Signed-off-by: Huamin Chen <hchen@redhat.com>
 2016-02-09 01:07:12 +00:00
k8s-merge-robot
aac20ed69d Merge pull request #20600 from freehan/servicevalidation 
Auto commit by PR queue bot
 2016-02-06 10:23:18 -08:00
k8s-merge-robot
0ad6326d7f Merge pull request #20170 from pmorie/update-ads-pod 
Auto commit by PR queue bot
 2016-02-05 20:37:39 -08:00
Paul Morie
0b82d0b491 Allow pod.Spec.ActiveDeadlineSeconds to be updateable 2016-02-05 15:58:31 -05:00
Prashanth Balasubramanian
c56bebf594 Basic TLS support. 2016-02-05 11:00:04 -08:00
Rudi Chiarito
a2d1bb7acf Add httpHeaders to httpGet liveness probe 
Also update existing documentation and try to steer users away from 'host'.
Add validation.
 2016-02-05 11:20:04 -05:00
Daniel Smith
e6639de333 Merge pull request #20380 from mqliang/podcidr-validation 
pod cidr validation
 2016-02-04 23:16:02 -08:00
Kevin
c8c82c1d8f implement Node affinity and NodeSelector 2016-02-04 01:53:14 +00:00
Minhan Xia
ec7366fc2a add service validation for mix protocol 2016-02-03 14:54:32 -08:00
k8s-merge-robot
54808fb7ab Merge pull request #19824 from pmorie/env-source-variant 
Auto commit by PR queue bot
 2016-01-31 20:12:08 -08:00
mqliang
470d7af8c9 pod cidr validation 2016-01-31 11:49:31 +08:00
Paul Morie
defd1d0544 Add size limit for ConfigMap 2016-01-29 00:14:28 -05:00
Paul Morie
9030f16071 Move ConfigMap to main API 2016-01-28 17:07:05 -05:00
jhadvig
5927ad81be Additional SecretTypes 2016-01-26 14:34:12 +01:00
k8s-merge-robot
3978c76a26 Merge pull request #18790 from erictune/secret-validate 
Auto commit by PR queue bot
 2016-01-21 00:46:49 -08:00
Paul Morie
a45cbcd8a2 Add validation for EnvVarSource variant 2016-01-20 11:10:09 -05:00
Eric Tune
4a3d4defdf Validate kubernetes.io/dockerconfigjson secrets 
Added unit test.
 2016-01-19 12:35:30 -08:00
Paul Morie
60cf252e8b Add validation for variant-type of EnvVarSource 2016-01-18 15:07:48 -05:00
k8s-merge-robot
170c03a85f Merge pull request #16354 from mdshuai/valid-supplemental-groups 
Auto commit by PR queue bot
 2016-01-11 00:48:34 -08:00
mdshuai
27934da9cc Validate uids and gids for securitycontext 2016-01-11 15:17:25 +08:00
Kenneth Shelton
d399a8f8cc * Added UDP LB support (for GCE) 2016-01-05 20:51:21 +00:00
Chakravarthy Nelluri
fa76de79e5 Add support for flex volume. Flex volume adds support for thirdparty(vendor) 
volumes and custom mounts.
 2015-12-23 14:11:38 -08:00
Tim Hockin
0fecf965b4 Change how one-of blocks are validated 
I took a hard look at error output and played until I was happier.  This now
prints JSON for structs in the error, rather than go's format.

Also made the error message easier to read.

Fixed tests.
 2015-12-18 09:42:14 -08:00
Tim Hockin
43ed74748e Clean up and document validation strings 
Also add a detail string for Required and Forbidden.  Fix tests.
 2015-12-18 09:40:50 -08:00
Tim Hockin
27fc14000d audit validation errors to not double-print field names 2015-12-18 09:06:02 -08:00
Tim Hockin
87a35047dd Move FieldPath and errors to a sub-package 
This makes the naming and reading a lot simpler.
 2015-12-10 11:48:16 -08:00
deads2k
2ee3dfe415 update testapi to eliminate redundant fields 2015-12-07 15:54:26 -05:00
Jordan Liggitt
7d10fd3591 Validate pod spec.nodeName 2015-12-05 11:34:09 -05:00
Tim Hockin
e6df0b1a24 Convert validation to use FieldPath 
Before this change we have a mish-mash of ways to pass field names around for
error generation.  Sometimes string fieldnames, sometimes .Prefix(), sometimes
neither, often wrong names or not indexed when it should be.

Instead of that mess, this is part one of a couple of commits that will make it
more strongly typed and hopefully encourage correct behavior.  At least you
will have to think about field names, which is better than nothing.

It turned out to be really hard to do this incrementally.
 2015-12-03 08:19:44 -08:00
k8s-merge-robot
b3846ea748 Merge pull request #17862 from feihujiang/ensureHeadlessServicePortEqualToTargetPort 
Auto commit by PR queue bot
 2015-12-02 03:35:36 -08:00
Harry Zhang
70a9c0bf56 Add directory in GitRepo and updated tests. 
Update validate and gitRepo

Update generated code
 2015-12-02 00:20:38 +08:00
feihujiang
81b095ee52 Ensure headless service port equal to targetPort 2015-12-01 14:37:26 +08:00
Tim Hockin
682f2a5a79 Stronger typing for validation ErrorList 2015-11-23 10:01:43 -08:00
Tim Hockin
48b49a5cae s/ValidationErrorList/ErrorList/ 2015-11-22 20:13:20 -08:00
Tim Hockin
d64d1fbb3d s/ValidationError/Error/ 2015-11-22 20:12:46 -08:00
Tim Hockin
2a127d089a s/ValidationErrorType/ErrorType/ 2015-11-22 20:12:39 -08:00
Tim Hockin
0ff66da346 Move fielderrors into validation 2015-11-22 20:12:20 -08:00
Tim Hockin
ba383bcfeb Refactor IntOrString into a new pkg 
pkg/util/intstr is a cleaner encapsulation for this type and supporting
functions.  No behavioral change.
 2015-11-16 10:57:52 -08:00
eulerzgy
501c2825cf Make order of fun consistent 2015-11-10 17:43:54 +08:00
k8s-merge-robot
4e39dd4b7d Merge pull request #16925 from mikedanese/headless-fix-1 
Auto commit by PR queue bot
 2015-11-07 08:03:18 -08:00
Tim St. Clair
1e88a682da Add liveness/readiness probe parameters 
- PeriodSeconds - How often to probe
- SuccessThreshold - Number of successful probes to go from failure to success state
- FailureThreshold - Number of failing probes to go from success to failure state

This commit includes to changes in behavior:

1. InitialDelaySeconds now defaults to 10 seconds, rather than the
kubelet sync interval (although that also defaults to 10 seconds).
2. Prober only retries on probe error, not failure. To compensate, the
default FailureThreshold is set to the maxRetries, 3.
 2015-11-06 10:46:40 -08:00
Mike Danese
09295cd664 Headless services should not need to declare ports 2015-11-06 09:57:41 -08:00
mqliang
57faaf4f96 refactor validation.go to avoid duplicating 2015-10-23 14:23:55 +08:00
Janet Kuo
e36121ae9b Increase the annotation size limit to 256k 2015-10-21 16:16:55 -07:00
derekwaynecarr
62b4467c69 Resource Quota should not let fractional values for API resources 2015-10-14 09:47:38 -04:00
derekwaynecarr
544b453e31 Add replication controller status subresource 2015-10-07 14:39:33 -04:00
Paul Morie
227dd82119 Add PodSecurityContext and backward compatibility tests 2015-10-05 21:05:27 -04:00
Álex González
fa39c2b032 Add flocker volume plugin 
Flocker [1] is an open-source container data volume manager for
Dockerized applications.

This PR adds a volume plugin for Flocker.
The plugin interfaces the Flocker Control Service REST API [2] to
attachment attach the volume to the pod.

Each kubelet host should run Flocker agents (Container Agent and Dataset
Agent).

The kubelet will also require environment variables that contain the
host and port of the Flocker Control Service. (see Flocker architecture
[3] for more).

- `FLOCKER_CONTROL_SERVICE_HOST`
- `FLOCKER_CONTROL_SERVICE_PORT`

The contribution introduces a new 'flocker' volume type to the API with
fields:

- `datasetName`: which indicates the name of the dataset in Flocker
  added to metadata;
- `size`: a human-readable number that indicates the maximum size of the
  requested dataset.

Full documentation can be found docs/user-guide/volumes.md and examples
can be found at the examples/ folder

[1] https://clusterhq.com/flocker/introduction/
[2] https://docs.clusterhq.com/en/1.3.1/reference/api.html
[3] https://docs.clusterhq.com/en/1.3.1/concepts/architecture.html
 2015-10-01 01:10:00 +01:00
derekwaynecarr
b29722c728 Ensure ResourceQuota values are non-negative 2015-09-24 10:15:40 -04:00
k8s-merge-robot
e535e27e82 Merge pull request #14279 from pweil-/ipc-followup 
Auto commit by PR queue bot
 2015-09-22 07:28:07 -07:00
k8s-merge-robot
c96c76b729 Merge pull request #13780 from smarterclayton/pod_logs 
Auto commit by PR queue bot
 2015-09-21 17:02:47 -07:00
Clayton Coleman
c2e90cd154 Support extended pod logging options 
Increase the supported controls on pod logging. Add validaiton to pod
log options. Ensure the Kubelet is using a consistent, structured way to
process pod log arguments.

Add ?sinceSeconds=<durationInSeconds>, &sinceTime=<RFC3339>, ?timestamps=<bool>,
?tailLines=<number>, and ?limitBytes=<number>
 2015-09-21 15:39:32 -04:00
Paul Weil
20361e33f2 use infra container ns for ipc 2015-09-21 12:47:19 -04:00
k8s-merge-robot
843134885e Merge pull request #12470 from simon3z/add-host-ipc 
Auto commit by PR queue bot
 2015-09-21 09:15:01 -07:00
Huamin Chen
ed9a1bbd3a support fibre channel volume 
Signed-off-by: Huamin Chen <hchen@redhat.com>
 2015-09-18 19:15:31 -04:00
Federico Simoncelli
f21d9ac9e4 Support pods with containers using host ipc 
Add a HostIPC field to the Pod Spec to create containers sharing
the same ipc of the host.

This feature must be explicitly enabled in apiserver using the
option host-ipc-sources.

Signed-off-by: Federico Simoncelli <fsimonce@redhat.com>
 2015-09-18 21:13:39 +02:00
k8s-merge-robot
73d71d6a67 Merge pull request #14096 from mvdan/util-duration 
Auto commit by PR queue bot
 2015-09-18 00:20:43 -07:00
Daniel Martí
586cb9126a Move pkg/util.Time to pkg/api/unversioned.Time 
Along with our time.Duration wrapper, as suggested by @lavalamp.
 2015-09-17 17:51:27 -07:00
hurf
daeae81e1e Add validation to MaxLimitRequestRatio in LimitRange 
MaxLimitRequestRatio should >=1
MaxLimitRequestRatio should <= max/min(if both are specified)
 2015-09-16 11:41:48 +08:00
k8s-merge-robot
86b4e777e1 Merge pull request #13834 from derekwaynecarr/more_improvements_to_limit_range_validation 
Auto commit by PR queue bot
 2015-09-13 17:01:56 -07:00
derekwaynecarr
9bc48f699d Validate LimitRange default and defaultRequest are not supported for limits of type Pod 2015-09-11 12:22:30 -04:00
tummychow
78ce5da988 Move util.StringSet into its own package 
A lot of packages use StringSet, but they don't use anything else from
the util package. Moving StringSet into another package will shrink
their dependency trees significantly.
 2015-09-10 12:04:15 -07:00
derekwaynecarr
ea919f6d1e Fix precision handling in validating LimitRange 2015-09-09 15:52:29 -04:00
Chao Xu
9fc79e9d99 refactor testapi and test scripts to prepare for multiple API groups. 2015-09-04 18:01:32 -07:00
Brendan Burns
2df5010834 Merge branch 'sdminonne-container_sidecar' 2015-09-02 10:42:08 -07:00
Salvatore Dario Minonne
f4dc0653aa adding downward api volume plugin 2015-09-01 22:23:03 +02:00
Huamin Chen
fe559f2726 implement Ceph FS volume plugin and add to e2e volume test 
Signed-off-by: Huamin Chen <hchen@redhat.com>
 2015-09-01 14:05:17 -04:00
Sreekanth Pothanis
f5da6b34ce Cinder Volume Plugin 2015-08-30 19:56:27 -07:00
k8s-merge-robot
e5ac413311 Merge pull request #13286 from nikhiljindal/validateDeployment 
Auto commit by PR queue bot
 2015-08-28 22:37:55 -07:00
nikhiljindal
92f373a4b6 Validate deployment 2015-08-28 12:47:33 -07:00
Prashanth B
52f7833cd3 Revert "Revert "LimitRange updates for Resource Requirements Requests"" 2015-08-28 09:26:36 -07:00
Mike Danese
8460e3913d move daemon controller to the experimental api 2015-08-27 11:47:35 -07:00
Piotr Szczesniak
6e05b9e3a3 Revert "LimitRange updates for Resource Requirements Requests" 2015-08-27 10:50:50 +02:00
derekwaynecarr
8fbe4645e3 Add fields to LimitRange object 2015-08-24 15:18:45 -04:00
k8s-merge-robot
44c76d5319 Merge pull request #12957 from smarterclayton/handle_terminating_pods 
Auto commit by PR queue bot
 2015-08-20 21:47:00 -07:00
Abhishek Shah
b6b8e99393 External IPs support. 2015-08-20 16:10:01 -07:00
Clayton Coleman
02dbb95447 Add TerminationGracePeriodSeconds to API 
Set defaulting for pod spec
 2015-08-20 11:03:38 -04:00
Tim Hockin
86f4535871 Check loopback and link-local multicast endpoints 
Previously we just disallowed link-local (unicast).  This disallows loopback
and link-local multicast.
 2015-08-18 21:50:27 -07:00
Robert Bailey
08e6a43c1d Revert "Merge pull request #9165 from smarterclayton/graceful" 
This reverts commit 4f856b595d, reversing
changes made to d78525a83b.

Conflicts:
	pkg/kubelet/status_manager.go
 2015-08-18 17:34:49 -07:00
Clayton Coleman
89f1f3b1b8 Alter graceful deletion to not use TTL 
Avoid TTL by deleting pods immediately when they aren't
scheduled, and letting the Kubelet delete them otherwise.

Ensure the Kubelet uses pod.Spec.TerminationGracePeriodSeconds
when no pod.DeletionGracePeriodSeconds is available.
 2015-08-18 09:08:43 -04:00
Clayton Coleman
01f3785426 Add status.podIP as a valid downward API target 
Getting the public IP a container is supposed to use is O(hard),
and usually involves ugly gyrations in python or with interfaces.
Using the downward API means that the IP Kube is announcing to
other endpoints is also visible inside the container for pods to
identify themselves.
 2015-08-14 17:51:55 -04:00
Jordan Liggitt
d7a50c4778 Limit field errors to a single field name 2015-08-12 14:10:26 -04:00
Kris Rousey
565189f5b8 Correcting all go vet errors 2015-08-11 13:55:37 -07:00
Satnam Singh
bee48f4ce5 Merge pull request #12035 from AnanyaKumar/requests 
Add support for request
 2015-08-07 14:27:34 -07:00
AnanyaKumar
d9b85652ae Add Daemon API 2015-08-06 13:15:19 -07:00
Dawn Chen
536313c82c Merge pull request #9472 from deads2k/expose-name-validation 
expose common name validation methods
 2015-08-06 10:51:51 -07:00
Ananya Kumar
ef1e576810 Add support for request 2015-08-05 19:00:19 -07:00
Mike Danese
8e33cbfa28 rewrite go imports 2015-08-05 17:30:03 -07:00
Manan Saraf
b2ebfeef25 Fixed empty name error and also changed tests 2015-08-04 14:09:42 -07:00
Chao Xu
18d32751fd improve the error message of update pod 2015-08-02 13:41:53 -07:00
deads2k
d73faa8272 expose common name validation methods 2015-07-27 13:12:28 -04:00
markturansky
0a0af48e51 added validation for AccessModes 2015-07-27 13:02:16 -04:00
Brendan Burns
a8f02e5472 Automatically open a firewall when creating a GCE load balancer. 2015-07-10 14:35:29 -07:00
nikhiljindal
274792d7bb Stop exposing v1beta3 by default 2015-07-01 14:38:02 -07:00
Robert Bailey
54a3ebef3c Merge pull request #10315 from nikhiljindal/invalidValue 
Updating the "invalid value" error message to include the list of valid values
 2015-06-26 10:46:59 -07:00
Robert Bailey
0048eae8eb Merge pull request #9965 from stevekuznetsov/skuznets/allow-https 
Allowing for HTTPS Probes
 2015-06-26 10:43:37 -07:00
Steve Kuznetsov
3008ff6150 Changed HTTPGetAction to allow user-defined schemes 2015-06-25 16:59:12 -04:00
nikhiljindal
3b3ee0ed77 Improving an error message 2015-06-25 13:08:09 -07:00
Salvatore Dario Minonne
4b13faa346 To add validation for service ports when defined as string (fixing issue #9734) 2015-06-22 17:21:51 +02:00
Satnam Singh
3591a543d1 Merge pull request #9919 from liggitt/port_protocol_validation 
Validate port protocol case strictly
 2015-06-19 15:18:03 -07:00
Jordan Liggitt
68a8a25494 Rename pod.spec.serviceAccount -> pod.spec.serviceAccountName for v1 2015-06-18 22:38:00 -04:00
Satnam Singh
59a96f1028 Merge pull request #9688 from liggitt/validate_pod_spec 
Validate service account name in pod spec
 2015-06-18 17:18:09 -07:00
derekwaynecarr
2518d8c0fc Add LimitRange range validation 2015-06-17 10:24:31 -04:00
Jordan Liggitt
2b840279d9 Validate service account name in pod spec 2015-06-16 21:09:01 -04:00
Jordan Liggitt
ee4cd972e0 Validate port protocol case strictly 2015-06-16 20:28:11 -04:00
Jason Sommer
d59a8ff7f8 Improve signature consistency for ValidateObjectMetaUpdate 
Fixes #9340

Signed-off-by: Jason Sommer <jsdirv@gmail.com>
 2015-06-08 02:56:38 -05:00
Tim Hockin
1aa9b0b86a Don't allow link-local Endpoints 2015-06-03 11:40:04 -07:00
Tim Hockin
4318ca5a8b Rename 'portal IP' to 'cluster IP' most everywhere 
This covers obvious transforms, but not --portal_net, $PORTAL_NET and
similar.
 2015-05-28 16:10:44 -07:00
Chao Xu
9c1153322e update PodSpec.Host to PodSpec.NodeName in /pkg/api/types.go and /pkg/api/v1beta3/types.go 2015-05-28 14:10:06 -07:00
Justin Santa Barbara
7346cc8042 Add ServiceType = NodePort; wire everything up 2015-05-22 19:14:28 -04:00
Justin Santa Barbara
e49ad95462 Mark PublicIPs as deprecated & rename to DeprecatedPublicIPs in the latest API 
We need to keep them in the API so that we can round-trip between versions.
 2015-05-22 19:14:27 -04:00
Justin Santa Barbara
2197c8da5a Add NodePort to ServicePort 
We prevent it from being set by validation
 2015-05-22 19:14:27 -04:00
Justin Santa Barbara
973c2e4819 Add Type to ServiceSpec: ClusterIP or LoadBalancer 2015-05-22 19:14:21 -04:00
Huamin Chen
4a800fd10e add rados block device(rbd) volume plugin 
Signed-off-by: Huamin Chen <hchen@redhat.com>
 2015-05-21 14:51:31 -04:00
Dawn Chen
0710976d43 Merge pull request #8490 from thockin/diff-proto 
Allow same-hostport-different-protocol
 2015-05-21 09:16:16 -07:00
Tim Hockin
cb49843ccb Merge pull request #8140 from vishh/namespace 
Update Namespace names to follow DNS label format
 2015-05-19 11:25:32 -07:00
Vishnu Kannan
d10af89493 Updating namespaces to be DNS labels instead of DNS names. 2015-05-19 11:09:09 -07:00
Tim Hockin
c7bf373d98 Allow same-hostport-different-protocol 2015-05-19 10:00:35 -07:00
Tim Hockin
65833e42c4 rename CapabilityType Capability 2015-05-18 17:21:30 -07:00
Tim Hockin
f66ca25d9f Rename AccessMode to PersistentVolumeAccessMode 2015-05-18 17:21:30 -07:00
deads2k
be0f2d2930 add dockercfg secret types 2015-05-18 08:25:27 -04:00
deads2k
d404a17f0a allow leading dots in secret keys 2015-05-18 08:17:58 -04:00
derekwaynecarr
8216332611 Kubelet kills a pod that exceeds ActiveDeadlineSeconds 2015-05-15 16:33:37 -04:00
Tim Hockin
2f59aa4f25 Somewhat better error messages for common formats 
Clearer strings with examples.
 2015-05-13 13:59:16 -07:00
markturansky
0191574f7e Bi-directional bind between pv.Spec.ClaimRef and pvc.Spec.VolumeName 2015-05-13 14:05:21 -04:00
Nikhil Jindal
d75bd8bf2a Merge pull request #7101 from liggitt/service_account 
ServiceAccounts
 2015-05-12 10:23:41 -07:00
feihujiang
4bb594b34d Duplicate service port name can't be validated 
Duplicate service port name can't be validated

Duplicate service port name can't be validated

Duplicate service port name can't be validated
 2015-05-12 15:18:27 +08:00
Jordan Liggitt
6e1e7dbb24 Add ServiceAccountToken SecretType 2015-05-11 17:18:05 -04:00
Tim Hockin
3aa39d54b6 Service port names are required for multi-port 
There is no provision for the first port to be unnamed.  I think I
initially allowed that, but then the Subset struct became a sorted
struct, so the first-ness of the port got lost.  If you have a Service
with one named and one unnamed port, what happens is that the
EndpointController fails to create Endpoints (validation error).
 2015-05-09 20:11:48 -07:00
Zach Loafman
875e83a741 Revert "Revert "Security context - types, kubelet, admission"" 2015-05-05 16:02:13 -07:00
Zach Loafman
f48904fd5e Revert "Security context - types, kubelet, admission" 2015-05-05 15:20:39 -07:00
Paul Weil
982bf19c20 security context initial implementation - squash 2015-05-05 13:46:13 -04:00
Paul Morie
e949a623ff Change EnvVarSource.FieldPath -> FieldRef and add example 2015-05-04 18:41:09 -04:00
Eric Paris
6b3a6e6b98 Make copyright ownership statement generic 
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
 2015-05-01 17:49:56 -04:00
Paul Morie
7d30f09ebf Add downward API for environment vars 2015-04-27 14:13:11 -04:00
Deyuan Deng
c73ce1db34 Validate Node IPs; clean up validation code 2015-04-23 21:08:18 -04:00
Clayton Coleman
e6e034af4f Rename PodTemplate.Spec to PodTemplate.Template 2015-04-22 12:54:27 -04:00
derekwaynecarr
5036289b5e Improve container resource requirements validation 2015-04-20 15:08:18 -04:00
Alex Robinson
9a351e3670 Move validation of load balancers only supporting TCP ports to validation.go. 2015-04-14 18:56:51 +00:00
Justin Santa Barbara
9711e771c5 Rename AWSPersistentDisk -> AWSElasticBlockStore, aws-pd -> aws-ebs 
Per comments from @markturansky - thanks!
 2015-04-10 13:25:43 -07:00
Justin Santa Barbara
edf0292d4a Add initial support for Volumes to AWS 2015-04-10 13:25:42 -07:00
derekwaynecarr
8364055f0f Improve validation and fix not throwing an error during ns delete 2015-04-10 11:41:28 -04:00
gmarek
c20efb6bae Add validation for Endpoints 2015-04-08 20:12:07 +02:00
Huamin Chen
a278ceeb0a implement glusterfs volume plugin 
Signed-off-by: Huamin Chen <hchen@redhat.com>
 2015-04-07 09:14:39 -04:00
Huamin Chen
7a82af31de add iscsi volume plugin 
Signed-off-by: Huamin Chen <hchen@redhat.com>
 2015-04-06 16:20:28 -04:00
markturansky
a5ebacb043 changed claimed validation from length check to specific storage check 2015-04-06 08:46:44 -04:00
markturansky
c4a53a23bd Added validation to prevent mutating Claim.Spec after binding 2015-04-06 08:46:44 -04:00
Rohit Jnagal
e0ff139279 Remove validation for Capacity as it got moved from Spec to Status. 
Also fix breakage from ExternalID validation: Default ExternalID to node name when not specified.
 2015-04-02 00:51:52 +00:00
Clayton Coleman
dec3209229 Merge pull request #6246 from derekwaynecarr/finalize_fix 
Fix Namespace Termination
 2015-04-01 17:34:56 -04:00
derekwaynecarr
b745f51c65 Client must specifiy a resource version on finalize 2015-04-01 11:16:45 -04:00
Tim Hockin
e19f4939b1 fix tests broken by stronger validation 2015-03-31 11:13:44 -07:00
Tim Hockin
186818d787 WIP: Implement multi-port Services 2015-03-30 19:28:11 -07:00
Tim Hockin
8ae203825b Implement multi-port endpoints 
Instead of endpoints being a flat list, it is now a list of "subsets"
where each is a struct of {Addresses, Ports}.  To generate the list of
endpoints you need to take union of the Cartesian products of the
subsets.  This is compact in the vast majority of cases, yet still
represents named ports and corner cases (e.g. each pod has a different
port number).

This also stores subsets in a deterministic order (sorted by hash) to
avoid spurious updates and comparison problems.

This is a fully compatible change - old objects and clients will
keepworking as long as they don't need the new functionality.

This is the prep for multi-port Services, which will add API to produce
endpoints in this new structure.
 2015-03-27 12:36:32 -07:00
Brian Grant
a4bf91c8c0 Merge pull request #5690 from satnam6502/failputnover 
Give better error message for PUTs with no resource version
 2015-03-27 07:12:56 -07:00
gmarek
5a11748018 Move Capacity from NodeSpec to NodeStatus 2015-03-26 15:28:48 +01:00
Satnam Singh
cd05c8b9bc Give better error message for PUTs with no resource version 2015-03-25 15:52:48 -07:00
Rohit Jnagal
49ff04765b Add validation for node creation. 2015-03-25 21:55:03 +00:00
markturansky
f762b303ad PersistentVolume & PersistentVolumeClaim API types 2015-03-25 10:09:25 -04:00
Filip Grzadkowski
7085a0cb44 Merge pull request #5508 from fgrzadkowski/validate_ips 
Validate Service.Spec.publicIPs to be a valid IP that is not a localhost
 2015-03-25 12:11:29 +01:00
Abhi Shah
f1872d36cf Merge pull request #5814 from vmarmol/net-host 
Add HostNetworking container option to API.
 2015-03-24 15:55:27 -07:00
Victor Marmol
2a0793c155 Add HostNetworking container option to API. 
This allows a container to run within the same networking namespace as
the host. This will be locked down by default using a flag on the master
and nodes (similar to how privileged is handled today).
 2015-03-24 14:40:28 -07:00
Tim Hockin
064b7dec42 Merge pull request #5807 from pmorie/secret_volume_ref 
Change secret volume plugin reference to name
 2015-03-24 14:18:35 -07:00
Paul Morie
e40ba109a1 Change SecretVolumeSource to use a secret name instead of ObjRef 2015-03-24 13:58:41 -04:00
derekwaynecarr
29c491ef2e Namespace.Spec.Finalizer support 2015-03-24 10:36:06 -04:00
Filip Grzadkowski
24eb1a08f3 Validate Service.Spec.publicIPs to be a valid IP that is not a localhost 2015-03-24 10:48:46 +01:00
Clayton Coleman
65425f690c Move field errors to pkg/util/fielderrors 
Allows pkg/api to take a reference to labels.Selector and fields.Selector
 2015-03-22 17:43:34 -04:00
Dawn Chen
7a6490f572 Merge pull request #5729 from thockin/plural_endpoints_30_restart 
Rename Service.ContainerPort to TargetPort in v1b3
 2015-03-20 14:37:46 -07:00
Tim Hockin
4375376e9c Rename Service.ContainerPort to TargetPort in v1b3 
Fix all callers and examples.  Part of multi-port service cleanup.
 2015-03-20 13:50:06 -07:00
Abhishek Gupta
b0c23c1046 Headless Services: Adding option to specify None for PortalIP 2015-03-20 12:10:03 -07:00
Filip Grzadkowski
f89f91b7bd Validate that there is at least one container in the pod 2015-03-19 12:31:53 +01:00
gmarek
a3b137ce8e Cleanup of validation.go 2015-03-18 08:59:35 +01:00
Wojciech Tyczynski
e6d188fca8 Remove BoundPod structure 2015-03-17 10:27:41 +01:00
Dawn Chen
34e9c82c70 Convert RestartPolicy to string for v1beta3. 
Fixed #3607 and spiritually support #5475
 2015-03-13 18:38:07 -07:00
Nikhil Jindal
d9249a26e0 Merge pull request #5175 from thockin/plural_services_10 
Make testing service validation easier
 2015-03-12 15:48:37 -07:00
Ravi Sankar Penta
f6ecec5880 Allow admin user to explicitly unschedule the node 
Setting Unschedulable on the node will not touch any existing pods
on the node but will block scheduling of new pods on the node.
 2015-03-12 14:27:27 -07:00
Clayton Coleman
d016f478e0 Ignore changes to creation timestamp from clients on update 
CreationTimestamp is not an authoritative field (like UID) so mismatches
can be safely ignored.
 2015-03-09 12:04:35 -04:00
Tim Hockin
0b888e8673 Make testing service validation easier 
Part of multi-port services.

If people like this, we could start to apply this pattern elsewhere.

TL;DR: don't redefine objects over and over changing one thing each
time.  Instead provide a func that mutates a base object to test facets
of validation.  Much easier to read and to update.
 2015-03-08 21:41:37 -07:00
gmarek
bb8a4f5ed3 apply comments 2015-03-06 08:23:22 +01:00
gmarek
726a5af075 Loosen label and annotation validation and related tests 2015-03-06 08:23:22 +01:00
Deyuan Deng
9b0af8df63 Node addresses 2015-03-04 16:47:31 -05:00
Brendan Burns
fb90b56bf6 Embed VolumeSource in v1beta3 and internal. 2015-03-04 02:25:40 -08:00
Clayton Coleman
0ac49d77a0 TCPSocket could not be used as it was not checked in validation 
Attempting to use it gave the error "must register one handler".
Added more tests for it.
 2015-03-02 15:27:11 -05:00
Zach Loafman
4937008ae0 Revert "TCPSocket could not be used as it was not checked in validation" 2015-03-02 11:14:27 -08:00
Brendan Burns
c7cbc5c991 Merge pull request #4883 from smarterclayton/fix_tcpsocket_validation 
TCPSocket could not be used as it was not checked in validation
 2015-03-02 10:53:48 -08:00
Brendan Burns
fe973461f5 Merge pull request #4916 from thockin/plural_21_endpoints 
Rename type Port to ContainerPort
 2015-03-02 10:53:32 -08:00
Tim Hockin
532c39c336 Add defaults for HTTGetAction.Path & test actions 
The comment says optional - this makes it optional.  Test handler actions.
 2015-03-01 21:23:18 -08:00
Clayton Coleman
d3a5a48d00 TCPSocket could not be used as it was not checked in validation 
Attempting to use it gave the error "must register one handler".
Added more tests for it.
 2015-03-01 22:31:57 -05:00
Tim Hockin
ea548b8260 Rename type Port to ContainerPort 
Sadly I had to do this by hand - I just could not get gorename to fix up
users of it.
 2015-02-27 21:05:59 -08:00
Daniel Smith
650f6cb826 Revert "Multi-port Endpoints" 2015-02-23 13:53:21 -08:00
Tim Hockin
eed36455a7 Merge pull request #4653 from thockin/secret_fixups 
Secrets fixups
 2015-02-23 13:49:19 -08:00
Tim Hockin
607b736a3f Rename volume source types to be consistent. 2015-02-23 12:39:57 -08:00
Tim Hockin
8bdfc352ce minor fixups as I review secrets 2015-02-23 12:39:47 -08:00
Tim Hockin
e0fd83096c Rename type Port to ContainerPort 
Sadly I had to do this by hand - I just could not get gorename to fix up
users of it.
 2015-02-21 22:26:38 -08:00
Paul Morie
a42ff94c8f Add secret volume plugin and e2e test 2015-02-18 16:27:44 -05:00
Paul Morie
fb001ada21 Secret API resource 2015-02-18 11:54:56 -05:00
Mike Danese
f7df9b9d37 add validation for api.Probe 2015-02-16 21:56:03 -08:00
derekwaynecarr
0bd0e12bbc Add support for Namespace as Kind 
Add example for using namespaces
 2015-02-10 09:50:50 -05:00
Vishnu Kannan
d0524d4778 Rename ResourceRequirementSpec to ResourceRequirements. 2015-02-09 23:19:38 +00:00
Marek Grabowski
72a066a992 Add more information to Validator error messages. 2015-02-09 18:07:09 +01:00
Brendan Burns
31ce2a9411 Adjust replication controller validation to be more flexible about 
read/write volumes.
Update docs to reflect reality as it is implemented.
 2015-02-06 14:58:21 -08:00
Brendan Burns
50e855953f Merge pull request #4131 from a-robinson/validate 
Add a few extra test cases for API validation of labels
 2015-02-05 15:37:45 -08:00
Yu-Ju Hong
283919e8b1 Fix tests in validation_test 
Some tests expect the error cases to fail for a specific reason, but they could
fail for other reasons and still pass. This caused some changes to break the
tests without noticing the breakage. Example are the recent defaulting PR

This change fixes such tests and also updates some obsolete tests.
 2015-02-04 15:44:46 -08:00
Alex Robinson
6bb374ca54 Add a few extra test cases for API validation of labels that would have 
caught a bug that was in past versions. Also, copy the label key format
requirements from the API types.go comments into the labels doc.
 2015-02-04 22:24:46 +00:00
Yu-Ju Hong
4a72addaeb Factor out API defaulting from validation logic 
Currently, the validation logic validates fields in an object and supply default
values wherever applies. This change factors out defaulting to a set of
defaulting callback functions for decoding (see #1502 for more discussion).

 * This change is based on pull request 2587.

 * Most defaulting has been migrated to defaults.go where the defaulting
   functions are added.

 * validation_test.go and converter_test.go have been adapted to not testing the
   default values.

 * Fixed all tests with that create invalid objects with the absence of
   defaulting logic.
 2015-02-03 00:55:42 -08:00
Clayton Coleman
a7c9a12286 Add name generation and normalize common create flows 
Adds `ObjectMeta.GenerateName`, an optional string field that defines
name generation behavior if a Name is not provided.

Adds `pkg/api/rest`, which defines the default Kubernetes API pattern
for creation (and will cover update as well). Will allow registries
and REST objects to be merged by moving logic on api out of those places.

Add `pkg/api/rest/resttest`, which will be the test suite that verifies
a RESTStorage object follows the Kubernetes API conventions and begin
reducing our duplicated tests.
 2015-02-02 14:44:53 -05:00
Brian Grant
6e415f760b Merge pull request #4017 from smarterclayton/relax_annotation_validations 
Slightly relax annotation validation
 2015-02-02 11:42:38 -08:00
Clayton Coleman
b30173658f Slightly relax annotation validation 
The more aggressive validation on annotations broke openshift (and
backwards compat for our data).  This change relaxes to allow mixed
case so we can continue working in the short term, try to see if we
can agree on relaxation, and if we can't, apply the stronger
validation here.
 2015-02-01 19:03:04 -05:00
Vishnu Kannan
5e36f63f8b Adding ResourceRequirementSpec to v1beta1, v1beta2, and v1beta3 APIs. The old resource 
quantities 'CPU' and 'Memory' will be preserved until support for v1beta1 and v1beta2 APIs are
dropped.
Improved resource validation in the process.
 2015-02-01 02:19:55 +00:00
Deyuan Deng
c793c4f0ab Sync node status from node controller to master. 2015-01-29 23:17:15 -05:00
Tim Hockin
d01ea11a6e Merge pull request #3856 from smarterclayton/validation_logic_needs_cleanup 
Validation of ObjectMeta is inconsistently applied
 2015-01-29 14:12:44 -08:00
derekwaynecarr
829fa69527 Introduce a ResourceQuota object 2015-01-28 15:03:19 -05:00
Clayton Coleman
a0356bca96 Unify validation logic for create and update paths 
Ensure ObjectMeta is consistently validated on both create and update

Make PortalIP uncleareable
 2015-01-28 13:10:37 -05:00
derekwaynecarr
74f368f50e Modified LimitRangeItem.Kind to LimitRangeItem.Type, added example files 2015-01-27 16:41:28 -05:00
derekwaynecarr
091cbe5fa2 Add a limit range resource 2015-01-27 16:41:27 -05:00
Brendan Burns
99583fc8c5 Fix a bug in validation that was leftover from the previous way of externalizing services. 2015-01-26 13:19:27 -08:00
markturansky
131ce993c4 Added validation for annotations 2015-01-26 09:32:09 -05:00
Vishnu Kannan
c32295a180 Adding a 'Typename' strongtype for representing all compute resource types. 2015-01-23 22:17:56 +00:00
Tim Hockin
30219f8dfa Merge pull request #3664 from thockin/pull-if 
Pull if
 2015-01-21 13:05:28 -08:00
Tim Hockin
81343aac63 Change PullPolicy constants to match 2015-01-21 12:48:56 -08:00
Tim Hockin
819803b79f Make VolumeSource not be a pointer 
There's no reason for it to be a pointer.
 2015-01-20 17:54:04 -08:00