github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
93,054 Commits 1 Branch 31 Tags 1,019 MiB
479249b3a3
Commit Graph

9228 Commits

Author SHA1 Message Date
Davanum Srinivas
442a69c3bd
switch over k/k to use klog v2 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-16 07:54:27 -04:00
Kubernetes Prow Robot
9d3406c27b
Merge pull request #91136 from tosi3k/am-version-update 
Bump addon-manager's version to v9.1.0
 2020-05-15 23:02:41 -07:00
Jordan Liggitt
950ed38996 Mark experimental-cluster-signing-duration deprecated, add --cluster-signing-duration 2020-05-15 14:09:58 -04:00
Antoni Zawodny
f2c22addf5 Bump addon-manager's version to v9.1.0 2020-05-15 12:52:46 +02:00
Kubernetes Prow Robot
e6433bd76b
Merge pull request #91018 from tosi3k/am-whitelist-configuration 
Allow overriding the default list of resources of list in addon-manager
 2020-05-15 02:48:11 -07:00
张潇
fdef0a6767
beta.kubernetes.io/os is already deprecated 2020-05-15 08:27:06 +08:00
Barni S
d826b4b05c Bump Stackdriver version to 1.11 2020-05-14 18:45:17 -04:00
Kubernetes Prow Robot
b8be11e3fc
Merge pull request #90995 from prameshj/nodelocal-image 
Use the latest node-cache image.
 2020-05-12 08:25:28 -07:00
Antoni Zawodny
ca90cf6049 Allow overriding the default list of resources of list in addon-manager 2020-05-12 12:50:05 +02:00
Tim Hockin
d681a04541 Force LICENSES refresh on GCE images 
Some test images have it baked in.
 2020-05-11 14:25:26 -07:00
Pavithra Ramesh
1ea97db78a Use the latest node-cache image. 
The image has debian base 2.0.0, some stability fixes and also uses
UDP to connect to stubDomains configured via kube-dns configmap.
 2020-05-11 13:10:27 -07:00
Yuwen Ma
1aa67fc525
Switch core master base images from debian to distroless 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-09 06:55:00 -04:00
Kubernetes Prow Robot
785aadca7f
Merge pull request #90248 from prameshj/affinitydns 
Add back anti-affinity to kube-dns pods.
 2020-05-09 00:43:51 -07:00
Kubernetes Prow Robot
7d53ecee37
Merge pull request #90575 from thockin/fix_license_again 
Reorganize vendor licenses again (revert #85220)
 2020-05-08 23:03:51 -07:00
Tim Hockin
325ea6e3c2 Restructure licenses again (revert cd4474a) 
This moves licenses of vendored code from one monolith file into a tree
of individual files for easier reviews.  This fixes both the bash and
bazel paths.
 2020-05-07 21:48:59 -07:00
Tim Hockin
9213616a23 Add better debug when GCE cluster turnups fail 2020-05-07 19:43:32 -07:00
Walter Fender
339918d206 Add admin account on master for kube-up 
Creates a master local admin account.
If you are on the master you can now run kubectl.
For issue 87481.
 2020-05-06 17:19:58 -07:00
Kubernetes Prow Robot
14eb291084
Merge pull request #90751 from yliaog/windep 
Removed leftover comments for the deleted function Get_MgmtSubnet
 2020-05-05 20:03:09 -07:00
Kubernetes Prow Robot
d8a513ef99
Merge pull request #90697 from justaugustus/base-images 
base-images: Use new debian-base:v2.1.0 and build new debian-iptables:v12.1.0
 2020-05-05 18:01:23 -07:00
Kubernetes Prow Robot
27f06962d8
Merge pull request #90744 from prameshj/kubedns-version 
Bump up the kube-dns version to 1.15.10
 2020-05-05 12:39:22 -07:00
Stephen Augustus
d95dcc61f3 cluster/images/etcd: Bump etcd image tags for new debian-base 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-05 15:16:38 -04:00
Yu Liao
eb6ee368b9 Removed leftover comments for the deleted function Get_MgmtSubnet 2020-05-04 21:25:51 -07:00
Pavithra Ramesh
069381edec Bump up the kube-dns version to 1.15.10 2020-05-04 16:14:53 -07:00
Pavithra Ramesh
aaa0d12cc7 Add back anti-affinity to kube-dns pods. 
This change also updates to the latest kube-dns images. The
anti-affinity change was previously rolled back in https://github.com/kubernetes/kubernetes/pull/59357
Adding this back as there have been imrpovements in scheduler
performance since.
 2020-05-04 15:40:19 -07:00
Davanum Srinivas
0d38f21932
Use bionic repo for docker as focal is not yet available 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-03 16:50:49 -04:00
Stephen Augustus
64300d8fff deps: Update dependents to use debian-base:v2.1.0 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-02 23:09:09 -04:00
Stephen Augustus
f828821eea releng: Point debian-base image references to K8s Infra 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-02 22:51:40 -04:00
Kubernetes Prow Robot
4a7360debf
Merge pull request #90665 from justaugustus/base-images 
cleanup: Base image workflow improvements
 2020-05-02 01:54:26 -07:00
Stephen Augustus
410b388ad0 build: Fix base image versions on dependents 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-01 20:39:07 -04:00
Kubernetes Prow Robot
628b413f8e
Merge pull request #90400 from zhlhahaha/1737 
fix cross build conformance image error
 2020-05-01 09:34:30 -07:00
Kubernetes Prow Robot
15d6c9a5ea
Merge pull request #90605 from yliaog/windep 
switched to default non-masquerade destination ranges
 2020-05-01 00:41:54 -07:00
Jie Shen
c71a25e912
Fix shellcheck warnings/errors in cluster/gce/upgrade.sh (#88576) 
* Fix shellcheck warnings/errors in cluster/gce/upgrade.sh

* Update cluster/gce/upgrade.sh

Co-Authored-By: Slava Semushin <slava.semushin@gmail.com>

Co-authored-by: Slava Semushin <slava.semushin@gmail.com>
 2020-04-30 21:26:06 -07:00
Kubernetes Prow Robot
29e6bff03a
Merge pull request #90420 from neolit123/1.19-remove-cluster-juju 
/cluster: remove juju
 2020-04-30 15:55:37 -07:00
Yu Liao
9684c13fba switched to default non-masquerade destination ranges 2020-04-30 12:29:34 -07:00
Kubernetes Prow Robot
7229e13036
Merge pull request #90423 from neolit123/1.19-move-cluster-bash-to-util 
/cluster: add / update OWNERS labels
 2020-04-29 04:52:24 -07:00
ialidzhikov
20d44dfbfe Update Calico cpva to v0.8.2 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2020-04-28 09:36:14 +03:00
Kubernetes Prow Robot
62880cb122
Merge pull request #90421 from neolit123/1.19-remove-cluster-clientbin 
/cluster: cleanup clientbin.sh
 2020-04-27 22:26:33 -07:00
Lubomir I. Ivanov
b4bbf0a69f /cluster: cleanup clientbin.sh 
clientbin.sh is only used in kubectl.sh. It contains logic
for finding a binary that was build from the k/k tree
and for printing errors if the binary cannot be found.

- Remove clientbin.sh
- Remove references of clientbin.sh from /cluster/BUILD
- Use hack/lib/util.sh's kube::util::find-binary for finding the binary
 2020-04-28 00:27:33 +03:00
Kubernetes Prow Robot
e494b0788b
Merge pull request #89543 from bartekzurawski/fix-kube-up-gce-private-restart 
Set ip alias route on kubernetes-master during booting
 2020-04-24 09:38:07 -07:00
Howard Zhang
7550ea0ab3 fix cross build conformance image error 
After using docker buildx build --platform,
conformance image can build from correct
architecture debian:stretch-slim image.

Signed-off-by: Howard Zhang <howard.zhang@arm.com>
 2020-04-24 16:10:43 +08:00
Lubomir I. Ivanov
c0387ab3ac /cluster: add / update OWNERS 2020-04-24 03:21:07 +03:00
Lubomir I. Ivanov
b08cd0e2cb remove /cluster/juju 
Juju changed home and was cleaned up in 422a7ec49.
Remove the "provider" leftover in /cluster/juju.

No references were found in k/test-infra, k/k.
 2020-04-23 23:58:14 +03:00
Joakim Roubert
bf77061cb1 Fix shellcheck failures in cluster/pre-existing/util.sh 
This is merely bringing PR #82059 back to life in a contemporary
context, so all cred should go to k-toyoda-pi (and BenTheElder).

Change-Id: I7cf33e50adabbd23d18348448c21c6255502c1ba
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-04-23 16:02:48 +02:00
Kubernetes Prow Robot
53374fa519
Merge pull request #90343 from neolit123/1.19-remove-kubernetes-anywhere 
remove kubernetes-anywhere from this repository
 2020-04-22 19:22:24 -07:00
Kubernetes Prow Robot
1bcd49d5cd
Merge pull request #90156 from vinayakankugoyal/nonroot 
Run kube-scheduler and kube-addon-manager as non root
 2020-04-22 19:21:46 -07:00
Lubomir I. Ivanov
ad63ad7d40 cluster: cleanup unused scripts 
Verified with k/k and k/test-infra.

- restore-from-backup.sh
Performs restoration of etcd snapshots and the logic seems valid
on a quick look, but doesn't seem to be used anywhere in our infra.
I suspect this is used on demand for local testing, but /cluster root
doesn't seem like the right place for it at this point.
- test-*.sh
Gikgo related calls but these bash scripts seem unused in the infra.
 2020-04-22 03:45:56 +03:00
Lubomir I. Ivanov
820c87c069 remove kubernetes-anywhere from this repository 
The project has been deprecated since Dec 2018 and is unused.

Cleanup in:
- /test/e2e/framework/
- /cluster/
 2020-04-21 22:52:51 +03:00
toyoda
a01b1dada5 Fix shellcheck failure in cluster/gce/config-default.sh 2020-04-17 16:11:58 +09:00
Vinayak Goyal
7a5f4c47de Run kube-scheduler and kube-addon-manager as non root 2020-04-16 14:50:04 -07:00
Kubernetes Prow Robot
3b00d7dce5
Merge pull request #89415 from wiremind/fluent-plugin-kubernetes_metadata_filter 
cluster addons: fluentd-elasticsearch: update gems.
 2020-04-14 22:00:03 -07:00
Kubernetes Prow Robot
aed3f05495
Merge pull request #88459 from joakimr-axis/joakimr-axis_config-test.sh 
Fix shellcheck warnings/errors in cluster/gce/config-test.sh
 2020-04-14 15:38:02 -07:00
Bartek Żurawski
3e4744c736 Set ip alias route on kubernetes-master during booting 2020-04-15 00:03:05 +02:00
Kubernetes Prow Robot
ea2d784545
Merge pull request #89895 from jingyih/update_etcd_server_3p4p7 
Update default etcd server to 3.4.7 in k8s v1.19
 2020-04-14 12:34:06 -07:00
jingyih
394df132bd Update default etcd server to 3.4.7 2020-04-13 14:37:56 -07:00
Kubernetes Prow Robot
c0be582ca5
Merge pull request #89269 from Jefftree/network-proxy-beta 
Use v1beta1 for egress selector config
 2020-04-09 18:07:49 -07:00
Kubernetes Prow Robot
08e1fd3bb9
Merge pull request #89970 from liggitt/static-priority 
Fix priorityClassName typo, add numeric priority to static pods
 2020-04-09 07:49:57 -07:00
Joakim Roubert
21bef7536c Fix shellcheck warnings/errors in cluster/gce/config-test.sh 
Change-Id: I3760337aa345ca5b801587ea12c971a95168f7d7
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-04-09 08:30:13 +02:00
Lubomir I. Ivanov
9bbd321fec remove /cluster/kubeadm.sh and /test/cmd/kubeadm.sh 
/cluster/kubeadm.sh is used to find the kubeadm binary.
This file is legacy and is removed.

Remove /test/cmd/kubeadm.sh. This file contains a function that is used
to build kubeadm and invoke "make test". Move the function contents
to hack/make-rules/test-cmd.cmd.

Stop sourcing /test/cmd/kubeadm.sh in /test/cmd/legacy-script.sh.

Also remove the --kubeadm-path invocation as this can be handled
with an env. variable directly.
 2020-04-09 00:47:15 +03:00
Jordan Liggitt
5534c12dad Fix priorityClass typo, add numeric priority to static pods 2020-04-08 15:33:39 -04:00
Kubernetes Prow Robot
4ae223fbff
Merge pull request #84904 from clarklee92/FixShellCheck 
Fix shell check
 2020-04-06 19:09:58 -07:00
Kubernetes Prow Robot
c158001bbc
Merge pull request #89825 from tosi3k/log-dump-ssh-timeout 
Enable timeout for SSH-ing to non-logexported nodes
 2020-04-06 07:15:46 -07:00
Antoni Zawodny
15160168e5 Apply PR fixes 2020-04-06 14:53:02 +02:00
Kubernetes Prow Robot
fa6b9bec81
Merge pull request #89759 from cheftako/master 
Switch COS image to m81.
 2020-04-04 02:57:46 -07:00
Antoni Zawodny
6e34409f2b Enable timeout for SSH-ing to non-logexported nodes 2020-04-03 17:05:58 +02:00
Kubernetes Prow Robot
d721cb4c71
Merge pull request #89760 from jprzychodzen/le-enable-extra-services 
Enable env defined services to dump in logexporter
 2020-04-03 06:09:45 -07:00
Kubernetes Prow Robot
81a0e2f62b
Merge pull request #85923 from MrHohn/sig-gcp-owner-file 
Migrate OWNERS file to apply the area/provider/gcp label
 2020-04-02 19:03:46 -07:00
Mateusz Matejczyk
9639464e43 Propagate CONCURRENT_SERVICE_SYNCS to node env 2020-04-02 14:38:41 +02:00
Jakub Przychodzeń
2b533f9720 Enable env defined services to dump in logexporter 2020-04-02 09:38:39 +02:00
Walter Fender
31393df6ee Switch COS image to m81. 2020-04-02 00:18:31 -07:00
Kubernetes Prow Robot
6a552da932
Merge pull request #89664 from spiffxp/ignore-list-resources-fails 
Allow list-resources.sh to continue if a resource fails to list
 2020-03-31 20:03:41 -07:00
Kubernetes Prow Robot
a256498ba4
Merge pull request #89661 from pjh/gce-win-pause-bump 
Bump GCE Windows pause image version
 2020-03-30 17:09:19 -07:00
Kubernetes Prow Robot
103fb552ad
Merge pull request #89634 from YangLu1031/master 
Fix dumping docker images log
 2020-03-30 17:09:02 -07:00
Aaron Crickenberger
52653195f6 Allow list-resources.sh to continue if a resource fails to list 
The list-resources.sh script is used solely by our CI, specifically
kubernetes/test-infra/kubetest with the --check-leaked-resources
flag. Currently if a single resource fails to list, we fail the entire
job.

I think this is too brittle. A review of previous issues on
kubernetes/kubernetes that relate to failure of this script shows that
the issues usually resolve themselves, or would be caught by the diff
of before/after.

Let's instead allow the script to continue listing all resources,
and let kubetest's resource diff fail the job.
 2020-03-30 12:01:29 -07:00
Peter Hornyack
72f58ae4ff Bump GCE Windows pause image version 
pause-win:1.2.1 is based on the March Windows container base images for
both LTSC 2019 and SAC 1909.
 2020-03-30 11:30:53 -07:00
Kubernetes Prow Robot
24d8a17f70
Merge pull request #89601 from pjh/gce-march-images 
Update GCE Windows node images with March's Windows updates
 2020-03-30 08:22:29 -07:00
Kubernetes Prow Robot
93400b4347
Merge pull request #89578 from oxddr/bump-logexporter 
Bump logexporter to v20200327-9ba073aa98
 2020-03-30 04:45:53 -07:00
Yang Lu
735ab684ce Fix docker image log dump 2020-03-29 08:43:50 -07:00
Kubernetes Prow Robot
c7abf44a19
Merge pull request #88856 from yaseenhamdulay/patch-1 
Create etcd user in cloud-init master.yaml rather than in configure-h…
 2020-03-27 20:41:53 -07:00
Peter Hornyack
55df85ba37 Update GCE Windows node images with March's Windows updates 2020-03-27 15:44:08 -07:00
Kubernetes Prow Robot
edbbb6a89f
Merge pull request #89571 from oxddr/enable-logexporter 
Revert "Revert "log-dump.sh: allow to dump extra log files""
 2020-03-27 14:36:16 -07:00
Janek Łukaszewicz
875e39e37a Bump logexporter to v20200327-9ba073aa98 2020-03-27 16:17:15 +01:00
Kubernetes Prow Robot
3842a92f5f
Merge pull request #89413 from zhouya0/remove_prometheus_references_from_etcd_version_monitor 
Remove prometheus references from etcd version monitor
 2020-03-27 06:56:23 -07:00
Janek Łukaszewicz
4f0816ebf2 Revert "Revert "log-dump.sh: allow to dump extra log files"" 
This reverts commit c20e604377.
 2020-03-27 12:23:17 +01:00
Peter Hornyack
3583816112 Fix INFRA_CONTAINER variable references 
Tested:
NUM_NODES=2 NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true \
  KUBERNETES_NODE_PLATFORM=windows \
  LOGGING_STACKDRIVER_RESOURCE_TYPES=new \
  KUBE_UP_AUTOMATIC_CLEANUP=true \
  WINDOWS_NODE_OS_DISTRIBUTION=win2019 \
  ./cluster/kube-up.sh
 2020-03-26 19:30:39 -07:00
Kubernetes Prow Robot
08ce946e09
Merge pull request #89257 from jprzychodzen/fix-create 
Util script - move variables setting for replicated master to outer if
 2020-03-26 14:10:36 -07:00
Kubernetes Prow Robot
a9f6b93b62
Merge pull request #89498 from sambdavidson/mount-tweak 
Changed readonly to true and type to "File" for authn/authz config.
 2020-03-26 12:48:43 -07:00
Kubernetes Prow Robot
295b53f7b4
Merge pull request #89214 from jingyih/update_etcd_server_3p4p4 
Update default etcd server to 3.4.4 in k8s v1.19
 2020-03-26 01:14:24 -07:00
Samuel Davidson
c70cd1e82f Changed readonly to true and type to File for authn/authz config. 2020-03-25 17:45:27 -07:00
Yaseen Hamdulay
58f78a53ee Add ssh_redirect_user 2020-03-24 11:30:48 +00:00
Cédric de Saint Martin
335bfe0911 cluster add-ons: fluentd: update gems. 
In particular, update fluent-plugin-kubernetes_metadata_filter to 2.4.5 to solve a potential high apiserver request count.
 2020-03-24 08:59:13 +01:00
zhouya0
04d06d2f23 Remove prometheus references from etcd version monitor 2020-03-24 14:23:26 +08:00
Kubernetes Prow Robot
de877ec26e
Merge pull request #89327 from aojea/conntrack 
cluster: ipvs conntrack module vs kernel version
 2020-03-22 13:28:44 -07:00
Kubernetes Prow Robot
2ede416104
Merge pull request #89309 from yliaog/windep 
infra_container is passed in as env variable
 2020-03-21 04:10:44 -07:00
Antonio Ojea
33810a99d9 cluster: ipvs conntrack module vs kernel version 
We should use 'nf_conntrack' instead of 'nf_conntrack_ipv4'
for linux kernel >= 4.19
 2020-03-21 11:23:28 +01:00
Yu Liao
50c0827856 infra_container is passed in as env variable 2020-03-20 10:50:25 -07:00
Michael S. Fischer
c6fa1391f5 nodelocaldns: have Prometheus collect metrics 2020-03-20 08:40:33 -07:00
Jakub Przychodzeń
f48268d13b Util script - move variables setting for replicated master to outer if 2020-03-20 12:42:44 +01:00
Jefftree
936f7665cf network proxy alpha -> beta 2020-03-19 11:49:47 -07:00
yaseenhamdulay
5de3c64ad0 Create etcd user in cloud-init master.yaml rather than in configure-helper.sh 
An etcd unix user is currently created in configure-helper.sh if it does not exist
on the master.

cloud-init is the only supported mechanism to add users on COS VMs. If an attempt
is made to add a key using OS Login or the instance metadata mechanism the
google_accounts_daemon will race with useradd and potentially attempt to use
the same UID. This will lock out any attempt to SSH into the VM. We therefore
migrate to using cloud-init to create this user and prevent this issue from occurring.
 2020-03-19 11:05:42 +00:00
Kubernetes Prow Robot
f899ad704a
Merge pull request #89069 from enj/enj/i/drop_password_file 
Remove support for basic authentication
 2020-03-18 22:24:20 -07:00
Kubernetes Prow Robot
51b2d02717
Merge pull request #88676 from dims/remove-hyperkube 
Remove hyperkube and debian-hyperkube-base images
 2020-03-18 06:36:48 -07:00
Kubernetes Prow Robot
1a334335bc
Merge pull request #88215 from kublr/fix/addon-manager 
fix addon manager failing to elect leader on masters with _ in the hostname
 2020-03-18 01:44:47 -07:00
jingyih
f9e0e4c6b4 Update default etcd server to 3.4.4 2020-03-18 00:27:46 -07:00
Kubernetes Prow Robot
3667411297
Merge pull request #88865 from caesarxuchao/add-cheftako-owner 
Add cheftako as an owner of cluster/
 2020-03-17 19:27:45 -07:00
Kubernetes Prow Robot
c53909498c
Merge pull request #88810 from oxddr/logdump-better-logging 
log-dump.sh: better logging in case of error from listing GCS
 2020-03-17 19:27:08 -07:00
Kubernetes Prow Robot
fbbe9bba8c
Merge pull request #88806 from monotek/fluent-elasticsearch-290 
updated fluentd to 1.9.2 & use docker builder pattern in dockerfile
 2020-03-17 19:26:55 -07:00
Davanum Srinivas
e6cdc0e0f3
Remove hyperkube 2020-03-17 21:33:50 -04:00
Kubernetes Prow Robot
5011621fe5
Merge pull request #88653 from oxddr/log-dump-extra-files 
Bump logexporter version to v20200227-da16e1b17
 2020-03-17 16:21:46 -07:00
Kubernetes Prow Robot
8055c92e26
Merge pull request #88125 from mwwolters/flex2healthz 
Switch flexvolume_node_setup.sh from kubelet RO port to healthz port
 2020-03-17 16:20:07 -07:00
Kubernetes Prow Robot
a6f209c1c0
Merge pull request #86259 from rajansandeep/corednsto1.6.6-kube-up 
Bump CoreDNS version to 1.6.7 [kube-up]
 2020-03-17 16:19:26 -07:00
Kubernetes Prow Robot
ff21f45680
Merge pull request #89095 from losipiuk/lo/ca-1.18.0 
Bump Cluster-Autoscaler to 1.18.0
 2020-03-13 07:04:40 -07:00
Kubernetes Prow Robot
3524a5a32a
Merge pull request #89097 from jpbetz/patch-1 
Fix unbound variable error in gce/configure.sh
 2020-03-12 20:48:38 -07:00
Kubernetes Prow Robot
6847b2aeba
Merge pull request #88955 from pradeepnss/patch-1 
Add tolerations with effect "NoExecute" and "NoSchedule" to allow sch…
 2020-03-12 18:12:39 -07:00
Joe Betz
23c358d883
Fix unbound variable error in gce/configure.sh 
Looks like UBUNTU_INSTALL_RUNC_VERSION should be optional here.
 2020-03-12 16:41:25 -07:00
Łukasz Osipiuk
c957b2509f Bump Cluster-Autoscaler to 1.18.0 2020-03-12 21:33:18 +01:00
Łukasz Osipiuk
02915ef179 Remove endpoints RBAC for Cluster Autoscaler 2020-03-12 17:56:45 +01:00
Srinivasa Satya Pradeep Nekkalapudi
66491d2d89 Add tolerations with effect "NoExecute" and "NoSchedule" to allow schedule of nodelocaldns pods on node pools with taints 
Currently if we define taints on all node pools in a cluster then nodelocaldns pods wont get scheduled on those node pools. Also in GKE as the daemonset has reconcile flag set tolerations cannot be added. So adding these tolerations will allow nodelocaldns pods to get scheduled on all node pools.
 2020-03-11 18:27:13 -07:00
Monis Khan
df292749c9
Remove support for basic authentication 
This change removes support for basic authn in v1.19 via the
--basic-auth-file flag.  This functionality was deprecated in v1.16
in response to ATR-K8S-002: Non-constant time password comparison.

Similar functionality is available via the --token-auth-file flag
for development purposes.

Signed-off-by: Monis Khan <mok@vmware.com>
 2020-03-11 20:55:47 -04:00
Łukasz Osipiuk
6be4d0a705 Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1 2020-03-11 16:16:30 +01:00
Kubernetes Prow Robot
f8ff8f4420
Merge pull request #88641 from antoninbas/fix-regex-in-conformance-tests-runner 
Fix default regular expressions in conformance tests runner
 2020-03-09 23:33:35 -07:00
Kubernetes Prow Robot
988982a1f7
Merge pull request #88048 from mtaufen/provider-info-e2etest 
Add e2e test for validating JWTs as OIDC tokens
 2020-03-06 17:59:34 -08:00
Kubernetes Prow Robot
b9f15ece18
Merge pull request #88877 from prameshj/nodecache-update 
Update to latest node-cache image
 2020-03-06 13:17:45 -08:00
Kubernetes Prow Robot
b9cd76519e
Merge pull request #88869 from Jefftree/egress_flag 
[Network Proxy] Allow both grpc and http-connect mode to be toggled in kube-up
 2020-03-05 21:40:05 -08:00
Kubernetes Prow Robot
86fc6d5d4c
Merge pull request #88863 from caesarxuchao/0.0.8 
Use the v0.0.8 network proxy images
 2020-03-05 21:39:48 -08:00
Kubernetes Prow Robot
4065a5a236
Merge pull request #88022 from YangLu1031/master 
Dump docker image list
 2020-03-05 20:03:29 -08:00
Jefftree
6fd748e2c5 exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly 2020-03-05 16:59:55 -08:00
Jefftree
06abedb063 Allow both GRPC and http-connect mode to be toggled 2020-03-05 16:16:59 -08:00
Charles Eckman
aee9fde751 Add e2e test for validating JWTs as OIDC tokens 
Adds an E2E test to deploy an agnhost container that runs the test.

Co-authored-by: Michael Taufen <mtaufen@google.com>
 2020-03-05 13:58:52 -08:00
Sandeep Rajan
5ce4198152 update coredns to 1.6.7 2020-03-05 16:55:28 -05:00
Pavithra Ramesh
bb318ea84a Update to latest node-cache image 2020-03-05 11:07:06 -08:00
Chao Xu
7ac25f4812 Add cheftako as an onwer of cluster/ 2020-03-05 10:24:29 -08:00
Chao Xu
7d86217043 Use the v0.0.8 network proxy images 2020-03-05 09:54:19 -08:00
Janek Łukaszewicz
96567c8dcc log-dump.sh: better logging in case of error from listing GCS 2020-03-05 10:40:46 +01:00
Janek Łukaszewicz
eaeceb9f98 Bump logexporter version to v20200227-da16e1b17 2020-03-04 16:23:47 +01:00
André Bauer
adc59271d3 updated fluentd to 1.9.2 & use docker builder pattern in dockerfile 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-03-04 15:15:53 +01:00
Kubernetes Prow Robot
76245147f3
Merge pull request #88598 from jennybuckley/base-image 
Update etcd debian base image to v2.0.0
 2020-03-03 23:17:47 -08:00
Aleksandra Malinowska
472a935294 Update Cluster Autoscaler version to 1.18.0-gke.0 2020-03-03 14:42:25 +01:00
Kubernetes Prow Robot
5726fa2184
Merge pull request #88747 from BenTheElder/approvers 
update cluster/ approvers
 2020-03-03 00:17:51 -08:00
Kubernetes Prow Robot
eaceb7bf5c
Merge pull request #88419 from Jefftree/netproxy-udstoken 
Add support for token authentication with network proxy
 2020-03-02 22:13:37 -08:00
Jefftree
2a98cb7f8b Use GRPC mode for network proxy 2020-03-02 15:54:52 -08:00
Benjamin Elder
efe35b9a9a move eparis and zmerlynn to cluster/ emeritus_approvers 2020-03-02 12:49:39 -08:00
Benjamin Elder
904c2d8bc0 add bentheelder to cluster/ approvers 2020-03-02 12:46:24 -08:00
Jefftree
0989770135 Update network proxy to v0.0.7 2020-03-02 10:09:00 -08:00
Jefftree
4c54241c3d Support token authentication for network proxy 2020-03-01 17:24:48 -08:00
Davanum Srinivas
f92c55a476
Make sure we fail the job and log more details when it does 2020-03-01 09:14:04 -05:00
Davanum Srinivas
bdea23380b
Move conformance image to debian:stretch-slim 
Pros:
- really small image (see comparison below)
- we need to get rid of hyperkube in upcoming releases

```
davanum@cloudshell:~$ docker images
REPOSITORY                                       TAG                 IMAGE ID            CREATED             SIZE
debian                                           stretch-slim        4e6990ebcef5        4 days ago          55.3MB
gcr.io/google-containers/debian-hyperkube-base   0.12.1              a46476511725        13 months ago       393MB
```
 2020-03-01 09:10:07 -05:00
Antonin Bas
97e8bf5f84 Fix default regular expressions in conformance tests runner 
[Serial] should be \[Serial\]
[Conformance] should be \[Conformance\]
 2020-02-27 17:38:09 -08:00
Kubernetes Prow Robot
641616362d
Merge pull request #88133 from julianvmodesto/dry-run-tests 
Cleanup --dry-run values in tests, docs, and scripts
 2020-02-27 11:33:42 -08:00
jennybuckley
7346579a03 Update etcd debian base image to v2.0.0 2020-02-26 14:29:48 -08:00
Kubernetes Prow Robot
831dae75bf
Merge pull request #88185 from vinayakankugoyal/appendandreplace 
append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.…
 2020-02-26 13:33:19 -08:00
Kubernetes Prow Robot
add2e8b4d0
Merge pull request #88519 from mm4tt/cluster-gce-owners 
Make sig-scalability reviewers / approvers of cluster/gce
 2020-02-26 08:22:27 -08:00
Mateusz Matejczyk
98df9d9db6 Make sig-scalability reviewers / approvers of cluster/gce 
Justification: Our CI/CD tests are based on gce provider, people from our sig are in top contributors for this directory.
 2020-02-25 13:18:32 +01:00
Mateusz Matejczyk
6739bde9ca Create OWNERS file for cluster/log-dump 
Make sig-scalability-reviewers and sig-scalability-approvers reviewers and approvals of that dir.
 2020-02-25 13:12:54 +01:00
Vinayak Goyal
388ebfe7d0 append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.sh fails for prefixes that contain quotes and = sign. 2020-02-24 17:35:36 -08:00
Kubernetes Prow Robot
c8814fd5c6
Merge pull request #88175 from yliaog/windep 
added nodeSelector to constrain it to Linux only
 2020-02-23 12:32:47 -08:00
Matt Matejczyk
c20e604377 Revert "log-dump.sh: allow to dump extra log files" 
This reverts commit c43b940586.
 2020-02-21 14:27:02 +01:00
Kubernetes Prow Robot
4e26c35064
Merge pull request #88383 from BenTheElder/get-kube-auth 
fix get-kube authorization headers
 2020-02-21 02:36:32 -08:00
Kubernetes Prow Robot
1d28e8cf32
Merge pull request #88113 from oxddr/log-dump-extra-files 
log-dump.sh: allow to dump extra log files
 2020-02-21 01:04:34 -08:00
Kubernetes Prow Robot
6461e6f4fb
Merge pull request #87179 from Jefftree/netproxy-uds 
UDS + GRPC Support for Network Proxy
 2020-02-20 21:20:32 -08:00
Benjamin Elder
f90726a6a6 fix get-kube authorization headers 2020-02-20 14:07:14 -08:00
Jefftree
725d2b6a8f Network Proxy: GRPC + HTTP Connect with UDS 2020-02-20 10:19:37 -08:00
Janek Łukaszewicz
c43b940586 log-dump.sh: allow to dump extra log files 
Supports both method: logexporter and ssh
 2020-02-20 14:58:18 +01:00
Kubernetes Prow Robot
72b04eff8e
Merge pull request #88281 from cheftako/master 
Update default cos image to include runc-1.0.0-rc10
 2020-02-18 15:33:02 -08:00
Walter Fender
ae0e1b0ca2 Update default cos image to include runc-1.0.0-rc10 2020-02-18 11:24:39 -08:00
Oleg Chunikhin
a6739dbffc fix addon manager failing to elect leader on masters with _ in the hostname (issue #88214) 2020-02-16 14:48:35 -05:00
Julian V. Modesto
d97169f59a Clean up --dry-run values. 
- Clean up --dry-run values in tests, docs, and scripts
- Fix --dry-run for auth reconcile and add a test
 2020-02-15 00:43:30 -05:00
Benjamin Elder
4454ce6f37 fix shellcheck failures in health-monitor.sh 2020-02-14 16:12:18 -08:00
Yu Liao
2fd62ad72a added nodeSelector to constrain it to Linux only 2020-02-14 12:44:17 -08:00
Kubernetes Prow Robot
289bbaa1bb
Merge pull request #88102 from cheftako/cos-runc 
Switch test COS image to include runc-1.0.0-rc10 fix.
 2020-02-13 18:24:17 -08:00
Kubernetes Prow Robot
461a494f69
Merge pull request #87907 from pjh/configure-windows-gce-carefully 
Separate containerd install from config, and other cleanups
 2020-02-13 16:55:01 -08:00
Walter Fender
0da08ffd6a Updated test cos image to include runc-1.0.0-rc10 2020-02-13 15:02:56 -08:00
Mark Wolters
ba74c1cfb4 Switch flexvolume_node_setup.sh from kubelet RO port to healthz port 2020-02-13 09:58:51 -08:00
Yu-Ju Hong
bcd975aa65 Replace Beta OS/arch labels with the GA ones 
Beta OS/arch labels have been deprecated since 1.14.
This change replaces these labels with the GA ones.
 2020-02-13 09:38:51 -08:00
Peter Hornyack
d61e90b0ee Separate containerd install from config, and other cleanups 2020-02-12 10:57:14 -08:00
Kubernetes Prow Robot
78a02a223d
Merge pull request #88010 from dims/support-for-adding-test-handler-for-containerd 
Support for adding test-handler for containerd
 2020-02-11 23:15:58 -08:00
Kubernetes Prow Robot
04cfa4981a
Merge pull request #87463 from mwwolters/healthmon2healthz 
Migrate health monitor from read only port to healthz port
 2020-02-11 17:06:08 -08:00
Yang Lu
c27fb4bad6 dump docker image list 2020-02-11 06:21:16 -08:00
Davanum Srinivas
8f764b113e
Support for adding test-handler for containerd 2020-02-10 20:43:40 -05:00
Davanum Srinivas
da024f9a57
Ability to override versions of containerd/runc 2020-02-08 20:20:15 -05:00
Davanum Srinivas
acd286d95d
Install containerd package depending on CONTAINER_RUNTIME 2020-02-08 17:53:37 -05:00
Davanum Srinivas
c4ef6a94b3
Add gid to config.toml only when docker group is present 
If we don't install docker and install just containerd apt packages,
there is no docker group. In this scenario, we should not add the gid to
config.toml
 2020-02-08 17:53:37 -05:00
Kubernetes Prow Robot
334d788f08 Merge pull request #87299 from mikedanese/ctx 
context in client-go
 2020-02-08 06:43:52 -08:00
Kubernetes Prow Robot
c90fd17642 Merge pull request #87701 from yliaog/windep 
added env var WINDOWS_CNI_STORAGE_PATH and WINDOWS_CNI_VERSION
 2020-02-08 02:59:52 -08:00
Kubernetes Prow Robot
9bbd1a1a29
Merge pull request #87877 from justaugustus/cluster-augustus 
cluster: Add justaugustus as reviewer
 2020-02-07 18:33:19 -08:00
Mike Danese
3aa59f7f30 generated: run refactor 2020-02-07 18:16:47 -08:00
Yu Liao
81252a6d78 added env var WINDOWS_CNI_STORAGE_PATH and WINDOWS_CNI_VERSION 2020-02-07 12:44:13 -08:00
Davanum Srinivas
2c93aa6ec3
Ensure kubectl is available in PATH by explicitly exporting the script 2020-02-07 09:05:07 -05:00
Stephen Augustus
56711b9ac0 cluster: Add justaugustus as reviewer 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-02-07 05:31:43 -05:00
Kubernetes Prow Robot
ab97b666e2
Merge pull request #87902 from apelisse/ensureexist-limit-range-gce 
gce-addons: Make sure default/limit-range doesn't get overridden
 2020-02-07 00:08:29 -08:00
Antoine Pelisse
e41f2ccd41 gce-addons: Make sure default/limit-range doesn't get overridden 2020-02-06 12:10:12 -08:00
Davanum Srinivas
f20e17e9dd
python snippets should work on both old and new python versions 2020-02-05 11:22:56 -05:00
Kubernetes Prow Robot
23aa2e2f5c
Merge pull request #87786 from Jefftree/netproxy-logging 
Save log files for network proxy
 2020-02-05 01:08:35 -08:00
Kubernetes Prow Robot
4601189105
Merge pull request #87761 from dims/ensure-specified-container-runtimes-are-present 
Ensure specified container runtimes are present
 2020-02-05 01:08:09 -08:00
Jefftree
97eed70d74 Add konnectivity log files 2020-02-03 13:21:42 -08:00
Davanum Srinivas
dc3f31569e
Ensure specified container runtimes are present 2020-02-03 13:40:57 -05:00
Davanum Srinivas
ee3f897ca7
update network-y stuff for supporting ubuntu/bionic as master 
On bionic, we don't have eth0 hard coded. example below, so we use `ip
route` to figure out the default ethernet interface
```
dims@kubernetes-master:~$ ip link
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1460 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 42:01:0a:80:00:23 brd ff:ff:ff:ff:ff:ff
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default
    link/ether 02:42:b2:4e:dd:86 brd ff:ff:ff:ff:ff:ff
```

Also, bionic uses systemd-resolver by default and adds entries in
/etc/resolv.conf that CoreDNS does not link. So follow the
recommendation in the documentation to specify resolv.conf explicitly
 2020-02-02 19:23:10 -05:00
Kubernetes Prow Robot
7a01cdcaea
Merge pull request #82454 from beautytiger/fix_shellcheck_common.sh 
fix shell checks errors in cluster/common.sh
 2020-02-02 07:05:20 -08:00
Kubernetes Prow Robot
a77ed7234c
Merge pull request #87629 from pjh/gcp-windows-nodes-20200114 
Update GCP Windows node image versions
 2020-02-01 18:33:34 -08:00
Jeffrey Ying
2eb48f6049
Reduce default CPU requirement for konnectivity server 
Our network proxy [e2e job](https://k8s-testgrid.appspot.com/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy) is failing because we are requesting more resources than available on the system. 

The test clusters are consuming exactly 970m CPU resources without the konnectivity-server pod. Requesting 40m exceeds the 1000m limit and causes all tests to fail.
 2020-01-31 10:45:21 -08:00
Peter Hornyack
cc7799a437 Update GCP Windows node image versions 
- Makes Windows Server 2019 the default version for Windows clusters on
  GCP, since 1809 will be EOL in a few months.
- Adds Windows Server version 1909 as a Windows node choice.
- Use Windows images with updates from January 2020.
- Cleans up the code that sets the node image.
 2020-01-31 10:29:39 -08:00