Commit Graph

10808 Commits

Author SHA1 Message Date
Julian V. Modesto
5fcd9c7c7e Error if --local and --dry-run=server are passed 2020-02-14 19:26:36 -05:00
Kubernetes Prow Robot
c1aeef5e62 Merge pull request #88131 from liggitt/mutation-detector-trace
Shrink mutation detection critical section
2020-02-14 14:29:50 -08:00
Kubernetes Prow Robot
f4ae52a48e Merge pull request #88071 from int128/patch-1
Fix example of kubectl config set-credentials command
2020-02-14 14:29:41 -08:00
Benjamin Elder
8ba86728e3 bump pause to 3.2 in kubectl test data 2020-02-14 14:03:19 -08:00
Ted Yu
583f804652 Do not dereference qcAPI which maybe nil 2020-02-14 13:30:40 -08:00
Kubernetes Prow Robot
e8e64a6c0b Merge pull request #87489 from julianvmodesto/dry-run-verifier-private
Reduce public methods for DryRunVerifier
2020-02-14 11:29:03 -08:00
Jordan Liggitt
12abf03f6b Shrink mutation detection critical section 2020-02-14 14:22:22 -05:00
Mike Spreitzer
b142868eaf Version the API Priority and Fairness FieldManager values 2020-02-14 13:50:11 -05:00
Lukasz Szaszkiewicz
fbb1f23735 kube-aggregator: changes the name of aggregator_unavailable_apiservice_count metrics 2020-02-14 12:50:55 +01:00
Pengfei Ni
c1383e99af Add deletion interfaces for VM, VMSS and interface clients 2020-02-14 18:56:26 +08:00
Bismita Guha
a20ae3953b Remove optional from core docs for 'Type' (#88029)
* Remove optional from core docs for 'Type'

* Regenerate protobuf and openapi docs

* Regenerate protobuf and openapi docs
2020-02-13 21:10:31 -08:00
Julian V. Modesto
932500c015 Remove deprecated rolling-update command 2020-02-13 23:52:53 -05:00
Kubernetes Prow Robot
b2bf4a8acb Merge pull request #88079 from liggitt/onclose-panic
Set up connection onClose prior to adding to connection map
2020-02-13 16:55:21 -08:00
Kubernetes Prow Robot
77e8c75f32 Merge pull request #87754 from MikeSpreitzer/apf-filter5
Add twice refactored filter and config consumer for API Priority and Fairness
2020-02-13 16:54:46 -08:00
Kubernetes Prow Robot
b5af3b86ed Merge pull request #87079 from gavinfish/drfish_typo_resetting
Fix typo from reseting to resetting
2020-02-13 16:54:32 -08:00
Kubernetes Prow Robot
35bb71d855 Merge pull request #88092 from yujuhong/rm-beta-labels
Replace Beta OS/arch labels with the GA ones
2020-02-13 14:14:02 -08:00
Kubernetes Prow Robot
b4db96464b Merge pull request #88002 from alculquicondor/rm_affinity_weight_2
Remove HardPodAffinitySymmetricWeight from v1alpha2 Component Config
2020-02-13 14:13:25 -08:00
Kubernetes Prow Robot
a53b25ae92 Merge pull request #87923 from ingvagabund/move-direct-prometheus-metrics-under-component-base-metrics
Collect some of scheduling metrics and scheduling throughput (vol. 2)
2020-02-13 14:13:11 -08:00
Yu-Ju Hong
bcd975aa65 Replace Beta OS/arch labels with the GA ones
Beta OS/arch labels have been deprecated since 1.14.
This change replaces these labels with the GA ones.
2020-02-13 09:38:51 -08:00
Aldo Culquicondor
99bda6fac0 Remove HardPodAffinityWeight from v1alpha2
Signed-off-by: Aldo Culquicondor <acondor@google.com>
2020-02-13 11:59:56 -05:00
Kubernetes Prow Robot
a70e574955 Merge pull request #82070 from olivierlemasle/fix82011
kubectl cluster-info dump: use file extension according to output format
2020-02-13 08:40:35 -08:00
Olivier Lemasle
d6fcc224f1 kubectl cluster-info dump: use file extension according to output format 2020-02-13 15:48:40 +01:00
Kubernetes Prow Robot
d88304507d Merge pull request #87590 from weinong/fix-87586
don't specify apiVersion when getting AAD token
2020-02-13 05:16:35 -08:00
Jan Chaloupka
7b5534021c Collect some of scheduling metrics and scheduling throughput
In addition to getting overall performance measurements from golang benchmark,
collect metrics that provides information about insides of the scheduler itself.
This is a first step towards improving what we collect about the scheduler.

Metrics in question:
- scheduler_scheduling_algorithm_predicate_evaluation_seconds
- scheduler_scheduling_algorithm_priority_evaluation_seconds
- scheduler_binding_duration_seconds
- scheduler_e2e_scheduling_duration_seconds

Scheduling throughput is computed on the fly inside perfScheduling.
2020-02-13 13:32:09 +01:00
Kubernetes Prow Robot
8ca96f3e07 Merge pull request #80724 from cceckman/provider-info-e2e
Provide OIDC discovery for service account token issuer
2020-02-13 01:38:35 -08:00
Maciej Borsz
c78c0e949d Remove unnecessary calls to GCE API after PD is created. 2020-02-13 09:57:25 +01:00
Kubernetes Prow Robot
177506d87c Merge pull request #87945 from andyzhangx/azure-writeaccelerator
add azure disk WriteAccelerator support
2020-02-12 21:37:24 -08:00
Kubernetes Prow Robot
f0c14f291f Merge pull request #87751 from skilxn-go/Rename
[Scheduler Framework] Rename `PostFilter` plugin to `PreScore`
2020-02-12 21:37:12 -08:00
Kubernetes Prow Robot
a11a8b8691 Merge pull request #87714 from julianvmodesto/use-kubectl-ss-dry-run-flag
Use --dry-run=server in kubectl commands
2020-02-12 21:36:57 -08:00
Kubernetes Prow Robot
6c4096b9f8 Merge pull request #82051 from roycaihw/apiextensions/add-to-reviewers
add roycaihw to reviewers in apiextensions-apiserver
2020-02-12 21:36:50 -08:00
Kubernetes Prow Robot
c2f08b8552 Merge pull request #88084 from soltysh/issue809
Don't show flags in api-versions help
2020-02-12 17:55:12 -08:00
Julian V. Modesto
13b80b48cd Use --dry-run=client,server in kubectl.
- Support --dry-run=server for subcommands apply, run, create, annotate,
expose, patch, label, autoscale, apply set-last-applied, drain, rollout undo
- Support --dry-run=server for set subcommands
  - image
  - resources
  - serviceaccount
  - selector
  - env
  - subject
- Support --dry-run=server for create subcommands.
  - clusterrole
  - clusterrolebinding
  - configmap
  - cronjob
  - job
  - deployment
  - namespace
  - poddisruptionbudget
  - priorityclass
  - quota
  - role
  - rolebinding
  - service
  - secret
  - serviceaccount
- Remove GetClientSideDryRun
2020-02-12 20:46:54 -05:00
Jordan Liggitt
aa4113d777 Set up connection onClose prior to adding to connection map 2020-02-12 17:17:09 -05:00
Kubernetes Prow Robot
f7eafa1a83 Merge pull request #86896 from yutedz/copy-into-err
Return the error from copyInto
2020-02-12 13:54:51 -08:00
Kubernetes Prow Robot
6541758fd4 Merge pull request #88018 from wojtek-t/serializer_testing_conversions
Create manual conversions for serializer testing types
2020-02-12 10:36:51 -08:00
Maciej Szulik
8ff6b24c57 Don't show flags in api-versions help 2020-02-12 18:31:05 +01:00
Kubernetes Prow Robot
50c8f73a4b Merge pull request #88017 from feiskyer/fix-409
Make Azure clients only retry on specified HTTP status codes
2020-02-12 07:49:05 -08:00
Kubernetes Prow Robot
de9bbcc9cd Merge pull request #87403 from gavinfish/kubectl_pkg
Staticcheck: vendor/k8s.io/kubectl/pkg/scale etc.
2020-02-12 07:48:52 -08:00
skilxn-go
f5b7e3cca3 Rename PostFilter plugin to PreScore 2020-02-12 23:25:08 +08:00
Hidetake Iwata
0368a7d5f7 Fix example of kubectl config set-credentials 2020-02-12 21:11:24 +09:00
Kubernetes Prow Robot
a330defda3 Merge pull request #87361 from zhouya0/fix_kubectl_drain_ignore_daemonsets_and_ohters
Fix kubectl drain ignore daemonsets and others
2020-02-12 02:23:16 -08:00
Kubernetes Prow Robot
ed0d6ee3ce Merge pull request #85617 from andrewsykim/optimize-external-ips
proxier: only get local addresses once per sync loop
2020-02-12 02:22:51 -08:00
Pengfei Ni
6a487723ed Make Azure clients only retries on specified HTTP status codes 2020-02-12 08:02:17 +00:00
Kubernetes Prow Robot
919871e86a Merge pull request #88035 from jennybuckley/apply-time-sort
Round managedFields times to the nearest second before sorting
2020-02-11 23:16:41 -08:00
Kubernetes Prow Robot
17a6248f76 Merge pull request #87939 from shaloulcy/pod_storage_indexer
add indexer for pod storage
2020-02-11 23:15:22 -08:00
Kubernetes Prow Robot
e13463d755 Merge pull request #87805 from zhouya0/add_kubectl_diff_exit_code_doc
Add kubectl diff exit code doc
2020-02-11 23:14:45 -08:00
Kubernetes Prow Robot
f9250c4f95 Merge pull request #87795 from zhan849/harry/reflector-backoff
add exponential backoff with cap and reset in reflector during retrying ListWatch
2020-02-11 17:06:21 -08:00
Charles Eckman
5a176ac772 Provide OIDC discovery endpoints
- Add handlers for service account issuer metadata.
- Add option to manually override JWKS URI.
- Add unit and integration tests.
- Add a separate ServiceAccountIssuerDiscovery feature gate.

Additional notes:
- If not explicitly overridden, the JWKS URI will be based on
  the API server's external address and port.

- The metadata server is configured with the validating key set rather
than the signing key set. This allows for key rotation because tokens
can still be validated by the keys exposed in the JWKs URL, even if the
signing key has been rotated (note this may still be a short window if
tokens have short lifetimes).

- The trust model of OIDC discovery requires that the relying party
fetch the issuer metadata via HTTPS; the trust of the issuer metadata
comes from the server presenting a TLS certificate with a trust chain
back to the from the relying party's root(s) of trust. For tests, we use
a local issuer (https://kubernetes.default.svc) for the certificate
so that workloads within the cluster can authenticate it when fetching
OIDC metadata. An API server cannot validly claim https://kubernetes.io,
but within the cluster, it is the authority for kubernetes.default.svc,
according to the in-cluster config.

Co-authored-by: Michael Taufen <mtaufen@google.com>
2020-02-11 16:23:31 -08:00
Andrew Sy Kim
1653476e3f proxier: use IPSet from k8s.io/utils/net to store local addresses
This allows the proxier to cache local addresses instead of fetching all
local addresses every time in IsLocalIP.

Signed-off-by: Andrew Sy Kim <kiman@vmware.com>
2020-02-11 16:44:34 -05:00
andrewsykim
9e5a06c3ed update vendor k8s.io/utils to 5f6fbceb4c31
Signed-off-by: andrewsykim <kim.andrewsy@gmail.com>
2020-02-11 16:35:49 -05:00