github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
109,835 Commits 1 Branch 31 Tags
4bdca5689f65597f28a99f3610dd4e43fbc9cd7c
Commit Graph

10149 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
442574f3a7 Merge pull request #111513 from jingxu97/july/localstorage 
Promote Local storage capacity isolation feature to GA
 2022-08-03 13:05:59 -07:00
Kubernetes Prow Robot
4b6134b6dc Merge pull request #111090 from kinvolk/rata/userns-support-2022 
Add support for user namespaces phase 1 (KEP 127)
 2022-08-03 13:05:47 -07:00
Rodrigo Campos
138e80819e kubelet: set user namespace options 
Set the user namespace options to use for the pod.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
67b38ffe6e kubelet: propagate errors from namespacesForPod 
it is a preparatory change for the next commit.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
 2022-08-03 19:53:22 +02:00
Rodrigo Campos
d07c2688fe kubelet: add GetHostIDsForPod() 
In future commits we will need this to set the user/group of supported
volumes of KEP 127 - Phase 1.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
9b2fc639a0 kubelet: add GetUserNamespaceMappings to RuntimeHelper 
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
 2022-08-03 19:53:22 +02:00
Giuseppe Scrivano
63462285d5 kubelet: add userns manager 
it is used to allocate and keep track of the unique users ranges
assigned to each pod that runs in a user namespace.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
Co-authored-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2022-08-03 19:53:22 +02:00
jinxu
0064010cdd Promote Local storage capacity isolation feature to GA 
This change is to promote local storage capacity isolation feature to GA

At the same time, to allow rootless system disable this feature due to
unable to get root fs, this change introduced a new kubelet config
"localStorageCapacityIsolation". By default it is set to true. For
rootless systems, they can set this configuration to false to disable
the feature. Once it is set, user cannot set ephemeral-storage
request/limit because capacity and allocatable will not be set.

Change-Id: I48a52e737c6a09e9131454db6ad31247b56c000a
 2022-08-02 23:45:48 -07:00
Vinay Kulkarni
007d93ad08 Handle UpdateContainerResources for Windows in v1alpha2 2022-08-02 15:31:00 -07:00
Vinay Kulkarni
0ef263c3b0 CRI changes to support implementation of in-place pod resize. 
KEP: /enhancements/keps/sig-node/1287-in-place-update-pod-resources
 2022-08-02 15:08:25 -07:00
Kubernetes Prow Robot
8f3b2813dc Merge pull request #111642 from harche/evented_pleg_cri_changes 
Update CRI API to support Evented PLEG
 2022-08-02 13:59:16 -07:00
Kubernetes Prow Robot
369a465fae Merge pull request #111301 from mattcary/migration-feature 
Upgrade CSIMigrationGCE feature gate to GA
 2022-08-02 13:58:57 -07:00
Kubernetes Prow Robot
9fb1f67af7 Merge pull request #111278 from arpitsardhana/master 
KEP-3327: Add CPUManager policy option to align CPUs by Socket instead of by NUMA node
 2022-08-02 13:58:45 -07:00
Kubernetes Prow Robot
d40bc18461 Merge pull request #105126 from sallyom/tracing-kubelet 
kubelet tracing instrumentation
 2022-08-02 11:38:06 -07:00
Harshal Patil
668b2440c5 Update CRI API to support Evented PLEG 
Signed-off-by: Harshal Patil <harpatil@redhat.com>
 2022-08-03 00:01:13 +05:30
Arpit Singh
d92fd8392d Adding unit test for align-by-socket policy option 
Also addressed MR comments as part of same commit.
 2022-08-02 11:02:07 -07:00
Arpit Singh
06f347f645 Adding validity checks for topology manager align-by-socket 2022-08-02 11:02:07 -07:00
Arpit Singh
35849bf7fb KEP-3327: Add CPUManager policy option to align CPUs by Socket instead of by NUMA node 2022-08-02 11:02:07 -07:00
Matthew Cary
e5d387c5d6 Upgrade CSIMigrationGCE feature gate to GA 
Change-Id: I620bc4913765c0d6562eb1008216a72e8b0a2970
 2022-08-02 09:14:27 -07:00
Michal Wozniak
04fcbd721c Introduction of a pod condition type indicating disruption. Its reason field indicates the reason: 
- PreemptionByKubeScheduler (Pod preempted by kube-scheduler)
- DeletionByTaintManager (Pod deleted by taint manager due to NoExecute taint)
- EvictionByEvictionAPI (Pod evicted by Eviction API)
- DeletionByPodGC (an orphaned Pod deleted by PodGC)PreemptedByScheduler (Pod preempted by kube-scheduler)
 2022-08-02 11:12:16 +02:00
Kubernetes Prow Robot
ea21947641 Merge pull request #111426 from ping035627/k8s-220726 
Update design-proposals URL
 2022-08-01 23:50:30 -07:00
PingWang
473be65a3c Update design-proposals URL 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>

update url

Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2022-08-02 09:13:38 +08:00
Kubernetes Prow Robot
2e1a4da8df Merge pull request #111358 from ddebroy/hasnet1 
Introduce PodHasNetwork condition for pods
 2022-08-01 15:04:52 -07:00
Kubernetes Prow Robot
acc64759f5 Merge pull request #111549 from claudiubelu/log-compression 
Fixes kubelet log compression on Windows
 2022-08-01 13:18:41 -07:00
Sally O'Malley
9e4e0bb48a add runtime-service test with tracerProvider 
Signed-off-by: Sally O'Malley <somalley@redhat.com>
 2022-08-01 12:55:21 -04:00
Sally O'Malley
0d558c51b5 add otelrestful restful.FilterFunction 
Signed-off-by: Sally O'Malley <somalley@redhat.com>
 2022-08-01 12:55:19 -04:00
Sally O'Malley
7585aae1b4 kubelet-tracing:update 
Signed-off-by: Sally O'Malley <somalley@redhat.com>
 2022-08-01 12:55:16 -04:00
Sally O'Malley
5b4456ceea kubelet tracing: generated files 
Signed-off-by: Sally O'Malley <somalley@redhat.com>
 2022-08-01 12:55:14 -04:00
Sally O'Malley
47e7d8034f kubelet tracing 
Signed-off-by: Sally O'Malley <somalley@redhat.com>
Co-authored-by: David Ashpole <dashpole@google.com>
 2022-08-01 12:55:02 -04:00
Deep Debroy
dfdf8245bb Introduce PodHasNetwork condition for pods 
Signed-off-by: Deep Debroy <ddebroy@gmail.com>
 2022-08-01 09:51:43 -07:00
Kubernetes Prow Robot
ef8e7c471e Merge pull request #110291 from danwinship/kep-3178-iptables-cleanup-kubelet 
Implement KEP-3178 "iptables cleanup" in kubelet
 2022-08-01 07:50:40 -07:00
Sascha Grunert
584783ee9f Partly remove support for seccomp annotations 
We now partly drop the support for seccomp annotations which is planned
for v1.25 as part of the KEP:

https://github.com/kubernetes/enhancements/issues/135

Pod security policies are not touched by this change and therefore we
have to keep the annotation key constants.

This means we only allow the usage of the annotations for backwards
compatibility reasons while the synchronization of the field to
annotation is no longer supported. Using the annotations for static pods
is also not supported any more.

Making the annotations fully non-functional will be deferred to a
future release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2022-08-01 09:19:29 +02:00
Kubernetes Prow Robot
bebea5f950 Merge pull request #111152 from sivchari/fix-refer-url 
fix: refer to url of Node Allocatable
 2022-07-31 20:32:39 -07:00
Kubernetes Prow Robot
dd54a044ea Merge pull request #110940 from pacoxu/ga-disable-accelerator 
Disable AcceleratorUsage Metrics: ga
 2022-07-31 20:32:28 -07:00
Kubernetes Prow Robot
2e64ae6d62 Merge pull request #110733 from psschwei/probe-grace-period-units 
Add unit tests for grace period in killContainer func
 2022-07-29 22:30:27 -07:00
Paco Xu
e073b0fd65 Disable AcceleratorUsage Metrics: ga 2022-07-30 12:31:43 +08:00
Kubernetes Prow Robot
25cdaccf0d Merge pull request #111439 from claudiubelu/fix-plugin-watcher 
kubelet: Fixes plugin Watcher for Windows
 2022-07-29 19:29:44 -07:00
Kubernetes Prow Robot
d838a8647b Merge pull request #111418 from muyangren2/winstats_assert 
Fix test order pkg/kubelet/winstats/winstats_test.go
 2022-07-29 19:29:29 -07:00
Kubernetes Prow Robot
cf2800b812 Merge pull request #111402 from verb/111030-ec-ga 
Promote EphemeralContainers feature to GA
 2022-07-29 19:29:20 -07:00
Kubernetes Prow Robot
ca34eb1383 Merge pull request #111020 from claudiubelu/adds-unittests-5 
unittests: Adds Windows unittests
 2022-07-29 19:29:11 -07:00
Kubernetes Prow Robot
5d446b205e Merge pull request #106244 from cncal/fix-state-checkpoint-testcase 
fix test for CheckpointStateRestore
 2022-07-29 15:41:14 -07:00
Kubernetes Prow Robot
6a71632f65 Merge pull request #111239 from HecarimV/fix-22071914 
fix: add pod info to the error log
 2022-07-29 13:17:50 -07:00
Kubernetes Prow Robot
0b57f4ed4b Merge pull request #110071 from gjkim42/deflake-TestStaticPodExclusion 
Deflake TestStaticPodExclusion
 2022-07-29 13:17:43 -07:00
Kubernetes Prow Robot
126c07604d Merge pull request #104484 from jackfrancis/prober-duration-metrics 
add container probe duration metrics
 2022-07-29 13:17:11 -07:00
Claudiu Belu
430ada006d Fixes kubelet log compression on Windows 
Currently, when kubelet will try to compress the logs to a .gz file,
it will attempt to rename the archive before closing its file handles,
which results in an error on Windows.

This addresses the issue mentioned above.
 2022-07-29 20:53:21 +03:00
Paul S. Schweigert
caa2fce0a1 add unit tests for grace period in killContainer func 
Signed-off-by: Paul S. Schweigert <paulschw@us.ibm.com>
 2022-07-29 11:40:27 -04:00
Kubernetes Prow Robot
73b3be3082 Merge pull request #111009 from marosset/runasnonroot-windows-fix 
Windows: ensure runAsNonRoot does case-insensitive comparison on username
 2022-07-28 17:55:22 -07:00
Kubernetes Prow Robot
cc69f8f65d Merge pull request #107490 from pacoxu/add-volume-stats-slow-log 
add warning log if volume calculation took too long than 1 second
 2022-07-28 17:55:10 -07:00
Dan Winship
3fdece285b Add IPTablesOwnershipCleanup feature to disable kubelet iptables setup 2022-07-27 13:33:09 -04:00
Dan Winship
02c8210317 Clean up kubelet iptables error messages 
Their syntax seems to have gotten mangled in the structured logging
migration...
 2022-07-27 13:29:39 -04:00