github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
105,139 Commits 1 Branch 31 Tags
51b94de68f0889e4e9bd5bc7673041f1275ca175
Commit Graph

43518 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
97e4059092 Merge pull request #94730 from robscott/endpointslice-service-fix 
Ensuring EndpointSlices are recreated after Service recreation
 2020-09-18 18:38:27 -07:00
Kubernetes Prow Robot
b86e725694 Merge pull request #91785 from mattcary/filtereddial 
Specify a DialContext in storage plugin clients
 2020-09-18 15:08:27 -07:00
Zhou Peng
9a960fb1f4 [pkg/api/podsecuritypolicy]: fixup typo 
Signed-off-by: Zhou Peng <p@ctriple.cn>
 2020-09-18 20:52:52 +08:00
knight42
808867ba2f test(kubelet): deflake TestRotateShutsDownConnections 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-18 16:52:58 +08:00
Kubernetes Prow Robot
8d30a5f136 Merge pull request #93201 from ellistarn/kubemark 
Filters on kubemark nodegroups when selecting node template to enable hollow node clusters that contain real nodes.
 2020-09-17 22:24:45 -07:00
Matthew Cary
299a296c7a update-bazel 
Change-Id: Iebc99ee13587f0cd4c43ab85c7295d458d679d1e
 2020-09-18 00:44:39 +00:00
Matthew Cary
f2e23afcf1 Adds filtering of hosts to DialContexts. 
The provided DialContext wraps existing clients' DialContext in an attempt to
preserve any existing timeout configuration. In some cases, we may replace
infinite timeouts with golang defaults.

- scaleio: tcp connect/keepalive values changed from 0/15 to 30/30
- storageos: no change
 2020-09-18 00:07:32 +00:00
Matthew Cary
74dbf274d9 update storageos vendor for FilteredDial change 2020-09-18 00:07:32 +00:00
Aldo Culquicondor
e856706984 Tests for empty constraints array when DefaultPodTopologySpread is enabled 
An empty array in the configuration signifies that the user operator intends to disable the k8s provided default for TopologyPodSpread.

Signed-off-by: Aldo Culquicondor <acondor@google.com>
Change-Id: Ib4696a49f0ba748183aef417b0882d494b89f602
 2020-09-17 14:55:53 -04:00
Kubernetes Prow Robot
6c4bae3d9b Merge pull request #94834 from liggitt/pod-location-ipv6 
Fix resource location for ipv6 pods
 2020-09-17 10:42:45 -07:00
Kubernetes Prow Robot
550b83b293 Merge pull request #92027 from juliantaylor/fix-rbd-expand 
fix expanding rbd volumes without ceph.conf
 2020-09-17 05:24:45 -07:00
Srini Brahmaroutu
fbe5daed73 Change code to use staging/k8s.io/mount-utils 2020-09-16 21:51:24 -07:00
Kubernetes Prow Robot
09b3f6dbb3 Merge pull request #93214 from trashhalo/prefer-error 
test: prefer NoError/Error over Nil/NotNil
 2020-09-16 15:10:45 -07:00
Kubernetes Prow Robot
b1b6464ea4 Merge pull request #94581 from knabben/remote-external-policy-gate 
LockToDefault the ExternalPolicyForExternalIP feature gate
 2020-09-16 12:35:20 -07:00
David Ashpole
0ffc149ccc move dashpole to emeritus in kubelet 2020-09-16 11:52:35 -07:00
Amim Knabben
a18e5de51a LockToDefault the ExternalPolicyForExternalIP feature gate 2020-09-16 13:16:33 -04:00
Jordan Liggitt
71fcc2298d Fix resource location for ipv6 pods 2020-09-16 11:24:07 -04:00
Kubernetes Prow Robot
e5202ef433 Merge pull request #94553 from knight42/fix/TestRestoreAllWaitOldIptablesRestore 
Deflake TestRestoreAllWaitOldIptablesRestore
 2020-09-16 07:45:34 -07:00
Rob Scott
de02323a9d Ensuring EndpointSlices are recreated after Service recreation 
This fixes a bug that occurred when a Service was rapidly recreated.
This relied on an unfortunate series of events:

1. When the Service is deleted, the EndpointSlice controller removes it
from the EndpointSliceTracker along with any associated EndpointSlices.
2. When the Service is recreated, the EndpointSlice controller sees that
there are still appropriate EndpointSlices for the Service and does
nothing. (They have not yet been garbage collected).
3. When the EndpointSlice is deleted, the EndpointSlice controller
checks with the EndpointSliceTracker to see if it thinks we should have
this EndpointSlice. This check was intended to ensure we wouldn't
requeue a Service every time we delete an EndpointSlice for it.

This adds a check in reconciler to ensure that EndpointSlices it is
working with are owned by a Service with a matching UID. If not, it will
mark those EndpointSlices for deletion (assuming they're about to be
garbage collected anyway) and create new EndpointSlices.
 2020-09-15 21:37:15 -07:00
Kubernetes Prow Robot
965137a992 Merge pull request #94692 from alculquicondor/wrap_errors_min 
Wrap errors from VolumeBinding and DefaultBinder plugins
 2020-09-15 18:27:34 -07:00
Kubernetes Prow Robot
ea5ca74195 Merge pull request #94807 from ksubrmnn/winoverlay_beta 
Graduate WinOverlay to Beta
 2020-09-15 15:15:33 -07:00
Kalya Subramanian
747e1e7466 Graduate WinOverlay to Beta 2020-09-15 13:11:14 -07:00
Kubernetes Prow Robot
e7b9453972 Merge pull request #93537 from timuthy/enhancement.move-resourcequota 
Move ResourceQuota admission to k8s.io/apiserver lib
 2020-09-15 12:26:58 -07:00
Kubernetes Prow Robot
983265aeaa Merge pull request #94739 from knight42/fix/TestExpectationsOnRecreate 
test: ensure WaitForCacheSync is called after starting sharedInformerFacotry
 2020-09-15 11:18:07 -07:00
Kubernetes Prow Robot
fd9828b02a Merge pull request #92632 from RenaudWasTaken/move-podresources-api 
Move external facing podresources apis to staging
 2020-09-15 10:04:07 -07:00
Kubernetes Prow Robot
33c58af0f0 Merge pull request #94510 from pacoxu/fix/94500 
remove DefaultIngressClass feature gate for 1.20
 2020-09-15 08:58:07 -07:00
Kubernetes Prow Robot
b14fcc544b Merge pull request #92846 from Huang-Wei/rm-pvcLister 
Remove pvcLister from genericScheduler
 2020-09-15 07:54:07 -07:00
Renaud Gaubert
4eadf40448 Run gofmt 
Signed-off-by: Renaud Gaubert <rgaubert@nvidia.com>
 2020-09-15 06:22:44 -07:00
Renaud Gaubert
ba95a8c641 run hack/update-vendor.sh 
Signed-off-by: Renaud Gaubert <rgaubert@nvidia.com>
 2020-09-15 05:13:33 -07:00
Renaud Gaubert
60304452ff Move podresources api to k8s.io/kubelet/pkg/apis 
Signed-off-by: Renaud Gaubert <rgaubert@nvidia.com>
 2020-09-15 05:13:33 -07:00
Jimmy Zhang
1f0bcc8f5d optimize the use of informer for scheduler 2020-09-15 18:21:40 +08:00
wawa0210
995d654167 ingore apparmor on non Linux operating systems. 2020-09-15 17:30:44 +08:00
knight42
e89e72b637 test: ensure WaitForCacheSync is called after starting sharedInformerFacotry 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-15 16:02:35 +08:00
wojtekt
fbd65a265a Pipe newFunc to etcd3 storage layer 2020-09-15 08:19:12 +02:00
Eric Weber
5cd63097ba Don't attempt to detach an FC device if we don't know its name 2020-09-14 14:32:00 -05:00
Kubernetes Prow Robot
54df1fdc90 Merge pull request #94090 from deads2k/podpreset 
remove pod presets
 2020-09-14 10:43:13 -07:00
Kubernetes Prow Robot
73dda0af5d Merge pull request #92355 from wawa0210/fix-91482 
fix windows container root validate
 2020-09-14 10:42:59 -07:00
Kubernetes Prow Robot
11793434da Merge pull request #94712 from droslean/cred-leak 
[credentialprovider] avoid potential secret leaking while reading .dockercfg
 2020-09-14 09:41:36 -07:00
Nikolaos Moraitis
b907f9e118 avoid potential secret leaking while reading .dockercfg 
There are a lot of scenarios where an invalid .dockercfg file
will still contain secrets. This commit removes logging of the
contents to avoid any potential leaking and manages the actual error
by printing to the user the actual location of the invalid file.

Signed-off-by: Nikolaos Moraitis <nmoraiti@redhat.com>
 2020-09-14 15:39:05 +02:00
David Eads
c0c033b12f generated 2020-09-14 09:24:41 -04:00
David Eads
c7911a384c remove pod presets 2020-09-14 09:24:40 -04:00
auxten
611ddc10b0 Fix misusage of RLock in timeCache lru.Cache.Get() 2020-09-13 21:08:19 +08:00
knight42
ce0a423ef7 test(iptables): deflake TestRestoreAllWaitOldIptablesRestore 
Signed-off-by: knight42 <anonymousknight96@gmail.com>
 2020-09-12 22:43:44 +08:00
knight42
b25af8e3c9 feat(iptables): be able to override iptables-1.4-compatible lock path 2020-09-12 22:43:43 +08:00
Kubernetes Prow Robot
2cb951d78a Merge pull request #91921 from mtaufen/said-beta 
Graduate ServiceAccountIssuerDiscovery to beta
 2020-09-11 23:30:57 -07:00
Kubernetes Prow Robot
a33f6b44e9 Merge pull request #94687 from karan/cfs-flag-warn 
Non-zero cfs quota period duration requires feature flag
 2020-09-11 22:28:57 -07:00
Mike Danese
94f4f06d13 test flake: fix data race in csi_test.go 
The attach goroutine can currently t.Log/t.Error during or after the
subtest completion. This causes races like:

```
==================
WARNING: DATA RACE
Read at 0x00c000e90ac3 by goroutine 1231:
  testing.(*common).logDepth()
      GOROOT/src/testing/testing.go:736 +0xa9
  testing.(*common).log()
      GOROOT/src/testing/testing.go:729 +0x8f
  testing.(*common).Logf()
      GOROOT/src/testing/testing.go:775 +0x21
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll.func21.1()
      pkg/volume/csi/csi_test.go:313 +0x1a4
Previous write at 0x00c000e90ac3 by goroutine 875:
  testing.tRunner.func1()
      GOROOT/src/testing/testing.go:1113 +0x484
  testing.tRunner()
      GOROOT/src/testing/testing.go:1131 +0x22a
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
Goroutine 1231 (running) created at:
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll.func21()
      pkg/volume/csi/csi_test.go:307 +0xf05
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
Goroutine 875 (running) created at:
  testing.(*T).Run()
      GOROOT/src/testing/testing.go:1178 +0x796
  k8s.io/kubernetes/pkg/volume/csi.TestCSI_VolumeAll()
      pkg/volume/csi/csi_test.go:223 +0xb2c
  testing.tRunner()
      GOROOT/src/testing/testing.go:1127 +0x202
==================
```

See also this comment:

07c1788357/src/testing/testing.go (L1141-L1142)

Noticed in:

https://github.com/kubernetes/kubernetes/pull/94449
https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/94449/pull-kubernetes-bazel-test/1304519003330318337
 2020-09-11 22:19:42 -07:00
Wei Huang
185ba08fcd Move podPassesBasicChecks() to VolumeBinding plugin 2020-09-11 13:54:02 -07:00
Wei Huang
42cfda2f94 Remove pvcLister from genericScheduler 
PVCLister can be fetched from sharedInformerFactory.
 2020-09-11 13:54:01 -07:00
Michael Taufen
4f850f97de Graduate ServiceAccountIssuerDiscovery to beta 2020-09-11 12:01:47 -07:00