toyoda
a01b1dada5
Fix shellcheck failure in cluster/gce/config-default.sh
2020-04-17 16:11:58 +09:00
Kubernetes Prow Robot
aed3f05495
Merge pull request #88459 from joakimr-axis/joakimr-axis_config-test.sh
...
Fix shellcheck warnings/errors in cluster/gce/config-test.sh
2020-04-14 15:38:02 -07:00
Kubernetes Prow Robot
ea2d784545
Merge pull request #89895 from jingyih/update_etcd_server_3p4p7
...
Update default etcd server to 3.4.7 in k8s v1.19
2020-04-14 12:34:06 -07:00
jingyih
394df132bd
Update default etcd server to 3.4.7
2020-04-13 14:37:56 -07:00
Kubernetes Prow Robot
c0be582ca5
Merge pull request #89269 from Jefftree/network-proxy-beta
...
Use v1beta1 for egress selector config
2020-04-09 18:07:49 -07:00
Joakim Roubert
21bef7536c
Fix shellcheck warnings/errors in cluster/gce/config-test.sh
...
Change-Id: I3760337aa345ca5b801587ea12c971a95168f7d7
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2020-04-09 08:30:13 +02:00
Jordan Liggitt
5534c12dad
Fix priorityClass typo, add numeric priority to static pods
2020-04-08 15:33:39 -04:00
Kubernetes Prow Robot
4ae223fbff
Merge pull request #84904 from clarklee92/FixShellCheck
...
Fix shell check
2020-04-06 19:09:58 -07:00
Kubernetes Prow Robot
fa6b9bec81
Merge pull request #89759 from cheftako/master
...
Switch COS image to m81.
2020-04-04 02:57:46 -07:00
Kubernetes Prow Robot
81a0e2f62b
Merge pull request #85923 from MrHohn/sig-gcp-owner-file
...
Migrate OWNERS file to apply the area/provider/gcp label
2020-04-02 19:03:46 -07:00
Mateusz Matejczyk
9639464e43
Propagate CONCURRENT_SERVICE_SYNCS to node env
2020-04-02 14:38:41 +02:00
Walter Fender
31393df6ee
Switch COS image to m81.
2020-04-02 00:18:31 -07:00
Kubernetes Prow Robot
6a552da932
Merge pull request #89664 from spiffxp/ignore-list-resources-fails
...
Allow list-resources.sh to continue if a resource fails to list
2020-03-31 20:03:41 -07:00
Aaron Crickenberger
52653195f6
Allow list-resources.sh to continue if a resource fails to list
...
The list-resources.sh script is used solely by our CI, specifically
kubernetes/test-infra/kubetest with the --check-leaked-resources
flag. Currently if a single resource fails to list, we fail the entire
job.
I think this is too brittle. A review of previous issues on
kubernetes/kubernetes that relate to failure of this script shows that
the issues usually resolve themselves, or would be caught by the diff
of before/after.
Let's instead allow the script to continue listing all resources,
and let kubetest's resource diff fail the job.
2020-03-30 12:01:29 -07:00
Peter Hornyack
72f58ae4ff
Bump GCE Windows pause image version
...
pause-win:1.2.1 is based on the March Windows container base images for
both LTSC 2019 and SAC 1909.
2020-03-30 11:30:53 -07:00
Kubernetes Prow Robot
24d8a17f70
Merge pull request #89601 from pjh/gce-march-images
...
Update GCE Windows node images with March's Windows updates
2020-03-30 08:22:29 -07:00
Kubernetes Prow Robot
c7abf44a19
Merge pull request #88856 from yaseenhamdulay/patch-1
...
Create etcd user in cloud-init master.yaml rather than in configure-h…
2020-03-27 20:41:53 -07:00
Peter Hornyack
55df85ba37
Update GCE Windows node images with March's Windows updates
2020-03-27 15:44:08 -07:00
Peter Hornyack
3583816112
Fix INFRA_CONTAINER variable references
...
Tested:
NUM_NODES=2 NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true \
KUBERNETES_NODE_PLATFORM=windows \
LOGGING_STACKDRIVER_RESOURCE_TYPES=new \
KUBE_UP_AUTOMATIC_CLEANUP=true \
WINDOWS_NODE_OS_DISTRIBUTION=win2019 \
./cluster/kube-up.sh
2020-03-26 19:30:39 -07:00
Kubernetes Prow Robot
08ce946e09
Merge pull request #89257 from jprzychodzen/fix-create
...
Util script - move variables setting for replicated master to outer if
2020-03-26 14:10:36 -07:00
Kubernetes Prow Robot
a9f6b93b62
Merge pull request #89498 from sambdavidson/mount-tweak
...
Changed readonly to true and type to "File" for authn/authz config.
2020-03-26 12:48:43 -07:00
Kubernetes Prow Robot
295b53f7b4
Merge pull request #89214 from jingyih/update_etcd_server_3p4p4
...
Update default etcd server to 3.4.4 in k8s v1.19
2020-03-26 01:14:24 -07:00
Samuel Davidson
c70cd1e82f
Changed readonly to true and type to File for authn/authz config.
2020-03-25 17:45:27 -07:00
Yaseen Hamdulay
58f78a53ee
Add ssh_redirect_user
2020-03-24 11:30:48 +00:00
Kubernetes Prow Robot
de877ec26e
Merge pull request #89327 from aojea/conntrack
...
cluster: ipvs conntrack module vs kernel version
2020-03-22 13:28:44 -07:00
Antonio Ojea
33810a99d9
cluster: ipvs conntrack module vs kernel version
...
We should use 'nf_conntrack' instead of 'nf_conntrack_ipv4'
for linux kernel >= 4.19
2020-03-21 11:23:28 +01:00
Yu Liao
50c0827856
infra_container is passed in as env variable
2020-03-20 10:50:25 -07:00
Jakub Przychodzeń
f48268d13b
Util script - move variables setting for replicated master to outer if
2020-03-20 12:42:44 +01:00
Jefftree
936f7665cf
network proxy alpha -> beta
2020-03-19 11:49:47 -07:00
yaseenhamdulay
5de3c64ad0
Create etcd user in cloud-init master.yaml rather than in configure-helper.sh
...
An etcd unix user is currently created in configure-helper.sh if it does not exist
on the master.
cloud-init is the only supported mechanism to add users on COS VMs. If an attempt
is made to add a key using OS Login or the instance metadata mechanism the
google_accounts_daemon will race with useradd and potentially attempt to use
the same UID. This will lock out any attempt to SSH into the VM. We therefore
migrate to using cloud-init to create this user and prevent this issue from occurring.
2020-03-19 11:05:42 +00:00
Kubernetes Prow Robot
f899ad704a
Merge pull request #89069 from enj/enj/i/drop_password_file
...
Remove support for basic authentication
2020-03-18 22:24:20 -07:00
jingyih
f9e0e4c6b4
Update default etcd server to 3.4.4
2020-03-18 00:27:46 -07:00
Kubernetes Prow Robot
8055c92e26
Merge pull request #88125 from mwwolters/flex2healthz
...
Switch flexvolume_node_setup.sh from kubelet RO port to healthz port
2020-03-17 16:20:07 -07:00
Kubernetes Prow Robot
a6f209c1c0
Merge pull request #86259 from rajansandeep/corednsto1.6.6-kube-up
...
Bump CoreDNS version to 1.6.7 [kube-up]
2020-03-17 16:19:26 -07:00
Kubernetes Prow Robot
ff21f45680
Merge pull request #89095 from losipiuk/lo/ca-1.18.0
...
Bump Cluster-Autoscaler to 1.18.0
2020-03-13 07:04:40 -07:00
Joe Betz
23c358d883
Fix unbound variable error in gce/configure.sh
...
Looks like UBUNTU_INSTALL_RUNC_VERSION should be optional here.
2020-03-12 16:41:25 -07:00
Łukasz Osipiuk
c957b2509f
Bump Cluster-Autoscaler to 1.18.0
2020-03-12 21:33:18 +01:00
Monis Khan
df292749c9
Remove support for basic authentication
...
This change removes support for basic authn in v1.19 via the
--basic-auth-file flag. This functionality was deprecated in v1.16
in response to ATR-K8S-002: Non-constant time password comparison.
Similar functionality is available via the --token-auth-file flag
for development purposes.
Signed-off-by: Monis Khan <mok@vmware.com>
2020-03-11 20:55:47 -04:00
Łukasz Osipiuk
6be4d0a705
Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1
2020-03-11 16:16:30 +01:00
Kubernetes Prow Robot
988982a1f7
Merge pull request #88048 from mtaufen/provider-info-e2etest
...
Add e2e test for validating JWTs as OIDC tokens
2020-03-06 17:59:34 -08:00
Kubernetes Prow Robot
b9cd76519e
Merge pull request #88869 from Jefftree/egress_flag
...
[Network Proxy] Allow both grpc and http-connect mode to be toggled in kube-up
2020-03-05 21:40:05 -08:00
Jefftree
6fd748e2c5
exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly
2020-03-05 16:59:55 -08:00
Jefftree
06abedb063
Allow both GRPC and http-connect mode to be toggled
2020-03-05 16:16:59 -08:00
Charles Eckman
aee9fde751
Add e2e test for validating JWTs as OIDC tokens
...
Adds an E2E test to deploy an agnhost container that runs the test.
Co-authored-by: Michael Taufen <mtaufen@google.com>
2020-03-05 13:58:52 -08:00
Sandeep Rajan
5ce4198152
update coredns to 1.6.7
2020-03-05 16:55:28 -05:00
Chao Xu
7d86217043
Use the v0.0.8 network proxy images
2020-03-05 09:54:19 -08:00
Aleksandra Malinowska
472a935294
Update Cluster Autoscaler version to 1.18.0-gke.0
2020-03-03 14:42:25 +01:00
Jefftree
2a98cb7f8b
Use GRPC mode for network proxy
2020-03-02 15:54:52 -08:00
Jefftree
0989770135
Update network proxy to v0.0.7
2020-03-02 10:09:00 -08:00
Jefftree
4c54241c3d
Support token authentication for network proxy
2020-03-01 17:24:48 -08:00