github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
90,326 Commits 1 Branch 31 Tags 1,019 MiB
59a28111be
Commit Graph

9863 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
50c0a698d8
Merge pull request #87553 from MikeSpreitzer/shared-informer-comments-redux 
More refinement of comments and parameter names for informers
 2020-03-05 20:02:50 -08:00
d-kuro
a433e2d545 Remove bazel deps package 
https://prow.k8s.io/view/gcs/kubernetes-jenkins/pr-logs/pull/88646/pull-kubernetes-verify/1235744517118758914
 2020-03-06 12:31:46 +09:00
d-kuro
b78ab3515e Fix ownerReferences.apiVersion for kubectl create job --from=cronjob 2020-03-06 12:24:02 +09:00
immutablet
922e0bfaec Hide methods in the encryption config that are not used outside the package. 2020-03-05 16:54:27 -08:00
Darren Shepherd
eb9cf777dc Disable HTTP2 while proxying a "Connection: upgrade" request 
When proxying connection upgrade requests, like websockets, we dial
the target and then manually write the http.Request to the wire,
bypassing the http.Client.  In this scenario we are by default using
HTTP/1.1 from both the client and to the target server we are proxying.
Because of this we must disable HTTP2 in the TLS handshake so that the
server does not think we are writing a HTTP2 request. We do this by
setting the TLSConfig.NextProtos field to "http/1.1".

Signed-off-by: Darren Shepherd <darren@rancher.com>
 2020-03-05 17:31:22 -07:00
JoshVanL
1bb6ed9bdc
Checks error for loading audit webhook config to prevent panic 
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
 2020-03-05 23:30:50 +00:00
Antoine Pelisse
5231c6815c managedfields: Update Apply time if neither object nor managedfields have changed 2020-03-05 15:19:50 -08:00
Antoine Pelisse
df41fd932b Bump sigs.k8s.io/structured-merge-diff to v3 2020-03-05 15:19:50 -08:00
Antoine Pelisse
7120abe698 fieldmanager: Add failing test for no-op apply actually writing to etcd 2020-03-05 15:19:50 -08:00
Antoine Pelisse
39681aa580 fieldmanager: Move ManagedFields update logic into its own class 2020-03-05 15:19:50 -08:00
Mike Danese
76f8594378 more artisanal fixes 
Most of these could have been refactored automatically but it wouldn't
have been uglier. The unsophisticated tooling left lots of unnecessary
struct -> pointer -> struct transitions.
 2020-03-05 14:59:47 -08:00
Mike Danese
c58e69ec79 automated refactor 2020-03-05 14:59:46 -08:00
Mike Danese
86bd06c882 update clients 2020-03-05 14:13:59 -08:00
Mike Danese
d9671045ff update client gen 2020-03-05 14:13:59 -08:00
Mike Dame
1d7006c38d Add Extenders to scheduler v1alpha2 component config 2020-03-05 16:42:15 -05:00
Christopher M. Luciano
912f05bafb
ingress: add alternate resource backend 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-05 16:08:44 -05:00
Mike Spreitzer
c7b098ac6c Renaming: "Change" -> "Add" for consistency with underlying method 2020-03-05 15:17:33 -05:00
Mike Spreitzer
8a1b603209 Fix queued request accounting, extended queueset test 2020-03-05 15:13:46 -05:00
Christopher M. Luciano
e931e30647
ingress: allow wildcard hosts in IngressRule 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-05 13:44:48 -05:00
James Munnelly
834331088f Use versioned autoscaling API group in code-generator examples 2020-03-05 17:50:25 +00:00
Kubernetes Prow Robot
ab7c75ff3e
Merge pull request #88763 from p0lyn0mial/dynamiccertificates-cleanup 
cleans up dynamiccertificates package
 2020-03-05 07:19:04 -08:00
Kubernetes Prow Robot
318918cac4
Merge pull request #88716 from zhouya0/show_kubectl_describe_ingress_error 
Show kubectl describe ingress error
 2020-03-05 07:18:51 -08:00
Kubernetes Prow Robot
55bfdc6024
Merge pull request #88004 from verb/cli-debug 
Add kubectl debug alpha command
 2020-03-05 07:18:37 -08:00
Monis Khan
2cd6abece4
dynamic certs: pass valid object to event recorder 
Signed-off-by: Monis Khan <mok@vmware.com>
 2020-03-05 09:48:29 -05:00
Monis Khan
3bc918e484
dynamic certs: use correct name with event recorder 
Signed-off-by: Monis Khan <mok@vmware.com>
 2020-03-05 09:48:29 -05:00
Monis Khan
86a5993007
dynamic certs: do not copy mutex via shallow copy of tls.Config 
go vet error:

call of dynamiccertificates.NewDynamicServingCertificateController
copies lock value: crypto/tls.Config contains sync.Once contains
sync.Mutex

Signed-off-by: Monis Khan <mok@vmware.com>
 2020-03-05 09:48:28 -05:00
Maciej Borsz
01c62f6726
Revert "Implement ItemBucketRateLimiter" 2020-03-05 14:35:19 +01:00
Kubernetes Prow Robot
0836b583f7
Merge pull request #85289 from serathius/remove-prometheus-controller-endpointslice 
Remove prometheus references from pkg/controller/endpointslice
 2020-03-05 02:58:37 -08:00
Kubernetes Prow Robot
45ac57fb67
Merge pull request #88815 from enj/enj/i/events_same_default_ns 
Use the same default namespace across event recorders
 2020-03-04 20:13:37 -08:00
Kubernetes Prow Robot
59c6d339cd
Merge pull request #88636 from NetApp/generic-datasource 
Add generic DataSource feature gate
 2020-03-04 20:13:28 -08:00
Kubernetes Prow Robot
cd1ddbf5cc
Merge pull request #88600 from apelisse/at-most-every 
SHOULD NOT HAPPEN: logging "SHOULD NOT HAPPEN" errors more than once per second
 2020-03-04 20:13:18 -08:00
zhouya0
773b890b05 Show kubectl describe ingress error 2020-03-05 10:58:43 +08:00
Mike Spreitzer
4a4852ca9a Hopefully plainer test strings 2020-03-04 21:47:19 -05:00
Hemant Kumar
053baaf143 Update generated files 
update generated code
 2020-03-04 21:23:31 -05:00
Hemant Kumar
f7509d277e Define new type for storing volume fsgroupchangepolicy 
Address review comments for api change
 2020-03-04 21:23:27 -05:00
Julian V. Modesto
bacc2c4960 Set field manager for kubectl diff --server-side. 
Bonus: check diff only dry-runs without persisting.

Co-authored-by: Takahiro HATORI <tahatori@zlab.co.jp>
 2020-03-04 20:20:07 -05:00
Ben Swartzlander
e8b09d3644 Add AnyVolumeDataSource feature gate 
Allow any custom resource to be the data source of a PVC, if the
AnyVolumeDataSource feature gate is enabled. This is an alpha feature.
 2020-03-04 18:55:50 -05:00
Kubernetes Prow Robot
e865c0b219
Merge pull request #88686 from j-griffith/upgrade_cloning_to_ga 
Mark PVCDataSource featuregate as GA
 2020-03-04 13:19:06 -08:00
Antoine Pelisse
389dd0a499 Don't log "SHOULD NOT HAPPEN" errors more than once per second 2020-03-04 11:21:52 -08:00
Monis Khan
167d6a2c8b
Use the same default namespace across event recorders 
Signed-off-by: Monis Khan <mok@vmware.com>
 2020-03-04 13:49:33 -05:00
Lee Verberne
e5b655938e Add kubectl debug alpha command 
This first version of `kubectl alpha debug` is an import of the existing
kubectl-debug plugin, which supports adding ephemeral containers to
running pods. This attempts to follow patterns used by other kubectl
commands such as run, exec and scale.
 2020-03-04 19:20:04 +01:00
Kubernetes Prow Robot
d682c83890
Merge pull request #88765 from brianpursley/kubectl-816-take2 
Change kubectl cluster-info dump to not display output location message when output is stdout
 2020-03-04 10:20:02 -08:00
Kubernetes Prow Robot
48676adba9
Merge pull request #88567 from answer1991/feature/close-connection-when-over-load 
add a new filter goaway which could send GOAWAY probabilistically to help balance HTTP2 requests
 2020-03-04 10:19:49 -08:00
j-griffith
9044fbfc5d Update VolumePVCDatasource to GA for 1.18 
Updates the VolumePVCDataSource featuregate (cloning) to GA for the 1.18 k8s
release.
 2020-03-04 10:48:30 -07:00
Kubernetes Prow Robot
b5b675491b
Merge pull request #86173 from soltysh/cli_defaults 
stop defaulting kubeconfig to http://localhost:8080
 2020-03-04 07:23:47 -08:00
Alvaro Aleman
212190e25e Utilerrors.Aggregate: Allow using with errors.Is() 2020-03-04 14:12:56 +01:00
Kubernetes Prow Robot
497a998ba6
Merge pull request #88654 from ddebroy/gmsa-disable1 
Promote GMSA support for Windows to GA
 2020-03-04 02:32:01 -08:00
Kubernetes Prow Robot
71cfd2a3db
Merge pull request #88460 from soltysh/filename_exec 
Wire --filename flag to exec
 2020-03-04 01:09:47 -08:00
Kubernetes Prow Robot
bd6640a8e0
Merge pull request #88769 from deads2k/SNI 
Support TLS Server Name overrides in kubeconfig file
 2020-03-03 23:18:00 -08:00
Kubernetes Prow Robot
cadd51783b
Merge pull request #88783 from neolit123/1.18-fix-kubectl-auth-verbosity 
client-go: use klog.V(3) for the cert-rotation controller start/stop
 2020-03-03 21:06:09 -08:00
Kubernetes Prow Robot
0535520f6e
Merge pull request #88758 from soltysh/hide_last_applied 
Hide kubectl.kubernetes.io/last-applied-configuration in describe
 2020-03-03 21:06:01 -08:00
Kubernetes Prow Robot
cd23e78c3d
Merge pull request #88684 from saad-ali/updateMountLib 
Update AzureFile and CephFS to use MountSensitive
 2020-03-03 21:05:48 -08:00
Mike Spreitzer
2e97d3c873 Generalized NonResourcePolicyRule.NonResourceURLs impl 
... to match the comment on that field.

Also generalized the test case generator to exercise the new
generality.
 2020-03-04 00:00:39 -05:00
Deep Debroy
16d221e407 Promote GMSA to GA 
Signed-off-by: Deep Debroy <ddebroy@docker.com>
 2020-03-04 02:56:21 +00:00
Kubernetes Prow Robot
aeb88b6ecd
Merge pull request #88587 from cmluciano/cml/v1beta1paths 
Adding PathType to Ingress
 2020-03-03 18:13:47 -08:00
Lubomir I. Ivanov
b2677b1e57 client-go: use klog.V(3) for the cert-rotation controller start/stop 
Introduce a verbosity level for the start and stop notifications,
so that regular calls to commands such as:
  "kubectl auth ..."
would only contain the "yes" / "no" output.
 2020-03-04 01:35:17 +02:00
Kubernetes Prow Robot
9d0cbb7503
Merge pull request #88673 from jsafrane/block-feature-ga 
Promote block volumes to GA
 2020-03-03 12:17:12 -08:00
Kubernetes Prow Robot
b9696133ff
Merge pull request #88655 from soltysh/deprecate_generator 
Deprecate --generator flag from kubectl create commands
 2020-03-03 12:17:01 -08:00
Kubernetes Prow Robot
481b04cf7c
Merge pull request #88487 from zioproto/issues/69314-tier-config-support 
Use compute v1 api to specify network tier
 2020-03-03 12:16:52 -08:00
Tim Allclair
db3392ed12
Always include remoteAddr in source IP list for audit (#87167) 
* Always include remoteAddr in source IP list for audit

Since the remoteAddr is much harder to spoof than headers, always include it in
the list of source IPs used in audit logs.

* Add v6 tests
 2020-03-03 12:15:14 -08:00
saad-ali
22e8189f40 Update dep k8s.io/utils to 0a110f9eb7ab 2020-03-03 11:20:08 -08:00
Rob Scott
f38904d6f4
Adding PathType to Ingress 
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-03 11:11:16 -08:00
David Eads
9dcbc0bf90 update override behavior for kubectl --tls-server-name 2020-03-03 13:23:30 -05:00
Maciej Szulik
02cd65d7bb
Squash pkg/describe/versioned/ into pkg/describe/ 2020-03-03 19:20:06 +01:00
Suresh Kumar Ponnusamy
37c81ed79a Support TLS Server Name overrides in kubeconfig file 
Signed-off-by: Suresh Kumar Ponnusamy <suresh.ponnusamy@freshworks.com>
 2020-03-03 12:55:18 -05:00
Maciej Szulik
07dc17ffd9
Provide more verbose empty config error based on the context 2020-03-03 18:42:19 +01:00
Brian Pursley
6de140567b Changed kubectl cluster-info dump to not display "Cluster info dumped to standard output" message when output is stdout 2020-03-03 09:18:16 -05:00
Lukasz Szaszkiewicz
413960e49b cleans up dynamiccertificates package 2020-03-03 14:38:18 +01:00
James Munnelly
c2367bd5da Extend client-go csr package to invalidate CSRs based on signerName 2020-03-03 13:14:04 +00:00
Maciej Szulik
c77b297bab
Hide kubectl.kubernetes.io/last-applied-configuration in describe 2020-03-03 12:54:00 +01:00
Maciej Szulik
9dac1699bf
Wire --filename flag to exec 2020-03-03 12:16:52 +01:00
Kubernetes Prow Robot
c86aec0564
Merge pull request #88745 from mborsz/slice3 
Implement simple endpoint slice batching
 2020-03-03 03:03:38 -08:00
Maciej Borsz
49b11b5431 Implement simple endpoint slice batching 2020-03-03 08:16:42 +01:00
Mike Spreitzer
f535a9c9ed Make some metrics finer-grained, add dispatch counts, note immediate reject 
Also add testing of metrics for queuesets.
 2020-03-03 01:36:18 -05:00
chenjun.cj
81f46b64a3 add a new generic filter goaway 2020-03-03 14:18:26 +08:00
Kubernetes Prow Robot
eaceb7bf5c
Merge pull request #88419 from Jefftree/netproxy-udstoken 
Add support for token authentication with network proxy
 2020-03-02 22:13:37 -08:00
Kubernetes Prow Robot
53d63e11a2
Merge pull request #88584 from willise/master 
fix: remove conflict comment of taint "Value"
 2020-03-02 20:03:37 -08:00
Kubernetes Prow Robot
79e1ad2f4b
Merge pull request #88744 from jackkleeman/kubelet-handle-intermed 
Support intermediate certificate in certificate store
 2020-03-02 16:16:54 -08:00
Kubernetes Prow Robot
7dccfd6121
Merge pull request #87631 from immutableT/extract-auth-metrics 
Factor-out metrics related logic from authentication logic.
 2020-03-02 16:16:19 -08:00
Kubernetes Prow Robot
a019609d5d
Merge pull request #87508 from jennybuckley/large-obj 
Don't save managedFields if object is too large
 2020-03-02 16:16:05 -08:00
Kubernetes Prow Robot
4b1ee392c1
Merge pull request #79083 from jackkleeman/client-cert-file-reload 
Add ability to reload client certificates from disk
 2020-03-02 16:15:53 -08:00
Kubernetes Prow Robot
d115206309
Merge pull request #88609 from yue9944882/chore/follow-up-metrics 
Preserve legacy inflight metrics and fixes registration
 2020-03-02 14:50:06 -08:00
Kubernetes Prow Robot
e1a69aee41
Merge pull request #86837 from inductor/feature/update_japaense_translation_for_kubectl 
Update po file for kubectl Japanese translation
 2020-03-02 14:49:39 -08:00
Jan Safranek
3af671011a Generated API 2020-03-02 22:21:42 +01:00
Jack Kleeman
83a223f5ee Support intermediate certificate in certificate store 2020-03-02 20:24:04 +00:00
Jefftree
0989770135 Update network proxy to v0.0.7 2020-03-02 10:09:00 -08:00
David Eads
b19ad9e7a7
stop defaulting kubeconfig to http://localhost:8080 2020-03-02 18:32:16 +01:00
Jack Kleeman
929b1559a0 Add ReloadCertFromDisk flag to rest.Config and to kubeconfig which allows the provided client certificate files to be reloaded from disk (currently on every use) 
Close outbound connections when using a cert callback and certificates rotate. This means that we won't get into a situation where we have open TLS connections using expires certs, which would get unauthorized errors at the apiserver

Attempt to retrieve a new certificate if open connections near expiry, to prevent the case where the cert expires but we haven't yet opened a new TLS connection and so GetClientCertificate hasn't been called.

Move certificate rotation logic to a separate function

Rely on generic transport approach to handle closing TLS client connections in exec plugin; no need to use a custom dialer as this is now the default behaviour of the transport when faced with a cert callback. As a result of handling this case, it is now safe to apply the transport approach even in cases where there is a custom Dialer (this will not affect kubelet connrotation behaviour, because that uses a custom transport, not just a dialer).

Check expiry of the full TLS certificate chain that will be presented, not only the leaf. Only do this check when the certificate actually rotates. Start the certificate as a zero value, not nil, so that we don't see a rotation when there is in fact no client certificate

Drain the timer when we first initialize it, to prevent immediate rotation. Additionally, calling Stop() on the timer isn't necessary.

Don't close connections on the first 'rotation'

Remove RotateCertFromDisk and RotateClientCertFromDisk flags.

Instead simply default to rotating certificates from disk whenever files are exclusively provided.

Add integration test for client certificate rotation

Simplify logic; rotate every 5 mins

Instead of trying to be clever and checking for rotation just before an
expiry, let's match the logic of the new apiserver cert rotation logic
as much as possible. We write a controller that checks for rotation
every 5 mins. We also check on every new connection.

Respond to review

Fix kubelet certificate rotation logic

The kubelet rotation logic seems to be broken because it expects its
cert files to end up as cert data whereas in fact they end up as a
callback. We should just call the tlsConfig GetCertificate callback
as this obtains a current cert even in cases where a static cert is
provided, and check that for validity.

Later on we can refactor all of the kubelet logic so that all it does is
write files to disk, and the cert rotation work does the rest.

Only read certificates once a second at most

Respond to review

1) Don't blat the cert file names
2) Make it more obvious where we have a neverstop
3) Naming
4) Verbosity

Avoid cache busting

Use filenames as cache keys when rotation is enabled, and add the
rotation later in the creation of the transport.

Caller should start the rotating dialer

Add continuous request rotation test

Rebase: use context in List/Watch

Swap goroutine around

Retry GETs on net.IsProbableEOF

Refactor certRotatingDialer

For simplicity, don't affect cert callbacks

To reduce change surface, lets not try to handle the case of a changing
GetCert callback in this PR. Reverting this commit should be sufficient
to handle that case in a later PR.

This PR will focus only on rotating certificate and key files.
Therefore, we don't need to modify the exec auth plugin.

Fix copyright year
 2020-03-02 17:20:16 +00:00
Kubernetes Prow Robot
e9d502e4fc
Merge pull request #88663 from deads2k/enable-profiling-by-default 
update kube-controller-manager and kube-scheduler to match kube-apiserver defaults
 2020-03-02 07:24:43 -08:00
yue9944882
1cb42445d7 hack/update-vendor.sh 2020-03-02 21:44:58 +08:00
Mike Spreitzer
dbe8436144 Replaced uber atomic with sync atomic, removed unneded "blank import" 2020-03-02 21:36:26 +08:00
Julian V. Modesto
da3c3432d8 Add context and options to scale client 2020-03-02 00:03:26 -05:00
Kubernetes Prow Robot
fdb2cb4c88
Merge pull request #88509 from robscott/ingress-v1beta1-class 
Adding IngressClass to networking/v1beta1
 2020-03-01 20:58:42 -08:00
Rob Scott
132d2afca0
Adding IngressClass to networking/v1beta1 
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-01 18:17:09 -08:00
Kubernetes Prow Robot
1d407216e7
Merge pull request #88699 from feiskyer/vmss-update-improvement 
Improve performance for VMSS LoadBalancerBackendAddressPools updates
 2020-03-01 17:40:42 -08:00
Pengfei Ni
7f270038d3 Remove unused function aggregateGoroutinesWithDelay 2020-03-01 11:11:51 +00:00
Pengfei Ni
0f4cfe58d8 Switch to UpdateVMs() for updating VMSS backend address pool 2020-03-01 04:46:51 +00:00
immutablet
c0bad80e5b Factor-out metrics related logic from authentication logic. 2020-02-29 16:39:09 -08:00
Jordan Liggitt
f205e3dd59 Use only v1 CRD resources in e2e tests 2020-02-29 17:34:26 -05:00
Marek Siarkowicz
4ea52da628 Remove prometheus references from pkg/controller/endpointslice 2020-02-29 15:10:23 +01:00
Pengfei Ni
2af26dca97 Add UpdateVMs() for VMSS client to allow update multiple VMSSVMs by 
sequential sync requests and concurent async requests.
 2020-02-29 12:52:00 +00:00
Kubernetes Prow Robot
665c6648eb
Merge pull request #87485 from gavinfish/kubectl_pkg_config 
Staticcheck: vendor/k8s.io/kubectl/pkg/cmd/exec|config|certificates
 2020-02-29 02:26:39 -08:00
Kubernetes Prow Robot
03b7f272c8
Merge pull request #88246 from munnerz/csr-signername-controllers 
Update CSR controllers & kubelet to respect signerName field
 2020-02-28 23:38:39 -08:00
Kubernetes Prow Robot
5488fe547d
Merge pull request #86431 from SamyCoenen/patch-1 
Update README.md
 2020-02-28 21:30:39 -08:00
Kubernetes Prow Robot
b378b17560
Merge pull request #88675 from julianvmodesto/hide-server-dry-run 
Hide deprecated --server-dry-run for kubectl apply
 2020-02-28 18:44:57 -08:00
Kubernetes Prow Robot
a84cbd0a42
Merge pull request #88674 from enj/enj/t/paging_with_filter 
storage: confirm that paging and predicate filtering work together
 2020-02-28 18:44:47 -08:00
Kubernetes Prow Robot
268d0a1d3a
Merge pull request #85870 from Jefftree/authn-netproxy 
Use Network Proxy with Authentication & Authorizer Webhooks
 2020-02-28 18:44:39 -08:00
Kubernetes Prow Robot
a54e1a8a04
Merge pull request #88448 from aramase/ipv6 
azure: add support for single stack IPv6
 2020-02-28 17:12:38 -08:00
Kubernetes Prow Robot
86568a8773
Merge pull request #88661 from eloyekunle/feat/update-crd-map-keys-docs 
update map keys api doc with validation requirements
 2020-02-28 15:12:52 -08:00
Monis Khan
002c75442d
storage: confirm that paging and predicate filtering work together 
This change adds the TestListContinuationWithFilter test which
confirms that paging with a predicate that does not match everything
results in the correct amount of calls to TransformFromStorage and
KV.Get.  The partial result of each paging call is also asserted.

Signed-off-by: Monis Khan <mok@vmware.com>
 2020-02-28 17:34:04 -05:00
Jefftree
61fa4e6c09 Address comment and remove if condition 2020-02-28 14:22:19 -08:00
Julian V. Modesto
7b214c96b0 Hide deprecated --server-dry-run for kubectl apply 2020-02-28 16:20:05 -05:00
Samy Coenen
7638aae77e
Update README.md 2020-02-28 21:33:03 +01:00
Samy Coenen
10049500c1
Update README.md 2020-02-28 21:30:40 +01:00
Jan Safranek
2c1b743766 Promote block volume features to GA 2020-02-28 20:48:38 +01:00
Chao Xu
3fbb549fb7 Promote the egressselector API to beta 2020-02-28 11:29:45 -08:00
David Eads
aa07992a44 update kube-controller-manager and kube-scheduler to match kube-apiserver defaults 2020-02-28 11:18:00 -05:00
Elijah Oyekunle
2f5468f1ae update map keys api doc with validation requirements 2020-02-28 16:31:06 +01:00
Elijah Oyekunle
2e187415fd extend CRD map and set validation 2020-02-28 16:00:59 +01:00
Kubernetes Prow Robot
7587ab3ef3
Merge pull request #88620 from andyzhangx/fix-remediation-issue 
fix: azure disk remediation issue
 2020-02-28 04:26:38 -08:00
Maciej Szulik
be6ac856f1
Deprecate --generator flag from kubectl create commands 2020-02-28 11:58:53 +01:00
tipok
6885919986
fix BusyBox sed 
BusyBox sed works the same way as GNU sed
 2020-02-28 11:06:30 +01:00
willise
cb477d3cc1 fix: remove conflict comment of taint "Value" 2020-02-28 17:59:57 +08:00
Kubernetes Prow Robot
c7d7cf72e0
Merge pull request #86636 from zhouya0/fix_kubectl_create_deployment_image_name 
fix kubectl create deployment image name
 2020-02-27 22:10:37 -08:00
Mike Spreitzer
21f78f3348 Added non-randomized tests of matching FlowSchema rules 2020-02-27 23:36:19 -05:00
Kubernetes Prow Robot
e25ff53a6f
Merge pull request #88540 from damemi/move-extender-api-to-staging 
Move scheduler extender API V1 to staging k8s.io/kube-scheduler
 2020-02-27 20:20:52 -08:00
Kubernetes Prow Robot
79377454e8
Merge pull request #88637 from jktomer/priority-fairness-flag 
Rename --enable-inflight-quota-handler to --enable-priority-and-fairness
 2020-02-27 18:00:38 -08:00
Jefftree
cd57b830c1 audit webhook use network proxy 2020-02-27 17:47:23 -08:00
Jefftree
1b38199ea8 pass Dialer instead of egressselector to webhooks 2020-02-27 17:47:23 -08:00
Jefftree
d318e52ffe authentication webhook via network proxy 2020-02-27 17:47:23 -08:00
Mike Dame
e398302dc7 Add OWNERS and testing to external extender/v1 api 2020-02-27 17:45:48 -05:00
Jonathan Tomer
711c1e1720 Rename --enable-inflight-quota-handler to --enable-priority-and-fairness. 
The old flag name doesn't make sense with the renamed API Priority and
Fairness feature, and it's still safe to change the flag since it hasn't done
anything useful in a released k8s version yet.
 2020-02-27 14:04:37 -08:00
Kubernetes Prow Robot
8392baf492
Merge pull request #88632 from liggitt/admission-feature 
Remove global variable dependency from runtimeclass admission
 2020-02-27 13:52:39 -08:00
jennybuckley
ccd9e4e2de Don't save managedFields if object is too large 2020-02-27 12:41:44 -08:00
Jordan Liggitt
57ea7a11a6 Remove global variable dependency from runtimeclass admission 2020-02-27 15:23:52 -05:00
Kubernetes Prow Robot
641616362d
Merge pull request #88133 from julianvmodesto/dry-run-tests 
Cleanup --dry-run values in tests, docs, and scripts
 2020-02-27 11:33:42 -08:00
Kubernetes Prow Robot
882b6f8440
Merge pull request #87776 from brianpursley/kubectl-813 
Default grace period to 0 when --force is used to delete an object
 2020-02-27 11:33:28 -08:00
Mike Dame
18ffaf5608 Move scheduler extender API V1 to staging k8s.io/kube-scheduler 2020-02-27 12:10:59 -05:00
Brian Pursley
852e661f3d Fixed bug where jsonpath expression with a nested range does not process subsequent nodes 2020-02-27 11:03:27 -05:00
James Munnelly
d5dae04898 certificates: update controllers to understand signerName field 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2020-02-27 15:54:31 +00:00
Kubernetes Prow Robot
650220fa64
Merge pull request #88134 from jennybuckley/rate-limit-log-2 
Improve rate limiter latency logging and add component-base metric
 2020-02-27 07:03:32 -08:00
andyzhangx
567cb6c605 fix: azure disk remediation issue 2020-02-27 14:21:48 +00:00
James Munnelly
a983356caa Add signerName field to CSR resource spec 
Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
 2020-02-27 10:17:55 +00:00
yue9944882
11656478be register metrics from comp-base 2020-02-27 17:21:02 +08:00
Kubernetes Prow Robot
09edbcdeb5
Merge pull request #87999 from damemi/deprecate-algo-source 
Deprecate scheduler AlgorithmSource from v1alpha2 ComponentConfig
 2020-02-27 00:15:19 -08:00
Kubernetes Prow Robot
6b13befdfb
Merge pull request #83446 from Elias481/fix-pr-49445 
Fix behaivour of aws-load-balancer-security-groups annotation
 2020-02-26 22:47:19 -08:00
Kubernetes Prow Robot
12d9ad0c93
Merge pull request #88578 from andrewsykim/remove-dupe-patch-service 
GCE: remove duplicate patch service function
 2020-02-26 19:39:57 -08:00
Anish Ramasekar
ee00896712
add support for single stack IPv6 2020-02-26 13:34:24 -08:00
Kubernetes Prow Robot
5ceddce539
Merge pull request #88577 from corneliusweig/w/plugin-and-krew-documentation 
Add documentation around plugins
 2020-02-26 13:34:05 -08:00
Kubernetes Prow Robot
a726c9c9cb
Merge pull request #88435 from andrewsykim/ccm-clean-up 
move well known cloud provider taints to k8s.io/cloud-provider/api
 2020-02-26 13:33:41 -08:00
Kubernetes Prow Robot
4b83d0b2fd
Merge pull request #88394 from zhouya0/fix_kubectl_describe_ingress_annotations_not_sorted 
Fix kubectl describe ingress annotations not sorted
 2020-02-26 09:46:26 -08:00
andrewsykim
bf60504365 fix import formatting in gce_utils.go 
Signed-off-by: andrewsykim <kim.andrewsy@gmail.com>
 2020-02-26 09:28:05 -05:00
andrewsykim
2a05613480 gce: remove duplicate patch service method 
Signed-off-by: andrewsykim <kim.andrewsy@gmail.com>
 2020-02-26 09:26:57 -05:00
Cornelius Weig
ed0e035085 Add documentation around plugins 
Documentation is added in several areas:
1. `kubectl plugin` now prints a note that plugins are best discovered
   with krew.dev and how to install it.
2. The kubectl book now has a new section about plugins, featuring
   - a very brief introduction to the kubectl plugin mechanism
   - a section about krew
 2020-02-26 14:50:50 +01:00
Kubernetes Prow Robot
6ec3ea855d
Merge pull request #85282 from serathius/flag-kubelet 
Add show-hidden-metrics-for-version to kubelet
 2020-02-26 03:54:26 -08:00
Kubernetes Prow Robot
322b2fe16f
Merge pull request #88533 from bowen5/cross-tenant-network-resource 
[UseNetworkResourceInDifferentTenant] Fix bug of setting incorrect subscription id on azure network resource clients.
 2020-02-26 01:40:39 -08:00
Kubernetes Prow Robot
20f4b110fa
Merge pull request #88463 from feiskyer/cleanup-backoff 
Remove the unsupported CloudProviderBackoffMode from Azure cloud provider config
 2020-02-26 01:40:26 -08:00
Kubernetes Prow Robot
86141c0cce
Merge pull request #88503 from robscott/app-protocol 
Adding AppProtocol to Service and Endpoints Ports
 2020-02-26 00:20:40 -08:00
Kubernetes Prow Robot
ddf53b8f66
Merge pull request #84920 from sttts/sttts-cr-list-type-set-map-validation 
apiextensions: validate list-type map+set uniqueness in CRs
 2020-02-25 21:02:40 -08:00
Rob Scott
6a33727632
Adding AppProtocol to Service and Endpoints Ports 2020-02-25 17:42:34 -08:00
jennybuckley
2bcf99f05f Improve rate limiter latency logging and metrics 2020-02-25 17:04:20 -08:00
Kubernetes Prow Robot
851efa8a34
Merge pull request #84051 from bart0sh/PR0079-multiple-sizes-hugepages 
Implement support for multiple sizes huge pages
 2020-02-25 14:40:27 -08:00
Marek Siarkowicz
6d9fbd2d9f Deprecate heapster related kubelet flags and remove their implementation 
Heapster is retired since 1.11.
Having kubectl top mention Heapster is confusing for users.
 2020-02-25 21:38:28 +01:00
Marek Siarkowicz
d44d5b35f3 Add show-hidden-metrics-for-version to kubelet 2020-02-25 20:46:34 +01:00
Dr. Stefan Schimanski
ea45da7e52 apiextions: add list-type: map|set CR validation 2020-02-25 18:34:49 +01:00
bowan
23340d7522 [UseNetworkResourceInDifferentTenant] Fix bug of setting incorrect subscription id on azure network resource clients. 2020-02-26 01:23:48 +08:00
Mike Dame
7e1ec59fe2 Remove AlgorithmSource from v1alpha2 
This commit removes AlgorithmSource from the v1alpha2 scheduler ComponentConfig api.
It also creates the necessary manual conversion functions and updates defaulting to accept the change.
 2020-02-25 11:42:28 -05:00
Saverio Proto
bdc54eb18a Use compute v1 api to specify network tier 
Drop the use of the alpha api for operations that are supported by compute v1

The switch/case logic was wrong because the user
can set the default tier for a project:
https://cloud.google.com/network-tiers/docs/using-network-service-tiers#setting_the_tier_for_all_resources_in_a_project

The assumption that the default tier is always PREMIUM is wrong

This patch uses the explicit network tier when possible,
or it falls back to the project default.

Signed-off-by: Saverio Proto <saverioproto@google.com>
 2020-02-25 08:16:58 +01:00
Kubernetes Prow Robot
59870dad01
Merge pull request #87748 from satyasm/kep-local-cidr 
Refactor handling of local traffic detection.
 2020-02-24 19:06:48 -08:00
Kubernetes Prow Robot
71b7b5175a
Merge pull request #87790 from marosset/windows-run-as-username-stable 
Moving Windows RunAsUserName feature to GA
 2020-02-24 17:46:21 -08:00
Kubernetes Prow Robot
f6525dbc81
Merge pull request #88087 from alculquicondor/mutiprofiles-api 
Add Schedulings Profiles to kubescheduler.config.k8s.io/v1alpha2
 2020-02-24 14:43:35 -08:00
Kubernetes Prow Robot
4cadaf2563
Merge pull request #88437 from mattjmcnaughton/mattjmcnaughton/fix-fake-image-testing-service 
Fix initialization bug in `FakeImageService`
 2020-02-24 13:12:11 -08:00
Kubernetes Prow Robot
327dd9de0f
Merge pull request #88444 from andyzhangx/azuredisk-remediator 
fix: add remediation in azure disk attach/detach
 2020-02-24 11:03:04 -08:00
Kubernetes Prow Robot
0225798ab2
Merge pull request #88424 from gnufied/respect-ignore-volume-az 
Respect ignore-volume-az option in admission plugin
 2020-02-24 11:02:57 -08:00
Kubernetes Prow Robot
94837daab2
Merge pull request #88462 from feiskyer/fix-302 
Deprecate service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset
 2020-02-24 08:36:57 -08:00
Aldo Culquicondor
9e71741d06 Add Profiles to kubescheduler.config.k8s.io/v1alpha2 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-02-24 09:45:46 -05:00
Kubernetes Prow Robot
e4a5012de6
Merge pull request #88360 from andyzhangx/delete-disk 
fix: check disk status before delete azure disk
 2020-02-24 06:42:47 -08:00
Brian Pursley
0f31bef94c Default grace period to 0 when --force is used to delete an object 2020-02-24 09:30:56 -05:00
Pengfei Ni
87d0e826c1 Remove the unsupported CloudProviderBackoffMode from Azure cloud 
provider config.
 2020-02-24 14:07:53 +00:00
Pengfei Ni
a8c41ae5fb Deprecate service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset 2020-02-24 13:56:39 +00:00
Kubernetes Prow Robot
ca23b07dd4
Merge pull request #88384 from bowen5/cross-tenant-network-resource 
Support cluster using network resources (VNet, LB, IP, etc.) across AAD Tenants.
 2020-02-24 02:34:47 -08:00
bowan
b38ed0467f Support cluster using network resources (VNet, LB, IP, etc.) across AAD Tenants. 2020-02-24 16:59:22 +08:00
andyzhangx
0e3b7a7aea fix test failure 2020-02-24 02:43:37 +00:00
andyzhangx
e5bb6af475 fix: add remediation in azure disk attach/detach 
add one comment
 2020-02-24 02:37:07 +00:00
andrewsykim
8c633356df move well known cloud provider taints to k8s.io/cloud-provider/api 
Signed-off-by: andrewsykim <kim.andrewsy@gmail.com>
 2020-02-23 19:54:59 -05:00
mattjmcnaughton
5362e8b6cb
Fix initialization bug in FakeImageService 
When adding this functionality in
https://github.com/kubernetes/kubernetes/pull/88372, I forgot to
allocate a map for the `Errors` field when constructing the object. As a
result, trying to actually use the `InjectError` method failed (as I
noticed when I started trying to write tests to actually use
`InjectError`). Fortunately, `FakeImageService` is only used in tests...
but still, we should fix this issue.

Fixing in a separate diff from the one which will add additional test
coverage (and actually use `InjectError`, because I don't like having
non-working code in master.)

We could also revert the original commit and then re-merge with this
fix, but that seems like unnecessary work given we already have a fix
ready to go.
 2020-02-23 09:23:59 -05:00
Kubernetes Prow Robot
9c1543263b
Merge pull request #88431 from liggitt/publish-1.18 
Add release-1.18 publishing rules
 2020-02-23 00:32:47 -08:00
Jordan Liggitt
a6dc7ba138 Add release-1.18 publishing rules 2020-02-22 19:42:34 -05:00
Kubernetes Prow Robot
8ed008a418
Merge pull request #88421 from apelisse/enable-ssa-again 
Enable field management for all new objects
 2020-02-22 11:04:47 -08:00
Kubernetes Prow Robot
15515e1240
Merge pull request #88294 from immutableT/envelope-metrics 
Instrument DEK cache fill and request inter-arrival times.
 2020-02-22 08:34:47 -08:00
zhouya0
0acaf5c3e9 Fix kubectl describe ingress annotations not sorted 2020-02-22 22:05:01 +08:00
zhouya0
5db45e12d5 fix kubectl create deployment image name 2020-02-22 20:23:42 +08:00
Kubernetes Prow Robot
de75bf9443
Merge pull request #88405 from feiskyer/mock-vmset 
Swith to mock clients for route/routetable/networkinterface tests
 2020-02-22 00:09:02 -08:00
Kubernetes Prow Robot
62b0bbc1c6
Merge pull request #88382 from jpbetz/parallel-mem-client-resource-discovery 
Refresh discovery server resources for memCacheClient in parallel
 2020-02-22 00:08:47 -08:00
Kubernetes Prow Robot
5aa2e3ca06
Merge pull request #80605 from odinuge/hugetlb-kubectl-node-describe 
Add huge page usage stats (Allocated resources) to kubectl describe node
 2020-02-21 20:58:47 -08:00
Hemant Kumar
ea5bea2b9f Respect ignore-volume-az option in admission plugin 
We appear to be respecting this options when provisioning the volume
but when PV is admitted the zone/region fields get added back to the
PV and hence defeating the purpose of the option.
 2020-02-21 22:12:58 -05:00
Joe Betz
190a72392a Refresh discovery server resources for memCacheClient in parallel 2020-02-21 18:35:38 -08:00
Pengfei Ni
78b18ed6f4 Swith to mock clients for route/routetable/networkinterface tests 2020-02-22 02:32:19 +00:00
Kubernetes Prow Robot
8d7a8f647a
Merge pull request #88372 from mattjmcnaughton/mattjmcnaughton/support-injecting-errors-fake-image-manager 
Support injecting errors for `FakeImageService`
 2020-02-21 18:32:03 -08:00
Kubernetes Prow Robot
0e9a8481aa
Merge pull request #88324 from zhouya0/add_init_containers_to_dump_info 
Add init containers log to cluster dump info
 2020-02-21 18:31:40 -08:00
Kubernetes Prow Robot
23045f9247
Merge pull request #88057 from julianvmodesto/remove-deprecated-rolling-update 
Remove deprecated rolling-update command
 2020-02-21 18:31:30 -08:00
Kubernetes Prow Robot
c69c91987b
Merge pull request #87811 from mborsz/pv 
Remove unnecessary calls to GCE API after PD is created
 2020-02-21 18:31:01 -08:00
Satyadeep Musuvathy
8c6956e5bb Refactor handling of local traffic detection. 2020-02-21 17:57:34 -08:00
Antoine Pelisse
a54a52c5de Enable field management for all new objects 2020-02-21 15:11:33 -08:00
Kubernetes Prow Robot
479759ed16
Merge pull request #88377 from Huang-Wei/pts-doc-update 
Update API doc for feature PodTopologySpread (a.k.a EvenPodsSpread)
 2020-02-21 12:12:25 -08:00
Kubernetes Prow Robot
cd3494193a
Merge pull request #87839 from leakingtapan/cloud-provider 
Fix aws provider to return no error when instance is not found for InstanceExistsByProviderID
 2020-02-21 12:12:11 -08:00
immutablet
684d6fb0ad Instrument DEK cache fill and request inter-arrival times. 2020-02-21 11:07:53 -08:00
Kubernetes Prow Robot
20e6883a75
Merge pull request #88290 from tallclair/spr-deprecate 
Start deprecation process for StreamingProxyRedirects
 2020-02-21 10:32:45 -08:00
Cheng Pan
2568b552c8 Fix aws provider to return no error when instance is not found for InstanceExistsByProviderID 2020-02-21 16:36:27 +00:00
Brian Pursley
04741b150e Removed unnecessary _complete call which was silently failing and causing zsh completion to return a nonzero exit code 
Removed unnecessary _complete and _expand aliases for zsh completion
 2020-02-21 09:11:44 -05:00
Kubernetes Prow Robot
6461e6f4fb
Merge pull request #87179 from Jefftree/netproxy-uds 
UDS + GRPC Support for Network Proxy
 2020-02-20 21:20:32 -08:00
Kubernetes Prow Robot
3641953975
Merge pull request #88332 from fleeto/comments-of-controller-manager 
replaced tokenaccessreview with tokenreview
 2020-02-20 19:50:32 -08:00
Kubernetes Prow Robot
1591590030
Merge pull request #88292 from julianvmodesto/add-dry-run 
Add --dry-run=server|client|none to more kubectl commands
 2020-02-20 16:30:25 -08:00
Kubernetes Prow Robot
bf050f9794
Merge pull request #88100 from jiahuif/kubelet-bootstrap-csr-logging 
add logging for kubelet csr being approved and issued.
 2020-02-20 16:30:09 -08:00
Wei Huang
54be6ca679
Update API doc for feature PodTopologySpread (a.k.a EvenPodsSpread) 2020-02-20 15:57:56 -08:00
marosset
d44a30f0ed Moving Windows RunAsUserName feature to GA 2020-02-20 22:08:18 +00:00
Benjamin Elder
86ead63158 update golang.org/x/crypto 2020-02-20 13:17:51 -08:00
Jefftree
d798ccbba1 Add tests for egress selector 2020-02-20 12:45:55 -08:00
Kubernetes Prow Robot
afa72e93cd
Merge pull request #88149 from yue9944882/feat/flow-control-ob 
Flowcontrol Obserbiliity: Add FS/PL UIDs into response headers
 2020-02-20 12:31:58 -08:00
Jefftree
907ab25b6f vendor network proxy client 2020-02-20 10:19:38 -08:00
Jefftree
55b89a6451 Support empty root CA for konnectivity 2020-02-20 10:19:38 -08:00
Jefftree
725d2b6a8f Network Proxy: GRPC + HTTP Connect with UDS 2020-02-20 10:19:37 -08:00
Kubernetes Prow Robot
8fb66ae965
Merge pull request #88319 from ZeroMagic/azuredisk_fake_test 
Export Azure Fake Cloud for reusing
 2020-02-20 08:27:08 -08:00
mattjmcnaughton
bdc4e2fd17
Support injecting errors for FakeImageService 
We want `FakeImageService` to support injecting errors similar to
`FakeRuntimeService`. These injected errors will be returned on the next
call to the given function.

We will use the ability to inject errors to more thoroughly test
the image management component of the KubeRuntimeManager.
 2020-02-20 10:09:56 -05:00
Kubernetes Prow Robot
cda2f5dfe5
Merge pull request #86603 from npu21/doc/kustomize 
update defaultconfig link
 2020-02-20 04:29:31 -08:00
Kubernetes Prow Robot
d0983b562d
Merge pull request #84731 from verb/ec-pid 
Add namespace targeting mode to CRI and kubelet
 2020-02-20 04:29:17 -08:00
andyzhangx
44e6a506b9 fix: check disk status before disk azure disk 2020-02-20 07:26:43 +00:00
ZeroMagic
e2c733a702 test: export a fake Azure cloud 
Via the exported GetTestCloud(), we can reuse the code for the unit tests in Azure related CSI drivers.

Signed-off-by: ZeroMagic <anthonyliu@zju.edu.cn>
 2020-02-20 00:23:24 +00:00
Kubernetes Prow Robot
343ccdebdb
Merge pull request #88313 from zhouya0/optimize_kubectl_version_help_info 
Optimize kubectl version help info
 2020-02-19 16:11:45 -08:00
Kubernetes Prow Robot
c3db17f22c
Merge pull request #88311 from yue9944882/chore/refactor-metrics 
Homogenize PF metrics naming
 2020-02-19 16:11:35 -08:00
Kubernetes Prow Robot
fd95a019a1
Merge pull request #87550 from ricochet/doc/godep-kubectl 
Remove doc reference to godep #782
 2020-02-19 16:11:18 -08:00
Julian V. Modesto
a9ec444d74 Add --dry-run to more kubectl commands. 
- delete
- taint
- replace
 2020-02-19 17:53:21 -05:00
Tim Allclair
98ad7416fa Start deprecation process for StreamingProxyRedirects 2020-02-19 10:53:45 -08:00
Jiahui Feng
fdd7424d19 add logging for csr being approved and issued. 2020-02-19 10:26:59 -08:00
Ed Bartosh
0eb65bd7da Implement support for multiple sizes huge pages 
This implementation allows Pod to request multiple hugepage resources
of different size and mount hugepage volumes using storage medium
HugePage-<size>, e.g.

spec:
  containers:
    resources:
      requests:
        hugepages-2Mi: 2Mi
        hugepages-1Gi: 2Gi
    volumeMounts:
      - mountPath: /hugepages-2Mi
        name: hugepage-2mi
      - mountPath: /hugepages-1Gi
        name: hugepage-1gi
    ...
  volumes:
    - name: hugepage-2mi
      emptyDir:
        medium: HugePages-2Mi
    - name: hugepage-1gi
      emptyDir:
        medium: HugePages-1Gi

NOTE: This is an alpha feature.
      Feature gate HugePageStorageMediumSize must be enabled for it to work.
 2020-02-19 18:15:40 +02:00
Vincent C
b410f77d31 replaced tokenaccessreview with tokenreview 2020-02-19 22:41:35 +08:00
zhouya0
a024ac14ef Add init containers to dump info 2020-02-19 20:47:34 +08:00
zhouya0
f85e079147 optimize kubectl version help info 2020-02-19 16:45:37 +08:00
yue9944882
a1523a049f homogenize metrics naming 2020-02-19 16:34:49 +08:00
Kubernetes Prow Robot
13750a0843
Merge pull request #88260 from databus23/patch-3 
Fix wrong alpha version for ValidateProxyRedirects
 2020-02-19 00:34:38 -08:00
Kubernetes Prow Robot
d3a10e132b
Merge pull request #88094 from aramase/vm-instance-update 
add delays between goroutines for vm instance update
 2020-02-18 20:58:38 -08:00
yue9944882
da6f89217d adding response headers 2020-02-19 10:52:02 +08:00
Kubernetes Prow Robot
f38ca13bc8
Merge pull request #88267 from mfojtik/revert-con-refused-retry 
client-go: remove connection refused to list of retriable errors
 2020-02-18 15:32:51 -08:00
Kubernetes Prow Robot
1531905dc4
Merge pull request #88176 from tedyu/que-cfg 
Check qcAPI against nil before derefencing
 2020-02-18 15:32:24 -08:00
Anish Ramasekar
fdefdff222
add delays between goroutines for vm instance update 2020-02-18 13:32:48 -08:00
Kubernetes Prow Robot
1e12d92a51
Merge pull request #88261 from mborsz/rate 
Implement ItemBucketRateLimiter
 2020-02-18 07:35:29 -08:00
Michal Fojtik
0dfe0c793b
rest: remove connection refused from the list of retriable errors 2020-02-18 14:45:25 +01:00
Maciej Borsz
6846a0a6b6 Implement ItemBucketRateLimiter 2020-02-18 11:34:20 +01:00
Fabian Ruff
9eb45d22a4
Fix wrong alpha version for ValidateProxyRedirects 
This feature gate apparently never made it into 1.10 or 1.11
https://github.com/kubernetes/kubernetes/pull/69943
 2020-02-18 09:22:42 +01:00
Pengfei Ni
1ade947698 chore: move caches to a separate package 2020-02-18 08:04:54 +00:00
Pengfei Ni
51d44af186 Fix route conflicted operations when updating multiple routes together 2020-02-16 12:02:41 +00:00
Kubernetes Prow Robot
ed2f7b0e25
Merge pull request #88155 from feiskyer/more-clients 
Add deletion interfaces for VM, VMSS and interface clients
 2020-02-15 21:37:27 -08:00
Kubernetes Prow Robot
1c60045db0
Merge pull request #88173 from BenTheElder/gives-a-whole-new-pause 
upgrade pause everywhere
 2020-02-15 02:11:27 -08:00
Kubernetes Prow Robot
053d46c3c0
Merge pull request #88135 from julianvmodesto/local-dry-run-server-incompatible 
Error if --local and --dry-run=server are passed
 2020-02-14 23:09:51 -08:00
Kubernetes Prow Robot
1c225e3e56
Merge pull request #87899 from tedyu/observed-rec 
Pass context to tryAcquireOrRenew
 2020-02-14 23:09:41 -08:00
Julian V. Modesto
d97169f59a Clean up --dry-run values. 
- Clean up --dry-run values in tests, docs, and scripts
- Fix --dry-run for auth reconcile and add a test
 2020-02-15 00:43:30 -05:00
Kubernetes Prow Robot
954d8b13ca
Merge pull request #88171 from MikeSpreitzer/version-field-managers 
Version the API Priority and Fairness FieldManager values
 2020-02-14 18:57:28 -08:00
Julian V. Modesto
5fcd9c7c7e Error if --local and --dry-run=server are passed 2020-02-14 19:26:36 -05:00
Kubernetes Prow Robot
c1aeef5e62
Merge pull request #88131 from liggitt/mutation-detector-trace 
Shrink mutation detection critical section
 2020-02-14 14:29:50 -08:00
Kubernetes Prow Robot
f4ae52a48e
Merge pull request #88071 from int128/patch-1 
Fix example of kubectl config set-credentials command
 2020-02-14 14:29:41 -08:00
Benjamin Elder
8ba86728e3 bump pause to 3.2 in kubectl test data 2020-02-14 14:03:19 -08:00
Ted Yu
583f804652 Do not dereference qcAPI which maybe nil 2020-02-14 13:30:40 -08:00
Kubernetes Prow Robot
e8e64a6c0b
Merge pull request #87489 from julianvmodesto/dry-run-verifier-private 
Reduce public methods for DryRunVerifier
 2020-02-14 11:29:03 -08:00
Jordan Liggitt
12abf03f6b Shrink mutation detection critical section 2020-02-14 14:22:22 -05:00
Mike Spreitzer
b142868eaf Version the API Priority and Fairness FieldManager values 2020-02-14 13:50:11 -05:00
Pengfei Ni
c1383e99af Add deletion interfaces for VM, VMSS and interface clients 2020-02-14 18:56:26 +08:00
Bismita Guha
a20ae3953b
Remove optional from core docs for 'Type' (#88029) 
* Remove optional from core docs for 'Type'

* Regenerate protobuf and openapi docs

* Regenerate protobuf and openapi docs
 2020-02-13 21:10:31 -08:00
Julian V. Modesto
932500c015 Remove deprecated rolling-update command 2020-02-13 23:52:53 -05:00
Kubernetes Prow Robot
b2bf4a8acb
Merge pull request #88079 from liggitt/onclose-panic 
Set up connection onClose prior to adding to connection map
 2020-02-13 16:55:21 -08:00
Kubernetes Prow Robot
77e8c75f32
Merge pull request #87754 from MikeSpreitzer/apf-filter5 
Add twice refactored filter and config consumer for API Priority and Fairness
 2020-02-13 16:54:46 -08:00
Kubernetes Prow Robot
b5af3b86ed
Merge pull request #87079 from gavinfish/drfish_typo_resetting 
Fix typo from reseting to resetting
 2020-02-13 16:54:32 -08:00
Kubernetes Prow Robot
35bb71d855
Merge pull request #88092 from yujuhong/rm-beta-labels 
Replace Beta OS/arch labels with the GA ones
 2020-02-13 14:14:02 -08:00
Kubernetes Prow Robot
b4db96464b
Merge pull request #88002 from alculquicondor/rm_affinity_weight_2 
Remove HardPodAffinitySymmetricWeight from v1alpha2 Component Config
 2020-02-13 14:13:25 -08:00
Kubernetes Prow Robot
a53b25ae92
Merge pull request #87923 from ingvagabund/move-direct-prometheus-metrics-under-component-base-metrics 
Collect some of scheduling metrics and scheduling throughput (vol. 2)
 2020-02-13 14:13:11 -08:00
Yu-Ju Hong
bcd975aa65 Replace Beta OS/arch labels with the GA ones 
Beta OS/arch labels have been deprecated since 1.14.
This change replaces these labels with the GA ones.
 2020-02-13 09:38:51 -08:00
Aldo Culquicondor
99bda6fac0 Remove HardPodAffinityWeight from v1alpha2 
Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-02-13 11:59:56 -05:00
Kubernetes Prow Robot
a70e574955
Merge pull request #82070 from olivierlemasle/fix82011 
kubectl cluster-info dump: use file extension according to output format
 2020-02-13 08:40:35 -08:00
Olivier Lemasle
d6fcc224f1 kubectl cluster-info dump: use file extension according to output format 2020-02-13 15:48:40 +01:00
Kubernetes Prow Robot
d88304507d
Merge pull request #87590 from weinong/fix-87586 
don't specify apiVersion when getting AAD token
 2020-02-13 05:16:35 -08:00
Jan Chaloupka
7b5534021c Collect some of scheduling metrics and scheduling throughput 
In addition to getting overall performance measurements from golang benchmark,
collect metrics that provides information about insides of the scheduler itself.
This is a first step towards improving what we collect about the scheduler.

Metrics in question:
- scheduler_scheduling_algorithm_predicate_evaluation_seconds
- scheduler_scheduling_algorithm_priority_evaluation_seconds
- scheduler_binding_duration_seconds
- scheduler_e2e_scheduling_duration_seconds

Scheduling throughput is computed on the fly inside perfScheduling.
 2020-02-13 13:32:09 +01:00
Kubernetes Prow Robot
8ca96f3e07
Merge pull request #80724 from cceckman/provider-info-e2e 
Provide OIDC discovery for service account token issuer
 2020-02-13 01:38:35 -08:00
Maciej Borsz
c78c0e949d Remove unnecessary calls to GCE API after PD is created. 2020-02-13 09:57:25 +01:00
Kubernetes Prow Robot
177506d87c
Merge pull request #87945 from andyzhangx/azure-writeaccelerator 
add azure disk WriteAccelerator support
 2020-02-12 21:37:24 -08:00
Kubernetes Prow Robot
f0c14f291f
Merge pull request #87751 from skilxn-go/Rename 
[Scheduler Framework] Rename `PostFilter` plugin to `PreScore`
 2020-02-12 21:37:12 -08:00
Kubernetes Prow Robot
a11a8b8691
Merge pull request #87714 from julianvmodesto/use-kubectl-ss-dry-run-flag 
Use --dry-run=server in kubectl commands
 2020-02-12 21:36:57 -08:00
Kubernetes Prow Robot
6c4096b9f8
Merge pull request #82051 from roycaihw/apiextensions/add-to-reviewers 
add roycaihw to reviewers in apiextensions-apiserver
 2020-02-12 21:36:50 -08:00
Kubernetes Prow Robot
c2f08b8552
Merge pull request #88084 from soltysh/issue809 
Don't show flags in api-versions help
 2020-02-12 17:55:12 -08:00
Julian V. Modesto
13b80b48cd Use --dry-run=client,server in kubectl. 
- Support --dry-run=server for subcommands apply, run, create, annotate,
expose, patch, label, autoscale, apply set-last-applied, drain, rollout undo
- Support --dry-run=server for set subcommands
  - image
  - resources
  - serviceaccount
  - selector
  - env
  - subject
- Support --dry-run=server for create subcommands.
  - clusterrole
  - clusterrolebinding
  - configmap
  - cronjob
  - job
  - deployment
  - namespace
  - poddisruptionbudget
  - priorityclass
  - quota
  - role
  - rolebinding
  - service
  - secret
  - serviceaccount
- Remove GetClientSideDryRun
 2020-02-12 20:46:54 -05:00
Jordan Liggitt
aa4113d777 Set up connection onClose prior to adding to connection map 2020-02-12 17:17:09 -05:00
Kubernetes Prow Robot
f7eafa1a83
Merge pull request #86896 from yutedz/copy-into-err 
Return the error from copyInto
 2020-02-12 13:54:51 -08:00
Kubernetes Prow Robot
6541758fd4
Merge pull request #88018 from wojtek-t/serializer_testing_conversions 
Create manual conversions for serializer testing types
 2020-02-12 10:36:51 -08:00
Maciej Szulik
8ff6b24c57
Don't show flags in api-versions help 2020-02-12 18:31:05 +01:00
Kubernetes Prow Robot
50c8f73a4b
Merge pull request #88017 from feiskyer/fix-409 
Make Azure clients only retry on specified HTTP status codes
 2020-02-12 07:49:05 -08:00
Kubernetes Prow Robot
de9bbcc9cd
Merge pull request #87403 from gavinfish/kubectl_pkg 
Staticcheck: vendor/k8s.io/kubectl/pkg/scale etc.
 2020-02-12 07:48:52 -08:00
skilxn-go
f5b7e3cca3 Rename PostFilter plugin to PreScore 2020-02-12 23:25:08 +08:00
Hidetake Iwata
0368a7d5f7
Fix example of kubectl config set-credentials 2020-02-12 21:11:24 +09:00
Kubernetes Prow Robot
a330defda3
Merge pull request #87361 from zhouya0/fix_kubectl_drain_ignore_daemonsets_and_ohters 
Fix kubectl drain ignore daemonsets and others
 2020-02-12 02:23:16 -08:00
Kubernetes Prow Robot
ed0d6ee3ce
Merge pull request #85617 from andrewsykim/optimize-external-ips 
proxier: only get local addresses once per sync loop
 2020-02-12 02:22:51 -08:00
Pengfei Ni
6a487723ed Make Azure clients only retries on specified HTTP status codes 2020-02-12 08:02:17 +00:00
Kubernetes Prow Robot
919871e86a
Merge pull request #88035 from jennybuckley/apply-time-sort 
Round managedFields times to the nearest second before sorting
 2020-02-11 23:16:41 -08:00
Kubernetes Prow Robot
17a6248f76
Merge pull request #87939 from shaloulcy/pod_storage_indexer 
add indexer for pod storage
 2020-02-11 23:15:22 -08:00
Kubernetes Prow Robot
e13463d755
Merge pull request #87805 from zhouya0/add_kubectl_diff_exit_code_doc 
Add kubectl diff exit code doc
 2020-02-11 23:14:45 -08:00
Kubernetes Prow Robot
f9250c4f95
Merge pull request #87795 from zhan849/harry/reflector-backoff 
add exponential backoff with cap and reset in reflector during retrying ListWatch
 2020-02-11 17:06:21 -08:00
Charles Eckman
5a176ac772 Provide OIDC discovery endpoints 
- Add handlers for service account issuer metadata.
- Add option to manually override JWKS URI.
- Add unit and integration tests.
- Add a separate ServiceAccountIssuerDiscovery feature gate.

Additional notes:
- If not explicitly overridden, the JWKS URI will be based on
  the API server's external address and port.

- The metadata server is configured with the validating key set rather
than the signing key set. This allows for key rotation because tokens
can still be validated by the keys exposed in the JWKs URL, even if the
signing key has been rotated (note this may still be a short window if
tokens have short lifetimes).

- The trust model of OIDC discovery requires that the relying party
fetch the issuer metadata via HTTPS; the trust of the issuer metadata
comes from the server presenting a TLS certificate with a trust chain
back to the from the relying party's root(s) of trust. For tests, we use
a local issuer (https://kubernetes.default.svc) for the certificate
so that workloads within the cluster can authenticate it when fetching
OIDC metadata. An API server cannot validly claim https://kubernetes.io,
but within the cluster, it is the authority for kubernetes.default.svc,
according to the in-cluster config.

Co-authored-by: Michael Taufen <mtaufen@google.com>
 2020-02-11 16:23:31 -08:00
Andrew Sy Kim
1653476e3f proxier: use IPSet from k8s.io/utils/net to store local addresses 
This allows the proxier to cache local addresses instead of fetching all
local addresses every time in IsLocalIP.

Signed-off-by: Andrew Sy Kim <kiman@vmware.com>
 2020-02-11 16:44:34 -05:00
andrewsykim
9e5a06c3ed update vendor k8s.io/utils to 5f6fbceb4c31 
Signed-off-by: andrewsykim <kim.andrewsy@gmail.com>
 2020-02-11 16:35:49 -05:00
jennybuckley
888a322d9c Round times to nearest second before sorting 2020-02-11 12:54:19 -08:00
Jordan Liggitt
a657d51ce3 Lower server-side apply percentage to 10% 2020-02-11 12:55:28 -05:00
wojtekt
ca81235f24 Fix serializer test 2020-02-11 15:54:05 +01:00
Kubernetes Prow Robot
38acec9bbc
Merge pull request #87527 from brianpursley/kubectl-796 
Added 'No resources found' message to describe <type> and top pod commands
 2020-02-11 01:20:02 -08:00
Mike Spreitzer
73614ddd4e Added API Priority and Fairness filter and config consumer 2020-02-10 22:54:40 -05:00
shaloulcy
fe312ed74a add index for pod cacher 
Signed-off-by: shaloulcy <lcy041536@gmail.com>
 2020-02-11 09:25:27 +08:00
Kubernetes Prow Robot
6eba154f6e
Merge pull request #87984 from apelisse/100-percent-ssa 
Enable field management for all new objects
 2020-02-10 17:22:33 -08:00
Haowei Cai
01328ae291 add roycaihw to reviewers in apiextensions-apiserver 2020-02-10 15:44:31 -08:00
Mike Danese
5954f34ade migrate authenticator and authorizer to Create 2020-02-10 13:17:59 -08:00
Mike Danese
119f220832 remove authn/z.CreateContext expansions 2020-02-10 13:17:59 -08:00
Ted Yu
c049f30ef2 Pass context to tryAcquireOrRenew 2020-02-10 12:31:24 -08:00
Antoine Pelisse
8438bba5fd Enable field management for all new objects 2020-02-10 09:06:18 -08:00
Kubernetes Prow Robot
af618bd100
Merge pull request #87957 from liggitt/noop-deltafifo-resourceversion 
Treat replaced events that didn't change resourceVersion as resync events
 2020-02-10 07:07:54 -08:00
Kubernetes Prow Robot
acd97b42f3
Merge pull request #87959 from andyzhangx/non-retriable 
add StatusConflict(409) as non-retriable error for disksClient
 2020-02-09 11:24:05 -08:00
Kubernetes Prow Robot
ca1514d03b
Merge pull request #80651 from odinuge/kubectl-proxy-handle-error 
Add error check in kubectl proxy on server setup
 2020-02-09 11:23:52 -08:00
andyzhangx
0e47c86378 add StatusConflict as non-retriable error for disksClient 2020-02-09 12:27:47 +00:00
Kubernetes Prow Robot
c5d75749c8 Merge pull request #85029 from serathius/remove-prometheus-test-e2e 
Remove references to prometheus is test/e2e
 2020-02-09 01:27:52 -08:00
Kubernetes Prow Robot
abe6321296 Merge pull request #87952 from mikedanese/opts 
add *Options to Create, Update, and Patch in generated clientsets
 2020-02-08 20:43:53 -08:00
Kubernetes Prow Robot
86fcb30e53
Merge pull request #87908 from jpbetz/enable-smd-reflector 
Bump to latest SMD to pick up performance optimizations
 2020-02-08 18:11:52 -08:00
Kubernetes Prow Robot
2e2c12951e
Merge pull request #87941 from andyzhangx/non-retriable-err 
fix: add non-retriable errors in azure clients
 2020-02-08 14:46:30 -08:00
Jordan Liggitt
a6caa0a472 Treat replaced events that didn't change resourceVersion as resync events 2020-02-08 16:30:01 -05:00
Kubernetes Prow Robot
7c1dfd1b83 Merge pull request #83546 from Asalle/fix-golint-passwordfile 
Fix golint in staging/src/k8s.io/apiserver/plugin/pkg/authenticator/password/passwordfile
 2020-02-08 10:15:54 -08:00
Mike Danese
bfc75d9a5c manual fixes 2020-02-08 12:32:33 -05:00
Mike Danese
1dcd1fb3b7 generated: update clients 2020-02-08 12:32:30 -05:00
Mike Danese
25651408ae generated: run refactor 2020-02-08 12:30:21 -05:00
Mike Danese
6c274ea72d update client gen 2020-02-08 12:01:19 -05:00
Kubernetes Prow Robot
334d788f08 Merge pull request #87299 from mikedanese/ctx 
context in client-go
 2020-02-08 06:43:52 -08:00
andyzhangx
657dedc3be add azure disk WriteAccelerator support 2020-02-08 07:43:21 +00:00
andyzhangx
142778ac6c fix: add non-retriable errors in azure clients 2020-02-08 04:26:57 +00:00
drfish
527de3b515 Update with update-bazel.sh script 2020-02-08 11:09:28 +08:00
gavinfish
f4940cf55f Staticcheck: vendor/k8s.io/kubectl/pkg/scale|describe/versioned|cmd/top|cmd/util/editor|cmd/top 2020-02-08 11:09:28 +08:00
Kubernetes Prow Robot
ed74b7cc02
Merge pull request #87633 from brianpursley/kubectl-792 
Prevent error message from being displayed during plugin list when path includes empty string
 2020-02-07 18:33:09 -08:00
Kubernetes Prow Robot
a2161c1349
Merge pull request #86921 from mikedanese/metics 
token cache: make fetch_total a counter
 2020-02-07 18:32:27 -08:00
Kubernetes Prow Robot
37961763c0
Merge pull request #85889 from oke-py/kubectl/726 
`kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object
 2020-02-07 18:32:12 -08:00
Mike Danese
2637772298 some manual fixes 2020-02-07 18:17:40 -08:00
Mike Danese
9443a38144 generated: update clients 2020-02-07 18:17:36 -08:00
Mike Danese
3aa59f7f30 generated: run refactor 2020-02-07 18:16:47 -08:00
Mike Danese
7e88d8db66 update generators 2020-02-07 18:15:46 -08:00
Harry Zhang
f1248163ff add exponential backoff with reset to reflector 2020-02-07 18:06:38 -08:00
Joe Betz
d9faaca647 Bump to latest SMD to pick up performance optimizations 2020-02-07 16:11:06 -08:00
Kubernetes Prow Robot
9617322727
Merge pull request #87904 from alculquicondor/rm_v1alpha2_deprecated 
Remove deprecated fields from kubescheduler.config.k8s.io/v1alpha2
 2020-02-07 15:20:32 -08:00
Kubernetes Prow Robot
67ae5c8dac
Merge pull request #87881 from wojtek-t/limit_add_instances_calls 
Limit number of instances in single update to GCE target pool
 2020-02-07 15:20:21 -08:00
Kubernetes Prow Robot
2c0fad1bc7
Merge pull request #87503 from liggitt/remove-alpha-node-api 
Drop k8s.io/node-api packages
 2020-02-07 15:20:12 -08:00
Kubernetes Prow Robot
15bf6416eb
Merge pull request #85445 from shaloulcy/storage_indexer 
add indexer for storage cacher
 2020-02-07 15:19:45 -08:00