github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
105,503 Commits 1 Branch 31 Tags 1,019 MiB
5bae9b9288
Commit Graph

10579 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
522c1be4c1
Merge pull request #106648 from calvin0327/remove-dualStack-featureGate 
kubeadm: cleanup the feature gate of dual-stack.
 2021-12-15 17:27:18 -08:00
Kubernetes Prow Robot
1426587e08
Merge pull request #106436 from dims/cleanup-owners-files-no-activity-in-a-year 
Cleanup OWNERS files (No Activity in the last year)
 2021-12-15 12:07:51 -08:00
Davanum Srinivas
497e9c1971
Cleanup OWNERS files (No Activity in the last year) 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-15 10:34:02 -05:00
Kubernetes Prow Robot
be5b9b4f8d
Merge pull request #107013 from pacoxu/kubeadm-v1beta2-depre 
kubeadm: mark v1beta2 as deprecated
 2021-12-14 19:48:18 -08:00
Paco Xu
703f2a7b86 kubeadm: mark v1beta2 as deprecated 2021-12-15 09:36:42 +08:00
Kubernetes Prow Robot
77243f3274
Merge pull request #106973 from neolit123/1.24-adapt-kubeadm-to-dockershim-removal 
kubeadm: handle dockershim specific flags for 1.24
 2021-12-14 02:09:46 -08:00
Kubernetes Prow Robot
90110f71cb
Merge pull request #106256 from ardaguclu/use-serve-with-listener-stopped 
Rename ServeWithListenerStopped to Serve in secure_serving
 2021-12-13 07:35:58 -08:00
Lubomir I. Ivanov
6c6c7e5f0c kubeadm: handle dockershim specific flags for 1.24 
Currently when the dockershim socket is used, kubeadm only passes
the --network-plugin=cni to the kubelet and assumes the built-in
dockershim. This is valid for versions <1.24, but with dockershim
and related flags removed the kubelet will fail.

Use preflight.GetKubeletVersion() to find the version of the host
kubelet and if the version is <1.24 assume that it has built-in
dockershim. Newer versions should will be treated as "remote" even
if the socket is for dockershim, for example, provided by cri-dockerd.

Update related unit tests.
 2021-12-11 02:16:06 +02:00
Kubernetes Prow Robot
1d66302c42
Merge pull request #106458 from dims/lint-yaml-in-owners-files 
Lint/Beautify yaml in OWNERS files
 2021-12-10 06:39:12 -08:00
Kubernetes Prow Robot
15e5f2a19a
Merge pull request #106291 from sbs2001/fix_invalid_comment 
Remove invalid comment in legacyregistry
 2021-12-09 19:03:10 -08:00
Davanum Srinivas
9405e9b55e
Check in OWNERS modified by update-yamlfmt.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-09 21:31:26 -05:00
Davanum Srinivas
a5c670102c
Cleanup owners files to make parsing automatable 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-09 21:31:03 -05:00
Kubernetes Prow Robot
b5a610064c
Merge pull request #106920 from neolit123/1.24-update-kubeadm-owners 
kubeadm: update OWNERS for 1.24
 2021-12-09 18:01:22 -08:00
Kubernetes Prow Robot
481459d12d
Merge pull request #106872 from calvin0327/fix-kubeadm-kubelet-constant 
kubeadm: amend constant to kubelet.
 2021-12-09 16:29:22 -08:00
Lubomir I. Ivanov
0290eb63b6 kubeadm: update OWNERS for 1.24 2021-12-09 21:07:56 +02:00
Kubernetes Prow Robot
8cc7d14588
Merge pull request #106859 from knight42/refactor/remove-apiserver-insecure-port 
refactor(apiserver): remove the insecure flags
 2021-12-09 09:48:30 -08:00
Kubernetes Prow Robot
cb0e11a296
Merge pull request #106860 from knight42/refactor/remove-ctrlmgr-insecure-port 
refactor: remove the insecure flags in controller-manager
 2021-12-09 08:06:16 -08:00
Kubernetes Prow Robot
f98f27bc2f
Merge pull request #106891 from neolit123/1.24-kubeadm-fix-external-etcd-ca-validation 
kubeadm: validate local etcd certficates during expiration checks
 2021-12-09 00:24:09 -08:00
haoyun
cd3bafc2ed cleanup: remove insecure flag 
Signed-off-by: haoyun <yun.hao@daocloud.io>
 2021-12-09 12:36:29 +08:00
Kubernetes Prow Robot
cdf3ad823a
Merge pull request #97252 from dims/drop-dockershim 
Completely remove in-tree dockershim from kubelet
 2021-12-08 12:51:46 -08:00
Lubomir I. Ivanov
c78afc695b kubeadm: print the CA of kubeconfig files in "check expiration" 
Apply a small fix to ensure the kubeconfig files
that kubeadm manages have a CA when printed in the table
of the "check expiration" command. "CAName" is the field used for that.

In practice kubeconfig files can contain multiple credentials
from different CAs, but this is not supported by kubeadm and there
is a single cluster CA that signs the single client cert/key
in kubeadm managed kubeconfigs.
 2021-12-08 20:50:23 +02:00
Lubomir I. Ivanov
6603cf6357 kubeadm: validate local etcd certficates during expiration checks 
In case stacked etcd is used, the code that does expiration checks
does not validate if the etcd CA is "external" (missing key)
and if the etcd CA signed certificates are valid.

Add a new function UsingExternalEtcdCA() similar to existing functions
for the cluster CA and front-proxy CA, that performs the checks for
missing etcd CA key and certificate validity.

This function only runs for stacked etcd, since if etcd is external
kubeadm does not track any certs signed by that etcd CA.

This fixes a bug where the etcd CA will be reported as local even
if the etcd/ca.key is missing during "certs check-expiration".
 2021-12-08 20:39:14 +02:00
Kubernetes Prow Robot
f356ae4ad9
Merge pull request #101719 from SergeyKanzhelev/removeReallyCrashForTesting 
Remove ReallyCrashForTesting and cleaned up some references to Handle…
 2021-12-07 23:39:45 -08:00
calvin
fdf33a27c4 amend constant to kubelet 2021-12-08 14:17:34 +08:00
Kubernetes Prow Robot
89f53538ff
Merge pull request #106854 from neolit123/1.24-fix-kubeadm-check-expiration-kubeconfig 
kubeadm: avoid requiring a CA key during kubeconfig expiration checks
 2021-12-07 20:57:44 -08:00
Kubernetes Prow Robot
022d49dcbc
Merge pull request #106740 from wojtek-t/update_kubemark_clients 
Update kubemark to use EndpointSlices and proper user-agents
 2021-12-07 19:27:59 -08:00
Jian Zeng
9573b4a6b9
refactor(apiserver): remove the insecure flags 
Signed-off-by: Jian Zeng <anonymousknight96@gmail.com>
 2021-12-08 10:53:44 +08:00
Jian Zeng
c73d96ac87
refactor: remove the insecure flags in controller-manager 
Signed-off-by: Jian Zeng <anonymousknight96@gmail.com>
 2021-12-08 10:50:12 +08:00
Kubernetes Prow Robot
68b53cf940
Merge pull request #106581 from knabben/win-kernel-kproxy-metrics 
Registering kube-proxy metrics on windows kernel mode
 2021-12-07 18:26:09 -08:00
Kubernetes Prow Robot
39b45fb040
Merge pull request #106381 from dims/update-dims-as-approver 
Update `dims` as approver for some top level dirs
 2021-12-07 17:26:48 -08:00
Davanum Srinivas
bc78dff42e
update files to drop dockershim 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-07 15:15:13 -05:00
Lubomir I. Ivanov
847b2e1085 kubeadm: avoid requiring a CA key during kubeconfig expiration checks 
When the "kubeadm certs check-expiration" command is used and
if the ca.key is not present, regular on disk certificate reads
pass fine, but fail for kubeconfig files. The reason for the
failure is that reading of kubeconfig files currently
requires reading both the CA key and cert from disk. Reading the CA
is done to ensure that the CA cert in the kubeconfig is not out of date
during renewal.

Instead of requiring both a CA key and cert to be read, only read
the CA cert from disk, as only the cert is needed for kubeconfig files.

This fixes printing the cert expiration table even if the ca.key
is missing on a host (i.e. the CA is considered external).
 2021-12-07 20:48:45 +02:00
Wojciech Tyczyński
243f4faa6d Update kubemark to use EndpointSlices and proper user-agents 2021-11-30 11:38:08 +01:00
Sergey Kanzhelev
a11453efbc remove ReallyCrashForTesting and cleaned up some references to HandleCrash behavior 2021-11-29 20:00:10 +00:00
calvin
d591b62b4a remove the kubeadm feature gate. 2021-11-29 18:11:02 +08:00
Amim Knabben
8b37bfec8e Enabling kube-proxy metrics on windows kernel mode 2021-11-21 21:23:55 -03:00
Kubernetes Prow Robot
1304dfd73e
Merge pull request #106520 from pohly/log-print-flags 
kubelet: print flags after initializing logging
 2021-11-18 01:53:02 -08:00
Shivam Sandbhor
6652c54d83 Remove invalid comment in legacyregistry 
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
 2021-11-18 15:05:00 +05:30
Patrick Ohly
316ac13d00 kubelet: print flags after initializing logging 
If done too soon, the klog.V() calls are ignored because the log verbosity
isn't set. In Kubernetes 1.22, the verbosity was set, but not the logging
format.
 2021-11-18 07:53:16 +01:00
Hanna Lee
07a883d8e6 Remove //lint:ignore pragmas that aren't being used anymore 2021-11-17 08:56:54 +01:00
Hanna Lee
c862d7c0e9 Fix last remaining SA5011 error by removing unnecessary r != nil check 2021-11-17 08:56:01 +01:00
Hanna Lee
a7daeb37af Convert one more utilflag.IPVar to &utilflag.IPVar 2021-11-17 08:56:01 +01:00
Hanna Lee
30ea05ae7b Update IPVar and IPPortVar functions to have pointer receivers to fix 'ineffective assignment' 2021-11-17 08:56:00 +01:00
Hanna Lee
0f3836dcc5 Ignore deprecation warnings with //nolint:staticcheck 2021-11-17 08:55:57 +01:00
Kubernetes Prow Robot
9dd8aad535
Merge pull request #104750 from sanposhiho/fix/bug/proxy/defer-with-os-exit 
Fix(kube-proxy): remove os.Exit from cobra.Command
 2021-11-16 21:13:53 -08:00
Kubernetes Prow Robot
c0b5ed7556
Merge pull request #105611 from damemi/simplified-multipoint-extension 
Scheduler simplified MultiPoint plugin config
 2021-11-16 17:44:12 -08:00
Kubernetes Prow Robot
1f6d5caa9a
Merge pull request #105437 from cmssczy/update-kubelet-configuration 
migrate --register-with-taints to KubeletConfiguration
 2021-11-16 17:44:00 -08:00
Kubernetes Prow Robot
8d9e424f73
Merge pull request #103447 from trierra/csi-translation-portworx 
Csi translation portworx
 2021-11-16 17:43:53 -08:00
Kubernetes Prow Robot
e14bdbaa1c
Merge pull request #105057 from jiahuif-forks/feature/enum-types-feature-enablement 
Add Support for OpenAPIEnum in OpenAPI v2
 2021-11-16 16:35:55 -08:00
Oksana Naumov
3af11fc12d Add support for Portworx to csi-translation lib 
Signed-off-by: Oksana Naumov <trierra.dev@gmail.com>
 2021-11-16 13:26:09 -08:00