Commit Graph

560 Commits

Author SHA1 Message Date
Itamar Holder
f37aec6c57 Add LIMITED_SWAP env var to enable limited swap
Signed-off-by: Itamar Holder <iholder@redhat.com>
2023-07-14 14:52:27 +03:00
ziyin.lu
687ca0e0bb fix(script): handle wait_for_success failed condition
In the wait_node_ready function, two steps are performed:
  1.Check if the node exists
  2.Wait for the node to enter the ready state
If one step fails, the second step should not continue, wasting 300 seconds.
2023-06-20 08:22:26 -04:00
Jordan Liggitt
1b206399f6
fix using stale binaries in local-up-cluster 2023-05-22 20:03:58 -04:00
Davanum Srinivas
9346237712
Update docker/containerd/runc versions and capture more logs
- use apt to install fresh stuff
- print versions of the components
- throw on debug for docker log
- capture dmesg log
- bump kernel logging

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-05-17 12:38:52 -04:00
Davanum Srinivas
196e2f041b
Update the cgroups v2 toleration in local-up-cluster
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-05-12 17:40:38 -04:00
Davanum Srinivas
1168b11875
Stabilize local-up-cluster in our CI
- if binaries are already present skip building them
- install missing packages like nftables and kmod
- work better when cgroups v2 is present
- update to newer CNI version (v1.2.0)
- Ensure we wait for coredns to stabilize
- Grab docker log as well (this has containerd logs too)

Used tips from:
- https://kubernetes.io/docs/tasks/administer-cluster/dns-debugging-resolution/

Tested locally in an environment as close to CI as possible:
- https://gist.github.com/dims/3c83730c99f61e36b8dd2d61abe68fe7

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-05-12 09:16:19 -04:00
Davanum Srinivas
5aca41af50
[local-up-cluster] Use the kubectl we built
Also wait for the Node to be ready!

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-05-04 07:19:23 -04:00
Rodrigo Campos
d212041d51 hack/local-up-cluster.sh: Remove old dynamic certs
When running this script more than once on Debian and Ubuntu, we fail to
chown -R the CERT_DIR due to this file owned by root and the CERT_DIR
owned by the unprivileged user running the script.

Let's remove the file, that is something we can always do, before
generating the certs. This fixes the problem on Debian and Ubuntu local
setups.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2023-04-11 20:09:47 +02:00
Kubernetes Prow Robot
c072cae4d0
Merge pull request #108838 from nckturner/webhook-framework
Webhook framework for cloud controller manager
2023-03-14 20:28:14 -07:00
Kubernetes Prow Robot
1586138519
Merge pull request #115750 from saschagrunert/otel-beta
Graduate `KubeletTracing` feature to beta
2023-03-14 16:34:33 -07:00
Nick Turner
86f4136003 Webhook framework for cloud controller manager
Provides framework for CCMs to host webhooks.
2023-03-14 23:28:05 +00:00
Kubernetes Prow Robot
a3ad4d7623
Merge pull request #114017 from calvin0327/cleanup-containerruntime-options
cleanup container runtime options
2023-03-09 21:33:06 -08:00
Paco Xu
a1def4b9c0 pod-infra-container-image: update comments as it will be removed in couple more releases
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-03-09 11:14:32 +08:00
Rodrigo Campos
5f568d51be hack/local-up-cluster.sh: Cleaup on SIGINT
Currently we only cleanup on exit. Let's trap SIGINT (ctrl-c) too, so we
always cleanup everything.

Otherwise if we ctrl-c is easy to leave something running, specially if
we ctrl-c while the cleanup function is running. And when we leave
something running and don't reused the certs ($REUSE_CERTS), that is the
default, something is left running and it fails with weird ways as we
can't auth with the new certs.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2023-03-08 17:37:50 +01:00
Sascha Grunert
a28385ebe2
Graduate KubeletTracing feature to beta
We now graduate `KubeletTracing` to beta, which means we enable the
feature gate per default.

Part of https://github.com/kubernetes/enhancements/issues/2831

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-02-14 10:05:35 +01:00
Richard Kovacs
bef16e817b Fix lint errors at local-up-cluster.sh 2023-01-18 12:20:33 +01:00
Richard Kovacs
89539e80dc Fix lint errors at local-up-cluster.sh 2023-01-18 11:15:38 +01:00
Richard Kovacs
be4b3c5abd Use proper mktmp command in local-up-cluster.sh 2023-01-18 10:58:41 +01:00
Richard Kovacs
63982fc1fd Display generated config file locations on successful local-up-cluster.sh execution 2023-01-12 18:06:14 +01:00
Richard Kovacs
457537a211 Make tmp dir configurable and dynamic at local-up-cluster.sh 2023-01-12 14:57:38 +01:00
Sascha Grunert
f04bb71878
Tracing: sample always in hack/local-up-cluster.sh
If the feature gate `KubeletTracing` is enabled, then we should default
to a sample rate of 1 million per million, which will sample everything:

https://github.com/open-telemetry/opentelemetry-go/blob/aa868d5/sdk/trace/sampling.go#L107-L110

This helps to easier spin-up a cluster with tracing enabled by exporting
`FEATURE_GATES="KubeletTracing=true"`.

Related docs: https://k8s.io/docs/concepts/cluster-administration/system-traces/#kubelet-traces

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-11-29 13:12:19 +01:00
Moshe Levi
c337d7b6f9 fix local-up-cluster.sh to run on other arch than amd64
tested on arm64

Signed-off-by: Moshe Levi <moshele@nvidia.com>
2022-11-03 21:39:09 +02:00
Wei Huang
3115c5ba59
update scheduler config version to v1 2022-10-22 09:06:55 -07:00
Benjamin Elder
239b3338e9 idiomatically check for empty variable 2022-10-20 16:22:10 -07:00
Davanum Srinivas
9bbf01bae9
Remove references to openstack and cinder
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-08-22 16:43:14 -04:00
jinxu
0064010cdd Promote Local storage capacity isolation feature to GA
This change is to promote local storage capacity isolation feature to GA

At the same time, to allow rootless system disable this feature due to
unable to get root fs, this change introduced a new kubelet config
"localStorageCapacityIsolation". By default it is set to true. For
rootless systems, they can set this configuration to false to disable
the feature. Once it is set, user cannot set ephemeral-storage
request/limit because capacity and allocatable will not be set.

Change-Id: I48a52e737c6a09e9131454db6ad31247b56c000a
2022-08-02 23:45:48 -07:00
Jordan Liggitt
a44192b955 Remove PodSecurityPolicy cluster config 2022-05-04 16:00:56 -04:00
Jordan Liggitt
3e9cdf6193 Fix local-up-cluster for running only an API server 2022-04-03 22:28:30 -04:00
Davanum Srinivas
89b1accf4d
switch owner for CERT_DIR
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-29 20:04:33 -04:00
Davanum Srinivas
43bf01e080
bash verbose around admin-kube-aggregator.kubeconfig
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-28 18:08:16 -04:00
Davanum Srinivas
5b1086b897
Add some sudo in local-up-cluster.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-03-28 16:57:05 -04:00
Aditi Sharma
2e7b7832f8 Detect CNI installtion in local-up-cluster.sh
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
2022-02-23 21:35:58 +05:30
Aditi Sharma
98b19dc2e8 Add support to install cni and enable cri
to run pull-kubernetes-local-e2e on containerd
we need to install cni and enable cri for docker
installed in kubekins image
2022-02-22 09:22:19 +05:30
Kubernetes Prow Robot
a07241e3e0
Merge pull request #107737 from gnufied/enable-node-restriction-default
Enable node restriction plugin by default for local clusters
2022-02-11 12:57:59 -08:00
Kubernetes Prow Robot
a3207872a3
Merge pull request #107481 from shu-mutou/deprecate-dashboard-addon
Remove dashboard cluster addon
2022-02-10 05:35:48 -08:00
Nick Turner
5adc316c13 Allow cloud controller manager flags to be set 2022-01-31 05:00:38 +00:00
Hemant Kumar
86fdba352d Always enable node restriction plugin by default 2022-01-24 16:08:36 -05:00
Shu Muto
e86ca57669 Remove dashboard from local-up-cluster.sh 2022-01-18 14:45:57 +09:00
Filip Křepinský
1bc56fc71e remove iptables cleanup from local-up-cluster.sh
- remove root warning
2022-01-11 14:15:31 +01:00
Aditi Sharma
e3b92ad551 Remove docker as container runtime for local-up
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
2021-12-21 11:37:43 +05:30
kerthcet
75a255d2ed remove scheduler component config v1beta1
Signed-off-by: kerthcet <kerthcet@gmail.com>
2021-09-28 13:13:17 +08:00
Antonio Ojea
1846e42f7b alllocal-cluster-up: ow to specify the kubelet resolv.conf 2021-09-19 12:06:52 +02:00
Nick Turner
1887ddfc96 Make --configure-cloud-routes configurable in local-up-cluster
- Allow --configure-cloud-routes to be set in hack/local-up-cluster.sh
  using the env var $CONFIGURE_CLOUD_ROUTES.
2021-07-15 08:21:32 +00:00
Elana Hashman
642eff0c69
Rename NodeSwapEnabled flag to NodeSwap 2021-07-09 11:39:52 -07:00
Kubernetes Prow Robot
561959f682
Merge pull request #102823 from ehashman/kep-2400-swap
Alpha node swap support
2021-07-06 22:11:11 -07:00
Rishabh Jain
584eb5e947 Update local-cluster-up.sh to auto-detect darwin and skip kubelet and kube-proxy 2021-06-30 20:30:03 +05:30
Elana Hashman
9eeec68d67
Update local-up-cluster.sh swap warning 2021-06-29 11:57:35 -07:00
Jordan Liggitt
19db126d76 Exercise egress configuration in local-up-cluster 2021-06-15 09:53:07 -04:00
Jian Zeng
6c9ab10872
feat: set some auth flags for KCM and KS
Set `--authentication-kubeconfig` and `--authorization-kubeconfig` to enable
metrics to be grabbed from the secure port.

Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
2021-05-12 22:47:53 +08:00
wangyysde
4467082ddb removed kubelet's flag chaos-chance 2021-04-13 14:09:55 +08:00