Commit Graph

31735 Commits

Author SHA1 Message Date
k8s-ci-robot
753dfbe8fd Merge pull request #69685 from yue9944882/externalize-psp-admission-controller
Externalize PSP admission controller
2018-10-23 12:29:38 -07:00
k8s-ci-robot
f827a98257 Merge pull request #69596 from logicalhan/abac-lint
fix lint issues in the apis/abac directory (except latest.go)
2018-10-23 11:17:31 -07:00
yue9944882
e2c61169b1 externalize psp admission controller 2018-10-24 00:22:07 +08:00
k8s-ci-robot
327a2bb871 Merge pull request #70045 from mysunshine92/wym
nodeController should send events to api server and print to the logging
2018-10-23 05:56:53 -07:00
yameiwang
f4713d43c3 nodeController should send events to api server when nodeController eviction happens 2018-10-24 00:42:38 +08:00
k8s-ci-robot
577d0a382e Merge pull request #70106 from mikedanese/trev4
use more specific authenticator.Audiences type in TokenRequest registry
2018-10-23 03:20:54 -07:00
k8s-ci-robot
322d0df3d2 Merge pull request #70053 from gman0/fix-csiclient-lock
CSI client: added missing lock when reading from csiDrivers
2018-10-23 02:08:32 -07:00
Mike Danese
bcd492e86e use more specific authenticator.Audiences type in TokenRequest registry 2018-10-23 00:16:17 -07:00
k8s-ci-robot
4d182cec03 Merge pull request #70105 from mikedanese/trev1
promote --service-account-api-audiences to top level kube-apiserver config
2018-10-22 23:59:34 -07:00
k8s-ci-robot
e77e8ffbf5 Merge pull request #69730 from xichengliudui/fix18101204
Fix some typo
2018-10-22 23:59:24 -07:00
k8s-ci-robot
fcf11b47fc Merge pull request #69677 from knightXun/patch-8
remove unnecessary time type
2018-10-22 23:59:14 -07:00
k8s-ci-robot
baa8d800ad Merge pull request #69582 from mikedanese/trev7
tokenreview: authenticator interface changes
2018-10-22 23:59:04 -07:00
k8s-ci-robot
dbdcb7e053 Merge pull request #70072 from yue9944882/chore/cleanup-serviceaccount-controller-options
Fixes wild serviceaccount controller resync options
2018-10-22 21:18:48 -07:00
k8s-ci-robot
b3d10d044f Merge pull request #69988 from bradhoekstra/fix-69445
Set the default for EnableServiceLinks only in Pod
2018-10-22 19:44:20 -07:00
k8s-ci-robot
2f9b65143e Merge pull request #69946 from mateuszmatejczyk/annotation
Add EndpointsLastTriggerTime annotation.
2018-10-22 18:28:47 -07:00
k8s-ci-robot
91ac9d50fa Merge pull request #69371 from pivotal-k8s/fix-well-tested-fake
Add tests for `csiDriverClient`
2018-10-22 18:28:37 -07:00
Mike Danese
371b1e7fed promote --service-account-api-audiences to top level kube-apiserver config
The service account authenticator isn't the only authenticator that
should respect API audience. The authentication config structure should
reflect that.
2018-10-22 18:21:37 -07:00
k8s-ci-robot
1af393d58e Merge pull request #69866 from xichengliudui/fix181016
Remove duplicate words
2018-10-22 15:35:36 -07:00
Matt Matejczyk
6ffd88aeda Update the doc to say that we will use RFC 3339 format to store the timestamp. 2018-10-22 15:47:09 -04:00
Matt Matejczyk
8014d73345 Merge branch 'master' of https://github.com/kubernetes/kubernetes into annotation 2018-10-22 14:25:08 -04:00
Matt Matejczyk
f005ea8976 Make it clear that the timestamp is a unix time in millis. 2018-10-22 14:14:58 -04:00
Mike Danese
e5227216c0 rebase authenticators onto new interface. 2018-10-22 10:16:59 -07:00
zuoxiu.jm
4624c1319c fixes wild serviceaccount controller options 2018-10-22 13:13:02 +08:00
gman
571ad40fa1 CSI client: added missing lock when reading from csiDrivers 2018-10-20 22:43:17 +02:00
andrewsykim
3521ebd1e7 pass in stopCh for GCE cluster ID controller 2018-10-19 17:51:58 -04:00
andrewsykim
2908174517 pass in stopCh to cloud provider Initialize method for custom controllers 2018-10-19 17:51:58 -04:00
Matt Matejczyk
d99b68a6e2 Update annotation name and documentation. 2018-10-19 16:57:49 -04:00
Matt Matejczyk
536cee71b4 Merge branch 'master' into annotation 2018-10-19 13:54:06 -04:00
Matt Matejczyk
4cdab7c985 Rename and update the doc. 2018-10-19 13:11:56 -04:00
Matt Matejczyk
7f7a4590b9 Specify in the documentation that the timestamp will be expressed in milliseconds. 2018-10-19 12:19:02 -04:00
k8s-ci-robot
37cb88efd2 Merge pull request #70012 from andyzhangx/azuredisk-logging
add more logging for azure disk diagnostics
2018-10-19 07:18:19 -07:00
k8s-ci-robot
34196ac946 Merge pull request #69692 from seans3/deployment-util-fix
kubectl: copy deployment util dependency into kubectl
2018-10-19 06:07:40 -07:00
andyzhangx
79a5bb6216 add more logging for azure disk diagnostics 2018-10-19 08:11:49 +00:00
k8s-ci-robot
3d4cc707a2 Merge pull request #69454 from zetaab/fix_aws_node_delete
delete node from aws if it is terminated
2018-10-19 00:10:22 -07:00
k8s-ci-robot
d8f9b5b668 Merge pull request #69958 from Pingan2017/cleanup-kubectl-delete
remove unneed if block for kubectl delete command
2018-10-18 19:50:53 -07:00
k8s-ci-robot
85e460e362 Merge pull request #69809 from sc14aec/create-context-error-messages
Fix error messages suggesting invalid flag
2018-10-18 19:50:43 -07:00
k8s-ci-robot
34db40fbf5 Merge pull request #67930 from AdamDang/patch-15
Fix the returned messaged: statefullset->statefulset
2018-10-18 18:39:03 -07:00
k8s-ci-robot
4339a70dfa Merge pull request #68841 from krzysztof-jastrzebski/cpuandmemeory2
Optimizes calculating stats when only CPU and Memory stats are returned from Kubelet stats/summary http endpoint.
2018-10-18 16:41:07 -07:00
k8s-ci-robot
007ad9179c Merge pull request #69760 from Pingan2017/validate-args
validate args for kubectl api-versions/api-resources command
2018-10-18 14:44:00 -07:00
k8s-ci-robot
00dd32b167 Merge pull request #69573 from bjhaid/master
Opt out of chowning and chmoding from kubectl cp.
2018-10-18 14:43:49 -07:00
Sean Sullivan
ffd4ea963d kubectl: copy deployment util dependency into kubectl 2018-10-18 12:02:39 -07:00
Brad Hoekstra
409a48ef91 Set the default for EnableServiceLinks only in Pod 2018-10-18 13:44:21 -04:00
k8s-ci-robot
4d66eeb922 Merge pull request #69709 from seans3/kubectl-translate-fix
kubectl: move translated data into kubectl
2018-10-18 10:25:18 -07:00
Han Kang
56cd8ecf08 fix lint issues in the apis/abac directory (except latest.go) 2018-10-18 09:05:04 -07:00
bjhaid
44bed94f0e Opt out of chowning and chmoding from kubectl cp.
`kubectl cp` relies on tar to extract the copied file/directory in the
container, tar by default attempts to chown/chmod the extracted file
after extraction if the user is the "superuser"(root)

```
--same-owner
try extracting files with the same ownership as exists in the archive
(default for superuser)
-p, --preserve-permissions, --same-permissions
extract information about file permissions (default for superuser)
```

This fails in environment where the container runs as root but is not
granted the OWNER or CHOWN capability.

Before this patch below was the behavior of `kubectl cp`

```
kubectl cp README.md foo-67b6fcbd4c-qjlt6:/tmp
tar: README.md: Cannot change ownership to uid 1000, gid 1000: Operation
not permitted
tar: Exiting with failure status due to previous errors
command terminated with exit code 2
kubectl exec -it foo-67b6fcbd4c-qjlt6 -- ls -l /tmp/README.md
-rw------- 1 1000 1000 3179 Oct  7 22:00 /tmp/README.md
```

After this patch

```
kubectl cp -x a foo-67b6fcbd4c-qjlt6:/
kubectl exec -it foo-67b6fcbd4c-qjlt6 -- ls -l /tmp/README.md
-rw-r--r-- 1 root root 3179 Oct  7 22:00 /tmp/README.md
```
2018-10-18 14:16:06 +00:00
k8s-ci-robot
d425258532 Merge pull request #69788 from ravisantoshgudimetla/taint-based-eviction
Add test cases for taintbasedevictions
2018-10-18 06:34:31 -07:00
Matt Matejczyk
803ee8426d Add EndpointsLastTriggerTime annotation. 2018-10-18 09:25:27 -04:00
k8s-ci-robot
b5c25728ec Merge pull request #69718 from andyzhangx/azurefile-premium
support Azure premium file for azure file plugin
2018-10-18 05:18:50 -07:00
k8s-ci-robot
060ecb8837 Merge pull request #69936 from seans3/describe-fix
kubectl: remove internalclientset dependency
2018-10-17 22:25:49 -07:00
k8s-ci-robot
7a53a075e4 Merge pull request #69824 from Huang-Wei/enable-TaintBasedEvictions
promote TaintBasedEvictions featuregate to beta
2018-10-17 21:04:04 -07:00