Commit Graph

8410 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
21c9c7a6ab Merge pull request #78507 from pjh/gce-firewall-enabled
GCE Windows nodes: leave firewall enabled.
2019-06-01 06:22:17 -07:00
Kubernetes Prow Robot
0f78b57fef Merge pull request #77887 from prameshj/nodelocal-beta
Doc changes for nodelocaldns graduating to beta
2019-05-31 20:44:47 -07:00
Kubernetes Prow Robot
6d70e7ff01 Merge pull request #77930 from mm4tt/upload_kubeconfig
Upload kubeconfig to master metadata in tests.
2019-05-30 06:30:24 -07:00
Kubernetes Prow Robot
c4a2042177 Merge pull request #78449 from santinoncs/add_annotations_for_prometheus
Add annotations for Prometheus service discovery
2019-05-30 02:24:59 -07:00
Kubernetes Prow Robot
59f0f2d2f9 Merge pull request #78417 from prameshj/nodelocal-cm
Lock down nodelocaldns configmap.
2019-05-30 00:33:11 -07:00
Kubernetes Prow Robot
88da568586 Merge pull request #78406 from losipiuk/lo/split-args-ca
Split CA paramters on manifest template expansions
2019-05-30 00:32:46 -07:00
Peter Hornyack
d47dd75df8 GCE Windows nodes: leave firewall enabled. 2019-05-29 18:08:52 -07:00
Kubernetes Prow Robot
5c314535d1 Merge pull request #78183 from cheftako/masterTaint
Ensure kubernetes master is properly tainted in GCE.
2019-05-29 17:24:46 -07:00
Kubernetes Prow Robot
f4945a81e2 Merge pull request #78314 from Random-Liu/set-containerd-oom-score
Set containerd oom score adj to -999.
2019-05-29 07:59:16 -07:00
Łukasz Osipiuk
dda5e49cac Split CA parameters on manifest template expansion
Split arguments to be passed to cluster autoscaler binary,
so each argument is passed separately.
This is preparatory work for migrating CA to disroless base image
and passing multiple arguments together does not work if CA is
not wrapped around with shell script

Change-Id: I26b5a764d2a12079c7f4ed6633ccabf8d623e232
2019-05-29 15:20:34 +02:00
Santiago Nuñez-Cacho
fe53ed8ca9 metrics is default value. Not necessary. 2019-05-28 23:45:34 +02:00
Santiago Nuñez-Cacho
8603800f65 Add annotations for Prometheus service discovery 2019-05-28 18:32:37 +02:00
Pavithra Ramesh
86d12be975 Lock down nodelocaldns configmap. 2019-05-27 23:53:48 -07:00
Beata Skiba
cd6cc65236 Addon resizer version 1.8.5
Rebases addon-resizer to distroless
2019-05-27 15:12:29 +02:00
Kubernetes Prow Robot
01a5ec3d3d Merge pull request #78315 from dekkagaijin/mip
specify additional static auth for components by env var
2019-05-24 15:01:29 -07:00
Jake Sanders
5a9af2e0ef specify additional static auth for components by env var 2019-05-24 12:16:40 -07:00
Lantao Liu
f6aa22e9e3 Set containerd oom score adj to -999.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-05-24 10:36:54 -07:00
Matt Matejczyk
7e7570d6ff Upload kubeconfig to master metadata in tests.
Till a few days ago, it was possible to ssh into master and access cluster via insecure master port.
Now, the master insecure port has been disabled, we're not able to do that anymore.

This PR aims to fix that by uploading the kubeconfig to the master metadata during cluster setup in tests.
2019-05-24 13:25:19 +02:00
Yu-Ju Hong
3b58a5d89f GCE: Disable the Windows defender
This is a workaround for https://github.com/kubernetes/kubernetes/issues/75148
2019-05-23 17:51:32 -07:00
Matt Matejczyk
6ced6491c6 Change etcd's --listen-client-urls to 0.0.0.0 in tests
This is to allow scraping etcd metrics in scalability tests.

Ref. https://github.com/kubernetes/perf-tests/issues/522
2019-05-23 15:11:22 +02:00
Kubernetes Prow Robot
4f33b5f421 Merge pull request #77820 from dims/charrywanganthony-pr-71835-delete-kubelet-security-controls
Remove deprecated Kubelet security controls
2019-05-22 13:52:25 -07:00
walter
d574ab00e4 Ensure kubernetes master is properly tainted in GCE.
Factored in mtaufens suggestion.
2019-05-21 23:41:56 -07:00
Kubernetes Prow Robot
0203192970 Merge pull request #78044 from dekkagaijin/patch-6
Consolidate logic to ensure kubectl auth
2019-05-17 23:21:37 -07:00
Kubernetes Prow Robot
648cb98a44 Merge pull request #78030 from rajansandeep/bump1.5.0
Bump CoreDNS version to 1.5.0 and update manifest
2019-05-17 21:52:52 -07:00
Kubernetes Prow Robot
72f6954614 Merge pull request #77889 from Random-Liu/support-using-containerd-in-cos
Support using docker containerd in COS and Ubuntu on GCE.
2019-05-17 20:26:59 -07:00
Kubernetes Prow Robot
47304fbaee Merge pull request #78039 from mikedanese/execmaster
allow exec auth plugin to be pulled on the master
2019-05-17 18:57:30 -07:00
Jake Sanders
9bc3c2af00 Consolidate logic to ensure kubectl auth 2019-05-17 11:32:09 -07:00
Kubernetes Prow Robot
314264aeaf Merge pull request #78010 from mikedanese/fixdns
cluster/gce: fix line 2414: DNS_MEMORY_LIMIT: unbound variable
2019-05-17 10:12:59 -07:00
Kubernetes Prow Robot
20d6b2ff11 Merge pull request #78008 from mikedanese/fixunset
cluster/gce: fix unset variable when insecure port is enabled
2019-05-17 10:12:46 -07:00
Mike Danese
5d7aeca63f cluster/gce: allow exec auth plugin to be pulled on the master 2019-05-17 08:32:34 -07:00
Sandeep Rajan
0b28419412 bump coredns version to 1.5.0 and update manifest 2019-05-17 10:03:02 -04:00
Kubernetes Prow Robot
d2e5b04dec Merge pull request #77961 from dekkagaijin/patch-4
remove zmerlynn@ from cluster/gce/OWNERS
2019-05-17 07:00:23 -07:00
Kubernetes Prow Robot
3ba4111abe Merge pull request #77958 from pjh/pause-image-official
Windows GCE nodes: pull infra/pause container image during node setup
2019-05-17 05:38:45 -07:00
Kubernetes Prow Robot
3e8d49d46b Merge pull request #77950 from yuwenma/bump-metrics-server
Bump metrics-server to v0.3.3
2019-05-17 05:38:32 -07:00
Kubernetes Prow Robot
af692da080 Merge pull request #77844 from grayluck/one-more-ip
Add 198.51.100.0/24 to non-masq ranges.
2019-05-17 05:38:19 -07:00
Kubernetes Prow Robot
c48c3f400b Merge pull request #77954 from pjh/cni-release-v0.8.0
Windows GCE nodes: use CNI plugins v0.8.0 release.
2019-05-17 02:04:45 -07:00
Kubernetes Prow Robot
9030187d2c Merge pull request #77951 from yujuhong/sd-env
GCE/Windows: add instructions about stackdriver logging in README
2019-05-17 00:26:56 -07:00
Mike Danese
59f4661b18 cluster/gce: fix line 2414: DNS_MEMORY_LIMIT: unbound variable 2019-05-16 22:58:34 -07:00
Mike Danese
4edec1f3be cluster/gce: fix unset variable when insecure port is enabled 2019-05-16 19:47:11 -07:00
Lantao Liu
bc1a78d31e Support using docker containerd in COS and Ubuntu on GCE.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-05-16 13:53:57 -07:00
Peter Hornyack
5c32b4bbb2 Windows GCE nodes: pull infra/pause container image during node setup 2019-05-16 11:45:56 -07:00
chaowang
9ba0d47465 Remove deprecated Kubelet security controls
Change-Id: I9f770e6780b60e881092690f6f177d726f474fe3
2019-05-16 13:33:52 -04:00
Kubernetes Prow Robot
f8d2b6b982 Merge pull request #77918 from mborsz/coredns
Make dns memory limit configurable
2019-05-16 08:49:08 -07:00
Jake Sanders
db6eff7378 remove zmerlynn@ from cluster/gce/OWNERS
Your watch has ended.
2019-05-15 18:47:28 -07:00
yankaiz
14015d9ce1 Add 198.51.100.0/24 to non-masq ranges.
Groupped the IP ranges by RFC and type.

Change reference for 198.18.0.0/15 from RFC 2544 to RFC 6815.
2019-05-15 16:23:41 -07:00
Yu-Ju Hong
abed7cc0a9 GCE/Windows: add instructions about stackdriver logging in README
Setting LOGGING_STACKDRIVER_RESOURCE_TYPES ensures that the both Linux
and Windows nodes send logs to the same resources with the same tags.
2019-05-15 11:59:37 -07:00
Yuwen Ma
454460f875 Bump metrics-server to v0.3.3 2019-05-15 11:44:45 -07:00
Peter Hornyack
5d669f2946 Use CNI plugins v0.8.0 release. 2019-05-15 10:59:46 -07:00
Kubernetes Prow Robot
4d3d153210 Merge pull request #77904 from mborsz/revert-76396-reapply-75624
Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers."
2019-05-15 07:06:41 -07:00
Maciej Borsz
59af63c687 Make coredns memory limit configurable 2019-05-15 13:35:28 +02:00