Commit Graph

9478 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
4d3ed163a0 Merge pull request #98477 from palnabarun/update-gogo/protobuf
Update gogo/protobuf to v1.3.2
2021-02-02 09:56:28 -08:00
Kubernetes Prow Robot
ee2b7a5049 Merge pull request #98049 from pacoxu/enhancements/redir-links
fix all keps links 404 for kep folder migration
2021-02-01 21:48:28 -08:00
Lorenz Brun
ea27d9225c Add tests for populated volumes 2021-02-01 20:10:34 +01:00
Mike Dame
578ff3ec34 Move Taint/Toleration helpers to component-helpers repo
This is part of the goal for scheduling to remove dependencies on internal
packages for the scheduling framework. It also provides these functions in an
external location for other components and projects to import.
2021-02-01 11:06:03 -05:00
pacoxu
a10bdfed09 fix all keps links 404 for kep folder migration
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-02-01 19:41:59 +08:00
Lorenz Brun
65c0229247 Fix comment on getPodVolumeSubpathListFromDisk 2021-01-31 02:42:54 +01:00
Claudiu Belu
de4602995b Windows: Fixes /etc/hosts file mounting support for containerd
If Containerd is used on Windows, then we can also mount individual
files into containers (e.g.: /etc/hosts), which was not possible with Docker.

Checks if the container runtime is containerd, and if it is, then also
mount /etc/hosts file (to C:\Windows\System32\drivers\etc\hosts).
2021-01-30 04:54:42 -08:00
ialidzhikov
21608e49a7 Remove WindowsGMSA and WindowsRunAsUserName feature gates
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2021-01-30 02:01:48 +02:00
Kubernetes Prow Robot
9ec1e23e41 Merge pull request #98005 from wzshiming/fix-rescheduling-to-the-shutdown-node
Sync node status during kubelet node shutdown
2021-01-28 17:51:53 -08:00
Kubernetes Prow Robot
e6e079aac3 Merge pull request #97748 from heqg/collides-state
Fix variable 'state' collides with imported package name
2021-01-28 17:51:40 -08:00
Kubernetes Prow Robot
1a76d3ddfd Merge pull request #98261 from wzshiming/fix-panic
kubelet: Fix NPE in ephemeral storage eviction
2021-01-28 17:00:32 -08:00
Kubernetes Prow Robot
b62f063fa3 Merge pull request #98156 from wzshiming/fix-typo
Fix typo
2021-01-28 17:00:16 -08:00
Kubernetes Prow Robot
e05c9ab04b Merge pull request #97932 from ehashman/kubelet-standalone-doc
Add explanation for kubeClient != nil in NewMainKubelet
2021-01-28 16:59:59 -08:00
Kubernetes Prow Robot
6702359c3c Merge pull request #97270 from rikatz/kubelet-bsd-1
Change GetBootTime to work specificaly with FreeBSD
2021-01-28 16:59:40 -08:00
Nabarun Pal
9cada2ec3b update gogo/protobuf to v1.3.2
gogo/protobuf@v1.3.2 fixes https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121

Ref: https://github.com/kubernetes/client-go/issues/927

Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2021-01-27 22:07:32 +05:30
Kubernetes Prow Robot
889cf714c1 Merge pull request #95111 from choury/patch-2
make podTopologyHints protected by lock
2021-01-26 04:18:34 -08:00
choury
fe089a2d12 make podTopologyHints protected by lock
It crashed kubelet by "concurrent map read and map write"
2021-01-26 10:36:05 +08:00
Kubernetes Prow Robot
06a7e2bacf Merge pull request #96781 from fighterhit/fix-kukelet-device-plugin-bug
Fix: kubelet return error when device plugin sets PreStartRequired true while creating pods with 0 resource
2021-01-25 17:59:00 -08:00
Kubernetes Prow Robot
6fae18523d Merge pull request #98019 from cynepco3hahue/specify_resource_during_container_creation_cpu_manager
cpu manager: specify the container CPU set during the creation
2021-01-25 14:15:12 -08:00
Kubernetes Prow Robot
77bedd891d Merge pull request #98230 from SataQiu/fix-kubelet-cert-message-20210120
kubelet: improve error message about expired certificates
2021-01-25 12:39:19 -08:00
pacoxu
89c42bd3d5 check containerd as process name instead of docker-containerd
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-01-23 10:55:18 +08:00
b10s
de60340e51 Improve the getCgroupSubsystemsV1() which uses random record per subsystem
returned by libcontainercgroups.GetCgroupMounts().

Example array from GetCgroupMounts():
```
[
        {
                Mountpoint: "/sys/fs/cgroup/systemd",
                Root: "/",
                Subsystems: []string len: 1, cap: 1, ["systemd"],},
        {
                Mountpoint: "/sys/fs/cgroup/cpu,cpuacct",
                Root: "/",
                Subsystems: []string len: 2, cap: 2, ["cpu","cpuacct"],},
        {
                Mountpoint: "/sys/fs/cgroup/systemd/some/path",
                Root: "/some/path",
                Subsystems: []string len: 1, cap: 1, ["systemd"],},
]
```
becames a map:
```
[
        "memory": "/sys/fs/cgroup/memory/kubepods",
        "systemd": "/sys/fs/cgroup/systemd/some/path",
]
```
which seems to be wrong.

Using shortest path of mountpoint per subsystem would be more reliable.

reference issue: https://github.com/kubernetes/kubernetes/issues/95488
2021-01-22 22:21:46 +09:00
Kubernetes Prow Robot
82ebcd1719 Merge pull request #98088 from wzshiming/fix-inhibit-lock
Fix repeatedly aquire the inhibit lock
2021-01-22 00:37:26 -08:00
Kubernetes Prow Robot
cea1098997 Merge pull request #97715 from changshuchao/files_tmptag
Made some optimizations, including modifying variable names, omitting…
2021-01-21 22:55:26 -08:00
SataQiu
6c31162b35 kubelet: improve error message about expired certificates 2021-01-21 23:05:45 +08:00
wzshiming
29808eaf24 Fix panic 2021-01-21 19:47:28 +08:00
wzshiming
d9df265af0 Sync node status during kubelet node shutdown 2021-01-21 11:01:13 +08:00
Kubernetes Prow Robot
236470431f Merge pull request #97141 from wawa0210/remove-hyperv
remove experimental windows container hyper-v support with Docker
2021-01-20 15:33:12 -08:00
Kubernetes Prow Robot
737858cd7c Merge pull request #98200 from wzshiming/fix-node-shutdown-events
Fix kubelet from panic after getting the wrong signal
2021-01-20 10:38:47 -08:00
Artyom Lukianov
38dc7509f8 cpu manager: specify the container CPU set during the creation
We can set the container cpuset.cpus diring the creation and it
will not need to call to update resources after the container creation.

Additional side effect of the change, that the runc process that responsible
to create the container will run with the same CPU affinity because the
runc runs on the cpuset provided in the config.json arg.

It will allow to prevent undesirable interupts on isolated CPUs.

Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
2021-01-20 17:53:33 +02:00
Artyom Lukianov
60678a24ca Update CPU manager GetCPUs method to return pointer to CPUSet 2021-01-20 13:21:57 +02:00
Artyom Lukianov
69db36b958 Provide additional methods under the CPUSet
- ToSliceInt64 returns sorted slice of cores IDs in int64 format
- ToSliceNoSortInt64 returns slice of cores IDs in int64 format

Signed-off-by: Artyom Lukianov <alukiano@redhat.com>
2021-01-20 13:21:57 +02:00
Kubernetes Prow Robot
cff7d7ba0a Merge pull request #97764 from pacoxu/fix/windows-cgroup
kubeadm should ignore cgroup driver check on Windows node
2021-01-19 22:18:11 -08:00
Kubernetes Prow Robot
09f4baed35 Merge pull request #98103 from gjkim42/delete-static-pod-gracefully
Delete static pod gracefully and fix mirrorPodTerminationMap leak
2021-01-19 10:01:44 -08:00
wawa0210
f28f0953e6 Adjust kubelet_cgroup_manager_duration_seconds bucket 2021-01-19 16:23:14 +08:00
wzshiming
abf181ba48 Fix typo 2021-01-19 11:50:56 +08:00
chymy
f25b902b83 kubelet logs print 'kubelet nodes sync' frequently
Signed-off-by: chymy <chang.min1@zte.com.cn>
2021-01-19 08:57:35 +08:00
Geonju Kim
1563fb68e6 kubelet: Fix mirrorPodTerminationMap leak 2021-01-19 08:55:54 +09:00
Geonju Kim
9bcb451d7d kubelet: Delete static pods gracefully
Add a new static pod after checking if its mirror pod is pending termination.
2021-01-19 08:54:24 +09:00
changshuchao
42eb85e4fb Made some optimizations, including modifying variable names, omitting unnecessary parentheses, and conflicting variable names and package names.
Signed-off-by: changshuchao <chang.shuchao1@zte.com.cn>
2021-01-16 17:24:08 +08:00
Kubernetes Prow Robot
8bf42039e6 Merge pull request #96552 from pandaamanda/klog_fmt
use klog.Info and klog.Warning when had no format
2021-01-15 17:57:43 -08:00
Kubernetes Prow Robot
efba8f0482 Merge pull request #97589 from heqg/typo-expected-02
Fix typo in pkg/kubelet/.../helpers_test.go
2021-01-15 17:07:56 -08:00
Kubernetes Prow Robot
4fe132954f Merge pull request #96877 from xeniumlee/master
fix privileged config of Pod Sandbox
2021-01-15 14:49:44 -08:00
wzshiming
4e17e58552 Fix repeatedly aquire the inhibit lock 2021-01-15 10:49:11 +08:00
wawa0210
ea9df6361b remove windows container hyper-v support 2021-01-14 22:49:34 +08:00
fighterhit
16c6b99fcd del unused value 2021-01-13 12:43:54 +08:00
fighterhit
24dd9b1f04 add a test to demonstrate PR#96781 2021-01-13 11:27:30 +08:00
pacoxu
71d70f7a83 ignore cgroup driver check in windows node upgrade
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-01-13 10:01:35 +08:00
Kubernetes Prow Robot
e0b2787ee1 Merge pull request #97980 from SergeyKanzhelev/revertSandboxCheckInStatus
Revert "Merge pull request #92817 from kmala/kubelet"
2021-01-12 16:54:35 -08:00
Kubernetes Prow Robot
47ccae1e5c Merge pull request #97950 from wzshiming/fix-executable-permission
GracefulNodeShutdown  configuration  remove executable permission bits
2021-01-12 16:02:43 -08:00