Commit Graph

13709 Commits

Author SHA1 Message Date
Francesco Romani
6dccad45b4 smtalign: add auto generated code
Files generate after running `make generated_files`.

Co-authored-by: Swati Sehgal <swsehgal@redhat.com>
Signed-off-by: Francesco Romani <fromani@redhat.com>
2021-07-08 23:14:59 +02:00
Swati Sehgal
cc76a756e4 smtalign: add cpu-manager-policy-options flag in Kubelet
In this patch we enhance the kubelet configuration to support
cpuManagerPolicyOptions.

In order to introduce SMT-awareness in CPU Manager, we introduce a
new flag in Kubelet to allow the user to specify an additional flag
called `cpumanager-policy-options` to allow the user to modify the
behaviour of static policy to strictly guarantee allocation of whole
core.

Co-authored-by: Francesco Romani <fromani@redhat.com>
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
2021-07-08 23:14:59 +02:00
Kubernetes Prow Robot
97d6e4a66a Merge pull request #103574 from liggitt/restore-long-printing
Restore ability to print long strings
2021-07-08 14:02:18 -07:00
Kubernetes Prow Robot
72283f1bf6 Merge pull request #103558 from liggitt/podsecurity-check-cleanup
PodSecurity message/check/fixture cleanups
2021-07-08 14:02:10 -07:00
Kubernetes Prow Robot
103212febc Merge pull request #103470 from nilo19/bug/cherry-pick-679
fix: return empty VMAS name if using standalone VM
2021-07-08 14:02:01 -07:00
Kubernetes Prow Robot
694d6cd2b9 Merge pull request #103216 from dashpole/etcd_client_tracing
Add distributed tracing to the etcd client
2021-07-08 14:01:52 -07:00
Kubernetes Prow Robot
a9d7526864 Merge pull request #102970 from tkestack/feature-memory-qos
Feature: Support memory qos with cgroups v2
2021-07-08 14:01:36 -07:00
Kubernetes Prow Robot
fc4e7c17f4 Merge pull request #102928 from dprotaso/dynamic-client-backwards-compatible
Simplify construction of the fake dynamic client
2021-07-08 14:01:28 -07:00
Kubernetes Prow Robot
60e4be3151 Merge pull request #102049 from navist2020/kubectl/notUseParam
Kubectl:remove Factory that not used
2021-07-08 14:01:07 -07:00
Kubernetes Prow Robot
b765496650 Merge pull request #98817 from alculquicondor/job-completion-api
Add Job.status.uncountedTerminatedPods for Job tracking
2021-07-08 10:44:54 -07:00
nobuhikosawai
41c5bca349 kubectl: update set command description to include cronjob resource (#102503)
* kubectl: update set command description to include cronjob resource

* kubectl: update set command description to include statefulset resource

* kubectl: update set env description to remove job from resources that can update container env

* kubectl set tests: add cronjob resource and remove job resource

* go fmt
2021-07-08 08:50:54 -07:00
Aldo Culquicondor
bb56a0bd04 Add Job.status.uncountedPodUIDs
For tracking Job Pods that have finished but are not yet counted as failed or succeeded

And feature gate JobTrackingWithFinalizers

Change-Id: I3e080f3ec090922640384b692e88eaf9a544d3b5
2021-07-08 15:31:59 +00:00
dprotaso
418fa71b6b Simplify use of the fake dynamic client
With the introduction of GVK to the fake dynamic client it made using
the fake much more cumbersome.

Specifically:
- requires manual registration of list types
- mismatch between scheme types and passed in fixtures would result in errors

The PR changes the constructor method NewSimpleDynamicClient to do the following:
- rewire the schemes to unstructured types
- typed fixtures are converted to unstructured types
- automatically register fixture gvks with the scheme

This should make the dynamic client 'flexible' with it's inputs like it was
before
2021-07-08 10:50:14 -04:00
Kubernetes Prow Robot
2cd5c54f39 Merge pull request #103565 from zhan849/harry/clean-scope-fix
fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total
2021-07-08 05:59:17 -07:00
Kubernetes Prow Robot
a2b1f00a8b Merge pull request #103522 from atiratree/fix-translations-location
fix translations location in update-translations.sh
2021-07-08 05:58:53 -07:00
Kubernetes Prow Robot
388c2d901d Merge pull request #103560 from sejr/podsecurity-validate-configuration
[PodSecurity] Add ValidatePodSecurityConfiguration
2021-07-08 03:05:13 -07:00
Kubernetes Prow Robot
33431f542b Merge pull request #103534 from wojtek-t/pf_queue_picker_refinements
Refinements to pick queue logic in P&F
2021-07-08 03:04:53 -07:00
Jordan Liggitt
7f9d2eda82 limit warnings to requests that would otherwise succeed, reformat warning message 2021-07-08 02:19:30 -04:00
Jordan Liggitt
36907db929 PodSecurity: Drop field path from container visitor 2021-07-08 02:19:30 -04:00
Jordan Liggitt
7895399077 PodSecurity: seLinuxOptions: regenerate files 2021-07-08 02:19:30 -04:00
Jordan Liggitt
d541970751 PodSecurity: seLinuxOptions: cleanup
rename to seLinuxOptions
make message consistent
add unit tests for message
consolidate integration test fixtures
2021-07-08 02:19:28 -04:00
Jordan Liggitt
19c8ab297c PodSecurity: sysctls: cleanup
Add documentation and unit tests for messages
2021-07-08 02:19:28 -04:00
Jordan Liggitt
e178695c25 PodSecurity: seccompProfile_baseline: regenerate files 2021-07-08 02:19:28 -04:00
Jordan Liggitt
bebf612967 PodSecurity: seccompProfile_baseline: cleanup
Make messages consistent
Add unit tests for messages
Consolidate integration test fixtures
Rename to seccompProfile_baseline
2021-07-08 02:19:28 -04:00
Jordan Liggitt
2af08d1a5a PodSecurity: seccompProfile_restricted: regenerate files 2021-07-08 02:19:27 -04:00
Jordan Liggitt
88a1241299 PodSecurity: seccompProfile_restricted: cleanup
Switch from field paths to container names in messages
Add unit tests for messages
Consolidate integration test fixtures
2021-07-08 02:19:27 -04:00
Jordan Liggitt
43146d4377 PodSecurity: runAsNonRoot: regenerate files 2021-07-08 02:19:27 -04:00
Jordan Liggitt
5fc06591a2 PodSecurity: runAsNonRoot: cleanup
Improve message and details
Add unit tests
Consolidate integration test fixtures
2021-07-08 02:19:27 -04:00
Jordan Liggitt
edb7cdb02a PodSecurity: restrictedVolumes: regenerate files 2021-07-08 02:19:26 -04:00
Jordan Liggitt
676240a342 PodSecurity: restrictedVolumes: cleanup
Updated forbidden reason/details
Added unit test to exercise all volume types
Consolidated fixtures
2021-07-08 02:19:26 -04:00
Jordan Liggitt
4a69c57992 PodSecurity: procMount: cleanup 2021-07-08 02:19:26 -04:00
Jordan Liggitt
f9b8dfd0e6 PodSecurity: privileged: cleanup 2021-07-08 02:19:26 -04:00
Jordan Liggitt
7c70467400 PodSecurity: windowsHostProcess: regenerate files 2021-07-08 02:19:26 -04:00
Jordan Liggitt
9dce1d6a49 PodSecurity: windowsHostProcess: cleanup
Rename to windowsHostProcess
Format reason/details
Add unit tests
2021-07-08 02:19:25 -04:00
Jordan Liggitt
45485bb7ae PodSecurity: hostPorts: cleanup
Reformat message
Add unit test to exercise message/details
2021-07-08 02:19:25 -04:00
Jordan Liggitt
f709cf05f4 PodSecurity: hostPathVolumes: regenerate files 2021-07-08 02:19:25 -04:00
Jordan Liggitt
a39c448684 PodSecurity: hostPathVolumes: cleanup
Rename id to hostPathVolumes
Simplify message construction
Add unit test to exercise messages
Simplify integration test fixtures
2021-07-08 02:19:24 -04:00
Jordan Liggitt
826c57701c PodSecurity: hostNamespaces: cleanup
Use slice instead of set to accumulate errors
Add unit test to exercise message
Update docs to clarify undefined values are permitted
2021-07-08 02:19:24 -04:00
Jordan Liggitt
62b71175e7 PodSecurity: restricted capabilities: regenerate files 2021-07-08 02:19:24 -04:00
Jordan Liggitt
f10dfc6e30 PodSecurity: restricted capabilities: cleanup
Fix formatting of container names,
Add unit test for containers missing drop, containers with invalid adds
Consolidate integration test fixtures
2021-07-08 02:19:24 -04:00
Jordan Liggitt
bd4dc42a72 PodSecurity: baseline capabilities: regenerate files 2021-07-08 02:19:24 -04:00
Jordan Liggitt
809abf4f5b PodSecurity: baseline capabilities: cleanup
Rename to capabilities_baseline
Add unit test exercising forbidden reason and details
Consolidate integration test fixtures
2021-07-08 02:19:23 -04:00
Jordan Liggitt
b390e9e32d PodSecurity: appArmorProfile: cleanup
Also allow  values
Add unit test exercising forbidden reason/detail
Clean up forbidden reason construction
2021-07-08 02:19:23 -04:00
Jordan Liggitt
8291f8490b PodSecurity: allowPrivilegeEscalation: regenerate files 2021-07-08 02:19:23 -04:00
Jordan Liggitt
1e2886341a PodSecurity: allowPrivilegeEscalation: cleanup
Make forbidden details more compact
Add unit test exercising forbidden message/details
Consolidate fixtures
2021-07-08 02:19:23 -04:00
Jordan Liggitt
648b970718 PodSecurity: add message helper 2021-07-08 02:19:22 -04:00
Jordan Liggitt
92541f46e6 Restore ability to print long strings 2021-07-08 01:53:01 -04:00
Davanum Srinivas
6c72fbaa89 update vendor after switch
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:37 -04:00
Davanum Srinivas
79d0c6cdc1 switch from golang-lru to the one in k8s.io/utils
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:37 -04:00
Davanum Srinivas
3a221b3332 update to new k8s.io/utils
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-07 22:31:30 -04:00