github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,324 Commits 1 Branch 31 Tags 1,019 MiB
995278c9fb
Commit Graph

3132 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
1edf50192e
Merge pull request #103536 from mengjiao-liu/clean-master-term-test 
Clean up the remaining master names in test/integration
 2021-07-08 03:05:05 -07:00
Wei Huang
fb9cafc99b
sched: provide an option for plugin developers to move pods to activeQ 2021-07-07 12:50:12 -07:00
Mengjiao Liu
96406b915d Clean up the remaining master names in test/integration 2021-07-07 15:39:59 +08:00
Kubernetes Prow Robot
e1acbbd8fd
Merge pull request #99961 from margocrawf/master 
Introduce Impersonate-UID header
 2021-07-06 18:46:43 -07:00
Kubernetes Prow Robot
cbba6e41cc
Merge pull request #103472 from andrewsykim/deflake-quota-service-test 
test/integration/quota: deflake TestQuotaLimitService
 2021-07-06 12:08:19 -07:00
Kubernetes Prow Robot
3392f16908
Merge pull request #102890 from ankeesler/exec-plugin-v1 
exec credential provider: add v1 struct
 2021-07-06 10:42:31 -07:00
Margo Crawford
74f5ed6b17 This introduces an Impersonate-Uid header to server side code. 
UserInfo contains a uid field alongside groups, username and extra.
This change makes it possible to pass a UID through as an impersonation header like you
can with Impersonate-Group, Impersonate-User and Impersonate-Extra.

This PR contains:

* Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
* Unit tests for allowed and disallowed impersonation cases
* An integration test that creates a CertificateSigningRequest using impersonation,
  and ensures that the API server populates the correct impersonated spec.uid upon creation.
 2021-07-06 10:13:16 -07:00
Kubernetes Prow Robot
dd8ba30877
Merge pull request #103509 from sanposhiho/test/integration/util/fix-typo 
Fix(test/integration/util): fix typo on logging message
 2021-07-06 09:34:55 -07:00
Kubernetes Prow Robot
907e2c4d46
Merge pull request #103294 from mengjiao-liu/rename-master-package 
test/integration: rename package and files name from master to controlplane
 2021-07-06 09:34:19 -07:00
Andrew Keesler
20e1c4d754
exec credential provider: update tests+metadata for v1 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-07-06 09:48:35 -04:00
Andrew Sy Kim
edbaf9d5d3 test/integration/quota: poll for ResourceQuota used status in TestQuotaLimitService 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
Co-authored-by: Antonio Ojea <aojea@redhat.com>
 2021-07-06 07:10:20 -04:00
Andrew Sy Kim
caf42fde43 test/integration/quota: refactor Service forbidden check into helper function 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 06:39:26 -04:00
Andrew Sy Kim
54bc1babe1 test/integration/quota: update TestQuotaLimitService to explicitly check for Forbidden status when quota limit is exceeded 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 06:39:26 -04:00
Andrew Sy Kim
87cef2ca73 test/integration/quota: deflake TestQuotaLimitService by collapsing test 
cases and adding a short delay for resource quota to propagate

Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 06:39:26 -04:00
Kensei Nakada
a85f3e4cce
Fix(test/integration/util): fix typo on logging message 2021-07-06 17:08:11 +09:00
Hanlin Shi
c96c809539 Add integration test for LB node port control 
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
 2021-07-02 21:58:49 +00:00
Kubernetes Prow Robot
defcc916ed
Merge pull request #103382 from liggitt/podsecurity-hostprocess 
[PodSecurity] hostProcess baseline check
 2021-07-02 01:16:24 -07:00
Kubernetes Prow Robot
659c7e709f
Merge pull request #99494 from enj/enj/i/not_after_ttl_hint 
csr: add expirationSeconds field to control cert lifetime
 2021-07-01 23:02:12 -07:00
Monis Khan
cd91e59f7c
csr: add expirationSeconds field to control cert lifetime 
This change updates the CSR API to add a new, optional field called
expirationSeconds.  This field is a request to the signer for the
maximum duration the client wishes the cert to have.  The signer is
free to ignore this request based on its own internal policy.  The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration.  The minimum allowed
value for this field is 600 seconds (ten minutes).

This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.

Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-07-01 23:38:15 -04:00
Kubernetes Prow Robot
62503f254e
Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist 
Refactored files containing whitelist/blacklist to allowlist/denylist…
 2021-07-01 18:12:25 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Jordan Liggitt
49d31c45b1 PodSecurity: baseline hostProcess check 2021-07-01 15:49:33 -04:00
Jordan Liggitt
ba6b4c5a18 PodSecurity: test GA-only cases and alpha/beta fields separately 2021-06-30 22:08:11 -04:00
Anish Ramasekar
5bd3334ad6
[PodSecurity] Add privileged containers baseline check 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-06-30 16:39:28 -04:00
Kubernetes Prow Robot
3d87fd6a9a
Merge pull request #103273 from XudongLiuHarold/fix-loadbalancerclass-test-name 
fix loadbalancerclass integration test funcation name
 2021-06-29 05:40:41 -07:00
Mengjiao Liu
8e4212c01a test/integration: rename package and files name from master to controlplane in test/integration 2021-06-29 17:21:29 +08:00
Harold
477aef192f fix loadbalancerclass integration test funcation name 2021-06-28 20:07:02 -07:00
Jordan Liggitt
42dc070b47 PodSecurity: kube-apiserver integration test 2021-06-28 17:45:36 -04:00
Antonio Ojea
2eb50ee2fd fix comment on dual-stack integration test 2021-06-25 23:24:49 +02:00
Kubernetes Prow Robot
e19dc07ac5
Merge pull request #102898 from khenidak/fix-prefer-dualstack 
fix auto upgraded preferDual-Stack services (in cluster upgrade)
 2021-06-25 10:58:08 -07:00
Kubernetes Prow Robot
9254610765
Merge pull request #103129 from XudongLiuHarold/service-loadbalancer-class-e2e 
Promote loadbalancerclass feature to beta
 2021-06-25 09:48:57 -07:00
Xudong Liu
fe161579e2 Add integration test to promote serviceloadbalancerclass feature to beta. 2021-06-24 17:30:17 -07:00
Kubernetes Prow Robot
73eac7ae66
Merge pull request #102986 from mengjiao-liu/rename-master 
Rename master to apiserver in test/integration
 2021-06-24 05:41:41 -07:00
Khaled (Kal) Henidak
58a83ecbdb integeration tests 2021-06-22 17:40:21 +00:00
Mengjiao Liu
e977740ae6 Rename master to apiserver in test/integration 2021-06-18 17:40:46 +08:00
Mengjiao Liu
4eab19ae7d Clean up the master term in test/integration comments 2021-06-18 16:31:05 +08:00
Mengjiao Liu
da35add03f Rename master to apiserver in test/integration 2021-06-17 15:48:39 +08:00
Kubernetes Prow Robot
851b7276a5
Merge pull request #102796 from ahg-g/ahg-cc 
Move scheduler plugin set and configuration defaulting to CC
 2021-06-16 11:44:00 -07:00
Abdullah Gharaibeh
265ef1741f Move scheduler plugin set and configuration defaulting to component config 2021-06-16 10:15:29 -04:00
Kubernetes Prow Robot
3a47ddccdf
Merge pull request #100488 from liggitt/protobuf 
update etcd, grpc, protobuf dependencies
 2021-06-15 14:49:42 -07:00
Kubernetes Prow Robot
b43e4ec89b
Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits 
kube-scheduler: stop using insecure serving bits
 2021-06-15 13:42:12 -07:00
Kubernetes Prow Robot
a5be86fee7
Merge pull request #101316 from ravisantoshgudimetla/add-minReadySeconds-impl 
Add min ready seconds impl
 2021-06-15 13:41:43 -07:00
ravisantoshgudimetla
ceb1dbd2f1 statefulsets: MinReadySeconds implementation 
https://github.com/kubernetes/kubernetes/pull/100842
introduced featuregate. This PR implements the logic
behind it.
 2021-06-15 12:59:54 -04:00
Kubernetes Prow Robot
37da905c0c
Merge pull request #99310 from ankeesler/exec-plugin-interactive 
exec credential provider: InteractiveMode support
 2021-06-15 09:46:01 -07:00
Jordan Liggitt
52b629efbc Drop use of deprecated clientv3.SetLogger 2021-06-15 09:53:06 -04:00
Jordan Liggitt
2979c3325e Switch to go.etcd.io/etcd/client/v3 2021-06-15 09:53:06 -04:00
Andrew Keesler
cd83d89ac9
exec credential provider: InteractiveMode support 
The value here is that the exec plugin author can use the kubeconfig to assert
how standard input is treated with respect to the exec plugin, e.g.,
- an exec plugin author can ensure that kubectl fails if it cannot provide
  standard input to an exec plugin that needs it (Always)
- an exec plugin author can ensure that an client-go process will still call an
  exec plugin that prefers standard input even if standard input is not
  available (IfAvailable)

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-06-15 09:01:17 -04:00
Kubernetes Prow Robot
36a19df91b
Merge pull request #102143 from wangyysde/promote-cronjob-integration 
Promote cronjob integration test to batch/v1
 2021-06-15 03:56:01 -07:00
Jan Chaloupka
7560f33e27 kube-scheduler: stop using insecure serving bits 2021-06-14 22:50:53 +02:00
Kubernetes Prow Robot
51cbebab1f
Merge pull request #102687 from mengjiao-liu/rename-master-to-controlplane 
test/integration: Rename master to controlplane
 2021-06-14 09:49:16 -07:00