Commit Graph

33864 Commits

Author SHA1 Message Date
Jean Rouge
3f5675880d Kubelet changes for Windows GMSA support
This patch comprises the kubelet changes outlined in the GMSA KEP
(https://github.com/kubernetes/enhancements/blob/master/keps/sig-windows/20181221-windows-group-managed-service-accounts-for-container-identity.md)
to add GMSA support to Windows workloads.

More precisely, it includes the logic proposed in the KEP to resolve
which GMSA spec should be applied to which containers, and changes
`dockershim` to copy the relevant GMSA credential specs to Windows
registry values prior to creating the container, passing them down
to docker itself, and finally removing the values from the registry
afterwards; both these changes need to be activated with the `WindowsGMSA`
feature gate.

Includes unit tests.

Signed-off-by: Jean Rouge <rougej+github@gmail.com>
2019-02-05 09:17:46 -08:00
Kubernetes Prow Robot
1c557b9ce8 Merge pull request #73719 from andrewsykim/remove-cloud-deps-service
remove cloud provider dependencies to pkg/api/v1/service
2019-02-05 07:56:51 -08:00
Matt Matejczyk
9e7f7df94e Introduce the TriggerTimeTracker util.
It will be used by the Endpoints Controller to compute and export the EndpointsLastChangeTriggerTime annotation, which in turn will be used to compute the In-Cluster Network Programming Latency SLI.
See https://github.com/kubernetes/community/blob/master/sig-scalability/slos/network_programming_latency.md for more details.
2019-02-05 09:37:31 +01:00
Kubernetes Prow Robot
5ab509b54b Merge pull request #73727 from tedyu/master
Presize map with proper capacity in cache
2019-02-04 20:36:36 -08:00
Kubernetes Prow Robot
7447b8709d Merge pull request #73706 from deads2k/csr-01-expiry-min
csr signer has no need to sign certificates for a duration longer than the signer itself
2019-02-04 18:28:24 -08:00
Kubernetes Prow Robot
2a5a41a08b Merge pull request #72947 from apelisse/wip-feature-serverside-apply-merge
Merge feature-serverside-apply back in master
2019-02-04 18:28:03 -08:00
Ted Yu
f63f772867 Presize map with proper capacity in cache 2019-02-04 17:00:05 -08:00
Kubernetes Prow Robot
6a149864fb Merge pull request #73285 from tallclair/typed-runtimeclass
Migrate RuntimeClass support to the generated typed client
2019-02-04 16:13:30 -08:00
haiyanmeng
18bcdcecce Add monitoring for RuntimeClass 2019-02-04 16:01:29 -08:00
Andrew Kim
da22fcaac0 remove cloud provider dependencies to pkg/api/v1/service 2019-02-04 18:25:56 -05:00
Antoine Pelisse
fcd4985ce4 Fix SubjectAccessReview Validation with ManagedFields 2019-02-04 13:51:49 -08:00
jennybuckley
6b2e4682fe Minor fixes 2019-02-04 13:51:49 -08:00
Antoine Pelisse
b55417f429 Plugin FieldManager in CRD handler, change to API 2019-02-04 13:51:49 -08:00
Antoine Pelisse
0e1d50e70f API Machinery, Kubectl and tests 2019-02-04 13:51:48 -08:00
Roy Lenferink
b43c04452f Updated OWNERS files to include link to docs 2019-02-04 22:33:12 +01:00
Kubernetes Prow Robot
9d6ebf6c78 Merge pull request #73467 from ashishranjan738/newpackage
Refactor to use k8s.io/utils/net/ package instead of kubernetes/pkg/util/net/sets
2019-02-04 11:43:14 -08:00
David Eads
179dc4ca43 csr signer has no need to sign certificates for a duration longer than the signer itself 2019-02-04 13:22:17 -05:00
Kubernetes Prow Robot
f52713515b Merge pull request #73413 from joejulian/enableservicelinks_segfault
bug: fix segfault when EnableServiceLinks is nil
2019-02-04 09:36:31 -08:00
Kubernetes Prow Robot
6ea70a036e Merge pull request #73694 from soltysh/rename_polymorphichelper
Rename AttachableLogsForObjectFunc -> AttachablePodForObjectFunc to better reflect its purpose
2019-02-04 08:24:02 -08:00
Kubernetes Prow Robot
35e2a018d4 Merge pull request #73679 from taragu/fix-typo-credential-provider
Fix typo in comment
2019-02-04 08:23:51 -08:00
Kubernetes Prow Robot
ca1336957e Merge pull request #73404 from tsmetana/fix-kubelet-volume-test
Kubelet: Fix volumemanager test race
2019-02-04 06:21:11 -08:00
Kubernetes Prow Robot
b4a02c359b Merge pull request #71746 from rctl/rctl-wait-all
Add support for waiting by label selector or on all resources
2019-02-04 06:21:00 -08:00
Maciej Szulik
0a04bbbd92 Rename AttachableLogsForObjectFunc -> AttachablePodForObjectFunc to better reflect its purpose 2019-02-04 13:18:02 +01:00
Kubernetes Prow Robot
a4e3a5cb52 Merge pull request #71561 from anjensan/hpa-fix-current-metrics
Fix 'currentMetrics' field for HPA with 'AverageValue' target type
2019-02-04 03:34:52 -08:00
Ashish Ranjan
7be223e798 Refactor to use k8s.io/utils/net/ package instead of kubernetes/pkg/util/net/sets
Signed-off-by: Ashish Ranjan <ashishranjan738@gmail.com>
2019-02-04 10:34:53 +05:30
Kubernetes Prow Robot
c2570acc0c Merge pull request #70936 from yanghaichao12/dev1112
correct some spelling wrong in DevicePlugin files
2019-02-03 13:10:25 -08:00
Tara Gu
c8f6038c96 Fix type in comment 2019-02-03 15:25:09 -05:00
Kubernetes Prow Robot
6fb69d3967 Merge pull request #71648 from houjun41544/20181203-volume
Fix an error in comment
2019-02-03 12:02:45 -08:00
Kubernetes Prow Robot
1d4861ee3d Merge pull request #71397 from liggitt/reconcile-doc
Clarify reconcile command documentation
2019-02-03 12:02:35 -08:00
Kubernetes Prow Robot
03b434c9d4 Merge pull request #58122 from tianshapjq/nit-int-is-enough
Len() is already int
2019-02-03 12:02:24 -08:00
Kubernetes Prow Robot
1b8435d538 Merge pull request #73652 from bsalamat/fast_volume_checker
Short circuit volume checker if the pod is not requesting any volumes
2019-02-02 22:36:18 -08:00
Davanum Srinivas
3722989fe4 Cleanup pkg/cloudprovider/providers/.import-restrictions
Change-Id: I4d09ea3cc68eddd90cbafb2726fefc0701fe6925
2019-02-02 21:41:12 -05:00
Bobby (Babak) Salamat
a20a243380 Add a PVC to pod spec in volume binding tests to ensure that the predicate runs 2019-02-02 15:01:55 -08:00
Rasmus Jönsson
4c31e9855d Add support for waiting by label selector or on all resources
Add test for multiple deletions in kubectl watch
2019-02-02 16:26:00 +01:00
Mayank Kumar
b03d0e31ad add positive ut for service account projection 2019-02-02 01:15:13 -08:00
Kubernetes Prow Robot
15ae6ec140 Merge pull request #68114 from houjun41544/20180831-disruption
Add unit test case for controller/disruption
2019-02-02 00:37:25 -08:00
Bobby (Babak) Salamat
eb59bc605c Short circuit volume checker if the pod is not requesting any volumes 2019-02-01 22:02:30 -08:00
Derek Carr
deae071d78 Graduate HugePages feature to GA 2019-02-02 00:21:10 -05:00
Kubernetes Prow Robot
30566b990a Merge pull request #73645 from andrewsykim/remove-dep-node-addresses
move AddToNodeAddresses to k8s.io/cloud-provider/node/helpers
2019-02-01 18:29:29 -08:00
Kubernetes Prow Robot
235b32e8ad Merge pull request #72832 from MrHohn/pod-dns-config-ga
Graduate CustomPodDNS feature to GA
2019-02-01 18:29:17 -08:00
Kubernetes Prow Robot
c953daa3bc Merge pull request #73604 from andrewsykim/gce-features
move GCERegionalPersistentDisk feature to k8s.io/cloud-provider/features
2019-02-01 17:14:36 -08:00
Kubernetes Prow Robot
4331660fcd Merge pull request #73445 from danielqsj/fix-exec
migrate the rest reference of pkg/util/exec to k8s.io/utils/exec
2019-02-01 17:14:15 -08:00
Charles Eckman
e6c26da886 Address comment on TokenReview 2019-02-01 16:49:51 -08:00
Charles Eckman
48f7f6fb67 Fix typo, and note when BoundObjectRef isn't checked
- s/objet/object/
- A relying party (validating a token) may not have access to the
  resource named in the `BoundObjectRef`; only the API server can be asserted to
  have access.
  Note this in the field's documentation.
2019-02-01 16:49:46 -08:00
Kubernetes Prow Robot
8e05f0904b Merge pull request #73642 from juanvallejo/jvallejo/allow-reusability-plugins-handler
allow re-usability of plugin handler
2019-02-01 16:02:19 -08:00
Kubernetes Prow Robot
aee11a844c Merge pull request #73596 from liggitt/deprecated-tests
Stop using beta apps versions
2019-02-01 16:02:08 -08:00
Kubernetes Prow Robot
ae2b176439 Merge pull request #71727 from mikedanese/fixcrm
pkg/kubelet/cloudresource: fallback to old addresses if sync loop fails
2019-02-01 14:31:52 -08:00
Kubernetes Prow Robot
b0a455b811 Merge pull request #70309 from 2rs2ts/ssl-healthchecks
Use SSL health checks for ELBs when backend protocol is SSL/HTTPS
2019-02-01 14:31:41 -08:00
Kubernetes Prow Robot
c65198ffb0 Merge pull request #61468 from tianshapjq/remove-consts-element.go
clean code
2019-02-01 14:31:30 -08:00
Jingyi Hu
1bdbc35994 controller: use pagination in cronjob controller
Use pagination (chunking) when listing Jobs and CronJobs in cronjob
controller.
2019-02-01 14:02:14 -08:00