github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
122,180 Commits 1 Branch 31 Tags 1,019 MiB
a2fb1b51ac
Commit Graph

10362 Commits

Author SHA1 Message Date
Andrew Sy Kim
84da8e6a53 cluster/gce: add match conditions to PersistentVolume labeling webhook 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2023-11-02 23:15:32 +00:00
Mohamed Omar Zaian
3c268b7524 etcd: Update to version 3.5.10 2023-11-02 10:30:41 +01:00
Paco Xu
ceaacc88f0 add --provenance=false during etcd multi-arch build 2023-11-01 17:16:28 +08:00
Kubernetes Prow Robot
3eba6fc9ad
Merge pull request #121628 from andrewsykim/cloud-pvl-admission 
cluster/gce: add webhook to replace PersistentVolumeLabel admission controller
 2023-10-31 22:56:59 +01:00
upodroid
e2227a24fb switch to e2 machine types 2023-10-31 21:46:14 +00:00
Andrew Sy Kim
e411fd340c cluster/gce: add webhook to replace PersistentVolumeLabel admission controller 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2023-10-31 18:52:22 +00:00
Davanum Srinivas
6d59480a70
Try a single gcloud command for scp-ing all files 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-10-30 11:26:30 -04:00
Kubernetes Prow Robot
ae2e0c00b5
Merge pull request #120450 from pawbana/auth-provider-gcp-move-fix 
Fixed variable used for moving auth-provider-gcp binary
 2023-10-29 02:59:05 +01:00
Mohamed Omar Zaian
3f8e6d6f77 etcd: Build image 3.5.10 2023-10-27 14:02:18 +02:00
Kubernetes Prow Robot
94ec99d4c2
Merge pull request #121448 from p0lyn0mial/upstream-add-support-for-watchlist-detector-to-ci-jobs 
cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job
 2023-10-26 14:09:35 +02:00
Lukasz Szaszkiewicz
517efd6442 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job 
when the KUBE_WATCHLIST_INCONSISTENCY_DETECTOR environment variable was set
then the reflector performs a data consistency check.

The consistency check is meant to be enforced only in the CI, not in production.
The check ensures that data retrieved by the watch-list api call
is exactly the same as data received by the standard list api call.

note that the new env var is set in the same places
the ENABLE_CACHE_MUTATION_DETECTOR is set.
 2023-10-26 09:41:48 +02:00
Kubernetes Prow Robot
4294c35fc9
Merge pull request #121297 from calvinballing/spellcheck-markdown 
Fix typos in markdown
 2023-10-25 13:18:26 +02:00
bzsuni
b052c7b7cd Update npd version to 0.8.13 in configure.sh 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-10-24 09:01:59 +08:00
Kubernetes Prow Robot
604e9e0fb3
Merge pull request #121007 from borg-land/npd-host-exec-rewrite 
Configure COS to use NPD in daemonset mode and align kubeup NPD manifests with the manifests in the NPD repo
 2023-10-23 18:39:40 +02:00
Humble Chirammal
95f2c859a3 snapshot controller version bump to latest 
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-10-21 20:01:46 +05:30
Matt Dainty
8dff3fcb0c
fix: Use upper case ALL in drop capabilities 2023-10-19 00:50:49 +01:00
Jim Hays
911700e64e Fix typos in markdown 2023-10-17 10:55:40 -04:00
upodroid
011c65e17e configure npd to run as daemonset on cos 2023-10-16 12:34:47 +01:00
Kubernetes Prow Robot
add482a2d3
Merge pull request #121237 from arichtman/addon-manager-script-typo 
fixed miscalled function in addon-manager `kube-addons.sh`
 2023-10-16 03:08:46 +02:00
Davanum Srinivas
11b0eed9e7
Work around bug in gcloud when downloading logs 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-10-15 16:57:24 -04:00
Ariel Richtman
0f46033dca fixed miscalled function 2023-10-15 15:40:38 +10:00
Kubernetes Prow Robot
f136f42d66
Merge pull request #118121 from boglarkla/patch-1 
fixed typo in get-kube.sh
 2023-10-14 23:49:34 +02:00
Dzmitry Pasiukevich
72b68b8003 Remove dpasiukevich from cluster/addons/dns OWNERS 2023-09-24 21:47:22 +02:00
Joseph Anttila Hall
1b602ffd9a
Bump Konnectivity to 0.28.0 2023-09-22 13:10:24 -07:00
Paco Xu
7cfdb792d6
Revert "Skip kube-dns tests if coredns is installed" 2023-09-20 21:04:54 +08:00
upodroid
5341890c96 add missing labels to kube-dns deployment 2023-09-19 14:22:15 +01:00
Kubernetes Prow Robot
12dc19d46f
Merge pull request #119393 from saschagrunert/debian-base 
Update debian-base for test images and others
 2023-09-19 00:48:55 -07:00
Jakub Przychodzeń
93e3b07e11 [cluster/gce] Add KCM specific args 
Add possibility to add flags to KCM, without adding flags to CCM
 2023-09-08 11:12:05 +00:00
Andrew Sy Kim
6c973f01d2 reduce CPU requests for fluentd-gcp to fix failing tests 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2023-09-07 17:58:57 +00:00
Paweł Banaszewski
0593cfdd14 Fixed variable used for moving auth-provider-gcp binary 2023-09-06 09:22:32 +00:00
Todd Neal
355ae44a3c Revert "bump npd to v0.8.14" 
This reverts commit 7b44d73f73.
 2023-09-05 20:28:53 -05:00
Davanum Srinivas
3f8f14397e
Set external credential provider to true by default in kube-up.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-09-03 15:39:53 -04:00
Antonio Ojea
410ac1456c Don't run the nodeipam controller on KCM if cloud provider external 
Change-Id: Ic1da0e9ced2dc8d3d382fee5636bbee18b3a29f7
Signed-off-by: Antonio Ojea <aojea@google.com>
 2023-09-03 18:18:36 +00:00
Davanum Srinivas
ceaed508ce
Validate the cloud-provider passed in and the corresponding feature flags 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-09-02 13:08:04 -04:00
Kubernetes Prow Robot
400059d025
Merge pull request #120194 from bzsuni/bz/bump/npd 
bump npd to v0.8.14
 2023-08-31 20:52:30 -07:00
Antonio Ojea
8f6a79b29f use external cloud provider by default with gce 
This change enables the external cloud provider by default for GCE
infrastructure. It is the result of several squashed commits, these are
their commit messages:

* no longer need to enable endpoinslices controller since GA
* use external by default
* DisableKubeletCloudCredentialProviders
* temp test feature gates
 2023-08-31 15:13:29 -04:00
bzsuni
7b44d73f73
bump npd to v0.8.14 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-08-30 19:03:33 +08:00
Kubernetes Prow Robot
2a5fd3076a
Merge pull request #119933 from saschagrunert/cri-tools 
Update cri-tools to v1.28.0
 2023-08-27 08:55:21 -07:00
Kubernetes Prow Robot
4cb47f2ba1
Merge pull request #120116 from tukwila/update-coredns-v1.11.0 
update coredns to v1.11.1
 2023-08-26 10:17:21 -07:00
guangli.bao
78538bd303 update coredns to v1.11.0 
update coredns to v1.11.1
update coredns-kubeadm to 1.11.1
bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21
fix dns_test ut failure

Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
 2023-08-26 17:15:46 +08:00
Kubernetes Prow Robot
232d343d58
Merge pull request #119969 from saschagrunert/cni-plugins 
Update CNI plugins to v1.3.0
 2023-08-23 12:41:57 -07:00
Kubernetes Prow Robot
2e6eafca3f
Merge pull request #119503 from wojtek-t/pagination_ga 
Graduate APIListChunking to GA
 2023-08-23 10:39:29 -07:00
ZhaoRuquan
037640af8c
Apply suggestions from code review 
Co-authored-by: Mahamed Ali <cy@borg.dev>
 2023-08-22 17:43:46 +08:00
RuquanZhao
98d772ca3c Support multiarch/platfrom in find-release-tars 
Signed-off-by: Ruquan Zhao ruquan.zhao@arm.com
 2023-08-22 16:19:04 +08:00
Sascha Grunert
7933368460
Update CNI plugins to v1.3.0 
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-08-17 09:50:53 +02:00
Sascha Grunert
34a89f039b
Update cri-tools to v1.28.0 
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-08-14 09:56:07 +02:00
Humble Chirammal
85c385d410 Update the container images used in cloudbuild to their latest version 
This carry below GOLLANG_VERSION which got many CVE fixes:

/workspace # echo $GOLANG_VERSION
1.20.5
/workspace #

CVE-2023-29403 and Go issue https://go.dev/issue/60272.
CVE-2023-29404 and CVE-2023-29405:
  Go issues https://go.dev/issue/60305 and https://go.dev/issue/60306
CVE-2023-29402 and Go issue https://go.dev/issue/60167

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-08-03 00:09:53 +05:30
Marko Mudrinić
294c7df328
Avoid pulling node-problem-detector through CDN 
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
 2023-07-30 13:02:17 +02:00
Davanum Srinivas
b4ef4015a2
Avoid pulling mounter.tar through the CDN 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-07-28 22:15:55 -04:00
Wojciech Tyczyński
4e2e059c7b Graduate RemainingItemCount to GA 2023-07-21 16:25:21 +02:00
Wojciech Tyczyński
6acfa3cb4a Graduate APIListChunking to GA 2023-07-21 14:09:40 +02:00
Sascha Grunert
a35608cc61
Update debian-base for test images and others 
Bump all users of debian-base to the latest bookworm image.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-07-18 16:39:03 +02:00
Kubernetes Prow Robot
b3fc4cf7a9
Merge pull request #119386 from dgrisonnet/metrics-server-nanny 
addons/metrics-server: fix nanny rbac permissions
 2023-07-18 07:19:21 -07:00
Kubernetes Prow Robot
d43e6705f1
Merge pull request #119095 from saschagrunert/debian-base-bookworm 
Update debian-base to bookworm
 2023-07-18 02:11:08 -07:00
Damien Grisonnet
3fd40ffb0e addons/metrics-server: fix nanny rbac permissions 
Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
 2023-07-18 10:37:55 +02:00
SataQiu
148acc8632 enable arm64 support for GCE node configuration 2023-07-13 14:16:46 +08:00
Kubernetes Prow Robot
c1d4ec0677
Merge pull request #118537 from SataQiu/fix-cluster-gce-20230607 
replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags
 2023-07-05 10:40:57 -07:00
Sascha Grunert
5e1777be52
Update debian-base to bookworm 
Rolling out the latest bookworm base image.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-07-05 16:13:03 +02:00
bzsuni
b4f479d1f2
bump npd to v0.8.13 
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
 2023-07-05 10:02:06 +08:00
tao.yang
4517d3004a bump kube-dns to v1.22.23 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-07-03 16:34:47 +08:00
guangli.bao
fdd992da86 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7 
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
 2023-06-21 11:09:15 +08:00
Kubernetes Prow Robot
fa78f28f0a
Merge pull request #117522 from pawbana/auth-provider-gcp-windows 
Added support for image credential provider for windows and arm64 on gce
 2023-06-15 17:48:38 -07:00
Antonio Ojea
e0f273ffda use ingress-gce-glbc v1.23.1 image for CI 
Change-Id: Ia2dacdc1d8fd3e369b9dcc0ec8b2653f3a834057
 2023-06-14 10:40:01 +00:00
SataQiu
ed429c4388 replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags 2023-06-07 23:24:04 +08:00
Kubernetes Prow Robot
cb8d9f6867
Merge pull request #117283 from defo89/pv-recycler-change-cmd 
change pv recycler scrub cmd to find -delete
 2023-05-26 10:50:52 -07:00
Jingyuan Liang
4dfc684b34 Set kube-proxy memory request to 50Mi 
With optional override using KUBE_PROXY_MEMORY_REQUEST following the
KUBE_PROXY_CPU_REQUEST pattern.
 2023-05-26 01:01:33 +00:00
Kubernetes Prow Robot
15a1f9a39d
Merge pull request #117921 from kkkkun/clean-up-etcd-version 
clean up unsupport etcd version
 2023-05-18 20:30:28 -07:00
Bogesz
12f8eeaf9b
fixed typo in get-kube.sh 2023-05-19 00:47:29 +02:00
Kubernetes Prow Robot
e6915647a7
Merge pull request #118082 from rjsadow/master 
fix: move to `dl.k8s.io` from `kubernetes-release` bucket
 2023-05-17 15:42:40 -07:00
Ricky Sadowski
b76ef2e095 fix: move to dl.k8s.io from kubernetes-release bucket 
Signed-off-by: Ricky Sadowski <richard.j.sadowski@gmail.com>
 2023-05-17 18:30:54 +00:00
Kubernetes Prow Robot
b950f7ffb6
Merge pull request #118027 from humblec/hack-install-etcd 
etcd: Update version to 3.5.9
 2023-05-17 04:52:33 -07:00
Kubernetes Prow Robot
9f6f17b899
Merge pull request #117970 from kkkkun/replace_etcd_build_to_build.sh 
replace etcd build to build.sh
 2023-05-17 01:38:33 -07:00
kkkkun
8b4840aa37 clean up unsupport etcd version 
Signed-off-by: kkkkun <scuzk373x@gmail.com>
 2023-05-17 16:35:50 +08:00
Humble Chirammal
e3eb4bd0c5 updating dependencies.yaml for etcd v3.5.9 version 
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-05-16 20:27:17 +05:30
Kubernetes Prow Robot
54dbb93388
Merge pull request #117999 from kkkkun/bump-etcd-image-3.5.9-0 
etcd: Build image 3.5.9-0
 2023-05-16 07:07:36 -07:00
Kubernetes Prow Robot
8411524daa
Merge pull request #117573 from pacoxu/use-allowlist 
user --prune-allowlist in kube-addons.sh
 2023-05-15 13:21:58 -07:00
Paco Xu
f562375c8a add changelog for kube-addon-manager v9.1.7 2023-05-15 09:39:45 +08:00
Kubernetes Prow Robot
4f5a2256f9
Merge pull request #117428 from cbandy/etcd-testing-setenv 
Replace os.Setenv with testing.T.Setenv in tests
 2023-05-13 12:29:26 -07:00
Kubernetes Prow Robot
9bb6db25fc
Merge pull request #117950 from rjsadow/master 
fix: use dl.k8s.io, not kubernetes-release bucket
 2023-05-13 06:47:26 -07:00
Ricky Sadowski
8580c116d5 fix: use dl.k8s.io, not kubernetes-release bucket 
This PR updates changes related references to the legacy
release bucket, excluding CHANGELOG updates.

Signed-off-by: Ricky Sadowski <richard.j.sadowski@gmail.com>
 2023-05-13 10:57:41 +00:00
kkkkun
655f2f7401 replace build to build.sh 
Signed-off-by: kkkkun <scuzk373x@gmail.com>
 2023-05-12 17:06:07 +08:00
kkkkun
7681135f1b etcd: Build image 3.5.9-0 
Signed-off-by: kkkkun <scuzk373x@gmail.com>
 2023-05-12 11:14:02 +08:00
Paco Xu
f7948c6e2e use kubectl v1.27.1 in cluster addon manager 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-05-12 09:34:56 +08:00
Paco Xu
eb1483fe64 user --prune-allowlist in kube-addons.sh 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-05-12 09:34:56 +08:00
Humble Chirammal
bfb4f8b707 etcd version monitor build go version update to 1.19.9 
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-05-11 12:36:46 +05:30
Humble Chirammal
0ae902fca4 update golang version of etcd build to 1.19.9 
As per https://github.com/etcd-io/etcd/blob/main/.go-version it is
1.19.9.

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-05-11 10:17:13 +05:30
Kubernetes Prow Robot
c2efaa7908
Merge pull request #116526 from pacoxu/cluster-autoscaler-upgrade 
upgrade cluster-autoscaler v1.26.1 to fix ci warnings
 2023-05-10 13:07:14 -07:00
Kubernetes Prow Robot
626b2db1ca
Merge pull request #117335 from kkkkun/update-etcd-3.5.8 
etcd: Update version to 3.5.8
 2023-05-10 03:38:59 -07:00
Kubernetes Prow Robot
714221dbaa
Merge pull request #117879 from kkkkun/fix-make-etcd-image-failed 
Fix make etcd image failed
 2023-05-09 05:28:16 -07:00
kkkkun
aab02d52f4 Fix make etcd image failed 
Signed-off-by: kkkkun <scuzk373x@gmail.com>
 2023-05-09 15:45:26 +08:00
Kubernetes Prow Robot
dd43d864c1
Merge pull request #116901 from pacoxu/cleanup-KubeletCredentialProviders 
remove GAed KubeletCredentialProviders （1.28）
 2023-05-08 07:55:53 -07:00
kkkkun
c56839c0a1 etcd: Update version to 3.5.8 
Signed-off-by: kkkkun <scuzk373x@gmail.com>
 2023-05-06 17:29:47 +08:00
Kubernetes Prow Robot
f82a6ac72d
Merge pull request #115043 from bobbypage/image-family 
cluster/gce: Fetch image from image family
 2023-05-03 08:54:13 -07:00
Kubernetes Prow Robot
e153766a2a
Merge pull request #117545 from saschagrunert/cri-tools 
Update cri-tools to v1.27.0
 2023-05-02 08:18:43 -07:00
Paweł Banaszewski
859690d72a Added support for image credential provider for windows and arm64 on gce 2023-04-28 21:28:26 +00:00
Paweł Banaszewski
53c9103a1d Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests 2023-04-28 11:47:08 +00:00
Kubernetes Prow Robot
3a15029a95
Merge pull request #117643 from humblec/etcd 
update the etcd base image to v1.4.2
 2023-04-27 11:10:27 -07:00
Humble Chirammal
f24d1d2c95 use go 1.19.x for etcd version monitor compilation 
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-04-27 20:21:00 +05:30
Humble Chirammal
91df71be54 correct etcd base image reference in the doc 
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-04-27 18:11:39 +05:30
Humble Chirammal
6c8be35fa8 update the etcd base image to v1.4.2 
The current base v1.3.0 has many CVEs[1] which are addressed in latest
versions of the bullseye

[1] ex:
CVE-2022-2509
CVE-2021-46828

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
 2023-04-27 17:06:54 +05:30