github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
115,857 Commits 1 Branch 31 Tags 1,019 MiB
a862a5f2d2
Commit Graph

10215 Commits

Author SHA1 Message Date
cyclinder
3e426355b9 bump metrics-server to 0.5.1 
Signed-off-by: cyclinder <qifeng.guo@daocloud.io>
 2021-09-27 11:18:03 +08:00
Claudiu Belu
c4fc9bba6c Adds Windows support for etcd image 
We can use docker buildx in order to build and push Windows images from the same Linux node,
as long as the Dockerfile does not have any RUN commands in the Windows step.

We also need to create a non-default builder instance in order to be able to build and
push Windows images.

The Windows images have to be built and pushed directly to the registry.

For Windows containers without Hyper-V isolation, the host OS Version and the
Container OS Version need to match, which is why we added multiple Windows OS Versions
to the building process.

For the manifest list, we need to also annotate the Windows OS Version, so the Windows nodes
will be able to pull the proper image from the manifest list.

Adds support for Windows OS Versions: 1809, 2004, 20H2, ltsc2022.

Bumped etcd image revision.
 2021-09-24 18:28:00 +00:00
Aaron Crickenberger
42a955b3ae use k8s-staging-test-infra/gcb-docker-gcloud 2021-09-24 06:54:40 -07:00
Abu Kashem
a748fdc677
apiserver: refactor PolicyRuleEvaluator to return a struct 2021-09-24 08:08:32 -04:00
Kubernetes Prow Robot
7bff8adaf6
Merge pull request #92853 from cosmo0920/add-sniffer-class-loading-feature-on-es-image 
[fluentd/elasticsearch] Add mechanism to load simple sniffer class
 2021-09-23 23:07:24 -07:00
Stephen Augustus
8dcaf8433b
cluster/images/etcd: Build 3.5.0-2 image 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-09-20 21:02:49 -04:00
Stephen Augustus
531eb712c2
releng: Update build images to Debian 11 (Bullseye) 
- debian-base:bullseye-v1.0.0
- debian-iptables:bullseye-v1.0.0
- go-runner:v2.3.1-go1.17.1-bullseye.0
- kube-cross:v1.23.0-go1.17.1-bullseye.0
- setcap:bullseye-v1.0.0

Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-09-20 20:51:32 -04:00
Paco Xu
ef99ba8cb2
konnectivity-agent-ds: remove toleration for NoSchedule 2021-09-17 10:58:09 +08:00
Paco Xu
a48a2efbd4
remove deprecated validEgressSelectorNames 'master' (#102242) 
* remove deprecated validEgressSelectorNames 'master'

Signed-off-by: pacoxu <paco.xu@daocloud.io>

* update gce configure: replace deprecated egress name 'master' with 'controlplane'

Signed-off-by: pacoxu <paco.xu@daocloud.io>

* add dup error for EgressSelection & fix converting alpha/beta to v1 name
 2021-09-16 07:09:46 -07:00
Kubernetes Prow Robot
03e0106bbc
Merge pull request #102592 from pacoxu/patch-11 
add NoExecute toleration for konnectivity agent
 2021-09-15 01:40:42 -07:00
Carlos Panato
132c7066e0
[go1.17] Update to go1.17.1 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-09-14 13:04:25 +02:00
Kubernetes Prow Robot
c79f7c1add
Merge pull request #104711 from claudiubelu/update-pause-3.6 
update pause image references to use 3.6
 2021-09-13 19:09:08 -07:00
Julie Qi
6bf310d6aa Remove stackdriver version variable 2021-09-10 15:26:16 -07:00
Kubernetes Prow Robot
34fb61beba
Merge pull request #104444 from cheftako/anp-v23 
Enable http2 health checking with go 1.16.5 on KAS egress.
 2021-09-07 08:43:15 -07:00
Kubernetes Prow Robot
7363da7ca7
Merge pull request #101318 from eltociear/patch-5 
Fix typo in gci/README.md
 2021-09-03 02:45:49 -07:00
Alex
bea25d8024
Update GKE kubernetes sources download link 
Fix non-working link provided on MOTD to download GKE source release.
Now point to correct location, confirmed same file as provided in "/home/kubernetes/kubernetes-src.tar.gz"
 2021-08-31 10:31:23 +09:00
Claudiu Belu
18936d4785 updates pause image references 
The pause:3.6 image has been published.

Also updates older / incorrect references.
 2021-08-29 21:50:05 -07:00
Stephen Augustus
481cf6fbe7
generated: Run hack/update-gofmt.sh 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-08-24 15:47:49 -04:00
Stephen Augustus
e8d2bff6ba
[go1.17] Update to go1.17 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-08-24 15:47:41 -04:00
Antonio Ojea
0cd75e8fec run hack/update-netparse-cve.sh 2021-08-20 10:42:09 +02:00
wfender
590300f90d Enable http2 health checking with go 1.16.5 
Enabling http2 health checking on http-connect KAS egress.
Reran update-vendor.
Fixed pinning.
 2021-08-19 22:38:41 -07:00
Kubernetes Prow Robot
08eaea4590
Merge pull request #104350 from tkashem/audit-policy-refactor 
refactor: rename audit Checker interface
 2021-08-19 01:41:24 -07:00
Kubernetes Prow Robot
9d38c64a7d
Merge pull request #104426 from mauriciopoppe/update-csi-proxy-version 
Upgrade the default csi-proxy version installed by kube-up.sh
 2021-08-18 15:23:45 -07:00
Sascha Grunert
6a6e24702c
Update cri-tools to v1.22.0 
This patch updates crictl to the latest available release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-08-18 10:15:15 +02:00
Mauricio Poppe
fa9d5546cd Upgrade the default csi-proxy version installed by kube-up.sh 2021-08-17 19:37:26 +00:00
Kubernetes Prow Robot
f466d9278f
Merge pull request #104317 from ibabou/add_termination_hook_startup_script 
Add termination hook to the startup script - GCE Windows
 2021-08-12 17:50:57 -07:00
Abu Kashem
27f1503514
rename audit Checker interface 2021-08-12 17:42:41 -04:00
“Ibrahim
aa9380e017 Add termination hook to the startup script - GCE Windows 2021-08-12 19:56:15 +00:00
Marek Siarkowicz
704628fde4 Update golang used in etcd image to 1.16.7 2021-08-12 10:28:01 +02:00
Kubernetes Prow Robot
07fe9f0192
Merge pull request #104293 from x13n/master 
Update version of Cluster Autoscaler to 1.22.0
 2021-08-11 03:20:47 -07:00
Daniel Kłobuszewski
1181421112 Update version of Cluster Autoscaler to 1.22.0 
Release notes: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.22.0
 2021-08-11 09:58:25 +02:00
Kubernetes Prow Robot
a21a328a1a
Merge pull request #104116 from saschagrunert/etcd-buildx 
Use docker buildx for etcd image
 2021-08-11 00:54:49 -07:00
Mengjiao Liu
08d8f29a7a Update debian-base image to buster-v1.9.0 2021-08-07 09:44:59 +08:00
Kubernetes Prow Robot
eb7d492194
Merge pull request #104205 from ibabou/add_ibabou_gce_win_owners 
Add [ibabou] to cluster/gce/windows OWNERS file
 2021-08-06 13:47:29 -07:00
“Ibrahim
b98594bc79 Add ibabou to gce/windows OWNERS file 2021-08-06 17:48:07 +00:00
Carlos Panato
6b9dc099f8
[go1.16] Update to go1.16.7 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-08-06 17:11:00 +02:00
Kubernetes Prow Robot
bfcc756f09
Merge pull request #103963 from mcshooter/update-npd-089 
update node-problem-detector v0.8.9
 2021-08-05 19:45:05 -07:00
Kubernetes Prow Robot
13c74c4309
Merge pull request #104181 from SergeyKanzhelev/patch-2 
Propose myself as a reviewer for cluster/gce/gci
 2021-08-05 17:51:01 -07:00
Kubernetes Prow Robot
6751ae8f21
Merge pull request #104112 from mcshooter/dump-kube-env-from-startup-script 
Log kube-env variables from startup script
 2021-08-05 16:36:38 -07:00
Sergey Kanzhelev
ddaa06abee
Propose myself as a reviewer for cluster/gce/gci 2021-08-05 14:24:35 -07:00
Kubernetes Prow Robot
58cde6c442
Merge pull request #103874 from liggitt/move-conformance 
Move conformance image
 2021-08-05 08:17:34 -07:00
Kubernetes Prow Robot
1d693cd832
Merge pull request #104109 from caesarxuchao/keepalive 
add a keepalive time to the konnectivity server
 2021-08-05 06:09:46 -07:00
Kubernetes Prow Robot
a77d151c6c
Merge pull request #103855 from ibabou/update_bin_win_154 
Update Containerd version - GCE Windows (1.5.4)
 2021-08-05 01:45:07 -07:00
Kubernetes Prow Robot
04c7fe8256
Merge pull request #103627 from liu-cong/latency 
Add structured logging for more steps
 2021-08-04 22:11:07 -07:00
Kubernetes Prow Robot
f886190b48
Merge pull request #103436 from loburm/config_kube_proxy 
Make cpu request of kube proxy configurable by env variable.
 2021-08-04 19:00:40 -07:00
Kubernetes Prow Robot
ce5dbd2095
Merge pull request #103376 from mattcary/sunrpc 
Drop end of sunrpc port range to avoid port conflicts.
 2021-08-04 19:00:32 -07:00
Kubernetes Prow Robot
9c5cefb230
Merge pull request #101781 from ptabor/20210506-retry-dns-resolve 
Retry hostname->IP: [Errno -2] Name or service not known
 2021-08-04 18:59:27 -07:00
Michelle Tandya
9cffbab037 Log kube-env variables from startup script 2021-08-04 22:53:52 +00:00
vteratipally
5d84ffa6c2
Update configure-helper.sh 2021-08-04 14:36:16 -07:00
vteratipally
b0039559dd
Update configure-helper.sh 2021-08-04 13:19:00 -07:00
Chao Xu
572a24d854 add a keepalive time to the konnectivity server 2021-08-04 12:48:32 -07:00
vteratipally
0376c58c44
Update configure-helper.sh 
add live-restore true by default.
 2021-08-04 12:09:10 -07:00
Sascha Grunert
ea1bc18bc1
Use docker buildx for etcd image 
This allows to choose the correct architecture in the image manifest,
which defaulted to the host system before applying this patch.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-08-04 14:49:45 +02:00
Michelle Tandya
4606ebe423 update node-problem-detector v0.8.9 2021-07-28 01:02:56 +00:00
Walter Fender
6d1556df7b Update to using apiserver-network-proxy v1.22 
Includes a fix to prevent the agent writing to a closed channel.
 2021-07-24 16:02:01 -07:00
Jordan Liggitt
024930df11 Move cluster/images/conformance to test/conformance/image 2021-07-23 11:23:55 -04:00
Kubernetes Prow Robot
8088b3e67d
Merge pull request #103713 from aojea/metrics-server-443 
cluster: fix metrics-server deployment on CI jobs
 2021-07-23 06:59:16 -07:00
“Ibrahim
2cacfada26 Update Containerd version - GCE Windows 2021-07-22 18:34:11 +00:00
Julie Qi
2a4a1c1d00 disable aufs module 2021-07-21 23:25:19 -07:00
Antonio Ojea
0610968bfa bump metrics-server to 0.5.0 2021-07-22 01:13:44 +02:00
Antonio Ojea
c5aead020b cluster: fix CI metrics-server deployment 
use deployment based on upstream manifest

- add liveness and readiness probes
- use kubelet port secure port

https://github.com/kubernetes-sigs/metrics-server/blob/release-0.4/manifests/base/deployment.yaml#L32-L38
 2021-07-22 01:06:04 +02:00
Kubernetes Prow Robot
61b2ce3855
Merge pull request #103777 from vteratipally/cos-update 
update cos 85 version to latest version
 2021-07-19 19:23:31 -07:00
Jefftree
536cf81974 Add konnectivity agent to log dump 2021-07-19 15:38:17 -07:00
Varsha Teratipally
9d0b32858a update cos 85 version to latest. 2021-07-19 17:54:39 +00:00
Carlos Panato
a3b6f0557d
device-plugins: replace gcr.io/gke-release to use the community registry 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-07-15 16:02:42 +02:00
Matthew Cary
60d446fe3d Drop end of sunrpc port range to avoid port conflicts. 
Change-Id: I1561fe447f50d9ac835094b3cceba62ea74dfd81
 2021-07-13 18:38:40 +00:00
Carlos Panato
83f8d1ad72
[go1.16] Update to go1.16.6 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-07-13 18:05:16 +02:00
Cong Liu
6c87c22277 Add structured logging for more steps 2021-07-09 15:35:44 -07:00
Kubernetes Prow Robot
119b8fc93e
Merge pull request #103057 from jeremyje/fixnet 
GCE Windows: Set TCP/IP parameters to align with GCE optimal settings.
 2021-07-08 14:01:44 -07:00
Kubernetes Prow Robot
f915aa39e8
Merge pull request #103541 from jbartosik/bump-addon-manager 
Bump version of Addon Resizer used by Metrics Server
 2021-07-07 18:09:29 -07:00
Kubernetes Prow Robot
8e56a34195
Merge pull request #102966 from SergeyKanzhelev/deprecateDynamicKubeletConfig 
deprecate and disable by default DynamicKubeletConfig feature flag
 2021-07-07 17:05:15 -07:00
Kubernetes Prow Robot
ac554af79b
Merge pull request #103142 from serathius/etcd-3.5.0 
Upgrade etcd to 3.5.0
 2021-07-07 12:40:22 -07:00
Joachim Bartosik
3fadea4ea2 Bump version of Addon Resizer used by Metrics Server 
To pull in two fixes it needs to continue working in 1.22:

- Updated dependencies,
- Using new metric for getting node count.
 2021-07-07 14:48:52 +02:00
Kubernetes Prow Robot
a445eb2b7f
Merge pull request #103474 from chendave/distroless 
Bump `distroless/base` image to latest version
 2021-07-06 06:16:42 -07:00
Dave Chen
b6b1674f56 Switch to the version instead of the latest 2021-07-06 10:58:57 +08:00
Kubernetes Prow Robot
5e3bed6399
Merge pull request #101433 from SergeyKanzhelev/patch-1 
Make the service account error more apparent
 2021-07-05 03:23:13 -07:00
Dave Chen
26f223fa6e Bump distroless/base image to latest version 
`distroless/base:latest` is a multi-arched image now, this will help the `kubemark` works properly
on the platforms other than `amd64`

Signed-off-by: Dave Chen <dave.chen@arm.com>
 2021-07-05 13:55:51 +08:00
Stephen Augustus
c24dfe528a
cluster,hack: Use community infra GCS bucket for retrieving CI builds 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-07-03 17:04:54 -04:00
Sergey Kanzhelev
dffc2a60a2 deprecate and disable by default DynamicKubeletConfig feature flag 2021-07-02 23:53:11 +00:00
Kubernetes Prow Robot
57720afb7e
Merge pull request #103387 from SergeyKanzhelev/makeSureToSplitNPDHashesByArch 
make sure to split NPD hashes by architecture when upgrading to 0.8.9
 2021-07-02 13:38:46 -07:00
Kubernetes Prow Robot
a331cf74b7
Merge pull request #102050 from pohly/fix/deflake-metrics-proxy 
remove metrics proxy
 2021-07-02 12:30:10 -07:00
Marian Lobur
5d80d6e7c3 Make cpu request of kube proxy configurable by env variable. 2021-07-02 16:00:56 +02:00
Patrick Ohly
c91496dda0 cluster: enable debug handlers on GCE master nodes 
This is needed for testing metrics support via the secure port
of kube-scheduler and kube-controller-manager. To access that
port, port-forwarding is used.
 2021-07-02 10:38:49 +02:00
Kubernetes Prow Robot
e524a5ab42
Merge pull request #103282 from MrHohn/cpa-multi-arch 
Update dns-horizontal-autoscaler to use the multi-arch image
 2021-07-01 11:47:42 -07:00
Piotr Tabor
de442ef860 Retry hostname->IP: [Errno -2] Name or service not known 
During cluster configuration, the hostname is getting resolved to IP,
as etcd requires IP address as listening address.

Due to connectivity flakes or delayed network inititalization, sometimes
the IP fails to be resolved to a name with following error:
```
[Errno -2] Name or service not known
```
that leads to attempt to run etcd with empty flag.

The PR adds a proper retry (up to 5 minutes) in case the connectivity
problems happens.

I considered alternatives like: `getent hosts foo`, but unfortunetelly thay
can return IPv6 that etcd is not ready for (yet).
 2021-07-01 12:20:07 +02:00
Sergey Kanzhelev
210c610d66 make sure to split NPD hashes by architecture when upgrading to 0.8.9 2021-07-01 08:12:35 +00:00
Kubernetes Prow Robot
d787eaa4d5
Merge pull request #103332 from mcshooter/updateNPDVersion 
Update NPD release version and include windows defender config
 2021-06-30 01:19:02 -07:00
Kubernetes Prow Robot
61ee139a08
Merge pull request #103070 from jeremyje/logspam 
GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam.
 2021-06-29 18:29:02 -07:00
Michelle Tandya
03f85e9ade Update NPD release version and include windows defender config 2021-06-30 00:00:32 +00:00
Kubernetes Prow Robot
ebcb4a2d88
Merge pull request #103104 from pacoxu/npd-088 
update npd to v0.8.8
 2021-06-29 02:30:40 -07:00
pacoxu
ffdf3f5007 update node-problem-detector npd to v0.8.8 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-Authored-By: vteratipally <vteratipally@users.noreply.github.com>
 2021-06-29 09:35:32 +08:00
Zihong Zheng
f59523ab4c Update dns-horizontal-autoscaler to use the wqmulti-arch image 2021-06-28 16:53:32 -07:00
Kubernetes Prow Robot
6010cbe593
Merge pull request #103040 from shu-mutou/sig-ui-leads 
Add shu-mutou to dashboard approvers
 2021-06-28 02:19:49 -07:00
Joyce Kung
42f9333e7f Update debian-base image to buster-v1.8.0 2021-06-25 20:38:15 -04:00
Kubernetes Prow Robot
a2206b6891
Merge pull request #96615 from caseydavenport/casey-route-table-range 
Configure Calico's route table range so it does not conflict with GKE CNI
 2021-06-25 05:18:44 -07:00
Marek Siarkowicz
ebe550bd48 Upgrade etcd to 3.5.0 2021-06-24 09:15:17 +02:00
Kubernetes Prow Robot
e120459000
Merge pull request #102952 from wpedrak/master 
Specify etcdctl version in livenessProbe
 2021-06-22 18:28:22 -07:00
pacoxu
f05f30943d kube-apiserver in gce: use --api-audiences as --service-account-api-audiences is deprecated 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-06-22 11:09:46 +08:00
Shu Muto
d95f677dd8
Fix OWNERS 2021-06-22 10:08:13 +09:00
Jeremy Edwards
44360b315c GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam. 2021-06-21 23:46:27 +00:00
Jeremy Edwards
7839668877 GCE Windows: Set TCP/IP parameters to keep idle connections alive on GCE. 2021-06-21 23:00:32 +00:00
Mauricio Poppe
e2061cfcd8 Expose envvar CSI_PROXY_VERSION 2021-06-21 18:33:23 +00:00
wpedrak
6cb448c10e Specify etcdctl version for livenessProbe 
`--command-timeout` is supported in `ETCDCTL_API` version 3 and it is NOT supported in `ETCDCTL_API` version 2. Up to etcd 3.3 (inclusive) default version of `ETCDCTL_API` was 2. This change explicitly defines used `ETCDCTL_API` and allows usage of etcd versions below 3.4.
 2021-06-21 16:12:32 +02:00
tiloso
b22d0b13cc Fix verify staticcheck flake in cluster/images/etcd 2021-06-21 12:05:42 +02:00
Shu Muto
ea419eaf33 Add shu-mutou to dashboard approvers 
Also, update members.
 2021-06-21 18:39:43 +09:00
Kubernetes Prow Robot
ba50598ae5
Merge pull request #102386 from JornShen/bump_calico_to_v3.19.1 
bump calico to v3.19.1
 2021-06-18 18:12:50 -07:00
Vinayak Goyal
774d228637 remove the path if it exists before writing pki data. 
if setfacl is called before chmod g+r at anypoint during the lifetime of
the cluster then the default group does not have read permissions on the
file. so we explicitly grant the default group read permissions. See
https://gist.github.com/mmdriley/85ca34f711acbec4b1b94902add488e5 for a
repro.
 2021-06-18 11:03:37 -07:00
Kubernetes Prow Robot
d89c11a0d4
Merge pull request #102629 from tiloso/staticcheck-cluster-apimachinery-apiserver 
Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver}
 2021-06-18 09:52:06 -07:00
pacoxu
4ee38f33d2 update etcd makefile to build v3.5.0 image 2021-06-16 14:41:44 +08:00
Kubernetes Prow Robot
3a47ddccdf
Merge pull request #100488 from liggitt/protobuf 
update etcd, grpc, protobuf dependencies
 2021-06-15 14:49:42 -07:00
Kubernetes Prow Robot
b43e4ec89b
Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits 
kube-scheduler: stop using insecure serving bits
 2021-06-15 13:42:12 -07:00
Jordan Liggitt
2979c3325e Switch to go.etcd.io/etcd/client/v3 2021-06-15 09:53:06 -04:00
Jordan Liggitt
5f1983d871 Drop etcd v2 support from etcd migration image 2021-06-15 09:53:05 -04:00
Kubernetes Prow Robot
b766721332
Merge pull request #102814 from cheftako/master 
Update K/K to use ANP v0.0.20
 2021-06-14 19:00:33 -07:00
Jan Chaloupka
7560f33e27 kube-scheduler: stop using insecure serving bits 2021-06-14 22:50:53 +02:00
Kubernetes Prow Robot
1400be60ff
Merge pull request #102495 from jeremyje/fb177 
GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression.
 2021-06-11 17:03:01 -07:00
Walter Fender
9f7d61c520 Upgrade ANP components to v0.0.20. 
Pick up new metrics to help with debugging and monitoring.
Pick up GRPC keep alive on frontend tunnel.
Server now using apps/options.
 2021-06-11 09:02:04 -07:00
Joseph Anttila Hall
9d514b2de4 Konnectivity: tune flags for larger clusters (5k nodes). 2021-06-10 14:05:44 -07:00
Kubernetes Prow Robot
f008ba0fed
Merge pull request #102062 from serathius/etcd-server 
Update Etcd server image to 3.5.0-rc.0-0
 2021-06-10 08:23:27 -07:00
Kubernetes Prow Robot
4f854e39f2
Merge pull request #102689 from cpanato/go1165 
[go1.16] Update to go1.16.5
 2021-06-09 12:31:27 -07:00
Marek Siarkowicz
12447bc803 Upgrade etcd server version to 3.5.0-rc.0 2021-06-09 17:00:05 +02:00
Mengjiao Liu
dc5626cc18 Upgrade debian-base to buster v1.7.1 2021-06-09 14:30:31 +08:00
Kubernetes Prow Robot
4413ed50dd
Merge pull request #102585 from serathius/etcd-v3.5.0-rc.0 
Update etcd makefile to build v3.5.0-rc.0 image
 2021-06-08 12:26:28 -07:00
Carlos Panato
1524526991
[go1.16] Update to go1.16.5 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-06-08 14:11:32 +02:00
Kubernetes Prow Robot
028bffba58
Merge pull request #102661 from Jefftree/patch-4 
Default GCE testing to using konnectivity
 2021-06-07 11:45:08 -07:00
Kubernetes Prow Robot
3d2a7c146e
Merge pull request #102370 from JacobX33/master 
Remove set errexit from etcd manifest
 2021-06-07 08:16:40 -07:00
Jeffrey Ying
7a63dff88b
Update konnectivity default 2021-06-07 11:06:28 -04:00
Kubernetes Prow Robot
9d27400fe2
Merge pull request #102040 from njuptlzf/fix_conversion 
Fix auditing failed of request: encoding failed
 2021-06-05 19:58:38 -07:00
njuptlzf
7b0fbb7292 add audit log test cases for cross-group subresource 2021-06-06 09:52:05 +08:00
tiloso
c5d70e9db1 Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver} 2021-06-05 22:15:15 +02:00
Kubernetes Prow Robot
74af3b712d
Merge pull request #102297 from deads2k/ssh-tunnels 
remove --ssh- options, deprecated 13 releases, that only work on GCE
 2021-06-05 10:40:50 -07:00
Kubernetes Prow Robot
e6a8bc9fbe
Merge pull request #90368 from serathius/remove-legacy-metrics 
Remove legacy metrics client from podautoscaler
 2021-06-05 08:44:38 -07:00
Marek Siarkowicz
4ebc0c94a4 Remove legacy metrics client from podautoscaler 2021-06-04 23:06:32 +02:00
Paco Xu
7f06d0d553
add NoExecute toleration for konnectivity agent 2021-06-04 17:39:02 +08:00
Marek Siarkowicz
82be7aad26 Update etcd makefile to build v3.5.0-rc.0 image 2021-06-04 08:31:19 +02:00
Shihao Xia
f1c1992f5e fix potential deadlock 2021-06-03 21:48:34 -04:00
David Eads
ae603a38bc remove -ssh-user from cluster scripts for GCE 2021-06-03 17:53:09 -04:00
Jeremy Edwards
47a7fcb17b GCE Windows: Only create NPD kubeconfig when the file path is defined. 2021-06-02 21:15:45 +00:00
Maciej Szulik
1619e8eb95
Clean apply's prune and kube addons with batch/v1 CronJob 2021-06-02 14:27:29 +02:00
Walter Fender
355be99390 Default GCE testing to using konnectivity 
Turning GRPC based Konnectivity testing on id advance of
removing the SSHTunnel code.
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=25
shows the feature to be stable and it should remain that way.
 2021-06-01 16:53:41 -07:00
Jeremy Edwards
3cb4f3e1bf GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression. 2021-06-01 16:25:21 +00:00
Kubernetes Prow Robot
bc8acbc43e
Merge pull request #102328 from lentzi90/update-cni-plugins 
Update CNI plugins v0.9.1
 2021-05-28 10:16:46 -07:00
jornshen
c9fe8ddf68 bump calico to v3.19.1 2021-05-28 10:29:44 +08:00
David Ashpole
3813ed1ef7 fix prometheus-to-sd image for fluentbit 2021-05-27 10:54:10 -07:00
Jakub Sroka
ac17d03e76
Remove set errexit from etcd manifest 
There were cases where this caused etcd to crashloop. It seems lesser evil to let migrator fail instead.
 2021-05-27 14:25:35 +02:00
Kubernetes Prow Robot
d541872f9a
Merge pull request #102239 from Haleygo/clean-up-AlgorithmProvider-flag-and-pkg 
clean up algorithmprovider pkg and remove scheduler deprecated algorithm-provider flag
 2021-05-27 00:54:23 -07:00
Lennart Jern
507710b50f
Update CNI plugins v0.9.1 
ref: https://github.com/containernetworking/plugins/releases/tag/v0.9.1
Signed-off-by: Lennart Jern <lennart.jern@est.tech>
 2021-05-26 11:02:04 +03:00
Haleygo
2769e99dba remove scheduler deprecated algorithm-provider flag and clean up algorithmprovider pkg 2021-05-26 13:19:44 +08:00
Marko Mudrinić
80fa50e0d7
Update etcd image revision 
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
 2021-05-25 22:49:20 +02:00
Marko Mudrinić
33fe4bb076
Update debian-base to buster-v1.7.0 
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
 2021-05-25 22:49:03 +02:00
Kubernetes Prow Robot
fd82c69957
Merge pull request #102277 from serathius/etcd-image 
Update etcd makefile to build v3.5.0-beta.3 image
 2021-05-25 13:46:54 -07:00
Marek Siarkowicz
e862421c2b Update etcd makefile to build v3.5.0-beta.3 image 2021-05-25 15:37:22 +02:00
Sascha Grunert
b167fc24d7
Update pause image to v3.5 
Update dependencies and the test images to use pause 3.5. We also
provide a changelog entry for the new container image version.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-05-25 09:04:46 +02:00
Kubernetes Prow Robot
b876623070
Merge pull request #102264 from jeremyje/fb176 
Upgrade Fluent-Bit 1.7.6.
 2021-05-24 21:49:29 -07:00
Kubernetes Prow Robot
06d44d2f42
Merge pull request #101168 from mikedanese/warning 
add a warning about the filter table
 2021-05-24 21:48:40 -07:00
walter
13ab65d356 Upgrade konnectivity-client for GRPC connection fixes 
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167.
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5.
 2021-05-24 14:53:30 -07:00
Kubernetes Prow Robot
ccbb7dbe54
Merge pull request #102070 from bskiba/master 
Update addon resizer to 1.8.13
 2021-05-24 13:38:41 -07:00
Kubernetes Prow Robot
0d46e728dd
Merge pull request #101486 from dashpole/updates_images 
Update event-exporter and prometheus-to-sd versions in cluster addons
 2021-05-24 13:38:32 -07:00
Jeremy Edwards
54f3eb42e9 Upgrade Fluent-Bit 1.7.6. 2021-05-24 19:51:00 +00:00
Kubernetes Prow Robot
77937b1e8e
Merge pull request #101628 from bobbypage/addon-termination-handler 
Remove node termination handler addon
 2021-05-24 11:31:39 -07:00
Beata Lach (Skiba)
7d2e6d7ba9 Update addon resizer to 1.8.13 
Needed to fix https://github.com/kubernetes/autoscaler/issues/3567
 2021-05-24 18:58:08 +02:00
Kubernetes Prow Robot
d7903669c4
Merge pull request #96299 from ggriffiths/snapshot_controller_metrics_e2e_tests 
Add Snapshot Controller e2e metric tests
 2021-05-23 03:33:37 -07:00
Kubernetes Prow Robot
fb3273774a
Merge pull request #99178 from wilsonehusin/distroless-conformance 
Use distroless to build Conformance image
 2021-05-21 13:32:11 -07:00
Grant Griffiths
564e531aa7 Add Snapshot Controller e2e metric tests 
Signed-off-by: Grant Griffiths <ggriffiths@purestorage.com>
 2021-05-20 23:29:23 -07:00
Kubernetes Prow Robot
3cc0ca0988
Merge pull request #102129 from SataQiu/clean-critical-pod-annotation 
Cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation
 2021-05-19 15:25:31 -07:00
Kubernetes Prow Robot
8c0d06aad8
Merge pull request #101869 from olagacek/master 
Set poll period of metrics server nanny to 30s
 2021-05-19 11:14:51 -07:00
SataQiu
ff18e391e9 cleanup useless 'scheduler.alpha.kubernetes.io/critical-pod' annotation 2021-05-19 17:46:35 +08:00
Kubernetes Prow Robot
e830610854
Merge pull request #101539 from jeremyje/installnpd 
Install Node Problem Detector on GCE Windows nodes
 2021-05-18 20:16:50 -07:00
Kubernetes Prow Robot
75ec50bc10
Merge pull request #102024 from jeremyje/upgradefb 
GCE Windows: Fix Fluent-bit crashloop on Windows Event Log Ingestion
 2021-05-18 19:14:50 -07:00
Jeremy Edwards
09f9537338 Install Node Problem Detector on GCE Windows nodes 2021-05-15 16:14:17 +00:00
Geon-Ju Kim
181485212b Remove unnecessary quotes from get-kube scripts 2021-05-15 13:27:09 +09:00
Jeremy Edwards
2f87f280fe GCE Windows: Upgrade to fluent-bit 1.7.5 2021-05-14 21:23:30 +00:00
André Bauer
ccedb1cd64 remove kibana system:anonymous rbac 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2021-05-14 19:10:45 +02:00
Kubernetes Prow Robot
ee9f365c51
Merge pull request #100169 from coffeepac/pc/es-7.10.2 
rev ES and allow anonymous access to kibana
 2021-05-14 03:58:04 -07:00
Kubernetes Prow Robot
e8cf412e5e
Merge pull request #101881 from vinayakankugoyal/konnectivity 
Update konnectivity network proxy server to run as non-root, by defau…
 2021-05-13 23:16:04 -07:00
Sergey Kanzhelev
72fe1b722c Make the service account error more apparent 2021-05-14 04:39:24 +00:00
Vinayak Goyal
b951b9349f Update konnectivity network proxy server to run as non-root, by default in kube-up. 2021-05-13 12:35:34 -07:00
David Ashpole
febf9d9366 update event-exporter and prometheus-to-sd versions in cluster addons 2021-05-13 11:40:41 -07:00
Pat Christopher
aba965b559
rev ES and allow anonymous access to kibana 2021-05-12 19:23:04 -07:00
Avritt Rohwer
0a5a697882 Fix bug in retry-forever usage. 
- Push retry-forever wrapping to curl invocations.
- Collect curl retry flags into a single variable.
- Remove 'sudo: false' in master.yaml, is unnecessary and breaks older
  cloud-init versions.
- Change log-error status reason to be more accurate.
- Fix the some 'python' invocations to 'python3'.
 2021-05-12 09:22:20 -07:00
Kubernetes Prow Robot
1bd00776b5
Merge pull request #101874 from tallclair/owners 
Remove tallclair for gce owners
 2021-05-10 13:49:48 -07:00
Kubernetes Prow Robot
7563d3092e
Merge pull request #96216 from knight42/refactor/disable-insecure-port-in-ctrler-mgr 
refactor: disable insecure serving in controller-manager
 2021-05-10 13:49:36 -07:00
Tim Allclair
9d349b6d21 Remove tallclair for gce owners 2021-05-10 10:21:17 -07:00
olagacek
a492762995
Set poll period of metrics server nanny to 30s 
Set poll period of fetching changes from k8s api of metrics server nanny to 30s. 
This will enable faster scaling of metrics server
 2021-05-10 15:59:31 +02:00
Kubernetes Prow Robot
8ddabd0da5
Merge pull request #101810 from caseydavenport/casey-fix-calico-crds 
Fix improperly formatted Calico CRD files
 2021-05-07 21:29:29 -07:00
Casey Davenport
e22773bc30 Fix improperly formatted Calico CRD files 2021-05-07 13:48:43 -07:00
Stephen Augustus
5b530da51f [go1.16] Update to go1.16.4 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-05-07 15:47:54 -04:00
Kubernetes Prow Robot
8b1c82a34c
Merge pull request #101772 from swetharepakula/bump-glbc-image 
Update glbc image to v1.12.0
 2021-05-06 22:05:02 -07:00
Kubernetes Prow Robot
ca0c04e4d3
Merge pull request #101164 from vinayakankugoyal/apiservernonroot 
Run control-plane as non root in kube-up.
 2021-05-06 17:33:14 -07:00
Swetha Repakula
8c8db0d8e9 Update glbc image to v1.12.0 
- glbc now uses networking.k8s.io/v1 Ingress
 2021-05-06 15:20:05 -07:00
Kubernetes Prow Robot
1f3fd1cb80
Merge pull request #101751 from vinayakankugoyal/sshproxy 
Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as…
 2021-05-06 15:15:51 -07:00
Kubernetes Prow Robot
8955f55fcf
Merge pull request #101678 from vinayakankugoyal/goodbye-basicauth 
Remove remnants of basic auth from cluster bootstrap.
 2021-05-06 14:14:14 -07:00
Vinayak Goyal
6aa495ddc6 Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-06 14:02:53 -07:00
Wilson E. Husin
a893521948 Add deadline for deprecation 2021-05-06 11:44:59 -07:00
pacoxu
6d86fc6a15 removed deprecated apiextensions.k8s.io/v1beta1; use extension v1. 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-05-06 11:27:58 +08:00
Kubernetes Prow Robot
add13090e2
Merge pull request #101732 from spencer-p/master 
Promote kube-addon-manager to v9.1.5
 2021-05-05 18:49:17 -07:00
Vinayak Goyal
487583bd0a Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 15:23:04 -07:00
Vinayak Goyal
406ceae991 Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 14:49:59 -07:00
Vinayak Goyal
5d8c89b164 Run control-plane as non root in kube-up. 2021-05-05 14:46:28 -07:00
Jeremy Edwards
daa5be1d01 GCE Windows: Do not install docker when containerd CRI is selected. 2021-05-05 21:06:33 +00:00
Kubernetes Prow Robot
7d176851f2
Merge pull request #100612 from pacoxu/patch-8 
kubeadm: upgrade etcd to 3.4.13-3
 2021-05-05 07:11:27 -07:00
Spencer Peterson
a119b767d0 Promote kube-addon-manager to v9.1.5 
Change-Id: Iffebad61634831b0c34eb54517a2543c75c55d68
 2021-05-04 12:14:52 -07:00
David Porter
dac06aefb0 Revert "Revert "cluster: Use python3 everywhere"" 
This reverts commit 7038338e0f.
 2021-05-03 21:43:15 -07:00
Jian Zeng
e481d99965
refactor: disable insecure serving in controller-manager 
Now the following flags have no effect and would be removed in v1.24:
* `--port`
* `--address`

The insecure port flags `--port` may only be set to 0 now.

Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
 2021-05-03 00:01:49 +08:00
Kubernetes Prow Robot
c5b900b69c
Merge pull request #97399 from davidxia/comment-typo 
Fix typo in comment
 2021-05-01 04:57:59 -07:00
Vinayak Goyal
b87762966d Remove remnants of basic auth from cluster bootstrap. 2021-04-30 11:23:14 -07:00
Kubernetes Prow Robot
f235adc4d2
Merge pull request #101621 from jeremyje/fixfb 
GCE Windows: mkdir -p fluent-bit pos-files directory.
 2021-04-30 10:24:39 -07:00
Daniel Kłobuszewski
447b0ca705 Bump metrics server to use 0.4.4 image. 2021-04-30 09:13:39 +02:00
Kubernetes Prow Robot
663b425e21
Merge pull request #101417 from pacoxu/node-local-dns-docs 
update node local dns readme for ipv6 and 1.18 GA
 2021-04-29 18:10:19 -07:00
Kubernetes Prow Robot
551ef71b64
Merge pull request #100256 from sarandia/metricsserverarch 
bump metrics server version to v0.3.7 and make it multi-arch
 2021-04-29 18:09:58 -07:00
Jeremy Edwards
5c713379a0 GCE Windows: mkdir -p fluent-bit pos-files directory. 2021-04-29 22:52:38 +00:00
David Porter
e02ff0687e Remove node termination handler addon 2021-04-29 14:42:23 -07:00
Kubernetes Prow Robot
06eeec737a
Merge pull request #101439 from prameshj/update-kubedns 
Update to using kubedns 1.17.3 image.
 2021-04-29 09:01:04 -07:00
Kubernetes Prow Robot
f631c0e520
Merge pull request #101271 from jeremyje/fixfb 
Fix fluent-bit configuration for GCE Windows.
 2021-04-27 19:06:49 -07:00
Ziyuan Chen
7a5508c0a7 bump metrics server version to v0.3.7 and make it multi-arch 
Bumping the metrics-server version to v0.3.7. In this version,
metrics-server started building multi-arch images. To properly support
non-amd64 nodes, we should bump the version and remove the -amd64 in the
image path. (https://github.com/kubernetes-sigs/metrics-server/pull/492)

```release-note
metrics-server now uses v0.3.7 and supports multi-arch Kubernetes nodes.
```
 2021-04-27 20:48:21 +00:00
Kubernetes Prow Robot
2f753ec4c8
Merge pull request #101473 from pacoxu/revert-101437-python3 
Revert "cluster: Use python3 everywhere"
 2021-04-26 12:54:37 -07:00
Paco Xu
7038338e0f
Revert "cluster: Use python3 everywhere" 2021-04-26 11:21:44 +08:00
songxiao-wang87
4f254674fa Making a run test. 
Signed-off-by: songxiao-wang87 <wang.xiaosong23@zte.com.cn>
 2021-04-25 10:46:18 +08:00
Pavithra Ramesh
2c2dd6b072 Update to using kubedns 1.17.3 image. 2021-04-23 14:59:38 -07:00
David Porter
3f87f4f278 Use python3 everywhere 2021-04-23 14:33:58 -07:00
pacoxu
58114e293f update node local dns readme for ipv6 and 1.18 GA 2021-04-23 17:04:55 +08:00
Kubernetes Prow Robot
ae35c6f10c
Merge pull request #101255 from basantsa1989/stack-type 
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
 2021-04-22 15:55:28 -07:00
Jeremy Edwards
e62301c87d Fix fluent-bit configuration for GCE Windows. 2021-04-22 20:04:54 +00:00
Kubernetes Prow Robot
6aa683e9cf
Merge pull request #100639 from zshihang/proxy 
dnat to 169.254.169.252 for metadata server traffic
 2021-04-21 11:15:51 -07:00
Ikko Ashimine
f69a2b40da
Fix typo in gci/README.md 
becase -> because
 2021-04-21 21:35:05 +09:00
Kubernetes Prow Robot
3cc043cfd2
Merge pull request #101262 from spencer-p/master 
Upgrade addon-manager baseimage to debian-base v1.0.1
 2021-04-20 20:36:22 -07:00
Kubernetes Prow Robot
41505f7109
Merge pull request #101176 from jkh52/master 
kube-master-installation: improve systemd cross-unit robustness.
 2021-04-20 00:42:45 -07:00
Spencer Peterson
530072a38f Addon-manager baseimage upgrade debian-base v1.0.1 
The previous base image, debian-base:v1.0.0, is affected by
CVE-2017-14062. This change upgrades to the most recent Debian stretch
image from the following command:

```
$ gcloud container images list-tags k8s.gcr.io/debian-base-amd64
DIGEST        TAGS    TIMESTAMP
7e9f2f88b813  v1.0.1  2020-02-18T13:18:50
d7be39e143d4  v2.0.0  2019-11-01T13:14:18
5f25d97ece90  v1.0.0  2019-03-25T10:59:09
dddca919baec  1.0.0   2019-03-25T09:43:09
```

This marks kube-addon-manager version 9.1.5.

Change-Id: I02321a781fb19dd33c0a19671b56c0b12d9b52fd
 2021-04-19 20:36:44 -07:00
Kubernetes Prow Robot
46b0ad1327
Merge pull request #101207 from vinayakankugoyal/sshproxy 
If kube-apiserver is running as non-root then set the permissions of …
 2021-04-19 17:24:33 -07:00
Joseph Anttila Hall
05bcc72dc2 kube-master-installation: reboot on failure. 
Also some minor reliability tweaks.
 2021-04-19 17:16:21 -07:00
Vinayak Goyal
94e34da471 If kube-apiserver is running as non-root then set the permissions of /etc/srv/sshproxy accordingly. 2021-04-19 13:16:06 -07:00
Basant Amarkhed
e15d811652 Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code) 2021-04-19 19:06:55 +00:00
Shihang Zhang
297ad30610 dnat to 169.254.169.252 for metadata server traffic 2021-04-19 10:47:51 -07:00
Kubernetes Prow Robot
4925cb66c9
Merge pull request #101238 from loburm/move_deprecated 
Add required fields to fluentd-gcp-scaler-policy CRD.
 2021-04-19 08:02:36 -07:00
Marian Lobur
41e39dd1fa Add required fields to fluentd-gcp-scaler-policy CRD. 2021-04-19 16:01:46 +02:00
Stephen Augustus
fac97f8a9b [go1.16] Update to go1.16.3 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-04-16 19:56:51 -04:00
Kubernetes Prow Robot
3ed71cf190
Merge pull request #100976 from jindijamie/master 
releng: Update debian-base and debian-iptables to buster-v1.6.0 to patch base image CVEs
 2021-04-16 12:56:34 -07:00
Kubernetes Prow Robot
28c877dcb6
Merge pull request #101043 from benhxy/tls-2 
Use GKE specific configuration for kubeconfig file generation
 2021-04-16 11:54:51 -07:00
Kubernetes Prow Robot
7ecd93ea1e
Merge pull request #100764 from benhxy/tls 
Use GKE specific configuration for kube-apiserver SNI cert
 2021-04-15 19:52:22 -07:00
Jeremy Edwards
c22f001a1b GCE Windows: Use authenticated HTTP GET against GCS if VM has cloud-platform scope. 2021-04-15 23:30:19 +00:00
Mike Danese
ba3fc65072 add a warning about the filter table 2021-04-15 16:22:28 -07:00
Kubernetes Prow Robot
0d0d1889ed
Merge pull request #100930 from swetharepakula/update-glbc-image 
Update glbc image in glbc addon
 2021-04-15 12:59:01 -07:00
Kubernetes Prow Robot
24350a922e
Merge pull request #101086 from enj/enj/i/auth_owners_gen 
Prune stale entries from OWNERS files
 2021-04-15 08:27:50 -07:00
pacoxu
9847579699 gcp/kubeadm: upgrade etcd to 3.4.13-3 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-04-15 11:19:41 +08:00
Kubernetes Prow Robot
74497632f4
Merge pull request #101015 from mborsz/retry 
Do not grep for curl --help for --retry-connrefused
 2021-04-14 07:02:57 -07:00
Kubernetes Prow Robot
50da4c6f61
Merge pull request #101021 from loburm/move_deprecated 
Switch fluentd-gcp-scaler policy to non deprecated api.
 2021-04-14 04:30:42 -07:00
Maciej Borsz
493adbada9 Do not grep for curl --help for --retry-connrefused 2021-04-14 08:32:21 +02:00
Swetha Repakula
f882eadbdc Update glbc image in addon 2021-04-13 19:32:03 -07:00
Kubernetes Prow Robot
f1c037889d
Merge pull request #100770 from avrittrohwer/configure-script-logging 
Add configure script logging instrumentation
 2021-04-13 18:06:42 -07:00
Monis Khan
91241eac9b
Prune stale entries from OWNERS files 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-04-13 20:54:50 -04:00
Kubernetes Prow Robot
318db993c8
Merge pull request #101020 from cindy52/bugfix/etcd 
Change file owner of /mnt/disks/master-pd/var/etcd  instead of /var/etcd
 2021-04-13 12:09:47 -07:00
Avritt Rohwer
d4495183c9 Add configure script logging instrumentation. 
- Add log functions to facilitate debug logging.
- Wrap commands called in main with debug logging.
- Configure a systemd service to forward the logs to the serial port.
- Add a 'retry-forever' function to harden download steps.
- Add default value support to 'get-metadata-value' function.
- Fix some spellcheck lints.
 2021-04-13 09:30:49 -07:00
Ben Hu
e3270e532c GKE specific kubeconfig 2021-04-12 22:47:39 +00:00
Ben Hu
ccb742c43c Resolve comments. Remove kubeconfig changes. 2021-04-12 22:39:53 +00:00
jindijamie
d1b205c9fd
Update Makefile 2021-04-12 14:32:54 -07:00
Marian Lobur
d4de8438e3 Switch fluentd-gcp-scaler policy to non deprecated api. 
Starting from Kubernetes 1.22 apiextensions.k8s.io/v1beta1 is removed.
Instead apiextensions.k8s.io/v1 should be used: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#customresourcedefinition-v122
 2021-04-12 10:28:50 +02:00
Cindy Guo
03f60f4b60 chown on /mnt/disks/master-pd/var/etcd instead of /var/etcd 2021-04-12 08:21:01 +00:00
Kubernetes Prow Robot
a96000311f
Merge pull request #100956 from saschagrunert/cri-tools 
Update cri-tools to v1.21.0
 2021-04-12 00:35:59 -07:00
Kubernetes Prow Robot
dd95f3ab5a
Merge pull request #100980 from ibabou/update-containerd-path 
Update the containerd runtime binary path - gce
 2021-04-11 06:21:59 -07:00
Kubernetes Prow Robot
99301e672b
Merge pull request #100436 from vinayakankugoyal/apiservernonroot 
Fix kube-apiserver manifest.
 2021-04-10 20:29:35 -07:00
Antonio Ojea
93f4727aab gce configure containerd default_runtime_name 
move config to v2
 2021-04-11 00:48:22 +02:00
“Ibrahim
ec38cfcd15 Update the containerd runtime binary path - gce 2021-04-09 23:36:58 +00:00
jindijamie
7e7a6284be update debian-base to buster-v1.5.0 for CVEs 2021-04-09 19:27:10 +00:00
Kubernetes Prow Robot
5b038e6cff
Merge pull request #100635 from cindy52/etcd/rootless 
Run the etcd as non-root
 2021-04-09 05:19:37 -07:00
Sascha Grunert
33e0e035ea
Update cri-tools to v1.21.0 
This updates crictl to the latest available release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-04-09 11:05:13 +02:00
Kubernetes Prow Robot
16082557cd
Merge pull request #100353 from zshihang/master 
strip prefix 'v' in coredns version if exists
 2021-04-08 20:29:55 -07:00
Kubernetes Prow Robot
96db2323a4
Merge pull request #100041 from vteratipally/update_npd_version 
bump npd version to latest v0.8.7
 2021-04-08 17:10:55 -07:00
Kubernetes Prow Robot
d8f3794b83
Merge pull request #68004 from saravanan30erd/fluentd-es 
isolate logging resources in separate namespace
 2021-04-08 14:26:31 -07:00
Cindy Guo
9f058079d2 run etcd as nonroot 
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com>
 2021-04-08 20:51:45 +00:00
Kubernetes Prow Robot
efad544195
Merge pull request #100257 from swetharepakula/glbc-rbac-services 
Add `service/status` glbc rbac permissions
 2021-04-07 07:53:53 -07:00
Ben Hu
a2d094797d Use GKE specific configuration in startup scripts in GKE deployment. 2021-04-02 00:10:53 +00:00
Vinayak Goyal
4b3271a542 Fix kube-apiserver manifest. 2021-03-21 16:24:56 -07:00
“Ibrahim
bc3f6c1be9 Fix the containerd service check 2021-03-19 23:35:05 +00:00
saravanan palanisamy
b9696ae455 remove namespace for clusterRoleBinding object - fluentd-es addon 2021-03-19 12:08:14 +04:00
Shihang Zhang
d313e69c9d strip prefix 'v' in coredns version if exists 2021-03-18 10:38:06 -07:00
Maciej Szulik
a3a26171d1
Run GCE unit tests as non-root 2021-03-18 12:14:24 +01:00
Kubernetes Prow Robot
158e1464ec
Merge pull request #99971 from ibabou/update-containerd 
Update containerd config for gce
 2021-03-16 15:56:56 -07:00
Kubernetes Prow Robot
0649dfbb52
Merge pull request #99990 from aojea/unboundv 
fix cluster util.sh unbound variable
 2021-03-16 07:24:35 -07:00
saravanan palanisamy
f0a95b80b3 update version for addon fluentd ES 2021-03-16 09:39:14 +04:00
Swetha Repakula
6e95ac1ce9 Add service/status glbc rbac permissions 2021-03-15 13:01:06 -07:00
saravanan palanisamy
f8f2dd76ca isolate logging resources in separate namespace 2021-03-13 13:42:32 +04:00
Wilson E. Husin
998edc84c7 Use Distroless base instead of static 2021-03-12 21:37:36 -08:00
Wilson E. Husin
aeef7e2f15 Add default value to KUBE_BASE_IMAGE_REGISTRY 2021-03-12 14:59:18 -08:00
Wilson E. Husin
b1c049efd8 Use configurable BASEIMAGE and RUNNERIMAGE 
Following example on /cluster/images/etcd/Makefile
 2021-03-12 13:20:35 -08:00
Kubernetes Prow Robot
23d4b3b4f0
Merge pull request #99965 from swetharepakula/glbc-rbac 
Add GLBC roles for IngressClass & GCPIngressParams
 2021-03-11 03:02:25 -08:00
Swetha Repakula
a8c5110f65 Add GLBC roles for IngressClass & GCPIngressParams 2021-03-10 16:36:54 -08:00
Stephen Augustus
13ef775df2 [go1.16] Update to go1.16.1 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-10 19:06:57 -05:00
Kubernetes Prow Robot
a5b5a685ec
Merge pull request #95655 from vteratipally/docker_daemon_json 
Moving docker options to daemon.json
 2021-03-10 15:00:23 -08:00
varsha teratipally
90983f66e4 Moving docker options to daemon.json 
As per the new docker guidelines about customizing the options
like adding registry-mirrors, moving the options to daemon.json
 2021-03-10 19:14:48 +00:00
Varsha Teratipally
82434ec818 bump npd version to latest v0.8.7 2021-03-09 22:48:27 +00:00
Wilson E. Husin
00d2a17b2a Use kubeconformance binary, deprecate gorunner and run_e2e 
Actual name change will take place later as it involves changes to test-infra and other repositories
 2021-03-09 13:41:36 -08:00
Jeremy Edwards
60df5606d6 Add Windows Defender exclusion for unpigz.exe 2021-03-09 19:52:25 +00:00
Antonio Ojea
6787d464ca fix cluster util.sh unbound variable 2021-03-09 09:18:23 +01:00
“Ibrahim
875396744f Update containerd config for gce 2021-03-09 01:13:44 +00:00
Wilson E. Husin
be3719a357 Use distroless/base:latest for Conformance image 
Going with the guess that nonroot is the problem of creating
/tmp/results/e2e.log in container

Removing manual creation of /tmp/results as well
 2021-03-08 16:18:10 -08:00
Wilson E. Husin
6d52c00084 Add binaries to PATH, use ENTRYPOINT 
Signed-off-by: Wilson E. Husin <wilsonehusin@gmail.com>
 2021-03-08 14:51:09 -08:00
Wilson Husin
3d281e952c Add /tmp/results directory with nonroot ownership 
Signed-off-by: Wilson Husin <whusin@vmware.com>
 2021-03-08 14:51:09 -08:00
Wilson Husin
4fafd1afef Use distroless to build Conformance image 
In order to avoid noisy / false positive CVE image scanning, Conformance
image is now be built based on Distroless.

Signed-off-by: Wilson Husin <whusin@vmware.com>
 2021-03-08 14:51:08 -08:00
Kubernetes Prow Robot
2d3acce39b
Merge pull request #99752 from pacoxu/coredns/promote 
update cluster/dns/coredns to 1.8.0 as kubeadm
 2021-03-08 12:07:28 -08:00
Benjamin Elder
03576473ce don't search bazel output paths for binaries 2021-03-07 12:47:00 -08:00
Kubernetes Prow Robot
1485c6b76f
Merge pull request #99822 from dekkagaijin/addon 
Update kube-addon-manager to v9.1.4
 2021-03-06 12:50:37 -08:00
Kubernetes Prow Robot
b33b426dd0
Merge pull request #99742 from ibabou/containerd-register 
Update gce Containerd initialization to handle the runtime existence case
 2021-03-06 12:50:05 -08:00
Jake Sanders
fb40ab2cde Update kube-addon-manager to v9.1.4 2021-03-04 22:39:46 -08:00
Kubernetes Prow Robot
96be00df69
Merge pull request #99749 from pacoxu/nodecache-1.17.0 
update node local dns to 1.17.0 for IPv6 support/hosts/trace plugins
 2021-03-04 20:32:43 -08:00
pacoxu
2185bb40d5 update clustere/dns/coredns to 1.8.0 as kubeadm 2021-03-05 09:38:15 +08:00
Kubernetes Prow Robot
379773630f
Merge pull request #97037 from neiljerram/calico-ip-autodetect 
Calico: set IP=autodetect so preempted nodes learn new IP
 2021-03-04 17:32:21 -08:00
Kubernetes Prow Robot
a2157b36b7
Merge pull request #98806 from rikatz/remove-extension-prune 
Remove extensions v1beta1 from addon manager and kubectl prune
 2021-03-04 14:40:47 -08:00
Kubernetes Prow Robot
7c4a9823f5
Merge pull request #99793 from pjh/log-message-fix 
Repair quotes for some Windows log messages
 2021-03-04 13:39:40 -08:00
Kubernetes Prow Robot
a7147bb113
Merge pull request #98968 from liggitt/kam-lease 
Switch add-on manager to use lease for leader election
 2021-03-04 13:38:39 -08:00
Kubernetes Prow Robot
9d353ef277
Merge pull request #99691 from amwat/metadata-project 
[cluster/gce] Target the correct project while adding kubeconfig metadata to the master
 2021-03-04 00:29:31 -08:00
“Ibrahim
e58a0905de Update gce Containerd initialization to handle runtime existence case 2021-03-04 03:46:30 +00:00
pacoxu
a38ed2c5ce update node local dns to 1.17.0 for debian base chagne 2021-03-04 10:49:55 +08:00
Peter Hornyack
bacf7394cd Repair quotes for some Windows log messages 2021-03-03 12:40:53 -08:00
Amit Watve
d65a46c9c9 Target the correct project while adding master kubeconfig metadata. 2021-03-03 00:47:43 -08:00
Peter Hornyack
3d2e9600d9 Dump detailed service information during Windows node startup 2021-03-02 15:55:40 -08:00
Stephen Augustus
3c2824e3db [go1.16] go.mod: update to go1.16 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-02 00:38:00 -05:00
Stephen Augustus
274133fe11 [go1.16] Update to go1.16 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-02 00:38:00 -05:00
Hiroshi Hatake
bf9f019c7d fluentd-elasticsearch: Add mechanism to load simple sniffer class to prevent unexpected sniffering 2021-03-01 11:03:24 +09:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Benjamin Elder
88f13fb17f drop unused sh_test targets 2021-02-25 23:11:39 -08:00
wojtekt
3a5d4d25bf Set progress-notify-interval to 5s for GCE provider 2021-02-25 17:23:24 +01:00
Kubernetes Prow Robot
9694e42099
Merge pull request #96134 from vinayakankugoyal/apiservernonroot 
Run kube-apiserver as non-root.
 2021-02-23 18:26:51 -08:00
Kubernetes Prow Robot
f4801a7c85
Merge pull request #98799 from claudiubelu/images/cleanup-run 
images: Removes containers after they've run
 2021-02-22 22:24:11 -08:00
Vinayak Goyal
c63ff05e6d Run kube-apiserver as non-root. 2021-02-22 20:48:16 -08:00
Kubernetes Prow Robot
874877fa44
Merge pull request #99216 from ruiwen-zhao/remove_modprobe 
Remove modprobe configs from configure-helper
 2021-02-22 17:24:32 -08:00
Kubernetes Prow Robot
b6e4c1c71a
Merge pull request #99242 from liu-cong/arm64 
Add arm64 support for GCE node configuration
 2021-02-19 16:55:41 -08:00
Kubernetes Prow Robot
1f27dcf70c
Merge pull request #99059 from vinayakankugoyal/dockerfile2 
Use ARG and --build-arg instead of sed for etcd image.
 2021-02-19 15:33:41 -08:00
Cong Liu
03709c0ece Add arm64 support for GCE node configuration 
Fix typo

Add TODO
 2021-02-19 14:22:26 -08:00
ruiwen-zhao
c053b232ba Remove modprobe configs from configure-helper 2021-02-18 22:57:44 +00:00
Jeremy Edwards
82417fe763 Add GCE Kubernetes option to enable Windows DSR. 2021-02-17 01:34:36 +00:00
Kubernetes Prow Robot
111d82f87f
Merge pull request #98974 from dekkagaijin/master 
Update kube-addon-manager image to v9.1.2
 2021-02-16 13:45:27 -08:00
Kubernetes Prow Robot
13bcc023f9
Merge pull request #98487 from pjh/readme-e2e 
Update e2e test instructions in GCE Windows README
 2021-02-16 11:55:33 -08:00
Kubernetes Prow Robot
f81235605a
Merge pull request #99074 from mrbobbytables/update-cluster 
cluster/* Remove inactive members from OWNERS
 2021-02-14 18:51:06 -08:00
Bob Killen
0298ab0473
cluster/kubemark: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek from an
approver to an emeritus_approver.
 2021-02-14 14:17:52 -05:00
Bob Killen
ffcb4b953c
cluster/images/kubemark: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek from an
approver to an emeritus_approver.
 2021-02-14 14:17:52 -05:00
Bob Killen
64f1eb7270
cluster/gce: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves gmarek and
jingax10 from approvers to emeritus_approvers.
 2021-02-14 14:17:52 -05:00
Bob Killen
9269f216a6
cluster/addons/kube-proxy: Remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves jingax10 from
an approver to an emeritus_approver.
 2021-02-14 14:17:31 -05:00
Bob Killen
8c06778a91
cluster/addons/dashboard: remove out-of-date MAINTAINERS.md 2021-02-14 10:13:44 -05:00
Bob Killen
2d433de8e0
cluster/addons/dashboard: remove inactive members from OWNERS 
As a part of cleaning up inactive members (those with no activity within
the past 18 months) from OWNERS files, this commit moves byrk from
approver to emeritus_approver.
 2021-02-14 10:13:44 -05:00
Vinayak Goyal
81df4d7dc4 Use ARG and --build-arg instead of sed for etcd image. 2021-02-13 01:07:27 -08:00
Kubernetes Prow Robot
f2be0bc1c7
Merge pull request #99024 from vinayakankugoyal/dockerfile3 
Use ARG instead of sed to set the base image for addon-manager.
 2021-02-12 20:41:04 -08:00
Vinayak Goyal
ad1e2ffab0 Use ARG instead of sed to set the base image for addon-manager. 2021-02-12 03:11:56 -08:00
Vinayak Goyal
a83519b5bf Use ARG instead of sed in the conformance image. 2021-02-12 02:55:33 -08:00
Benjamin Elder
299c561b10 portably configure tempdir in configure-helper.sh 
fixes a `make test` failure on macOS
 2021-02-12 01:15:14 -08:00
Jake Sanders
927eaffe19 Update kube-addon-manager image to v9.1.2 2021-02-11 09:38:39 -08:00
Kubernetes Prow Robot
e25b0cb6db
Merge pull request #98911 from Jeffwan/jiaxin/update_kubemark_args 
Remove CONTENT_TYPE in kubemark hollow template
 2021-02-11 01:48:15 -08:00
Kubernetes Prow Robot
20b03f6365
Merge pull request #90442 from joakimr-axis/joakimr-axis_gci-configure.sh 
Fix shellcheck failures in cluster/gce/gci/configure.sh
 2021-02-10 19:36:15 -08:00
Kubernetes Prow Robot
7fcd66c985
Merge pull request #98339 from monotek/fluentd112 
updated fluentd and all plugins
 2021-02-10 17:58:16 -08:00
Joakim Roubert
3dd3211c81 Fix shellcheck failures in cluster/gce/gci/configure.sh 
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2021-02-10 19:23:31 +01:00
Jordan Liggitt
c7e084eec0 Switch add-on manager to use lease for leader election 2021-02-10 12:05:03 -05:00