github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
96,061 Commits 1 Branch 31 Tags 1,019 MiB
acb43c7c4a
Commit Graph

9471 Commits

Author SHA1 Message Date
Jing Xu
57d0dc540d Add csi-proxy installation into node setup script 
This PR follows the same step to install and start csi-proxy as kubelet
binary
 2020-07-01 15:08:29 -07:00
Sandeep Rajan
adffc7fcca kube-up: update coredns to v1.7.0 2020-07-01 14:58:29 -04:00
Roy Yang
f86b720cf6 Update the COS E2E image policy 
Signed-off-by: Roy Yang <royyang@google.com>
 2020-06-30 15:24:35 -07:00
Michael Dresser
902a4db5fc Fixes an unnecessary failure during kube-up 
Also corrects bucket creation to use the project env var
 2020-06-30 21:05:55 +00:00
Sandeep Rajan
12bced9bfb add back anti-affinity 2020-06-30 11:29:29 -04:00
Kubernetes Prow Robot
908847c01e
Merge pull request #91526 from maciaszczykm/dashboard-v2.0.1 
Bump Dashboard to v2.0.1
 2020-06-30 05:28:06 -07:00
Kubernetes Prow Robot
6257f83f88
Merge pull request #92569 from dims/tolerate-slightly-different-containerd-urls 
Tolerate slightly different containerd urls
 2020-06-29 18:35:08 -07:00
Kubernetes Prow Robot
de491f11b1
Merge pull request #92444 from dims/additional-check-for-containerd-for-better-loading-images 
Additional test for loading images with containerd
 2020-06-29 18:34:40 -07:00
Joakim Roubert
0c48e0e1bb Find what fails pull-kubernetes-e2e-gce-ubuntu-containerd 
Change-Id: I7919d03926880cd9c93c61a07ada645ebfe32a89
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 09:43:37 +02:00
Joakim Roubert
b529485f65 Review update 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:58 +02:00
Joakim Roubert
605be2216b Sync with master 
Add fixes for newly added code.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:58 +02:00
Joakim Roubert
196ae34f9b Remove previously added '' no longer needed 
Adapt to changes on master since the first commit here.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
a20a005986 No quotes needed/wanted for CURL_RETRY_CONNREFUSED 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
1b9e9c6fe6 Add fix for run-kube-controller-manager-as-non-root 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
11f6d43747 Updates after review 
Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:57 +02:00
Joakim Roubert
4abf7da53e Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
3e211386c1 Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
d66456fe01 Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
6e8504003b Update cluster/gce/gci/configure-helper.sh 
Co-authored-by: Aaron Crickenberger <spiffxp@google.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
0c899b2bc2 Mitigate newly added shellcheck issues 
Issues not present when the original patch was created have now also
been fixed.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:56 +02:00
Joakim Roubert
826274c867 Updates after code review 
Add double quotes at assignments as requested by phenixblue.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:55 +02:00
Joakim Roubert
3fb0d1c15d Update after code review 
Simplified local variable declaration as suggested by phenixblue.

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-29 08:43:55 +02:00
Joakim Roubert
1f9704c713 Code review update 
Change-Id: I384a73efe995c529fb4b3636cb9639eafb90787f
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-06-29 08:43:55 +02:00
Joakim Roubert
80a8566a8c Fix shellcheck w/e in cluster/gce/gci/configure-helper.sh 
Change-Id: Ic8fca2509a7cb07f4170eaf25a878036d18ba51c
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-06-29 08:43:55 +02:00
Davanum Srinivas
a653c21479
Tolerate slightly different containerd urls 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-27 06:41:19 -04:00
Benjamin Elder
7dfe160c0c sort cluster/ OWNERS 2020-06-26 21:52:29 -07:00
Benjamin Elder
62eb860ddf spiffxp should be a cluster reviewer 2020-06-26 21:51:40 -07:00
Benjamin Elder
839223f6c8 Katharine is no longer active 2020-06-26 21:50:57 -07:00
Roy Yang
1b13308edb Fix sig-node-containerd/containerd-e2e-gci 
Signed-off-by: Roy Yang <royyang@google.com>
 2020-06-26 18:38:27 -07:00
Jordan Liggitt
a36aa9c31e Stop enabling alpha runtimeclass API 2020-06-25 20:29:11 -04:00
Kubernetes Prow Robot
a8abba5a17
Merge pull request #92498 from wojtek-t/bump_etcd_version 
Bump etcd revision after changes to migrate script
 2020-06-25 09:46:18 -07:00
Kubernetes Prow Robot
4a91ecb976
Merge pull request #91863 from knabben/kubelet-memcg-notification 
Moving Kubelet kernel-memgc-notification to configuration file
 2020-06-25 00:20:37 -07:00
wojtekt
c0e930f176 Bump etcd revision after changes to migrate script 2020-06-25 07:56:29 +02:00
Kubernetes Prow Robot
dc0122ca6a
Merge pull request #92286 from wojtek-t/migrate_if_needed_golang 
Merge migrate-if-needed etcd bash script with golang binary
 2020-06-24 10:32:27 -07:00
Amim Knabben
c39cf28ed3 Moving Kubelet kernel-memgc-notification to configuration file 2020-06-24 06:44:00 -04:00
Kubernetes Prow Robot
ca372d3ca5
Merge pull request #92422 from joakimr-axis/joakimr-axis_wait-until-stable 
util.sh: Replace wait-until-stable with wait-until --stable
 2020-06-24 02:00:13 -07:00
Kubernetes Prow Robot
c3a6a66592
Merge pull request #92395 from sambdavidson/vip-sni-fix 
Added missing apiserver config var.
 2020-06-24 01:59:54 -07:00
Davanum Srinivas
2d7c47d2be
Additional test for loading images with containerd 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-23 18:21:59 -04:00
Jonathan Sun
2f7874bd4b Install firewall logging rules to log metadata server access for unauthorized components. 2020-06-23 11:22:05 -07:00
Joakim Roubert
db9d6d0bff util.sh: Replace wait-until-stable with wait-until --stable 
This change follows the recommendation from the CI logs:

"WARNING: `gcloud compute instance-groups managed wait-until-stable` is
deprecated. Please use `gcloud compute instance-groups managed
wait-until --stable` instead."

Signed-off-by: Joakim Roubert <joakim.roubert@axis.com>
 2020-06-23 13:30:52 +02:00
Li Zhijian
02eaa4f354 cleanup tempfiles in unit test 
Signed-off-by: Li Zhijian <lizhijian@cn.fujitsu.com>
 2020-06-23 11:47:18 +08:00
Samuel Davidson
31ae200ebf fix for missing kube-env var in SNI config 2020-06-22 13:33:42 -07:00
wojtekt
2a7978e2be Merge migrate-if-needed etcd bash script 2020-06-22 20:45:58 +02:00
Kubernetes Prow Robot
d140769e4d
Merge pull request #92344 from jherrera123/restore-docker-focal-version 
Restore docker focal version in gci nodes
 2020-06-21 15:28:39 -07:00
Kubernetes Prow Robot
4c8207dc1e
Merge pull request #92314 from dims/set-better-default-for-loading-images-2 
Set better default commands for loading images - take 2
 2020-06-21 05:12:39 -07:00
Kubernetes Prow Robot
c6011f2d54
Merge pull request #91390 from vinayakankugoyal/nonroot 
Updating kube-controller-manager to run as non-root.
 2020-06-21 00:56:38 -07:00
Jesus Herrera
9714f3ac86 Restore docker focal version 2020-06-20 11:16:25 -04:00
Kubernetes Prow Robot
219c856ce2
Merge pull request #91555 from daixiang0/scr 
*.sh: cleanup all white noise
 2020-06-20 05:26:53 -07:00
Kubernetes Prow Robot
2d1c417934
Merge pull request #92258 from SidneyShen/node-boot-nvme-disk-fix 
Add logic to check if local NVMe SSDs in node boot-up script
 2020-06-19 11:38:14 -07:00
Kubernetes Prow Robot
4369eb3155
Merge pull request #92083 from alculquicondor/sched_config_script 
Support kube-scheduler component-config in GCE init scripts
 2020-06-19 11:36:53 -07:00
Kubernetes Prow Robot
87e6ec493c
Merge pull request #90223 from caesarxuchao/remove-unused-var 
Remove unused network proxy variables and functions
 2020-06-19 11:36:14 -07:00
Davanum Srinivas
60bd17a61f
Set better default commands for loading images - take 2 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-19 14:25:12 -04:00
Kubernetes Prow Robot
bfa6eb1772
Merge pull request #91964 from wenjiaswe/etcdNameComment 
Add a comment to keep etcd name in sync and change `hostname` to `HOSTNAME`
 2020-06-18 19:05:40 -07:00
Wenjia Zhang
0da9c3e379 Add a comment to keep etcd name in sync and change hostname to HOSTNAME 2020-06-18 11:11:12 -07:00
Kubernetes Prow Robot
6bb668c3c4
Merge pull request #92204 from dims/check-for-either-docker-or-containerd-getting-active 
Check for either docker or containerd getting active
 2020-06-18 06:03:21 -07:00
Kubernetes Prow Robot
c83c4d5453
Merge pull request #92184 from dims/set-better-default-for-loading-images 
Set better default commands for loading images
 2020-06-18 06:02:52 -07:00
Xinning Shen
27658f8241 Add logic to check if local NVMe SSDs in node boot-up script 
Current logic would assume all the NVMe disks are data disks and
applicable for reformat and mount. This will cause the issue when
booting disk is also NVMe disk, which will fail the node boot up. This
change will check if any additional NVMe disks are required/specified
and skip the reformat step otherwise.
 2020-06-18 08:48:43 +00:00
Chao Xu
06d034f3c8 remove unnecessary certs generation 2020-06-16 23:47:10 -07:00
Kubernetes Prow Robot
1f629ca4a2
Merge pull request #92150 from sambdavidson/sniflagfix 
Fix to configure-kubeapiserver.sh error.
 2020-06-16 19:24:12 -07:00
Kubernetes Prow Robot
78774eb5ee
Merge pull request #92078 from jingyih/update_etcd_makefile_for_3p4p9 
Update etcd makefile to build 3.4.9 image
 2020-06-16 19:23:43 -07:00
Kubernetes Prow Robot
51aac92f69
Merge pull request #91922 from Jefftree/netproxy-009 
Upgrade apiserver-network-proxy to v0.0.9
 2020-06-16 19:22:39 -07:00
Davanum Srinivas
01183e51f0
Check for either Docker or Containerd getting active for e2e_node tests 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-16 20:08:01 -04:00
Davanum Srinivas
fbb4bb0003
Set better default commands for loading images 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-16 07:47:02 -04:00
Kubernetes Prow Robot
0a1e58913c
Merge pull request #92123 from YangLu1031/improveStackdriverInstallation 
Stabilize StackdriverLogging installation
 2020-06-16 04:04:05 -07:00
Kubernetes Prow Robot
b0af921e80
Merge pull request #92060 from lemonli/fix/dns-horizontal-autoscaler 
update version to 1.8.1 in addon dns-horizontal-autoscaler.yaml
 2020-06-15 23:26:18 -07:00
Yang Lu
0239a7d857 Stabilize stackdriver installation 2020-06-15 18:50:25 -07:00
Samuel Davidson
3958ecb5c7 Fix to configure-kubeapiserver.sh error. 
It no no longer errors and exits if
env-var OLD_LOAD_BALANCER_IP is undefined.
 2020-06-15 11:42:05 -07:00
Aldo Culquicondor
55242bf3c9 Support kube-scheduler component-config in GCE init scripts 
Taking precedence over some existing flags.

Signed-off-by: Aldo Culquicondor <acondor@google.com>
 2020-06-15 09:41:18 -04:00
Mikhail Mazurskiy
b75ea1b052
Fix error check logic 
If copy finished file (err == nil) then
use the error returned from out.Close()
 2020-06-15 22:00:56 +10:00
Kubernetes Prow Robot
29f96dfa2d
Merge pull request #92063 from jingxu97/June/docker 
Add WINDOWS_CONTAINER_RUNTIME env variable and set default to docker for windows node
 2020-06-14 18:53:56 -07:00
Kubernetes Prow Robot
79960095dd
Merge pull request #91124 from barney-s/update_win_sd 
Bump Stackdriver version to 1.11
 2020-06-13 00:33:56 -07:00
Jing Xu
953597134b Add WINDOWS_CONTAINER_RUNTIME env vairable 
Now the default value of container runtime for linux is changed to
containerd. However, containerd is not ready to be used in Windows node.
THis PR adds a new env varabile to handle container runtime setup for
windows nodes. This way, linux and windows can set up their owe container runtime.
By default, linux uses containerd while windows uses dockerd
 2020-06-12 17:22:12 -07:00
Jefftree
c6b2b1fad3 Add health port to network proxy 2020-06-12 16:44:56 -07:00
jingyih
303273d0e9 Update etcd makefile to build 3.4.9 image 2020-06-12 09:20:33 -07:00
Kubernetes Prow Robot
e7ca64fbe1
Merge pull request #92042 from kubernetes/revert-90400-1737 
Revert "fix cross build conformance image error"
 2020-06-12 02:24:35 -07:00
Kubernetes Prow Robot
eff58cc003
Merge pull request #92034 from YangLu1031/master 
Flush cache to disk to persist configuration status
 2020-06-12 02:24:25 -07:00
Kubernetes Prow Robot
c5ef7ee997
Merge pull request #92031 from dims/fix-default-runtime-endpoint-for-docker 
fix default CONTAINER_RUNTIME_ENDPOINT for docker
 2020-06-12 02:24:11 -07:00
lemonli
e421575243 update version to 1.8.1 in addon dns-horizontal-autoscaler.yaml 2020-06-12 10:50:54 +08:00
Carlos Tadeu Panato Junior
305d65837d
Revert "fix cross build conformance image error" 2020-06-11 18:01:40 +02:00
Kubernetes Prow Robot
06e3aeccc4
Merge pull request #89089 from losipiuk/lo/remove-endpoints-rbac-ca 
Remove endpoints RBAC for Cluster Autoscaler
 2020-06-11 08:18:56 -07:00
Yang Lu
c84eb12357 Flush cache to disk to persist setup status 2020-06-11 05:15:30 -07:00
Davanum Srinivas
66015ff654
fix default CONTAINER_RUNTIME_ENDPOINT for docker 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-11 06:41:17 -04:00
Jordan Liggitt
ac5ec4aa80 Adjust admission webhook auth config for default-enabled admission plugins 2020-06-10 13:46:30 -04:00
Kubernetes Prow Robot
47e79c73cb
Merge pull request #91684 from dims/use-containerd-as-default-in-cluster-kube-up 
Use containerd as default in kube-up.sh
 2020-06-09 14:49:21 -07:00
Wenjia Zhang
d162e09a26 -a 2020-06-08 19:59:32 -07:00
Davanum Srinivas
1731cb30f5
Use containerd as default in kube-up.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-06-07 14:34:50 -04:00
Kubernetes Prow Robot
db152fdd7d
Merge pull request #91756 from wojtek-t/remove_etcd_empty_dir_cleanup 
Remove etcd-empty-dir-cleanup image
 2020-06-05 15:30:24 -07:00
Kubernetes Prow Robot
3509b46fc6
Merge pull request #91612 from bsdnet/gci 
Improve COS image document for E2E test
 2020-06-05 15:30:00 -07:00
Kubernetes Prow Robot
5de465e67d
Merge pull request #91581 from monotek/fluentd-metadatafilter-fix 
[fluentd] update gemfile to fix metadata plugin bug
 2020-06-05 15:29:46 -07:00
Kubernetes Prow Robot
65821acd87
Merge pull request #91796 from pjh/repair-powershell 
Repair syntax error in Windows-GCE startup script
 2020-06-05 01:53:43 -07:00
wojtekt
7a9d46a8bc Remove etcd-empty-dir-cleanup image 2020-06-05 08:41:31 +02:00
wojtekt
ee27e5b8be Remove all references to etcd-empty-dir-cleanup. 2020-06-05 08:41:31 +02:00
Kubernetes Prow Robot
2dc408abb3
Merge pull request #91729 from wojtek-t/addon_resizer_1_8_10 
Bump addon-resizer image to 1.8.10
 2020-06-04 18:00:12 -07:00
Kubernetes Prow Robot
c0455a1853
Merge pull request #91154 from liggitt/signer-duration 
Mark experimental-cluster-signing-duration deprecated, add --cluster-signing-duration
 2020-06-04 17:59:45 -07:00
Peter Hornyack
0a4f3f64a7 Repair syntax error in Windows-GCE startup script 2020-06-04 17:45:38 -07:00
wojtekt
b1f4bfb03e Bump addon-resizer image 2020-06-04 19:28:07 +02:00
Kubernetes Prow Robot
0615d4c3e8
Merge pull request #91635 from cpanato/GH-86267 
get-kube.sh: fix order to get the binaries from the right bucket
 2020-06-02 21:36:17 -07:00
Vinayak Goyal
8daa9e6f77 Updating kube-controller-manager to run as non-root. 2020-06-02 14:07:00 -07:00
Roy Yang
3336d59ab2 Update COS/GCI document 
Signed-off-by: Roy Yang <royyang@google.com>
 2020-06-01 14:34:31 -07:00
Kubernetes Prow Robot
c5444496d5
Merge pull request #91564 from saschagrunert/update-cri-tools 
Update cri-tools to v1.18.0 (#2)
 2020-06-01 13:10:14 -07:00
Carlos Panato
715aa8b733
get-kube.sh: fix order to get the binaries from the right bucket 2020-06-01 17:59:33 +02:00
André Bauer
7433364bb4 update gemfile to fix metadata plugin bug 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-05-29 13:52:41 +02:00
ialidzhikov
32d9336283 Update Calico cpva to v0.8.3 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2020-05-29 12:39:46 +03:00
Sascha Grunert
d2fc2d282d
Update cri-tools to v1.18.0 
This updates cri-tools to the latest release as well as pointing the
artifacts to the new Google Cloud Bucket `k8s-artifacts-cri-tools`.

This reverts commit ce1840d253.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
 2020-05-29 10:56:02 +02:00
Xiang Dai
e09bc312cb *.sh: cleanup all white noise 
Signed-off-by: Xiang Dai <long0dai@foxmail.com>
 2020-05-29 09:56:00 +08:00
wojtekt
5d93888f20 Bump addon resizer to 1.8.9 version 2020-05-28 19:37:01 +02:00
Marcin Maciaszczyk
e5af792ad2 Bump Dashboard to v2.0.1 2020-05-28 13:08:53 +02:00
Kubernetes Prow Robot
c1707541d8
Merge pull request #91456 from tosi3k/propagate-am-whitelist-override 
Propagate KUBECTL_PRUNE_WHITELIST_OVERRIDE to master kube-env
 2020-05-27 02:20:40 -07:00
Kubernetes Prow Robot
bc06f367d4
Merge pull request #91466 from prameshj/dns-autoscaler 
Include Unschedulable nodes to compute kube-dns replica in DNS autoscaler.
 2020-05-26 19:13:28 -07:00
Kubernetes Prow Robot
f91c1ef60e
Merge pull request #91370 from justaugustus/cni 
Update CNI to v0.8.6
 2020-05-26 13:38:01 -07:00
Pavithra Ramesh
10f300313e Include unschedulable nodes to compute dns replica 
This change picks up the new flag added to cluster autoscaler to include
unschedulable nodes when computing number of DNS replica. This fixes an
issue where cordoning large nodepools can cause a big drop in the number
of kube-dns replicas and cause existing workloads to see DNS outage.
 2020-05-26 12:08:14 -07:00
Antoni Zawodny
b1bd5113d4 Propagate KUBECTL_PRUNE_WHITELIST_OVERRIDE to master kube-env 2020-05-26 15:58:15 +02:00
Kubernetes Prow Robot
f01d848c48
Merge pull request #91329 from dims/switch-kube-controller-manager-to-distroless-image 
Switch kube-controller-manager to distroless image
 2020-05-22 17:23:10 -07:00
Stephen Augustus
b692502a9d Update CNI to v0.8.6 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-22 17:48:56 -04:00
Kubernetes Prow Robot
10caa46f6b
Merge pull request #91300 from dims/move-to-latest-etcd-3.4.7-2 
Switch over to new etcd 3.4.7-2 image
 2020-05-22 04:14:37 -07:00
Kubernetes Prow Robot
cb044a950c
Merge pull request #91343 from neolit123/1.19-fix-cluster-readme 
cluster/README.md: update notes about content
 2020-05-21 21:28:37 -07:00
Kubernetes Prow Robot
9e06faa1fb
Merge pull request #91240 from tosi3k/bump-am-version 
Update kube-addon-manager to v9.1.1
 2020-05-21 19:40:37 -07:00
Davanum Srinivas
b1742f19ef
Switch kube-controller-manager to distroless image 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-21 22:33:54 -04:00
Davanum Srinivas
bd835d8a1c
Switch over to new etcd 3.4.7-2 image 
Add a safety switch to stop doing anything if migrate failed. We
previously just ignored the exit code from migrate utility

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-21 22:16:08 -04:00
Lubomir I. Ivanov
eb4f64b25f cluster/README.md: update notes about content 
- Adjust the link to point at https://kubernetes.io/docs/setup/
to alternative solutions.
https://kubernetes.io/docs/getting-started-guides already redirects to
https://kubernetes.io/docs/setup/ and it does not contain details on
/cluster usage.
- Remove notes about the contents of the folder, leaving only the
deprecation notice and link to alternatives.
 2020-05-22 00:55:18 +03:00
Kubernetes Prow Robot
a49da364eb
Merge pull request #90093 from ialidzhikov/enh/cpva 
Update Calico cpva to v0.8.2
 2020-05-21 14:44:37 -07:00
Kubernetes Prow Robot
c97c61ebe8
Merge pull request #91304 from karan/gcireviewer 
add karan to gci reviewer
 2020-05-20 19:42:20 -07:00
Kubernetes Prow Robot
52358fe010
Merge pull request #91228 from sambdavidson/iprotflags 
Add SNI flags usage to configure-*.sh
 2020-05-20 19:41:30 -07:00
Kubernetes Prow Robot
2f883e5802
Merge pull request #90618 from jingxu97/Mar/windows 
Install diskutil into GCE  windows node
 2020-05-20 19:40:33 -07:00
Samuel Davidson
20b37d6c5a Add IP rotation flags and env-vars to configure-*.sh 2020-05-20 13:07:37 -07:00
Karan Goel
451592c6a5 add karan to gci reviewer 2020-05-20 10:42:42 -07:00
Jacek Kaniuk
57caa27b8d Do not add kube-apiserver performance flags if already set 2020-05-20 19:05:16 +02:00
Antoni Zawodny
15e491eb2f Update kube-addon-manager to v9.1.1 2020-05-20 09:50:20 +02:00
Kubernetes Prow Robot
cf13f8d994
Merge pull request #91261 from tosi3k/am-patch-1 
Fix permissions in kube-addon-manager
 2020-05-19 22:02:28 -07:00
Kubernetes Prow Robot
d17947ea3a
Merge pull request #91171 from dims/switch-etcd-to-bash-static 
Switch to static bash and distroless image for etcd
 2020-05-19 22:02:19 -07:00
Kubernetes Prow Robot
b5eb3831c3
Merge pull request #91239 from jprzychodzen/revert-cri-tools 
Revert "Update cri-tools to v1.18.0"
 2020-05-19 20:35:27 -07:00
Jing Xu
e71acffdfe Install diskutil into GCE windows node 
This PR installs a utility diskutil.exe into GCE windows node. This is a
workaround for csiproxy be able to get disk id by name. This utility
will be placed once issue is addressed.
 2020-05-19 18:36:16 -07:00
Davanum Srinivas
c1c2b663f0
Add cloudbuild.yaml for etcd 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-19 17:05:24 -04:00
Davanum Srinivas
c225d13abc
Switch to static bash for etcd 
- use bash-static and avoid dragging in all of debian-base
- use distroless as the base image
- the shell script needs a `cp` utility, add a go based one for just
  files (no support for directories!)
- Rework the calls to `mv` and recursive `cp` in the code
- we don't need to support windows in this container image
- the test case was slightly off as it was assuming that the old
  directory was copied into the new directory, but the desired
  functionality is that all files in the old directory should be in the
  new directory.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-19 17:05:24 -04:00
Davanum Srinivas
5c966e3beb
Use staging-csi to work around quay.io availability 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-19 12:51:54 -04:00
Antoni Zawodny
3c5585bfd9 Fix permissions in kube-addon-manager 2020-05-19 17:40:09 +02:00
Jakub Przychodzeń
ce1840d253 Revert "Update cri-tools to v1.18.0" 
This reverts commit 4b3e023659.
 2020-05-19 11:19:39 +02:00
Kubernetes Prow Robot
1e2ddd1261
Merge pull request #89461 from wawa0210/change-ip-masq-os-label 
[Trival] beta.kubernetes.io/os deprecated since v1.14, are targeted for removal in v1.18
 2020-05-18 17:43:49 -07:00
Kubernetes Prow Robot
e215a8772c
Merge pull request #91210 from tosi3k/dont-log-node-ip-range-to-stdout 
Log user provided NODE_IP_RANGE to stdout instead of stderr
 2020-05-18 13:34:08 -07:00
Antoni Zawodny
5ec2ff2d20 Remove logging user provided NODE_IP_RANGE to stderr 2020-05-18 16:59:27 +02:00
Sascha Grunert
4b3e023659
Update cri-tools to v1.18.0 
Bump cri-tools to the latest version and update test scripts.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
 2020-05-18 13:38:41 +02:00
Davanum Srinivas
07d88617e5
Run hack/update-vendor.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-16 07:54:33 -04:00
Davanum Srinivas
442a69c3bd
switch over k/k to use klog v2 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-16 07:54:27 -04:00
Kubernetes Prow Robot
9d3406c27b
Merge pull request #91136 from tosi3k/am-version-update 
Bump addon-manager's version to v9.1.0
 2020-05-15 23:02:41 -07:00
Jordan Liggitt
950ed38996 Mark experimental-cluster-signing-duration deprecated, add --cluster-signing-duration 2020-05-15 14:09:58 -04:00
Antoni Zawodny
f2c22addf5 Bump addon-manager's version to v9.1.0 2020-05-15 12:52:46 +02:00
Kubernetes Prow Robot
e6433bd76b
Merge pull request #91018 from tosi3k/am-whitelist-configuration 
Allow overriding the default list of resources of list in addon-manager
 2020-05-15 02:48:11 -07:00
张潇
fdef0a6767
beta.kubernetes.io/os is already deprecated 2020-05-15 08:27:06 +08:00
Barni S
d826b4b05c Bump Stackdriver version to 1.11 2020-05-14 18:45:17 -04:00
Kubernetes Prow Robot
b8be11e3fc
Merge pull request #90995 from prameshj/nodelocal-image 
Use the latest node-cache image.
 2020-05-12 08:25:28 -07:00
Antoni Zawodny
ca90cf6049 Allow overriding the default list of resources of list in addon-manager 2020-05-12 12:50:05 +02:00
Tim Hockin
d681a04541 Force LICENSES refresh on GCE images 
Some test images have it baked in.
 2020-05-11 14:25:26 -07:00
Pavithra Ramesh
1ea97db78a Use the latest node-cache image. 
The image has debian base 2.0.0, some stability fixes and also uses
UDP to connect to stubDomains configured via kube-dns configmap.
 2020-05-11 13:10:27 -07:00
Yuwen Ma
1aa67fc525
Switch core master base images from debian to distroless 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-09 06:55:00 -04:00
Kubernetes Prow Robot
785aadca7f
Merge pull request #90248 from prameshj/affinitydns 
Add back anti-affinity to kube-dns pods.
 2020-05-09 00:43:51 -07:00
Kubernetes Prow Robot
7d53ecee37
Merge pull request #90575 from thockin/fix_license_again 
Reorganize vendor licenses again (revert #85220)
 2020-05-08 23:03:51 -07:00
Tim Hockin
325ea6e3c2 Restructure licenses again (revert cd4474a) 
This moves licenses of vendored code from one monolith file into a tree
of individual files for easier reviews.  This fixes both the bash and
bazel paths.
 2020-05-07 21:48:59 -07:00
Tim Hockin
9213616a23 Add better debug when GCE cluster turnups fail 2020-05-07 19:43:32 -07:00
Walter Fender
339918d206 Add admin account on master for kube-up 
Creates a master local admin account.
If you are on the master you can now run kubectl.
For issue 87481.
 2020-05-06 17:19:58 -07:00
Kubernetes Prow Robot
14eb291084
Merge pull request #90751 from yliaog/windep 
Removed leftover comments for the deleted function Get_MgmtSubnet
 2020-05-05 20:03:09 -07:00
Kubernetes Prow Robot
d8a513ef99
Merge pull request #90697 from justaugustus/base-images 
base-images: Use new debian-base:v2.1.0 and build new debian-iptables:v12.1.0
 2020-05-05 18:01:23 -07:00
Kubernetes Prow Robot
27f06962d8
Merge pull request #90744 from prameshj/kubedns-version 
Bump up the kube-dns version to 1.15.10
 2020-05-05 12:39:22 -07:00
Stephen Augustus
d95dcc61f3 cluster/images/etcd: Bump etcd image tags for new debian-base 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-05 15:16:38 -04:00
Yu Liao
eb6ee368b9 Removed leftover comments for the deleted function Get_MgmtSubnet 2020-05-04 21:25:51 -07:00
Pavithra Ramesh
069381edec Bump up the kube-dns version to 1.15.10 2020-05-04 16:14:53 -07:00
Pavithra Ramesh
aaa0d12cc7 Add back anti-affinity to kube-dns pods. 
This change also updates to the latest kube-dns images. The
anti-affinity change was previously rolled back in https://github.com/kubernetes/kubernetes/pull/59357
Adding this back as there have been imrpovements in scheduler
performance since.
 2020-05-04 15:40:19 -07:00
Davanum Srinivas
0d38f21932
Use bionic repo for docker as focal is not yet available 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2020-05-03 16:50:49 -04:00
Stephen Augustus
64300d8fff deps: Update dependents to use debian-base:v2.1.0 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-02 23:09:09 -04:00
Stephen Augustus
f828821eea releng: Point debian-base image references to K8s Infra 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-02 22:51:40 -04:00
Kubernetes Prow Robot
4a7360debf
Merge pull request #90665 from justaugustus/base-images 
cleanup: Base image workflow improvements
 2020-05-02 01:54:26 -07:00
Stephen Augustus
410b388ad0 build: Fix base image versions on dependents 
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2020-05-01 20:39:07 -04:00
Kubernetes Prow Robot
628b413f8e
Merge pull request #90400 from zhlhahaha/1737 
fix cross build conformance image error
 2020-05-01 09:34:30 -07:00
Kubernetes Prow Robot
15d6c9a5ea
Merge pull request #90605 from yliaog/windep 
switched to default non-masquerade destination ranges
 2020-05-01 00:41:54 -07:00
Jie Shen
c71a25e912
Fix shellcheck warnings/errors in cluster/gce/upgrade.sh (#88576) 
* Fix shellcheck warnings/errors in cluster/gce/upgrade.sh

* Update cluster/gce/upgrade.sh

Co-Authored-By: Slava Semushin <slava.semushin@gmail.com>

Co-authored-by: Slava Semushin <slava.semushin@gmail.com>
 2020-04-30 21:26:06 -07:00
Kubernetes Prow Robot
29e6bff03a
Merge pull request #90420 from neolit123/1.19-remove-cluster-juju 
/cluster: remove juju
 2020-04-30 15:55:37 -07:00
Yu Liao
9684c13fba switched to default non-masquerade destination ranges 2020-04-30 12:29:34 -07:00
Kubernetes Prow Robot
7229e13036
Merge pull request #90423 from neolit123/1.19-move-cluster-bash-to-util 
/cluster: add / update OWNERS labels
 2020-04-29 04:52:24 -07:00
ialidzhikov
20d44dfbfe Update Calico cpva to v0.8.2 
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
 2020-04-28 09:36:14 +03:00
Kubernetes Prow Robot
62880cb122
Merge pull request #90421 from neolit123/1.19-remove-cluster-clientbin 
/cluster: cleanup clientbin.sh
 2020-04-27 22:26:33 -07:00
Lubomir I. Ivanov
b4bbf0a69f /cluster: cleanup clientbin.sh 
clientbin.sh is only used in kubectl.sh. It contains logic
for finding a binary that was build from the k/k tree
and for printing errors if the binary cannot be found.

- Remove clientbin.sh
- Remove references of clientbin.sh from /cluster/BUILD
- Use hack/lib/util.sh's kube::util::find-binary for finding the binary
 2020-04-28 00:27:33 +03:00
Kubernetes Prow Robot
e494b0788b
Merge pull request #89543 from bartekzurawski/fix-kube-up-gce-private-restart 
Set ip alias route on kubernetes-master during booting
 2020-04-24 09:38:07 -07:00
Howard Zhang
7550ea0ab3 fix cross build conformance image error 
After using docker buildx build --platform,
conformance image can build from correct
architecture debian:stretch-slim image.

Signed-off-by: Howard Zhang <howard.zhang@arm.com>
 2020-04-24 16:10:43 +08:00
Lubomir I. Ivanov
c0387ab3ac /cluster: add / update OWNERS 2020-04-24 03:21:07 +03:00
Lubomir I. Ivanov
b08cd0e2cb remove /cluster/juju 
Juju changed home and was cleaned up in 422a7ec49.
Remove the "provider" leftover in /cluster/juju.

No references were found in k/test-infra, k/k.
 2020-04-23 23:58:14 +03:00
Joakim Roubert
bf77061cb1 Fix shellcheck failures in cluster/pre-existing/util.sh 
This is merely bringing PR #82059 back to life in a contemporary
context, so all cred should go to k-toyoda-pi (and BenTheElder).

Change-Id: I7cf33e50adabbd23d18348448c21c6255502c1ba
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-04-23 16:02:48 +02:00
Kubernetes Prow Robot
53374fa519
Merge pull request #90343 from neolit123/1.19-remove-kubernetes-anywhere 
remove kubernetes-anywhere from this repository
 2020-04-22 19:22:24 -07:00
Kubernetes Prow Robot
1bcd49d5cd
Merge pull request #90156 from vinayakankugoyal/nonroot 
Run kube-scheduler and kube-addon-manager as non root
 2020-04-22 19:21:46 -07:00
Lubomir I. Ivanov
ad63ad7d40 cluster: cleanup unused scripts 
Verified with k/k and k/test-infra.

- restore-from-backup.sh
Performs restoration of etcd snapshots and the logic seems valid
on a quick look, but doesn't seem to be used anywhere in our infra.
I suspect this is used on demand for local testing, but /cluster root
doesn't seem like the right place for it at this point.
- test-*.sh
Gikgo related calls but these bash scripts seem unused in the infra.
 2020-04-22 03:45:56 +03:00
Lubomir I. Ivanov
820c87c069 remove kubernetes-anywhere from this repository 
The project has been deprecated since Dec 2018 and is unused.

Cleanup in:
- /test/e2e/framework/
- /cluster/
 2020-04-21 22:52:51 +03:00
toyoda
a01b1dada5 Fix shellcheck failure in cluster/gce/config-default.sh 2020-04-17 16:11:58 +09:00
Vinayak Goyal
7a5f4c47de Run kube-scheduler and kube-addon-manager as non root 2020-04-16 14:50:04 -07:00
Kubernetes Prow Robot
3b00d7dce5
Merge pull request #89415 from wiremind/fluent-plugin-kubernetes_metadata_filter 
cluster addons: fluentd-elasticsearch: update gems.
 2020-04-14 22:00:03 -07:00
Kubernetes Prow Robot
aed3f05495
Merge pull request #88459 from joakimr-axis/joakimr-axis_config-test.sh 
Fix shellcheck warnings/errors in cluster/gce/config-test.sh
 2020-04-14 15:38:02 -07:00
Bartek Żurawski
3e4744c736 Set ip alias route on kubernetes-master during booting 2020-04-15 00:03:05 +02:00
Kubernetes Prow Robot
ea2d784545
Merge pull request #89895 from jingyih/update_etcd_server_3p4p7 
Update default etcd server to 3.4.7 in k8s v1.19
 2020-04-14 12:34:06 -07:00
jingyih
394df132bd Update default etcd server to 3.4.7 2020-04-13 14:37:56 -07:00
Stavros Foteinopoulos
ff144a17ea
Add node-local-dns headless service 2020-04-13 09:58:34 +03:00
Kubernetes Prow Robot
c0be582ca5
Merge pull request #89269 from Jefftree/network-proxy-beta 
Use v1beta1 for egress selector config
 2020-04-09 18:07:49 -07:00
Kubernetes Prow Robot
08e1fd3bb9
Merge pull request #89970 from liggitt/static-priority 
Fix priorityClassName typo, add numeric priority to static pods
 2020-04-09 07:49:57 -07:00
Joakim Roubert
21bef7536c Fix shellcheck warnings/errors in cluster/gce/config-test.sh 
Change-Id: I3760337aa345ca5b801587ea12c971a95168f7d7
Signed-off-by: Joakim Roubert <joakimr@axis.com>
 2020-04-09 08:30:13 +02:00
Lubomir I. Ivanov
9bbd321fec remove /cluster/kubeadm.sh and /test/cmd/kubeadm.sh 
/cluster/kubeadm.sh is used to find the kubeadm binary.
This file is legacy and is removed.

Remove /test/cmd/kubeadm.sh. This file contains a function that is used
to build kubeadm and invoke "make test". Move the function contents
to hack/make-rules/test-cmd.cmd.

Stop sourcing /test/cmd/kubeadm.sh in /test/cmd/legacy-script.sh.

Also remove the --kubeadm-path invocation as this can be handled
with an env. variable directly.
 2020-04-09 00:47:15 +03:00
Jordan Liggitt
5534c12dad Fix priorityClass typo, add numeric priority to static pods 2020-04-08 15:33:39 -04:00
Kubernetes Prow Robot
4ae223fbff
Merge pull request #84904 from clarklee92/FixShellCheck 
Fix shell check
 2020-04-06 19:09:58 -07:00
Kubernetes Prow Robot
c158001bbc
Merge pull request #89825 from tosi3k/log-dump-ssh-timeout 
Enable timeout for SSH-ing to non-logexported nodes
 2020-04-06 07:15:46 -07:00
Antoni Zawodny
15160168e5 Apply PR fixes 2020-04-06 14:53:02 +02:00
Kubernetes Prow Robot
fa6b9bec81
Merge pull request #89759 from cheftako/master 
Switch COS image to m81.
 2020-04-04 02:57:46 -07:00
Antoni Zawodny
6e34409f2b Enable timeout for SSH-ing to non-logexported nodes 2020-04-03 17:05:58 +02:00
Kubernetes Prow Robot
d721cb4c71
Merge pull request #89760 from jprzychodzen/le-enable-extra-services 
Enable env defined services to dump in logexporter
 2020-04-03 06:09:45 -07:00
Kubernetes Prow Robot
81a0e2f62b
Merge pull request #85923 from MrHohn/sig-gcp-owner-file 
Migrate OWNERS file to apply the area/provider/gcp label
 2020-04-02 19:03:46 -07:00
Mateusz Matejczyk
9639464e43 Propagate CONCURRENT_SERVICE_SYNCS to node env 2020-04-02 14:38:41 +02:00
Jakub Przychodzeń
2b533f9720 Enable env defined services to dump in logexporter 2020-04-02 09:38:39 +02:00
Walter Fender
31393df6ee Switch COS image to m81. 2020-04-02 00:18:31 -07:00
Kubernetes Prow Robot
6a552da932
Merge pull request #89664 from spiffxp/ignore-list-resources-fails 
Allow list-resources.sh to continue if a resource fails to list
 2020-03-31 20:03:41 -07:00
Kubernetes Prow Robot
a256498ba4
Merge pull request #89661 from pjh/gce-win-pause-bump 
Bump GCE Windows pause image version
 2020-03-30 17:09:19 -07:00
Kubernetes Prow Robot
103fb552ad
Merge pull request #89634 from YangLu1031/master 
Fix dumping docker images log
 2020-03-30 17:09:02 -07:00
Aaron Crickenberger
52653195f6 Allow list-resources.sh to continue if a resource fails to list 
The list-resources.sh script is used solely by our CI, specifically
kubernetes/test-infra/kubetest with the --check-leaked-resources
flag. Currently if a single resource fails to list, we fail the entire
job.

I think this is too brittle. A review of previous issues on
kubernetes/kubernetes that relate to failure of this script shows that
the issues usually resolve themselves, or would be caught by the diff
of before/after.

Let's instead allow the script to continue listing all resources,
and let kubetest's resource diff fail the job.
 2020-03-30 12:01:29 -07:00
Peter Hornyack
72f58ae4ff Bump GCE Windows pause image version 
pause-win:1.2.1 is based on the March Windows container base images for
both LTSC 2019 and SAC 1909.
 2020-03-30 11:30:53 -07:00
Kubernetes Prow Robot
24d8a17f70
Merge pull request #89601 from pjh/gce-march-images 
Update GCE Windows node images with March's Windows updates
 2020-03-30 08:22:29 -07:00
Kubernetes Prow Robot
93400b4347
Merge pull request #89578 from oxddr/bump-logexporter 
Bump logexporter to v20200327-9ba073aa98
 2020-03-30 04:45:53 -07:00
Yang Lu
735ab684ce Fix docker image log dump 2020-03-29 08:43:50 -07:00
Kubernetes Prow Robot
c7abf44a19
Merge pull request #88856 from yaseenhamdulay/patch-1 
Create etcd user in cloud-init master.yaml rather than in configure-h…
 2020-03-27 20:41:53 -07:00
Peter Hornyack
55df85ba37 Update GCE Windows node images with March's Windows updates 2020-03-27 15:44:08 -07:00
Kubernetes Prow Robot
edbbb6a89f
Merge pull request #89571 from oxddr/enable-logexporter 
Revert "Revert "log-dump.sh: allow to dump extra log files""
 2020-03-27 14:36:16 -07:00
Janek Łukaszewicz
875e39e37a Bump logexporter to v20200327-9ba073aa98 2020-03-27 16:17:15 +01:00
Kubernetes Prow Robot
3842a92f5f
Merge pull request #89413 from zhouya0/remove_prometheus_references_from_etcd_version_monitor 
Remove prometheus references from etcd version monitor
 2020-03-27 06:56:23 -07:00
Janek Łukaszewicz
4f0816ebf2 Revert "Revert "log-dump.sh: allow to dump extra log files"" 
This reverts commit c20e604377.
 2020-03-27 12:23:17 +01:00
Peter Hornyack
3583816112 Fix INFRA_CONTAINER variable references 
Tested:
NUM_NODES=2 NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true \
  KUBERNETES_NODE_PLATFORM=windows \
  LOGGING_STACKDRIVER_RESOURCE_TYPES=new \
  KUBE_UP_AUTOMATIC_CLEANUP=true \
  WINDOWS_NODE_OS_DISTRIBUTION=win2019 \
  ./cluster/kube-up.sh
 2020-03-26 19:30:39 -07:00
Kubernetes Prow Robot
08ce946e09
Merge pull request #89257 from jprzychodzen/fix-create 
Util script - move variables setting for replicated master to outer if
 2020-03-26 14:10:36 -07:00
Kubernetes Prow Robot
a9f6b93b62
Merge pull request #89498 from sambdavidson/mount-tweak 
Changed readonly to true and type to "File" for authn/authz config.
 2020-03-26 12:48:43 -07:00
Kubernetes Prow Robot
295b53f7b4
Merge pull request #89214 from jingyih/update_etcd_server_3p4p4 
Update default etcd server to 3.4.4 in k8s v1.19
 2020-03-26 01:14:24 -07:00
Samuel Davidson
c70cd1e82f Changed readonly to true and type to File for authn/authz config. 2020-03-25 17:45:27 -07:00
Yaseen Hamdulay
58f78a53ee Add ssh_redirect_user 2020-03-24 11:30:48 +00:00
Cédric de Saint Martin
335bfe0911 cluster add-ons: fluentd: update gems. 
In particular, update fluent-plugin-kubernetes_metadata_filter to 2.4.5 to solve a potential high apiserver request count.
 2020-03-24 08:59:13 +01:00
zhouya0
04d06d2f23 Remove prometheus references from etcd version monitor 2020-03-24 14:23:26 +08:00
Kubernetes Prow Robot
de877ec26e
Merge pull request #89327 from aojea/conntrack 
cluster: ipvs conntrack module vs kernel version
 2020-03-22 13:28:44 -07:00
Kubernetes Prow Robot
2ede416104
Merge pull request #89309 from yliaog/windep 
infra_container is passed in as env variable
 2020-03-21 04:10:44 -07:00
Antonio Ojea
33810a99d9 cluster: ipvs conntrack module vs kernel version 
We should use 'nf_conntrack' instead of 'nf_conntrack_ipv4'
for linux kernel >= 4.19
 2020-03-21 11:23:28 +01:00
Yu Liao
50c0827856 infra_container is passed in as env variable 2020-03-20 10:50:25 -07:00
Michael S. Fischer
c6fa1391f5 nodelocaldns: have Prometheus collect metrics 2020-03-20 08:40:33 -07:00
Jakub Przychodzeń
f48268d13b Util script - move variables setting for replicated master to outer if 2020-03-20 12:42:44 +01:00
Jefftree
936f7665cf network proxy alpha -> beta 2020-03-19 11:49:47 -07:00
yaseenhamdulay
5de3c64ad0 Create etcd user in cloud-init master.yaml rather than in configure-helper.sh 
An etcd unix user is currently created in configure-helper.sh if it does not exist
on the master.

cloud-init is the only supported mechanism to add users on COS VMs. If an attempt
is made to add a key using OS Login or the instance metadata mechanism the
google_accounts_daemon will race with useradd and potentially attempt to use
the same UID. This will lock out any attempt to SSH into the VM. We therefore
migrate to using cloud-init to create this user and prevent this issue from occurring.
 2020-03-19 11:05:42 +00:00
Kubernetes Prow Robot
f899ad704a
Merge pull request #89069 from enj/enj/i/drop_password_file 
Remove support for basic authentication
 2020-03-18 22:24:20 -07:00
Kubernetes Prow Robot
51b2d02717
Merge pull request #88676 from dims/remove-hyperkube 
Remove hyperkube and debian-hyperkube-base images
 2020-03-18 06:36:48 -07:00
Kubernetes Prow Robot
1a334335bc
Merge pull request #88215 from kublr/fix/addon-manager 
fix addon manager failing to elect leader on masters with _ in the hostname
 2020-03-18 01:44:47 -07:00
jingyih
f9e0e4c6b4 Update default etcd server to 3.4.4 2020-03-18 00:27:46 -07:00
Kubernetes Prow Robot
3667411297
Merge pull request #88865 from caesarxuchao/add-cheftako-owner 
Add cheftako as an owner of cluster/
 2020-03-17 19:27:45 -07:00
Kubernetes Prow Robot
c53909498c
Merge pull request #88810 from oxddr/logdump-better-logging 
log-dump.sh: better logging in case of error from listing GCS
 2020-03-17 19:27:08 -07:00
Kubernetes Prow Robot
fbbe9bba8c
Merge pull request #88806 from monotek/fluent-elasticsearch-290 
updated fluentd to 1.9.2 & use docker builder pattern in dockerfile
 2020-03-17 19:26:55 -07:00
Davanum Srinivas
e6cdc0e0f3
Remove hyperkube 2020-03-17 21:33:50 -04:00
Kubernetes Prow Robot
5011621fe5
Merge pull request #88653 from oxddr/log-dump-extra-files 
Bump logexporter version to v20200227-da16e1b17
 2020-03-17 16:21:46 -07:00
Kubernetes Prow Robot
8055c92e26
Merge pull request #88125 from mwwolters/flex2healthz 
Switch flexvolume_node_setup.sh from kubelet RO port to healthz port
 2020-03-17 16:20:07 -07:00
Kubernetes Prow Robot
a6f209c1c0
Merge pull request #86259 from rajansandeep/corednsto1.6.6-kube-up 
Bump CoreDNS version to 1.6.7 [kube-up]
 2020-03-17 16:19:26 -07:00
Kubernetes Prow Robot
ff21f45680
Merge pull request #89095 from losipiuk/lo/ca-1.18.0 
Bump Cluster-Autoscaler to 1.18.0
 2020-03-13 07:04:40 -07:00
Kubernetes Prow Robot
3524a5a32a
Merge pull request #89097 from jpbetz/patch-1 
Fix unbound variable error in gce/configure.sh
 2020-03-12 20:48:38 -07:00
Kubernetes Prow Robot
6847b2aeba
Merge pull request #88955 from pradeepnss/patch-1 
Add tolerations with effect "NoExecute" and "NoSchedule" to allow sch…
 2020-03-12 18:12:39 -07:00
Joe Betz
23c358d883
Fix unbound variable error in gce/configure.sh 
Looks like UBUNTU_INSTALL_RUNC_VERSION should be optional here.
 2020-03-12 16:41:25 -07:00
Łukasz Osipiuk
c957b2509f Bump Cluster-Autoscaler to 1.18.0 2020-03-12 21:33:18 +01:00
Łukasz Osipiuk
02915ef179 Remove endpoints RBAC for Cluster Autoscaler 2020-03-12 17:56:45 +01:00
Srinivasa Satya Pradeep Nekkalapudi
66491d2d89 Add tolerations with effect "NoExecute" and "NoSchedule" to allow schedule of nodelocaldns pods on node pools with taints 
Currently if we define taints on all node pools in a cluster then nodelocaldns pods wont get scheduled on those node pools. Also in GKE as the daemonset has reconcile flag set tolerations cannot be added. So adding these tolerations will allow nodelocaldns pods to get scheduled on all node pools.
 2020-03-11 18:27:13 -07:00
Monis Khan
df292749c9
Remove support for basic authentication 
This change removes support for basic authn in v1.19 via the
--basic-auth-file flag.  This functionality was deprecated in v1.16
in response to ATR-K8S-002: Non-constant time password comparison.

Similar functionality is available via the --token-auth-file flag
for development purposes.

Signed-off-by: Monis Khan <mok@vmware.com>
 2020-03-11 20:55:47 -04:00
Łukasz Osipiuk
6be4d0a705 Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1 2020-03-11 16:16:30 +01:00
Kubernetes Prow Robot
f8ff8f4420
Merge pull request #88641 from antoninbas/fix-regex-in-conformance-tests-runner 
Fix default regular expressions in conformance tests runner
 2020-03-09 23:33:35 -07:00
Kubernetes Prow Robot
988982a1f7
Merge pull request #88048 from mtaufen/provider-info-e2etest 
Add e2e test for validating JWTs as OIDC tokens
 2020-03-06 17:59:34 -08:00
Kubernetes Prow Robot
b9f15ece18
Merge pull request #88877 from prameshj/nodecache-update 
Update to latest node-cache image
 2020-03-06 13:17:45 -08:00
Kubernetes Prow Robot
b9cd76519e
Merge pull request #88869 from Jefftree/egress_flag 
[Network Proxy] Allow both grpc and http-connect mode to be toggled in kube-up
 2020-03-05 21:40:05 -08:00
Kubernetes Prow Robot
86fc6d5d4c
Merge pull request #88863 from caesarxuchao/0.0.8 
Use the v0.0.8 network proxy images
 2020-03-05 21:39:48 -08:00
Kubernetes Prow Robot
4065a5a236
Merge pull request #88022 from YangLu1031/master 
Dump docker image list
 2020-03-05 20:03:29 -08:00
Jefftree
6fd748e2c5 exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly 2020-03-05 16:59:55 -08:00
Jefftree
06abedb063 Allow both GRPC and http-connect mode to be toggled 2020-03-05 16:16:59 -08:00
Charles Eckman
aee9fde751 Add e2e test for validating JWTs as OIDC tokens 
Adds an E2E test to deploy an agnhost container that runs the test.

Co-authored-by: Michael Taufen <mtaufen@google.com>
 2020-03-05 13:58:52 -08:00
Sandeep Rajan
5ce4198152 update coredns to 1.6.7 2020-03-05 16:55:28 -05:00
Pavithra Ramesh
bb318ea84a Update to latest node-cache image 2020-03-05 11:07:06 -08:00
Chao Xu
7ac25f4812 Add cheftako as an onwer of cluster/ 2020-03-05 10:24:29 -08:00
Chao Xu
7d86217043 Use the v0.0.8 network proxy images 2020-03-05 09:54:19 -08:00
Janek Łukaszewicz
96567c8dcc log-dump.sh: better logging in case of error from listing GCS 2020-03-05 10:40:46 +01:00
Janek Łukaszewicz
eaeceb9f98 Bump logexporter version to v20200227-da16e1b17 2020-03-04 16:23:47 +01:00
André Bauer
adc59271d3 updated fluentd to 1.9.2 & use docker builder pattern in dockerfile 
Signed-off-by: André Bauer <monotek23@gmail.com>
 2020-03-04 15:15:53 +01:00
Kubernetes Prow Robot
76245147f3
Merge pull request #88598 from jennybuckley/base-image 
Update etcd debian base image to v2.0.0
 2020-03-03 23:17:47 -08:00
Aleksandra Malinowska
472a935294 Update Cluster Autoscaler version to 1.18.0-gke.0 2020-03-03 14:42:25 +01:00
Kubernetes Prow Robot
5726fa2184
Merge pull request #88747 from BenTheElder/approvers 
update cluster/ approvers
 2020-03-03 00:17:51 -08:00
Kubernetes Prow Robot
eaceb7bf5c
Merge pull request #88419 from Jefftree/netproxy-udstoken 
Add support for token authentication with network proxy
 2020-03-02 22:13:37 -08:00
Jefftree
2a98cb7f8b Use GRPC mode for network proxy 2020-03-02 15:54:52 -08:00
Benjamin Elder
efe35b9a9a move eparis and zmerlynn to cluster/ emeritus_approvers 2020-03-02 12:49:39 -08:00
Benjamin Elder
904c2d8bc0 add bentheelder to cluster/ approvers 2020-03-02 12:46:24 -08:00
Jefftree
0989770135 Update network proxy to v0.0.7 2020-03-02 10:09:00 -08:00
Jefftree
4c54241c3d Support token authentication for network proxy 2020-03-01 17:24:48 -08:00
Davanum Srinivas
f92c55a476
Make sure we fail the job and log more details when it does 2020-03-01 09:14:04 -05:00
Davanum Srinivas
bdea23380b
Move conformance image to debian:stretch-slim 
Pros:
- really small image (see comparison below)
- we need to get rid of hyperkube in upcoming releases

```
davanum@cloudshell:~$ docker images
REPOSITORY                                       TAG                 IMAGE ID            CREATED             SIZE
debian                                           stretch-slim        4e6990ebcef5        4 days ago          55.3MB
gcr.io/google-containers/debian-hyperkube-base   0.12.1              a46476511725        13 months ago       393MB
```
 2020-03-01 09:10:07 -05:00
Antonin Bas
97e8bf5f84 Fix default regular expressions in conformance tests runner 
[Serial] should be \[Serial\]
[Conformance] should be \[Conformance\]
 2020-02-27 17:38:09 -08:00
Kubernetes Prow Robot
641616362d
Merge pull request #88133 from julianvmodesto/dry-run-tests 
Cleanup --dry-run values in tests, docs, and scripts
 2020-02-27 11:33:42 -08:00
jennybuckley
7346579a03 Update etcd debian base image to v2.0.0 2020-02-26 14:29:48 -08:00
Kubernetes Prow Robot
831dae75bf
Merge pull request #88185 from vinayakankugoyal/appendandreplace 
append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.…
 2020-02-26 13:33:19 -08:00
Kubernetes Prow Robot
add2e8b4d0
Merge pull request #88519 from mm4tt/cluster-gce-owners 
Make sig-scalability reviewers / approvers of cluster/gce
 2020-02-26 08:22:27 -08:00
Mateusz Matejczyk
98df9d9db6 Make sig-scalability reviewers / approvers of cluster/gce 
Justification: Our CI/CD tests are based on gce provider, people from our sig are in top contributors for this directory.
 2020-02-25 13:18:32 +01:00
Mateusz Matejczyk
6739bde9ca Create OWNERS file for cluster/log-dump 
Make sig-scalability-reviewers and sig-scalability-approvers reviewers and approvals of that dir.
 2020-02-25 13:12:54 +01:00
Vinayak Goyal
388ebfe7d0 append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.sh fails for prefixes that contain quotes and = sign. 2020-02-24 17:35:36 -08:00
Kubernetes Prow Robot
c8814fd5c6
Merge pull request #88175 from yliaog/windep 
added nodeSelector to constrain it to Linux only
 2020-02-23 12:32:47 -08:00
Matt Matejczyk
c20e604377 Revert "log-dump.sh: allow to dump extra log files" 
This reverts commit c43b940586.
 2020-02-21 14:27:02 +01:00
Kubernetes Prow Robot
4e26c35064
Merge pull request #88383 from BenTheElder/get-kube-auth 
fix get-kube authorization headers
 2020-02-21 02:36:32 -08:00