Commit Graph

10318 Commits

Author SHA1 Message Date
Sascha Grunert
7933368460
Update CNI plugins to v1.3.0
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-08-17 09:50:53 +02:00
Sascha Grunert
34a89f039b
Update cri-tools to v1.28.0
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-08-14 09:56:07 +02:00
Humble Chirammal
85c385d410 Update the container images used in cloudbuild to their latest version
This carry below GOLLANG_VERSION which got many CVE fixes:

/workspace # echo $GOLANG_VERSION
1.20.5
/workspace #

CVE-2023-29403 and Go issue https://go.dev/issue/60272.
CVE-2023-29404 and CVE-2023-29405:
  Go issues https://go.dev/issue/60305 and https://go.dev/issue/60306
CVE-2023-29402 and Go issue https://go.dev/issue/60167

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2023-08-03 00:09:53 +05:30
Marko Mudrinić
294c7df328
Avoid pulling node-problem-detector through CDN
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2023-07-30 13:02:17 +02:00
Davanum Srinivas
b4ef4015a2
Avoid pulling mounter.tar through the CDN
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-07-28 22:15:55 -04:00
Wojciech Tyczyński
4e2e059c7b Graduate RemainingItemCount to GA 2023-07-21 16:25:21 +02:00
Wojciech Tyczyński
6acfa3cb4a Graduate APIListChunking to GA 2023-07-21 14:09:40 +02:00
Sascha Grunert
a35608cc61
Update debian-base for test images and others
Bump all users of debian-base to the latest bookworm image.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-07-18 16:39:03 +02:00
Kubernetes Prow Robot
b3fc4cf7a9
Merge pull request #119386 from dgrisonnet/metrics-server-nanny
addons/metrics-server: fix nanny rbac permissions
2023-07-18 07:19:21 -07:00
Kubernetes Prow Robot
d43e6705f1
Merge pull request #119095 from saschagrunert/debian-base-bookworm
Update debian-base to bookworm
2023-07-18 02:11:08 -07:00
Damien Grisonnet
3fd40ffb0e addons/metrics-server: fix nanny rbac permissions
Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
2023-07-18 10:37:55 +02:00
SataQiu
148acc8632 enable arm64 support for GCE node configuration 2023-07-13 14:16:46 +08:00
Kubernetes Prow Robot
c1d4ec0677
Merge pull request #118537 from SataQiu/fix-cluster-gce-20230607
replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags
2023-07-05 10:40:57 -07:00
Sascha Grunert
5e1777be52
Update debian-base to bookworm
Rolling out the latest bookworm base image.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-07-05 16:13:03 +02:00
bzsuni
b4f479d1f2
bump npd to v0.8.13
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-07-05 10:02:06 +08:00
tao.yang
4517d3004a bump kube-dns to v1.22.23
Signed-off-by: tao.yang <tao.yang@daocloud.io>
2023-07-03 16:34:47 +08:00
guangli.bao
fdd992da86 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
2023-06-21 11:09:15 +08:00
Kubernetes Prow Robot
fa78f28f0a
Merge pull request #117522 from pawbana/auth-provider-gcp-windows
Added support for image credential provider for windows and arm64 on gce
2023-06-15 17:48:38 -07:00
Antonio Ojea
e0f273ffda use ingress-gce-glbc v1.23.1 image for CI
Change-Id: Ia2dacdc1d8fd3e369b9dcc0ec8b2653f3a834057
2023-06-14 10:40:01 +00:00
SataQiu
ed429c4388 replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags 2023-06-07 23:24:04 +08:00
Kubernetes Prow Robot
cb8d9f6867
Merge pull request #117283 from defo89/pv-recycler-change-cmd
change pv recycler scrub cmd to find -delete
2023-05-26 10:50:52 -07:00
Jingyuan Liang
4dfc684b34 Set kube-proxy memory request to 50Mi
With optional override using KUBE_PROXY_MEMORY_REQUEST following the
KUBE_PROXY_CPU_REQUEST pattern.
2023-05-26 01:01:33 +00:00
Kubernetes Prow Robot
15a1f9a39d
Merge pull request #117921 from kkkkun/clean-up-etcd-version
clean up unsupport etcd version
2023-05-18 20:30:28 -07:00
Bogesz
12f8eeaf9b
fixed typo in get-kube.sh 2023-05-19 00:47:29 +02:00
Kubernetes Prow Robot
e6915647a7
Merge pull request #118082 from rjsadow/master
fix: move to `dl.k8s.io` from `kubernetes-release` bucket
2023-05-17 15:42:40 -07:00
Ricky Sadowski
b76ef2e095 fix: move to dl.k8s.io from kubernetes-release bucket
Signed-off-by: Ricky Sadowski <richard.j.sadowski@gmail.com>
2023-05-17 18:30:54 +00:00
Kubernetes Prow Robot
b950f7ffb6
Merge pull request #118027 from humblec/hack-install-etcd
etcd: Update version to 3.5.9
2023-05-17 04:52:33 -07:00
Kubernetes Prow Robot
9f6f17b899
Merge pull request #117970 from kkkkun/replace_etcd_build_to_build.sh
replace etcd build to build.sh
2023-05-17 01:38:33 -07:00
kkkkun
8b4840aa37 clean up unsupport etcd version
Signed-off-by: kkkkun <scuzk373x@gmail.com>
2023-05-17 16:35:50 +08:00
Humble Chirammal
e3eb4bd0c5 updating dependencies.yaml for etcd v3.5.9 version
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2023-05-16 20:27:17 +05:30
Kubernetes Prow Robot
54dbb93388
Merge pull request #117999 from kkkkun/bump-etcd-image-3.5.9-0
etcd: Build image 3.5.9-0
2023-05-16 07:07:36 -07:00
Kubernetes Prow Robot
8411524daa
Merge pull request #117573 from pacoxu/use-allowlist
user --prune-allowlist in kube-addons.sh
2023-05-15 13:21:58 -07:00
Paco Xu
f562375c8a add changelog for kube-addon-manager v9.1.7 2023-05-15 09:39:45 +08:00
Kubernetes Prow Robot
4f5a2256f9
Merge pull request #117428 from cbandy/etcd-testing-setenv
Replace os.Setenv with testing.T.Setenv in tests
2023-05-13 12:29:26 -07:00
Kubernetes Prow Robot
9bb6db25fc
Merge pull request #117950 from rjsadow/master
fix: use dl.k8s.io, not kubernetes-release bucket
2023-05-13 06:47:26 -07:00
Ricky Sadowski
8580c116d5 fix: use dl.k8s.io, not kubernetes-release bucket
This PR updates changes related references to the legacy
release bucket, excluding CHANGELOG updates.

Signed-off-by: Ricky Sadowski <richard.j.sadowski@gmail.com>
2023-05-13 10:57:41 +00:00
kkkkun
655f2f7401 replace build to build.sh
Signed-off-by: kkkkun <scuzk373x@gmail.com>
2023-05-12 17:06:07 +08:00
kkkkun
7681135f1b etcd: Build image 3.5.9-0
Signed-off-by: kkkkun <scuzk373x@gmail.com>
2023-05-12 11:14:02 +08:00
Paco Xu
f7948c6e2e use kubectl v1.27.1 in cluster addon manager
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-05-12 09:34:56 +08:00
Paco Xu
eb1483fe64 user --prune-allowlist in kube-addons.sh
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-05-12 09:34:56 +08:00
Humble Chirammal
bfb4f8b707 etcd version monitor build go version update to 1.19.9
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2023-05-11 12:36:46 +05:30
Humble Chirammal
0ae902fca4 update golang version of etcd build to 1.19.9
As per https://github.com/etcd-io/etcd/blob/main/.go-version it is
1.19.9.

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2023-05-11 10:17:13 +05:30
Kubernetes Prow Robot
c2efaa7908
Merge pull request #116526 from pacoxu/cluster-autoscaler-upgrade
upgrade cluster-autoscaler v1.26.1 to fix ci warnings
2023-05-10 13:07:14 -07:00
Kubernetes Prow Robot
626b2db1ca
Merge pull request #117335 from kkkkun/update-etcd-3.5.8
etcd: Update version to 3.5.8
2023-05-10 03:38:59 -07:00
Kubernetes Prow Robot
714221dbaa
Merge pull request #117879 from kkkkun/fix-make-etcd-image-failed
Fix make etcd image failed
2023-05-09 05:28:16 -07:00
kkkkun
aab02d52f4 Fix make etcd image failed
Signed-off-by: kkkkun <scuzk373x@gmail.com>
2023-05-09 15:45:26 +08:00
Kubernetes Prow Robot
dd43d864c1
Merge pull request #116901 from pacoxu/cleanup-KubeletCredentialProviders
remove GAed KubeletCredentialProviders (1.28)
2023-05-08 07:55:53 -07:00
kkkkun
c56839c0a1 etcd: Update version to 3.5.8
Signed-off-by: kkkkun <scuzk373x@gmail.com>
2023-05-06 17:29:47 +08:00
Kubernetes Prow Robot
f82a6ac72d
Merge pull request #115043 from bobbypage/image-family
cluster/gce: Fetch image from image family
2023-05-03 08:54:13 -07:00
Kubernetes Prow Robot
e153766a2a
Merge pull request #117545 from saschagrunert/cri-tools
Update cri-tools to v1.27.0
2023-05-02 08:18:43 -07:00
Paweł Banaszewski
859690d72a Added support for image credential provider for windows and arm64 on gce 2023-04-28 21:28:26 +00:00
Paweł Banaszewski
53c9103a1d Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests 2023-04-28 11:47:08 +00:00
Kubernetes Prow Robot
3a15029a95
Merge pull request #117643 from humblec/etcd
update the etcd base image to v1.4.2
2023-04-27 11:10:27 -07:00
Humble Chirammal
f24d1d2c95 use go 1.19.x for etcd version monitor compilation
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2023-04-27 20:21:00 +05:30
Humble Chirammal
91df71be54 correct etcd base image reference in the doc
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2023-04-27 18:11:39 +05:30
Humble Chirammal
6c8be35fa8 update the etcd base image to v1.4.2
The current base v1.3.0 has many CVEs[1] which are addressed in latest
versions of the bullseye

[1] ex:
CVE-2022-2509
CVE-2021-46828

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2023-04-27 17:06:54 +05:30
Andrew Sy Kim
96eaed9980 cluster/gce: update cloud-controller-manager to use go-runner
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2023-04-26 11:17:28 +00:00
Andrew Sy Kim
0d27d3cfff cluster/gce: update cloud-provider-gcp image to latest tagged version
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2023-04-26 11:13:29 +00:00
Kubernetes Prow Robot
c0804231b9
Merge pull request #117521 from nberlee/fix-coredns-rbac
remove nodes resource from CoreDNS RBAC manifest
2023-04-24 10:57:13 -07:00
Sascha Grunert
bc00f5c071
Update cri-tools to v1.27.0
Updating cri-tools to the latest release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-04-24 08:52:25 +02:00
Nico Berlee
39e52449f9
remove nodes resource from CoreDNS RBAC manifest
This commit syncs RBAC from coredns/deployment and removes a get nodes
RBAC.

Historically the federation CoreDNS plugin needed the nodes resource to
fetch zone and region labels.

However, the CoreDNS federation plugin was deprecated and cleaned up a
long time ago and removed the Nodes RBAC requirement here in
`coredns/deployment` coredns.yaml.sed:
https://github.com/coredns/deployment/pull/229

This change however, never made it to `kubernetes/kubernetes`.

Signed-off-by: Nico Berlee <nico.berlee@on2it.net>
2023-04-21 15:10:31 +02:00
kkkkun
be6709044a etcd: Build image 3.5.8-0
Signed-off-by: kkkkun <scuzk373x@gmail.com>
2023-04-19 22:08:45 +08:00
Chris Bandy
f3b9e0ddc9 Replace os.Setenv with testing.T.Setenv in tests
T.Setenv ensures that the environment is returned to its prior state
when the test ends. It also panics when called from a parallel test to
prevent racy test interdependencies.

Similarly, T.Cleanup ensures the environment is restored after a test
or any of its parallel sub-tests call os.Unsetenv.
2023-04-17 20:55:49 -05:00
Dmitri Fedotov
625c302505 change pv recycler scrub cmd to find -delete
PVs with large amount of files cannot be recycted with "rm" command and
are left in "Failed" state.
Hence we are switching to "find -delete" command.
2023-04-13 12:19:01 +03:00
Kubernetes Prow Robot
190e861f02
Merge pull request #117121 from dgrisonnet/ms-15s-resolution
Set metrics-server's metric-resolution to 15s
2023-04-11 20:21:45 -07:00
Kubernetes Prow Robot
02f1f573b9
Merge pull request #117120 from dgrisonnet/bump-ms-0.6.3
Bump metrics-server to v0.6.3
2023-04-11 20:21:38 -07:00
Kubernetes Prow Robot
55e2a8db50
Merge pull request #116950 from tosi3k/network-gce
Do not look at VPC-related resources outside the cluster's network
2023-04-11 19:17:22 -07:00
Kubernetes Prow Robot
67cc86d00b
Merge pull request #116649 from saschagrunert/cri-tools
Update cri-tools to v1.26.1
2023-04-11 18:18:48 -07:00
Kubernetes Prow Robot
68f873250f
Merge pull request #116348 from jkh52/knp-0.1.2
Bump Konnectivity to 0.1.2
2023-04-11 15:36:11 -07:00
Kubernetes Prow Robot
0c969ad660
Merge pull request #115133 from ffromani/podresources-windows
node: create podresources endpoint also on windows
2023-04-11 15:35:19 -07:00
Damien Grisonnet
08a324bf51 cluster/addons: set metrics-resolution to 15s
Align metrics-server metrics-resolution with the upstream manifests so
that scalability tests are running a similar configuration of
metrics-server as the one we are running in the e2e tests.

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
2023-04-05 20:07:04 +02:00
Damien Grisonnet
eba18d503c cluster/addons: bump metrics-server to v0.6.3
Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
2023-04-05 20:05:39 +02:00
Paco Xu
70369bfe29 remove GAed KubeletCredentialProviders 2023-03-31 10:09:58 +08:00
Antoni Zawodny
beb329f4bf Do not look at VPC-related resources outside the cluster's network 2023-03-27 17:44:25 +02:00
Jordan Liggitt
188844c3db
Make prerelease tag optional in CI versions 2023-03-21 09:23:45 -04:00
Jordan Liggitt
2010eaac52
Annotate CI version regexes 2023-03-21 09:08:05 -04:00
Jordan Liggitt
9ba4df15f8
Drop unused regex grouping 2023-03-21 09:08:05 -04:00
Jordan Liggitt
bff737d328
Update comments 2023-03-21 09:08:04 -04:00
Sascha Grunert
630af564be
Update cri-tools to v1.26.1
Addresses CVE-2022-41723: https://github.com/advisories/GHSA-vvpx-j8f3-3w6h

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-03-15 15:22:24 +01:00
Francesco Romani
b430464df0 gce: podresources: don't disable on windows
Now that podresources socket has been fixed on windows,
we can re-enable on GCE CI.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2023-03-14 22:39:56 +01:00
Kubernetes Prow Robot
c2ad27aaa2
Merge pull request #115619 from jprzychodzen/cluster-kcm-ccm
[GCE] [cluster] Split run controllers per controller-manager
2023-03-14 09:39:34 -07:00
Kubernetes Prow Robot
4f76e4a0fd
Merge pull request #115603 from pacoxu/coredns-v1.10.1
update coredns to v1.10.1
2023-03-14 08:36:28 -07:00
Arnaud Meukam
033f4b1772
Stop clear non-existant retention policy rule
This command is now not necessary and create some noise on the trail
logs.
See: https://github.com/kubernetes/k8s.io/pull/4902

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-13 11:35:10 +01:00
Paco Xu
8bb328680c upgrade cluster-autoscaler v1.26.1 to fix ci warnings 2023-03-13 15:41:28 +08:00
Joseph Anttila Hall
31e1df9ae6
Bump Konnectivity to 0.1.2 2023-03-10 12:48:25 -08:00
Paco Xu
a1def4b9c0 pod-infra-container-image: update comments as it will be removed in couple more releases
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-03-09 11:14:32 +08:00
torredil
6aebda9b1e Remove AWS legacy cloud provider + EBS in-tree storage plugin
Signed-off-by: torredil <torredil@amazon.com>
2023-03-06 14:01:15 +00:00
Arnaud Meukam
471985557a
remove retention policy for staging buckets
Follow-up of:
  - https://github.com/kubernetes/kubernetes/pull/115634

The current retention policy prevent creation or update of new objects
until the existing one are deleted based on the retention period.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-02 19:15:29 +01:00
Arnaud Meukam
bf08cc38da
Add retention policy to staging buckets
Related to:
  - https://github.com/kubernetes/k8s.io/issues/4691

Ensure new staging bucketst are regional and apply lifecycle policy to
the objects of each staging bucket.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2023-03-01 17:25:38 +01:00
cyclinder
4f913dbcdd bump kube-dns to v1.22.20 2023-02-27 14:34:53 +08:00
Paco Xu
b24725eed7 update coredns to v1.10.1
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-02-26 09:25:40 +08:00
Davanum Srinivas
4ecb4670cc
Remove unnecessary ETCD_UNSUPPORTED_ARCH for arm64
we should only use this env var for `arm`, since `arm64` is fully
supported by etcd folks, let us drop this!

(ex - https://github.com/etcd-io/etcd/releases/tag/v3.5.6)

ppc64le comment should be dropped as well

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-02-16 21:29:13 -05:00
Kubernetes Prow Robot
5d9d06aa47
Merge pull request #115717 from pacoxu/node-dns-v1.22.17
update node-local-dns to v1.22.17
2023-02-13 23:43:30 -08:00
Paco Xu
ceb37c3a5c update node-local-dns to 1.22.18 2023-02-14 09:37:35 +08:00
Stephen Kitt
b62165f445
Drop cp from the etcd images
This was used by migrate-if-needed.sh, but that has been replaced by
the migrate Go program which doesn't need external cp.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2023-02-13 18:06:59 +01:00
Antonio Ojea
07fc074a67 Revert "use kube-proxy defaults values for CI"
This reverts commit bafeacd14d.
2023-02-13 11:41:34 +00:00
Jakub Przychodzeń
544456608f Split run controllers per controller-manager 2023-02-08 14:40:04 +00:00
Mohamed Zaian
90570b7595 etcd: Update to version 3.5.7 2023-01-27 17:24:00 +01:00
Mohamed Zaian
e98853ec28 etcd: Build image 3.5.7-0 2023-01-26 14:44:24 +01:00
Kubernetes Prow Robot
afe936fee5
Merge pull request #115191 from jkh52/zero-one-one
Bump konnectivity-client to v0.1.1
2023-01-20 17:56:02 -08:00