github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
100,077 Commits 1 Branch 31 Tags 1,019 MiB
ae3d0d5031
Commit Graph

9679 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ae35c6f10c
Merge pull request #101255 from basantsa1989/stack-type 
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
 2021-04-22 15:55:28 -07:00
Kubernetes Prow Robot
6aa683e9cf
Merge pull request #100639 from zshihang/proxy 
dnat to 169.254.169.252 for metadata server traffic
 2021-04-21 11:15:51 -07:00
Kubernetes Prow Robot
3cc043cfd2
Merge pull request #101262 from spencer-p/master 
Upgrade addon-manager baseimage to debian-base v1.0.1
 2021-04-20 20:36:22 -07:00
Kubernetes Prow Robot
41505f7109
Merge pull request #101176 from jkh52/master 
kube-master-installation: improve systemd cross-unit robustness.
 2021-04-20 00:42:45 -07:00
Spencer Peterson
530072a38f Addon-manager baseimage upgrade debian-base v1.0.1 
The previous base image, debian-base:v1.0.0, is affected by
CVE-2017-14062. This change upgrades to the most recent Debian stretch
image from the following command:

```
$ gcloud container images list-tags k8s.gcr.io/debian-base-amd64
DIGEST        TAGS    TIMESTAMP
7e9f2f88b813  v1.0.1  2020-02-18T13:18:50
d7be39e143d4  v2.0.0  2019-11-01T13:14:18
5f25d97ece90  v1.0.0  2019-03-25T10:59:09
dddca919baec  1.0.0   2019-03-25T09:43:09
```

This marks kube-addon-manager version 9.1.5.

Change-Id: I02321a781fb19dd33c0a19671b56c0b12d9b52fd
 2021-04-19 20:36:44 -07:00
Kubernetes Prow Robot
46b0ad1327
Merge pull request #101207 from vinayakankugoyal/sshproxy 
If kube-apiserver is running as non-root then set the permissions of …
 2021-04-19 17:24:33 -07:00
Joseph Anttila Hall
05bcc72dc2 kube-master-installation: reboot on failure. 
Also some minor reliability tweaks.
 2021-04-19 17:16:21 -07:00
Vinayak Goyal
94e34da471 If kube-apiserver is running as non-root then set the permissions of /etc/srv/sshproxy accordingly. 2021-04-19 13:16:06 -07:00
Basant Amarkhed
e15d811652 Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code) 2021-04-19 19:06:55 +00:00
Shihang Zhang
297ad30610 dnat to 169.254.169.252 for metadata server traffic 2021-04-19 10:47:51 -07:00
Kubernetes Prow Robot
4925cb66c9
Merge pull request #101238 from loburm/move_deprecated 
Add required fields to fluentd-gcp-scaler-policy CRD.
 2021-04-19 08:02:36 -07:00
Marian Lobur
41e39dd1fa Add required fields to fluentd-gcp-scaler-policy CRD. 2021-04-19 16:01:46 +02:00
Stephen Augustus
fac97f8a9b [go1.16] Update to go1.16.3 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-04-16 19:56:51 -04:00
Kubernetes Prow Robot
3ed71cf190
Merge pull request #100976 from jindijamie/master 
releng: Update debian-base and debian-iptables to buster-v1.6.0 to patch base image CVEs
 2021-04-16 12:56:34 -07:00
Kubernetes Prow Robot
28c877dcb6
Merge pull request #101043 from benhxy/tls-2 
Use GKE specific configuration for kubeconfig file generation
 2021-04-16 11:54:51 -07:00
Kubernetes Prow Robot
7ecd93ea1e
Merge pull request #100764 from benhxy/tls 
Use GKE specific configuration for kube-apiserver SNI cert
 2021-04-15 19:52:22 -07:00
Jeremy Edwards
c22f001a1b GCE Windows: Use authenticated HTTP GET against GCS if VM has cloud-platform scope. 2021-04-15 23:30:19 +00:00
Kubernetes Prow Robot
0d0d1889ed
Merge pull request #100930 from swetharepakula/update-glbc-image 
Update glbc image in glbc addon
 2021-04-15 12:59:01 -07:00
Kubernetes Prow Robot
24350a922e
Merge pull request #101086 from enj/enj/i/auth_owners_gen 
Prune stale entries from OWNERS files
 2021-04-15 08:27:50 -07:00
Kubernetes Prow Robot
74497632f4
Merge pull request #101015 from mborsz/retry 
Do not grep for curl --help for --retry-connrefused
 2021-04-14 07:02:57 -07:00
Kubernetes Prow Robot
50da4c6f61
Merge pull request #101021 from loburm/move_deprecated 
Switch fluentd-gcp-scaler policy to non deprecated api.
 2021-04-14 04:30:42 -07:00
Maciej Borsz
493adbada9 Do not grep for curl --help for --retry-connrefused 2021-04-14 08:32:21 +02:00
Swetha Repakula
f882eadbdc Update glbc image in addon 2021-04-13 19:32:03 -07:00
Kubernetes Prow Robot
f1c037889d
Merge pull request #100770 from avrittrohwer/configure-script-logging 
Add configure script logging instrumentation
 2021-04-13 18:06:42 -07:00
Monis Khan
91241eac9b
Prune stale entries from OWNERS files 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-04-13 20:54:50 -04:00
Kubernetes Prow Robot
318db993c8
Merge pull request #101020 from cindy52/bugfix/etcd 
Change file owner of /mnt/disks/master-pd/var/etcd  instead of /var/etcd
 2021-04-13 12:09:47 -07:00
Avritt Rohwer
d4495183c9 Add configure script logging instrumentation. 
- Add log functions to facilitate debug logging.
- Wrap commands called in main with debug logging.
- Configure a systemd service to forward the logs to the serial port.
- Add a 'retry-forever' function to harden download steps.
- Add default value support to 'get-metadata-value' function.
- Fix some spellcheck lints.
 2021-04-13 09:30:49 -07:00
Ben Hu
e3270e532c GKE specific kubeconfig 2021-04-12 22:47:39 +00:00
Ben Hu
ccb742c43c Resolve comments. Remove kubeconfig changes. 2021-04-12 22:39:53 +00:00
jindijamie
d1b205c9fd
Update Makefile 2021-04-12 14:32:54 -07:00
Marian Lobur
d4de8438e3 Switch fluentd-gcp-scaler policy to non deprecated api. 
Starting from Kubernetes 1.22 apiextensions.k8s.io/v1beta1 is removed.
Instead apiextensions.k8s.io/v1 should be used: https://kubernetes.io/docs/reference/using-api/deprecation-guide/#customresourcedefinition-v122
 2021-04-12 10:28:50 +02:00
Cindy Guo
03f60f4b60 chown on /mnt/disks/master-pd/var/etcd instead of /var/etcd 2021-04-12 08:21:01 +00:00
Kubernetes Prow Robot
a96000311f
Merge pull request #100956 from saschagrunert/cri-tools 
Update cri-tools to v1.21.0
 2021-04-12 00:35:59 -07:00
Kubernetes Prow Robot
dd95f3ab5a
Merge pull request #100980 from ibabou/update-containerd-path 
Update the containerd runtime binary path - gce
 2021-04-11 06:21:59 -07:00
Kubernetes Prow Robot
99301e672b
Merge pull request #100436 from vinayakankugoyal/apiservernonroot 
Fix kube-apiserver manifest.
 2021-04-10 20:29:35 -07:00
Antonio Ojea
93f4727aab gce configure containerd default_runtime_name 
move config to v2
 2021-04-11 00:48:22 +02:00
“Ibrahim
ec38cfcd15 Update the containerd runtime binary path - gce 2021-04-09 23:36:58 +00:00
jindijamie
7e7a6284be update debian-base to buster-v1.5.0 for CVEs 2021-04-09 19:27:10 +00:00
Kubernetes Prow Robot
5b038e6cff
Merge pull request #100635 from cindy52/etcd/rootless 
Run the etcd as non-root
 2021-04-09 05:19:37 -07:00
Sascha Grunert
33e0e035ea
Update cri-tools to v1.21.0 
This updates crictl to the latest available release.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-04-09 11:05:13 +02:00
Kubernetes Prow Robot
16082557cd
Merge pull request #100353 from zshihang/master 
strip prefix 'v' in coredns version if exists
 2021-04-08 20:29:55 -07:00
Kubernetes Prow Robot
96db2323a4
Merge pull request #100041 from vteratipally/update_npd_version 
bump npd version to latest v0.8.7
 2021-04-08 17:10:55 -07:00
Kubernetes Prow Robot
d8f3794b83
Merge pull request #68004 from saravanan30erd/fluentd-es 
isolate logging resources in separate namespace
 2021-04-08 14:26:31 -07:00
Cindy Guo
9f058079d2 run etcd as nonroot 
Co-authored-by: Vinayak Goyal <vinayakankugoyal@gmail.com>
 2021-04-08 20:51:45 +00:00
Kubernetes Prow Robot
efad544195
Merge pull request #100257 from swetharepakula/glbc-rbac-services 
Add `service/status` glbc rbac permissions
 2021-04-07 07:53:53 -07:00
Ben Hu
a2d094797d Use GKE specific configuration in startup scripts in GKE deployment. 2021-04-02 00:10:53 +00:00
Vinayak Goyal
4b3271a542 Fix kube-apiserver manifest. 2021-03-21 16:24:56 -07:00
“Ibrahim
bc3f6c1be9 Fix the containerd service check 2021-03-19 23:35:05 +00:00
saravanan palanisamy
b9696ae455 remove namespace for clusterRoleBinding object - fluentd-es addon 2021-03-19 12:08:14 +04:00
Shihang Zhang
d313e69c9d strip prefix 'v' in coredns version if exists 2021-03-18 10:38:06 -07:00