Commit Graph

13450 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
0dcf9c0826 Merge pull request #101536 from jingxu97/apr/mounttest
Add unit test for clean up mountpoint logic if path does not exist
2021-05-24 21:49:13 -07:00
walter
13ab65d356 Upgrade konnectivity-client for GRPC connection fixes
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167.
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5.
2021-05-24 14:53:30 -07:00
Julian V. Modesto
55ff963017 Make validation totalAnnotationSizeLimitB public.
Replace the forked totalAnnotationSizeLimitB with
apimachineryvalidation.TotalAnnotationSizeLimitB.
2021-05-24 16:50:18 -04:00
Kubernetes Prow Robot
a8985871f9 Merge pull request #102217 from tkashem/client-go-refactor-retry
client-go: refactor retry logic so it can be reused
2021-05-24 11:31:51 -07:00
Kubernetes Prow Robot
ebd61572c5 Merge pull request #92739 from cnphil/fail-open-audit-log
Add fail-open audit logs to validating admission webhook
2021-05-24 08:59:38 -07:00
Abu Kashem
5fdf196b4e client-go: refactor retry logic so it can be reused 2021-05-24 09:41:47 -04:00
刁浩 10284789
9173414da6 simplify returning boolean expression in staging/src/k8s.io/client-go/tools
Signed-off-by: 刁浩 10284789 <diao.hao@zte.com.cn>
2021-05-24 07:15:36 +00:00
Kubernetes Prow Robot
d8f9e4587a Merge pull request #101742 from ravisantoshgudimetla/promote-maxSurge-beta
Promote DS MaxSurge to beta
2021-05-23 04:33:38 -07:00
Jordan Liggitt
7a227d302d Fix expired unit test certs 2021-05-22 20:58:53 -04:00
刁浩 10284789
b344d4d442 api link is missing
Signed-off-by: 刁浩 10284789 <diao.hao@zte.com.cn>
2021-05-22 08:52:39 +00:00
Kubernetes Prow Robot
a2357f4516 Merge pull request #100136 from Danil-Grigorev/disable-cloud-providers-fg
Add feature gate to disable all in-tree cloud providers
2021-05-21 15:39:36 -07:00
Kubernetes Prow Robot
863e22cc93 Merge pull request #102175 from ankeesler/exec-plugin-with-basic-auth
exec credential provider: don't run exec plugin with basic auth
2021-05-21 11:52:10 -07:00
Andrew Keesler
9dee2b95c2 exec credential provider: don't run exec plugin with basic auth
If a user specifies basic auth, then apply the same short circuit logic
that we do for bearer tokens (see comment).

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2021-05-21 13:51:03 -04:00
Kubernetes Prow Robot
fadf85d6d0 Merge pull request #98350 from nilo19/bug/cherry-pick-482
Cherry pick #482 from cloud provider azure: aggregate errors when putting vmss
2021-05-21 10:42:11 -07:00
Kubernetes Prow Robot
e5bee02452 Merge pull request #102185 from tkashem/apf-seats-in-use
apf: introduce the concept of width for a request
2021-05-21 08:41:23 -07:00
Xiaojun Hu
9fe7c8955b add fail-open audit logs to validating and mutating admission webhook 2021-05-21 10:44:12 -04:00
Kubernetes Prow Robot
04a0dcec8d Merge pull request #99371 from tiloso/staticcheck-apimachinery-util
Fix staticcheck in k8s.io/apimachinery/pkg/util
2021-05-21 07:38:46 -07:00
Danil-Grigorev
5d57b3794c Add DisableCloudProviders FG
FeatureGate acts as a secondary switch to disable cloud-controller loops
in KCM, Kubelet and KAPI.

Provide comprehensive logging information to users, so they will be
guided in adoption of out-of-tree cloud provider implementation.
2021-05-21 16:09:44 +02:00
Kubernetes Prow Robot
abe209b086 Merge pull request #102193 from gautierdelorme/bump_kustomize
upgrade kustomize to v4.1.3
2021-05-21 03:16:46 -07:00
Kubernetes Prow Robot
6eef9fe925 Merge pull request #102197 from liggitt/crd-lifecycle
Propagate server version correctly to apiextensions-apiserver, stop serving v1beta1 CRDs
2021-05-21 00:28:57 -07:00
Gautier Delorme
ac753f44cc upgrade kustomize to v4.1.3
Signed-off-by: Gautier Delorme <gautier.delorme@gmail.com>
2021-05-21 09:11:30 +02:00
qini
715a4c4112 aggregate errors when putting vmss 2021-05-21 10:29:13 +08:00
Kubernetes Prow Robot
e5124ead9a Merge pull request #102153 from tallclair/pss
Add staging directory for pod-security-admission
2021-05-20 19:10:56 -07:00
Tim Allclair
908d25fac9 Fix copy-pasta 2021-05-20 18:11:15 -07:00
Tim Allclair
0005c72285 s/standards/admission/ 2021-05-20 17:28:57 -07:00
Jordan Liggitt
13f567d0f2 Propagate server version correctly to apiextensions-apiserver, stop serving v1beta1 CRDs 2021-05-20 20:23:53 -04:00
Kubernetes Prow Robot
5de1a754c8 Merge pull request #102147 from kolyshkin/update-runc-rc94-take-II
vendor: bump runc to rc95
2021-05-20 17:16:56 -07:00
Kubernetes Prow Robot
6e4e32985a Merge pull request #99576 from marosset/windows-host-process-work
Windows host process work
2021-05-20 14:16:15 -07:00
Kubernetes Prow Robot
8a70c48553 Merge pull request #102159 from roycaihw/mark-containerimage-name-optional
Mark ContainerImage.names as optional
2021-05-20 13:14:40 -07:00
Kubernetes Prow Robot
77e769b040 Merge pull request #100754 from liggitt/warning-ga
Graduate WarningHeader feature to GA
2021-05-20 13:14:16 -07:00
Abu Kashem
b50507d98b apf: add "width" for request
all requests have a width of 1 to maintain current behavior.
2021-05-20 13:44:58 -04:00
Kubernetes Prow Robot
f52ab3845d Merge pull request #101099 from pacoxu/podpreset-clean
remove pod preset testdata and args
2021-05-20 10:40:36 -07:00
Kubernetes Prow Robot
c9fb3c8a1b Merge pull request #102005 from feiskyer/vmss-sku-fix
Azure: avoid setting cached Sku when updating VMSS and VMSS instances
2021-05-20 01:41:17 -07:00
Kubernetes Prow Robot
f4f238e038 Merge pull request #101601 from AliceZhang2016/indexed-job-stable-hostname
specify pod name and hostname in indexed job
2021-05-20 01:41:05 -07:00
Kir Kolyshkin
f3cdfc488e vendor: bump runc to rc95
runc rc95 contains a fix for CVE-2021-30465.

runc rc94 provides fixes and improvements.

One notable change is cgroup manager's Set now accept Resources rather
than Cgroup (see https://github.com/opencontainers/runc/pull/2906).
Modify the code accordingly.

Also update runc dependencies (as hinted by hack/lint-depdendencies.sh):

        github.com/cilium/ebpf v0.5.0
        github.com/containerd/console v1.0.2
        github.com/coreos/go-systemd/v22 v22.3.1
        github.com/godbus/dbus/v5 v5.0.4
        github.com/moby/sys/mountinfo v0.4.1
        golang.org/x/sys v0.0.0-20210426230700-d19ff857e887
        github.com/google/go-cmp v0.5.4
        github.com/kr/pretty v0.2.1
        github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2021-05-19 23:51:59 -07:00
Kubernetes Prow Robot
150675b164 Merge pull request #102090 from mengjiao-liu/fix-data-race-csi
Prevent data race condition  in csi unit tests
2021-05-19 19:47:04 -07:00
Haowei Cai
dc8bc41f14 generated 2021-05-19 18:55:56 -07:00
Haowei Cai
1652e59c9b mark ContainerImage.names as optional
kubelet is the only writer of v1.Node .status.images[].names. When an
image has neither RepoDigests nor RepoTags, the value gets stored in
etcd as null. Marking the field as optional can help JSON API clients
to avoid hitting serialization error when the returned status contains
null .status.images[].names.
2021-05-19 18:55:56 -07:00
Tim Allclair
3115b65ce6 Add PULL_REQUEST_TEMPLATE.md 2021-05-19 18:52:36 -07:00
Kubernetes Prow Robot
f01c9e8683 Merge pull request #102030 from aojea/ingress_beta
bump ingress e2e tests  to v1
2021-05-19 17:23:17 -07:00
Kubernetes Prow Robot
c115435adc Merge pull request #101688 from liggitt/field-warnings
Add field-level warning plumbing and add pod spec warnings
2021-05-19 17:23:04 -07:00
Tim Allclair
5e6f0fe8d0 Use sig-auth-policy-* OWNERS alias 2021-05-19 16:24:38 -07:00
marosset
51a02fdb80 Updating CRI API to include Windows Pod/Sandbox configs 2021-05-19 16:24:13 -07:00
marosset
93da0fd45d API support for Windows host process containers
Co-authored-by: James Sturtevant <jstur@microsoft.com>
2021-05-19 16:24:13 -07:00
Tim Allclair
c3d0a530ee Add placeholder doc.go 2021-05-19 15:56:01 -07:00
Kubernetes Prow Robot
1a52527549 Merge pull request #102105 from julianvmodesto/ssa-big-last-applied
Respect annotation size limit for SSA last-applied.
2021-05-19 15:25:23 -07:00
ravisantoshgudimetla
040e9c8b51 Promote DS MaxSurge to beta 2021-05-19 16:12:52 -04:00
Kubernetes Prow Robot
bc637a7a07 Merge pull request #102083 from andyzhangx/delete-disk-issue
fix: delete non existing disk issue
2021-05-19 12:47:02 -07:00
Tim Allclair
711b8e3a9a Add staging directory for pod-security-standards subproject 2021-05-19 11:51:50 -07:00
Julian V. Modesto
6054320be1 Respect annotation size limit for SSA last-applied.
To support CSA and SSA interoperability, SSA updates the CSA
last-applied annotation.

This change ensures we don't set a big last-applied annotation if the
value is over the annotation limits.

Also, make sure that it's possible to opt-out of this behavior by
setting the CSA annotation to "" the empty string.
2021-05-19 13:31:13 -04:00