github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
113,250 Commits 1 Branch 31 Tags 1,019 MiB
b201c08cea
Commit Graph

11242 Commits

Author SHA1 Message Date
Paco Xu
0d2952202e kubeadm upgrade: fix dry run of backing up kubelet config file 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2022-12-16 17:02:28 +08:00
Kubernetes Prow Robot
c1c0e4fe0b
Merge pull request #114489 from aimuz/replace2tag 
kubeadm: replace Runtime.GOOS with go:build tag
 2022-12-15 07:27:47 -08:00
Kubernetes Prow Robot
930271fbd8
Merge pull request #114330 from chendave/backup_kubelet 
kubeadm: backup the kubelet config file before writting the new one
 2022-12-15 07:27:36 -08:00
aimuz
4860b67b48
kubeadm: replace Runtime.GOOS with go:build tag 
Signed-off-by: aimuz <mr.imuz@gmail.com>
 2022-12-15 17:57:45 +08:00
Dave Chen
cd1f082179 kubeadm: backup the kubelet config file before writting the new one 
This addresses the TODO item so that the old kubelet config file could
be recovered if something goes wrong.

Signed-off-by: Dave Chen <dave.chen@arm.com>
 2022-12-15 10:16:36 +08:00
Kubernetes Prow Robot
69fe066adc
Merge pull request #114477 from chendave/kubeadm_reviewer 
kubeadm: add chendave as kubeadm reviewer
 2022-12-14 13:01:36 -08:00
Kubernetes Prow Robot
bf49c7c0b5
Merge pull request #114080 from chendave/fix_testcases 
kubeadm: fix invalid testcase for `enforceRequirements`
 2022-12-14 11:55:56 -08:00
Kubernetes Prow Robot
08160f7975
Merge pull request #113465 from chendave/golang_generic 
kubeadm: bump to use golang generic
 2022-12-14 11:55:34 -08:00
SataQiu
2501a46b80 kubeadm: avoid CRI detection for phase subcommand when it's --cri-socket flag is not set 2022-12-14 12:00:49 +08:00
Paco Xu
861db2348e kubeadm: add feature gate EtcdLearnerMode alpha 2022-12-14 11:07:46 +08:00
Dave Chen
8995346259 kubeadm: add chendave as kubeadm reviewer 
Signed-off-by: Dave Chen <dave.chen@arm.com>
 2022-12-14 10:54:03 +08:00
Dave Chen
8c7609fbe2 kubeadm: bump to use golang generic 
Signed-off-by: Dave Chen <dave.chen@arm.com>
 2022-12-14 10:31:18 +08:00
Andy Goldstein
0bdcb93b06 Create new conversion Factory interface 
Create a new conversion Factory interface for CRDs, and split out
NewDelegatingConverter as a standalone package-level function, instead
of being part of CRConverterFactory.

Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>
 2022-12-13 14:38:21 -05:00
Kubernetes Prow Robot
6b9035513b
Merge pull request #113981 from TommyStarK/unit-tests/cmd-kube-controller-manager-app-options 
cmd/kube-controller-manager/app/options: Improving test coverage
 2022-12-13 06:25:34 -08:00
TommyStarK
454290c583 cmd/kube-controller-manager/app/options: Improving test coverage 
Add a snippet of the expected error string related to the aspect being tested

Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2022-12-13 14:05:48 +01:00
SataQiu
c51ce945a5 kubeadm: add missing --cri-socket flag for upload-certs phase 2022-12-13 16:59:17 +08:00
Paco Xu
f28f40e521 remove a flag check that was introduced in #112542; address several comments 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2022-12-13 14:00:29 +08:00
Aditi Sharma
214a0ee7b8 Migrate container runtime endpoint flag to config 
Signed-off-by: Aditi Sharma <adi.sky17@gmail.com>
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2022-12-13 14:00:29 +08:00
Kubernetes Prow Robot
014e3be258
Merge pull request #114409 from SataQiu/kubeadm-20221211 
kubeadm: cleanup the temporary workaround about kubelet --container-runtime flag
 2022-12-11 03:11:14 -08:00
SataQiu
76bb3364d2 kubeadm: cleanup the temporary workaround about kubelet --container-runtime flag 2022-12-11 15:52:12 +08:00
Kubernetes Prow Robot
d2ed6d355e
Merge pull request #114279 from pacoxu/coredns-v1.10.0 
update coredns to v1.10.0
 2022-12-10 12:21:52 -08:00
Kubernetes Prow Robot
b7684889be
Merge pull request #114379 from SergeyKanzhelev/RotateCertificateIsGA 
rotate-certificates is a GA feature now
 2022-12-10 09:06:24 -08:00
Kubernetes Prow Robot
f380944261
Merge pull request #114338 from champtar/kubeadm-priority 
kubeadm: set priority for "system-node-critical" Pods
 2022-12-10 09:05:48 -08:00
Kubernetes Prow Robot
9e3e47f56a
Merge pull request #114176 from QuantumEnergyE/kubeadm_retry_patch_node 
Retry patch when then service is unavailable or timeout.
 2022-12-10 06:05:26 -08:00
Kubernetes Prow Robot
7754f007d6
Merge pull request #114169 from jpbetz/improve-kubelet-flag-errors 
Improve error messages of flags that parse quantities and percentages
 2022-12-10 06:05:11 -08:00
TommyStarK
270141aa0b cmd/kube-controller-manager/app/options: Improving test coverage 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2022-12-10 13:36:12 +01:00
Kubernetes Prow Robot
2e6d3393f7
Merge pull request #113998 from SataQiu/fix-kubeadm-20221117 
kubeadm: respect user provided kubeconfig during discovery process
 2022-12-10 03:17:39 -08:00
Kubernetes Prow Robot
da588a31d4
Merge pull request #112627 from hj-johannes-lee/fix-typo-3 
Kubemark: fix typos to be HollowKubeletOptions
 2022-12-09 15:43:14 -08:00
Kubernetes Prow Robot
ee8e76c6ea
Merge pull request #113943 from Octopusjust/k8s-pr10 
Add test for cmd/kubeadm/app/constants/constants.go
 2022-12-09 14:35:31 -08:00
Kubernetes Prow Robot
15f47da1c9
Merge pull request #113874 from SataQiu/clean-20221113 
kubeadm: remove unused command flag constants
 2022-12-09 14:34:48 -08:00
Kubernetes Prow Robot
6d823a3815
Merge pull request #113823 from TommyStarK/unit-tests/cmd-kube-apiserver-app-options 
cmd/kube-apiserver/app/options: Improving test coverage
 2022-12-09 14:34:33 -08:00
Kubernetes Prow Robot
6c0f680be9
Merge pull request #113672 from falser101/fix/kubelet_cleanup 
fix: Remove dependency on github.com/pkg/errors
 2022-12-09 14:34:19 -08:00
Sergey Kanzhelev
3067259782 rotate-certificates is a GA feature now 2022-12-09 09:02:51 +00:00
Etienne Champetier
64eef3e9fa kubeadm: set priority for "system-node-critical" Pods 
Priority is normally set by the admission controller when missing.
For static pods there seems to be some corner cases, as, if priority
is not explicitly set, Graceful Node Shutdown will shutdown
static pods with the other pods that have priority 0 or unset.

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
 2022-12-07 14:19:28 -05:00
Paco Xu
34d845502f kubeadm: use coredns v1.10.0 2022-12-05 11:42:43 +08:00
Paco Xu
f0d1a39e8f add etcd 3.5.6-0 to kuebadm supported etcd version 2022-12-01 18:41:32 +08:00
QuantumEnergyE
847a39afc0 Retry patch when then service is unavailable or timeout. 2022-11-29 23:09:31 +08:00
Joe Betz
ab3c353227 Improve error messages for parse errors of --kube-reserved, --system-reserved and --qos-reserved 2022-11-28 16:35:26 -05:00
Dave Chen
2121ce17da kubeadm: fix invalid testcase for enforceRequirements 
These testcases are too vague, they are not test against the scenario
they want, but instead all of them are failed due to client cannot
be created.

`kubeconfig` file is created and mocked the function of `loadConfig` in
order to make those testcases valid.

Signed-off-by: Dave Chen <dave.chen@arm.com>
 2022-11-24 16:52:44 +08:00
SataQiu
21cd660a1f kubeadm: respect user provided kubeconfig during discovery process 2022-11-24 12:29:10 +08:00
Paco Xu
75f89875f8 use etcd 3.5.6-0 after promotion 2022-11-24 09:45:56 +08:00
TommyStarK
44c94f98b6 fix typo in cmd/kube-apiserver/app/options/validation_test.go 
Put back test case that was dropped by mistake.

Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2022-11-16 19:25:31 +01:00
ZhangYu
44285a16ec Add test for cmd/kubeadm/app/constants/constants.go 
Add test for cmd/kubeadm/app/constants/constants.go
 2022-11-16 14:50:32 +08:00
Mark Rossetti
534f052a8d
Updating pause image refernces to 3.9 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-11-14 10:24:54 -08:00
SataQiu
69547267ef kubeadm: remove unused command flag constants 2022-11-13 17:56:58 +08:00
Kubernetes Prow Robot
d1c0171aed
Merge pull request #111023 from pohly/dynamic-resource-allocation 
dynamic resource allocation
 2022-11-11 16:21:56 -08:00
Ed Bartosh
ae0f38437c kubelet: add support for dynamic resource allocation 
Dependencies need to be updated to use
github.com/container-orchestrated-devices/container-device-interface.

It's not decided yet whether we will implement Topology support
for DRA or not. Not having any toppology-related code
will help to avoid wrong impression that DRA is used as a hint
provider for the Topology Manager.
 2022-11-11 21:58:03 +01:00
Alexander Zielenski
3c68fe6596 fix aggregated discovery version sorting 
add test for level based priorities
 2022-11-10 17:16:14 -08:00
Patrick Ohly
0133df3929 kube-controller-manager: add ResourceClaim controller 
The controller uses the exact same logic as the generic ephemeral inline volume
controller, just for inline ResourceClaimTemplate -> ResourceClaim.

In addition, it supports removal of pods from the ReservedFor field when those
pods are known to not need the claim anymore. At the moment, only this special
case is supported. Removal of arbitrary objects would imply granting full read
access to all types to determine whether a) an object is gone and b) if the
current incarnation is the one which is listed in ReservedFor. This may get
added later.
 2022-11-10 20:23:50 +01:00
Patrick Ohly
5cca60f0b8 api: dynamic resource allocation API 
This adds a new resource.k8s.io API group with v1alpha1 as version. It contains
four new types: resource.ResourceClaim, resource.ResourceClass, resource.ResourceClaimTemplate, and
resource.PodScheduling.
 2022-11-10 20:08:24 +01:00
TommyStarK
47fdbd97d3 cmd/kube-apiserver/app/options: Improving test coverage 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2022-11-10 16:20:20 +01:00
Kubernetes Prow Robot
8058e8eff8
Merge pull request #113171 from Jefftree/aggregated-discovery-generic 
Aggregated discovery server changes
 2022-11-09 00:08:12 -08:00
jianfei.zhang
01a6668ece fix: Remove dependency on github.com/pkg/errors 
Signed-off-by: jianfei.zhang <jianfei.zhang@daocloud.io>
 2022-11-09 09:54:34 +08:00
Kubernetes Prow Robot
e62cfabf93
Merge pull request #112050 from nilekhc/kms-hot-reload 
Implements hot reload of the KMS `EncryptionConfiguration`
 2022-11-08 17:24:12 -08:00
Alexander Zielenski
b64df605b4 add aggregated-apiservices to aggregated discovery 
Co-authored-by: Jeffrey Ying <jeffrey.ying86@live.com>
 2022-11-08 14:44:50 -08:00
Alexander Zielenski
6e83f67505 add new aggregated resourcemanager to genericapiserver 
Co-authored-by: Jeffrey Ying <jeffrey.ying86@live.com>
 2022-11-08 14:44:49 -08:00
Nilekh Chaudhari
761b7822fc
feat: implements kms encryption config hot reload 
This change enables hot reload of encryption config file when api server
flag --encryption-provider-config-automatic-reload is set to true. This
allows the user to change the encryption config file without restarting
kube-apiserver. The change is detected by polling the file and is done
by using fsnotify watcher. When file is updated it's process to generate
new set of transformers and close the old ones.

Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2022-11-08 21:47:59 +00:00
Kubernetes Prow Robot
2f22404003
Merge pull request #113747 from thockin/safer-controller-init-map 
Make static controller registration slightly safer
 2022-11-08 12:43:25 -08:00
Kubernetes Prow Robot
3a99a5954d
Merge pull request #113629 from andrewsykim/apiserver-identity-beta 
Promote APIServerIdentity to Beta
 2022-11-08 12:43:10 -08:00
Tim Hockin
d577e2bfb1
Make static controller registration slightly safer 
As we have more and more of these, the risk of a dup name seems
non-zero.
 2022-11-08 09:44:19 -08:00
Kubernetes Prow Robot
e2b9fd760d
Merge pull request #113710 from kerthcet/deprecate/enable-taint-manager 
Deprecate CLI flag pod-eviction-timeout in KCM
 2022-11-08 09:34:22 -08:00
Kubernetes Prow Robot
95bd687a28
Merge pull request #113275 from Huang-Wei/kep-3521-B 
[KEP-3521] Part 2: Core scheduling implementation
 2022-11-07 23:18:19 -08:00
Kubernetes Prow Robot
595ea32411
Merge pull request #113314 from cici37/celIntegration 
CEL validation in Admission chain
 2022-11-07 17:08:33 -08:00
Andrew Sy Kim
02020b20e7 kube-apiserver: remove flags --identity-lease-duration-seconds and --identity-lease-renew-interval-seconds 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 19:36:22 -05:00
Kubernetes Prow Robot
243ba086e7
Merge pull request #112914 from PiotrProkop/topology-manager-policies-flag 
node: topologymanager:  Improved multi-numa alignment in Topology Manager
 2022-11-07 16:00:51 -08:00
Wei Huang
0b27f25252
PreEnqueue implementation 
- Add PreEnqueuePlugin to Scheduler Framework
- Implement PreEnqueuePlugin in scheduler queue
- Implementation of SchedulingGates plugin
- Metrics
 2022-11-07 14:02:58 -08:00
Cici Huang
0486e06261 Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control 2022-11-07 20:51:51 +00:00
Kubernetes Prow Robot
b1dd1cd2f1
Merge pull request #113529 from enj/enj/i/kms_single_healthz 
kms: add wiring to support automatic encryption config reload
 2022-11-07 11:20:42 -08:00
Monis Khan
22e540bc48
kms: add wiring to support automatic encryption config reload 
This change adds a flag --encryption-provider-config-automatic-reload
which will be used to drive automatic reloading of the encryption
config at runtime.  While this flag is set to true, or when KMS v2
plugins are used without KMS v1 plugins, the /healthz endpoints
associated with said plugins are collapsed into a single endpoint at
/healthz/kms-providers - in this state, it is not possible to
configure exclusions for specific KMS providers while including the
remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude
a particular KMS is not possible.  This single healthz check handles
checking  all configured KMS providers.  When reloading is enabled
but no KMS providers are configured, it is a no-op.

k8s.io/apiserver does not support dynamic addition and removal of
healthz checks at runtime.  Reloading will instead have a single
static healthz check and swap the underlying implementation at
runtime when a config change occurs.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-11-07 12:03:18 -05:00
kerthcet
b6d021b7e3 Deprecate CLI flag pod-eviction-timeout in KCM 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-08 00:21:56 +08:00
Kubernetes Prow Robot
108523d037
Merge pull request #113352 from ping035627/k8s-221027 
Correct some incorrect comments
 2022-11-05 08:22:24 -07:00
Jordan Liggitt
318b089918
Stop creating three copies of admission plugins 2022-11-04 13:35:15 -04:00
Kubernetes Prow Robot
1bf4af4584
Merge pull request #111930 from azylinski/new-histogram-pod_start_sli_duration_seconds 
New histogram: Pod start SLI duration
 2022-11-04 07:28:14 -07:00
Kubernetes Prow Robot
d86c013b0d
Merge pull request #108250 from cyclinder/add_flag_in_proxy 
kube-proxy:  add a flag  to  disable nodePortOnLocalhost
 2022-11-03 17:10:13 -07:00
Kubernetes Prow Robot
d802bd56ac
Merge pull request #113559 from wojtek-t/clean_shutdown_5 
Clean shutdown of few more integration tests
 2022-11-03 09:01:45 -07:00
PiotrProkop
d5dd42dfac Improved multi-numa alignment in Topology Manager: introduce TopologyManagerOptions 
Signed-off-by: PiotrProkop <pprokop@nvidia.com>
 2022-11-03 10:45:21 +01:00
PiotrProkop
daee219210 Improved multi-numa alignment in Topology Manager: add topology-manager-policy-options flag in Kubelet 
This patch adds new Kubelet option topologyManagerPolicyOptions.
To introduce new TopologyManager options, first we need to introduce new
flag called `topology-manager-policy-options` to allow users to modify
behaviour of best-effort and restricted policies.

Signed-off-by: PiotrProkop <pprokop@nvidia.com>
 2022-11-03 09:45:33 +01:00
Kubernetes Prow Robot
a091b01878
Merge pull request #112053 from helen-frank/fix/patchKubeletLongDescription 
sync website change
 2022-11-02 21:39:46 -07:00
Kubernetes Prow Robot
433787d25b
Merge pull request #113018 from fromanirh/cpumanager-ga-features 
node: kubelet: cpumgr: CPU Manager to GA
 2022-11-02 14:41:01 -07:00
Kubernetes Prow Robot
25dc4c4f32
Merge pull request #112980 from swatisehgal/devicemanager-ga-graduation 
node: devicemgr: Graduate Kubelet DeviceManager to GA
 2022-11-02 13:17:01 -07:00
Wojciech Tyczyński
3786cfdf85 Clean shutdown of serving integration test 2022-11-02 21:08:43 +01:00
Francesco Romani
a6b928d90c kubelet: cpumgr: internal variable trivial rename 
CPUManager is going GA, thus it makes little sense
to keep the names of the internal configuration
variables `Experimental*`.

Trivial rename only.

Signed-off-by: Francesco Romani <fromani@redhat.com>
 2022-11-02 18:41:42 +01:00
Francesco Romani
ff44dc1932 cpumanager: the FG is locked to default (ON) 
hence we can remove the if() guards, the feature
is always available.

Signed-off-by: Francesco Romani <fromani@redhat.com>
 2022-11-02 18:41:41 +01:00
Kubernetes Prow Robot
c4a8d3e9e4
Merge pull request #113462 from chendave/reset_test 
kubeadm: add testcases for `kubeadm reset`
 2022-11-02 06:47:15 -07:00
Swati Sehgal
8b29eded52 node: devicemgr: Remove devicePluginEnabled field from container mgr 
With graduation of device plugins to GA in 1.26, the feature gate is
enabled by default so `devicePluginEnabled` field no longer needs to
be passed at the time of Container Manager creation.

In addition to that, we remove the `ManagerStub` as it is no longer
needed.

Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2022-11-02 11:05:20 +00:00
cyclinder
bef2070031
kube-proxy: add a flag to disables the allowing NodePort services to be accessed via localhost 2022-11-02 16:17:52 +08:00
Kubernetes Prow Robot
22f3e64039
Merge pull request #113320 from chendave/test 
kubeadm: simply struct of `joinOptions` by removing `joinControlPlane`
 2022-11-01 02:48:45 -07:00
Dave Chen
3ddedf00e5 kubeadm: add testcases for kubeadm reset 
For parity with `init` and `join`, the test file only
covers some basic scenarios and is expected to be expanded
when the config file for `kubeadm reset` is ready.

Signed-off-by: Dave Chen <dave.chen@arm.com>
 2022-11-01 11:34:53 +08:00
Kubernetes Prow Robot
f9bfa378ef
Merge pull request #113424 from liggitt/simplify-go.mod 
Simplify go.mod
 2022-10-31 14:20:57 -07:00
Kubernetes Prow Robot
ac59b03214
Merge pull request #113448 from pacoxu/remove-UnversionedKubeletConfigMap 
remove  UnversionedKubeletConfigMap feature gate: GAed in v1.25
 2022-10-31 01:18:43 -07:00
Paco Xu
e57985a3f4 remove UnversionedKubeletConfigMap feature gate: GAed in v1.25 2022-10-30 11:17:24 +08:00
Jordan Liggitt
f488c67eb5
Fix unwanted dependencies scanner 2022-10-28 15:15:20 -04:00
Kubernetes Prow Robot
021e2d394c
Merge pull request #113361 from SataQiu/fix-20221026 
kube-apiserver: keep the types of LeaseEndpointReconcilerType and NoneEndpointReconcilerType the same as MasterCountReconcilerType
 2022-10-27 11:24:33 -07:00
Rita Zhang
c3df726c7b
Enable encryption for custom resources 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2022-10-26 13:37:11 -07:00
Kubernetes Prow Robot
f3e6e05979
Merge pull request #113355 from chendave/preflightErrors 
kubeadm: Don't reuse the `ignorePreflightErrors` from initCfg for `reset`
 2022-10-26 08:40:36 -07:00
SataQiu
ecfae2bebe kube-apiserver: keep the types of LeaseEndpointReconcilerType and NoneEndpointReconcilerType the same as MasterCountReconcilerType 2022-10-26 21:49:31 +08:00
Artur Żyliński
9f31669a53 New histogram: Pod start SLI duration 2022-10-26 11:28:17 +02:00
Dave Chen
5854b92450 kubeadm: Don't reuse the ignorePreflightErrors from initCfg for reset 
The init config file fetched from cluster won't have `ignorePreflightErrors`
set, and shouldn't try to reuse it even it's set with any value.

Instead, it should be defined in reset config file and fetch from it when the
reset config is ready.

Signed-off-by: Dave Chen <dave.chen@arm.com>
 2022-10-26 16:14:11 +08:00
Kubernetes Prow Robot
5539a5b80f
Merge pull request #113353 from chendave/validation 
kubeadm: print the invalid field when validating bootstrap token discovery
 2022-10-26 00:44:36 -07:00
Dave Chen
1607babd35 kubeadm: print the invalid field when validating bootstrap token discovery 
It was saying `discovery.bootstrapToken` is invalid with empty value, while
it is actually `discovery.bootstrapToken.caCertHashes` invalid.

Signed-off-by: Dave Chen <dave.chen@arm.com>
 2022-10-26 13:45:00 +08:00