github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
122,541 Commits 1 Branch 31 Tags
b421bde1de40530b51b4b88c736bb007ed9afb17
Commit Graph

10078 Commits

Author SHA1 Message Date
Akhil Mohan
76fe41a996 chore: update cgroups and ttrpc versions 
- update github.com/containerd/cgroups to v1.1.0
- update github.com/containerd/ttrpc to v1.2.1

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2023-04-27 20:46:23 -07:00
Mark Rossetti
4a6bc66e40 updating microsft/go-winio package to latest version 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2023-04-24 15:32:45 -07:00
Kubernetes Prow Robot
1def77f05c Merge pull request #117551 from pohly/lint-pull-requests 
golangci-lint: allow exceptions for Go naming convention
 2023-04-24 09:51:02 -07:00
Patrick Ohly
4169d7d028 golangci-lint: allow exceptions for Go naming convention 
In strict mode, stylecheck complains about Convert_* and SetDefaults_*
functions in Kubernetes because they use underscores. We want to allow that to
make the functions more readable.
 2023-04-24 15:05:47 +02:00
Benjamin Elder
ed37e6986b uncomment exit trap to cleanup tmpdir 2023-04-21 16:16:53 -07:00
Benjamin Elder
63d44fdde5 retain KUBE_GOPATH on recursive kube::golang 2023-04-21 16:15:21 -07:00
Benjamin Elder
4d736a0435 cleanup update-mocks.sh 
- remove unused tempdir
- use mktemp instead of creating tmpfile in repo
- normalize indent
 2023-04-21 16:15:21 -07:00
Benjamin Elder
726992f9db call kube::golang::setup_env before setting up worktree 2023-04-21 16:15:21 -07:00
Benjamin Elder
11f3ef1ed7 drop linux/arm build warning, now that 1.27 is released, this is covered by the release notes 
dims notes there have been no complaints so far
 2023-04-20 15:47:57 -07:00
Kubernetes Prow Robot
aab9a7c262 Merge pull request #116385 from kinvolk/rata/local-up-chown 
hack/local-up-cluster.sh: Always sudo chown the certs dir
 2023-04-13 00:20:36 -07:00
Tim Hockin
5668399a87 Codegen: use openapi-gen via k8s.io/code-generator 2023-04-12 17:08:36 -07:00
Kubernetes Prow Robot
ad85a92dd4 Merge pull request #116281 from thockin/codegen_subproject_chdir 
Codegen: subproject cleanups and chdir
 2023-04-12 09:58:31 -07:00
Mengjiao Liu
5588e8a4cd hack/logcheck.conf: remove certificate controller exception 2023-04-12 15:20:04 +08:00
Kubernetes Prow Robot
d4fab7e56c Merge pull request #117016 from dims/set-GOMAXPROCS-explicitly 
Set GOMAXPROCS explicitly
 2023-04-11 19:18:08 -07:00
Kubernetes Prow Robot
3c076e4b7d Merge pull request #116672 from dims/add-an-image-for-kubectl 
Add an image for kubectl
 2023-04-11 18:19:02 -07:00
Kubernetes Prow Robot
4c022ceb2c Merge pull request #116283 from thockin/codegen_fix_full_regen 
Codegen: fix full (burn it to the ground) regen
 2023-04-11 15:35:56 -07:00
Kubernetes Prow Robot
239cc18193 Merge pull request #115729 from pohly/hack-approver-pohly 
hack/OWNERS: add pohly as reviewer and approver
 2023-04-11 15:35:34 -07:00
Tim Hockin
73eb7c0930 Codegen: easier to read logs for subproject output 2023-04-11 15:19:27 -07:00
Tim Hockin
bbbb695060 Codegen: subproject: chdir to the project dir 
This makes it feel more like an API to be used in other repos (which is
really what it is for).
 2023-04-11 15:18:08 -07:00
Tim Hockin
893ec0ca45 Codegen: simpler k8s.io/code-generator/examples 
This moves the hack/ directory and scripts to the examples dir, which is
a distinct module.  This avoids some Go unpleasantness around module
boundaries and just makes more sense.
 2023-04-11 14:19:45 -07:00
Rodrigo Campos
d212041d51 hack/local-up-cluster.sh: Remove old dynamic certs 
When running this script more than once on Debian and Ubuntu, we fail to
chown -R the CERT_DIR due to this file owned by root and the CERT_DIR
owned by the unprivileged user running the script.

Let's remove the file, that is something we can always do, before
generating the certs. This fixes the problem on Debian and Ubuntu local
setups.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2023-04-11 20:09:47 +02:00
Davanum Srinivas
5662566e03 Set GOMAXPROCS explicitly 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-03-30 20:26:07 -04:00
Maciej Szulik
27ad623b3d Skip vendor directory when removing generated files 2023-03-27 19:07:43 +02:00
Jordan Liggitt
a2bba333cc Drop development dependencies from test targets 2023-03-22 10:38:42 -04:00
Davanum Srinivas
26313ed2b0 Move the arm deprecation notice in a different spot 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-03-17 10:28:32 -04:00
Davanum Srinivas
41ed0e1234 Add an image for kubectl 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-03-16 10:28:04 -04:00
Taahir Ahmed
6a75e7c40c ClusterTrustBundles: Define types 
This commit is the main API piece of KEP-3257 (ClusterTrustBundles).

This commit:

* Adds the certificates.k8s.io/v1alpha1 API group
* Adds the ClusterTrustBundle type.
* Registers the new type in kube-apiserver.
* Implements the type-specfic validation specified for
  ClusterTrustBundles:
  - spec.pemTrustAnchors must always be non-empty.
  - spec.signerName must be either empty or a valid signer name.
  - Changing spec.signerName is disallowed.
* Implements the "attest" admission check to restrict actions on
  ClusterTrustBundles that include a signer name.

Because it wasn't specified in the KEP, I chose to make attempts to
update the signer name be validation errors, rather than silently
ignored.

I have tested this out by launching these changes in kind and
manipulating ClusterTrustBundle objects in the resulting cluster using
kubectl.
 2023-03-15 20:10:18 -07:00
Kubernetes Prow Robot
c072cae4d0 Merge pull request #108838 from nckturner/webhook-framework 
Webhook framework for cloud controller manager
 2023-03-14 20:28:14 -07:00
Kubernetes Prow Robot
f44d561c1f Merge pull request #115075 from aojea/ipaddress 
IPAddress allocator
 2023-03-14 19:26:13 -07:00
Kubernetes Prow Robot
6df64241d0 Merge pull request #116598 from natasha41575/updateKustV5 
Update kubectl kustomize to kyaml/v0.14.1, cmd/config/v0.11.1, api/v0…
 2023-03-14 17:44:55 -07:00
Kubernetes Prow Robot
758b464152 Merge pull request #116613 from enj/patch-5 
kmsv2: add k8s.io/kms/internal/plugins/mock to internal modules
 2023-03-14 16:35:03 -07:00
Kubernetes Prow Robot
1586138519 Merge pull request #115750 from saschagrunert/otel-beta 
Graduate `KubeletTracing` feature to beta
 2023-03-14 16:34:33 -07:00
Nick Turner
86f4136003 Webhook framework for cloud controller manager 
Provides framework for CCMs to host webhooks.
 2023-03-14 23:28:05 +00:00
Antonio Ojea
d6d057b9a1 hack import aliases 2023-03-14 22:58:11 +00:00
Mo Khan
81586ff81a Add k8s.io/kms/internal/plugins/mock to internal modules 2023-03-14 16:31:54 -04:00
Patrick Ohly
f26f896128 hack/logcheck.conf: enforce contextual logging in kube-controller-manager 
Not all PRs made it into 1.27, but enough that it is now easier to list the
exceptions.
 2023-03-14 19:17:31 +01:00
natasha41575
09e6e4db1d Update kubectl kustomize to kyaml/v0.14.1, cmd/config/v0.11.1, api/v0.13.2, kustomize/v5.0.1 2023-03-14 11:40:28 -05:00
Kubernetes Prow Robot
06619135e0 Merge pull request #114226 from saschagrunert/apiextensions-apiserver-static 
Link `apiextensions-apiserver` binary statically
 2023-03-14 08:36:16 -07:00
Kubernetes Prow Robot
c8f001d798 Merge pull request #114504 from vrutkovs/tracing-kubelet-toplevel 
kubelet: create top-level traces for pod sync and GC
 2023-03-14 03:12:16 -07:00
Patrick Ohly
29941b8d3e api: resource.k8s.io v1alpha1 -> v1alpha2 
For Kubernetes 1.27, we intend to make some breaking API changes:
- rename PodScheduling -> PodSchedulingHints (https://github.com/kubernetes/kubernetes/issues/114283)
- extend ResourceClaimStatus (https://github.com/kubernetes/enhancements/pull/3802)

We need to switch from v1alpha1 to v1alpha2 for that.
 2023-03-14 07:52:03 +01:00
Kubernetes Prow Robot
110541b3d7 Merge pull request #116490 from tallclair/docs-urls2 
Fix broken links in API documentation
 2023-03-13 16:48:56 -07:00
Tim Allclair
3808920328 Add a script to verify that URLs in API documentation are valid 2023-03-13 11:37:59 -07:00
Sascha Grunert
1c0a5aa84a Link apiextensions-apiserver binary statically 
The apiextensions-apiserver itself only depends on the following runtime
libraries when linking dynamically:

```
> ldd _output/bin/apiextensions-apiserver
        linux-vdso.so.1 (0x00007ffd1b39f000)
        libpthread.so.0 => /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib/libpthread.so.0 (0x00007fe836022000)
        libc.so.6 => /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib/libc.so.6 (0x00007fe835e00000)
        /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib/ld-linux-x86-64.so.2 => /nix/store/4nlgxhb09sdr51nc9hdm8az5b08vzkgx-glibc-2.35-163/lib64/ld-linux-x86-64.so.2 (0x00007fe836029000)
```

We now move the apiextensions-apiserver to become a static binary as
well to achieve maximum portability.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-03-13 09:00:36 +01:00
Davanum Srinivas
320cb6d9ef Revert "Disable unified build and static init optimization for tests" 
This reverts commit e20d77bb79.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-03-11 14:09:16 -05:00
Kubernetes Prow Robot
bb6c6fad2c Merge pull request #115742 from dims/drop-32-bit-platforms 
Drop 32 bit linux/arm platform
 2023-03-11 06:12:40 -08:00
Vadim Rutkovsky
556d774945 kubelet: create top-level traces for pod sync and GC 
This starts new top level OpenTelemetry spans every time syncPod or image / container GC is invoked
 2023-03-11 10:42:14 +01:00
Kubernetes Prow Robot
0804a86ce6 Merge pull request #116286 from thockin/logging_int_cmp 
bash: compare numbers numerically, not lexically
 2023-03-10 16:30:39 -08:00
Kubernetes Prow Robot
5452109c9d Merge pull request #114227 from saschagrunert/kube-aggregator-static 
Link `kube-aggregator` binary statically
 2023-03-10 15:22:39 -08:00
Kubernetes Prow Robot
a3ad4d7623 Merge pull request #114017 from calvin0327/cleanup-containerruntime-options 
cleanup container runtime options
 2023-03-09 21:33:06 -08:00
Kubernetes Prow Robot
45b96eae98 Merge pull request #113145 from smarterclayton/zombie_terminating_pods 
kubelet: Force deleted pods can fail to move out of terminating
 2023-03-09 15:32:30 -08:00