github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,041 Commits 1 Branch 31 Tags
c24dfe528a0d49cd38cc028c0d29d8f661305c8c
Commit Graph

19820 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
cbe3ef473e Merge pull request #100412 from hanlins/lb-node-ports-beta 
Lb node ports beta
 2021-07-02 16:08:10 -07:00
Hanlin Shi
c96c809539 Add integration test for LB node port control 
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
 2021-07-02 21:58:49 +00:00
Hanlin Shi
24592ca989 Update the related tests 
1. add AllocateLoadBalancerNodePorts fields in specs for validation test cases
2. update fuzzer
3. in resource quota e2e, allocate node port for loadbalancer type service and
   exceed the node port quota

Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
 2021-07-02 21:58:41 +00:00
Kubernetes Prow Robot
d1833880a7 Merge pull request #103083 from vivian-xu/use-native-errors 
Update github.com/pkg/errors with go native errors pkg
 2021-07-02 13:38:38 -07:00
Kubernetes Prow Robot
0bb6d1431c Merge pull request #103371 from claudiubelu/tests/windows-flakyness 
windows tests: Wait for the network connectivity first
 2021-07-02 12:30:22 -07:00
Kubernetes Prow Robot
a331cf74b7 Merge pull request #102050 from pohly/fix/deflake-metrics-proxy 
remove metrics proxy
 2021-07-02 12:30:10 -07:00
Kubernetes Prow Robot
defcc916ed Merge pull request #103382 from liggitt/podsecurity-hostprocess 
[PodSecurity] hostProcess baseline check
 2021-07-02 01:16:24 -07:00
Kubernetes Prow Robot
659c7e709f Merge pull request #99494 from enj/enj/i/not_after_ttl_hint 
csr: add expirationSeconds field to control cert lifetime
 2021-07-01 23:02:12 -07:00
Monis Khan
8d49502fcd csr: update e2e conformance test with expirationSeconds usage 
Signed-off-by: Monis Khan <mok@vmware.com>
 2021-07-01 23:38:16 -04:00
Monis Khan
cd91e59f7c csr: add expirationSeconds field to control cert lifetime 
This change updates the CSR API to add a new, optional field called
expirationSeconds.  This field is a request to the signer for the
maximum duration the client wishes the cert to have.  The signer is
free to ignore this request based on its own internal policy.  The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration.  The minimum allowed
value for this field is 600 seconds (ten minutes).

This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.

Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-07-01 23:38:15 -04:00
Kubernetes Prow Robot
62503f254e Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist 
Refactored files containing whitelist/blacklist to allowlist/denylist…
 2021-07-01 18:12:25 -07:00
Kubernetes Prow Robot
9ca75c1f49 Merge pull request #103243 from ii/promote-statefulset-status-test 
Promote to Conformance StatefulSet Patch, Read and Replace Status test +3
 2021-07-01 14:28:02 -07:00
Kubernetes Prow Robot
062bc359ca Merge pull request #102444 from sanwishe/resourceStartTime 
Expose container start time in kubelet /metrics/resource endpoint
 2021-07-01 14:27:51 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Kubernetes Prow Robot
3334703eb2 Merge pull request #103242 from ii/promote-deployment-status-test 
Promote to Conformance Patch, Read and Replace DeploymentStatus test +1
 2021-07-01 13:18:04 -07:00
Kubernetes Prow Robot
cd94e840cb Merge pull request #103241 from ii/promote-statefulset-list-deletecollection 
Promote to Conformance StatefulSet List, Patch & DeleteCollection Test +3
 2021-07-01 13:17:52 -07:00
Jordan Liggitt
49d31c45b1 PodSecurity: baseline hostProcess check 2021-07-01 15:49:33 -04:00
Kubernetes Prow Robot
1861e4756d Merge pull request #103396 from praveenghuge/master-to-main-cleanup 
k8s.io master to main cleanup
 2021-07-01 04:45:54 -07:00
Kubernetes Prow Robot
a0c83ba938 Merge pull request #103385 from ravisantoshgudimetla/fix-ubernetes-tests-2 
[storage] [test] Ensure proper resource creation
 2021-07-01 00:06:06 -07:00
Kubernetes Prow Robot
dbfea1e2aa Merge pull request #103365 from liggitt/podsecurity-feature-test 
PodSecurity: make failure integration tests feature-aware
 2021-07-01 00:05:54 -07:00
Praveen Ghuge
db3534dd64 master too main cleanup 2021-06-30 21:56:29 -07:00
Kubernetes Prow Robot
ea0098b811 Merge pull request #103219 from mgutierrez98/refactor-wait_go 
Renamed variable within wait_test containing master to control plane
 2021-06-30 20:59:54 -07:00
Jordan Liggitt
ba6b4c5a18 PodSecurity: test GA-only cases and alpha/beta fields separately 2021-06-30 22:08:11 -04:00
Kubernetes Prow Robot
642f42d62b Merge pull request #103364 from aramase/check-privileged 
[PodSecurity] Add privileged containers baseline check
 2021-06-30 16:11:48 -07:00
ravisantoshgudimetla
67bc23411b [storage] [test] Ensure proper resource creation 
Ensure resources are created in zone with schedulable
nodes. For example, if we have 4 zones with 3 zones
having worker nodes and 1 zone having master nodes(unscheduable
for workloads), we should not create resources like PV, PVC or
pods in that zone.
 2021-06-30 18:01:57 -04:00
Anish Ramasekar
5bd3334ad6 [PodSecurity] Add privileged containers baseline check 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-06-30 16:39:28 -04:00
Kubernetes Prow Robot
9c360b6185 Merge pull request #103361 from m14815/commit-21.6.2 
Error string should not be capitalized or end with punctuation.
 2021-06-30 11:50:17 -07:00
Kubernetes Prow Robot
044fd6fdf6 Merge pull request #99829 from palnabarun/migrate-to-go-embed 
Replace go-bindata with //go:embed
 2021-06-30 10:37:03 -07:00
maruiyan
9c150b0f22 Error string should not be capitalized or end with punctuation. 2021-06-30 23:23:30 +08:00
Kubernetes Prow Robot
7ad7c0757a Merge pull request #103160 from ravisantoshgudimetla/fix-ubernetes-tests 
Run ubernetes tests on gke only
 2021-06-29 18:29:14 -07:00
Kubernetes Prow Robot
c9bff73105 Merge pull request #103179 from tanjing2020/runtimeclass 
[e2e] Destroy the created runtimeclass resources at the end of the test case.
 2021-06-29 17:07:15 -07:00
Kubernetes Prow Robot
f2e47502fd Merge pull request #103076 from wzshiming/fix/flake-gracefulnodeshutdown-dbus 
Fix the GracefulNodeShutdown e2e test running on dbus that refuses to manually start
 2021-06-29 11:19:50 -07:00
Nabarun Pal
ac41e56582 docs: add documentation on adding files to the embedded data 
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2021-06-29 23:30:50 +05:30
ravisantoshgudimetla
c65b80a637 [storage] [test] Remove extra zone test 
We're running ubernetes tests
`should only be allowed to provision PDs in zones
where nodes exist`
on gcp&gke. While the test is useful in exercising
the scenario of identifying extra zone and
creating a node in it, not every Kube
distribution uses the same approach to create a node,
further if even there is an extra zone, we cannot
guarantee the zone to have enough quota. There can also
be other GCP specific edge cases all of which cannot be
covered within this test. So, removing the test
as agreed upon with the storage team
 2021-06-29 12:52:58 -04:00
Kubernetes Prow Robot
756203fda0 Merge pull request #102576 from dobsonj/101911 
kubelet: do not call RemoveAll on volumes directory for orphaned pods
 2021-06-29 06:54:40 -07:00
Nabarun Pal
bbccf2ecb4 e2e-node: move to embedded test manifests 
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2021-06-29 19:16:49 +05:30
Nabarun Pal
d98b2dd2d6 generated: remove usage of go-bindata 
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2021-06-29 19:16:48 +05:30
Nabarun Pal
68b334d02b test: setup embedded file sources for manifests 
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2021-06-29 19:16:46 +05:30
Kubernetes Prow Robot
3d87fd6a9a Merge pull request #103273 from XudongLiuHarold/fix-loadbalancerclass-test-name 
fix loadbalancerclass integration test funcation name
 2021-06-29 05:40:41 -07:00
vivian-xu
ceb42d0938 Update github.com/pkg/errors with go native errors pkg 2021-06-29 17:39:49 +08:00
Kubernetes Prow Robot
ebcb4a2d88 Merge pull request #103104 from pacoxu/npd-088 
update npd to v0.8.8
 2021-06-29 02:30:40 -07:00
Nabarun Pal
3af6329caf e2e-framework: add an EmbeddedFileSource to sources 
The data structure would wrap an embedded filesystem andthe root
directory relative to which the embedded filesystem is constructed.

Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2021-06-29 13:36:29 +05:30
Kubernetes Prow Robot
d92f6c424d Merge pull request #103099 from liggitt/podsecurity 
PodSecurity admission
 2021-06-28 20:46:52 -07:00
Harold
477aef192f fix loadbalancerclass integration test funcation name 2021-06-28 20:07:02 -07:00
Kubernetes Prow Robot
9866f9364e Merge pull request #103112 from fromanirh/cpumanager-e2e-fixes 
e2e: node: remove obsolete AlphaFeature tag
 2021-06-28 19:36:39 -07:00
pacoxu
ffdf3f5007 update node-problem-detector npd to v0.8.8 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Co-Authored-By: vteratipally <vteratipally@users.noreply.github.com>
 2021-06-29 09:35:32 +08:00
tanjing2020
f80f9eeb6d Destroy the created runtimeclass resources at the end of the test case. 2021-06-29 09:20:40 +08:00
Kubernetes Prow Robot
ee459b8969 Merge pull request #103265 from fromanirh/e2e-node-fix-npd 
e2e: node: fix npd test failures bumping image
 2021-06-28 17:03:50 -07:00
Kubernetes Prow Robot
38f012320f Merge pull request #101947 from cynepco3hahue/memory_manager_move_to_beta 
memory manager: move to beta
 2021-06-28 15:38:28 -07:00
Jordan Liggitt
42dc070b47 PodSecurity: kube-apiserver integration test 2021-06-28 17:45:36 -04:00