github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,041 Commits 1 Branch 31 Tags
c24dfe528a0d49cd38cc028c0d29d8f661305c8c
Commit Graph

3116 Commits

Author SHA1 Message Date
Hanlin Shi
c96c809539 Add integration test for LB node port control 
Signed-off-by: Hanlin Shi <shihanlin9@gmail.com>
 2021-07-02 21:58:49 +00:00
Kubernetes Prow Robot
defcc916ed Merge pull request #103382 from liggitt/podsecurity-hostprocess 
[PodSecurity] hostProcess baseline check
 2021-07-02 01:16:24 -07:00
Kubernetes Prow Robot
659c7e709f Merge pull request #99494 from enj/enj/i/not_after_ttl_hint 
csr: add expirationSeconds field to control cert lifetime
 2021-07-01 23:02:12 -07:00
Monis Khan
cd91e59f7c csr: add expirationSeconds field to control cert lifetime 
This change updates the CSR API to add a new, optional field called
expirationSeconds.  This field is a request to the signer for the
maximum duration the client wishes the cert to have.  The signer is
free to ignore this request based on its own internal policy.  The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration.  The minimum allowed
value for this field is 600 seconds (ten minutes).

This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.

Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-07-01 23:38:15 -04:00
Kubernetes Prow Robot
62503f254e Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist 
Refactored files containing whitelist/blacklist to allowlist/denylist…
 2021-07-01 18:12:25 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Jordan Liggitt
49d31c45b1 PodSecurity: baseline hostProcess check 2021-07-01 15:49:33 -04:00
Jordan Liggitt
ba6b4c5a18 PodSecurity: test GA-only cases and alpha/beta fields separately 2021-06-30 22:08:11 -04:00
Anish Ramasekar
5bd3334ad6 [PodSecurity] Add privileged containers baseline check 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-06-30 16:39:28 -04:00
Kubernetes Prow Robot
3d87fd6a9a Merge pull request #103273 from XudongLiuHarold/fix-loadbalancerclass-test-name 
fix loadbalancerclass integration test funcation name
 2021-06-29 05:40:41 -07:00
Harold
477aef192f fix loadbalancerclass integration test funcation name 2021-06-28 20:07:02 -07:00
Jordan Liggitt
42dc070b47 PodSecurity: kube-apiserver integration test 2021-06-28 17:45:36 -04:00
Antonio Ojea
2eb50ee2fd fix comment on dual-stack integration test 2021-06-25 23:24:49 +02:00
Kubernetes Prow Robot
e19dc07ac5 Merge pull request #102898 from khenidak/fix-prefer-dualstack 
fix auto upgraded preferDual-Stack services (in cluster upgrade)
 2021-06-25 10:58:08 -07:00
Kubernetes Prow Robot
9254610765 Merge pull request #103129 from XudongLiuHarold/service-loadbalancer-class-e2e 
Promote loadbalancerclass feature to beta
 2021-06-25 09:48:57 -07:00
Xudong Liu
fe161579e2 Add integration test to promote serviceloadbalancerclass feature to beta. 2021-06-24 17:30:17 -07:00
Kubernetes Prow Robot
73eac7ae66 Merge pull request #102986 from mengjiao-liu/rename-master 
Rename master to apiserver in test/integration
 2021-06-24 05:41:41 -07:00
Khaled (Kal) Henidak
58a83ecbdb integeration tests 2021-06-22 17:40:21 +00:00
Mengjiao Liu
e977740ae6 Rename master to apiserver in test/integration 2021-06-18 17:40:46 +08:00
Mengjiao Liu
4eab19ae7d Clean up the master term in test/integration comments 2021-06-18 16:31:05 +08:00
Mengjiao Liu
da35add03f Rename master to apiserver in test/integration 2021-06-17 15:48:39 +08:00
Kubernetes Prow Robot
851b7276a5 Merge pull request #102796 from ahg-g/ahg-cc 
Move scheduler plugin set and configuration defaulting to CC
 2021-06-16 11:44:00 -07:00
Abdullah Gharaibeh
265ef1741f Move scheduler plugin set and configuration defaulting to component config 2021-06-16 10:15:29 -04:00
Kubernetes Prow Robot
3a47ddccdf Merge pull request #100488 from liggitt/protobuf 
update etcd, grpc, protobuf dependencies
 2021-06-15 14:49:42 -07:00
Kubernetes Prow Robot
b43e4ec89b Merge pull request #102857 from ingvagabund/drop-kube-scheduler-insecure-port-bits 
kube-scheduler: stop using insecure serving bits
 2021-06-15 13:42:12 -07:00
Kubernetes Prow Robot
a5be86fee7 Merge pull request #101316 from ravisantoshgudimetla/add-minReadySeconds-impl 
Add min ready seconds impl
 2021-06-15 13:41:43 -07:00
ravisantoshgudimetla
ceb1dbd2f1 statefulsets: MinReadySeconds implementation 
https://github.com/kubernetes/kubernetes/pull/100842
introduced featuregate. This PR implements the logic
behind it.
 2021-06-15 12:59:54 -04:00
Kubernetes Prow Robot
37da905c0c Merge pull request #99310 from ankeesler/exec-plugin-interactive 
exec credential provider: InteractiveMode support
 2021-06-15 09:46:01 -07:00
Jordan Liggitt
52b629efbc Drop use of deprecated clientv3.SetLogger 2021-06-15 09:53:06 -04:00
Jordan Liggitt
2979c3325e Switch to go.etcd.io/etcd/client/v3 2021-06-15 09:53:06 -04:00
Andrew Keesler
cd83d89ac9 exec credential provider: InteractiveMode support 
The value here is that the exec plugin author can use the kubeconfig to assert
how standard input is treated with respect to the exec plugin, e.g.,
- an exec plugin author can ensure that kubectl fails if it cannot provide
  standard input to an exec plugin that needs it (Always)
- an exec plugin author can ensure that an client-go process will still call an
  exec plugin that prefers standard input even if standard input is not
  available (IfAvailable)

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-06-15 09:01:17 -04:00
Kubernetes Prow Robot
36a19df91b Merge pull request #102143 from wangyysde/promote-cronjob-integration 
Promote cronjob integration test to batch/v1
 2021-06-15 03:56:01 -07:00
Jan Chaloupka
7560f33e27 kube-scheduler: stop using insecure serving bits 2021-06-14 22:50:53 +02:00
Kubernetes Prow Robot
51cbebab1f Merge pull request #102687 from mengjiao-liu/rename-master-to-controlplane 
test/integration: Rename master to controlplane
 2021-06-14 09:49:16 -07:00
Kubernetes Prow Robot
4aae71695a Merge pull request #102366 from cndoit18/fix-time-format 
fix(timezone): Change the time zone in the api data to UTC
 2021-06-11 06:54:59 -07:00
Kubernetes Prow Robot
f008ba0fed Merge pull request #102062 from serathius/etcd-server 
Update Etcd server image to 3.5.0-rc.0-0
 2021-06-10 08:23:27 -07:00
Kubernetes Prow Robot
8955463c17 Merge pull request #102745 from ahg-g/ahg-provider 
Remove SchedulerAlgorithmSource from scheduler's internal CC API
 2021-06-10 07:17:39 -07:00
Kubernetes Prow Robot
521be6344e Merge pull request #102558 from Jerry-Ge/unroll-extenders 
Unroll ScheduleAlgorithm#Extenders() to Scheduler.go
 2021-06-10 07:17:27 -07:00
Jerry-Ge
110c39ef60 unroll extenders 
Signed-off-by: Jerry Ge <jerry.ge@arm.com>

Co-authored-by: Huang-Wei <wei.huang1@ibm.com>
 2021-06-10 08:31:44 +08:00
Abdullah Gharaibeh
52f5ba3a58 Remove SchedulerAlgorithmSource from scheduler's internal CC API 2021-06-09 19:14:54 -04:00
Marek Siarkowicz
12447bc803 Upgrade etcd server version to 3.5.0-rc.0 2021-06-09 17:00:05 +02:00
Mengjiao Liu
0fcd3c951c test/integration: Rename master to controlplane or apiserver 2021-06-08 17:26:57 +08:00
Mengjiao Liu
257b494478 test/integration: Rename masterConfig to instanceConfig 2021-06-08 17:21:47 +08:00
Mengjiao Liu
ac5535c949 test/integration: Rename MasterConfigOptions to ControlPlaneConfigOptions 2021-06-08 16:58:46 +08:00
pacoxu
64946cd50d fix flake integration rotation via informer 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-06-07 15:44:53 +08:00
Kubernetes Prow Robot
9d27400fe2 Merge pull request #102040 from njuptlzf/fix_conversion 
Fix auditing failed of request: encoding failed
 2021-06-05 19:58:38 -07:00
njuptlzf
7b0fbb7292 add audit log test cases for cross-group subresource 2021-06-06 09:52:05 +08:00
Kubernetes Prow Robot
a52571144f Merge pull request #102597 from mengjiao-liu/rename-masterConfig 
test/integration: Rename masterConfig to controlPlaneConfig
 2021-06-05 10:41:05 -07:00
Kubernetes Prow Robot
74af3b712d Merge pull request #102297 from deads2k/ssh-tunnels 
remove --ssh- options, deprecated 13 releases, that only work on GCE
 2021-06-05 10:40:50 -07:00
wangyysde
558bdd18aa Update cronjob integration test to batch/v1 
Signed-off-by: wangyysde <net_use@bzhy.com>
 2021-06-04 21:04:21 +08:00