Commit Graph

2946 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
836b901658
Merge pull request #82348 from jpbetz/kubeadm-etcd-image-tag
Use etcd image version suffixes in kubeadm
2019-09-05 15:02:57 -07:00
Kubernetes Prow Robot
c8c1aeaa5c
Merge pull request #82248 from rosti/proxyless
kubeadm: Fetching kube-proxy's config map is now optional
2019-09-05 11:30:30 -07:00
Joe Betz
4c2b0731cb Simplify etcd image version usage in kubeadm 2019-09-05 10:28:23 -07:00
Joe Betz
5a3399f48d Add etcd image version to kubeadm 2019-09-05 10:27:53 -07:00
Rostislav M. Georgiev
31b4c782c7 kubeadm: Fetching kube-proxy's config map is now optional
Whenever kubeadm needs to fetch its configuration from the cluster, it gets
the component configuration of all supported components (currently only kubelet
and kube-proxy). However, kube-proxy is deemed an optional component and its
installation may be skipped (by skipping the addon/kube-proxy phase on init).
When kube-proxy's installation is skipped, its config map is not created and
all kubeadm operations, that fetch the config from the cluster, are bound to
fail with "not found" or "forbidden" (because of missing RBAC rules) errors.

To fix this issue, we have to ignore the 403 and 404 errors, returned on an
attempt to fetch kube-proxy's component config from the cluster.
The `GetFromKubeProxyConfigMap` function now supports returning nil for both
error and object to indicate just such a case.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2019-09-05 18:25:22 +03:00
Kubernetes Prow Robot
c4c64673d7
Merge pull request #82199 from dims/update-to-etcd-3.3.15-0-image
Update default etcd server to 3.3.15 for kubernetes 1.16
2019-09-05 06:35:10 -07:00
Alexander Kanevskiy
7fb4a2be41 kubeadm: Form correct URL for IPv6 in HTTPProxy check
Force correct syntax on host/port in URL of HTTPProxy check
if the host argument is a raw IPv6 address string
2019-09-03 16:04:04 +03:00
Davanum Srinivas
8fbfdf8267
Update default etcd server to 3.3.15 for kubernetes 1.16
Change-Id: I68f1a5e5339d83077a1a9f312c4e6e33848886c5
2019-08-30 21:29:45 -04:00
Kubernetes Prow Robot
235f3ab3d9
Merge pull request #82127 from rajansandeep/bumpto1.6.2
Bump CoreDNS version in Kubeadm to 1.6.2
2019-08-30 09:40:23 -07:00
Kubernetes Prow Robot
d3063c682b
Merge pull request #82103 from neolit123/1.16-kubeadm-fix-kubelet-rotate-certs-false
kubeadm: fix a bug where the kubelet cert rotation was turned off
2019-08-30 08:00:26 -07:00
Gyuho Lee
21f976bb78 cmd/kubeadm: remove "rpc/status" from import-restrictions
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2019-08-29 08:46:17 -07:00
Gyuho Lee
93b9545f48 vendor: update with "update-vendor.sh" script
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2019-08-29 08:46:02 -07:00
Gyuho Lee
eb1509a1d3 kubeadm/app/util/etcd: : block etcd client creation until connection is up
The new etcd balancer (>3.3.14, 3.4.0) uses an asynchronous resolver for
endpoints. Without "WithBlock", the client may return before the
connection is up.

Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
2019-08-29 08:38:29 -07:00
Kubernetes Prow Robot
85602f26d7
Merge pull request #81990 from tedyu/bld-metadata
Correct func name WithBuildMetadata
2019-08-29 07:28:23 -07:00
Sandeep Rajan
dce97a142c bump coredns version in kubeadm to 1.6.2 2019-08-29 10:13:05 -04:00
Lubomir I. Ivanov
c9b11980ff kubeadm: fix a bug where the kubelet cert rotation was turned off
A recent commit added warnings for KubeletConfiguration and
KubeProxyConfiguration fields that kubeadm cares about and
does not recommend the user modifying them. Kubelet's
"rotateCertificates" cannot be handled using this function
as there is not way to figure out if the user has set it explicitly to
"false". Hardcode the value to "true" and add a comment about that.

Also apply the following changes to warnDefaultComponentConfigValue()
calls:
- use a local "kind" variable that defines the Kind we are warning about.
- fix wrong paths to fields.
2019-08-29 02:43:44 +03:00
Kubernetes Prow Robot
b3b4305be5
Merge pull request #81903 from jfbai/fix-kubeadm-kubelet-default
fix: make kubeadm set defaults to kubelet configuration only when no values are set.
2019-08-28 12:01:41 -07:00
Jianfei Bai
ccc45880a7 fix: prevent overriding of certain kubelet security configuration parameters if the user wished to modify them. 2019-08-28 21:01:49 +08:00
Kubernetes Prow Robot
b98f622852
Merge pull request #81910 from fabriziopandini/kubeadm-Json6902-Patches
kubeadm: add support for Json6902 Patches
2019-08-28 03:09:54 -07:00
fabriziopandini
0e447d797f kubeadm Json6902 Patches 2019-08-27 14:14:35 +02:00
Ted Yu
8efa1c2a8f Correct func name WithBuildMetadata 2019-08-26 21:10:56 -07:00
Kubernetes Prow Robot
533daf6624
Merge pull request #81836 from fabriziopandini/fix-upgrade-checks
kubeadm: fix upgrade checks
2019-08-26 20:55:37 -07:00
Kubernetes Prow Robot
90cf189152
Merge pull request #81791 from yastij/remove-ipvs-checks
remove the ipvs checks from the preflight checks
2019-08-26 20:55:22 -07:00
Kubernetes Prow Robot
2c64627871
Merge pull request #81918 from tedyu/pki-comment
Correct comment in CertOrKeyExist
2019-08-26 10:20:37 -07:00
Ted Yu
55cc0e2957 Correct comment in CertOrKeyExist 2019-08-25 19:30:20 -07:00
Kubernetes Prow Robot
9a5b87a58b
Merge pull request #81821 from hwdef/fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go
fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go
2019-08-23 17:59:30 -07:00
fabriziopandini
885f81dc51 fix upgrade checks 2019-08-23 15:12:29 +02:00
Kubernetes Prow Robot
2d649c347f
Merge pull request #81701 from tedyu/init-cfg-convert
Check error return from Scheme.Convert
2019-08-22 23:27:42 -07:00
Kubernetes Prow Robot
39d5fc7501
Merge pull request #81656 from SataQiu/fix-kubeadm-static-20190820
kubeadm: fix static check failures
2019-08-22 23:27:28 -07:00
Kubernetes Prow Robot
9873f0bfe8
Merge pull request #81696 from tedyu/kubeadm-ipv6
Remove check for addIPv6Checks which evaluates to true
2019-08-22 22:04:13 -07:00
SataQiu
7a4cf591ea kubeadm: fix static check failures 2019-08-23 10:51:12 +08:00
hwdef
86dd72f345 fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go 2019-08-23 10:07:07 +08:00
Kubernetes Prow Robot
59f5b3ddc4
Merge pull request #80937 from neolit123/1.16-error-stack-trace
kubeadm: print the stack trace of an error for klog level v>=5
2019-08-22 15:09:18 -07:00
Kubernetes Prow Robot
ca3e86e662
Merge pull request #81623 from neolit123/kernel-validator
kubeadm: support any Linux kernel version newer than 3.10
2019-08-22 11:12:59 -07:00
Lubomir I. Ivanov
2fc19136c1 kubeadm: print the stack trace of an error for klog level v>=5
- replace all stray calls of os.Exit() to util.CheckError() instead
- CheckError() now checks if the klog verbosity level is >=5
and shows a stack trace of the error
- don't call klog.Fatal in version.go
2019-08-22 20:09:54 +03:00
Yassine TIJANI
05326f8489 remove the ipvs checks from the preflight checks
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
2019-08-22 17:10:22 +01:00
Kubernetes Prow Robot
d54c5163e0
Merge pull request #81458 from fabriziopandini/kubeadm-kustomize-ux
kubeadm: kustomize-ux
2019-08-22 05:46:32 -07:00
Kubernetes Prow Robot
17a1859370
Merge pull request #81494 from Klaven/remove_awk
Removed awk from kubeadm reset
2019-08-21 10:37:14 -07:00
Kubernetes Prow Robot
e1c2c677f1
Merge pull request #78033 from rajansandeep/corednsmigration
Add the ability to migrate CoreDNS configmap in kubeadm
2019-08-20 20:39:16 -07:00
Ted Yu
185c0a16ee Check error return from Scheme.Convert 2019-08-20 20:17:14 -07:00
Ted Yu
4639ced630 Remove check for addIPv6Checks which evaluates to true 2019-08-20 19:02:29 -07:00
Lubomir I. Ivanov
bec9c3678b kubeadm: support any kernel version newer than 3.10
It seems undesirable that Kubernetes as a system should be
blocking a node if it's Linux kernel is way too new.

If such a problem even occurs we should exclude versions from
the list of supported versions instead of blocking users
from trying e.g. the latest 7.0.0-beta kernel because our
validators are not aware of this new version.
2019-08-21 01:23:53 +03:00
Kubernetes Prow Robot
f17b608157
Merge pull request #81622 from neolit123/kubeadm-remove-blang
kubeadm: do not use github.com/blang/semver in app/preflight
2019-08-20 10:47:28 -07:00
Sandeep Rajan
6bb9eeeb1c move the corefile backup into a single configmap with a corefile-backup data key 2019-08-20 13:20:18 -04:00
Marek Counts
6845c66efb removed awk from kubeadm reset
removed awk from kubeadm reset in favor of native go lang calls
that are not vulnerable to expantion.
2019-08-20 15:53:40 +00:00
Lubomir I. Ivanov
0a0f6f8eec kubeadm: do not use github.com/blang/semver in app/preflight
Usage of github.com/blang/semver is not needed and
k8s.io/apimachinery/pkg/util/version should be used instead
for semantic version parsing and version comparison.
2019-08-20 14:06:52 +03:00
Kubernetes Prow Robot
66b0a0c17d
Merge pull request #81604 from tedyu/kubeadm-close-err
Check the error return from listener close
2019-08-19 15:09:44 -07:00
Ted Yu
158cf5d61a Check the error return from listener close 2019-08-19 09:26:35 -07:00
Sadlil Rhythom
3e6d483dd9 Fix Test for kubeadm/app/util/net.GetHostname 2019-08-19 14:38:19 +02:00
Kubernetes Prow Robot
acc57be085
Merge pull request #81559 from tedyu/static-pod-rm-unused
Remove boolean waitForComponentRestart which is always true in upgradeComponent
2019-08-18 21:18:03 -07:00