Commit Graph

33440 Commits

Author SHA1 Message Date
Mike Fedosin
cf8c193b87 Allow to read OpenStack config from the secret
Currently OpenStack cloud provider reads user credentials from config
file, where data is stored in clear text. This approach is not recommended,
as it is a serious security issue.

This commit add an ability to read the config from secrets, if necessary.
To do so, two new parameters are added to the config: SecretNamespace and
SecretName. If they are specified, the provider will try to read config
from the secret.
2019-03-07 19:20:54 +01:00
Kubernetes Prow Robot
b1d4d40679 Merge pull request #74668 from sttts/sttts-kube-apiserver-endpoints-when-ready
kube-apiserver: don't create endpoints before being ready
2019-03-04 01:57:41 -08:00
andyzhangx
38f0908597 make funcs in azure cloud provider as public 2019-03-03 01:58:59 +00:00
Kubernetes Prow Robot
cfe4ca8012 Merge pull request #73934 from bsalamat/num_cpu
Use runtime.NumCPU() instead of a fixed value for parallel scheduler threads
2019-03-01 23:04:17 -08:00
Kubernetes Prow Robot
f16035600a Merge pull request #73807 from dekkagaijin/discovery-hardening
harden the default RBAC discovery clusterrolebindings
2019-03-01 21:49:30 -08:00
Kubernetes Prow Robot
cb89d8028a Merge pull request #74769 from msau42/local-pv-ga
move local PV to GA
2019-03-01 19:14:34 -08:00
Kubernetes Prow Robot
d8d260a09d Merge pull request #74755 from liggitt/kubelet-watch
Revert kubelet to default to ttl cache secret/configmap behavior
2019-03-01 19:14:14 -08:00
Kubernetes Prow Robot
ced9e30990 Merge pull request #74576 from datuanmac/trivial_fix_typos
Trivial fix typo
2019-03-01 19:14:03 -08:00
Jake Sanders
9c7d31928d harden the default RBAC discovery clusterrolebindings 2019-03-01 18:45:05 -08:00
Kubernetes Prow Robot
9b8c58644a Merge pull request #74418 from danielqsj/duration
convert latency/latencies in metrics name to duration
2019-03-01 17:58:12 -08:00
Michelle Au
5f0847b515 move local PV to GA 2019-03-01 12:51:25 -08:00
Lubomir I. Ivanov
e29c6e1b38 go-1.12: fix 'go vet' failures 2019-03-01 18:48:17 +02:00
Kubernetes Prow Robot
8c95a07b4b Merge pull request #73007 from krmayankk/runasgroup
Promote RunAsGroup to Beta
2019-03-01 03:46:55 -08:00
Kubernetes Prow Robot
a5ba825b1b Merge pull request #74715 from andyzhangx/acr-public-access
fix Azure Container Registry anonymous repo image pull error
2019-03-01 02:29:40 -08:00
Dr. Stefan Schimanski
2a9a9fa155 kube-apiserver: first remove endpoints, then add when ready 2019-03-01 10:46:18 +01:00
Kubernetes Prow Robot
caaad1be26 Merge pull request #72526 from justinsb/testdata_should_not_be_executable
Remove executable permission from testdata
2019-02-28 20:35:56 -08:00
Kubernetes Prow Robot
4f01eb528e Merge pull request #74336 from littleroad/exited_container
cri_stats_provider: Implement removeTerminatedContainer correctly
2019-02-28 19:12:07 -08:00
Mayank Kumar
1b1251277c Promote RunAsGroup to Beta 2019-02-28 17:24:39 -08:00
Kubernetes Prow Robot
f6d05d6315 Merge pull request #74611 from denkensk/fix-unable-find-backoff-value
fix the flake in scheduling_queue_test
2019-02-28 16:06:57 -08:00
Jordan Liggitt
cd1c9f9018 Revert kubelet to default to ttl cache secret/configmap behavior 2019-02-28 17:54:22 -05:00
andyzhangx
3c7de52cc2 add Azure Container Registry anonymous repo support
apply fix for msi and fix test failure
2019-02-28 12:16:21 +00:00
Fabio Bertinatto
32c0af42e6 Remove last pieces of mount propagation gate 2019-02-28 13:05:02 +01:00
Kubernetes Prow Robot
36787041cb Merge pull request #73653 from ddebroy/migprov1
Support dynamic provisioning for CSI migration scenarios
2019-02-28 01:52:55 -08:00
Kubernetes Prow Robot
711b310389 Merge pull request #74606 from andrewsykim/cleanup-volumeattachment
replace usage of v1beta1 VolumeAttachments with v1
2019-02-28 00:27:36 -08:00
Kubernetes Prow Robot
4b1282d925 Merge pull request #74016 from ahadas/topology_cleanup
Cleanup in topology.go
2019-02-27 22:49:24 -08:00
Lu Fengqi
3f8eda37ce cri_stats_provider: overload nil as 0 for exited containers stats
Always report 0 cpu/memory usage for exited containers to make
metrics-server work as expect.

Signed-off-by: Lu Fengqi <lufq.fnst@cn.fujitsu.com>
2019-02-28 10:41:15 +08:00
Kubernetes Prow Robot
ce4229f2cc Merge pull request #74682 from soltysh/fix_flag_template
Fix flag template when both visible and explicit flags are specified
2019-02-27 17:13:12 -08:00
Kubernetes Prow Robot
84dce4d119 Merge pull request #74393 from codenrhoden/refactor-subpath
Refactor subpath out of pkg/util/mount
2019-02-27 15:54:36 -08:00
Kubernetes Prow Robot
bf2c9ccec7 Merge pull request #74122 from draveness/feature/refactor-filter-active-pods
refactor: use FilterActivePods instead in replicaset controller
2019-02-27 15:54:25 -08:00
wangqingcan
471679f8d2 fix the flake in scheduling_queue_test 2019-02-28 07:23:27 +08:00
Maciej Szulik
b4f81285bf Fix flag template when both visible and explicit flags are specified 2019-02-27 22:35:03 +01:00
Andrew Kim
01933b02a3 replace usage of v1beta1 VolumeAttachments with v1 2019-02-27 15:42:12 -05:00
Dr. Stefan Schimanski
14f2a335dc endpoint-reconcilers: split stop and remove 2019-02-27 17:19:33 +01:00
Kubernetes Prow Robot
6e8b5691db Merge pull request #74599 from andyzhangx/azuredisk-log
add more logging in azure disk attach/detach
2019-02-27 05:48:44 -08:00
Kubernetes Prow Robot
a514fa042e Merge pull request #74636 from logicalhan/reflector-metrics
Remove reflector metrics since they are causing a memory leak
2019-02-27 03:24:09 -08:00
Kubernetes Prow Robot
02bd660ad8 Merge pull request #74573 from m3ngyang/comments-typo
fix some comment typos
2019-02-27 03:23:58 -08:00
Kubernetes Prow Robot
218642e84e Merge pull request #74562 from roycaihw/feat/admission-webhook-timeout
admission webhook: timeout configuration
2019-02-26 23:40:44 -08:00
Han Kang
ca096f8069 Remove reflector metrics as they currently cause a memory leak 2019-02-26 20:11:22 -08:00
Kubernetes Prow Robot
09d07cf4e1 Merge pull request #74633 from Random-Liu/lower-normal-log-level
Lower the log level for non-exist cadvisor stats.
2019-02-26 19:40:46 -08:00
Kubernetes Prow Robot
5c528d6e40 Merge pull request #74618 from davidz627/fix/featureGates
Add feature gate check for migration at beginning of useCSIPlugin check
2019-02-26 19:40:26 -08:00
Kubernetes Prow Robot
81e6407393 Merge pull request #74140 from Liujingfang1/kflag
add -k flag in cli-runtime and kubectl to process kustomization directories
2019-02-26 19:40:16 -08:00
Kubernetes Prow Robot
9059021d9a Merge pull request #67350 from tnozicka/retry-watcher
#50102 Task 3: Until, backed by retry watcher
2019-02-26 19:40:01 -08:00
Travis Rhoden
2c4d748bed Refactor subpath out of pkg/util/mount
This patch moves subpath functionality out of pkg/util/mount and into a
new package pkg/volume/util/subpath. NSEnter funtionality is maintained.
2019-02-26 19:59:53 -07:00
Kubernetes Prow Robot
5ebdf3e3f2 Merge pull request #74574 from SataQiu/fix-golint-20190226
fix some golint failures in pkg/registry/...
2019-02-26 18:12:19 -08:00
Kubernetes Prow Robot
4b82f8c7ec Merge pull request #74157 from misterikkit/backoff
Ensure that pods obey backoff timers.
2019-02-26 16:50:13 -08:00
Lantao Liu
f9b8d27cef Lower the log level for non-exist cadvisor stats.
For exited container, it is quite normal that cri stats
are returned, but there is no corresponding cadvisor stats.
2019-02-26 16:43:42 -08:00
Haowei Cai
1a25ced1c7 generated 2019-02-26 15:00:35 -08:00
Haowei Cai
ad0d523d6e tests 2019-02-26 14:44:31 -08:00
Haowei Cai
1cd9162c15 default and validation 2019-02-26 14:41:43 -08:00
Haowei Cai
609527a015 webhook timeout API change 2019-02-26 14:39:28 -08:00