Commit Graph

41627 Commits

Author SHA1 Message Date
Patrick Ohly
fb4b380fe2 PSP: validation errors for generic volume type
It's not enough to silently drop the volume type if the feature is
disabled. Instead, the policy should fail validation, just as it would
have if the API server didn't know about the feature at all.
2021-03-07 10:58:45 +01:00
Patrick Ohly
aa4f8ae793 security: another test case for generic ephemeral inline volumes
When the PSP contains some other volume types, generic ephemeral
inline volumes must be rejected.
2021-03-07 10:56:48 +01:00
Patrick Ohly
38384d5c13 PSP: conditional support for generic volume type
When introducing the new "generic" volume type for generic ephemeral
inline volumes, the storage policy for PodSecurityPolicy objects
should have been extended so that this new type is valid only
if the generic ephemeral volume feature is enabled or an
existing object already has it.

Adding the new type to the internal API was also missed.
2021-03-07 10:56:48 +01:00
Kubernetes Prow Robot
e688f22da0 Merge pull request #99214 from jpbetz/apply-client-go-builders2-typedclient
Add Apply to client-go's typed client
2021-03-06 22:17:41 -08:00
Swetha Repakula
6bc5796750 Update controlplane to use EndpointSlice V1 API 2021-03-06 20:05:24 -08:00
Kubernetes Prow Robot
d6a9061cb4 Merge pull request #99870 from swetharepakula/eps-ga-controller
Graduate EndpointSlice Controllers to GA
2021-03-06 19:57:45 -08:00
Wei Huang
8f5416c1ec Revert "Surface more information about plugin scores in scheduler"
This reverts commit d09a841246.
2021-03-06 19:54:12 -08:00
Kubernetes Prow Robot
c37073b87b Merge pull request #99890 from yahaa/fix-lint
fix gosimple lint check
2021-03-06 18:43:41 -08:00
Joe Betz
293e07a836 Add Apply functions to client-gen 2021-03-06 20:49:06 -05:00
Swetha Repakula
108fd44f7c Graduate EndpointSlice feature gate to GA 2021-03-06 15:58:47 -08:00
Swetha Repakula
1925d94b18 Graduate EndpointSlice Controllers to GA
- EndpointSlice controller will stop writing to Topology field
 - EndpointSlice controller will only provide NodeName and Zone on
 EndpointSlices
2021-03-06 15:58:47 -08:00
Kubernetes Prow Robot
36244f31ef Merge pull request #99662 from swetharepakula/eps-ga-api-changes
Graduate EndpointSlice API to GA
2021-03-06 15:23:54 -08:00
Kubernetes Prow Robot
4bf85032f3 Merge pull request #99275 from hbagdi/feat/ingress-class-namespaced-params
Add namespace scoped ParametersReference to IngressClass
2021-03-06 15:23:41 -08:00
Kubernetes Prow Robot
170c6a9833 Merge pull request #99806 from alculquicondor/job-adoption-unit
Merge tests for getPodsForJob
2021-03-06 12:50:29 -08:00
Kubernetes Prow Robot
bf67ba1c0e Merge pull request #99791 from soltysh/simplify_unittests
Simplify cronjob v2 controller tests
2021-03-06 12:50:21 -08:00
Kubernetes Prow Robot
699b38669f Merge pull request #99731 from AliceZhang2016/newFramework-accept-KubeSchedulerProfile
Make runtime.NewFramework accept KubeSchedulerProfile
2021-03-06 12:49:48 -08:00
Kubernetes Prow Robot
c193c1b234 Merge pull request #98376 from matthyx/mega
Make all health checks probing consistent
2021-03-06 11:45:41 -08:00
Harry Bagdi
a7fc92089a Add namespace scoped ParametersReference to IngressClass 2021-03-07 00:45:32 +05:30
Kubernetes Prow Robot
bf448a1eaa Merge pull request #99212 from damemi/alculquicondor-log-timestamp
Logarithmic timestamp comparison for downscaling
2021-03-06 09:47:41 -08:00
Qi Wang
8133d29586 Refactor pods format to ObjRef slice
Refactor format.Pods to return a slice of ObjRef for structured logging.
Ref: https://github.com/kubernetes/kubernetes/pull/99029#discussion_r586785552

Signed-off-by: Qi Wang <qiwan@redhat.com>
2021-03-06 11:26:50 -05:00
Kubernetes Prow Robot
377ed3c2a6 Merge pull request #96441 from smarterclayton/daemonset_surge_impl
DaemonSet controller respects MaxSurge during update
2021-03-06 08:23:42 -08:00
yahaa
22a8a9ab45 fix gosimple lint check
Signed-off-by: yahaa <1477765176@qq.com>
2021-03-06 19:57:36 +08:00
Kubernetes Prow Robot
4e95e1df04 Merge pull request #98515 from lala123912/huge_page
Add request value verification for hugepage
2021-03-05 22:11:43 -08:00
qingwave
8f2d913acd migrate kubelet/preemption and kubelet/logs to structured logging 2021-03-06 13:13:18 +08:00
Kubernetes Prow Robot
56bcd562a4 Merge pull request #96973 from chenyw1990/optimizationRuntimeContainerLog
Optimization log: add containerName to log
2021-03-05 20:55:41 -08:00
Dave Chen
b8394c4700 Move VolumeBinding plugin args validation to apis/config/validation
This PR also looses the check to allow zero since the API doc has
explained that value zero indicates no waiting.

Signed-off-by: Dave Chen <dave.chen@arm.com>
2021-03-06 11:06:39 +08:00
Kubernetes Prow Robot
7125496e66 Merge pull request #99735 from bobbypage/beta-graceful-shutdown
Promote kubelet graceful node shutdown to beta
2021-03-05 17:23:42 -08:00
David Porter
893f5fd4f0 Promote kubelet graceful node shutdown to beta
- Change the feature gate from alpha to beta and enable it by default

- Update a few of the unit tests due to feature gate being enabled by
  default

- Small refactor in `nodeshutdown_manager` which adds `featureEnabled`
  function (which checks that feature gate and that
  `kubeletConfig.ShutdownGracePeriod > 0`).

- Use `featureEnabled()` to exit early from shutdown manager in the case
  that the feature is disabled

- Update kubelet config defaulting to be explicit that
  `ShutdownGracePeriod` and `ShutdownGracePeriodCriticalPods` default to
  zero and update the godoc comments.

- Update defaults and add featureGate tag in api config godoc.

With this feature now in beta and the feature gate enabled by default,
to enable graceful shutdown all that will be required is to configure
`ShutdownGracePeriod` and `ShutdownGracePeriodCriticalPods` in the
kubelet config. If not configured, they will be defaulted to zero, and
graceful shutdown will effectively be disabled.
2021-03-05 15:21:37 -08:00
Geon-Ju Kim
df48ee49d8 Count pod overhead as an entity's resource usage 2021-03-06 07:58:56 +09:00
Kubernetes Prow Robot
ed6b9addbf Merge pull request #96347 from cofyc/kep1845
Prioritizing nodes based on volume capacity
2021-03-05 14:45:43 -08:00
Kubernetes Prow Robot
269d62d895 Merge pull request #97837 from JornShen/proxier_userspace_structured_logging
migrate proxy/userspace/proxier.go logs to structured logging
2021-03-05 13:25:42 -08:00
Aldo Culquicondor
a8d105ab72 Logarithmic timestamp comparison for ReplicSet downscaling
Change-Id: I0657ea0ce41b98fdee1a5307b5826a10deaff98c
2021-03-05 15:58:26 -05:00
Swetha Repakula
a9891b4b9b Graduate EndpointSlice API to GA
* Removes discovery v1alpha1 API
  * Replaces per Endpoint Topology with a read only DeprecatedTopology
  in GA API
  * Adds per Endpoint Zone field in GA API
2021-03-05 12:02:41 -08:00
Kubernetes Prow Robot
336bbae82c Merge pull request #99847 from jpbetz/fix-apply-fuzzer-flake
Fix flake #99821: reduce fuzz runs 50 to 3 per apply config type
2021-03-05 11:22:01 -08:00
Kubernetes Prow Robot
b2af8aefba Merge pull request #97216 from joejulian/docs_missing_quotes
Re-clarify NetworkPolicy policyTypes in docs
2021-03-05 11:21:42 -08:00
Mengxue Zhang
b38caa91cc make runtime.NewFramework accept KubeSchedulerProfile 2021-03-05 18:30:21 +00:00
Sladyn
cee2c42a54 Apply suggestions from code review
Co-authored-by: Marek Siarkowicz <marek.siarkowicz@protonmail.com>
2021-03-05 23:59:23 +05:30
Sladyn Nunes
5ba3bf1bca kubelet: migrate pkg/kubelet/cloudresource to structured logging 2021-03-05 23:59:23 +05:30
Maciej Szulik
0a8417e161 Simplify cronjob v2 controller tests 2021-03-05 19:25:51 +01:00
Kubernetes Prow Robot
70d732c7e7 Merge pull request #99653 from aojea/kproxymetrics
new kube-proxy iptables metric to expose then number of iptables rules
2021-03-05 10:00:34 -08:00
Kubernetes Prow Robot
06a4b6f342 Merge pull request #99423 from soltysh/cronjob_controller
Switch cronjob controller to batch/v1
2021-03-05 10:00:22 -08:00
Joe Betz
7ac882450f Reduce Test{Json,Unstructured}RoundTripApplyConfigurations fuzz runs from 50 to 3 per type 2021-03-05 09:15:32 -08:00
Nabarun Pal
b009a12f61 migrate pkg/kubelet/token to structured logging
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2021-03-05 22:40:46 +05:30
Joe Julian
e7945befbc Re-clarify NetworkPolicy policyTypes in docs 2021-03-05 09:07:12 -08:00
Yecheng Fu
d791f7feef Prioritizing nodes based on volume capacity: unit tests 2021-03-05 23:59:25 +08:00
Yecheng Fu
21a43586e7 Prioritizing nodes based on volume capacity 2021-03-05 23:59:25 +08:00
Yecheng Fu
61a44d0dbe Prioritizing nodes based on volume capacity: add feature gate 2021-03-05 23:59:25 +08:00
Navid Shaikh
dbe5476a2a Migrate pkg/kubelet/status to structured logging 2021-03-05 20:58:46 +05:30
Krzysztof Gibuła
86b0efcd77 Migrate pkg/kubelet/prober to structured logging 2021-03-05 16:10:09 +01:00
Kubernetes Prow Robot
55f255208a Merge pull request #83730 from claudiubelu/windows/containerd-etc-hosts
Windows: Fixes /etc/hosts file mounting support for containerd
2021-03-05 05:08:22 -08:00