Commit Graph

9721 Commits

Author SHA1 Message Date
Avritt Rohwer
0a5a697882 Fix bug in retry-forever usage.
- Push retry-forever wrapping to curl invocations.
- Collect curl retry flags into a single variable.
- Remove 'sudo: false' in master.yaml, is unnecessary and breaks older
  cloud-init versions.
- Change log-error status reason to be more accurate.
- Fix the some 'python' invocations to 'python3'.
2021-05-12 09:22:20 -07:00
Kubernetes Prow Robot
1bd00776b5
Merge pull request #101874 from tallclair/owners
Remove tallclair for gce owners
2021-05-10 13:49:48 -07:00
Kubernetes Prow Robot
7563d3092e
Merge pull request #96216 from knight42/refactor/disable-insecure-port-in-ctrler-mgr
refactor: disable insecure serving in controller-manager
2021-05-10 13:49:36 -07:00
Tim Allclair
9d349b6d21 Remove tallclair for gce owners 2021-05-10 10:21:17 -07:00
Kubernetes Prow Robot
8ddabd0da5
Merge pull request #101810 from caseydavenport/casey-fix-calico-crds
Fix improperly formatted Calico CRD files
2021-05-07 21:29:29 -07:00
Casey Davenport
e22773bc30 Fix improperly formatted Calico CRD files 2021-05-07 13:48:43 -07:00
Stephen Augustus
5b530da51f [go1.16] Update to go1.16.4
Signed-off-by: Stephen Augustus <foo@auggie.dev>
2021-05-07 15:47:54 -04:00
Kubernetes Prow Robot
8b1c82a34c
Merge pull request #101772 from swetharepakula/bump-glbc-image
Update glbc image to v1.12.0
2021-05-06 22:05:02 -07:00
Kubernetes Prow Robot
ca0c04e4d3
Merge pull request #101164 from vinayakankugoyal/apiservernonroot
Run control-plane as non root in kube-up.
2021-05-06 17:33:14 -07:00
Swetha Repakula
8c8db0d8e9 Update glbc image to v1.12.0
- glbc now uses networking.k8s.io/v1 Ingress
2021-05-06 15:20:05 -07:00
Kubernetes Prow Robot
1f3fd1cb80
Merge pull request #101751 from vinayakankugoyal/sshproxy
Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as…
2021-05-06 15:15:51 -07:00
Kubernetes Prow Robot
8955f55fcf
Merge pull request #101678 from vinayakankugoyal/goodbye-basicauth
Remove remnants of basic auth from cluster bootstrap.
2021-05-06 14:14:14 -07:00
Vinayak Goyal
6aa495ddc6 Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-06 14:02:53 -07:00
pacoxu
6d86fc6a15 removed deprecated apiextensions.k8s.io/v1beta1; use extension v1.
Signed-off-by: pacoxu <paco.xu@daocloud.io>
2021-05-06 11:27:58 +08:00
Kubernetes Prow Robot
add13090e2
Merge pull request #101732 from spencer-p/master
Promote kube-addon-manager to v9.1.5
2021-05-05 18:49:17 -07:00
Vinayak Goyal
487583bd0a Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 15:23:04 -07:00
Vinayak Goyal
406ceae991 Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 14:49:59 -07:00
Vinayak Goyal
5d8c89b164 Run control-plane as non root in kube-up. 2021-05-05 14:46:28 -07:00
Jeremy Edwards
daa5be1d01 GCE Windows: Do not install docker when containerd CRI is selected. 2021-05-05 21:06:33 +00:00
Kubernetes Prow Robot
7d176851f2
Merge pull request #100612 from pacoxu/patch-8
kubeadm: upgrade etcd to 3.4.13-3
2021-05-05 07:11:27 -07:00
Spencer Peterson
a119b767d0 Promote kube-addon-manager to v9.1.5
Change-Id: Iffebad61634831b0c34eb54517a2543c75c55d68
2021-05-04 12:14:52 -07:00
David Porter
dac06aefb0 Revert "Revert "cluster: Use python3 everywhere""
This reverts commit 7038338e0f.
2021-05-03 21:43:15 -07:00
Jian Zeng
e481d99965
refactor: disable insecure serving in controller-manager
Now the following flags have no effect and would be removed in v1.24:
* `--port`
* `--address`

The insecure port flags `--port` may only be set to 0 now.

Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
2021-05-03 00:01:49 +08:00
Kubernetes Prow Robot
c5b900b69c
Merge pull request #97399 from davidxia/comment-typo
Fix typo in comment
2021-05-01 04:57:59 -07:00
Vinayak Goyal
b87762966d Remove remnants of basic auth from cluster bootstrap. 2021-04-30 11:23:14 -07:00
Kubernetes Prow Robot
f235adc4d2
Merge pull request #101621 from jeremyje/fixfb
GCE Windows: mkdir -p fluent-bit pos-files directory.
2021-04-30 10:24:39 -07:00
Daniel Kłobuszewski
447b0ca705 Bump metrics server to use 0.4.4 image. 2021-04-30 09:13:39 +02:00
Kubernetes Prow Robot
663b425e21
Merge pull request #101417 from pacoxu/node-local-dns-docs
update node local dns readme for ipv6 and 1.18 GA
2021-04-29 18:10:19 -07:00
Kubernetes Prow Robot
551ef71b64
Merge pull request #100256 from sarandia/metricsserverarch
bump metrics server version to v0.3.7 and make it multi-arch
2021-04-29 18:09:58 -07:00
Jeremy Edwards
5c713379a0 GCE Windows: mkdir -p fluent-bit pos-files directory. 2021-04-29 22:52:38 +00:00
Kubernetes Prow Robot
06eeec737a
Merge pull request #101439 from prameshj/update-kubedns
Update to using kubedns 1.17.3 image.
2021-04-29 09:01:04 -07:00
Kubernetes Prow Robot
f631c0e520
Merge pull request #101271 from jeremyje/fixfb
Fix fluent-bit configuration for GCE Windows.
2021-04-27 19:06:49 -07:00
Ziyuan Chen
7a5508c0a7 bump metrics server version to v0.3.7 and make it multi-arch
Bumping the metrics-server version to v0.3.7. In this version,
metrics-server started building multi-arch images. To properly support
non-amd64 nodes, we should bump the version and remove the -amd64 in the
image path. (https://github.com/kubernetes-sigs/metrics-server/pull/492)

```release-note
metrics-server now uses v0.3.7 and supports multi-arch Kubernetes nodes.
```
2021-04-27 20:48:21 +00:00
Kubernetes Prow Robot
2f753ec4c8
Merge pull request #101473 from pacoxu/revert-101437-python3
Revert "cluster: Use python3 everywhere"
2021-04-26 12:54:37 -07:00
Paco Xu
7038338e0f
Revert "cluster: Use python3 everywhere" 2021-04-26 11:21:44 +08:00
songxiao-wang87
4f254674fa Making a run test.
Signed-off-by: songxiao-wang87 <wang.xiaosong23@zte.com.cn>
2021-04-25 10:46:18 +08:00
Pavithra Ramesh
2c2dd6b072 Update to using kubedns 1.17.3 image. 2021-04-23 14:59:38 -07:00
David Porter
3f87f4f278 Use python3 everywhere 2021-04-23 14:33:58 -07:00
pacoxu
58114e293f update node local dns readme for ipv6 and 1.18 GA 2021-04-23 17:04:55 +08:00
Kubernetes Prow Robot
ae35c6f10c
Merge pull request #101255 from basantsa1989/stack-type
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
2021-04-22 15:55:28 -07:00
Jeremy Edwards
e62301c87d Fix fluent-bit configuration for GCE Windows. 2021-04-22 20:04:54 +00:00
Kubernetes Prow Robot
6aa683e9cf
Merge pull request #100639 from zshihang/proxy
dnat to 169.254.169.252 for metadata server traffic
2021-04-21 11:15:51 -07:00
Kubernetes Prow Robot
3cc043cfd2
Merge pull request #101262 from spencer-p/master
Upgrade addon-manager baseimage to debian-base v1.0.1
2021-04-20 20:36:22 -07:00
Kubernetes Prow Robot
41505f7109
Merge pull request #101176 from jkh52/master
kube-master-installation: improve systemd cross-unit robustness.
2021-04-20 00:42:45 -07:00
Spencer Peterson
530072a38f Addon-manager baseimage upgrade debian-base v1.0.1
The previous base image, debian-base:v1.0.0, is affected by
CVE-2017-14062. This change upgrades to the most recent Debian stretch
image from the following command:

```
$ gcloud container images list-tags k8s.gcr.io/debian-base-amd64
DIGEST        TAGS    TIMESTAMP
7e9f2f88b813  v1.0.1  2020-02-18T13:18:50
d7be39e143d4  v2.0.0  2019-11-01T13:14:18
5f25d97ece90  v1.0.0  2019-03-25T10:59:09
dddca919baec  1.0.0   2019-03-25T09:43:09
```

This marks kube-addon-manager version 9.1.5.

Change-Id: I02321a781fb19dd33c0a19671b56c0b12d9b52fd
2021-04-19 20:36:44 -07:00
Kubernetes Prow Robot
46b0ad1327
Merge pull request #101207 from vinayakankugoyal/sshproxy
If kube-apiserver is running as non-root then set the permissions of …
2021-04-19 17:24:33 -07:00
Joseph Anttila Hall
05bcc72dc2 kube-master-installation: reboot on failure.
Also some minor reliability tweaks.
2021-04-19 17:16:21 -07:00
Vinayak Goyal
94e34da471 If kube-apiserver is running as non-root then set the permissions of /etc/srv/sshproxy accordingly. 2021-04-19 13:16:06 -07:00
Basant Amarkhed
e15d811652 Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code) 2021-04-19 19:06:55 +00:00
Shihang Zhang
297ad30610 dnat to 169.254.169.252 for metadata server traffic 2021-04-19 10:47:51 -07:00