github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
99,449 Commits 1 Branch 31 Tags 1,019 MiB
d8f3794b83
Commit Graph

1767 Commits

Author SHA1 Message Date
Davanum Srinivas
57ddfb7314
Switch to newer agnhost image 
We have an update to the image in
f9aaf71ccb, we need to bump to use this
image.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-03-30 20:15:36 -04:00
Andrey Smirnov
f9aaf71ccb test/e2e: fix the OIDC discovery test with ECDSA service account key 
By default oidc library enables only `RS256` signature validation
method.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
 2021-03-30 22:58:50 +03:00
Adolfo García Veytia (Puerco)
999a1f5c76 Add KUBE_BUILD_CONFORMANCE on package-tarballs target 
Signed-off-by: Adolfo García Veytia (Puerco) <adolfo.garcia@uservers.net>
 2021-03-25 18:20:36 -06:00
Ernest Wong
42011ecfe4
test image: bump agnhost version to 2.30 
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
 2021-03-19 11:12:45 -07:00
Kubernetes Prow Robot
72cc3f2112
Merge pull request #99860 from chewong/fix-99470 
agnhost: resolve service account issuer URL before invoking oidc.NewProvider
 2021-03-16 14:49:30 -07:00
Kubernetes Prow Robot
2a26f276a8
Merge pull request #97963 from saschagrunert/pause-non-root 
Run pause image as non-root user and group
 2021-03-16 05:30:36 -07:00
Ernest Wong
573535691b
agnhost: resolve service account issuer URL before invoking oidc.NewProvider 
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
 2021-03-15 19:14:14 -07:00
Sascha Grunert
273fdd7686
Build conformance issue when building via cross or cross-in-a-container 
This enables building the conformance image when running `make
cross-in-a-container`, which is being used by the release engineering
tooling.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-03-15 15:29:04 +01:00
Kubernetes Prow Robot
7139f08763
Merge pull request #99592 from Joseph-Goergen/fix-buildimage-dockerfile 
Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY
 2021-03-11 15:02:18 -08:00
Sascha Grunert
aad711f399
Run pause image as non-root user and group 
We now build the pause image to use a pseudo user and group 65535:65535.
This increases the security aspect of the container image, if a
vulnerability would directly affect the pause container.

Signed-off-by: Sascha Grunert <sgrunert@suse.com>
 2021-03-11 09:29:45 +01:00
Kubernetes Prow Robot
91a7be0c2f
Merge pull request #98884 from fedepaol/hostnetworkudp 
Network Tests: bind host network udp listeners to hostIPs
 2021-03-11 00:18:24 -08:00
Stephen Augustus
13ef775df2 [go1.16] Update to go1.16.1 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-10 19:06:57 -05:00
Joseph Goergen
4d440889ff Fixed the Dockerfile for the build-image to build from KUBE_BASE_IMAGE_REGISTRY 
related: https://github.ibm.com/alchemy-containers/armada-update/issues/1791
 2021-03-10 16:07:51 -06:00
Benjamin Elder
b85bc6013f support additional WHAT= when building release-images / quick-release-images 2021-03-09 15:52:53 -08:00
Federico Paolinelli
b69bc865b4 Bump up the agnhost version used 
This is needed to consume the changes in https://github.com/kubernetes/kubernetes/pull/98883

Signed-off-by: Federico Paolinelli <fpaoline@redhat.com>
 2021-03-09 18:39:31 +01:00
Kubernetes Prow Robot
2d3acce39b
Merge pull request #99752 from pacoxu/coredns/promote 
update cluster/dns/coredns to 1.8.0 as kubeadm
 2021-03-08 12:07:28 -08:00
Benjamin Elder
aaa9280955 drop bazel from build/README.md 2021-03-07 15:27:44 -08:00
Benjamin Elder
b7f1cf7683 remove bazel from the makefile 2021-03-07 13:01:17 -08:00
Federico Paolinelli
f6451c93b1 Bump up agnhost version to 2.29 
This is to consume the changes for binding the udp listeners of netexec
to specific addresses.

Signed-off-by: Federico Paolinelli <fpaoline@redhat.com>
 2021-03-05 10:49:09 +01:00
pacoxu
2185bb40d5 update clustere/dns/coredns to 1.8.0 as kubeadm 2021-03-05 09:38:15 +08:00
Kubernetes Prow Robot
9658145f8a
Merge pull request #99655 from liggitt/min-go-version 
Update go version check to 1.16+
 2021-03-03 20:13:59 -08:00
Stephen Augustus
093967606b hack/tools: Update zeitgeist to v0.2.0 to drop import cycle 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-03 05:42:05 -05:00
Jordan Liggitt
5e9189289e Update go version check to 1.16+ 2021-03-02 15:11:46 -05:00
Lubomir I. Ivanov
33aa64d7fd build/dependencies.yaml: update Docker to 20.10 2021-03-02 21:41:18 +02:00
Stephen Augustus
ee500e0647 [go1.16] Use go-runner:v2.3.1-go1.16-buster.0 image 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-02 00:38:00 -05:00
Stephen Augustus
274133fe11 [go1.16] Update to go1.16 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-03-02 00:38:00 -05:00
Benjamin Elder
603c942e41 drop directories that only contained bazel-related sources 2021-02-28 15:17:30 -08:00
Benjamin Elder
b1b2f239fe remove bazel related entries in build/dependencies.yaml 2021-02-28 15:17:30 -08:00
Benjamin Elder
56e092e382 hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
Kubernetes Prow Robot
5491484aa9
Merge pull request #99386 from BenTheElder/conformance-on-release 
don't default to building conformance image for fastbuilds (quick-rel…
 2021-02-26 14:50:46 -08:00
Jake Sanders
4b83c760a9 Split the setcap image from the base images, make them easier to override 2021-02-24 12:49:08 -08:00
Kubernetes Prow Robot
d25986b8a6
Merge pull request #99379 from vinayakankugoyal/kappa 
Make the registry for the server-images templated in the Dockerfiles.
 2021-02-23 18:27:07 -08:00
Benjamin Elder
a3a650f246 don't default to building conformance image for fastbuilds (quick-release) 
continue defaulting to building it for release builds
 2021-02-23 17:41:27 -08:00
Vinayak Goyal
b4c330ab72 Make the registry for the server-images templated in the Dockerfiles. 2021-02-23 13:40:13 -08:00
Kubernetes Prow Robot
f4801a7c85
Merge pull request #98799 from claudiubelu/images/cleanup-run 
images: Removes containers after they've run
 2021-02-22 22:24:11 -08:00
Kubernetes Prow Robot
fa0907a251
Merge pull request #99145 from vinayakankugoyal/kappa 
Apply cap_net_bind_service to kube-apiserver binary.
 2021-02-22 20:18:03 -08:00
Vinayak Goyal
87f5ee31bd Check if the current builder supports multi-arch. 2021-02-22 18:13:27 -08:00
Kubernetes Prow Robot
d6c7476ab3
Merge pull request #99155 from soltysh/convert_release 
Add kubectl-convert to client-binaries
 2021-02-22 17:24:15 -08:00
Maciej Szulik
0a0c80c553
Add kubectl-convert to client-binaries 2021-02-22 17:01:34 +01:00
Stephen Augustus
b14accb3d4 dependencies.yaml: Pin zeitgeist version and add comment about usage 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-02-22 09:58:12 -05:00
Vinayak Goyal
7edd17307c Apply cap_net_bind_service to kube-apiserver binary. 2021-02-17 21:26:19 -08:00
Kubernetes Prow Robot
4f1dd5d2fb
Merge pull request #96987 from soltysh/drop_batch-alpha 
Drop batch/v2alpha1
 2021-02-17 06:35:06 -08:00
Kubernetes Prow Robot
53345a216d
Merge pull request #99067 from vinayakankugoyal/dockerfile3 
Use ARG and --build-arg instead of sed for build-image.
 2021-02-13 22:01:04 -08:00
Vinayak Goyal
e05f4a3fac Use ARG and --build-arg instead of sed for build-image. 2021-02-13 17:10:32 -08:00
Kubernetes Prow Robot
b529be32e2
Merge pull request #99049 from knabben/agnhost28 
Bump agnhost 2.28
 2021-02-13 15:31:04 -08:00
Amim Knabben
aebb3faeff Bump agnhost 2.28 2021-02-12 19:13:38 -05:00
Maciej Szulik
7d9f36cd85
Generated changes 2021-02-12 17:51:15 +01:00
Vinayak Goyal
652b45e5c8 Add newline to the end of Dockerfile. 2021-02-11 22:38:52 -08:00
Vinayak Goyal
94f30808ae Use on disk Dockerfile for server-images. 2021-02-11 22:32:43 -08:00
Kubernetes Prow Robot
ab5a8c4af8
Merge pull request #98639 from knabben/udp-connect-agnhost 
UDP protocol on connect agnhost command
 2021-02-09 10:25:39 -08:00