github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,167 Commits 1 Branch 31 Tags
dbe015513971b69b2f69c02de1bb5960fe230b51
Commit Graph

9832 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
7563d3092e Merge pull request #96216 from knight42/refactor/disable-insecure-port-in-ctrler-mgr 
refactor: disable insecure serving in controller-manager
 2021-05-10 13:49:36 -07:00
Tim Allclair
9d349b6d21 Remove tallclair for gce owners 2021-05-10 10:21:17 -07:00
olagacek
a492762995 Set poll period of metrics server nanny to 30s 
Set poll period of fetching changes from k8s api of metrics server nanny to 30s. 
This will enable faster scaling of metrics server
 2021-05-10 15:59:31 +02:00
Kubernetes Prow Robot
8ddabd0da5 Merge pull request #101810 from caseydavenport/casey-fix-calico-crds 
Fix improperly formatted Calico CRD files
 2021-05-07 21:29:29 -07:00
Casey Davenport
e22773bc30 Fix improperly formatted Calico CRD files 2021-05-07 13:48:43 -07:00
Stephen Augustus
5b530da51f [go1.16] Update to go1.16.4 
Signed-off-by: Stephen Augustus <foo@auggie.dev>
 2021-05-07 15:47:54 -04:00
Kubernetes Prow Robot
8b1c82a34c Merge pull request #101772 from swetharepakula/bump-glbc-image 
Update glbc image to v1.12.0
 2021-05-06 22:05:02 -07:00
Kubernetes Prow Robot
ca0c04e4d3 Merge pull request #101164 from vinayakankugoyal/apiservernonroot 
Run control-plane as non root in kube-up.
 2021-05-06 17:33:14 -07:00
Swetha Repakula
8c8db0d8e9 Update glbc image to v1.12.0 
- glbc now uses networking.k8s.io/v1 Ingress
 2021-05-06 15:20:05 -07:00
Kubernetes Prow Robot
1f3fd1cb80 Merge pull request #101751 from vinayakankugoyal/sshproxy 
Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as…
 2021-05-06 15:15:51 -07:00
Kubernetes Prow Robot
8955f55fcf Merge pull request #101678 from vinayakankugoyal/goodbye-basicauth 
Remove remnants of basic auth from cluster bootstrap.
 2021-05-06 14:14:14 -07:00
Vinayak Goyal
6aa495ddc6 Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-06 14:02:53 -07:00
Wilson E. Husin
a893521948 Add deadline for deprecation 2021-05-06 11:44:59 -07:00
pacoxu
6d86fc6a15 removed deprecated apiextensions.k8s.io/v1beta1; use extension v1. 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-05-06 11:27:58 +08:00
Kubernetes Prow Robot
add13090e2 Merge pull request #101732 from spencer-p/master 
Promote kube-addon-manager to v9.1.5
 2021-05-05 18:49:17 -07:00
Vinayak Goyal
487583bd0a Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 15:23:04 -07:00
Vinayak Goyal
406ceae991 Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it. 2021-05-05 14:49:59 -07:00
Vinayak Goyal
5d8c89b164 Run control-plane as non root in kube-up. 2021-05-05 14:46:28 -07:00
Jeremy Edwards
daa5be1d01 GCE Windows: Do not install docker when containerd CRI is selected. 2021-05-05 21:06:33 +00:00
Kubernetes Prow Robot
7d176851f2 Merge pull request #100612 from pacoxu/patch-8 
kubeadm: upgrade etcd to 3.4.13-3
 2021-05-05 07:11:27 -07:00
Spencer Peterson
a119b767d0 Promote kube-addon-manager to v9.1.5 
Change-Id: Iffebad61634831b0c34eb54517a2543c75c55d68
 2021-05-04 12:14:52 -07:00
David Porter
dac06aefb0 Revert "Revert "cluster: Use python3 everywhere"" 
This reverts commit 7038338e0f.
 2021-05-03 21:43:15 -07:00
Jian Zeng
e481d99965 refactor: disable insecure serving in controller-manager 
Now the following flags have no effect and would be removed in v1.24:
* `--port`
* `--address`

The insecure port flags `--port` may only be set to 0 now.

Signed-off-by: Jian Zeng <zengjian.zj@bytedance.com>
 2021-05-03 00:01:49 +08:00
Kubernetes Prow Robot
c5b900b69c Merge pull request #97399 from davidxia/comment-typo 
Fix typo in comment
 2021-05-01 04:57:59 -07:00
Vinayak Goyal
b87762966d Remove remnants of basic auth from cluster bootstrap. 2021-04-30 11:23:14 -07:00
Kubernetes Prow Robot
f235adc4d2 Merge pull request #101621 from jeremyje/fixfb 
GCE Windows: mkdir -p fluent-bit pos-files directory.
 2021-04-30 10:24:39 -07:00
Daniel Kłobuszewski
447b0ca705 Bump metrics server to use 0.4.4 image. 2021-04-30 09:13:39 +02:00
Kubernetes Prow Robot
663b425e21 Merge pull request #101417 from pacoxu/node-local-dns-docs 
update node local dns readme for ipv6 and 1.18 GA
 2021-04-29 18:10:19 -07:00
Kubernetes Prow Robot
551ef71b64 Merge pull request #100256 from sarandia/metricsserverarch 
bump metrics server version to v0.3.7 and make it multi-arch
 2021-04-29 18:09:58 -07:00
Jeremy Edwards
5c713379a0 GCE Windows: mkdir -p fluent-bit pos-files directory. 2021-04-29 22:52:38 +00:00
David Porter
e02ff0687e Remove node termination handler addon 2021-04-29 14:42:23 -07:00
Kubernetes Prow Robot
06eeec737a Merge pull request #101439 from prameshj/update-kubedns 
Update to using kubedns 1.17.3 image.
 2021-04-29 09:01:04 -07:00
Kubernetes Prow Robot
f631c0e520 Merge pull request #101271 from jeremyje/fixfb 
Fix fluent-bit configuration for GCE Windows.
 2021-04-27 19:06:49 -07:00
Ziyuan Chen
7a5508c0a7 bump metrics server version to v0.3.7 and make it multi-arch 
Bumping the metrics-server version to v0.3.7. In this version,
metrics-server started building multi-arch images. To properly support
non-amd64 nodes, we should bump the version and remove the -amd64 in the
image path. (https://github.com/kubernetes-sigs/metrics-server/pull/492)

```release-note
metrics-server now uses v0.3.7 and supports multi-arch Kubernetes nodes.
```
 2021-04-27 20:48:21 +00:00
Kubernetes Prow Robot
2f753ec4c8 Merge pull request #101473 from pacoxu/revert-101437-python3 
Revert "cluster: Use python3 everywhere"
 2021-04-26 12:54:37 -07:00
Paco Xu
7038338e0f Revert "cluster: Use python3 everywhere" 2021-04-26 11:21:44 +08:00
songxiao-wang87
4f254674fa Making a run test. 
Signed-off-by: songxiao-wang87 <wang.xiaosong23@zte.com.cn>
 2021-04-25 10:46:18 +08:00
Pavithra Ramesh
2c2dd6b072 Update to using kubedns 1.17.3 image. 2021-04-23 14:59:38 -07:00
David Porter
3f87f4f278 Use python3 everywhere 2021-04-23 14:33:58 -07:00
pacoxu
58114e293f update node local dns readme for ipv6 and 1.18 GA 2021-04-23 17:04:55 +08:00
Kubernetes Prow Robot
ae35c6f10c Merge pull request #101255 from basantsa1989/stack-type 
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
 2021-04-22 15:55:28 -07:00
Jeremy Edwards
e62301c87d Fix fluent-bit configuration for GCE Windows. 2021-04-22 20:04:54 +00:00
Kubernetes Prow Robot
6aa683e9cf Merge pull request #100639 from zshihang/proxy 
dnat to 169.254.169.252 for metadata server traffic
 2021-04-21 11:15:51 -07:00
Kubernetes Prow Robot
3cc043cfd2 Merge pull request #101262 from spencer-p/master 
Upgrade addon-manager baseimage to debian-base v1.0.1
 2021-04-20 20:36:22 -07:00
Kubernetes Prow Robot
41505f7109 Merge pull request #101176 from jkh52/master 
kube-master-installation: improve systemd cross-unit robustness.
 2021-04-20 00:42:45 -07:00
Spencer Peterson
530072a38f Addon-manager baseimage upgrade debian-base v1.0.1 
The previous base image, debian-base:v1.0.0, is affected by
CVE-2017-14062. This change upgrades to the most recent Debian stretch
image from the following command:

```
$ gcloud container images list-tags k8s.gcr.io/debian-base-amd64
DIGEST        TAGS    TIMESTAMP
7e9f2f88b813  v1.0.1  2020-02-18T13:18:50
d7be39e143d4  v2.0.0  2019-11-01T13:14:18
5f25d97ece90  v1.0.0  2019-03-25T10:59:09
dddca919baec  1.0.0   2019-03-25T09:43:09
```

This marks kube-addon-manager version 9.1.5.

Change-Id: I02321a781fb19dd33c0a19671b56c0b12d9b52fd
 2021-04-19 20:36:44 -07:00
Kubernetes Prow Robot
46b0ad1327 Merge pull request #101207 from vinayakankugoyal/sshproxy 
If kube-apiserver is running as non-root then set the permissions of …
 2021-04-19 17:24:33 -07:00
Joseph Anttila Hall
05bcc72dc2 kube-master-installation: reboot on failure. 
Also some minor reliability tweaks.
 2021-04-19 17:16:21 -07:00
Vinayak Goyal
94e34da471 If kube-apiserver is running as non-root then set the permissions of /etc/srv/sshproxy accordingly. 2021-04-19 13:16:06 -07:00
Basant Amarkhed
e15d811652 Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code) 2021-04-19 19:06:55 +00:00