github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,503 Commits 1 Branch 31 Tags
df1d9380fbdc024c67ec0d4e9941bb64d1440a15
Commit Graph

13762 Commits

Author SHA1 Message Date
Sean Sullivan
df1d9380fb Fixes (temporarily) curl piped to shell security vulnerability 2021-07-27 16:31:11 -07:00
Nikhita Raghunath
363d47c08c staging/publishing: fix rules for legacy-cloud-providers for 1.22 
The mount-utils repo is a dependency but got missed from the rules.

This commit fixes the currently broken publishing bot.
 2021-07-27 13:50:34 +05:30
Kubernetes Prow Robot
ee5df7cbcf Merge pull request #103875 from andrewrynhard/fix-audit-log-path 
Do not try to create an audit log file named "-"
 2021-07-26 02:32:33 -07:00
Walter Fender
6d1556df7b Update to using apiserver-network-proxy v1.22 
Includes a fix to prevent the agent writing to a closed channel.
 2021-07-24 16:02:01 -07:00
Kubernetes Prow Robot
47e1df8f4e Merge pull request #103743 from kolyshkin/runc-1.0.1 
vendor: bump runc to v1.0.1
 2021-07-23 15:16:33 -07:00
Andrew Rynhard
7728428f01 Do not try to create an audit log file named "-" 
That PR fixes --audit-log-path=- support.
It now logs to stdout as in 1.21.
 2021-07-23 14:26:28 +00:00
Nabarun Pal
0aa16fae5b staging/publishing: add release-1.22 rules 
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
 2021-07-22 19:37:42 +05:30
Kubernetes Prow Robot
7303b2ce4e Merge pull request #103747 from mattcary/noapi 
Revert #99378
 2021-07-20 07:19:31 -07:00
Kir Kolyshkin
eb5df869ba vendor: bump runc to 1.0.1 
The commands used were (roughly):

	hack/pin-dependency.sh github.com/opencontainers/runc v1.0.1
	hack/lint-dependencies.sh
	# Follow its recommendations.
	hack/pin-dependency.sh github.com/cilium/ebpf v0.6.2
	hack/pin-dependency.sh github.com/opencontainers/selinux v1.8.2
	hack/pin-dependency.sh github.com/sirupsen/logrus v1.8.1
	# Recheck.
	hack/lint-dependencies.sh
	GO111MODULE=on go mod edit -dropreplace github.com/willf/bitset
	hack/update-vendor.sh
	# Recheck.
	hack/lint-dependencies.sh
	hack/update-internal-modules.sh
	# Recheck.
	hack/lint-dependencies.sh

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2021-07-16 12:36:26 -07:00
Matthew Cary
aeb82243fc Revert "tests for statefulset PersistentVolumeClaimDeletePolicy api change" 
This reverts commit b259686b36.

Change-Id: I25cc8ae8a9aa77d0bc483147d3f8fb65616a2b2b
 2021-07-16 11:51:35 -07:00
wojtekt
faed88bb72 Add additional APF test for handling other panic types 2021-07-16 12:42:22 +02:00
wojtekt
ef435b85b4 Optimize APF support for watch initialization to fix the pod startup time regression. 2021-07-16 12:42:22 +02:00
David Ashpole
e5a1f86e0a add apiserver tracing integration test, and fix endpoint validation 2021-07-15 20:56:57 -07:00
Matthew Cary
10a3cc815b Revert "statefulset PersistentVolumeClaimDeletePolicy api change" 
This reverts commit e4e735cd1c.

Change-Id: I3e17aa585fd9ae4f9e74b97326ae6b9fadd2a94c
 2021-07-15 17:14:19 -07:00
Monis Khan
a6ac42082b client-go exec: fix metrics related to plugin not found 
These were missed because our tests did not pass in the correct test
data input (the command to execute).

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-07-14 14:02:23 -04:00
Kubernetes Prow Robot
f0b7ad3ee0 Merge pull request #103168 from raisaat/beta-2238 
Code changes for Probe-level Termination Grace Period Beta
 2021-07-13 15:42:19 -07:00
Kubernetes Prow Robot
ab609a418e Merge pull request #103669 from cpanato/go1.16 
[go1.16] Update to go1.16.6
 2021-07-13 12:50:13 -07:00
Kubernetes Prow Robot
1b60d456c4 Merge pull request #103284 from kebe7jun/fix/kubectl-logs-error-for-multiple-pods 
Fix the code is leaking the defaulting between unrelated pod instances
 2021-07-13 12:50:01 -07:00
Elana Hashman
aaa7de0ac6 Update API description for probe.terminationGracePeriodSeconds 2021-07-13 14:28:06 -05:00
Kubernetes Prow Robot
e375563732 Merge pull request #103245 from wzshiming/fix/prober-termination 
Add validation for Prober TerminationGracePeriodSeconds
 2021-07-13 09:30:30 -07:00
Carlos Panato
83f8d1ad72 [go1.16] Update to go1.16.6 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2021-07-13 18:05:16 +02:00
Kubernetes Prow Robot
584658a17d Merge pull request #103601 from dashpole/webhook_tracing 
Add tracing to admission webhook requests
 2021-07-12 10:22:47 -07:00
Paco Xu
1280a365e4 Revert "use PermitWithoutStream=true for etcd: send pings even without active stream" 2021-07-12 11:47:55 +08:00
Kubernetes Prow Robot
e799d7b191 Merge pull request #99023 from verb/1.21-securitycontext 
Allow setting securityContext in ephemeral containers
 2021-07-09 20:50:46 -07:00
Kubernetes Prow Robot
b2bf3d7c13 Merge pull request #103452 from njuptlzf/ps-ValidatePodController-ut 
[test-only][PodSecurity] Add test coverage for pod-template-containing objects
 2021-07-09 19:40:45 -07:00
Kubernetes Prow Robot
a26c39e92a Merge pull request #103465 from tallclair/podsecurity-webhook 
Podsecurity webhook
 2021-07-09 18:11:17 -07:00
Tim Allclair
32783f7568 PodSecurity: Initial webhook implementation 2021-07-09 17:04:29 -07:00
Kubernetes Prow Robot
de0670ca0d Merge pull request #103553 from ehashman/rename-node-ff 
Rename NodeSwapEnabled flag to NodeSwap
 2021-07-09 16:49:30 -07:00
Kubernetes Prow Robot
303fe39e1c Merge pull request #102177 from atiratree/quotaunitscli 
kubectl: show consistent unit format in quota describe
 2021-07-09 16:49:18 -07:00
Kubernetes Prow Robot
a0d77e5763 Merge pull request #103617 from liggitt/sparse-test 
[test-only]PodSecurity: make integration tests run sparsely
 2021-07-09 14:38:54 -07:00
Kubernetes Prow Robot
60756214d8 Merge pull request #103533 from jiahuif/feature/leader-migration/to-beta 
KEP-2436 Leader Migration: to beta
 2021-07-09 12:15:00 -07:00
Kubernetes Prow Robot
87ee0c06fb Merge pull request #103527 from tkashem/apf-fix-virtual-time 
apf: include seats from queued requests when advancing virtual clock
 2021-07-09 12:14:53 -07:00
Elana Hashman
642eff0c69 Rename NodeSwapEnabled flag to NodeSwap 2021-07-09 11:39:52 -07:00
Jordan Liggitt
c2aaf0667f PodSecurity: make integration tests run sparsely 2021-07-09 14:19:35 -04:00
Kubernetes Prow Robot
3ccfe94563 Merge pull request #100101 from deads2k/mutated-options 
prevent mutation of deletion options during delete collection
 2021-07-09 07:36:53 -07:00
David Ashpole
9dd59017c4 add tracing to webhook requests 2021-07-09 06:30:05 -07:00
Kubernetes Prow Robot
edbb0b9549 Merge pull request #103590 from rphillips/revert-102998-apf-width-list 
Revert "apiserver: add callback to get notified of object count"
 2021-07-09 06:01:33 -07:00
Kubernetes Prow Robot
f6df5a6818 Merge pull request #103589 from SergeyKanzhelev/updateHelpText 
update the help text of KubeletConfig following the DynamicKubletConf…
 2021-07-09 06:01:25 -07:00
Kubernetes Prow Robot
ace5482c9f Merge pull request #103457 from codearky/fix-yaml-terminator-wcomment 
Add YAML separator validation and avoid silent ignoration
 2021-07-09 06:01:06 -07:00
Abu Kashem
a570008cbd apf: fix virtual clock 2021-07-09 08:22:12 -04:00
Indeed
b14c10ae30 create LeaderMigrationConfiguration v1beta1 2021-07-08 21:20:19 -07:00
Indeed
40b2155ddb promote ControllerManagerLeaderMigration to beta. 2021-07-08 21:20:19 -07:00
Kebe
412962204f Fix the code is leaking the defaulting between unrelated pod instances 2021-07-09 09:57:05 +08:00
njuptlzf
2b88dc381e [PodSecurity] Add test coverage for pod-template-containing objects 2021-07-09 09:13:38 +08:00
Francesco Romani
6dccad45b4 smtalign: add auto generated code 
Files generate after running `make generated_files`.

Co-authored-by: Swati Sehgal <swsehgal@redhat.com>
Signed-off-by: Francesco Romani <fromani@redhat.com>
 2021-07-08 23:14:59 +02:00
Swati Sehgal
cc76a756e4 smtalign: add cpu-manager-policy-options flag in Kubelet 
In this patch we enhance the kubelet configuration to support
cpuManagerPolicyOptions.

In order to introduce SMT-awareness in CPU Manager, we introduce a
new flag in Kubelet to allow the user to specify an additional flag
called `cpumanager-policy-options` to allow the user to modify the
behaviour of static policy to strictly guarantee allocation of whole
core.

Co-authored-by: Francesco Romani <fromani@redhat.com>
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2021-07-08 23:14:59 +02:00
Kubernetes Prow Robot
97d6e4a66a Merge pull request #103574 from liggitt/restore-long-printing 
Restore ability to print long strings
 2021-07-08 14:02:18 -07:00
Kubernetes Prow Robot
72283f1bf6 Merge pull request #103558 from liggitt/podsecurity-check-cleanup 
PodSecurity message/check/fixture cleanups
 2021-07-08 14:02:10 -07:00
Kubernetes Prow Robot
103212febc Merge pull request #103470 from nilo19/bug/cherry-pick-679 
fix: return empty VMAS name if using standalone VM
 2021-07-08 14:02:01 -07:00
Kubernetes Prow Robot
694d6cd2b9 Merge pull request #103216 from dashpole/etcd_client_tracing 
Add distributed tracing to the etcd client
 2021-07-08 14:01:52 -07:00