github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
102,870 Commits 1 Branch 31 Tags
dfaeacb51f9e68f7730d9e400c7f19ddb08c0087
Commit Graph

10337 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
3a07d96d25 Merge pull request #99412 from enj/enj/i/ttl_backdate 
csr: correctly handle backdating of short lived certs
 2021-06-23 15:00:10 -07:00
Monis Khan
7e891e5d6c csr: correctly handle backdating of short lived certs 
This change updates the backdating logic to only be applied to the
NotBefore date and not the NotAfter date when the certificate is
short lived. Thus when such a certificate is issued, it will not be
immediately expired.  Long lived certificates continue to have the
same lifetime as before.

Consolidated all certificate lifetime logic into the
PermissiveSigningPolicy.policy method.

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-06-23 15:36:11 -04:00
Lubomir I. Ivanov
70a524659a kubeadm: add {Init|Join}Configuration.Patches.Directory to v1beta3 
Add {Init|Join}Configuration.Patches, which is a structure that
contains patch related options. Currently it only has the "Directory"
field which is the same option as the existing --experimental-patches
flag.

The flags --[experimental-]patches value override this value
if both a flag and config is passed during "init" or "join".
 2021-06-23 22:24:10 +03:00
Lubomir I. Ivanov
a4402122b4 kubeadm: add the --patches flag and deprecate --experimental-patches 
The feature of "patches" in kubeadm has been in Alpha for a few
releases. It has not received major bug reports from users.
Deprecate the --experimental-patches flag and add --patches.

Both flags are allowed to be mixed with --config.
 2021-06-23 22:22:41 +03:00
Mike Spreitzer
0762f492c5 Add config checking for inflight limits 
When API Priority and Fairness is enabled, the inflight limits must
add up to something positive.
This rejects the configuration that prompted
https://github.com/kubernetes/kubernetes/issues/102885

Update help for max inflight flags
 2021-06-23 14:06:50 -04:00
Sascha Grunert
8b7003aff4 Add SeccompDefault feature 
This adds the gate `SeccompDefault` as new alpha feature. Seccomp path
and field fallbacks are now passed to the helper functions, whereas unit
tests covering those code paths have been added as well.

Beside enabling the feature gate, the feature has to be enabled by the
`SeccompDefault` kubelet configuration or its corresponding
`--seccomp-default` CLI flag.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

Apply suggestions from code review

Co-authored-by: Paulo Gomes <pjbgf@linux.com>
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-06-23 10:22:57 +02:00
Lubomir I. Ivanov
3b36e6bcea kubeadm: fix image pull policy integration 
If the user has not specified a pull policy we must assume a default of
v1.PullIfNotPresent.

Add some extra verbose output to help users monitor what policy is
used and what images are skipped / pulled.

Use "fallthrough" and case handle "v1.PullAlways".

Update unit test.
 2021-06-23 00:52:35 +03:00
Kubernetes Prow Robot
c864f2357d Merge pull request #102901 from wangyysde/add-support-imagePullPolicy-fix524 
kubeadm: add support of imagePullPolicy to kubeadm
 2021-06-22 07:43:59 -07:00
krak7602
ec93b3b0be Stop using github.com/pkg/errors 2021-06-22 10:43:30 +05:30
Kubernetes Prow Robot
e78e692f33 Merge pull request #101449 from CaoDonghui123/fix5 
kubeadm: allow passing the flag --log-file if --config is passed
 2021-06-21 20:43:57 -07:00
caodonghui
25f479c2ac fix'--log-file only works if --logtostderr=false' 2021-06-22 09:32:26 +08:00
Kubernetes Prow Robot
cfa0130b9f Merge pull request #102466 from pacoxu/dns-1.8.4 
kubeadm: update coredns to 1.8.4
 2021-06-21 18:14:10 -07:00
wangyysde
459fe7d08a add support of imagePullPolicy to kubeadm 
Signed-off-by: wangyysde <net_use@bzhy.com>
 2021-06-22 07:13:25 +08:00
navist2020
1f9d448283 Use errors.Errorf instead of errors.Wrapf when the err is nil 2021-06-21 16:17:32 +08:00
Kubernetes Prow Robot
e55ff835b4 Merge pull request #102922 from SataQiu/update-link 
cmd/kubelet: replace KEP link with the documentation one as it is available now
 2021-06-19 13:10:50 -07:00
Kubernetes Prow Robot
ab7d8b5b5b Merge pull request #102871 from rainrambler/patch-1 
kubeadm: use defer to unlock mutex in certs.go
 2021-06-18 09:52:30 -07:00
Kubernetes Prow Robot
f1d9db4381 Merge pull request #102940 from gy95/sche 
when new manager failed should return err
 2021-06-17 14:08:17 -07:00
Kubernetes Prow Robot
b41c8a2d49 Merge pull request #102862 from vinayakankugoyal/roochless2 
Update etcd in kubeadm to run as non-root.
 2021-06-17 13:00:05 -07:00
navist2020
1a4b0ee09b remove excess error handling 2021-06-17 17:34:57 +08:00
gy95
c789898f79 when new manager failed should return err 2021-06-17 16:02:31 +08:00
Vinayak Goyal
5a0756c5f4 Update etcd in kubeadm to run as non-root. 2021-06-16 17:30:46 -07:00
Kubernetes Prow Robot
c81f2773dc Merge pull request #102920 from dims/move-to-github.com/coreos/go-systemd/v22 
Switch to github.com/coreos/go-systemd/v22 and drop older package
 2021-06-16 12:48:41 -07:00
Kubernetes Prow Robot
851b7276a5 Merge pull request #102796 from ahg-g/ahg-cc 
Move scheduler plugin set and configuration defaulting to CC
 2021-06-16 11:44:00 -07:00
Kubernetes Prow Robot
3c1db414da Merge pull request #102546 from lunhuijie/refactorCheckTest 
refactor cmd/kubeadm/app/preflight/checks_test.go
 2021-06-16 09:44:12 -07:00
SataQiu
a47afdded0 cmd/kubelet: replace KEP link with the documentation one as it is available now 2021-06-16 23:38:58 +08:00
Davanum Srinivas
7fcdbbef06 Switch to github.com/coreos/go-systemd/v22 and drop older package 
- We use the new v22 module released on May 10
- We drop the unmaintained `github.com/coreos/pkg`

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-06-16 11:14:16 -04:00
Abdullah Gharaibeh
265ef1741f Move scheduler plugin set and configuration defaulting to component config 2021-06-16 10:15:29 -04:00
Kubernetes Prow Robot
71d6a48d3e Merge pull request #102431 from serathius/loggingconfig 
Use LoggingConfig within LogOptions
 2021-06-16 02:21:59 -07:00
Kubernetes Prow Robot
7b9c335826 Merge pull request #98869 from liuxu623/master 
fix kubelet flag description: --event-qps and --event-burst
 2021-06-15 22:55:59 -07:00
刁浩 10284789
84112d3690 refactor cmd/kubeadm/app/preflight/checks_test.go() 
Signed-off-by: 刁浩 10284789 <diao.hao@zte.com.cn>
 2021-06-16 01:46:27 +00:00
Kubernetes Prow Robot
3a47ddccdf Merge pull request #100488 from liggitt/protobuf 
update etcd, grpc, protobuf dependencies
 2021-06-15 14:49:42 -07:00
Kubernetes Prow Robot
d186b43639 Merge pull request #102828 from MikeSpreitzer/fix-kubeadm-api-dox 
Fix some typos and omissions in kubeadm APIs
 2021-06-15 11:31:43 -07:00
Marek Siarkowicz
f9343f837d Use LoggingConfig within LogOptions 
Co-authored-by: mengjiao.liu <mengjiao.liu@daocloud.io>
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Co-authored-by: Heisenberg <yuzhiquanlong@gmail.com>
 2021-06-15 17:14:43 +02:00
Jordan Liggitt
2979c3325e Switch to go.etcd.io/etcd/client/v3 2021-06-15 09:53:06 -04:00
rainrambler
5ea3dd531c Update certs.go 
Use defer feature for unlock
 2021-06-15 15:34:26 +08:00
Antonio Ojea
74feb07594 kubeadm: CoreDNS permissions for endpointslices 
Signed-off-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>
Co-authored-by: pacoxu <paco.xu@daocloud.io>
 2021-06-15 13:03:48 +08:00
pacoxu
188193e1c0 kubeadm: upgrade coredns 1.8.4 and corefile-migration to v1.0.12 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-06-15 13:03:42 +08:00
Kubernetes Prow Robot
6a4c33aa59 Merge pull request #102753 from mengjiao-liu/json-register-apiserver 
JSON log format registration for kube-apiserver
 2021-06-14 22:00:00 -07:00
Kubernetes Prow Robot
6fb007d348 Merge pull request #102756 from mengjiao-liu/json-register-controller-manager 
JSON log format registration for kube-controller-manager
 2021-06-14 19:00:00 -07:00
Mike Spreitzer
a3e464490a Fix some typos and omissions in kubeadm APIs 2021-06-14 20:38:43 -04:00
Kubernetes Prow Robot
8a6a26714c Merge pull request #102759 from vinayakankugoyal/roochless 
Update kubeadm control-plane to run as non-root.
 2021-06-14 15:52:01 -07:00
Vinayak Goyal
59b4b124df Update kubeadm control-plane to run as non-root. 2021-06-14 12:04:50 -07:00
Yuan-Junliang
2e06066bab Migrate kube-proxy to use v1 Event API 2021-06-13 18:57:52 +08:00
Kubernetes Prow Robot
21ee533508 Merge pull request #102805 from ahg-g/ahg-deprecate 
Remove deprecated scheduler CLI flags
 2021-06-11 08:45:00 -07:00
Abdullah Gharaibeh
c13c3ebc79 Remove deprecated scheduler CLI flags hard-pod-affinity-symmetric-weight and scheduler-name 2021-06-11 10:01:42 -04:00
Kubernetes Prow Robot
4aae71695a Merge pull request #102366 from cndoit18/fix-time-format 
fix(timezone): Change the time zone in the api data to UTC
 2021-06-11 06:54:59 -07:00
Kubernetes Prow Robot
e52b7be7d7 Merge pull request #101600 from KofClubs/fix-cri-socket-kubeadm 
kubeadm: disallow the mixture of --cri-socket and --config
 2021-06-11 00:04:58 -07:00
Kubernetes Prow Robot
faa36554c5 Merge pull request #102770 from pacoxu/kubeadm-example 
kubeadm: use a suggested example in v1beta2/3 docs
 2021-06-10 08:23:47 -07:00
Kubernetes Prow Robot
f008ba0fed Merge pull request #102062 from serathius/etcd-server 
Update Etcd server image to 3.5.0-rc.0-0
 2021-06-10 08:23:27 -07:00
Kubernetes Prow Robot
8955463c17 Merge pull request #102745 from ahg-g/ahg-provider 
Remove SchedulerAlgorithmSource from scheduler's internal CC API
 2021-06-10 07:17:39 -07:00