Commit Graph

8923 Commits

Author SHA1 Message Date
chaowang
9ba0d47465
Remove deprecated Kubelet security controls
Change-Id: I9f770e6780b60e881092690f6f177d726f474fe3
2019-05-16 13:33:52 -04:00
Kubernetes Prow Robot
f8d2b6b982
Merge pull request #77918 from mborsz/coredns
Make dns memory limit configurable
2019-05-16 08:49:08 -07:00
Jake Sanders
db6eff7378
remove zmerlynn@ from cluster/gce/OWNERS
Your watch has ended.
2019-05-15 18:47:28 -07:00
yankaiz
14015d9ce1 Add 198.51.100.0/24 to non-masq ranges.
Groupped the IP ranges by RFC and type.

Change reference for 198.18.0.0/15 from RFC 2544 to RFC 6815.
2019-05-15 16:23:41 -07:00
Yu-Ju Hong
abed7cc0a9 GCE/Windows: add instructions about stackdriver logging in README
Setting LOGGING_STACKDRIVER_RESOURCE_TYPES ensures that the both Linux
and Windows nodes send logs to the same resources with the same tags.
2019-05-15 11:59:37 -07:00
Yuwen Ma
454460f875 Bump metrics-server to v0.3.3 2019-05-15 11:44:45 -07:00
Peter Hornyack
5d669f2946 Use CNI plugins v0.8.0 release. 2019-05-15 10:59:46 -07:00
Kubernetes Prow Robot
4d3d153210
Merge pull request #77904 from mborsz/revert-76396-reapply-75624
Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers."
2019-05-15 07:06:41 -07:00
Maciej Borsz
59af63c687 Make coredns memory limit configurable 2019-05-15 13:35:28 +02:00
Kubernetes Prow Robot
47cef03dab
Merge pull request #77748 from yuwenma/etcd-release
Update etcd* version to use latest released images.
2019-05-15 00:04:35 -07:00
Maciej Borsz
9da7db76b7
Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers." 2019-05-15 08:31:19 +02:00
Pavithra Ramesh
e1748407a5 Doc changes for nodelocaldns graduating to beta 2019-05-14 14:01:33 -07:00
Kubernetes Prow Robot
d6c8edd391
Merge pull request #77690 from MrHohn/CPVA-0.7.0
Bump cluster-proportional-vertical-autoscaler to 0.7.1
2019-05-14 07:17:21 -07:00
Kubernetes Prow Robot
2c67fb397d
Merge pull request #77358 from yuwenma/node-termination-handler
Updated gce node-termination-handler yaml.
2019-05-13 18:25:09 -07:00
Yuwen Ma
1f0f050fde Update etcd* version to use latest released images. 2019-05-13 17:28:40 -07:00
Zihong Zheng
66086c32cf Bump cluster-proportional-vertical-autoscaler to 0.7.1 2019-05-13 13:22:27 -07:00
Marian Lobur
60e5717f4f Bump image of event-exporter.
Image has a new base image that have some security issue fixes.
2019-05-13 16:27:25 +02:00
Kubernetes Prow Robot
222ced7d20
Merge pull request #77642 from mm4tt/chunk_size
Revert #77552 now the actual fix #77580 got merged
2019-05-13 05:02:33 -07:00
Kubernetes Prow Robot
5d9d5bca79
Merge pull request #77765 from coffeepac/es-6.7.2
upgrade elasticsearch for vuln handling
2019-05-11 17:20:10 -07:00
Kubernetes Prow Robot
b6c53beed5
Merge pull request #72667 from jeefy/update-dashboard-owners
Update OWNERS so it isn't single threaded.
2019-05-11 00:46:12 -07:00
Kubernetes Prow Robot
1c18c3263a
Merge pull request #77386 from SataQiu/fix-shellcheck-20190503
Fix shellcheck failures of cluster/gce/upgrade-aliases.sh
2019-05-10 21:30:24 -07:00
Kubernetes Prow Robot
5669014f52
Merge pull request #76854 from ialidzhikov/update-images
Update gem versions
2019-05-10 19:28:24 -07:00
Patrick Christopher
65fcbf4afb upgrade elasticsearch for vuln handling 2019-05-10 16:57:17 -07:00
Kubernetes Prow Robot
91069c0260
Merge pull request #77689 from MrHohn/CPA-1.6.0
Bump cluster-proportional-autoscaler to 1.6.0
2019-05-10 16:32:49 -07:00
Kubernetes Prow Robot
5184b866d6
Merge pull request #77424 from MrHohn/gce-manifest-owners
Add OWNERS file for gce/manifests
2019-05-09 20:13:57 -07:00
Kubernetes Prow Robot
a3f8e95f68
Merge pull request #77607 from dekkagaijin/mip
when disabled, don't create the API server's insecure port mapping
2019-05-09 17:52:10 -07:00
Jake Sanders
2576713a40 when disabled, don't create the API server's insecure port mapping 2019-05-09 11:50:59 -07:00
Zihong Zheng
beba9921aa Bump cluster-proportional-autoscaler to 1.6.0 2019-05-09 11:25:12 -07:00
ialidzhikov
7082ed4330 Add readiness probe for Kibana
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-05-09 10:23:02 +03:00
Matt Matejczyk
b4a8beb037 Revert #77552 now the #77580 has been merged
The https://github.com/kubernetes/kubernetes/pull/77552 was a temporary workaround that is no longer needed now as https://github.com/kubernetes/kubernetes/pull/77580 got in.
2019-05-09 09:03:34 +02:00
Kubernetes Prow Robot
bec5345cc6
Merge pull request #77569 from yuwenma/patch-5
Bump metrics-server version to v0.3.3
2019-05-08 20:13:13 -07:00
Zihong Zheng
e6287c61e6 Add OWNERS file for gce/manifests 2019-05-08 17:39:23 -07:00
Kubernetes Prow Robot
5bd88c85bf
Merge pull request #77568 from yujuhong/catch-exception
GCE/Windows: ignore stopping errors for stackdriver
2019-05-08 17:15:38 -07:00
Kubernetes Prow Robot
df117c7625
Merge pull request #73637 from ramnar/branch_bug_fix
Removes deprecated label kubernetes.io/cluster-service in yaml files of kubernetes add-ons. Bug fix #72757
2019-05-08 14:31:51 -07:00
Kubernetes Prow Robot
5277e4a11a
Merge pull request #77552 from mm4tt/chunk_size
Add --chunk-size=0 to disable pagination when listing nodes.
2019-05-07 23:38:44 -07:00
Kubernetes Prow Robot
0befec7fb6
Merge pull request #77447 from dekkagaijin/mip
disable the apiserver's insecure port by default
2019-05-07 22:14:32 -07:00
Kubernetes Prow Robot
b34d7ac0ce
Merge pull request #77458 from grayluck/agent-v2.3.0
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
2019-05-07 17:52:58 -07:00
Yuwen Ma
7f629b6921
Bump metrics-server version to v0.3.3 2019-05-07 17:44:23 -07:00
Yu-Ju Hong
eadacaf058 GCE/Windows: ignore stopping errors for stackdriver 2019-05-07 17:17:34 -07:00
Kubernetes Prow Robot
dca61deaf9
Merge pull request #77029 from StevenACoffman/patch-1
Update k8s.gcr.io/k8s-dns-node-cache image version
2019-05-07 14:31:02 -07:00
Matt Matejczyk
cb223dab04 Add --chunk-size=0 to disable pagination when listing nodes.
Otherwise the default of 500 is used which started breaking large
cluster tests, e.g.
https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/ci-kubernetes-e2e-gce-scale-performance/1125672232488538115
2019-05-07 17:34:31 +02:00
yankaiz
1059a71973 Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
Added the non-masq ranges to configure-helper.sh so that GCE clusters
will have the non-masq IP ranges aligned with GKE clusters.
2019-05-06 22:32:34 -07:00
Kubernetes Prow Robot
e1d40da0df
Merge pull request #76396 from yuwenma/reapply-75624
[Re-Apply][Distroless] Convert the GCE manifests for master containers.
2019-05-06 21:31:39 -07:00
Jake Sanders
e4d521e825 disable the apiserver insecure port by default in configure-helper 2019-05-06 19:26:57 -07:00
Jake Sanders
ff4c372eaa ensure that kubectl works when the master insecure port is disabled 2019-05-06 19:25:41 -07:00
Kubernetes Prow Robot
6027a38e78
Merge pull request #77282 from MrHohn/addon-manager-9.0.1
Bump addon-manager to v9.0.1
2019-05-06 14:01:52 -07:00
Yuwen Ma
53bace16df Updated gce node-termination-handler yaml. 2019-05-06 11:29:47 -07:00
Yuwen Ma
b8a8bdb127 [Distroless] Convert the GCE manifests for master containers.
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-05-06 08:04:06 -07:00
Kubernetes Prow Robot
5f8d290346
Merge pull request #75675 from mwwolters/addon-manager-kubeconfig
Added function to create kubeconfig for addon-manager
2019-05-03 22:17:51 -07:00
Kubernetes Prow Robot
c3ebf67c63
Merge pull request #77414 from yujuhong/fix-sd-logging
GCE/Windows: send container logs to the proper resource
2019-05-03 19:50:15 -07:00
Kubernetes Prow Robot
8b0c36d620
Merge pull request #77328 from varunmar/ip-masq-cve-fix
Bump the version of the ip-masq-agent addon to pick up CVE fixes
2019-05-03 18:26:28 -07:00
Mark Wolters
1456979e93 Added function to create kubeconfig for addon-manager 2019-05-03 15:12:16 -07:00
Kubernetes Prow Robot
dbad8f360c
Merge pull request #77357 from dekkagaijin/md-proxy-bump
Bump metadata-proxy image to v0.1.12
2019-05-03 15:11:52 -07:00
Yu-Ju Hong
9f65407833 GCE/Windows: send container logs to the proper resource
This PR fixes a bug where all container logs are sent to the "k8s_node"
resource by adding a "match" directive that applies only to container
logs.
2019-05-03 11:32:19 -07:00
Kubernetes Prow Robot
eb41c9c5fc
Merge pull request #77369 from immutableT/remove-enc-from-kube-up
Remove the option of encrypting secrets in etcd via a locally stored key.
2019-05-03 02:56:29 -07:00
SataQiu
2ba0231670 fix shellcheck failures of cluster/gce/upgrade-aliases.sh 2019-05-03 17:01:15 +08:00
Kubernetes Prow Robot
6a23a6278f
Merge pull request #77378 from yujuhong/kill-sd
GCE/Windows: force kill the stackdriver processes when necessary
2019-05-02 20:20:17 -07:00
Yu-Ju Hong
bee570a2f0 GCE/Windows: force kill the stackdriver processes when necessary
StackdriverLogging service sometimes cannot be stopped properly. This
work around the bug by force killing the processes.
2019-05-02 18:52:31 -07:00
Kubernetes Prow Robot
0b10d1b830
Merge pull request #77140 from dekkagaijin/glbc
use static token to authenticate glbc
2019-05-02 16:22:30 -07:00
Kubernetes Prow Robot
83f769c2a3
Merge pull request #77139 from cmluciano/cml/ingressnetv1beta1default
ingress: use networking api group for default storage of ingress
2019-05-02 16:22:18 -07:00
immutablet
1ae9cb2f88 Remove encryption via locally stored key. 2019-05-02 15:09:02 -07:00
Jake Sanders
0b6eb2bf89
Bump metadata-proxy image to v0.1.12
Rebases the image on `gcr.io/distroless/static:latest` per kubernetes/enhancements#900

https://github.com/GoogleCloudPlatform/k8s-metadata-proxy/releases/tag/v0.1.12
2019-05-02 11:57:52 -07:00
Kubernetes Prow Robot
d2ce69d9ad
Merge pull request #76762 from serathius/fluentd-gcp-scaler-0-5-2
Pick up security patches for fluentd-gcp-scaler by upgrading to version 0.5.2
2019-05-02 07:00:26 -07:00
Jake Sanders
8bd0b45eae use static token to authenticate glbc 2019-05-01 22:24:48 -07:00
Kubernetes Prow Robot
206eb91c15
Merge pull request #77035 from chardch/fix-device-plugin
Fix a bug in the gpu device plugin
2019-05-01 22:10:17 -07:00
Kubernetes Prow Robot
ef99b770f5
Merge pull request #76525 from yuwenma/patch-4
Rebase etcd-empty-dir-cleanup to debian-base
2019-05-01 18:42:17 -07:00
Varun Marupadi
d4443fef81 Bump the version of the ip-masq-agent addon to pick up CVE fixes
This is related to the same CVE fixes in PR #75845

The CVEs are in the dependencies of ip-masq-agent -
debian-base bump at: https://github.com/kubernetes-incubator/ip-masq-agent/pull/31
debian-iptables-amd64 bump at: https://github.com/kubernetes-incubator/ip-masq-agent/pull/30
2019-05-01 18:26:27 -07:00
Christopher M. Luciano
4bac85c162
ingress: use networking api group for default storage of ingress
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>

The change to registrytest was found by liggitt to mitigate a NPE error.
This is necessary since ingress is a cohabitating resource that is not
stored in the default version for the networking resource.

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
2019-05-01 15:14:11 -04:00
Steve Coffman
7f30be79b3 Update k8s-dns-node-cache image version
This revised image resolves kubernetes dns#292 by updating the image from `k8s-dns-node-cache:1.15.2` to `k8s-dns-node-cache:1.15.2`
2019-05-01 13:38:42 -04:00
ialidzhikov
becbed87f1 Update gem versions
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-05-01 20:13:31 +03:00
Zihong Zheng
037d4b3a07 Bump addon-manager to v9.0.1
- Rebase image on debian-base:v1.0.0.
2019-04-30 15:19:08 -07:00
Krzysztof Siedlecki
8dc0be6b9e creating instance groups in parallel 2019-04-30 18:42:09 +02:00
Kubernetes Prow Robot
31d36d865c
Merge pull request #77172 from ialidzhikov/remove-cluster-service-label
Clean up cluster-service label from fluentd-elastic
2019-04-30 09:21:41 -07:00
Kubernetes Prow Robot
62020ebe38
Merge pull request #77224 from qingling128/master
Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8 to fix segmentation fault bug.
2019-04-29 21:33:35 -07:00
Kubernetes Prow Robot
4ebe11a6cb
Merge pull request #76110 from DirectXMan12/infra/prune-owners
Prune directxman12 from metrics/autoscaling OWNERS
2019-04-29 14:35:36 -07:00
Ling Huang
d3fb7115ab Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8. 2019-04-29 15:07:10 -04:00
Kubernetes Prow Robot
855c291cb8
Merge pull request #76858 from SataQiu/fix-cluster-clientbin-20190420
Fix shellcheck failures of cluster/clientbin.sh
2019-04-29 07:46:22 -07:00
Kubernetes Prow Robot
9b437f9520
Merge pull request #76909 from Huang-Wei/fix-iks-kubemark
kubemark: fix and enhance kubemark scripts for IKS
2019-04-29 06:30:23 -07:00
ialidzhikov
5fc1bcba3f Clean up cluster-service label from fluentd-elastic
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-04-27 22:52:01 +03:00
Wojciech Tyczynski
0d77f62c02
Revert "override ETCD_SERVER with https instead http when mTLS is enabled" 2019-04-27 06:50:20 +02:00
Wei Huang
fbec01dc71
kubemark: fix and enhance kubemark scripts for IKS
- fix shell script issues
  - `bx` is deprecated; rename to `ibmcloud`
  - remove unnecessay variable replacement in hollow-node_template.yaml
  - add replacement logic for HOLLOW_KUBELET_TEST_ARGS and HOLLOW_PROXY_TEST_ARGS
  - don't hardcode KUBEMARK_IMAGE_REGISTRY to brandondr96
- make cluster number and spec configurable
  - make number and spec of workers configurable
  - separate NUM_NODES and KUBEMARK_NUM_NODES
2019-04-26 10:15:29 -07:00
SataQiu
aacab2ee75 fix shellcheck failures of cluster/clientbin.sh 2019-04-26 18:43:33 +08:00
Krzysztof Siedlecki
862662f49e removing quotation marks 2019-04-26 00:25:58 +02:00
Kubernetes Prow Robot
f043e49a93
Merge pull request #77050 from joelsmith/master
Fix link for resource metrics pipeline
2019-04-25 04:35:21 -07:00
Joel Smith
f55ebc6129 Fix link for resource metrics pipeline
See https://github.com/kubernetes/website/pull/12934
2019-04-24 22:38:48 -06:00
Richard Chen
2c681334c2 Fix a bug in the gpu device plugin where not all devices were registered.
Refer to https://github.com/GoogleCloudPlatform/container-engine-accelerators/pull/110
2019-04-24 18:02:00 -07:00
Kubernetes Prow Robot
2c2e7a01bb
Merge pull request #76655 from SataQiu/fix-shell-cluster-20190417
Fix shellcheck failures of cluster/gce/gci/shutdown.sh
2019-04-23 23:50:04 -07:00
Kubernetes Prow Robot
c669b216dd
Merge pull request #76958 from yujuhong/docker-logs
GCE/Windows: Configure Docker to rotate container logs
2019-04-23 20:28:12 -07:00
Kubernetes Prow Robot
06bc7e3e00
Merge pull request #76792 from dekkagaijin/insecure-port
add option to disable the apiserver's insecure port via env var
2019-04-23 14:02:35 -07:00
Kubernetes Prow Robot
0df8b10557
Merge pull request #76786 from dekkagaijin/master
add additional approvers from GKE
2019-04-23 14:02:23 -07:00
Yu-Ju Hong
6e12de0744 GCE/Windows: Configure Docker to rotate container logs 2019-04-23 11:53:16 -07:00
Kubernetes Prow Robot
888b81b638
Merge pull request #76238 from Dieken/30s-ttl-for-coredns
change default 5s ttl to 30s for coredns to be same with kube-dns/dnsmasq
2019-04-23 06:20:09 -07:00
Kubernetes Prow Robot
a961c13db5
Merge pull request #76640 from george-angel/master
update k8s.gcr.io/k8s-dns-node-cache image version
2019-04-22 14:38:02 -07:00
Kubernetes Prow Robot
aa11d0edef
Merge pull request #76850 from yujuhong/sd-agent
GCE/Windows: enable stackdriver logging agent
2019-04-22 13:18:03 -07:00
SataQiu
903c5a53b3 fix shellcheck failures of cluster/gce/gci/shutdown.sh 2019-04-22 11:46:45 +08:00
aaa
c4898d6f56 fix shellcheck failures list-resources.sh
update pull request

update pull request

update pull request
2019-04-21 18:17:44 -04:00
Kubernetes Prow Robot
31903e644b
Merge pull request #76152 from SataQiu/fix-shell-cluster-20190404
Fix some shellcheck failures of cluster/*.sh
2019-04-19 18:59:41 -07:00
Yu-Ju Hong
4cd2625719 GCE/Windows: enable stackdriver logging agent
This change bumps the stackdriver logging agent version to v1-9,
re-enable it, and change the script/configuration to:
  * Create /var/log in the startup script, since the fluentd
    configuration expects the directory to exists
  * Add support for collecting kubelet/kube-proxy logs
2019-04-19 15:41:48 -07:00
Yu-Ju Hong
05074e9dde GCE/Windows: add cluster-location to instance metadata
This will be used by stackdriver to annotate the logs.
2019-04-19 15:41:48 -07:00
Jake Sanders
d4d5afb9cc add additional approvers from GKE 2019-04-19 14:38:31 -07:00
aaa
ad5bccc510 fix shellcheck in test-smoke.sh and test-network.sh
update pull request

update pull request

update pull request

update pull request
2019-04-19 16:15:10 -04:00
Jake Sanders
42fcd5eb63 remove erroneous kube-apiserver.manifest sed line 2019-04-19 17:40:28 +00:00
Kubernetes Prow Robot
e4f9d8fe3f
Merge pull request #76331 from xichengliudui/fixshellcheckfailures-17
Fix shellcheck failures in stage-upload.sh
2019-04-19 09:47:55 -07:00
Marek Siarkowicz
2fc8ac9e81 [metrics-server addon] Restore metrics-server using of IP addresses
This preference list matches is used to pick prefered field from k8s
node object. It was introduced in metrics-server 0.3 and changed default
behaviour to use DNS instead of IP addresses. It was merged into k8s
1.12 and caused breaking change by introducing dependency on DNS
configuration.
2019-04-19 11:43:17 +02:00
Jake Sanders
113ab741e6 add option to set the value of the apiserver's insecure port 2019-04-18 20:35:08 +00:00
Marek Siarkowicz
37381eb384 Pick up security patches for fluentd-gcp-scaler by upgrading to version 0.5.2 2019-04-18 11:52:53 +02:00
Kubernetes Prow Robot
c58864de3f
Merge pull request #76711 from dims/remove-deprecated-centos-local-support
Remove deprecated centos/local support
2019-04-17 22:58:19 -07:00
Peter Hornyack
81cc384a9a Pin GCE Windows node image to 1809 v20190312.
This is to work around
https://github.com/kubernetes/kubernetes/issues/76666.
2019-04-17 09:45:43 -07:00
Davanum Srinivas
8762bc39a7
Remove deprecated centos/local support
Change-Id: I4a451ec0125c05e66202daf781a4e5a1d895efb4
2019-04-17 11:03:34 -04:00
George Angel
f40f767d94 update k8s.gcr.io/k8s-dns-node-cache image version
v1.15.0 is affected by https://github.com/kubernetes/dns/issues/282
2019-04-16 09:43:53 +01:00
Kubernetes Prow Robot
02ffdd1d5b
Merge pull request #76628 from kwmonroe/rehome-juju
re-home juju related source
2019-04-15 23:31:34 -07:00
Kubernetes Prow Robot
dda0e75d36
Merge pull request #76404 from MrHohn/addon-manager-9.1
Update addon-manager to use debian-base:v1.0.0
2019-04-15 18:05:36 -07:00
Kubernetes Prow Robot
dc2c9e8bd5
Merge pull request #74690 from wenjiaswe/etcdserverhttp
override ETCD_SERVER with https instead http when mTLS is enabled
2019-04-15 16:45:07 -07:00
Kubernetes Prow Robot
8a636a3151
Merge pull request #76467 from MrHohn/addon-manager-owner
Add approver and label to addon-manager
2019-04-15 14:25:06 -07:00
Kevin W Monroe
422a7ec49f re-home juju related source 2019-04-15 16:19:09 -05:00
Kubernetes Prow Robot
b4c77eff33
Merge pull request #76427 from hprateek43/Fix-#75567
Fix for #75567
2019-04-15 11:46:39 -07:00
Wenjia Zhang
80c4bccf0f override ETCD_SERVER with https instead http when mTLS is enabled 2019-04-14 22:11:37 -07:00
Yuwen Ma
23469d6b04
Rebase etcd-empty-dir-cleanup to debian-base
Busybox has more severe CVE issues.
This is part of the effort described in kep kubernetes/enhancements#900, we can't change the ibase image to distroless directly since a bash script is used.
Moved to debian-base and put it as a temp exception for now.
2019-04-12 15:59:23 -07:00
Zihong Zheng
2d635bc29d Add approver and label to addon-manager 2019-04-12 13:04:43 -07:00
Kubernetes Prow Robot
67ee03afd0
Merge pull request #76440 from mm4tt/gce_private_clusters
Ability to set up Private GCE Test Clusters with NAT.
2019-04-12 07:31:03 -07:00
Kubernetes Prow Robot
0da72a1ef3
Merge pull request #76437 from brett-elliott/master
Bump metrics-server to v0.3.2
2019-04-12 07:30:48 -07:00
Matt Matejczyk
2efea76263 Ability to set up Private GCE Clusters with NAT.
Ref. https://github.com/kubernetes/kubernetes/issues/76374
2019-04-12 13:21:56 +02:00
Kubernetes Prow Robot
ae8a4fcb0d
Merge pull request #76352 from jpbetz/reapply-72062
[reapply] Perform GCE log rotation check every 5 minutes
2019-04-12 00:41:14 -07:00
aaa
9768ba9eb3 Fix shellcheck failures in stage-upload.sh
update pull request

update pull request

update pull request

update pull request
2019-04-12 02:42:48 -04:00
Zihong Zheng
9f8d9ba847 Update addon-manager to use debian-base:v1.0.0 2019-04-11 10:18:33 -07:00
Brett Elliott
da4a8aa5ce Bump metrics server to v0.3.2 2019-04-11 13:27:14 +02:00
Kubernetes Prow Robot
39073f0b9f
Merge pull request #74268 from wenjiaswe/fixingNitforetcdapiservertlspath
fix nit for etcd_apiserver TLS path
2019-04-11 01:22:11 -07:00
Harsh Singh
47275cb6cd Fix for #75567 2019-04-11 13:18:47 +05:30
Kubernetes Prow Robot
134ed2e703
Merge pull request #76353 from Random-Liu/add-cni-version-env
Add envs for CNI version.
2019-04-10 18:46:22 -07:00
Kubernetes Prow Robot
e3c3f75b5b
Merge pull request #75658 from feiskyer/cri-tools-1.14
Update cri-tools to v1.14.0
2019-04-10 16:52:07 -07:00
Lantao Liu
ad5b64ca10 Add envs for CNI version.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-04-09 16:38:53 -07:00
Joe Betz
6297c4f750 Perform GCE log rotation check every 5 minutes 2019-04-09 16:37:38 -07:00
yue9944882
b5e3acc5c0 remove internal client references in cluster/* 2019-04-09 21:43:54 +08:00
Pengfei Ni
1406e2b70f Update cri-tools to v1.14.0 2019-04-08 10:59:18 +08:00
Yubao Liu
f7f51fab2a change default 5s ttl to 30s for coredns to be same with kube-dns/dnsmasq 2019-04-07 20:41:25 +08:00
Kubernetes Prow Robot
3e954d3bd3
Merge pull request #76211 from wangzhen127/npd063
Use Node-Problem-Detector v0.6.3 on GCI
2019-04-05 14:34:17 -07:00
Kubernetes Prow Robot
63ae37304b
Merge pull request #75967 from ialidzhikov/fluentd-1.4.1
Update fluentd 1.4.1
2019-04-05 11:51:58 -07:00
Zhen Wang
953677d7a5 Use Node-Problem-Detector v0.6.3 on GCI 2019-04-05 11:08:24 -07:00
Maciej Borsz
a0b51681c4
Revert "[Distroless] Convert the GCE manifests for master containers." 2019-04-05 12:55:14 +02:00
Ke Wu
925dc7f2e0 Fix empty array expansion error in cluster/gce/util.sh
Empty array expansion causes "unbound variable" error in
bash 4.2 and bash 4.3.
2019-04-04 16:46:58 -07:00
Kubernetes Prow Robot
1c105e1629
Merge pull request #75624 from yuwenma/gce-manifest
[Distroless] Convert the GCE manifests for master containers.
2019-04-04 16:21:19 -07:00
Yuwen Ma
af2659527f [Distroless] Convert the GCE manifests for master containers.
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-04-04 11:16:23 -07:00
SataQiu
bc279da872 fix some shellcheck failures of cluster/*.sh 2019-04-04 23:20:52 +08:00
Kubernetes Prow Robot
3e7134891f
Merge pull request #76099 from yujuhong/disable-stackdriver
GCE/Windows: disable stackdriver logging agent
2019-04-04 00:41:14 -07:00
Kubernetes Prow Robot
f1acf4ad94
Merge pull request #75514 from tedyu/master
Use go idiomatic to replace loop
2019-04-04 00:40:50 -07:00
Solly Ross
837976cb59 Prune directxman12 from metrics/autoscaling OWNERS
Since I'm not really working on metrics or autoscaling stuff any more, I
figured it was time to remove myself from the approvers list.
2019-04-03 16:24:51 -07:00
Kubernetes Prow Robot
41691a031a
Merge pull request #76039 from johnSchnake/conformanceErrExit
Finish saving test results on failure
2019-04-03 11:14:49 -07:00
Yu-Ju Hong
2a37067735 GCE/Windows: disable stackdriver logging agent
The logging service could not be stopped at times, causing node startup
failures. Disable it until the issue is fixed.
2019-04-03 10:34:36 -07:00
John Schnake
4fec7c7568 Finish saving test results on failure
The conformance image should be saving its results
regardless of the results of the tests. However,
with errexit set, when ginkgo gets test failures
it exits 1 which prevents saving the results
for Sonobuoy to pick up.

Fixes: #76036
2019-04-03 08:38:43 -05:00
Michelle Au
d2aa8178f2 Remove alpha CRD install 2019-04-02 10:59:11 -07:00
Kubernetes Prow Robot
397f3d4c0c
Merge pull request #75856 from yuwenma/base-etcd
Bebase etcd image to k8s.gcr.io/debian-base
2019-04-01 15:48:47 -07:00
ialidzhikov
ebfb92bdce Update fluentd 1.4.1
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-04-01 18:24:47 +03:00
yuwenma
529b20aadd rebase etcd to k8s debian-base 2019-03-29 18:59:55 -07:00
Peter Hornyack
1814b0c495 Disable GCE agent address management on Windows nodes.
With this metadata key set, "GCEWindowsAgent: GCE address manager
status: disabled" will appear in the VM's serial port output during
boot.

Tested:
PROJECT=${CLOUDSDK_CORE_PROJECT} KUBE_GCE_ENABLE_IP_ALIASES=true NUM_WINDOWS_NODES=2 NUM_NODES=2 KUBERNETES_NODE_PLATFORM=windows go run ./hack/e2e.go -- --up
cluster/gce/windows/smoke-test.sh

cat > iis.yaml <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: iis
  labels:
    app: iis
spec:
  containers:
  - image: mcr.microsoft.com/windows/servercore/iis
    imagePullPolicy: IfNotPresent
    name: iis-server
    ports:
    - containerPort: 80
      protocol: TCP
  nodeSelector:
    beta.kubernetes.io/os: windows
  tolerations:
  - effect: NoSchedule
    key: node.kubernetes.io/os
    operator: Equal
    value: windows1809
EOF

kubectl create -f iis.yaml
kubectl expose pod iis --type=LoadBalancer --name=iis
kubectl get services
curl http://<service external IP address>
2019-03-28 17:28:18 -07:00
Kubernetes Prow Robot
da018a6bfa
Merge pull request #75362 from serathius/gcp-security-patches
Update gcp images with security patches
2019-03-28 14:25:58 -07:00
Kubernetes Prow Robot
753a6edc37
Merge pull request #74616 from ialidzhikov/fluentd-1.4.0
Update fluentd to 1.4.0
2019-03-26 12:33:48 -07:00
Kubernetes Prow Robot
81d37386aa
Merge pull request #75168 from ialidzhikov/update-golang-version
Update golang to 1.12.0
2019-03-26 11:17:20 -07:00
Kubernetes Prow Robot
9e1cf75bd1
Merge pull request #75381 from rramkumar1/configure-scripts-for-ingress-yaml
Plumb CUSTOM_INGRESS_YAML into other setup scripts
2019-03-25 12:10:33 -07:00
ramnar
0ec6eb6177 Bug fix 72757.Removed deprecated label kubernetes.io/cluster-service 2019-03-24 09:41:47 +05:30
Kubernetes Prow Robot
657951c3ed
Merge pull request #74889 from akutz/feature/get-kube-binaries-client-choice
Allow choice of os/arch when downloading client
2019-03-21 22:50:57 -07:00
Kubernetes Prow Robot
8af1bf313e
Merge pull request #75317 from jihoon-seo/patch-1
Update cluster/images/hyperkube/README.md
2019-03-20 20:35:37 -07:00
Ted Yu
793fd74a42 Use go idiomatic to replace loop 2019-03-20 11:40:26 -07:00
Kubernetes Prow Robot
66bb1215c7
Merge pull request #75310 from chi-xu/20190313
Correct a spelling error
2019-03-20 09:53:11 -07:00
Kubernetes Prow Robot
8b19a24974
Merge pull request #75153 from ymlong/fix-20193838
Correcting spelling errors
2019-03-20 00:54:48 -07:00
ialidzhikov
db6add318a Update fluentd to 1.4.0
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-03-20 08:48:26 +02:00
Kubernetes Prow Robot
aa5fda22f2
Merge pull request #75269 from javier-b-perez/gce-configure
gce: configure: validate SA has storage scope
2019-03-19 11:06:22 -07:00
Łukasz Osipiuk
ff18fbcebb Update Cluster Autscaler version to 1.14.0
No changes since 1.14.0-beta.2
Changelog: https://github.com/kubernetes/autoscaler/releases/tag/cluster-autoscaler-1.14.0
2019-03-19 16:15:20 +01:00
Dan Williams
bfd8ad3268 build/gci: bump CNI version to 0.7.5 2019-03-18 17:16:42 -05:00
Kubernetes Prow Robot
28910bf2d7
Merge pull request #75387 from pjh/remove-use-release-node-binaries
Remove reference to USE_RELEASE_NODE_BINARIES.
2019-03-18 09:52:26 -07:00
Rohit Ramkumar
8ac15cd54a Plumb CUSTOM_INGRESS_YAML into other setup scripts so that it can be set before a call to kubetest 2019-03-15 13:36:30 -07:00
Łukasz Osipiuk
e4663f73d3 Update Cluster Autscaler version to 1.14.0-beta.2 2019-03-15 12:01:47 +01:00
Marek Siarkowicz
9e9b906047 Update gcp images with security patches
[stackdriver addon] Bump prometheus-to-sd to v0.5.0 to pick up security fixes.
[fluentd-gcp addon] Bump fluentd-gcp-scaler to v0.5.1 to pick up security fixes.
[fluentd-gcp addon] Bump event-exporter to v0.2.4 to pick up security fixes.
[fluentd-gcp addon] Bump prometheus-to-sd to v0.5.0 to pick up security fixes.
[metatada-proxy addon] Bump prometheus-to-sd v0.5.0 to pick up security fixes.
2019-03-15 09:24:32 +01:00
Peter Hornyack
7f364b1c5b Remove reference to USE_RELEASE_NODE_BINARIES.
This variable was used for development purposes and was accidentally
introduced in
f0f7829934.

This is its only use in the tree:
https://github.com/kubernetes/kubernetes/search?q=USE_RELEASE_NODE_BINARIES&unscoped_q=USE_RELEASE_NODE_BINARIES
2019-03-14 14:50:54 -07:00
Jihoon Seo
f5a66f8c13
Update cluster/images/hyperkube/README.md
Add missing period between 'components' and `hyperkube`.
Add line separation between 2 sentences.
2019-03-13 12:01:30 +09:00
xuchi
d0e15aed2c Correct a spelling error 2019-03-13 09:39:13 +08:00
Kubernetes Prow Robot
a213886f9c
Merge pull request #74502 from Random-Liu/collect-pod-log
Collect pod log in fluentd-gcp
2019-03-12 01:34:37 -07:00
Javier Pérez Hernández
e783f0bcd4 gce: configure: validate SA has storage scope
If the VM SA doesn't have storage scope associated, don't use the
token in the curl request or the request will fail with 403.
2019-03-11 12:04:01 -07:00
Kubernetes Prow Robot
6ec5a7d337
Merge pull request #75181 from losipiuk/lo/master-ca-1.14-beta.1
Update Cluster Autscaler version to 1.14.0-beta.1
2019-03-11 07:15:32 -07:00
Kubernetes Prow Robot
8dd09e0b36
Merge pull request #75208 from pjh/gce-windows-readme-update
Update GCE Windows README steps for running e2e tests.
2019-03-10 21:15:26 -07:00
Lantao Liu
7ffa7da112 Configure logrotate for pod logs. 2019-03-08 16:45:41 -08:00
Kubernetes Prow Robot
c534a1b9b3
Merge pull request #75149 from yguo0905/m73
GCE: bump COS image version to cos-beta-73-11647-64-0
2019-03-08 14:19:35 -08:00
Kubernetes Prow Robot
d778b9308a
Merge pull request #75063 from wangzhen127/npd-test-fix
Fix NPD e2e test on Ubuntu node and update NPD container version
2019-03-08 14:19:09 -08:00
Peter Hornyack
0fbb246c30 Update GCE Windows README steps for running e2e tests. 2019-03-08 13:47:41 -08:00
Łukasz Osipiuk
2790d9151a Update Cluster Autscaler version to 1.14.0-beta.1 2019-03-08 14:01:55 +01:00
ialidzhikov
c72115dede Update golang to 1.12.0
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-03-08 11:45:46 +02:00
Kubernetes Prow Robot
cf439192fb
Merge pull request #75139 from mtaufen/windows-kube-proxy-args
Windows kubeproxy flags cleanup
2019-03-08 00:53:28 -08:00
Kubernetes Prow Robot
6a86f1576f
Merge pull request #75014 from mtaufen/windows-logrotate
Windows log rotation
2019-03-07 22:43:41 -08:00
Kubernetes Prow Robot
183e6cc190
Merge pull request #74433 from tallclair/runtimeclass-internal
Migrate RuntimeClass from a CRD to an internal API
2019-03-07 21:19:30 -08:00
ymlong
8e04d61488 Correcting spelling errors 2019-03-08 10:19:13 +08:00
Yang Guo
eef545abfd GCE: bump COS image version to cos-beta-73-11647-64-0 2019-03-07 16:11:02 -08:00
Michael Taufen
0d59d2a43e Windows kubeproxy flags cleanup
- Pass most of the flags via kube-env, similar to Kubelet, to make it
  easier to reconfigure.
- Use kube-proxy's kubeconfig file to pass the API server address,
  rather than the --master flag.
- Make KUBEPROXY_ARGS a required variable in Windows kube-env, similar
  to KUBELET_ARGS.
2019-03-07 14:45:34 -08:00
Tim Allclair
63f61a6714 Migrate RuntimeClass to internal API 2019-03-07 11:07:54 -08:00
Michael Taufen
0a21d644f5 Rotate windows logs 2019-03-07 10:42:31 -08:00
Davanum Srinivas
200af47128
Stop waiting on conformance image pod when it fails
Change-Id: I516833167f8e0aaa0e7962c1d6bdbe2ca422dc6e
2019-03-07 11:03:05 -05:00
Kubernetes Prow Robot
57da888ff4
Merge pull request #75055 from pjh/gce-windows-disable-defender-again
Disable Windows Defender in Windows nodes on GCE again.
2019-03-07 01:07:26 -08:00
Zhen Wang
f4d9e7d992 Fix NPD e2e test on Ubuntu node and update NPD container version 2019-03-06 22:42:47 -08:00
Kubernetes Prow Robot
bd8eeaaaaf
Merge pull request #74468 from ixdy/bazel-cgo-crossbuild
bazel: improve multi-arch support for docker image artifacts
2019-03-06 20:35:11 -08:00
Kubernetes Prow Robot
a60d44848f
Merge pull request #74748 from pjh/gce-windows-stackdriver
Install Stackdriver agent in Windows nodes on GCE.
2019-03-06 17:59:39 -08:00
Kubernetes Prow Robot
ab7a48d796
Merge pull request #70036 from pbarker/audit-etoe
dynamic audit e2e test
2019-03-06 17:58:58 -08:00
Jeff Grafton
8495f7c9ed bazel: add docker_push rules 2019-03-06 12:35:33 -08:00
Peter Hornyack
80c635880d Disable Windows Defender in Windows nodes on GCE again.
This reverts commit fbf4fe4714. Windows
Defender seems to be causing our Windows nodes to crash and reboot
during e2e tests, e.g.
https://gcsweb.k8s.io/gcs/kubernetes-jenkins/logs/ci-kubernetes-e2e-windows-gce/228/artifacts/e2e-228-36623-windows-node-group-q4.
2019-03-06 11:42:03 -08:00
Jeff Grafton
d7c2c2a606 bazel: refactor multi-arch container builds into starlark 2019-03-06 11:40:33 -08:00
Kubernetes Prow Robot
45e5f6053b
Merge pull request #74424 from liggitt/drop-k8s-io-node-labels
Clean up self-set node labels
2019-03-06 08:24:26 -08:00
Kubernetes Prow Robot
5a89793f8e
Merge pull request #74612 from jingxu97/windows
Add GcePD windows support
2019-03-05 21:42:22 -08:00
Peter Hornyack
197513141e Install Stackdriver agent in Windows test clusters. 2019-03-05 15:14:07 -08:00
Patrick Barker
67a245ae61 remove unneeded println 2019-03-05 14:38:58 -07:00
Patrick Barker
45d715cdc6 adds dynamic audit e2e test 2019-03-05 14:38:58 -07:00
Kubernetes Prow Robot
365c504e2b
Merge pull request #74928 from pjh/gce-windows-reenable-defender
Don't disable Windows Defender.
2019-03-05 11:10:25 -08:00
Kubernetes Prow Robot
a352b74bcc
Merge pull request #74915 from jpbetz/revert-72062-2
revert 72062: Perform GCE master log rotation check every 5 minutes
2019-03-05 09:50:55 -08:00
Kubernetes Prow Robot
b4e692b68f
Merge pull request #74854 from neolit123/conformance-nodes
conformace/run_e2e.sh: pass shellcheck and autodetect ginkgo nodes
2019-03-05 09:50:12 -08:00
Kubernetes Prow Robot
95cd1d59e4
Merge pull request #74209 from monotek/fluentd-helm-readme
added production note about EFK stack to the readme
2019-03-04 17:55:12 -08:00
Peter Hornyack
fbf4fe4714 Don't disable Windows Defender. 2019-03-04 16:34:21 -08:00
Lubomir I. Ivanov
fe2301f17d conformace/run_e2e.sh: pass shellcheck and autodetect ginkgo nodes
- for ginkgo parallel mode pass -p to autodetect ginkgo nodes.
- disable parallel mode by default (false).
- use provider "skeleton" instead of "local".
- make run_e2e.sh pass shellcheck.
2019-03-05 01:32:57 +02:00
Joe Betz
add956f00f Revert "Perform GCE log rotation check every 5 minutes"
This reverts commit 1ba05d51a6.
2019-03-04 14:10:20 -08:00
Kubernetes Prow Robot
79e8a29544
Merge pull request #74852 from dims/expand-reviewers-approvers-add-label
Expand reviewers/approvers and add labels for conformance image
2019-03-04 13:25:50 -08:00
akutz
020dc47073 Allow choice of os/arch when downloading client
This patch introduces `KUBERNETES_CLIENT_OS` and
`KUBERNETES_CLIENT_ARCH` to the script `cluster/get-kube-binaries.sh` in
order to download a client that is not the OS/Arch of the host on which
the script is executing.
2019-03-04 10:23:04 -06:00
Jeff Grafton
c98b3edb88 bazel: make conformance and hyperkube images multiarch 2019-03-03 21:09:22 -08:00
Davanum Srinivas
b3adf5bd0d
Expand reviewers/approvers and add labels for conformance image
Change-Id: I6e13d262a8bf97ada89227a853debe58876c212a
2019-03-02 13:46:27 -05:00
Davanum Srinivas
87e87dd25b
Apparently conformance tests have to run serially
There are 10+ conformance tests marked [Serial], So we can't run things
in parallel by default.

Change-Id: I58afbb356899fb38caf4f9f6704bfb47f745b338
2019-03-02 13:30:00 -05:00
Kubernetes Prow Robot
e001276b1d
Merge pull request #74836 from yujuhong/update-win-cni-config
GCE/Windows: exclude gateways from the IPAM subnet
2019-03-01 20:35:03 -08:00
Kubernetes Prow Robot
3bb22edef8
Merge pull request #74808 from dims/showcase-the-available-options-in-manifest
Showcase conformance images options in the manifest
2019-03-01 20:34:53 -08:00
Kubernetes Prow Robot
738d29b96c
Merge pull request #74767 from yuwenma/rebase-image
Rebase etcd-version-monitor base image to distroless.
2019-03-01 19:14:24 -08:00
Aaron Crickenberger
388a345efc Use no skip regex for conformance 2019-03-01 16:35:27 -08:00
Yu-Ju Hong
1f86bce95e GCE/Windows: exclude gateways from the IPAM subnet
Exclude IPs assigned for gateways in the IPAM configuration.
2019-03-01 16:35:26 -08:00
Kubernetes Prow Robot
b8e05af7bf
Merge pull request #74736 from mtaufen/windows-kube-proxy-config
Stop setting --hostname-override on Windows kube-proxy and allow args  to be extended remotely if necessary
2019-03-01 16:12:23 -08:00
Kubernetes Prow Robot
4bafef2234
Merge pull request #74761 from dims/better-detection-of-binaries-for-conformance-image
Better detection of binaries for conformance image
2019-03-01 14:09:08 -08:00
Davanum Srinivas
da566ad647
Showcase conformance images options in the manifest
The Dockerfile has a few more options, let's surface that in the
manifest. Also use the same defaults in the manifest as the Dockerfile
itself.

Change-Id: Ib7419cf7999430db15f39ac414c80ee362fcda76
2019-03-01 16:39:28 -05:00
Kubernetes Prow Robot
98c0d15f98
Merge pull request #74762 from pjh/gce-windows-dump-versions
Dump Windows version information during cluster bringup.
2019-03-01 01:08:36 -08:00
Kubernetes Prow Robot
824883d08a
Merge pull request #74754 from pjh/gce-windows-smoke-timeout
Increase Windows smoke-test timeout to 3 minutes.
2019-02-28 19:12:18 -08:00
Davanum Srinivas
9d7d682760
Better detection of binaries for conformance image
Change-Id: Id33a0827e8cb1e3369544eea3335c80c89780786
2019-02-28 22:00:28 -05:00
Peter Hornyack
18a2a98d67 Dump Windows version information during cluster bringup. 2019-02-28 17:22:49 -08:00
Peter Hornyack
43556be50e Enhance metadata fetching functions.
Introduce Get-InstanceMetadata which can be used to fetch
non-"attribute" metadata values.
2019-02-28 17:18:34 -08:00
Yuwen Ma
fd2b57926e Rebase etcd-version-monitor base image to distroless. 2019-02-28 17:06:37 -08:00
Peter Hornyack
4181422a3c Increase Windows smoke-test timeout to 3 minutes.
I recently lowered the timeout value to 2 minutes but this turned out to
be too aggressive for now. 3 minutes is usually long enough for the test
containers to come up.

Note that this test is only used during development, it does not run
continuously anywhere.
2019-02-28 14:22:35 -08:00
Kubernetes Prow Robot
4741785d29
Merge pull request #73650 from mtaufen/windows-upload-scripts
upload Windows startup scripts to GCS for CI
2019-02-28 11:51:25 -08:00
Michael Taufen
a76d132162 Stop setting --hostname-override on Windows kube-proxy and allow args to be extended remotely if necessary
--hostname-override should not be necessary, we can rely on kube-proxy
to auto-detect it just like we do in Kubelet.

I also added an optional variable to kube_env, KUBEPROXY_ARGS, that we
can use to remotely extend kube-proxy's command-line if necessary.
2019-02-28 10:13:07 -08:00
John Schnake
03d0e86117 Add support for dryRun option to kube-conformance image
A common issue users run into is wanting a list of tests
a certain regexp will run, without actually running it.

ginkgo supports this with the dryRun flag but it was not
exposed via the kube-conformance image. This change
will set the flag if the E2E_DRYRUN environment variable
is set.

Fixes #74727
2019-02-28 09:21:04 -06:00
Kubernetes Prow Robot
02b8056efb
Merge pull request #73288 from wangzhen127/npd-config
Decouple node-problem-detector release from kubernetes
2019-02-28 00:27:25 -08:00
Kubernetes Prow Robot
ccf33be0cc
Merge pull request #73940 from jiayingz/nvidia-dp-update
Update nvidia-gpu-device-plugin addon.
2019-02-27 17:13:01 -08:00
Jing Xu
5e04d200ee Add GcePD windows support
This PR adds the support for GCEPD volume. For now, it uses a workaround
(https://github.com/pjh/gce-tools) to get disk number in windows for a given GCE PD name.
2019-02-27 17:00:32 -08:00
Kubernetes Prow Robot
b2e9b2a842
Merge pull request #74608 from dims/lighter-weight-make-for-conformance-dependencies
Lighter weight make for conformance dependencies, better script and manifest
2019-02-27 07:19:55 -08:00
Davanum Srinivas
23b33f5c85
Switch to k8s.gcr.io (from staging)
Change-Id: Ib0d6f681be3537f0cbfcae1dc254f1c42a04be66
2019-02-27 08:54:45 -05:00
Davanum Srinivas
87d9903aaf
Add a script to run the conformance image and pull results
Change-Id: I1eb673fe37b5e8a719f9095473765c80fb7f2347
2019-02-27 07:38:43 -05:00
Kubernetes Prow Robot
1942c1ccb0
Merge pull request #71251 from monotek/kibana
updated kibana to 6.6.1
2019-02-26 23:40:33 -08:00
Zhen Wang
efa96f7eb8 allows configuring NPD release and flags on GCI and add cluster e2e test 2019-02-26 21:21:54 -08:00
Kubernetes Prow Robot
81ec358db4
Merge pull request #74438 from pjh/gce-windows-log-dump
Support dumping logs from Windows test nodes on GCE
2019-02-26 18:12:09 -08:00
Peter Hornyack
0bb25290c8 Update log-dump.sh for Windows nodes.
Tested:
```
$ PROJECT=${CLOUDSDK_CORE_PROJECT} KUBERNETES_SKIP_CONFIRM=y NUM_NODES=2 \
  NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true go run \
  ./hack/e2e.go -- --up
$ cluster/log-dump/log-dump.sh
$ ls _artifacts
```

And with: NUM_NODES=2 NUM_WINDOWS_NODES=0; NUM_NODES=0 NUM_WINDOWS_NODES=2
2019-02-26 12:10:19 -08:00
Yu-Ju Hong
093e5a50ac GCE/Windows: create a C:\tmp directory
This is required for running host path tests.
2019-02-26 10:59:06 -08:00
Kubernetes Prow Robot
7a4496429d
Merge pull request #71252 from monotek/elasticsearch
updated elasticsearch to 6.6.1
2019-02-26 09:33:44 -08:00
Jordan Liggitt
e1db43ad1b Label old nodes with legacy addon labels 2019-02-26 11:43:10 -05:00
Jordan Liggitt
0174e043c5 Prepare switch from beta.kubernetes.io/masq-agent-ds-ready to node.kubernetes.io/masq-agent-ds-ready 2019-02-26 11:43:10 -05:00
Jordan Liggitt
943b32a289 Prepare switch from beta.kubernetes.io/kube-proxy-ds-ready to node.kubernetes.io/kube-proxy-ds-ready 2019-02-26 11:42:23 -05:00
Jordan Liggitt
d6664a2365 Prepare switch from beta.kubernetes.io/metadata-proxy-ready to cloud.google.com/metadata-proxy-ready 2019-02-26 11:42:23 -05:00
Jordan Liggitt
8975233788 Finish migration of fluentd to daemonset 2019-02-26 11:42:23 -05:00
Davanum Srinivas
94ad1dfb11
Better manifest for running conformance image
Change-Id: I137180ed781edd4a9877cabe039e40a72aa71366
2019-02-26 10:29:12 -05:00
Kubernetes Prow Robot
b8ddc7945b
Merge pull request #74522 from Pluies/master
Fix fluentd-gcp addon liveness probe
2019-02-26 06:38:24 -08:00
Davanum Srinivas
069eeb541b
Simpler make commands for ginkgo/kubectl/e2e.test
Change-Id: I78cff10231eabd53b1fc7bdd1526c861179e135a
2019-02-26 09:18:05 -05:00
André Bauer
9e2d9cfbb0 changed es image repo
Signed-off-by: André Bauer <monotek23@gmail.com>
2019-02-26 09:09:21 +01:00
Kubernetes Prow Robot
3fb6e77770
Merge pull request #74549 from yujuhong/pause-image
GCE: switch to using e2eteam/pause:3.1 for pause containers
2019-02-25 23:12:00 -08:00
Kubernetes Prow Robot
0ff7e463ee
Merge pull request #73746 from mrbobbytables/kubemark-shellcheck
Fix shellcheck lint errors in Kubemark scripts
2019-02-25 17:25:13 -08:00
Michael Taufen
98edbf41bc upload Windows startup scripts to GCS for CI 2019-02-25 16:44:57 -08:00
Kubernetes Prow Robot
3814176d42
Merge pull request #74455 from SataQiu/fix-shell-2019022302
Fix shellcheck lint errors in cluster and hack scripts
2019-02-25 15:15:19 -08:00
Yu-Ju Hong
b863655faa GCE: switch to using e2eteam/pause:3.1 for pause containers
Stop building pause images on node startup.
2019-02-25 14:36:49 -08:00
Kubernetes Prow Robot
2aacb77374
Merge pull request #74444 from pjh/gce-windows-no-defender
Disable Windows Defender on Windows nodes.
2019-02-25 13:54:42 -08:00
Bob Killen
9a4f4878f5
Fix shellcheck lint errors in cluster/kubemark/util.sh 2019-02-25 15:21:29 -05:00
Bob Killen
9a58913e8f
Fix shellcheck lint errors in cluster/kubemark/iks/config-default.sh 2019-02-25 15:21:25 -05:00
Bob Killen
ce4c85e3fd
Fix shellcheck lint errors in cluster/kubemark/gce/config-default.sh 2019-02-25 14:55:01 -05:00
Kubernetes Prow Robot
35a258d640
Merge pull request #73272 from danielqsj/juju
fix shellcheck in cluster/juju
2019-02-25 11:33:21 -08:00
Kubernetes Prow Robot
f288678cfa
Merge pull request #73261 from danielqsj/local
fix shellcheck in cluster/local
2019-02-25 11:33:11 -08:00
Florent Delannoy
e627474e8f Fix fluentd-gcp addon liveness probe
Fix three issues with the fluentd-gcp liveness probe:

h1. STUCK_THRESHOLD_SECONDS was overridden by LIVENESS_THRESHOLD_SECONDS
if defined

Probably a copy/paste issue introduced in edf1ffc074

h1. `[[` is [a bashism](https://stackoverflow.com/a/47576482), and will always failed when called with `/bin/sh`

Introduced by a844523c20

Given that we call the liveness probe with `/bin/sh`, we cannot use the
double-bracketed `[[` syntax for test, as it is not POSIX-compliant and
will throw an error.

Annoyingly, even through it prints an error, `sh` returns with exit code 0
in this case:

```bash
root@fluentd-7mprs:/# sh liveness.sh
liveness.sh: 8: liveness.sh: [[: not found
liveness.sh: 15: liveness.sh: [[: not found
root@fluentd-7mprs:/# echo $?
0
```

Which means the liveness probe is considered successful by Kubernetes,
despite failing to test things as it was intended. This is also
probably the reason why this bug wasn't reported sooner :)

Thankfully, the test in this case can just as easily be written as
POSIX-compliant as it doesn't use any bash-specific features within the
`[[` block.

h1. Buffers are transient and cannot be relied upon for monitoring

Finally, after fixing the above issue, we started seeing the fluentd
containers being restarted very often, and found an issue with the
underlying logic of the liveness probe.

The probe checks that the pod is still alive by running the following
command:

`find /var/log/fluentd-buffers -type f -newer /tmp/marker-stuck -print -quit`

This checks if any _regular_ file exists under `/var/log/fluentd-buffers`
that is more recent than a predetermined time, and will return an empty
string otherwise.

The issue is that these buffers are temporary and volatile, they get created and
deleted constantly. Here is an example of running that check every second on a
running fluentd:

```
root@fluentd-eks-playground-jdc8m:/# LIVENESS_THRESHOLD_SECONDS=${LIVENESS_THRESHOLD_SECONDS:-300};
root@fluentd-eks-playground-jdc8m:/# STUCK_THRESHOLD_SECONDS=${LIVENESS_THRESHOLD_SECONDS:-900};
root@fluentd-eks-playground-jdc8m:/# touch -d "${STUCK_THRESHOLD_SECONDS} seconds ago" /tmp/marker-stuck;
root@fluentd-eks-playground-jdc8m:/# touch -d "${LIVENESS_THRESHOLD_SECONDS} seconds ago" /tmp/marker-liveness;
root@fluentd-eks-playground-jdc8m:/# while true; do date ; find /var/log/fluentd-buffers -type f -newer /tmp/marker-stuck -print -quit ; sleep 1 ; done
Fri Feb 22 10:52:57 UTC 2019
Fri Feb 22 10:52:58 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer/buffer.b5827964ccf4c7004103c3fa7c8533f85.log
Fri Feb 22 10:52:59 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer/buffer.b5827964ccf4c7004103c3fa7c8533f85.log
Fri Feb 22 10:53:00 UTC 2019
Fri Feb 22 10:53:01 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer/buffer.b5827964fb8b2eedcccd2763ea7775cc2.log
Fri Feb 22 10:53:02 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer/buffer.b5827964fb8b2eedcccd2763ea7775cc2.log
Fri Feb 22 10:53:03 UTC 2019
Fri Feb 22 10:53:04 UTC 2019
Fri Feb 22 10:53:05 UTC 2019
Fri Feb 22 10:53:06 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer/buffer.b5827965564883997b673d703af54848b.log
Fri Feb 22 10:53:07 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer/buffer.b5827965564883997b673d703af54848b.log
Fri Feb 22 10:53:08 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer/buffer.b5827965564883997b673d703af54848b.log
Fri Feb 22 10:53:09 UTC 2019
Fri Feb 22 10:53:10 UTC 2019
Fri Feb 22 10:53:11 UTC 2019
Fri Feb 22 10:53:12 UTC 2019
Fri Feb 22 10:53:13 UTC 2019
Fri Feb 22 10:53:14 UTC 2019
Fri Feb 22 10:53:15 UTC 2019
Fri Feb 22 10:53:16 UTC 2019
```

We can see buffers being created, then disappearing. The LivenessProbe running
under these conditions has a ~50% chance of failing, despite fluentd being
perfectly happy.

I believe that check is probably ok for fluentd installs using large
amounts of buffers, in which case the liveness probe will be correct more
often than not, but fluentd installs that use buffering less intensively
will be negatively impacted by this.

My solution to fix this is to check the last updated time of buffering
_folders_ within `/var/log/fluentd_buffers`. These _do_ get updated when
buffers are created, and do not get deleted as buffers are emptied,
making them the perfect candidate for our use.

Here's an example with the `-d` flag for directories:
```
root@fluentd-eks-playground-jdc8m:/# while true; do date ; find /var/log/fluentd-buffers -type d -newer /tmp/marker-stuck -print -quit ; sleep 1 ; done
Fri Feb 22 10:57:51 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:52 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:53 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:54 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:55 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:56 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:57 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:58 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:57:59 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:58:00 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:58:01 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:58:02 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
Fri Feb 22 10:58:03 UTC 2019
/var/log/fluentd-buffers/kubernetes.system.buffer
```

And example of the directory being updated as new buffers come in:
```
root@fluentd-eks-playground-jdc8m:/# ls -lah /var/log/fluentd-buffers/kubernetes.system.buffer
total 0
drwxr-xr-x 2 root root  6 Feb 22 11:17 .
drwxr-xr-x 3 root root 38 Feb 22 11:14 ..
root@fluentd-eks-playground-jdc8m:/# ls -lah /var/log/fluentd-buffers/kubernetes.system.buffer
total 16K
drwxr-xr-x 2 root root  224 Feb 22 11:18 .
drwxr-xr-x 3 root root   38 Feb 22 11:14 ..
-rw-r--r-- 1 root root 1.8K Feb 22 11:18 buffer.b58279be6e21e8b29fc333a7d50096ed0.log
-rw-r--r-- 1 root root  215 Feb 22 11:18 buffer.b58279be6e21e8b29fc333a7d50096ed0.log.meta
-rw-r--r-- 1 root root  429 Feb 22 11:18 buffer.b58279be6f09bdfe047a96486a525ece2.log
-rw-r--r-- 1 root root  195 Feb 22 11:18 buffer.b58279be6f09bdfe047a96486a525ece2.log.meta
root@fluentd-eks-playground-jdc8m:/# ls -lah /var/log/fluentd-buffers/kubernetes.system.buffer
total 0
drwxr-xr-x 2 root root  6 Feb 22 11:18 .
drwxr-xr-x 3 root root 38 Feb 22 11:14 ..
```
2019-02-25 11:48:31 +00:00
André Bauer
2bd6d3dc12 use image version 6.6.1
Signed-off-by: André Bauer <monotek23@gmail.com>
2019-02-25 11:05:52 +01:00
André Bauer
2d15ffc9cc updated to 6.5.2
Signed-off-by: André Bauer <monotek23@gmail.com>
2019-02-25 10:56:50 +01:00
André Bauer
0c29ea1a2e Update es-statefulset.yaml 2019-02-25 10:55:23 +01:00
André Bauer
53a936c359 Update Makefile 2019-02-25 10:55:23 +01:00
André Bauer
0e44fa6359 updated elasticsearch to 6.5.0 2019-02-25 10:55:23 +01:00
André Bauer
fc850b5ecd fixed wording
Signed-off-by: André Bauer <monotek23@gmail.com>
2019-02-25 10:49:43 +01:00
André Bauer
421fcd8262 added prodution note to readme
Signed-off-by: André Bauer <monotek23@gmail.com>
2019-02-25 10:47:26 +01:00
danielqsj
7d051e1a75 update juju shell 2019-02-24 20:46:20 +08:00
danielqsj
7e655e8666 fix shellcheck in cluster/juju 2019-02-24 20:40:59 +08:00
danielqsj
f02a986081 add comments to shell function 2019-02-24 20:35:46 +08:00
SataQiu
9cda80e836 fix shellcheck lint errors in cluster and hack scripts 2019-02-24 11:15:35 +08:00
Kubernetes Prow Robot
1cf8001e53
Merge pull request #74449 from xichengliudui/fix190223
make more of the shell pass lints
2019-02-23 12:52:34 -08:00
Kubernetes Prow Robot
8993fbc543
Merge pull request #74328 from daixiang0/delete-blank
delete all duplicate empty blanks
2019-02-23 01:43:58 -08:00
Peter Hornyack
621df2cddb Disable Windows Defender on Windows test nodes. 2019-02-22 18:35:38 -08:00
Xiang Dai
36065c6dd7 delete all duplicate empty blanks
Signed-off-by: Xiang Dai <764524258@qq.com>
2019-02-23 10:28:04 +08:00
Jeff Grafton
7a938eb541 Create work-around wrappers for pure attribute on go_binary and go_test
This enables cgo when cross-compiling certain tests and binaries to
Linux, while disabling cgo for Windows and Darwin.
2019-02-22 18:08:34 -08:00
Kubernetes Prow Robot
46d7e9c784
Merge pull request #74381 from yujuhong/add-key
GCE: add EventLog registry key for docker
2019-02-22 17:58:44 -08:00
Kubernetes Prow Robot
fd7acc3275
Merge pull request #74065 from ixdy/break-up-test-tarball
break up the test tarball
2019-02-22 17:58:23 -08:00
Kubernetes Prow Robot
743f864310
Merge pull request #73819 from coffeepac/move-fluentd-es-images
Move fluentd es images
2019-02-22 17:58:12 -08:00
Peter Hornyack
3efd4ca1dc Enhance/repair detect-node-names() and related env vars for Windows nodes. 2019-02-22 14:56:55 -08:00
Patrick Christopher
1bd45ba6eb review updates 2019-02-22 10:00:10 -08:00
Aaron Crickenberger
2d868025be Promote spiffxp to approver for cluster/
Also add Katharine as reviewer
2019-02-22 09:25:31 -08:00
Kubernetes Prow Robot
c7ac532816
Merge pull request #74360 from pjh/gce-windows-cluster-ssh
Enable OpenSSH on Windows nodes in test clusters.
2019-02-21 20:51:23 -08:00
Kubernetes Prow Robot
125dc6c8ea
Merge pull request #74187 from xichengliudui/fixgolint0218
Fix shellcheck lint errors in cluster/addons/fluentd-elasticsearch/fl……uentd-es-image/run.sh
2019-02-21 20:51:13 -08:00
Yu-Ju Hong
40d0ae311c GCE: add EventLog registry key for docker 2019-02-21 17:47:32 -08:00
Kubernetes Prow Robot
042f9ed3af
Merge pull request #74093 from blakebarnett/lower-neg-cache-ttl
Lowers the default nodelocaldns denial cache TTL
2019-02-21 17:47:16 -08:00
Blake
46c299c1b1 Match default cache size of 10000
https://github.com/coredns/coredns/blob/master/plugin/cache/cache.go#L236
This gets rounded down to the nearest multiple of 256: 9984
2019-02-21 15:03:30 -08:00
Peter Hornyack
57ca6f007e Enable OpenSSH on Windows nodes in test clusters.
Also switches to the most recent 64-bit version of OpenSSH for Windows.

Tested:
PROJECT=${CLOUDSDK_CORE_PROJECT} KUBERNETES_SKIP_CONFIRM=y NUM_NODES=2 \
NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true TEST_CLUSTER=true \
./cluster/kube-up.sh
2019-02-21 14:03:43 -08:00
Jeff Grafton
b360f95eb3 cleanup: we always need to download client and server tarballs 2019-02-21 13:17:58 -08:00
Jeff Grafton
56949c7834 Support split test tarballs in get-kube-binaries.sh 2019-02-21 13:17:58 -08:00
Peter Hornyack
6d78f2b666 Default to Windows Server version 1809 for Windows nodes.
Removes all references to 1803, including moving "win1803" directory to
just "windows". A single Windows directory suffices for now, if
necessary in the future we can shard it into directories for each
Windows version.

We've been running tests with Windows 1809 nodes for a couple days in
our fork without major problems:
https://testgrid.k8s.io/google-windows#windows-prototype&width=20.
Testing on Azure is already using 1809:
https://testgrid.k8s.io/sig-windows#Conformance%20acs-engine%20on%20Azure&width=20.
2019-02-21 09:44:44 -08:00
Kubernetes Prow Robot
f1de0b557c
Merge pull request #74324 from mtaufen/fix-windows
Fix hash if statement
2019-02-20 23:57:18 -08:00
xichengliudui
053332ad46 Fix shellcheck lint errors in cluster/addons/fluentd-elasticsearch/fluentd-es-image/run.sh
update pull request

update pull request

update pull request

update pull request

update pull request
2019-02-21 02:00:48 -05:00
Kubernetes Prow Robot
6c1f2077e5
Merge pull request #74192 from xichengliudui/fixshellcheck190218
make more of the shell pass lints
2019-02-20 21:41:25 -08:00
Kubernetes Prow Robot
054a676141
Merge pull request #74142 from javier-b-perez/master
GCE config.sh script should use headers for curl GCS apis
2019-02-20 21:41:12 -08:00
Michael Taufen
cf3ad9c655 Fix hash if statement 2019-02-20 16:56:00 -08:00
Kubernetes Prow Robot
f04ce297d6
Merge pull request #74100 from mtaufen/file-download-improvements
Retry downloads, respect URL list, validate tar hash
2019-02-20 11:34:06 -08:00
Michael Taufen
7ffe810f1d Retry downloads, respect URL list, validate tar hash 2019-02-20 08:52:46 -08:00
Kubernetes Prow Robot
f5989303b7
Merge pull request #74060 from SataQiu/fix-shellcheck-20190214
Fix shellcheck failures on kube-down.sh kubeadm.sh get-build.sh
2019-02-19 21:41:17 -08:00
Kubernetes Prow Robot
db7d930aab
Merge pull request #74109 from pjh/gce-windows-cluster-smoke-test
Detect ready pods correctly and untaint Windows nodes in smoke-test.
2019-02-19 19:57:40 -08:00
Kubernetes Prow Robot
7b203c6809
Merge pull request #74137 from rajansandeep/readinessprobe
Add readinessProbe to CoreDNS
2019-02-19 16:24:04 -08:00
Kubernetes Prow Robot
cbf45eea13
Merge pull request #74138 from rramkumar1/ingress-docs-fix
Update docs for Ingress-GCE related cluster addon
2019-02-19 15:05:50 -08:00
Peter Hornyack
8a7fe26888 Detect ready pods correctly and untaint Windows nodes in smoke-test. 2019-02-19 11:48:54 -08:00
Wenjia Zhang
b9af5b5112 fix nit for etcd_apiserver TLS path 2019-02-19 11:19:49 -08:00
Sandeep Rajan
37c3d68a91 Add readinessProbe 2019-02-19 10:14:12 -05:00
Kubernetes Prow Robot
16cbb6b965
Merge pull request #73848 from krzysied/logexporter_custom_fix
Handling for use_custom_instance_list in dump_nodes_with_logexporter
2019-02-18 15:23:48 -08:00
xichengliudui
b83b83f8e3 aaa 2019-02-18 17:50:55 -05:00
Rohit Ramkumar
a50752ceb7 Update docs for Ingress-GCE related cluster addon 2019-02-18 13:17:01 -08:00
André Bauer
d82d5fda35 updated kibana to 6.6.0
Signed-off-by: André Bauer <monotek23@gmail.com>
2019-02-18 11:00:02 +01:00
André Bauer
fa859e4644 Merge branch 'master' into kibana 2019-02-18 10:58:49 +01:00
Kubernetes Prow Robot
92e0c231fa
Merge pull request #74107 from truongnh1992/adding-shebang
Adding '/usr/bin/env bash'
2019-02-18 00:23:35 -08:00
Kubernetes Prow Robot
cdbc9d8567
Merge pull request #73686 from ShivangGoswami/master
Cleanup: Audit log and error capitalization
2019-02-17 23:08:39 -08:00
xichengliudui
fd044c5770 make more of the shell pass lints 2019-02-18 00:42:46 -05:00
Kubernetes Prow Robot
5aaf6cd61b
Merge pull request #72386 from logicalhan/readiness
fail faster for readiness checks
2019-02-15 18:02:30 -08:00
Kubernetes Prow Robot
a22763b24e
Merge pull request #74063 from huynq0911/fix_wrong_format_yaml_influxdb
Fix incorrect influxdb yaml file
2019-02-15 16:46:18 -08:00
Javier Pérez Hernández
708d7df561 k8s: gci: configure: add token to curl calls
Modify script to use curl to get metadata and Service Account token.
When the SA doesn't have 'Storage Read' scope, it can only read
public files.
2019-02-15 11:00:35 -08:00
Ben Moss
34ac4d9ee9 Update deprecated links 2019-02-15 09:13:07 -05:00
Kubernetes Prow Robot
808f2cf0ef
Merge pull request #72525 from justinsb/owners_should_not_be_executable
Remove executable file permission from OWNERS files
2019-02-14 23:55:45 -08:00
Nguyen Hai Truong
848da13359 Adding '/usr/bin/env bash'
This commit aims to add '/usr/bin/env bash' as a shebang line
to indicates scripts use bash shell for interpreting.

Signed-off-by: Nguyen Hai Truong <truongnh@vn.fujitsu.com>
2019-02-14 19:18:49 -08:00
Nguyen Quang Huy
ac8466444c Fix incorrect influxdb yamle file
Remove redundant attribute in container declaration
2019-02-14 14:26:05 +07:00
SataQiu
78e272a927 fix shellcheck failures on kube-down.sh kubeadm.sh get-build.sh 2019-02-14 15:12:08 +08:00
Kubernetes Prow Robot
6f6f8bdfcc
Merge pull request #73822 from justinsb/renamed_set_node_image
e2e upgrade test: rename functions to match f0f7829934
2019-02-13 19:06:20 -08:00
Kubernetes Prow Robot
b9072c3fe7
Merge pull request #73984 from yujuhong/find-node-tar
Add path in find-tar for locating node binary tarball
2019-02-13 14:32:26 -08:00
Blake
e51c9025ac Lowers the default nodelocaldns denial cache TTL
Similar to `--no-negcache` on dnsmasq, this prevents issues which poll DNS for orchestration such as operators with StatefulSets. It can also be very confusing for users when negative caching results in a change they just made seeming to be broken until the cache expires. This assumes that 5 seconds is reasonable and will still catch repeated AAAA negative responses. We could also set the denial cache size to zero which should effectively fully disable it like dnsmasq in kube-dns but testing shows this approach seems to work well in our (albeit small) test clusters.
2019-02-13 13:23:53 -08:00
Kubernetes Prow Robot
812016fa23
Merge pull request #73818 from gnufied/add-e2e-for-no-expand
add e2e test when expansion is disabled
2019-02-13 12:16:09 -08:00
Kubernetes Prow Robot
aefd281143
Merge pull request #73983 from ixdy/update-bazel-deps
Update repo-infra, bazel-skylib, and rules_docker dependencies
2019-02-13 11:00:08 -08:00
Hemant Kumar
7d823e5df0 also remove slow tag from resizing tests 2019-02-13 10:48:49 -05:00
Kubernetes Prow Robot
40c91a0951
Merge pull request #74001 from mm4tt/logexporter_version_bump
Start using new version of logexporter.
2019-02-13 04:18:38 -08:00
Matt Matejczyk
d7d46013cb Start using new version of logexporter. 2019-02-13 08:52:04 +01:00
Yu-Ju Hong
0a68740d08 Add path in find-tar for locating node binary tarball 2019-02-12 18:15:17 -08:00
Jeff Grafton
e216995ef1 Update repo-infra, bazel-skylib, rules_docker, and rules_go dependencies
Also require bazel 0.18.0+
2019-02-12 17:55:10 -08:00
Peter Hornyack
063725230d Delete RDP firewall rule during kube-down.
This rule is only created if the cluster has one or more Windows nodes,
but delete-firewall-rules() ignores firewall rule arguments that do not
exist so it's safe to always attempt to delete this rule.
2019-02-12 15:19:16 -08:00
Kubernetes Prow Robot
aa00afe231
Merge pull request #73649 from ojmhetar/coredns-priorityclass
Add priority class to CoreDNS pods
2019-02-11 22:55:45 -08:00
Jiaying Zhang
52e92ab4b9 Update nvidia-gpu-device-plugin addon.
This includes changes from GoogleCloudPlatform/container-engine-accelerators#102
2019-02-11 15:52:33 -08:00
Yu-Ju Hong
1bba009689 Fix setting NODE_ARCH and NODE_PLATFORM 2019-02-11 13:55:44 -08:00
Kubernetes Prow Robot
b50c643be0
Merge pull request #73540 from rlenferink/patch-5
Updated OWNERS files to include link to docs
2019-02-08 09:05:56 -08:00
Krzysztof Siedlecki
bc42602024 adding handling for use_custom_instance_list in dump_nodes_with_logexporter 2019-02-08 14:02:06 +01:00
patc
0e219f4caa boilerplate fix 2019-02-07 21:12:46 -08:00
Kubernetes Prow Robot
a7966022d7
Merge pull request #73714 from tallclair/debian-base
Bump debian-* base image versions to latest
2019-02-07 19:44:44 -08:00
Justin SB
28c34d8d71
e2e upgrade test: rename functions to match f0f7829934
These functions were renamed in
f0f7829934, but cluster/gce/upgrade.sh
was missed.
2019-02-07 13:27:34 -05:00
Kubernetes Prow Robot
a0aa22226e
Merge pull request #73813 from wojtek-t/fix_kubemark_nodes
Fix kubemark windows num nodes
2019-02-07 07:12:41 -08:00
wojtekt
482e307406 Fix kubemark windows num nodes 2019-02-07 14:14:41 +01:00
Benjamin Elder
bccf95b10c add bentheelder to reviewers 2019-02-06 16:26:51 -08:00
Matt Matejczyk
5e6171790b Propagate dump_systemd_journal to logexporter job.
Log exporter changes have been made in
https://github.com/kubernetes/test-infra/pull/11121 and new version has
been pushed in https://github.com/kubernetes/test-infra/pull/11149
2019-02-06 15:49:29 +01:00
Jorge O. Castro
522a34f1d7 Remove inactive maintainers
Signed-off-by: Jorge O. Castro <jorgec@vmware.com>
2019-02-05 09:45:39 -05:00
Matt Matejczyk
4dcc017d7a Propagate API_SERVER_TEST_LOG_LEVEL in cluster/gce/util.sh 2019-02-05 10:30:17 +01:00
Roy Lenferink
b43c04452f Updated OWNERS files to include link to docs 2019-02-04 22:33:12 +01:00
Tim Allclair
1b9d0c1094 Bump debian-* base image versions to latest 2019-02-04 11:58:51 -08:00
ShivangGoswami
2866b1a3b8 Cleanup: Audit log and error capitalization 2019-02-04 10:59:34 +05:30
Matt Matejczyk
35543f8989 Allow dumping full systemd journal in log-dump.sh.
The feature is gated behind a newly introduced 'dump-systemd-journal' flag.
We want to dump the full systemd journal in our scalability performance tests.
2019-02-03 21:28:37 +01:00
Ojas M
bb9c865d47 Add priority class to CoreDNS pods 2019-02-01 12:56:48 -08:00
Kubernetes Prow Robot
556c0b8593
Merge pull request #73627 from mborsz/heapster
Fix typo in create-heapster-node
2019-02-01 07:44:48 -08:00
Kubernetes Prow Robot
b1eae78fc7
Merge pull request #73610 from rajansandeep/coredns1.3.1
Bump CoreDNS version to 1.3.1
2019-02-01 06:32:11 -08:00
ramnar
61f8b9e440 Bug fix 72757 2019-02-01 19:37:51 +05:30
Maciej Borsz
afeabe99b7 Fix typo in create-heapster-node 2019-02-01 11:04:23 +01:00
Kubernetes Prow Robot
244795a06a
Merge pull request #73442 from pjh/gce-windows-cluster
Update cluster/gce/ scripts to support Windows nodes.
2019-01-31 18:20:37 -08:00
Sandeep Rajan
aa11f6c298 Bump CoreDNS version to 1.3.1 2019-01-31 16:55:02 -05:00
Kubernetes Prow Robot
46fc4dd96a
Merge pull request #73577 from wojtek-t/remove_vmodule
Remove vmodule from apiserver to reduce lock contention
2019-01-31 04:59:42 -08:00
wojtekt
3032d92736 Remove vmodule from apiserver to reduce lock contention 2019-01-31 10:53:44 +01:00
Kubernetes Prow Robot
38d12df696
Merge pull request #73450 from liggitt/update-cluster-proportional-autoscaler
Update cluster-proportional-autoscaler to 1.4.0 to use apps/v1
2019-01-30 20:25:52 -08:00
Peter Hornyack
f0f7829934 Update cluster/gce scripts to support Windows nodes. 2019-01-30 19:49:07 -08:00
Kubernetes Prow Robot
16000e3af7
Merge pull request #73220 from yujuhong/gce-os-labels
GCE: update addon DaemonSets to select node OS
2019-01-29 18:22:21 -08:00
Kubernetes Prow Robot
c501d464af
Merge pull request #73267 from rajansandeep/proxytoforward
Use forward plugin instead of proxy plugin in the default configuration of CoreDNS
2019-01-29 11:32:28 -08:00
Matt Matejczyk
12904ac911 Tune suggested master disk sizes for big clusters.
Looks like the get-master-root-disk-size() and get-master-disk-size() functions didn't anticipate
clusters bigger than 2K nodes.

In https://github.com/kubernetes/kubernetes/issues/72976 we found out
that 100GB may be not enough for large clusters (5K nodes) when it comes
to master root disk size.

Updating both get-master-root-disk-size() and get-master-disk-size() to
make them consistent and match cluster sizes with get-master-size()
function.
2019-01-29 10:48:08 +01:00
patc
64918cc2b4 update makefiles to use cloud build and update README 2019-01-28 22:44:44 -08:00
Jordan Liggitt
01434acc66 Update cluster-proportional-autoscaler to 1.4.0 to use apps/v1 2019-01-29 00:45:21 -05:00
Kubernetes Prow Robot
d54716338a
Merge pull request #73302 from rajansandeep/prometheusport
Add metrics port to CoreDNS service
2019-01-25 12:04:37 -08:00
Sandeep Rajan
e9220dd408 add prometheus port 2019-01-25 11:29:03 +05:30
Kubernetes Prow Robot
7d91e1223d
Merge pull request #73293 from prameshj/nodelocal-update
Modify nodelocaldns yaml to include updateStrategy and xtables.lock
2019-01-24 20:07:57 -08:00
Kubernetes Prow Robot
0210c0d869
Merge pull request #73253 from phenixblue/improve-syntax-for-shell-script
Updates to eliminate shellcheck failures - kubernetes/cluster/centos
2019-01-24 17:46:43 -08:00
Kubernetes Prow Robot
d306d68a36
Merge pull request #72978 from liggitt/addon-changelog
Update addon-manager changelog/image
2019-01-24 16:30:00 -08:00
Pavithra Ramesh
9611b112eb Add xtables.lock file to mounts
nodelocaldns needs to use the same iptables lock file to avoid
contention with other entities modifying iptables rules.
2019-01-24 13:21:06 -08:00
Joe Searcy
e72a683f82 Updates to eliminate shellcheck failures in #72956
Extend quotes to full filepath strings

Fixes for reviewers comments
2019-01-24 15:57:26 -05:00
Kubernetes Prow Robot
c21f60f862
Merge pull request #73268 from wojtek-t/better_scale_inflights
Better scale max-inflight request limits to correlate them with master VM size
2019-01-24 10:37:25 -08:00
wojtekt
d911ebbc3f Correlate max-inflight values in GCE with master VM sizes 2019-01-24 15:13:36 +01:00
Sandeep Rajan
c346ae1e49 Use forward plugin instead of proxy in the default configuration 2019-01-24 17:28:55 +05:30
Kubernetes Prow Robot
9ce03717a9
Merge pull request #73229 from yujuhong/append-owner
GCE: add yujuhong to OWNERS
2019-01-24 02:56:29 -08:00
danielqsj
cd5e658518 fix shellcheck in cluster/local 2019-01-24 18:06:55 +08:00
Kubernetes Prow Robot
b9631a881f
Merge pull request #73231 from liggitt/add-on-arch-build
Enable multi-arch build for add-on manager
2019-01-23 16:19:35 -08:00
Jordan Liggitt
af66376960 Enable multi-arch build for add-on manager 2019-01-23 18:08:09 -05:00
Yu-Ju Hong
2edd3e3f52 GCE: add yujuhong to OWNERS 2019-01-23 14:46:29 -08:00
Kubernetes Prow Robot
baaaa15fdf
Merge pull request #69940 from MarcPow/master
Bind coredns containers to  linux nodes to avoid Windows scheduling
2019-01-23 12:19:53 -08:00
Yu-Ju Hong
9c892243f6 GCE: update addon DaemonSets to select node OS
These DaemonSets supports only Linux today, so this change updates the
specs to reflect this limitation. The labels have recently been promoted
to GA. Using the beta labels for now until node-master version skew
problem no longer exists.
2019-01-23 09:01:40 -08:00
patc
7f873f23b9 multi stage dckerfile builds discovery app and ES image 2019-01-23 00:01:58 -08:00
Humble Devassy Chirammal
2651c72166 This patch consists of various corrections. (#73060)
* This patch consists of various corrections.

*) Remove unwanted `else` code block
*) Adjust variable intialization.
*) Correct error strings.
*) Use recommended variable increment method.

Signed-off-by: hchiramm <hchiramm@redhat.com>

* Remove cluster/images/cluster-version-monitor from hack/.golint_failures.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2019-01-22 12:28:59 -08:00
Kubernetes Prow Robot
b6fb1572d8
Merge pull request #72861 from BenTheElder/slightly-less-bash-fire
fix bugs in get-kube scripts
2019-01-18 18:00:28 -08:00
Pavithra Ramesh
960705ac98 Add updateStrategy section for nodelocaldns 2019-01-18 16:40:01 -08:00
Kubernetes Prow Robot
0713f29c28
Merge pull request #72062 from jpbetz/gce-logrotate-check-interval
Perform GCE master log rotation check every 5 minutes
2019-01-16 14:45:22 -08:00
Benjamin Elder
09f48a78e1 fix get-kube.sh 2019-01-16 14:29:17 -08:00
Jordan Liggitt
df97217f7f Update addon-manager changelog/image 2019-01-16 13:26:39 -05:00
Kubernetes Prow Robot
d95b9f16d1
Merge pull request #70144 from wenjiaswe/etcdKasTls
Add mTLS encription between etcd and kube-apiserver in GCE
2019-01-16 02:51:06 -08:00
Jordan Liggitt
747f1f6b94 Bump kubectl in addon-manager 2019-01-15 16:36:04 -05:00
Benjamin Elder
a901dd3ed3 fix get-kube-local.sh 2019-01-12 10:29:29 -08:00
Benjamin Elder
b7ab09f572 fix get-kube-binaries.sh shellcheck lints 2019-01-12 09:48:32 -08:00
Kubernetes Prow Robot
7319aced08
Merge pull request #71180 from monotek/fluentd-elasticsearch
fluentd-elasticsearch - update fluentd to 1.3.3 & added filter_parser for json fields in es
2019-01-12 00:24:11 -08:00
Justin SB
dd19b923b7
Remove executable file permission from OWNERS files 2019-01-11 16:42:59 -08:00
Tim Allclair
485b21e8cb Fix kube-proxy PodSecurityPolicy RoleBinding namespace 2019-01-09 17:57:15 -08:00
André Bauer
273fa998f7 updated fluentd to 1.3.3 & gem updates 2019-01-08 20:53:26 +01:00
Jeffrey Sica
ea9500956c update OWNERS so it isn't single threaded. 2019-01-07 19:36:45 -05:00
Wenjia Zhang
c17233c41c add mTLS encription between etcd and kube-apiserver in GCE 2019-01-07 13:52:20 -08:00
Kubernetes Prow Robot
815acf7d99
Merge pull request #72446 from Huang-Wei/runtimclass-crd-print
Print additional columns for RuntimeClass CRD
2019-01-05 08:28:35 -08:00
Kubernetes Prow Robot
4dc40aabfb
Merge pull request #72495 from liggitt/bump-dashboard
Bump dashboard to v1.10.1
2019-01-05 07:18:09 -08:00
Kubernetes Prow Robot
a938f8b25e
Merge pull request #72243 from cezarygerard/patch-1
[GCP] Update scaler-deployment.yaml CPU_LIMITS
2019-01-05 05:08:15 -08:00
Jordan Liggitt
1b0b4d6a21 Bump dashboard to v1.10.1 for CVE-2018-18264 2019-01-02 15:19:39 -05:00
Ben Kochie
a1bead0da2
Adjust node_exporter CPU params
The node_exporter CPU use is bursty, as it needs a bit of CPU at scrape time. Don't set a CPU limit to avoid collection stalls.

Set the request to 100m to more closely match the typical max core needs.
2019-01-02 10:37:55 +01:00
Wei Huang
980684ac02
Print additional columns for RuntimeClass CRD 2018-12-30 14:49:28 -08:00
Kubernetes Prow Robot
9cdfdba14c
Merge pull request #71924 from yujuhong/node-binaries
GCE: enable downloading and staging of the node binaries
2018-12-28 18:07:26 -08:00
Han Kang
e9a39533c3 fail faster for readiness checks 2018-12-27 16:17:02 -08:00
gaorong
f745dd2881 fix kubemark makefile 2018-12-27 21:57:53 +08:00
Jordan Liggitt
d2c1fdbcfa Fixup apps/v1 addon manifests 2018-12-26 15:19:01 -05:00
André Bauer
dea164fda8 removed plugin dir creation as no plugin is installed 2018-12-21 00:21:21 +01:00
André Bauer
7b2651429a removed curl instalation as its not needed anymore 2018-12-21 00:20:49 +01:00
André Bauer
c33b5b60d1 removed fabric8 json plugin & replaced with fluetnds build in filter_parser
Signed-off-by: André Bauer <monotek23@gmail.com>
2018-12-21 00:07:56 +01:00
Cezary Zawadka
1affe568e9
replace single quotes with double quotes in yaml 2018-12-20 15:23:41 +01:00
Jordan Liggitt
cc680273e8 Change add-on manifests to apps/v1 2018-12-19 17:30:59 -05:00
Cezary Zawadka
7b3946776c
Update scaler-deployment.yaml CPU_LIMITS
setting CPU_LIMITS to '1' fixes the following log appearing every 60 seconds:
Running: kubectl set resources -n kube-system ds fluentd-gcp-v3.1.0 -c fluentd-gcp --requests=cpu=100m,memory=200Mi --limits=cpu=1000m,memory=500Mi
error: info: {extensions v1beta1 daemonsets} "fluentd-gcp-v3.1.0" was not changed

this PR does not change scaler's behaviour, pods are scaled correctly despite error in the logs
2018-12-19 21:00:22 +01:00
Yu-Ju Hong
62db510fe0 Allow setting KUBERNETES_NODE_ARCH to download node binaries 2018-12-19 10:25:34 -08:00
Maciej Borsz
2aee491bf8 Fix detect_node_failures for gke 2018-12-19 08:14:22 +01:00
Joe Betz
1ba05d51a6 Perform GCE log rotation check every 5 minutes 2018-12-18 10:13:41 -08:00
Maciej Borsz
325511d0ab Check if INSTANCE_GROUPS is empty in detect_node_failures. 2018-12-18 11:59:11 +01:00
Maciej Borsz
8e879db938 Revert "Revert "Check for hostError and automaticRestart when test finishes.""
This reverts commit 047aa25484.
2018-12-18 11:57:03 +01:00
Kubernetes Prow Robot
cf813b247d
Merge pull request #71977 from rramkumar1/kube-dns-ordering
DNS service ordering for addon manager
2018-12-18 01:47:49 -08:00
Kubernetes Prow Robot
12be140dcd
Merge pull request #71094 from dekkagaijin/update-concealment
bump metadata-proxy to v0.1.11, update tests & test image
2018-12-17 17:48:40 -08:00
André Bauer
dd50d00c51 updated fluentd to 1.3.2 2018-12-17 23:44:26 +01:00
André Bauer
9da7a189b9 Merge remote-tracking branch 'upstream/master' into fluentd-elasticsearch 2018-12-17 23:40:25 +01:00
wojtekt
fc346b2086 Allow for configuring etcd servers addresses in kubemark 2018-12-13 11:50:49 +01:00
Rohit Ramkumar
bc44940835 Modify dns addons dir to prepend 0 on dir name. Ensures proper ordering upon creation by addon manager 2018-12-12 13:15:08 -08:00
Kubernetes Prow Robot
650bfef62d
Merge pull request #71976 from prameshj/patch-1
Update README.md
2018-12-12 05:33:58 -08:00
prameshj
501eba8745
Update README.md 2018-12-11 17:20:57 -08:00
André Bauer
2c48c6fe7a
added monotek to fluentd-elasticsearch OWNERS file 2018-12-11 19:52:39 +01:00
André Bauer
0da558149c updated to kibana 6.5.2 2018-12-11 16:40:13 +01:00
Yu-Ju Hong
f87fcf6ce8 GCE: enable downloading and staging of the node binaries
Currently, only kubernetes-server-linux-<arch>.tar.gz will be downloaded
and staged for tests. It is not possible to test a cluster where the
platform/arch of the nodes differs from that of the master
control-plane. This changes allows downloading and staging node
binaries, in addition to the existing server binaries.
2018-12-10 16:58:44 -08:00
Kubernetes Prow Robot
b18660eb6c
Merge pull request #71774 from prameshj/fix-yaml
Fix labelname in nodelocaldns yaml
2018-12-08 08:43:30 -08:00
Satyadeep Musuvathy
6e5542a436 Include BGPConfiguration
Needed for calico 2.x to 3.x upgrade.
2018-12-07 15:30:47 -08:00
Pavithra Ramesh
567e79a3ac Fix labelname in nodelocaldns yaml 2018-12-05 23:06:03 -08:00
Matt Brannock
d99422884b Create managed instance groups for nodes in parallel 2018-12-04 13:56:52 -08:00
Kubernetes Prow Robot
a9b69dc381
Merge pull request #71615 from jpbetz/etcd-3.3.10-0-image
Update default etcd server to 3.3.10 for kubernetes 1.14
2018-12-04 02:54:34 -08:00
Kubernetes Prow Robot
4206790029
Merge pull request #71522 from wangzhen127/npd
Use Node-Problem-Detector v0.6.0 on GCI
2018-12-03 15:47:08 -08:00
Joe Betz
862b945e5a Update default etcd server to 3.3.10 for kubernetes 1.13 2018-12-03 11:03:49 -08:00
Maciej Borsz
047aa25484
Revert "Check for hostError and automaticRestart when test finishes." 2018-11-30 17:55:27 +01:00
k8s-ci-robot
d460cb2cc2
Merge pull request #71456 from mborsz/hosterr
Check for hostError and automaticRestart when test finishes.
2018-11-30 01:19:48 -08:00
k8s-ci-robot
b4be951273
Merge pull request #70932 from caseydavenport/calico-v3.3
Update Calico to v3.3.1
2018-11-29 07:36:38 -08:00
k8s-ci-robot
e5326f22ea
Merge pull request #70471 from xichengliudui/fix181031
Fix some typos
2018-11-29 00:48:16 -08:00
Zhen Wang
29de74375a Use Node-Problem-Detector v0.6.0 2018-11-28 11:44:36 -08:00
Łukasz Osipiuk
6db2483e0b Update Cluster Autoscaler version to 1.13.0 2018-11-28 16:06:18 +01:00
k8s-ci-robot
414cfbd821
Merge pull request #71452 from losipiuk/lo/update-ca-version-1.13
Update Cluster Autoscaler version to 1.13.0-rc.2
2018-11-27 07:06:34 -08:00
Maciej Borsz
0514aa17a6 Check for hostError and automaticRestart when test finishes. 2018-11-27 15:13:56 +01:00
Łukasz Osipiuk
0fac5aaaad Update Cluster Autoscaler version to 1.13.0-rc.2 2018-11-27 12:47:42 +01:00
k8s-ci-robot
396271cf52
Merge pull request #70954 from qingling128/master
Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2.
2018-11-25 23:09:07 -08:00
k8s-ci-robot
2b0212de9c
Merge pull request #71206 from stlaz/enc_config_opt
Rename '--experimental-encryption-provider-config' to '--encryption-provider-config'
2018-11-21 11:30:12 -08:00
k8s-ci-robot
a19bf332de
Merge pull request #71124 from Random-Liu/make-fluentd-container-runtime-service-configurable
Make fluentd container runtime service configurable.
2018-11-21 07:49:42 -08:00
Jake Sanders
2a6dd3b854 bump metadata-proxy to v0.1.11, update tests & test image 2018-11-19 13:59:17 -08:00
André Bauer
14b208db26 prepared elasticsearch output plugin type_name for es 7.0.x 2018-11-19 19:30:21 +01:00
Sergei Orlov
21c1bb8830
kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'.
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-19 16:34:09 +01:00
André Bauer
303c6ce638 - updated fluentd to 1.3.0
- added filter_parse_json_field to restore removed functionality of kubernetes_metadata (https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter/issues/145)
- updated all gems to newest version
2018-11-18 11:37:54 +01:00
k8s-ci-robot
ca696fef26
Merge pull request #69848 from mikedanese/projadmission
migrate service account volume to a projected volume when BoundServiceAccountTokenVolumes are enabled
2018-11-16 22:46:23 -08:00
k8s-ci-robot
1e22f080ec
Merge pull request #67383 from stlaz/enc_config_promotion
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file
2018-11-16 16:31:30 -08:00
Mike Danese
8bcb178da3 explicitly set run as user/group in addons that set this config in their dockerfile 2018-11-16 19:32:44 +00:00
Mike Danese
98c468de8d update PSPs to allow projected volumes 2018-11-16 19:32:44 +00:00
k8s-ci-robot
14f55b4e2c
Merge pull request #71054 from logicalhan/liveness-delay
increase the liveness probe delay for GCE e2e tests to avoid premature teardown
2018-11-16 03:56:43 -08:00
Lantao Liu
1670b4089a Make fluentd container runtime service configurable. 2018-11-16 02:17:55 -08:00
k8s-ci-robot
ab261f1571
Merge pull request #70965 from prameshj/nodecache-readme
README for nodelocal dns cache
2018-11-15 23:52:45 -08:00
k8s-ci-robot
29eb75b2c5
Merge pull request #70868 from justinsb/coredns_like_kubedns_respect_taints
CoreDNS should not tolerate master taints
2018-11-15 23:52:27 -08:00
k8s-ci-robot
7f74b3ac57
Merge pull request #70799 from rajansandeep/coredns126
Update version of CoreDNS to 1.2.6
2018-11-15 23:52:17 -08:00
Han Kang
e1d9128978 increase the liveness probe delay for GCE e2e tests, to avoid premature teardown 2018-11-15 10:21:10 -08:00
Pavithra Ramesh
d73466fe55 Add README for nodelocaldns 2018-11-14 15:45:14 -08:00
k8s-ci-robot
ca338b91f5
Merge pull request #70676 from logicalhan/exclude-checks
add ability to disable health checks on kube-apiserver for healthz using query-params
2018-11-14 11:37:48 -08:00
k8s-ci-robot
79dab474c0
Merge pull request #70555 from prameshj/nodelocaldnscache
Support running a nodelocal dns cache
2018-11-14 00:18:56 -08:00
Pavithra Ramesh
6d7c5e90ed Removed .salt template , using .sed template
Removed default config options from yaml.
Removed unused yaml files
2018-11-13 18:33:34 -08:00
Han Kang
895dd4187b exclude etcd from the liveness health check for the kube-apiserver on GCE 2018-11-13 14:48:56 -08:00
Slava Semushin
c21cb548e6
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file.
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-13 14:05:21 +01:00
Pavithra Ramesh
73b548db06 Support running a nodelocal dns cache
This change includes the yaml files and gce startup script changes
to run this addon. It is disabled by default, can be enabled by setting
KUBE_ENABLE_NODELOCAL_DNS=true
An ip address is required for the cache instance to listen for
requests on, default is a link local ip address of value 169.254.25.10

addressed review comments, updated image location
Picked a different prometheus port so stats port is not same as the
coredns deployment

Removed the nodelocaldns-ready label.
Set memory limit to 30Mi
2018-11-12 14:54:20 -08:00
Mike Danese
f3611a6264 always enable TokenRequest in GCE kube-up.sh 2018-11-12 11:24:52 -08:00
Ling Huang
02b7ed3291 Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2. 2018-11-12 13:21:44 -05:00
Casey Davenport
fc40cce94b Update Calico to v3.3.1 2018-11-11 16:36:48 -08:00
Davanum Srinivas
954996e231
Move from glog to klog
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
2018-11-10 07:50:31 -05:00
k8s-ci-robot
c8b3d0cf82
Merge pull request #70797 from mborsz/addon
Update addon-manager to 1.8.4
2018-11-09 14:31:37 -08:00
k8s-ci-robot
e133ab274d
Merge pull request #70515 from davidz627/feature/csiNodeInfo
Add explicit "Installed" field to CSINodeInfo and change update semantics
2018-11-09 06:42:09 -08:00
Justin SB
0d57176f40
CoreDNS should respect user taints
Otherwise users will be surprised when CoreDNS starts running on their
masters, where kube-dns did not.

Issue #70851
2018-11-09 09:25:35 -05:00
Maciej Borsz
2ca6334d45 Update addon-manager to 1.8.4 2018-11-09 08:27:25 +01:00
David Zhu
06f3b26012 Change semantics of driver install and uninstall in CSINodeInfo to use new fields. 2018-11-08 19:45:01 -08:00
Sandeep Rajan
4161277b9b update version of CoreDNS to 1.2.6 2018-11-08 08:53:33 -05:00
saad-ali
4a4176db42 Fix CSI CRD installation for Alpha clusters 2018-11-07 19:46:54 -08:00
k8s-ci-robot
224448b858
Merge pull request #70754 from mikedanese/cluster-old
remove unused python-image from cluster/addons
2018-11-07 14:26:42 -08:00
k8s-ci-robot
9844baa2ff
Merge pull request #70696 from loburm/remove_cluster_autoscaler_spam
Filter out spammy audit logs from cluster autoscaler.
2018-11-07 12:53:19 -08:00
Mike Danese
586485d8c9 remove unused python-image from cluster/addons 2018-11-07 10:38:16 -08:00
k8s-ci-robot
7fe59165b6
Merge pull request #70193 from saad-ali/csiCRDAddon
Register CSI CRDs as addon
2018-11-06 23:55:56 -08:00
saad-ali
a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
Marian Lobur
433be3410a Filter out spammy audit logs from cluster autoscaler. 2018-11-06 14:44:02 +01:00
k8s-ci-robot
123d0a74ef
Merge pull request #70610 from zhihuiwu/min-master-nodes
Fix a wrong judgement in elasticsearch_logging_discovery.go
2018-11-05 12:58:16 -08:00
zhihui wu
eed65f75f9 Modify the judgement condtion in elasticsearch_logging_discovery.go
The number of endpoints's addresses can be greater or equal to the
value of "MINIMUM_MASTER_NODES".

Signed-off-by: zhihui wu <wu.zhihui1@zte.com.cn>
2018-11-03 14:12:03 +08:00
Mike Danese
8c1e928501 gce: move more stuff into main and refactor detect whether configure-helpers.sh was sourced 2018-10-31 10:07:50 -07:00
xichengliudui
8477389e7c Fix some types
Fix some typos
2018-10-31 04:05:25 -04:00
Marc Power
eb818f95d1 Bind coredns containers to linux nodes to avoid Windows scheduling 2018-10-26 11:47:17 -07:00
Jeff Grafton
7b93b50e40 Update to use kube-addon-manager:v8.9 2018-10-24 16:19:51 -07:00
Jeff Grafton
003404685d Update to use debian-iptables v11.0 and debian-hyperkube-base 0.12.0 2018-10-24 16:18:53 -07:00
k8s-ci-robot
4cbeddd7b2
Merge pull request #70094 from mwwolters/prepare-log-file-args
Changed prepare-log-file to take args for setting uid/gid for log files.
2018-10-24 12:32:53 -07:00
k8s-ci-robot
73c1a92bd9
Merge pull request #69152 from mkumatag/fix_manifest_push
Purge the manifest after the push
2018-10-24 01:06:10 -07:00
k8s-ci-robot
cb4e809fe9
Merge pull request #68082 from aldarionsevero/master
fix typo: result is of that -> result of that
2018-10-23 21:22:23 -07:00
Mark Wolters
c9d34073f2 Changed prepare-log-file to take args for setting uid/gid for log files. 2018-10-19 11:57:26 -07:00
Jeff Grafton
7a8696c331 Update to debian-base 0.4.0
Additionally, update the addon-manager to use kubectl v1.11.3.
2018-10-19 11:13:28 -07:00
k8s-ci-robot
12f726c33a
Merge pull request #68012 from wiremind/fluentd-concat
Fluentd: concatenate long logs
2018-10-18 22:57:06 -07:00
k8s-ci-robot
52de5c55e3
Merge pull request #69883 from chrisohaver/coredns-default
Make CoreDNS default in kubeup and update CoreDNS version/manifest in kubeup and kubeadm
2018-10-18 18:39:12 -07:00
Chris O'Haver
0cfb4bbe2c make coredns kubeup default, update manifest 2018-10-18 14:52:38 -04:00
k8s-ci-robot
7de4c007f7
Merge pull request #69858 from losipiuk/jobs-rbac
Grant permissions for batch/job to cluster-autoscaler
2018-10-17 01:22:14 -07:00
k8s-ci-robot
2c738b9861
Merge pull request #63618 from tallclair/addon-resizer
Fix addon-resizer version - 1.8.1
2018-10-16 20:39:44 -07:00
k8s-ci-robot
a630801eec
Merge pull request #69832 from ixdy/no-qemu-in-cross-build
Move hyperkube symlink creation to base image and re-enable building of conformance image
2018-10-16 19:26:16 -07:00
k8s-ci-robot
46ad1ed00b
Merge pull request #69757 from Huang-Wei/e2e-unbound-var
fix issue that e2e script exits due to unbound variables
2018-10-16 17:53:11 -07:00
Cédric de Saint Martin
def00298c3 Fluentd: concatenate long logs (>16KB) which have been splitted by Docker into several lines.
See https://github.com/kubernetes/kubernetes/issues/52444.

Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr>
2018-10-16 23:44:37 +02:00
Cédric de Saint Martin
46c5c8e20a fluent-es-image: sort plugins in Gemfile.
Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr>
2018-10-16 23:44:37 +02:00
Cédric de Saint Martin
079136fd59 fluent-es-image: add fluentd-plugin-concat to gemfile.
Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr>
2018-10-16 23:44:37 +02:00
Jeff Grafton
c761f779fc Base conformance image on debian-hyperkube-base:0.11.0 and reenable by default 2018-10-16 14:01:23 -07:00
Jeff Grafton
2d46adaec4 Use debian-hyperkube-base:0.11.0 and remove qemu registration 2018-10-16 14:01:23 -07:00
Łukasz Osipiuk
80e66596a5 Grant permissions for batch/job to cluster-autoscaler 2018-10-16 10:46:46 +02:00
Tim Allclair
0057624bde Update heapster eventer addon-resizer to 1.8.3 2018-10-15 10:47:25 -07:00
Tim Allclair
8a50e7ed4e Add kube-state-metrics nanny configuration 2018-10-15 10:46:19 -07:00
Tim Allclair
7b2bc84259 Fix addon-resizer version - 1.8.3 2018-10-15 10:46:19 -07:00
k8s-ci-robot
8928e70af9
Merge pull request #69737 from qingling128/master
Add tolerations for Stackdriver Logging and Metadata Agents.
2018-10-15 05:43:41 -07:00
k8s-ci-robot
d20912c83f
Merge pull request #69728 from SataQiu/fix-2018101201
fix some typos
2018-10-13 21:47:08 -07:00
k8s-ci-robot
dad536b41f
Merge pull request #69747 from ixdy/bazel-container-rules
Bazel: stop using deprecated docker_ rules and turn on stamping
2018-10-13 18:18:47 -07:00
k8s-ci-robot
8e4f7812b8
Merge pull request #69368 from dims/upstream-heptio-kube-conformance
upstream heptio/kube-conformance
2018-10-12 19:13:33 -07:00
Wei Huang
e1af0c5fb1
fix issue that e2e script exits due to unbound variables 2018-10-12 17:54:20 -07:00
Jeff Grafton
c34cbb2f70 Bazel: stop using deprecated docker_ rules and turn on stamping 2018-10-12 13:16:38 -07:00
Davanum Srinivas
6830bad2a6
upstream heptio/kube-conformance
Pick up some code from https://github.com/heptio/kube-conformance
Fix up build scripts for the new conformance image
Fix Header template and Copyright to make verify job go green
update README and add execute permissions for script

Change-Id: Ib6509acd816cc2fb3a516bfb8e0ff9e32bff8f79
2018-10-12 15:33:15 -04:00
k8s-ci-robot
1e4bab3376
Merge pull request #69186 from jpbetz/cluster-images-etcd-owners
Add jpbetz and wenjiaswe to cluster/images/etcd OWNERS
2018-10-12 11:19:49 -07:00
Ling Huang
85d8b5069b Add tolerations for Stackdriver Logging and Metadata Agents. 2018-10-12 11:15:33 -04:00
SataQiu
e1d5b97f3f fix some typos 2018-10-12 22:29:18 +08:00
k8s-ci-robot
50f574f360
Merge pull request #68288 from loburm/truncating_backend
Enable audit logging truncating backend.
2018-10-11 18:26:34 -07:00
k8s-ci-robot
1aef63124b
Merge pull request #68920 from qingling128/master
Enable insertId generation, and update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s.
2018-10-11 13:44:51 -07:00
k8s-ci-robot
3d7d35ee8f
Merge pull request #68345 from smelchior/storageclass
change default storage class annotation for all storage-class addons
2018-10-10 19:08:06 -07:00
k8s-ci-robot
6b9de2bdc7
Merge pull request #69388 from cheftako/GetClusters
Differentiate multizone zonal from Regional Cluster.
2018-10-10 17:56:56 -07:00
k8s-ci-robot
a8c7a3fd5e
Merge pull request #69322 from jpbetz/etcd-client-3.3.9
Update etcd client to 3.3 for 1.13
2018-10-10 17:56:46 -07:00
k8s-ci-robot
b92cf0f329
Merge pull request #69452 from htkuan/fix/addons-elasticsearch-version
Update elasticsearch to v6.3.0
2018-10-10 16:46:21 -07:00
Daniel Kłobuszewski
299c7750ca
Add x13n to metadata-agent manifest OWNERS 2018-10-10 08:33:50 +02:00
Walter Fender
8b3099ced7 Differentiate multizone zonal from Regional Cluster.
Fixed go format and unit test.
Collapse lines.
Switched to using regional throughout and added warning for HA Zonal.
2018-10-09 11:28:22 -07:00
Ling Huang
d8da1baf48 Enable insertId generation, update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s and add priorityClassName for Metadata Agent. 2018-10-09 13:42:40 -04:00
k8s-ci-robot
4966faab36
Merge pull request #69522 from wojtek-t/fix_env_setup
Fix overwriting env variables in kube-apiserver manifest
2018-10-09 04:46:12 -07:00
k8s-ci-robot
4ba5db087a
Merge pull request #69550 from tallclair/runtimeclass-spec
Allow an empty "" runtimeHandler
2018-10-09 01:06:20 -07:00
Tim Allclair
db776ace25 Allow an empty "" runtimeHandler 2018-10-08 19:05:03 -07:00
Joe Betz
4263c75211 Update etcd client to 3.3.9 2018-10-08 13:34:34 -07:00
htkuan
1cdc9059ba Update elasticsearch to v6.3.0 2018-10-08 23:51:40 +08:00
wojtekt
3fdb5b92f4 Fix overwriting env variables in kube-apiserver manifest 2018-10-08 14:21:37 +02:00
Christoph Blecker
97b2992dc1
Update gofmt for go1.11 2018-10-05 12:59:38 -07:00
k8s-ci-robot
5602ab7761
Merge pull request #68379 from immutableT/kms-plugin-via-gke
Enable configure-helper.sh to support two scenarios for etcd level encryption: decryption and adding encryption to existing clusters.
2018-10-04 23:38:42 -07:00
immutablet
4bc62be0e6 Run kms-plugin in its own POD. 2018-10-04 09:19:57 -07:00
k8s-ci-robot
03494debe5
Merge pull request #69385 from bowei/update-owners
Update OWNERS files for GCE-related components
2018-10-04 07:51:36 -07:00
k8s-ci-robot
f758b4d148
Merge pull request #69338 from MrHohn/autoscaler-1.3.0
Bump cluster-proportional-autoscaler to 1.3.0
2018-10-03 15:21:41 -07:00
k8s-ci-robot
82a52de097
Merge pull request #68247 from awly/fetch-exec-plugin-license
Fetch gke-exec-plugin license file along with the binary
2018-10-03 15:21:31 -07:00
Bowei Du
61b6079d58 Update OWNERS files for GCE-related components 2018-10-03 10:52:43 -07:00
k8s-ci-robot
c1ad6e961a
Merge pull request #69337 from MrHohn/addon-manager-manifest-8.8
Bump addon-manager to v8.8
2018-10-03 04:44:17 -07:00
k8s-ci-robot
c520b2cbc9
Merge pull request #69120 from aledbf/defaultbackend
Update default backend image
2018-10-03 04:43:39 -07:00
k8s-ci-robot
957d7ce8dd
Merge pull request #68450 from jeefy/dashboard-v1.10.0
Update dashboard version to v1.10.0
2018-10-03 03:34:03 -07:00
Zihong Zheng
0750f8bb23 Bump cluster-proportional-autoscaler to 1.3.0
- Rebase docker image on scratch.
2018-10-02 11:48:51 -07:00
Zihong Zheng
81eae648cb Bump addon-manager to v8.8
- Rebase docker image on debian-base:0.3.2.
2018-10-02 11:43:40 -07:00
Bowei Du
ca5bdf388b Update defaultbackend to v1.5 2018-10-02 10:28:23 -07:00
k8s-ci-robot
bcb197e666
Merge pull request #69315 from MrHohn/addon-manager-debian-update
Update addon-manager to use debian-base:0.3.2.
2018-10-02 04:26:34 -07:00
k8s-ci-robot
da5730e883
Merge pull request #69033 from feiskyer/crictl-update
Update crictl to v1.12.0
2018-10-02 02:23:33 -07:00
Marian Lobur
3928818b64 Enable audit logging truncating backend. 2018-10-02 07:58:01 +02:00
Marian Lobur
5a118f9d2f Extract cpu requests to separate env variables. 2018-10-02 07:54:39 +02:00
k8s-ci-robot
bf130aa29c
Merge pull request #69051 from cadmuxe/change_netd_node_selector
update netd node selector label to cloud.google.com/gke-netd-ready
2018-10-01 18:04:14 -07:00
k8s-ci-robot
0d5c8c2325
Merge pull request #67912 from yliaog/e2e
"gcloud beta compute networks subnets" does not work with the latest gcloud release
2018-10-01 18:03:55 -07:00
Zihong Zheng
6b949c848a Update addon-manager to use debian-base:0.3.2. 2018-10-01 16:59:05 -07:00
k8s-ci-robot
2a544bc709
Merge pull request #68565 from vantuvt/vantuvt-patch-1
Bug fix - revert metrics-server base CPU resources back to 40 mCPU
2018-10-01 10:59:15 -07:00
Manuel Alejandro de Brito Fontes
f892a653cc
Update default backend image 2018-09-29 08:07:19 -03:00
Yu Liao
f4482e3abb "gcloud beta compute networks subnets" stopped working, fails with the
erros:  - The request did not match the specified API.
"gcloud compute networks subnets" works with the latest gcloud release.
2018-09-28 15:42:20 -07:00
Van Tu
d3b4f2dac4 Bug fix - revert metrics-server base CPU resources back to 40 mCPU
The reduction in base CPU resources resulted in a significant increase in
start times from ~30 second to 1-4 minutes.
2018-09-28 06:18:39 -04:00
Joe Betz
0a3bcb92be Add jpbetz and wenjiaswe to cluster/images/etcd OWNERS 2018-09-27 16:25:41 -07:00
Manjunath A Kumatagi
db0aaee57f Purge the manifest after the push 2018-09-27 18:58:16 +05:30
k8s-ci-robot
b113309057
Merge pull request #68837 from x13n/fluentd-gcp-scaler
Bump version of fluentd-gcp-scaler
2018-09-26 18:11:05 -07:00
Pengfei Ni
fa42ba649a Update crictl to v1.12.0 2018-09-26 09:15:10 +08:00
k8s-ci-robot
54dd6e4f14
Merge pull request #68592 from jingax10/calico_yaml_branch
Add serviceaccounts permission for ClusterRole, required by Calico v3.2.0+.
2018-09-25 14:41:11 -07:00
Koonwah Chen
dc57a69c4f update netd node selector label to cloud.google.com/gke-netd-ready 2018-09-25 14:03:33 -07:00
k8s-ci-robot
9c29560ac8
Merge pull request #68064 from gianrubio/fluentd-signal
fluentd doesn't receive the signal TERM
2018-09-25 03:52:00 -07:00
k8s-ci-robot
74e6ee1d34
Merge pull request #67174 from charrywanganthony/auditv1beta1Tov1_gce.sh
use v1 version of advanced audit policy in gce shell
2018-09-24 13:19:44 -07:00
k8s-ci-robot
95ab206e34
Merge pull request #68896 from ixdy/etcd-3.2.24-1
cluster/gce and test/: update etcd:3.2.24-0 image to etcd:3.2.24-1
2018-09-21 14:37:43 -07:00
k8s-ci-robot
9dc5bb56a6
Merge pull request #68492 from vishh/68372
Fix node label assignment for GCE k8s clusters.
2018-09-21 04:12:08 -07:00
k8s-ci-robot
d39102d92e
Merge pull request #68900 from MrHohn/kube-dns-1.14.13
Bump kube-dns to 1.14.13
2018-09-20 20:35:46 -07:00
Jeff Grafton
8d8faa3355 Remove etcd 3.2.18 from the etcd image 2018-09-20 13:05:53 -07:00
Jeff Grafton
3388e0ce5f Update to use etcd:3.2.24-1 image 2018-09-20 12:40:26 -07:00
Zihong Zheng
576d6e5c92 Bump kube-dns to 1.14.13
- Update Alpine base image to 3.8.1.
- Build multi-arch images correctly.
2018-09-20 12:36:02 -07:00
k8s-ci-robot
b33b0fb093
Merge pull request #68615 from loburm/revert_cpu_decrease
Revert "#67504: Decrease CPU requests of master components in two times."
2018-09-20 12:31:17 -07:00
k8s-ci-robot
d1111a57d9
Merge pull request #59664 from mkumatag/manifest_infra
Manifest kubernetes infra images
2018-09-19 20:07:26 -07:00
Jeff Grafton
76256cceff
Continue using go1.8.7 in etcd image 2018-09-19 17:01:08 -07:00
Jeff Grafton
6f9dfe56f1 Update etcd image revision 2018-09-19 16:48:50 -07:00
Francois Tur
5c20fff19d
Revert "Add DNS pod resource monitoring option" 2018-09-19 14:54:29 -04:00
k8s-ci-robot
ab02fd6f8a
Merge pull request #68683 from chrisohaver/trackdns
Add DNS pod resource monitoring option
2018-09-19 09:47:29 -07:00
Daniel Kłobuszewski
9454876318 Bump version of fluentd-gcp-scaler 2018-09-19 17:15:05 +02:00
k8s-ci-robot
95d3ce1578
Merge pull request #68739 from losipiuk/lo/ca-1.12
Update Cluster Autoscaler version 1.12.0
2018-09-19 06:22:04 -07:00
k8s-ci-robot
191949da4a
Merge pull request #68430 from prameshj/update-dns
Update kube-dns container images.
2018-09-18 23:41:31 -07:00
k8s-ci-robot
48203db09a
Merge pull request #68387 from Katharine/logdump-with-coverage
Add coverage profile retrieval to log dumps
2018-09-18 22:34:30 -07:00