github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
88,785 Commits 1 Branch 31 Tags 1,019 MiB
e64169d6b5
Commit Graph

3190 Commits

Author SHA1 Message Date
Sandeep Rajan
16191db353 skip deployment update if migration fails 2019-11-06 10:55:54 -05:00
Jianzhu Zhang
89dfd24483 added --reserved-cpus kubelet command option 2019-11-06 07:33:52 -05:00
Rostislav M. Georgiev
994df0d631 kubeadm: use versioned component configs 
This change removes dependencies on the internal types of the kubelet and
kube-proxy component configs. Along with that defaulting and validation is
removed as well. kubeadm will display a warning, that it did not verify the
component config upon load.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-06 14:15:57 +02:00
Haiwei Li
696734a772 use time.Until instead of t.Sub(time.Now()) 2019-11-05 17:20:34 +08:00
Kubernetes Prow Robot
529d5dd4b2
Merge pull request #84626 from hwdef/fix-staticcheck1 
cmd/kubeadm/app: fix staticcheck warning
 2019-11-01 10:21:40 -07:00
hwdef
eae3e3ce8c cmd/kubeadm/app: fix staticcheck warning 2019-11-01 10:39:56 +08:00
Kubernetes Prow Robot
01d20c689f
Merge pull request #84286 from bart0sh/PR0083-kubeadm-Token-remove-ObjectMeta 
kubeadm: remove ObjectMeta from output.BootstrapTooken
 2019-10-31 10:21:53 -07:00
Yassine TIJANI
3993c42431 propagate proxy env var to kube-proxy 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-30 16:18:43 +01:00
Kubernetes Prow Robot
e1d3cc74e5
Merge pull request #84329 from jingyih/update_etcd_server_to_3.4 
Update default etcd server to 3.4.3
 2019-10-30 02:30:52 -07:00
Sandeep Rajan
7074f28dd2 retain corefile when migration fails 2019-10-29 12:11:59 -04:00
Jingyi Hu
706cde51c5 Update default etcd server to 3.4.3 2019-10-28 18:29:37 -07:00
Kubernetes Prow Robot
28887de8cd
Merge pull request #84476 from neolit123/1.17-docker-19.03 
kubeadm-validators: bump the latest validated Docker version to 19.03
 2019-10-28 17:49:08 -07:00
Lubomir I. Ivanov
772e2e4e39 kubeadm-validators: bump the latest validated Docker version to 19.03 2019-10-28 22:24:46 +02:00
Lubomir I. Ivanov
7fa571bdb5 kubeadm: always add a flex volume path for the controller-manager 
Checking if the path exists before creating the volume is
problematic because the path will be created regardless
after the initial call to "kubeadm init" and once the CM Pod
is running.

Then on subsequent calls to "kubeadm init" or the "control-plane"
phase the manifest for the CM will be different.

Always mount this path, but also consider the user provided
flag override from ClusterConfiguration.
 2019-10-28 20:21:15 +02:00
Kubernetes Prow Robot
d379ab2697
Merge pull request #84288 from wojtek-t/cleanup_conversions_registrations 
Cleanup conversions registrations
 2019-10-25 22:53:22 -07:00
Kubernetes Prow Robot
46b33af8ef
Merge pull request #84309 from hypnoglow/remove-test 
kubeadm: remove commented test
 2019-10-25 13:03:51 -07:00
Wenjia Zhang
660b17d0ae Pin dependencies and update vendors 2019-10-24 14:09:24 -07:00
Wenjia Zhang
9ead9373f3 Resolve uncompatibility from update: etcd CAFile -> TrustedCAFIle 2019-10-24 14:09:24 -07:00
Wenjia Zhang
3b274fad2a Replace github.com/coreos/etcd by go.etcd.io/etcd 2019-10-24 14:09:24 -07:00
Igor Zibarev
c1381282a3 kubeadm: remove commented test 
Removes commented test TestInitConfigurationMarshallingFromFile
as requested per https://github.com/kubernetes/kubeadm/issues/1431
 2019-10-24 22:58:01 +03:00
wojtekt
7b6bcdf780 Autogenerated code 2019-10-24 20:21:00 +02:00
Ed Bartosh
ae95985908 kubeadm: remove ObjectMeta from output.BootstrapTooken 
metav1.TypeMeta is what needed to make a runtime object.
ObjectMeta is not needed and can be safely removed.
 2019-10-24 14:22:09 +03:00
Cristian Dima
da759609dc in pkg/controller/service rename service_controller.go to controller.go 2019-10-23 01:52:19 +03:00
Kubernetes Prow Robot
9fa1bc8003
Merge pull request #83422 from yastij/remove-ipallocator 
remove ipallocator in favor of k/utils net package
 2019-10-22 12:52:13 -07:00
Yassine TIJANI
f984b4c7a2 remove ipallocator in favor of k/utils net package 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-22 18:37:13 +02:00
Kubernetes Prow Robot
4b58ef0e14
Merge pull request #83950 from yastij/update-reset-cni 
stop removing cni directories as they aren't installed by kubeadm
 2019-10-17 03:19:02 -07:00
Kubernetes Prow Robot
1dc5235d0a
Merge pull request #84012 from neolit123/revert-83339-1.17-master-cert-rotation 
Revert "kubeadm: enable kubelet certificate rotation on primary CP nodes"
 2019-10-17 01:47:39 -07:00
Kubernetes Prow Robot
b4d3dc3718
Merge pull request #83932 from SataQiu/report-ca-expiration 
kubeadm: enhance certs check-expiration to show the expiration info of related CAs
 2019-10-16 20:54:51 -07:00
Lubomir I. Ivanov
30db92004a
Revert "kubeadm: enable kubelet certificate rotation on primary CP nodes" 2019-10-16 20:45:55 +03:00
Kubernetes Prow Robot
1086b5e5cb
Merge pull request #83949 from bart0sh/PR0082-kubeadm-use-strings-in-TestTokenOutput 
kubeadm: use strings in TestTokenOutput
 2019-10-16 09:36:25 -07:00
Yassine TIJANI
e591190cf2 stop removing cni directories as they aren't installed by kubeadm 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-16 17:07:13 +02:00
SataQiu
68f7c2ade9 kubeadm: enhance certs check-expiration to show the expiration info of related CAs 2019-10-16 22:52:01 +08:00
Kubernetes Prow Robot
cb3b715de2
Merge pull request #83804 from jpbetz/etcd-3_3_17_server 
Upgrade to etcd server 3.3.17
 2019-10-15 12:50:09 -07:00
Ed Bartosh
3dedaf440b kubeadm: use strings in TestTokenOutput 
Used strings instead of bytes in the TestTokenOutput test cases as
expected output is a plain text.
This should also simplify the data representation and the test code
a bit.
 2019-10-15 16:32:05 +03:00
Joe Betz
c92bd5e7b5 Upgrade to etcd server 3.3.17 2019-10-13 17:17:15 -07:00
Kubernetes Prow Robot
f0e1d394f1
Merge pull request #83661 from jfbai/fix-kubeadm-join 
Add warning when --certificate-key is set and --control-plane is not.
 2019-10-13 08:00:35 -07:00
Jianfei Bai
6dbf154d43 Add warning when --certificate-key is set and --control-plane is not. 2019-10-13 21:39:12 +08:00
Lubomir I. Ivanov
276665c1a0 kubeadm: add warning about 'upgrade apply/plan --config' 
The flag has been problematic and abused by users.
While perhaps its original purpose was to be able to feed
a new version of the control-plane it also made it possible
to apply modifications to the ClusterConfiguration object
in the cluster. The lack of a feature in kubeadm for reconfiguration
of running clusters resulted in users using this flag for
the same purpose.

While it works for certain scenarios like updating
a static Pod for this control-plane only, it can result in
unexpected behavior if the user has for example fed a node name
different than the host name, when originally they created this node.

kubeadm 1.16 introduced the "kustomize" feature that
is a potential replacement for this user demand.

Add warning that this flag should not be used.
 2019-10-11 00:21:41 +03:00
Kubernetes Prow Robot
6284c9ab52
Merge pull request #83720 from bart0sh/PR0080-kubeadm-remove-OutputFlagSpecified 
kubeadm: remove OutputFlagSpecified from PrintFlags
 2019-10-10 07:32:12 -07:00
Kubernetes Prow Robot
4fb75e2f0d
Merge pull request #82616 from ghouscht/kubeadm-issue-1787 
kubeadm: preserve order of user specified apiserver authorization-mode
 2019-10-10 06:04:01 -07:00
Ed Bartosh
078f7a3537 kubeadm: remove OutputFlagSpecified from PrintFlags 
This field is not used in the kubeadm code. It was brought from
cli-runtime where it's used to support complex relationship between
command line parameters, which is not present in kubeadm.
 2019-10-10 12:53:05 +03:00
Kubernetes Prow Robot
a7e0b768ee
Merge pull request #78764 from bart0sh/PR0070-kubeadm-structured-output-v2 
Structured output for 'kubeadm token list'
 2019-10-09 14:50:54 -07:00
Kubernetes Prow Robot
33809f24e6
Merge pull request #83556 from zouyee/kubeadminfo 
Complete output of docker info
 2019-10-08 20:00:04 -07:00
Kubernetes Prow Robot
72d052a444
Merge pull request #81797 from yastij/move-metrics-util 
move util/metrics to component-base
 2019-10-08 17:08:05 -07:00
Yassine TIJANI
c1487840bc move util/metrics to component-base 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-10-08 14:42:31 +02:00
Kubernetes Prow Robot
0f02a0fadf
Merge pull request #83605 from hwdef/fix-spelling-mistake 
cmd: fix spelling mistake
 2019-10-08 05:25:24 -07:00
Kubernetes Prow Robot
7a0801e1b8
Merge pull request #83339 from neolit123/1.17-master-cert-rotation 
kubeadm: enable kubelet certificate rotation on primary CP nodes
 2019-10-08 03:45:11 -07:00
Kubernetes Prow Robot
c4108c9b4a
Merge pull request #83090 from Klaven/rm_validator_errors 
Removal of kubernetes error dependencies
 2019-10-07 23:35:25 -07:00
hwdef
fea743b783 cmd: fix spelling mistake 2019-10-08 13:15:34 +08:00
Kubernetes Prow Robot
6564b34f9e
Merge pull request #83276 from Klaven/pr_v1beta1_dep 
Initial deprecation of kubeadm v1beta1 apis
 2019-10-07 22:15:11 -07:00
Kubernetes Prow Robot
c8d4d626d8
Merge pull request #83528 from neolit123/1.17-kubeadm-fix-upgrade-node 
kubeadm: fix wrong default value for the "upgrade node --certificate-renewal" flag
 2019-10-07 09:41:10 -07:00
Lubomir I. Ivanov
71cb27836d kubeadm: delete boostrap-kubelet.conf after TLS bootstrap on init 2019-10-07 18:41:58 +03:00
Lubomir I. Ivanov
2dedfddf81 kubeadm: add means to create Node objects via the API client 2019-10-07 18:41:57 +03:00
Lubomir I. Ivanov
02469a023f kubeadm: write boostrap-kubelet.conf during init 2019-10-07 15:22:08 +03:00
zouyee
361f20c874 Complete output of docker info 
Signed-off-by: Zou Nengren <zouyee1989@gmail.com>
 2019-10-07 19:24:15 +08:00
Kubernetes Prow Robot
cd1fbf7cd4
Merge pull request #83548 from yutedz/docker-info-cmd 
Show the complete docker info command
 2019-10-06 16:29:08 -07:00
Marek Counts
3a050344d0 Initial deprecation of kubeadm v1beta1 apis 2019-10-06 23:26:12 +00:00
Kubernetes Prow Robot
48b90db9c3
Merge pull request #83495 from tanjunchen/fix-typo 
remove the repeat word in documents
 2019-10-06 15:05:08 -07:00
Ted Yu
4a26579335 Show the complete docker info command 2019-10-06 11:26:18 -07:00
tanjunchen
de3cf23414 remove the repeat word in documents 2019-10-06 23:32:01 +08:00
Lubomir I. Ivanov
218e9a5f77 kubeadm: renew certificates on "upgrade node" by default 2019-10-05 19:13:57 +03:00
Lubomir I. Ivanov
79dd60e201 kubeadm: use CertificateRenewal constant for "upgrade apply" 2019-10-05 19:10:53 +03:00
Kubernetes Prow Robot
5a4c6c2b34
Merge pull request #83475 from fabriziopandini/127.0.0.1-as-advertise-address 
Kubeadm: allow users to use 127.0.0.1 as advertise address
 2019-10-04 13:23:26 -07:00
Kubernetes Prow Robot
7f6d7afb8e
Merge pull request #83314 from fabriziopandini/add-etcd-version 
kubeadm: add 1.18 entry in the etcd map
 2019-10-04 08:50:18 -07:00
fabriziopandini
fd2c678b1c 127.0.0.1-as-advertise-address 2019-10-04 08:41:07 +02:00
Ed Bartosh
ba0c84ade8 Test token output 
Tested JSON, YAML, Go Template and Text token output formats.
 2019-10-03 14:13:14 +03:00
Ed Bartosh
766e2a45f8 kubeadm token list: implement structured output 
Used cli-runtime API to print bootstrap tokens in 5 formats:

 - TEXT (identical to the current output)
 - YAML
 - JSON
 - JSONPATH
 - Go template
 2019-10-03 14:13:14 +03:00
Ed Bartosh
3765f21012 Add internal kubeadm output API 
Added internal structures and APIs to handle
kubeadm structured output.
 2019-10-03 14:13:00 +03:00
Ed Bartosh
8cee92dfa8 create new api group output.kubeadm.k8s.io 
This group contains APIs for handling kubeadm
structured output.
 2019-10-03 12:40:12 +03:00
Kubernetes Prow Robot
f3981710db
Merge pull request #82473 from Nordix/kubeadm-dualstack-service-ip 
Kubeadm DualStack Support for List of Service IPs
 2019-10-02 11:26:08 -07:00
fabriziopandini
2ab2fc8cae make test pass 2019-10-02 12:10:58 +02:00
Rafael Fernández López
cd1ad5646e
kubeadm: add test to detect panics when given certain feature gates 
This integration test allows us to detect if a given feature gate will
panic kubeadm. This builds on the assumption that a golang panic makes
the process exit with the code 2.

These tests are not trying to check if the init process succeeds or
not, their only purpose is to ensure that the exit code of the
`kubeadm init` invocation is not 2, thus, reflecting a golang panic.

Some refactors had to be made to the test code, so we return the exit
code along with stdout and stderr.
 2019-10-01 20:37:37 +02:00
fabriziopandini
7c42fe77fe 1.18 entry in etcd map 2019-10-01 09:17:31 +02:00
fabriziopandini
b77b8bdb47 bump versions for v1.17 cycle 2019-09-30 11:08:03 +02:00
Marek Counts
114d7855f3 Removal of kubernetes error dependancies 
removed kubernetes error deps
 2019-09-28 15:09:48 +00:00
Kubernetes Prow Robot
dd5efc420b
Merge pull request #82511 from abursavich/keyusage 
Fix typos in KeyUsage constant names
 2019-09-27 03:23:35 -07:00
Lubomir I. Ivanov
bbee054adc kubeadm: update OWNERS for 1.16 2019-09-25 18:07:38 +03:00
Byron Wang
23b75cfcad fix map assignment to entry in nil map,when use --feature-gates in kubeadm 2019-09-20 20:39:26 +08:00
Marek Counts
dfbb6fb6bb replaced logs in validators to be warnings 
Originally kubeadm used klot in the validators to log
These logs are converted to warnings and klog was removed.
 2019-09-19 12:18:40 +00:00
Kubernetes Prow Robot
67d928acdc
Merge pull request #82096 from logicalhan/version-deletion 
remove pkg/version and some of redundant copies of it
 2019-09-17 14:27:16 -07:00
Kubernetes Prow Robot
e7090e8f5e
Merge pull request #81517 from danwinship/iptables-monitor 
drop firewalld monitoring, add better iptables monitor
 2019-09-17 10:58:02 -07:00
Han Kang
866ea74326 remove pkg/version and some of redundant copies of it 
Change-Id: Ia58367c1b1274bfb49c8a4784051463abaf795de
 2019-09-16 16:24:35 -07:00
Arvinderpal Wander
bacc06d8fc kubeadm --service-cluster-ip-range supports a comma seperated list 
of service subnets.

Update DNS, Cert, dry-run logic to support list of Service CIDRs.
Added unit tests for GetKubernetesServiceCIDR and updated
GetDNSIP() unit test to inclue dual-sack cases.
 2019-09-16 09:33:43 -07:00
Kubernetes Prow Robot
01c046836b
Merge pull request #82243 from jfbai/refactor-kubeadm-calls 
refactor: replace all calls to os.Exit() / CheckErr().
 2019-09-16 06:48:52 -07:00
Dan Winship
b6c3d5416a Drop iptables firewalld monitoring support 
The firewalld monitoring code was not well tested (and not easily
testable), would never be triggered on most platforms, and was only
being taken advantage of from one place (kube-proxy), which didn't
need it anyway since it already has its own resync loop.

Since the firewalld monitoring was the only consumer of pkg/util/dbus,
we can also now delete that.
 2019-09-15 15:35:40 -04:00
Thomas Gosteli
40ab042f90 kubeadm: preserve order of user specified apiserver authorization-mode 2019-09-12 15:30:12 +02:00
Kubernetes Prow Robot
578bb43564
Merge pull request #82513 from beautytiger/kubeadm_upgrade_cleanup 
add line break in kubeadm upgrade logging message
 2019-09-11 21:24:20 -07:00
Kubernetes Prow Robot
fa3dfa82b0
Merge pull request #82414 from SataQiu/kubeadm-20190906 
kubeadm: code clean up about kustomize
 2019-09-11 15:27:53 -07:00
Kubernetes Prow Robot
7e060eec79
Merge pull request #81908 from tedyu/etcd-cluster-avail 
Remove Client#ClusterAvailable from interface
 2019-09-10 17:42:46 -07:00
Guangming Wang
2bf3a07298 add line break in kubeadm upgrade logging message 
logging use Println instead of Printf
 2019-09-10 11:53:33 +08:00
Andy Bursavich
c9c7c5409a Fix typos in KeyUsage constant names 2019-09-09 18:39:56 -07:00
SataQiu
c53f2f306a kubeadm: code clean up 2019-09-06 18:40:44 +08:00
Kubernetes Prow Robot
836b901658
Merge pull request #82348 from jpbetz/kubeadm-etcd-image-tag 
Use etcd image version suffixes in kubeadm
 2019-09-05 15:02:57 -07:00
Kubernetes Prow Robot
c8c1aeaa5c
Merge pull request #82248 from rosti/proxyless 
kubeadm: Fetching kube-proxy's config map is now optional
 2019-09-05 11:30:30 -07:00
Joe Betz
4c2b0731cb Simplify etcd image version usage in kubeadm 2019-09-05 10:28:23 -07:00
Joe Betz
5a3399f48d Add etcd image version to kubeadm 2019-09-05 10:27:53 -07:00
Rostislav M. Georgiev
31b4c782c7 kubeadm: Fetching kube-proxy's config map is now optional 
Whenever kubeadm needs to fetch its configuration from the cluster, it gets
the component configuration of all supported components (currently only kubelet
and kube-proxy). However, kube-proxy is deemed an optional component and its
installation may be skipped (by skipping the addon/kube-proxy phase on init).
When kube-proxy's installation is skipped, its config map is not created and
all kubeadm operations, that fetch the config from the cluster, are bound to
fail with "not found" or "forbidden" (because of missing RBAC rules) errors.

To fix this issue, we have to ignore the 403 and 404 errors, returned on an
attempt to fetch kube-proxy's component config from the cluster.
The `GetFromKubeProxyConfigMap` function now supports returning nil for both
error and object to indicate just such a case.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-09-05 18:25:22 +03:00
Kubernetes Prow Robot
c4c64673d7
Merge pull request #82199 from dims/update-to-etcd-3.3.15-0-image 
Update default etcd server to 3.3.15 for kubernetes 1.16
 2019-09-05 06:35:10 -07:00
Jianfei Bai
fcfcd880fb refactor: replace all calls to os.Exit() / CheckErr(). 2019-09-05 10:16:53 +08:00
Alexander Kanevskiy
7fb4a2be41 kubeadm: Form correct URL for IPv6 in HTTPProxy check 
Force correct syntax on host/port in URL of HTTPProxy check
if the host argument is a raw IPv6 address string
 2019-09-03 16:04:04 +03:00
Davanum Srinivas
8fbfdf8267
Update default etcd server to 3.3.15 for kubernetes 1.16 
Change-Id: I68f1a5e5339d83077a1a9f312c4e6e33848886c5
 2019-08-30 21:29:45 -04:00
Kubernetes Prow Robot
235f3ab3d9
Merge pull request #82127 from rajansandeep/bumpto1.6.2 
Bump CoreDNS version in Kubeadm to 1.6.2
 2019-08-30 09:40:23 -07:00
Kubernetes Prow Robot
d3063c682b
Merge pull request #82103 from neolit123/1.16-kubeadm-fix-kubelet-rotate-certs-false 
kubeadm: fix a bug where the kubelet cert rotation was turned off
 2019-08-30 08:00:26 -07:00
Gyuho Lee
21f976bb78 cmd/kubeadm: remove "rpc/status" from import-restrictions 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-08-29 08:46:17 -07:00
Gyuho Lee
93b9545f48 vendor: update with "update-vendor.sh" script 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-08-29 08:46:02 -07:00
Gyuho Lee
eb1509a1d3 kubeadm/app/util/etcd: : block etcd client creation until connection is up 
The new etcd balancer (>3.3.14, 3.4.0) uses an asynchronous resolver for
endpoints. Without "WithBlock", the client may return before the
connection is up.

Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2019-08-29 08:38:29 -07:00
Ted Yu
2167321adb Remove Client#ClusterAvailable from interface 2019-08-29 07:40:34 -07:00
Kubernetes Prow Robot
85602f26d7
Merge pull request #81990 from tedyu/bld-metadata 
Correct func name WithBuildMetadata
 2019-08-29 07:28:23 -07:00
Sandeep Rajan
dce97a142c bump coredns version in kubeadm to 1.6.2 2019-08-29 10:13:05 -04:00
Lubomir I. Ivanov
c9b11980ff kubeadm: fix a bug where the kubelet cert rotation was turned off 
A recent commit added warnings for KubeletConfiguration and
KubeProxyConfiguration fields that kubeadm cares about and
does not recommend the user modifying them. Kubelet's
"rotateCertificates" cannot be handled using this function
as there is not way to figure out if the user has set it explicitly to
"false". Hardcode the value to "true" and add a comment about that.

Also apply the following changes to warnDefaultComponentConfigValue()
calls:
- use a local "kind" variable that defines the Kind we are warning about.
- fix wrong paths to fields.
 2019-08-29 02:43:44 +03:00
Kubernetes Prow Robot
b3b4305be5
Merge pull request #81903 from jfbai/fix-kubeadm-kubelet-default 
fix: make kubeadm set defaults to kubelet configuration only when no values are set.
 2019-08-28 12:01:41 -07:00
Jianfei Bai
ccc45880a7 fix: prevent overriding of certain kubelet security configuration parameters if the user wished to modify them. 2019-08-28 21:01:49 +08:00
Kubernetes Prow Robot
b98f622852
Merge pull request #81910 from fabriziopandini/kubeadm-Json6902-Patches 
kubeadm: add support for Json6902 Patches
 2019-08-28 03:09:54 -07:00
fabriziopandini
0e447d797f kubeadm Json6902 Patches 2019-08-27 14:14:35 +02:00
Ted Yu
8efa1c2a8f Correct func name WithBuildMetadata 2019-08-26 21:10:56 -07:00
Kubernetes Prow Robot
533daf6624
Merge pull request #81836 from fabriziopandini/fix-upgrade-checks 
kubeadm: fix upgrade checks
 2019-08-26 20:55:37 -07:00
Kubernetes Prow Robot
90cf189152
Merge pull request #81791 from yastij/remove-ipvs-checks 
remove the ipvs checks from the preflight checks
 2019-08-26 20:55:22 -07:00
Kubernetes Prow Robot
2c64627871
Merge pull request #81918 from tedyu/pki-comment 
Correct comment in CertOrKeyExist
 2019-08-26 10:20:37 -07:00
Ted Yu
55cc0e2957 Correct comment in CertOrKeyExist 2019-08-25 19:30:20 -07:00
Kubernetes Prow Robot
9a5b87a58b
Merge pull request #81821 from hwdef/fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go 
fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go
 2019-08-23 17:59:30 -07:00
fabriziopandini
885f81dc51 fix upgrade checks 2019-08-23 15:12:29 +02:00
Kubernetes Prow Robot
2d649c347f
Merge pull request #81701 from tedyu/init-cfg-convert 
Check error return from Scheme.Convert
 2019-08-22 23:27:42 -07:00
Kubernetes Prow Robot
39d5fc7501
Merge pull request #81656 from SataQiu/fix-kubeadm-static-20190820 
kubeadm: fix static check failures
 2019-08-22 23:27:28 -07:00
Kubernetes Prow Robot
9873f0bfe8
Merge pull request #81696 from tedyu/kubeadm-ipv6 
Remove check for addIPv6Checks which evaluates to true
 2019-08-22 22:04:13 -07:00
SataQiu
7a4cf591ea kubeadm: fix static check failures 2019-08-23 10:51:12 +08:00
hwdef
86dd72f345 fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go 2019-08-23 10:07:07 +08:00
Kubernetes Prow Robot
59f5b3ddc4
Merge pull request #80937 from neolit123/1.16-error-stack-trace 
kubeadm: print the stack trace of an error for klog level v>=5
 2019-08-22 15:09:18 -07:00
Kubernetes Prow Robot
ca3e86e662
Merge pull request #81623 from neolit123/kernel-validator 
kubeadm: support any Linux kernel version newer than 3.10
 2019-08-22 11:12:59 -07:00
Lubomir I. Ivanov
2fc19136c1 kubeadm: print the stack trace of an error for klog level v>=5 
- replace all stray calls of os.Exit() to util.CheckError() instead
- CheckError() now checks if the klog verbosity level is >=5
and shows a stack trace of the error
- don't call klog.Fatal in version.go
 2019-08-22 20:09:54 +03:00
Yassine TIJANI
05326f8489 remove the ipvs checks from the preflight checks 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-08-22 17:10:22 +01:00
Kubernetes Prow Robot
d54c5163e0
Merge pull request #81458 from fabriziopandini/kubeadm-kustomize-ux 
kubeadm: kustomize-ux
 2019-08-22 05:46:32 -07:00
Kubernetes Prow Robot
17a1859370
Merge pull request #81494 from Klaven/remove_awk 
Removed awk from kubeadm reset
 2019-08-21 10:37:14 -07:00
Kubernetes Prow Robot
e1c2c677f1
Merge pull request #78033 from rajansandeep/corednsmigration 
Add the ability to migrate CoreDNS configmap in kubeadm
 2019-08-20 20:39:16 -07:00
Ted Yu
185c0a16ee Check error return from Scheme.Convert 2019-08-20 20:17:14 -07:00
Ted Yu
4639ced630 Remove check for addIPv6Checks which evaluates to true 2019-08-20 19:02:29 -07:00
Lubomir I. Ivanov
bec9c3678b kubeadm: support any kernel version newer than 3.10 
It seems undesirable that Kubernetes as a system should be
blocking a node if it's Linux kernel is way too new.

If such a problem even occurs we should exclude versions from
the list of supported versions instead of blocking users
from trying e.g. the latest 7.0.0-beta kernel because our
validators are not aware of this new version.
 2019-08-21 01:23:53 +03:00
Kubernetes Prow Robot
f17b608157
Merge pull request #81622 from neolit123/kubeadm-remove-blang 
kubeadm: do not use github.com/blang/semver in app/preflight
 2019-08-20 10:47:28 -07:00
Sandeep Rajan
6bb9eeeb1c move the corefile backup into a single configmap with a corefile-backup data key 2019-08-20 13:20:18 -04:00
Marek Counts
6845c66efb removed awk from kubeadm reset 
removed awk from kubeadm reset in favor of native go lang calls
that are not vulnerable to expantion.
 2019-08-20 15:53:40 +00:00
Lubomir I. Ivanov
0a0f6f8eec kubeadm: do not use github.com/blang/semver in app/preflight 
Usage of github.com/blang/semver is not needed and
k8s.io/apimachinery/pkg/util/version should be used instead
for semantic version parsing and version comparison.
 2019-08-20 14:06:52 +03:00
Kubernetes Prow Robot
66b0a0c17d
Merge pull request #81604 from tedyu/kubeadm-close-err 
Check the error return from listener close
 2019-08-19 15:09:44 -07:00
Ted Yu
158cf5d61a Check the error return from listener close 2019-08-19 09:26:35 -07:00
Sadlil Rhythom
3e6d483dd9 Fix Test for kubeadm/app/util/net.GetHostname 2019-08-19 14:38:19 +02:00
Kubernetes Prow Robot
acc57be085
Merge pull request #81559 from tedyu/static-pod-rm-unused 
Remove boolean waitForComponentRestart which is always true in upgradeComponent
 2019-08-18 21:18:03 -07:00
Ted Yu
4f9d20e0f9 Remove boolean waitForComponentRestart which is always true in upgradeComponent 2019-08-17 18:50:55 -07:00
Kubernetes Prow Robot
2036ee5dde
Merge pull request #81465 from yanghaichao12/dev190815 
remove defaultedInternalConfig from kubeadm
 2019-08-16 17:03:06 -07:00
Kubernetes Prow Robot
3b85eeaa23
Merge pull request #81495 from Klaven/kubeadm_reset 
updated kubeadm reset wording to be more clear
 2019-08-16 14:06:18 -07:00
Kubernetes Prow Robot
9e60bedebe
Merge pull request #81385 from neolit123/etcd-probe 
kubeadm: use etcd's /health endpoint for it's liveness probe
 2019-08-16 14:06:09 -07:00
Kubernetes Prow Robot
e6d4273395
Merge pull request #79033 from Nordix/kubeadm-ds-pod-network-cidr 
Dual-Stack Integration with Kubeadm
 2019-08-16 05:06:31 -07:00
Lubomir I. Ivanov
99b64f1e8e kubeadm: use etcd's /health endpoint for it's liveness probe 
Etcd v3.3.0 added the --listen-metrics-urls flag which allows specifying
addition URLs to the already present /health and /metrics endpoints.

While /health and /metrics are enabled for URLS defined with
--listen-client-urls (v3+ ?) they do require HTTPS.

Replace the present etcdctl based liveness probe with a standard HTTP
GET v1.Probe that connects to http://127.0.0.1:2381/health.

These endpoints are not reachable from the outside and only available
for localhost connections.
 2019-08-16 01:06:49 +03:00
Marek Counts
e69feae028 updated kubeadm reset wording to be more clear 
updated kubeadm reset to be clear that it was best effort.
 2019-08-15 20:15:55 +00:00
Sandeep Rajan
6821d21260 add the ability to migrate coredns configmap 2019-08-15 10:09:32 -04:00
yanghaichao12
f54856952f remove defaultedInternalConfig fromr kubeadm 
remove defaultedInternalConfig from kubeadm
 2019-08-15 17:45:27 +08:00
fabriziopandini
a92e7975d2 kubeadm-kustomize-ux 2019-08-15 09:14:31 +02:00
tariqibrahim
6df4f62d1c [kubernetes/kubeadm] fix minor nil issues in kudeadm code 2019-08-14 21:49:39 -07:00
Lubomir I. Ivanov
3ecf3c6a44 kubeadm: add v1.17 to the list versions that map to etcd version 2019-08-14 01:49:25 +03:00
Kubernetes Prow Robot
f7473e78f2
Merge pull request #81275 from SataQiu/fix-kubeadm-20190812 
kubeadm: cleanup unnecessary slice initialization statements
 2019-08-13 07:56:21 -07:00
Kubernetes Prow Robot
c08ee9d51b
Merge pull request #80905 from fabriziopandini/kubeadm-kustomize-core 
Kubeadm: kustomize core
 2019-08-13 07:55:55 -07:00
SataQiu
36bb0b9a53 kubeadm: cleanup unnecessary slice initialization statements 2019-08-12 23:42:56 +08:00
Kubernetes Prow Robot
ca6290538b
Merge pull request #81217 from SataQiu/fix-kubeadm-20190809 
kubeadm: change the permissions of generated CSR files from 0644 to 0600
 2019-08-12 08:21:13 -07:00
fabriziopandini
5eca049557 placeholders for follow-up PR on kustomize UX 2019-08-12 14:17:19 +02:00
fabriziopandini
97181595f0 kubeadm-kustomize-core 2019-08-12 14:16:51 +02:00
Arvinderpal Wander
3ac7ae60cc kubeadm --pod-network-cidr supports a comma separated list of pod 
CIDRs. This is a necesary change for dual-stack.
 2019-08-09 07:20:51 -07:00
Arvinderpal Wander
ec77598906 Update kubeproxy config validation to support list of comma 
separated pod CIDRs. Dual-stack feature must be enabled for the
validation to be done.
 2019-08-09 07:20:39 -07:00
Kubernetes Prow Robot
63e27a02ed
Merge pull request #81031 from chuckha/kubeadm-docs 
kubeadm: Fix some documentation errors
 2019-08-09 04:31:25 -07:00
SataQiu
2e35c6b5bb kubeadm: the permissions of generated CSR files are changed from 0644 to 0600 2019-08-09 17:36:26 +08:00
Kubernetes Prow Robot
63179a7f26
Merge pull request #81156 from SataQiu/fix-kubeadm-20190808 
Small fix for kubeadm version def.bzl
 2019-08-08 19:35:51 -07:00
Kubernetes Prow Robot
ee04128b05
Merge pull request #81084 from bart0sh/PR0078-kubeadm-remove-pkg-kubeapiserver-authorizer-modes-dependency 
kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes
 2019-08-08 12:35:20 -07:00
Chuck Ha
309cd1684f
kubeadm: Fix some documnetation errors 
Signed-off-by: Chuck Ha <chuckh@vmware.com>
 2019-08-08 11:34:19 -04:00
Kubernetes Prow Robot
8923d4fd2d
Merge pull request #81059 from Songjoy/patch-7 
modify the spelling errors
 2019-08-08 07:59:33 -07:00
Ed Bartosh
b4300ec24e kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes 
Moved 2 more constants from pkg/kubeapiserver/authorizer/modes
to kubeadm/app/constants module to remove dependency.
 2019-08-08 12:08:23 +03:00
SataQiu
11c92d190e fix kubeadm version def.bzl 2019-08-08 17:04:36 +08:00
Kubernetes Prow Robot
34db8e08c1
Merge pull request #81002 from zgfh/patch-10 
kubeadm:  fix name of CA spell error
 2019-08-07 03:12:49 -07:00
Songjoy
eb30b3d41d
modify the spelling errors 
fix escluding to excluding
 2019-08-07 10:38:20 +08:00
Kubernetes Prow Robot
1220a8ae92
Merge pull request #80995 from zgfh/patch-8 
cleanup: fix log message error in test case
 2019-08-06 01:03:54 -07:00
Kubernetes Prow Robot
b29e187a45
Merge pull request #80992 from dzzg/patch-1 
cleanup: fix typo "contstruct" -> "construct"
 2019-08-05 23:44:07 -07:00
alan
cd2ecefb80 kubeadm: fix name of CA spell error 2019-08-06 12:01:28 +08:00
Kubernetes Prow Robot
da30406a9d
Merge pull request #80966 from neolit123/1.16-cleanup-file-discovery 
kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery
 2019-08-05 18:18:32 -07:00
Alan
11e333474e
cleanup: fix log message error in test case 2019-08-06 07:00:05 +08:00
dzzg
cd57039927
cleanup: fix typo "contstruct" -> "construct" 2019-08-06 06:22:46 +08:00
Kubernetes Prow Robot
74c0cc2790
Merge pull request #80951 from neolit123/1.16-sched-auth 
kubeadm: enable secure serving for the kube-scheduler
 2019-08-05 13:36:29 -07:00
Kubernetes Prow Robot
040ce52a43
Merge pull request #80820 from mattmelgard/defer-delete-kubelet-bootstrap 
kubeadm: add a defer to kubelet bootstrap token deletion
 2019-08-05 02:57:48 -07:00
Lubomir I. Ivanov
540c272f7b kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery 
For file discovery, in case the user feeds a file for the CA
from the kubeconfig, make sure it's preloaded and embedded using
the new function EnsureCertificateAuthorityIsEmbedded().

This commit also applies cleanup:
- unroll validateKubeConfig() into ValidateConfigInfo() as this way
the default cluster can be re-used.
- in ValidateConfigInfo() reuse the variable config instead of creating
a new variable kubeconfig.
- make the Ensure* functions return descriptive errors instead of
wrapping the errors on the side of the callers.
 2019-08-05 03:23:41 +03:00
Lubomir I. Ivanov
e142bf6203 kubeadm: enable secure serving for the kube-scheduler 
Secure serving was already enabled for kube-controller-manager.
Do the same for kube-scheduler, by passing the flags
"authentication-kubeconfig" and "authorization-kubeconfig"
to the binary in the static Pod.

This change allows the scheduler to perform reviews on incoming
requests, such as:
- authentication.k8s.io/v1beta1 TokenReview
- authorization.k8s.io/v1 SubjectAccessReview

The authentication and authorization checks for "system:kube-scheduler"
users were previously enabled by PR 72491.
 2019-08-03 19:15:32 +03:00
Kubernetes Prow Robot
44f3aafc1a
Merge pull request #80867 from fabriziopandini/fix-certs-generation-for-external-etcd 
kubeadm: fix-certs-generation-for-external-etcd
 2019-08-02 20:28:06 -07:00
Kubernetes Prow Robot
40178ccf7f
Merge pull request #80894 from bart0sh/PR0077-kubeadm-simplified-returns 
kubeadm: simplified returns
 2019-08-02 12:40:35 -07:00
mattmelgard
f03bbe1b6d Add a defer to kubelet boostrap token deletion 2019-08-02 09:57:00 -06:00
Kubernetes Prow Robot
f6bc0ea03e
Merge pull request #80891 from bart0sh/PR0076-kubeadm-handle-joinControPlaneDoneTemp.Execute-errors 
handle joinControPlaneDoneTemp.Execute errors
 2019-08-02 08:44:05 -07:00
Kubernetes Prow Robot
564eff757c
Merge pull request #80862 from drpaneas/return_warnings 
kubeadm reset: replace Errorf with Warningf
 2019-08-02 04:54:11 -07:00
Ed Bartosh
6b21af79c2 kubeadm: simplified returns 2019-08-02 13:01:02 +03:00
Ed Bartosh
d0506f5a50 handle joinControPlaneDoneTemp.Execute errors 2019-08-02 12:37:57 +03:00
Kubernetes Prow Robot
547617a523
Merge pull request #80804 from olivierlemasle/add-join-timeout 
Make kubeadm join discovery wait for a finite time
 2019-08-01 13:38:41 -07:00
Kubernetes Prow Robot
f5c9d38a3f
Merge pull request #80833 from neolit123/1.16-update-version 
kubeadm: update the version constants for 1.16
 2019-08-01 11:52:44 -07:00
fabriziopandini
59fb766b42 fix-certs-generation-for-external-etcd 2019-08-01 17:51:33 +02:00
Panagiotis Georgiadis
f946a2500b kubeadm reset: replace Errorf with Warningf 2019-08-01 16:40:47 +02:00
Olivier Lemasle
5c61056432 Make discovery wait for a finite time 
Add a timeout to discovery in `kubeadm join`,
when using a discovery file.
 2019-08-01 13:17:45 +02:00
Kubernetes Prow Robot
3758426884
Merge pull request #80798 from xlgao-zju/ignore-not-found 
do not return error, when the ds is not found
 2019-07-31 22:37:03 -07:00
Lubomir I. Ivanov
8aa69ea502 kubeadm: update the supported version for 1.16 2019-08-01 05:57:25 +03:00
Lubomir I. Ivanov
e379164bc7 kubeadm: apply a number of _test fixes 
- common_test.go: use constants.CurrentKubernetesVersion
- diff_test.go: write temporary files instead of using testdata.
this allows us to not have to bump kubernetesVersions in the
testdata files (now removed)
- policy_test.go: apply fixes to tests that were previously passing,
but a bump in constants.go breaks them. these tests now work
for any version.
 2019-08-01 05:57:24 +03:00
Xianglin Gao
1b6ec47a04 do not return error, when the ds is not found 
Signed-off-by: Xianglin Gao <xianglin.gxl@alibaba-inc.com>
 2019-08-01 09:12:14 +08:00