Commit Graph

6504 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
a6b546eb72 Merge pull request #77936 from liggitt/shorten-cert-wait
Interrupt WaitForCertificate if desired kubelet serving cert changes
2019-05-17 00:26:19 -07:00
Kubernetes Prow Robot
56683a2f1f Merge pull request #77925 from liggitt/icc-tokenfile
honor overridden tokenfile, add InClusterConfig override tests
2019-05-16 20:39:51 -07:00
Pengfei Ni
98aba3b4b8 Upgrade Azure network API version to 2018-07-01 2019-05-17 11:25:18 +08:00
Jean Rouge
181706b0f0 Auto-generated changes for Windows GMSA support
This patch comprises the auto-generated changes for the API changes outlined in
the Windows GMSA KEP
(https://github.com/kubernetes/enhancements/blob/master/keps/sig-windows/20181221-windows-group-managed-service-accounts-for-container-identity.md)
to add GMSA support to Windows workloads.

Signed-off-by: Jean Rouge <rougej+github@gmail.com>
2019-05-16 15:34:22 -07:00
Jean Rouge
794176f3c4 GRPC changes for GMSA support
Signed-off-by: Jean Rouge <rougej+github@gmail.com>
2019-05-16 15:34:10 -07:00
Jean Rouge
a3e914528a API changes for Windows GMSA support
This patch comprises the API changes outlined in the Windows GMSA KEP
(https://github.com/kubernetes/enhancements/blob/master/keps/sig-windows/20181221-windows-group-managed-service-accounts-for-container-identity.md)
to add GMSA support to Windows workloads.

It includes validation, as well as dropping fields if the `WindowsGMSA` feature
flag is not set, both with unit tests.

Signed-off-by: Jean Rouge <rougej+github@gmail.com>
2019-05-16 15:32:59 -07:00
Mike Danese
5df7f529f0 cleanup some leader election client doc 2019-05-16 12:57:11 -07:00
Antoine Pelisse
4e32d183d0 fieldManager: Ignore conversion errors to internal types
Errors on updates are bad because they usually come from controllers and
it's very hard to take actions on them. We also don't want to start
breaking kubernetes clusters if something in a schema happens a way we
didn't foresee (even though we've tried to be diligent and test as much
as possible, these can still happen).

Log an identifiable error when they happen. Ideally people can look in
the logs to find these and report them, or providers can look for these
in logs and make sure they don't happen.

Only conversion to internal types are going to be logged and ignored.

It means that we're still failing for:
- Version conversions. If we can't convert the object from one version
  to another,
- Unions. If we can't normalize the union,
- Invalid MangedFields sent in the object. If something has changed the
  ManagedFields to an invalid value.
- Failure to serialize the manager information, this really shouldn't
  happen.
- Encoding the ManagedFields
2019-05-16 12:37:25 -07:00
Jordan Liggitt
739a75fc32 Interrupt WaitForCertificate if desired kubelet serving cert changes 2019-05-16 15:14:47 -04:00
Kubernetes Prow Robot
6a9ecf71fd Merge pull request #77912 from andyzhangx/fix-azuredisk-lun-error
Fix incorrect azuredisk lun error
2019-05-16 08:48:54 -07:00
Kubernetes Prow Robot
5a233ccb84 Merge pull request #77906 from feiskyer/az-no-authz
Allow Kubelet to run with no Azure identity
2019-05-16 08:48:12 -07:00
Kubernetes Prow Robot
730bc968b9 Merge pull request #77874 from yuchengwu/fix-CVE-2019-11244
fix CVE-2019-11244: `kubectl --http-cache=<world-accessible dir>` cre…
2019-05-16 06:06:13 -07:00
Kubernetes Prow Robot
c2847e8b68 Merge pull request #77585 from andyxning/fix_leader_election_start
enhance leader election doc
2019-05-16 01:09:55 -07:00
Jordan Liggitt
fba885a0d2 Handle updates removing remaining finalizers on deleted objects 2019-05-15 17:17:39 -04:00
Kubernetes Prow Robot
c50ff35a55 Merge pull request #77839 from mcrute/migrate-fake-cp
Staging legacy fake cloud provider
2019-05-15 12:32:23 -07:00
Michael FIG
2ed3272a5e Honour NewFilteredDynamicSharedInformerFactory namespace argument 2019-05-15 11:51:34 -06:00
Kubernetes Prow Robot
6a40ed1005 Merge pull request #77751 from baasbank/fix-lint-errors-staging/src/k8s.io
Fix lint errors staging/src/k8s.io
2019-05-15 07:06:26 -07:00
Jordan Liggitt
7306fb7a89 honor overridden tokenfile, add InClusterConfig override tests 2019-05-15 08:15:02 -04:00
Andy Xie
95f33ce399 enhance leader election doc 2019-05-15 18:50:51 +08:00
andyzhangx
4213f4d797 fix azure disk lun error 2019-05-15 08:32:03 +00:00
Pengfei Ni
b13d80a59a Allow Kubelet to run with no Azure identity
useInstanceMetadata should be enabled and Kubelet would use IMDS to get
node's information.
2019-05-15 15:12:29 +08:00
Kubernetes Prow Robot
fd64b83c63 Merge pull request #77837 from davidz627/fix/pdFSType
Translate StorageClass object instead of parameters. Add GCE PD Storage class translation logic.
2019-05-14 20:36:54 -07:00
Kubernetes Prow Robot
5c4b6528c2 Merge pull request #77613 from mikedanese/fixinclusterconfig
BoundServiceAccountTokenVolume: fix InClusterConfig
2019-05-14 20:36:16 -07:00
Kubernetes Prow Robot
4036097edb Merge pull request #75990 from mcrute/remove-regions
Remove hard-coded region list from AWS cloud provider
2019-05-14 18:24:42 -07:00
Kubernetes Prow Robot
1ae09a371f Merge pull request #70929 from mikedanese/cmp
migrate everything to unify diff.Diff method using cmp
2019-05-14 18:24:30 -07:00
Kubernetes Prow Robot
0b6ad8bc3f Merge pull request #77563 from jpbetz/admission-webhook-options
Pass {Operation}Options to Webhooks
2019-05-14 15:34:19 -07:00
Mike Crute
7d62316f8f Migrate fake cloud provider to staging 2019-05-14 13:32:18 -07:00
David Zhu
6aea7fcd83 Added topology translation and backward compatible access modes 2019-05-14 12:40:03 -07:00
Mike Danese
76f683a8f3 vendor github.com/google/go-cmp 2019-05-14 12:24:07 -07:00
Mike Danese
1e9ce46f0a migrate k8s.io/apimachinery/pkg/util/diff to cmp 2019-05-14 12:24:07 -07:00
Mike Crute
3af7a72719 Remove hardcoded region list from AWS provider
This extracts the region list from the AWS SDK and accounts for special
opt-in regions. This will ensure that the regions are always up-to-date
as we update the AWS SDK instead of requiring duplicated accounting.
2019-05-14 11:48:45 -07:00
Kubernetes Prow Robot
0e224ad3f3 Merge pull request #77805 from nikhita/publishing-bot-15-branches
Add rules for publishing release-1.15 branches
2019-05-14 11:21:32 -07:00
Joe Betz
900d652a9a Update tests for: Pass {Operation}Option to Webhooks 2019-05-14 10:49:43 -07:00
Yucheng Wu
f228ae3364 fix CVE-2019-11244: kubectl --http-cache=<world-accessible dir> creates world-writeable cached schema files 2019-05-15 01:40:18 +08:00
Mike Danese
4198f28855 BoundServiceAccountTokenVolume: fix InClusterConfig 2019-05-14 09:31:56 -07:00
Kubernetes Prow Robot
c85c0e4780 Merge pull request #77816 from liggitt/graceful-crd
Graceful custom resource storage teardown
2019-05-14 05:31:14 -07:00
Kubernetes Prow Robot
fb41b7a801 Merge pull request #77653 from sttts/sttts-structural-schema-metadata
apiextensions: disallow metadata specs other than name and generateName
2019-05-13 23:19:33 -07:00
Joe Betz
332d88db1a Generate proto bindings for: Pass {Operation}Option to Webhooks 2019-05-13 23:10:58 -07:00
Joe Betz
140c8c73a6 Pass {Operation}Option to Webhooks 2019-05-13 23:10:52 -07:00
Kubernetes Prow Robot
44301940ea Merge pull request #77750 from sttts/sttts-structural-schema-false-XPreserveUnknownFields
apiextensions: forbid false x-kubernetes-preserve-unknown-fields
2019-05-13 21:49:22 -07:00
Kubernetes Prow Robot
91ba27e900 Merge pull request #77827 from smarterclayton/fix_partial
PartialObjectMetadataList should nest values, not pointers for Items
2019-05-13 18:25:58 -07:00
Kubernetes Prow Robot
2fd1e2532a Merge pull request #77809 from liggitt/beorn7-perks
github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973
2019-05-13 18:25:34 -07:00
Kubernetes Prow Robot
e5fec6507b Merge pull request #77456 from MikeSpreitzer/fix-run-comment
Fix comment on SharedInformer.Run
2019-05-13 18:25:21 -07:00
David Zhu
101c6298ce Add tests for backwardCompatibleAccessModes 2019-05-13 17:41:09 -07:00
David Zhu
196bbaa964 Translate fstype storage class parameter to prefixed stripped parameter
in the gce pd translation library. Change storage class translation
library to operate on StorageClass instead of parameters only.
2019-05-13 17:32:11 -07:00
Haowei Cai
277a741337 install deleteoptions in deletecollection endpoints 2019-05-13 16:13:13 -07:00
Clayton Coleman
f25efd12e6 PartialObjectMetadataList should nest values, not pointers for Items
Typo during setting up PartialObjectMetadataList, it should be a slice
of `PartialObjectMetadata`, not a slice of `*PartialObjectMetadata`.
2019-05-13 18:04:16 -04:00
Dr. Stefan Schimanski
69c50a70f6 Update generated files 2019-05-13 23:16:22 +02:00
Dr. Stefan Schimanski
d014591a11 apiextensions: forbid false x-kubernetes-preserve-unknown-fields 2019-05-13 23:16:22 +02:00
Kubernetes Prow Robot
4a82b01a56 Merge pull request #77814 from brandon-mabey/cri-runtime-service-error-injection
Fix error injection surface in FakeRuntimeService
2019-05-13 13:15:48 -07:00