Commit Graph

3081 Commits

Author SHA1 Message Date
Tim Hockin
d681a04541 Force LICENSES refresh on GCE images
Some test images have it baked in.
2020-05-11 14:25:26 -07:00
Yuwen Ma
1aa67fc525 Switch core master base images from debian to distroless
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-09 06:55:00 -04:00
Kubernetes Prow Robot
7d53ecee37 Merge pull request #90575 from thockin/fix_license_again
Reorganize vendor licenses again (revert #85220)
2020-05-08 23:03:51 -07:00
Tim Hockin
325ea6e3c2 Restructure licenses again (revert cd4474a)
This moves licenses of vendored code from one monolith file into a tree
of individual files for easier reviews.  This fixes both the bash and
bazel paths.
2020-05-07 21:48:59 -07:00
Tim Hockin
9213616a23 Add better debug when GCE cluster turnups fail 2020-05-07 19:43:32 -07:00
Walter Fender
339918d206 Add admin account on master for kube-up
Creates a master local admin account.
If you are on the master you can now run kubectl.
For issue 87481.
2020-05-06 17:19:58 -07:00
Kubernetes Prow Robot
14eb291084 Merge pull request #90751 from yliaog/windep
Removed leftover comments for the deleted function Get_MgmtSubnet
2020-05-05 20:03:09 -07:00
Yu Liao
eb6ee368b9 Removed leftover comments for the deleted function Get_MgmtSubnet 2020-05-04 21:25:51 -07:00
Davanum Srinivas
0d38f21932 Use bionic repo for docker as focal is not yet available
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-03 16:50:49 -04:00
Kubernetes Prow Robot
15d6c9a5ea Merge pull request #90605 from yliaog/windep
switched to default non-masquerade destination ranges
2020-05-01 00:41:54 -07:00
Jie Shen
c71a25e912 Fix shellcheck warnings/errors in cluster/gce/upgrade.sh (#88576)
* Fix shellcheck warnings/errors in cluster/gce/upgrade.sh

* Update cluster/gce/upgrade.sh

Co-Authored-By: Slava Semushin <slava.semushin@gmail.com>

Co-authored-by: Slava Semushin <slava.semushin@gmail.com>
2020-04-30 21:26:06 -07:00
Yu Liao
9684c13fba switched to default non-masquerade destination ranges 2020-04-30 12:29:34 -07:00
Kubernetes Prow Robot
7229e13036 Merge pull request #90423 from neolit123/1.19-move-cluster-bash-to-util
/cluster: add / update OWNERS labels
2020-04-29 04:52:24 -07:00
Kubernetes Prow Robot
e494b0788b Merge pull request #89543 from bartekzurawski/fix-kube-up-gce-private-restart
Set ip alias route on kubernetes-master during booting
2020-04-24 09:38:07 -07:00
Lubomir I. Ivanov
c0387ab3ac /cluster: add / update OWNERS 2020-04-24 03:21:07 +03:00
Kubernetes Prow Robot
1bcd49d5cd Merge pull request #90156 from vinayakankugoyal/nonroot
Run kube-scheduler and kube-addon-manager as non root
2020-04-22 19:21:46 -07:00
toyoda
a01b1dada5 Fix shellcheck failure in cluster/gce/config-default.sh 2020-04-17 16:11:58 +09:00
Vinayak Goyal
7a5f4c47de Run kube-scheduler and kube-addon-manager as non root 2020-04-16 14:50:04 -07:00
Kubernetes Prow Robot
aed3f05495 Merge pull request #88459 from joakimr-axis/joakimr-axis_config-test.sh
Fix shellcheck warnings/errors in cluster/gce/config-test.sh
2020-04-14 15:38:02 -07:00
Bartek Żurawski
3e4744c736 Set ip alias route on kubernetes-master during booting 2020-04-15 00:03:05 +02:00
Kubernetes Prow Robot
ea2d784545 Merge pull request #89895 from jingyih/update_etcd_server_3p4p7
Update default etcd server to 3.4.7 in k8s v1.19
2020-04-14 12:34:06 -07:00
jingyih
394df132bd Update default etcd server to 3.4.7 2020-04-13 14:37:56 -07:00
Kubernetes Prow Robot
c0be582ca5 Merge pull request #89269 from Jefftree/network-proxy-beta
Use v1beta1 for egress selector config
2020-04-09 18:07:49 -07:00
Joakim Roubert
21bef7536c Fix shellcheck warnings/errors in cluster/gce/config-test.sh
Change-Id: I3760337aa345ca5b801587ea12c971a95168f7d7
Signed-off-by: Joakim Roubert <joakimr@axis.com>
2020-04-09 08:30:13 +02:00
Jordan Liggitt
5534c12dad Fix priorityClass typo, add numeric priority to static pods 2020-04-08 15:33:39 -04:00
Kubernetes Prow Robot
4ae223fbff Merge pull request #84904 from clarklee92/FixShellCheck
Fix shell check
2020-04-06 19:09:58 -07:00
Kubernetes Prow Robot
fa6b9bec81 Merge pull request #89759 from cheftako/master
Switch COS image to m81.
2020-04-04 02:57:46 -07:00
Kubernetes Prow Robot
81a0e2f62b Merge pull request #85923 from MrHohn/sig-gcp-owner-file
Migrate OWNERS file to apply the area/provider/gcp label
2020-04-02 19:03:46 -07:00
Mateusz Matejczyk
9639464e43 Propagate CONCURRENT_SERVICE_SYNCS to node env 2020-04-02 14:38:41 +02:00
Walter Fender
31393df6ee Switch COS image to m81. 2020-04-02 00:18:31 -07:00
Kubernetes Prow Robot
6a552da932 Merge pull request #89664 from spiffxp/ignore-list-resources-fails
Allow list-resources.sh to continue if a resource fails to list
2020-03-31 20:03:41 -07:00
Aaron Crickenberger
52653195f6 Allow list-resources.sh to continue if a resource fails to list
The list-resources.sh script is used solely by our CI, specifically
kubernetes/test-infra/kubetest with the --check-leaked-resources
flag. Currently if a single resource fails to list, we fail the entire
job.

I think this is too brittle. A review of previous issues on
kubernetes/kubernetes that relate to failure of this script shows that
the issues usually resolve themselves, or would be caught by the diff
of before/after.

Let's instead allow the script to continue listing all resources,
and let kubetest's resource diff fail the job.
2020-03-30 12:01:29 -07:00
Peter Hornyack
72f58ae4ff Bump GCE Windows pause image version
pause-win:1.2.1 is based on the March Windows container base images for
both LTSC 2019 and SAC 1909.
2020-03-30 11:30:53 -07:00
Kubernetes Prow Robot
24d8a17f70 Merge pull request #89601 from pjh/gce-march-images
Update GCE Windows node images with March's Windows updates
2020-03-30 08:22:29 -07:00
Kubernetes Prow Robot
c7abf44a19 Merge pull request #88856 from yaseenhamdulay/patch-1
Create etcd user in cloud-init master.yaml rather than in configure-h…
2020-03-27 20:41:53 -07:00
Peter Hornyack
55df85ba37 Update GCE Windows node images with March's Windows updates 2020-03-27 15:44:08 -07:00
Peter Hornyack
3583816112 Fix INFRA_CONTAINER variable references
Tested:
NUM_NODES=2 NUM_WINDOWS_NODES=2 KUBE_GCE_ENABLE_IP_ALIASES=true \
  KUBERNETES_NODE_PLATFORM=windows \
  LOGGING_STACKDRIVER_RESOURCE_TYPES=new \
  KUBE_UP_AUTOMATIC_CLEANUP=true \
  WINDOWS_NODE_OS_DISTRIBUTION=win2019 \
  ./cluster/kube-up.sh
2020-03-26 19:30:39 -07:00
Kubernetes Prow Robot
08ce946e09 Merge pull request #89257 from jprzychodzen/fix-create
Util script - move variables setting for replicated master to outer if
2020-03-26 14:10:36 -07:00
Kubernetes Prow Robot
a9f6b93b62 Merge pull request #89498 from sambdavidson/mount-tweak
Changed readonly to true and type to "File" for authn/authz config.
2020-03-26 12:48:43 -07:00
Kubernetes Prow Robot
295b53f7b4 Merge pull request #89214 from jingyih/update_etcd_server_3p4p4
Update default etcd server to 3.4.4 in k8s v1.19
2020-03-26 01:14:24 -07:00
Samuel Davidson
c70cd1e82f Changed readonly to true and type to File for authn/authz config. 2020-03-25 17:45:27 -07:00
Yaseen Hamdulay
58f78a53ee Add ssh_redirect_user 2020-03-24 11:30:48 +00:00
Kubernetes Prow Robot
de877ec26e Merge pull request #89327 from aojea/conntrack
cluster: ipvs conntrack module vs kernel version
2020-03-22 13:28:44 -07:00
Antonio Ojea
33810a99d9 cluster: ipvs conntrack module vs kernel version
We should use 'nf_conntrack' instead of 'nf_conntrack_ipv4'
for linux kernel >= 4.19
2020-03-21 11:23:28 +01:00
Yu Liao
50c0827856 infra_container is passed in as env variable 2020-03-20 10:50:25 -07:00
Jakub Przychodzeń
f48268d13b Util script - move variables setting for replicated master to outer if 2020-03-20 12:42:44 +01:00
Jefftree
936f7665cf network proxy alpha -> beta 2020-03-19 11:49:47 -07:00
yaseenhamdulay
5de3c64ad0 Create etcd user in cloud-init master.yaml rather than in configure-helper.sh
An etcd unix user is currently created in configure-helper.sh if it does not exist
on the master.

cloud-init is the only supported mechanism to add users on COS VMs. If an attempt
is made to add a key using OS Login or the instance metadata mechanism the
google_accounts_daemon will race with useradd and potentially attempt to use
the same UID. This will lock out any attempt to SSH into the VM. We therefore
migrate to using cloud-init to create this user and prevent this issue from occurring.
2020-03-19 11:05:42 +00:00
Kubernetes Prow Robot
f899ad704a Merge pull request #89069 from enj/enj/i/drop_password_file
Remove support for basic authentication
2020-03-18 22:24:20 -07:00
jingyih
f9e0e4c6b4 Update default etcd server to 3.4.4 2020-03-18 00:27:46 -07:00