github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
106,685 Commits 1 Branch 31 Tags
f4df7d0eb27b51a0f47a49616b8b32e0bf9c18a7
Commit Graph

3635 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
acc57be085 Merge pull request #81559 from tedyu/static-pod-rm-unused 
Remove boolean waitForComponentRestart which is always true in upgradeComponent
 2019-08-18 21:18:03 -07:00
Ted Yu
4f9d20e0f9 Remove boolean waitForComponentRestart which is always true in upgradeComponent 2019-08-17 18:50:55 -07:00
Kubernetes Prow Robot
2036ee5dde Merge pull request #81465 from yanghaichao12/dev190815 
remove defaultedInternalConfig from kubeadm
 2019-08-16 17:03:06 -07:00
Kubernetes Prow Robot
3b85eeaa23 Merge pull request #81495 from Klaven/kubeadm_reset 
updated kubeadm reset wording to be more clear
 2019-08-16 14:06:18 -07:00
Kubernetes Prow Robot
9e60bedebe Merge pull request #81385 from neolit123/etcd-probe 
kubeadm: use etcd's /health endpoint for it's liveness probe
 2019-08-16 14:06:09 -07:00
Kubernetes Prow Robot
e6d4273395 Merge pull request #79033 from Nordix/kubeadm-ds-pod-network-cidr 
Dual-Stack Integration with Kubeadm
 2019-08-16 05:06:31 -07:00
Lubomir I. Ivanov
99b64f1e8e kubeadm: use etcd's /health endpoint for it's liveness probe 
Etcd v3.3.0 added the --listen-metrics-urls flag which allows specifying
addition URLs to the already present /health and /metrics endpoints.

While /health and /metrics are enabled for URLS defined with
--listen-client-urls (v3+ ?) they do require HTTPS.

Replace the present etcdctl based liveness probe with a standard HTTP
GET v1.Probe that connects to http://127.0.0.1:2381/health.

These endpoints are not reachable from the outside and only available
for localhost connections.
 2019-08-16 01:06:49 +03:00
Marek Counts
e69feae028 updated kubeadm reset wording to be more clear 
updated kubeadm reset to be clear that it was best effort.
 2019-08-15 20:15:55 +00:00
Sandeep Rajan
6821d21260 add the ability to migrate coredns configmap 2019-08-15 10:09:32 -04:00
yanghaichao12
f54856952f remove defaultedInternalConfig fromr kubeadm 
remove defaultedInternalConfig from kubeadm
 2019-08-15 17:45:27 +08:00
fabriziopandini
a92e7975d2 kubeadm-kustomize-ux 2019-08-15 09:14:31 +02:00
tariqibrahim
6df4f62d1c [kubernetes/kubeadm] fix minor nil issues in kudeadm code 2019-08-14 21:49:39 -07:00
Lubomir I. Ivanov
3ecf3c6a44 kubeadm: add v1.17 to the list versions that map to etcd version 2019-08-14 01:49:25 +03:00
Kubernetes Prow Robot
f7473e78f2 Merge pull request #81275 from SataQiu/fix-kubeadm-20190812 
kubeadm: cleanup unnecessary slice initialization statements
 2019-08-13 07:56:21 -07:00
Kubernetes Prow Robot
c08ee9d51b Merge pull request #80905 from fabriziopandini/kubeadm-kustomize-core 
Kubeadm: kustomize core
 2019-08-13 07:55:55 -07:00
SataQiu
36bb0b9a53 kubeadm: cleanup unnecessary slice initialization statements 2019-08-12 23:42:56 +08:00
Kubernetes Prow Robot
ca6290538b Merge pull request #81217 from SataQiu/fix-kubeadm-20190809 
kubeadm: change the permissions of generated CSR files from 0644 to 0600
 2019-08-12 08:21:13 -07:00
fabriziopandini
5eca049557 placeholders for follow-up PR on kustomize UX 2019-08-12 14:17:19 +02:00
fabriziopandini
97181595f0 kubeadm-kustomize-core 2019-08-12 14:16:51 +02:00
Arvinderpal Wander
3ac7ae60cc kubeadm --pod-network-cidr supports a comma separated list of pod 
CIDRs. This is a necesary change for dual-stack.
 2019-08-09 07:20:51 -07:00
Arvinderpal Wander
ec77598906 Update kubeproxy config validation to support list of comma 
separated pod CIDRs. Dual-stack feature must be enabled for the
validation to be done.
 2019-08-09 07:20:39 -07:00
Kubernetes Prow Robot
63e27a02ed Merge pull request #81031 from chuckha/kubeadm-docs 
kubeadm: Fix some documentation errors
 2019-08-09 04:31:25 -07:00
SataQiu
2e35c6b5bb kubeadm: the permissions of generated CSR files are changed from 0644 to 0600 2019-08-09 17:36:26 +08:00
Kubernetes Prow Robot
63179a7f26 Merge pull request #81156 from SataQiu/fix-kubeadm-20190808 
Small fix for kubeadm version def.bzl
 2019-08-08 19:35:51 -07:00
Kubernetes Prow Robot
ee04128b05 Merge pull request #81084 from bart0sh/PR0078-kubeadm-remove-pkg-kubeapiserver-authorizer-modes-dependency 
kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes
 2019-08-08 12:35:20 -07:00
Chuck Ha
309cd1684f kubeadm: Fix some documnetation errors 
Signed-off-by: Chuck Ha <chuckh@vmware.com>
 2019-08-08 11:34:19 -04:00
Kubernetes Prow Robot
8923d4fd2d Merge pull request #81059 from Songjoy/patch-7 
modify the spelling errors
 2019-08-08 07:59:33 -07:00
Ed Bartosh
b4300ec24e kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes 
Moved 2 more constants from pkg/kubeapiserver/authorizer/modes
to kubeadm/app/constants module to remove dependency.
 2019-08-08 12:08:23 +03:00
SataQiu
11c92d190e fix kubeadm version def.bzl 2019-08-08 17:04:36 +08:00
Kubernetes Prow Robot
34db8e08c1 Merge pull request #81002 from zgfh/patch-10 
kubeadm:  fix name of CA spell error
 2019-08-07 03:12:49 -07:00
Songjoy
eb30b3d41d modify the spelling errors 
fix escluding to excluding
 2019-08-07 10:38:20 +08:00
Kubernetes Prow Robot
1220a8ae92 Merge pull request #80995 from zgfh/patch-8 
cleanup: fix log message error in test case
 2019-08-06 01:03:54 -07:00
Kubernetes Prow Robot
b29e187a45 Merge pull request #80992 from dzzg/patch-1 
cleanup: fix typo "contstruct" -> "construct"
 2019-08-05 23:44:07 -07:00
alan
cd2ecefb80 kubeadm: fix name of CA spell error 2019-08-06 12:01:28 +08:00
Kubernetes Prow Robot
da30406a9d Merge pull request #80966 from neolit123/1.16-cleanup-file-discovery 
kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery
 2019-08-05 18:18:32 -07:00
Alan
11e333474e cleanup: fix log message error in test case 2019-08-06 07:00:05 +08:00
dzzg
cd57039927 cleanup: fix typo "contstruct" -> "construct" 2019-08-06 06:22:46 +08:00
Kubernetes Prow Robot
74c0cc2790 Merge pull request #80951 from neolit123/1.16-sched-auth 
kubeadm: enable secure serving for the kube-scheduler
 2019-08-05 13:36:29 -07:00
Kubernetes Prow Robot
040ce52a43 Merge pull request #80820 from mattmelgard/defer-delete-kubelet-bootstrap 
kubeadm: add a defer to kubelet bootstrap token deletion
 2019-08-05 02:57:48 -07:00
Lubomir I. Ivanov
540c272f7b kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery 
For file discovery, in case the user feeds a file for the CA
from the kubeconfig, make sure it's preloaded and embedded using
the new function EnsureCertificateAuthorityIsEmbedded().

This commit also applies cleanup:
- unroll validateKubeConfig() into ValidateConfigInfo() as this way
the default cluster can be re-used.
- in ValidateConfigInfo() reuse the variable config instead of creating
a new variable kubeconfig.
- make the Ensure* functions return descriptive errors instead of
wrapping the errors on the side of the callers.
 2019-08-05 03:23:41 +03:00
Lubomir I. Ivanov
e142bf6203 kubeadm: enable secure serving for the kube-scheduler 
Secure serving was already enabled for kube-controller-manager.
Do the same for kube-scheduler, by passing the flags
"authentication-kubeconfig" and "authorization-kubeconfig"
to the binary in the static Pod.

This change allows the scheduler to perform reviews on incoming
requests, such as:
- authentication.k8s.io/v1beta1 TokenReview
- authorization.k8s.io/v1 SubjectAccessReview

The authentication and authorization checks for "system:kube-scheduler"
users were previously enabled by PR 72491.
 2019-08-03 19:15:32 +03:00
Kubernetes Prow Robot
44f3aafc1a Merge pull request #80867 from fabriziopandini/fix-certs-generation-for-external-etcd 
kubeadm: fix-certs-generation-for-external-etcd
 2019-08-02 20:28:06 -07:00
Kubernetes Prow Robot
40178ccf7f Merge pull request #80894 from bart0sh/PR0077-kubeadm-simplified-returns 
kubeadm: simplified returns
 2019-08-02 12:40:35 -07:00
mattmelgard
f03bbe1b6d Add a defer to kubelet boostrap token deletion 2019-08-02 09:57:00 -06:00
Kubernetes Prow Robot
f6bc0ea03e Merge pull request #80891 from bart0sh/PR0076-kubeadm-handle-joinControPlaneDoneTemp.Execute-errors 
handle joinControPlaneDoneTemp.Execute errors
 2019-08-02 08:44:05 -07:00
Kubernetes Prow Robot
564eff757c Merge pull request #80862 from drpaneas/return_warnings 
kubeadm reset: replace Errorf with Warningf
 2019-08-02 04:54:11 -07:00
Ed Bartosh
6b21af79c2 kubeadm: simplified returns 2019-08-02 13:01:02 +03:00
Ed Bartosh
d0506f5a50 handle joinControPlaneDoneTemp.Execute errors 2019-08-02 12:37:57 +03:00
Kubernetes Prow Robot
547617a523 Merge pull request #80804 from olivierlemasle/add-join-timeout 
Make kubeadm join discovery wait for a finite time
 2019-08-01 13:38:41 -07:00
Kubernetes Prow Robot
f5c9d38a3f Merge pull request #80833 from neolit123/1.16-update-version 
kubeadm: update the version constants for 1.16
 2019-08-01 11:52:44 -07:00