12062 Commits

Author	SHA1	Message	Date
Patrick Ohly	02efe09abe	component-base/logs: improve handling of re-applying a configuration ... Normal binaries should never have to do this. It's not safe when there are already some goroutines running which might do logging. Therefore the new default is to return an error when a binary accidentally re-applies. A few unit ensure that there are no goroutines and have to call the functions more then once. The new ResetForTest API gets used by those to enable changing the logging settings more than once in the same process. Integration tests use the same code as the normal binaries. To make reuse of that code safe, component-base/logs can be configured to silently ignore any additional calls. This addresses data races that were found when enabling -race for integration tests. To catch cases where the integration test does want to modify the config, the old and new config get compared and an error is raised when it's not the same. To avoid having to modify all integration tests which start test servers, reconfiguring component-base/logs is done by the test server packages.	2023-07-05 19:08:54 +02:00
Patrick Ohly	7f5a02fc7e	dra resourceclaim controller: enhance logging ... Adding logging to event handlers makes it more obvious why (or why not) claims and pods need to be processed.	2023-07-05 16:10:20 +02:00
Dan Winship	e2900da46a	Remove unnecessary utiliptables.Interface arg from local detectors ... getLocalDetector() used to pass a utiliptables.Interface to NewDetectLocalByCIDR() so that NewDetectLocalByCIDR() could verify that the passed-in CIDR was of the same family as the iptables interface. It would make more sense for getLocalDetector() to verify this itself and just *not call NewDetectLocalByCIDR* if the families don't match, and that's what the code does now. So there's no longer any need to pass the utiliptables.Interface to the local detector.	2023-07-05 09:11:23 -04:00
Dan Winship	7690c6e812	Simplify getDualStackLocalDetectorTuple ... Since the single-stack and dual-stack local-detector-getters now have the same behavior in terms of error-checking and dual-stack config, we can just replace the contents of getDualStackLocalDetectorTuple() with a pair of calls to getLocalDetector().	2023-07-05 09:09:54 -04:00
Dan Winship	cefd50a753	Improve the single-stack LocalDetector behavior ... 1. When bringing up a single-stack kube-proxy in a dual-stack cluster, allow using either the primary or secondary IP family. 2. Since the earlier config-checking code will already have bailed out if the single-stack configuration is unusably broken, we don't need to do that here. Instead, just return a no-op local detector if there are no usable CIDRs of the expected IP family.	2023-07-05 09:06:25 -04:00
Dan Winship	bfccfa7016	Add names to the getLocalDetector unit tests, use t.Run	2023-07-05 09:06:25 -04:00
Kubernetes Prow Robot	4c18d40af1	Merge pull request #119075 from chendave/test_gv ... kubeadm: check the GV after the config migration	2023-07-04 22:00:54 -07:00
Kubernetes Prow Robot	76227fdb3d	Merge pull request #118874 from my-git9/dns-ut ... kubeadm: increase ut coverage kubeadm/app/phases/dns	2023-07-04 19:30:54 -07:00
Dave Chen	31943cc3f4	kubeadm: check the GV after the config migration ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-07-05 10:04:12 +08:00
Kubernetes Prow Robot	68b7685b2a	Merge pull request #119081 from sttts/sttts-public-ip-validation-move ... kube-apiserver: move "public IP matches IP family" check to option validation	2023-07-04 14:28:54 -07:00
Dr. Stefan Schimanski	4149933ed2	kube-apiserver: move "public IP matches IP family" check to option validation	2023-07-04 22:28:27 +02:00
Kubernetes Prow Robot	8d0e46a5ec	Merge pull request #119041 from sttts/sttts-move-back-master-count ... cmd/kube-apiserver: move back master count variable from generic controlplane	2023-07-04 13:22:54 -07:00
Kubernetes Prow Robot	0235a5a206	Merge pull request #118707 from pacoxu/unwanted-status-order ... update the unwanted-dependencies order	2023-07-04 12:20:54 -07:00
xin.li	c26e1ba10c	[UT] increase coverage kubeadm/app/phases/dns ... Signed-off-by: xin.li <xin.li@daocloud.io>	2023-07-04 22:11:32 +08:00
Kubernetes Prow Robot	3149875175	Merge pull request #119059 from pacoxu/migrate-experimental-v1beta4 ... kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3	2023-07-04 06:28:53 -07:00
Kubernetes Prow Robot	75889ecec5	Merge pull request #119003 from danwinship/proxy-single-dual ... do a better job of validating IP family of kube-proxy config	2023-07-04 02:16:53 -07:00
Paco Xu	01b1174c11	kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3	2023-07-04 15:20:43 +08:00
Kubernetes Prow Robot	746b88c6ff	Merge pull request #118867 from chendave/env_custom ... kubeadm: Support custom env in control plane component	2023-07-03 22:02:52 -07:00
Dave Chen	c68a6b0745	kubeadm: fix fuzzing for ExtraEnvs defined in the control plane component ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-07-04 10:01:26 +08:00
Dave Chen	80b035a116	kubeadm: Support custom env in control plane component ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-07-04 09:57:07 +08:00
Dan Winship	a966d18608	Double-check the proxy configuration vs the available IP families	2023-07-03 08:34:06 -04:00
Dr. Stefan Schimanski	36e458612a	cmd/kube-apiserver: move back master count variable from generic controlplane	2023-07-03 13:20:29 +02:00
Kubernetes Prow Robot	14b08b82e4	Merge pull request #118941 from neolit123/1.28-restore-test-function-for-config-migrate ... kubeadm: restore and generalize the TestMigrateOldConfig test	2023-07-01 03:18:48 -07:00
Dan Winship	1f2bf32e95	Figure out single-stack/dual-stack support before creating the proxier ... Rather than having this as part of createProxier(), explicitly figure out what IP families the proxier can support beforehand, and bail out if this conflicts with the detected IP family.	2023-06-30 17:43:04 -04:00
Dan Winship	8abfa89e82	Move proxy platformSetup call, and do LocalDetector setup from there	2023-06-30 17:39:36 -04:00
Dan Winship	ebb0fdd4f6	Don't explicitly filter config.NodePortAddresses by IP family ... There's no need to do this any more: proxyutil.NodePortAddresses does it itself.	2023-06-30 12:32:59 -04:00
Dan Winship	a74b9fde3a	Don't pass around full node in proxy constructor, just pass PodCIDRs	2023-06-30 11:30:17 -04:00
Lubomir I. Ivanov	0537c1da56	kubeadm: move migrate / validate tests out of config_tests.go ... Place the tests in common_tests.go on the backend side in common_tests.go. A test for migrate TestMigrateOldConfig was already present there. Apply slightly better coverage to it and rename desc -> name. Fix typo in argument oldConfig -> config in ValidateConfig().	2023-06-30 18:14:10 +03:00
Kubernetes Prow Robot	7bac0cee89	Merge pull request #118946 from SataQiu/clean-kubeadm-20230629 ... kubeadm: remove unused Kind and Resource functions from output API	2023-06-29 02:51:47 -07:00
Kubernetes Prow Robot	4036b6fb41	Merge pull request #118922 from champtar/kubeadm-backdate-ca ... kubeadm: backdate generated CAs	2023-06-28 12:28:56 -07:00
SataQiu	24f4785e3e	kubeadm: remove unused Kind and Resource functions from output API	2023-06-29 00:16:38 +08:00
SataQiu	90f82d05ce	kubeadm: remove unused Kind and Resource functions from kubeadm internal API	2023-06-28 23:36:53 +08:00
Lubomir I. Ivanov	fd15c6791a	kubeadm: restore and generalize the TestMigrateOldConfig test ... The test required two APIs to be available to test for migration. Keep it simple and use a variable "gv" on top of the function body to easily swap the version to be tested once an old API is deleted. e.g. currently v1beta3 is the "old" API, v1beta4 is the "new" one. Ultimately, this test only makes sure that the expected kinds are available post migration.	2023-06-28 18:21:57 +03:00
Kubernetes Prow Robot	52457842d1	Merge pull request #117055 from cyclinder/csi_migration ... remove CSI-migration gate	2023-06-28 04:28:31 -07:00
Kubernetes Prow Robot	ddbf3575a7	Merge pull request #116729 from AxeZhan/handlers_sync ... [Scheduler] Make sure handlers have synced before scheduling	2023-06-28 01:26:31 -07:00
Etienne Champetier	812556365b	kubeadm: backdate generated CAs by 5 minutes ... This allow for a small time jump backward after certificates generation. Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2023-06-28 00:12:29 -04:00
Kubernetes Prow Robot	1c32c3bd9f	Merge pull request #118866 from neolit123/1.28-add-v1beta4-to-scheme ... kubeadm: add v1beta4 to scheme; add --allow-experimental-api flag	2023-06-27 08:56:44 -07:00
kidddddddddddddddddddddd	9c7166ff63	wait for eventhandlers to sync before run scheduler	2023-06-27 23:19:34 +08:00
Kubernetes Prow Robot	f7967af3bd	Merge pull request #118633 from sttts/sttts-controlplane-split ... kube-apiserver: split apart generic control plane options	2023-06-26 13:56:29 -07:00
Dr. Stefan Schimanski	764da8a01d	FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part	2023-06-26 21:50:38 +02:00
Dr. Stefan Schimanski	1b3779baa0	MOVE: cmd/kube-apiserver/app/options: split apart controlplane part	2023-06-26 21:50:37 +02:00
Kubernetes Prow Robot	96d853f4b8	Merge pull request #118870 from SataQiu/kubeadm-clean-v1beta4 ... kubeadm: remove unused Kind and Resource functions from v1beta4 API	2023-06-26 09:40:29 -07:00
SataQiu	4298953c26	kubeadm: remove unused Kind and Resource functions from v1beta4 API	2023-06-26 22:11:52 +08:00
Dr. Stefan Schimanski	6e079545c4	cmd/kube-apiserver: move options completion into options package	2023-06-26 15:20:40 +02:00
Lubomir I. Ivanov	f04484fe77	kubeadm: add the --allow-experimental-api flag to "config" commands ... Add the flag --allow-experimental-api to the "config migrate" and "config validate" commands. The flag allows validating / migrating-to a unreleased / experimental API version. Add a new experimentalAPIVersions map in validateSupportedVersion() that contains v1beta4.	2023-06-26 13:50:47 +03:00
Lubomir I. Ivanov	0774f779d5	kubeadm: add v1beta4 to the kubeadm API scheme ... The highest priority is still v1beta3.	2023-06-26 13:43:47 +03:00
Kubernetes Prow Robot	027ac5a426	Merge pull request #118762 from neolit123/1.28-kubeadm-add-v1beta4-boilerplate ... kubeadm: add v1beta4 API boilerplate	2023-06-25 22:05:08 -07:00
Kubernetes Prow Robot	4f6a750bbf	Merge pull request #115813 from atiratree/controller-aliases ... Introduce controller aliases for KCM and CCM	2023-06-22 04:55:39 -07:00
Kubernetes Prow Robot	28296ba59e	Merge pull request #113994 from mengjiao-liu/contextual-logging-controller-certificates ... certificate controller: use contextual logging	2023-06-21 09:03:42 -07:00
Lubomir I. Ivanov	edb59e9bc7	kubeadm: move token defaulting and related constants to token package ... Move the defaulting of the BootstrapToken type inside the bootstraptoken/v1 package. This prevents an error where codegen complains that a defaulter for the type exists in both the kubeadm v1beta3 and v1beta4. Adapt kubeadm code to use the defaulter function and constants that were moved to bootstraptoken/v1. NOTE: technically this is a breaking change for direct users of v1beta3/SetDefaults_BootstrapToken().	2023-06-21 13:34:21 +03:00
Kubernetes Prow Robot	2d60430a16	Merge pull request #118730 from my-git9/ut-features ... [UT] increase coverage ut for kubeadm/app/features	2023-06-20 07:54:36 -07:00
Lubomir I. Ivanov	eecac05871	kubeadm: add v1beta4 API boilerplate ... Create v1beta4 by copying v1beta3.	2023-06-20 14:33:30 +03:00
xin.li	180c2332bf	[UT] increase coverage ut for kubeadm/app/features ... Signed-off-by: xin.li <xin.li@daocloud.io>	2023-06-20 12:57:22 +08:00
Filip Křepinský	85d9339ef8	add KCM names into CCM cmd allowed import-restrictions	2023-06-19 15:01:01 +02:00
Filip Křepinský	4e6a3fb9c1	deduplicate cloud provider controller names ... and move the to cloud-provider module	2023-06-19 15:01:01 +02:00
Filip Křepinský	e5f5a9bfdb	use controller names for CLI FlagSets to show the names in help	2023-06-19 15:01:01 +02:00
Filip Křepinský	cd56748ec5	reference controllers correctly from CLI help	2023-06-19 15:01:01 +02:00
Filip Křepinský	9fd8f568fe	introduce CCM controller aliases and unify controller names	2023-06-19 15:01:01 +02:00
Filip Křepinský	94792d85de	simplify TestValidateControllersOptions test	2023-06-19 15:00:59 +02:00
Filip Křepinský	9730951136	introduce KCM controller aliases and unify controller names	2023-06-19 14:59:33 +02:00
Lubomir I. Ivanov	ede2ec22b6	kubeadm: drop older etcd versions from kubeadm support ... - drop versions < 1.22 in the etcd map - use 3.5.9-0 for >= 1.22 versions - make the minimum version for external etcd 3.4.13-4 and max 3.5.9-0 - update images_test to not rely on a pinned etcd version in tests note: the image 3.4.18-0 was never released in registry.k8s.io!	2023-06-18 15:38:53 +03:00
Paco Xu	f44029705f	exit 1 if status are not as expected(order) ... Signed-off-by: Paco Xu <paco.xu@daocloud.io>	2023-06-18 14:09:50 +08:00
Kubernetes Prow Robot	47e79b8156	Merge pull request #116910 from fatsheep9146/job-controller-contextual-logging ... Migrated pkg/controller/job to contextual logging	2023-06-14 08:00:18 -07:00
Ziqi Zhao	7bc449d7e0	add contextual logging to job-controller ... Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>	2023-06-14 13:40:02 +08:00
carlory	5e048041e4	remove helper function for unused storage feature in pkg/proxy/util	2023-06-13 09:22:59 +08:00
Kubernetes Prow Robot	2353dac98a	Merge pull request #117964 from ytinirt/patch-1 ... Update --image-gc-low-threshold option's description	2023-06-12 13:46:26 -07:00
Kubernetes Prow Robot	32048b1467	Merge pull request #117550 from borgerli/cron-job-syncs ... add --concurrent-cron-job-syncs flag for kube-controller-manager	2023-06-12 13:46:19 -07:00
Kubernetes Prow Robot	03486cec21	Merge pull request #116530 from pacoxu/undepreated-provider-id ... undeprecate kubelet --provider-id flag	2023-06-12 13:45:58 -07:00
Kubernetes Prow Robot	49d7b3f0a0	Merge pull request #118596 from SataQiu/fix-kubelet-20230610 ... kubelet: mark '--azure-container-registry-config' flag as deprecated	2023-06-12 12:44:10 -07:00
Kubernetes Prow Robot	8a0b1bbf24	Merge pull request #118095 from carlory/patch-002 ... remove unused pv informer from expand_controller	2023-06-12 11:43:58 -07:00
SataQiu	910630fbea	kubelet: mark '--azure-container-registry-config' flag as deprecated	2023-06-10 00:52:24 +08:00
Kubernetes Prow Robot	b2042d6ce4	Merge pull request #118338 from aroradaman/mv-ipset ... move pkg/util/ipset inside pkg/proxy/ipvs	2023-06-09 08:14:24 -07:00
Kubernetes Prow Robot	577d524f08	Merge pull request #118513 from danwinship/proxy-node-ip ... kube-proxy startup node IP detection	2023-06-08 17:30:12 -07:00
Kubernetes Prow Robot	de7360d9bc	Merge pull request #118115 from TommyStarK/gh_118090 ... kube-proxy: remove log warning about not using config file	2023-06-08 15:40:24 -07:00
Kubernetes Prow Robot	7ef5ec499d	Merge pull request #117029 from Rajalakshmi-Girish/prune-junit-xml ... Add flag to prune PASSED subtests in junit xml and have top level tests	2023-06-07 06:18:24 -07:00
Dr. Stefan Schimanski	77cf37ee54	STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane	2023-06-07 10:11:04 +03:00
Dr. Stefan Schimanski	7961812bed	STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane	2023-06-07 10:11:04 +03:00
Dr. Stefan Schimanski	43be9c3a0a	MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package	2023-06-07 10:11:04 +03:00
Dr. Stefan Schimanski	9be6e7bb33	STRUCTURE: cmd/kube-apiserver/app: stratify construction with options/config/server	2023-06-07 10:05:43 +03:00
Dr. Stefan Schimanski	e6ed4c7934	CLEANUP: cmd/kube-apiserver/app: remove trivial funcs	2023-06-07 10:05:43 +03:00
Dr. Stefan Schimanski	f7d4e90b5c	MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane	2023-06-07 10:05:43 +03:00
Dan Winship	4962e6eacb	Squash detectNodeIP and nodeIPTuple together	2023-06-06 20:48:00 -04:00
Dan Winship	b69b34bec6	Move a kube-proxy unit test to the correct file	2023-06-06 16:01:03 -04:00
Kubernetes Prow Robot	5a5ebfd88b	Merge pull request #118499 from aojea/kproxy_podcidr_alt ... kube-proxy avoid race condition using LocalModeNodeCIDR	2023-06-06 12:18:11 -07:00
Kubernetes Prow Robot	6f116dc4d5	Merge pull request #118416 from sttts/sttts-etcd-options-complete ... k8s.io/apiserver: remove skewed completion from EtcdOptions	2023-06-06 09:20:22 -07:00
Antonio Ojea	26801d6541	kube-proxy avoid race condition using LocalModeNodeCIDR ... Since kube-proxy in LocalModeNodeCIDR needs to obtain the PodCIDR assigned to the node it watches for the Node object. However, kube-proxy startup process requires to have these watches in different places, that opens the possibility of having a race condition if the same node is recreated and a different PodCIDR is assigned. Initializing the second watch with the value obtained in the first one allows us to detect this situation. Change-Id: I6adeedb6914ad2afd3e0694dcab619c2a66135f8 Signed-off-by: Antonio Ojea <aojea@google.com>	2023-06-06 15:03:22 +00:00
Rajalakshmi Girish	dddbecb47e	prune's xml files to display only top level tests and failed sub-tests	2023-06-06 05:26:00 -07:00
Dr. Stefan Schimanski	e9e4acb1dd	k8s.io/apiserver: remove skewed completion from EtcdOptions	2023-06-06 08:32:34 +03:00
cyclinder	8e4228a8c1	remove CSI-migration gate	2023-06-04 18:40:17 +08:00
Dr. Stefan Schimanski	f351c6d1ec	k8s.io/apiserver: apply storage object count tracker implicitly	2023-06-02 20:24:06 +02:00
Kubernetes Prow Robot	2eb4eac581	Merge pull request #118353 from SataQiu/fix-kubeadm-test-20230531 ... kubeadm: add command-line integration test to ensure that the supported etcd version is always available for the stable Kubernetes version	2023-06-02 04:40:53 -07:00
Andy Zhang	1ce285ad3d	Revert "removed the deprecated azureFile in-tree storage plugin"	2023-06-02 10:20:53 +08:00
SataQiu	daa7115907	kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate	2023-06-01 23:06:26 +08:00
Kubernetes Prow Robot	33a2438de9	Merge pull request #118341 from pacoxu/add-pacoxu-kubeadm ... add pacoxu to kubeadm approvers	2023-06-01 04:33:46 -07:00
SataQiu	d49c43abde	kubeadm: add integration test to ensure that the supported etcd version is always available for the stable Kubernetes version	2023-06-01 18:45:06 +08:00
TommyStarK	db2389ba9c	kube-proxy: remove log warning about not using config file ... Signed-off-by: TommyStarK <thomasmilox@gmail.com>	2023-06-01 11:48:16 +02:00
carlory	07a1aea2de	remove unused cloudprovider param from the ProbeControllerVolumePlugins func	2023-05-31 23:08:41 +08:00
Kubernetes Prow Robot	23698d3e9f	Merge pull request #118335 from pacoxu/revert-118316-fix-kubeadm-20230529 ... Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node"	2023-05-31 02:01:57 -07:00
Paco Xu	f2a5e247eb	add pacoxu to kubeadm approvers list	2023-05-31 10:34:42 +08:00
Daman Arora	2d8c820741	move pkg/util/ipset inside pkg/proxy/ipvs ... Signed-off-by: Daman Arora <aroradaman@gmail.com>	2023-05-31 00:30:20 +05:30
Kubernetes Prow Robot	9a40920c06	Merge pull request #118296 from uablrek/remove-moby-ipvs ... Move pkg/util/ipvs inside pkg/proxy/ipvs	2023-05-30 10:14:02 -07:00
Paco Xu	85e0d8c8b1	Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node"	2023-05-31 00:30:08 +08:00
Kubernetes Prow Robot	320d915897	Merge pull request #118316 from SataQiu/fix-kubeadm-20230529 ... kubeadm: add --feature-gates flag for kubeadm upgrade node	2023-05-29 13:01:43 -07:00
Kubernetes Prow Robot	a6f641b656	Merge pull request #118236 from andyzhangx/remove-azurefile ... removed the deprecated `azureFile` in-tree storage plugin	2023-05-29 09:25:54 -07:00
Kubernetes Prow Robot	76bad75c1e	Merge pull request #118270 from pacoxu/warningonly-for-deprecatedFG ... kubeadm: warning only for deprecated FG	2023-05-29 08:23:55 -07:00
SataQiu	4523a301c8	kubeadm: enable --feature-gates flag for kubeadm upgrade node	2023-05-29 21:32:42 +08:00
Paco Xu	0951204298	kubeadm: Supports() return true for all alpha/beta/ga/deprecated	2023-05-29 13:05:20 +08:00
SataQiu	c6aaa1eab0	kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning	2023-05-29 10:39:20 +08:00
Lars Ekman	4aa5441de2	Move pkg/util/ipvs inside pkg/proxy/ipvs ... Ipvs will never be used by any other component within K8s than the proxy/ipvs Signed-off-by: Lars Ekman <uablrek@gmail.com>	2023-05-27 18:37:50 +02:00
Kubernetes Prow Robot	c35a2775b2	Merge pull request #115554 from yt2985/cleanSA ... LegacyServiceAccountTokenCleanUp alpha	2023-05-26 08:54:53 -07:00
Paco Xu	6a867eacd8	kubeadm: warning only for deprecated FG	2023-05-26 09:47:40 +08:00
Kubernetes Prow Robot	d8e9a7b33a	Merge pull request #118017 from danwinship/kube-proxy-platform ... merge duplicated linux/windows kube-proxy setup code	2023-05-25 16:39:02 -07:00
Kubernetes Prow Robot	cfeb83d56b	Merge pull request #116525 from ffromani/kubelet-podresources-endpoint-ga ... node: podresources: graduate to GA	2023-05-25 16:38:50 -07:00
Kubernetes Prow Robot	3d27dee047	Merge pull request #118065 from BenTheElder/prune-junit-cleanup ... prune-junit-xml cleanup	2023-05-25 11:34:54 -07:00
Kubernetes Prow Robot	03ebd4b7ef	Merge pull request #116656 from HirazawaUi/fik-fd-leaks ... Cleanup fd leaks and file removal cleanup	2023-05-24 22:50:50 -07:00
Kubernetes Prow Robot	90ed8ba687	Merge pull request #118013 from neolit123/1.28-add-config-validate ... kubeadm: add the "config validate" subcommand	2023-05-24 20:36:49 -07:00
tinatingyu	133eff3df4	implement LegacyServiceAccountTokenCleanUp alpha	2023-05-24 23:20:17 +00:00
Kubernetes Prow Robot	3efd083b6c	Merge pull request #118012 from mengjiao-liu/runtime-framework-pass-context ... kube-scheduler: NewFramework function to pass the context parameter	2023-05-24 11:50:49 -07:00
Lubomir I. Ivanov	72e4c9a82a	kubeadm: add the "config validate" subcommand ... The command can be used to validate an input --config and throw warnings and errors. Add a new argument strctErrors to the functions documentMapTo{Init|Join}Configuration(). This allows to return errors from the calls to VerifyUnmarshalStrict(). Add a new function verifyKnownGVKs() in config/common.go that is used to verify if a list of GVKs in a config file is known. This function is used by the "validate" and "migrate" commands. Both commands now throw errors for unknown APIs or fields.	2023-05-24 21:22:02 +03:00
Kubernetes Prow Robot	7024beeeeb	Merge pull request #117984 from champtar/kubeadm-init-speedup ... kubeadm: speedup init by 0s or 20s	2023-05-24 09:09:01 -07:00
andyzhangx	485d1631cd	Remove Azure file in-tree storage plugin	2023-05-24 14:10:34 +00:00
Dan Winship	6232ac734a	Merge duplicated Linux/Windows kube-proxy setup code	2023-05-23 16:17:07 -04:00
Dan Winship	08ce580576	Add ProxyServer.platformSetup ... Move the Linux-specific conntrack setup code into a new "platformSetup" rather than trying to fit it into the generic setup code. Also move metrics registration there.	2023-05-23 16:17:04 -04:00
Mengjiao Liu	1c05cf1d51	kube-scheduler: NewFramework function to pass the context parameter ... Co-authored-by: Aldo Culquicondor <1299064+alculquicondor@users.noreply.github.com>	2023-05-23 10:17:34 +08:00
Benjamin Elder	96d48de9b9	add OWNERS for cmd/prune-junit-xml	2023-05-22 11:01:38 -07:00
Lubomir I. Ivanov	d8db9640fa	kubeadm: remove function pointer comparison in phase test ... TestBindToCommandArgRequirements has a .Pointer() comparison that is not guaranteed to pass given the reflected functions are closures. This test is consistently failing on Go 1.21 rc1. Remove said comparison from the test.	2023-05-20 23:03:45 +03:00
Kubernetes Prow Robot	589d6f3886	Merge pull request #117630 from skitt/intstr-fromint32-cluster-lifecycle ... Cluster lifecycle: use new intstr functions	2023-05-19 08:50:30 -07:00
Kubernetes Prow Robot	15a1f9a39d	Merge pull request #117921 from kkkkun/clean-up-etcd-version ... clean up unsupport etcd version	2023-05-18 20:30:28 -07:00
Etienne Champetier	19ae2de19c	kubeadm: speedup init by 0s or 20s ... Before this commit, kubeadm starts kubelet before it creates /etc/kubernetes/manifests. On boot, kubelet tries to load the static pod manifests from this dir by calling `listConfig()` 7ad8303b96/pkg/kubelet/config/file.go (L97) and it'll then try to start a file watcher every second for 20s 7ad8303b96/pkg/kubelet/config/file.go (L114) 7ad8303b96/pkg/kubelet/config/file_linux.go (L51-L67) If kubelet starts and calls `listConfig()` before kubeadm creates `/etc/kubernetes/manifests` (while writing the static pods manifests), the file watcher will be created less than a second after, but there will be no changes to report, so the manifests will only be detected on the next tick of `listTicker`, a bit less than 20s later 7ad8303b96/pkg/kubelet/config/file.go (L102-L103) Even if we fixed the watch code to `listConfig()` just after starting the inotify watch, watching source file is only supported on linux, so moving the manifests generation before kubelet start fixes all cases and make more sense IMO. Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2023-05-18 15:09:15 -04:00
Kubernetes Prow Robot	7ad8303b96	Merge pull request #118104 from liggitt/crd-sync ... Fix waiting for CRD sync at server start	2023-05-18 11:26:45 -07:00
Jordan Liggitt	e4102d5e30	Test APIService safe handling at startup	2023-05-18 12:17:37 -04:00
Jordan Liggitt	3be3997193	Fix waiting for CRD sync at server start	2023-05-18 11:07:53 -04:00
carlory	bea71a3e4e	remove unused pv informer from expand_controller	2023-05-18 15:58:38 +08:00
Kubernetes Prow Robot	f9d97e0880	Merge pull request #118069 from SataQiu/fix-kubeadm-20230517 ... kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet	2023-05-17 21:26:40 -07:00
Kubernetes Prow Robot	9d613da22b	Merge pull request #118066 from BenTheElder/yamlfmt-cleanup ... yamlfmt cleanup	2023-05-17 15:42:33 -07:00
Benjamin Elder	fc4fb004cf	add reviewers and labels to yamlfmt	2023-05-17 09:59:26 -07:00
SataQiu	261de704c2	kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet	2023-05-17 17:05:24 +08:00
kkkkun	8b4840aa37	clean up unsupport etcd version ... Signed-off-by: kkkkun <scuzk373x@gmail.com>	2023-05-17 16:35:50 +08:00
Benjamin Elder	e0ebac6c9c	drop redundant NArg check when looping Args	2023-05-16 23:23:22 -07:00
Benjamin Elder	82c40e3697	drop redundant NArg check when looping Args	2023-05-16 23:12:37 -07:00
Humble Chirammal	e3eb4bd0c5	updating dependencies.yaml for etcd v3.5.9 version ... Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>	2023-05-16 20:27:17 +05:30
Kubernetes Prow Robot	ffb4172ff1	Merge pull request #115754 from linxiulei/sched ... Start informers after leader election	2023-05-15 15:41:36 -07:00
Eric Lin	a52dcd0d9f	Add DelayCacheUntilActive option to start informers after leader election ... If scheduler fails to be active (elected if leader election is enabled), setting this option will not start informers so that to avoid memory overhead. Signed-off-by: Eric Lin <exlin@google.com>	2023-05-15 19:52:04 +00:00
Kubernetes Prow Robot	1487fc762f	Merge pull request #117982 from jpbetz/sig-roles-jpbetz ... Add api-machinery TL owners permissions for jpbetz	2023-05-15 09:07:29 -07:00
Joe Betz	f0f92853ad	Add api-machinery TL owners permissions for jpbetz	2023-05-15 11:09:54 -04:00
Kubernetes Prow Robot	f70c26d495	Merge pull request #117919 from dlipovetsky/kubeadm-etcd-log-message-format ... kubeadm: Remove leading zeros from etcd member ID in log messages	2023-05-14 20:09:38 -07:00
Daniel Lipovetsky	ef9f8d7c0c	kubeadm: Remove leading zeros from etcd member ID in log messages	2023-05-12 17:38:44 -07:00
Daniel Lipovetsky	ff4c6916ec	kubeadm: Fix log message when etcd member is added as learner	2023-05-12 17:38:44 -07:00
Kubernetes Prow Robot	8479db5876	Merge pull request #117946 from lavalamp/lavalamp-taking-a-break ... lavalamp is taking a long break	2023-05-12 14:34:47 -07:00
Kubernetes Prow Robot	8f9c185696	Merge pull request #116761 from iancoolidge/devel-cpuset-revendor ... Complete cpuset export to k/utils by revendoring	2023-05-12 08:37:02 -07:00
ZHAO Yao	4b50c4bb01	Update --image-gc-low-threshold option's description ... kubelet option '--image-gc-low-threshold' description says it 'should not be larger than that of --image-gc-high-threshold'. But actually, it must less than '--image-gc-high-threshold', according to 02659772cb/pkg/kubelet/apis/config/validation/validation.go (L84)	2023-05-12 14:51:45 +08:00
Daniel Smith	1ffe3f467e	lavalamp is taking a long break	2023-05-11 16:43:38 +00:00
Kubernetes Prow Robot	64af2d93e5	Merge pull request #117295 from aojea/transport_cache_metrics ... add new metric for the internal client-go cache size	2023-05-11 08:59:02 -07:00
Kubernetes Prow Robot	19aaf0c0e1	Merge pull request #117724 from dlipovetsky/kubeadm-remove-etcd-member-idempotent ... kubeadm: Make etcd member removal idempotent	2023-05-10 12:08:59 -07:00
Daniel Lipovetsky	5fd5768ef3	kubeadm: Make etcd member removal idempotent ... If the etcd member is not found, then it has already been removed, and kubeadm reset should immediately complete the 'remove-etcd-member' phase. Previously, the phase would complete only once the exponential-backoff retry expired, up to 3 minutes duration. This commit also fixes a semantic error in etcd.GetMemberID. Previously, the function returned 0 if no member was found, but 0 is not a valid member ID.	2023-05-10 09:13:31 -07:00
SataQiu	164113bc1c	fix a bug where the KubeletConfiguration is not printed correctly in the log	2023-05-10 22:29:37 +08:00
Kubernetes Prow Robot	626b2db1ca	Merge pull request #117335 from kkkkun/update-etcd-3.5.8 ... etcd: Update version to 3.5.8	2023-05-10 03:38:59 -07:00
Kubernetes Prow Robot	44a93d0b9d	Merge pull request #117792 from dlipovetsky/kubeadm-etcd-client-refactor ... kubeadm: Add etcd client unit tests	2023-05-09 11:02:20 -07:00
HirazawaUi	82e3fa0930	fix fd leaks and failed file removing for main pkg and cmd	2023-05-09 09:24:11 -05:00
Min Ni	e865b30abd	update serial number to a valid non-zero number in ca certificate (#117791) ... * update serial number to a valid non-zero number in ca certificate * fix the existing problem (0 SerialNumber in all certificate) as part of this PR in a separate commit	2023-05-09 06:34:08 -07:00
Daniel Lipovetsky	05b3449346	kubeadm: Add etcd client unit tests	2023-05-08 13:35:03 -07:00
Daniel Lipovetsky	fc1b228779	kubeadm: Use internal etcd client through an interface	2023-05-08 13:35:03 -07:00
SataQiu	b4560f9e57	kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade	2023-05-08 22:17:32 +08:00
Kubernetes Prow Robot	50ce134595	Merge pull request #117835 from pacoxu/kubeadm-crictl ... kubeadm: fix crictl pull using wrong flag, use -i and -r	2023-05-06 09:31:15 -07:00
Kubernetes Prow Robot	98cf297e57	Merge pull request #117391 from catandcoder/master ... fix doc mismatch	2023-05-06 08:35:17 -07:00
kkkkun	c56839c0a1	etcd: Update version to 3.5.8 ... Signed-off-by: kkkkun <scuzk373x@gmail.com>	2023-05-06 17:29:47 +08:00
Paco Xu	64f2fe2357	kubeadm: fix crictl pull using wrong flag, use -i and -r	2023-05-06 14:50:21 +08:00
Kubernetes Prow Robot	ff244415ae	Merge pull request #117747 from danwinship/proxy-startup-config ... proxy startup-time config handling cleanup (take 2)	2023-05-04 14:37:24 -07:00
Dan Winship	0c9f55588c	Simplify creation of default KubeProxyConfiguration	2023-05-04 11:39:40 -04:00
Kubernetes Prow Robot	763b10f000	Merge pull request #117421 from cbandy/scheduler-testing-setenv ... Replace os.Setenv with testing.T.Setenv in tests	2023-05-03 23:54:53 -07:00
Ian K. Coolidge	cede96336a	Depend on k8s.io/utils cpuset ... Steps performed: $ find . -name '*.go' -exec sed -i 's|k8s.io/kubernetes/pkg/kubelet/cm/cpuset|k8s.io/utils/cpuset|g' {} \ $ ./hack/update-vendor.sh $ ./hack/update-gofmt.sh $ git rm -r pkg/kubelet/cm/cpuset/	2023-05-03 16:26:09 +00:00
Dan Winship	10a869fc75	Remove duplicated config fields from ProxyServer ... Rather than duplicating some of the KubeProxyConfiguration into ProxyServer, just store the KubeProxyConfiguration itself so later code can reference it directly. For the fields that get platform-specific defaults (Mode, DetectLocalMode), fill the defaults directly into the KubeProxyConfiguration rather than keeping the original there and the defaulted version in the ProxyServer.	2023-05-03 10:15:37 -04:00
SataQiu	1f7c07f355	scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration	2023-05-03 21:43:19 +08:00
Dan Winship	c4575c3438	Fix up detect-local-mode validation ... Validate the --detect-local-mode value in the API object validation rather than doing it separately later. Also, remove runtime checks and unit tests for cases that would be blocked by validation	2023-05-03 08:22:49 -04:00
Dan Winship	3734fe7ab1	Remove some useless error checks ... Don't return errors in the event of programmer errors, and don't double-check things that were already validated.	2023-05-03 08:22:45 -04:00
Alexander Zielenski	ffb9c076d7	add OpenAPIV3 config to tests and server options	2023-05-01 13:18:44 -07:00
Francesco Romani	69bc685556	node: podresources: graduate to GA ... Lock the feature gate to ON and simplify the code accordingly. Signed-off-by: Francesco Romani <fromani@redhat.com>	2023-05-01 16:23:28 +02:00
Stephen Kitt	4c83aae2cc	kubeadm: replace intstr.FromInt with intstr.FromInt32 ... This touches cases where FromInt() is used on numeric constants, or values which are already int32s, or int variables which are defined close by and can be changed to int32s with little impact. Signed-off-by: Stephen Kitt <skitt@redhat.com>	2023-05-01 09:17:50 +02:00
Kubernetes Prow Robot	f47d7f3a16	Merge pull request #117690 from pacoxu/revert-117297-proxy-startup-config ... Revert "proxy startup-time config handling cleanup"	2023-04-30 03:08:17 -07:00
Kubernetes Prow Robot	bc872028ab	Merge pull request #117660 from pacoxu/UpgradeAddonsBeforeControlPlane ... kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane	2023-04-29 20:50:17 -07:00
Paco Xu	e28f3de656	Revert "proxy startup-time config handling cleanup"	2023-04-30 09:05:42 +08:00
Kubernetes Prow Robot	e8130ba572	Merge pull request #117297 from danwinship/proxy-startup-config ... proxy startup-time config handling cleanup	2023-04-28 17:32:16 -07:00
Kubernetes Prow Robot	9924dc65b7	Merge pull request #117614 from chendave/multi_cri ... kubeadm: fix unit test failure on node with multiple cri endpoints	2023-04-28 01:30:16 -07:00
Dave Chen	2572a43034	kubeadm: fix unit test failure on node with multiple cri endpoints ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-04-28 15:00:16 +08:00
Paco Xu	c6f4bee98d	kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane	2023-04-28 13:55:46 +08:00
Dan Winship	258c4c4251	Remove duplicated config fields from ProxyServer ... Rather than duplicating some of the KubeProxyConfiguration into ProxyServer, just store the KubeProxyConfiguration itself so later code can reference it directly. For the fields that get platform-specific defaults (Mode, DetectLocalMode), fill the defaults directly into the KubeProxyConfiguration rather than keeping the original there and the defaulted version in the ProxyServer.	2023-04-27 15:43:35 -04:00
Dan Winship	9d4f10f5d2	Fix up detect-local-mode validation ... Validate the --detect-local-mode value in the API object validation rather than doing it separately later. Also, remove runtime checks and unit tests for cases that would be blocked by validation	2023-04-27 15:43:35 -04:00
Kubernetes Prow Robot	78b56ce16d	Merge pull request #116570 from SataQiu/fix-kubeadm-20230314 ... kubeadm: support upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded	2023-04-27 01:44:26 -07:00
SataQiu	170d5ef9fa	code cleanup for kubeadm	2023-04-26 23:51:39 +08:00
Antonio Ojea	24e68b3c6a	use client-go metrics not only rest_client ... Change-Id: Id1a98fbaffd3e9db8dc719478ac1e7b4031ccbad	2023-04-25 20:06:05 +00:00
SataQiu	e3d84aa93c	kubeadm: add the experimental (alpha) feature gate UpgradeAddonsAfterControlPlane that supports upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded	2023-04-25 22:12:50 +08:00
Kubernetes Prow Robot	c0804231b9	Merge pull request #117521 from nberlee/fix-coredns-rbac ... remove nodes resource from CoreDNS RBAC manifest	2023-04-24 10:57:13 -07:00
Li Bo	f9bab9a60b	add --concurrent-cron-job-syncs flag	2023-04-24 18:28:14 +08:00
Kubernetes Prow Robot	b35ffd1dcb	Merge pull request #113969 from Octopusjust/k8s-pr11 ... Add test for cmd/kubeadm/app/phases/upgrade/compute.go	2023-04-24 02:45:01 -07:00
SataQiu	3469bb05db	kubeadm: fix unit test panic for TestNewResetData	2023-04-22 17:02:34 +08:00
Nico Berlee	39e52449f9	remove nodes resource from CoreDNS RBAC manifest ... This commit syncs RBAC from coredns/deployment and removes a get nodes RBAC. Historically the federation CoreDNS plugin needed the nodes resource to fetch zone and region labels. However, the CoreDNS federation plugin was deprecated and cleaned up a long time ago and removed the Nodes RBAC requirement here in `coredns/deployment` coredns.yaml.sed: https://github.com/coredns/deployment/pull/229 This change however, never made it to `kubernetes/kubernetes`. Signed-off-by: Nico Berlee <nico.berlee@on2it.net>	2023-04-21 15:10:31 +02:00
Chris Bandy	b9ef160322	Cleanup environment in tests that call os.Unsetenv ... testing.T.Cleanup ensures the environment is restored after a test and any of its parallel sub-tests. It's possible that some of these can be simplified further to T.Setenv(key, ""), but I did not investigate.	2023-04-17 20:03:33 -05:00
Chris Bandy	240fccd766	Replace os.Setenv with testing.T.Setenv in tests ... T.Setenv ensures that the environment is returned to its prior state when the test ends. It also panics when called from a parallel test to prevent racy test interdependencies.	2023-04-17 20:03:09 -05:00
Chris Bandy	fc643d2e40	Replace os.Setenv with testing.T.Setenv in tests ... T.Setenv ensures that the environment is returned to its prior state when the test ends. It also panics when called from a parallel test to prevent racy test interdependencies.	2023-04-17 19:34:03 -05:00
cui fliter	1359ebcc5b	fix doc mismatch ... Signed-off-by: cui fliter <imcusg@gmail.com>	2023-04-16 18:29:45 +08:00
Dan Winship	a96358ac0f	Remove some useless error checks ... Don't return errors in the event of programmer errors, and don't double-check things that were already validated.	2023-04-13 19:50:26 -04:00
Andy Goldstein	432a3016a4	Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion" ... This reverts commit f524d765f4, reversing changes made to c2b5457dfa.	2023-04-13 11:27:39 -04:00
Kubernetes Prow Robot	c3e3ff989a	Merge pull request #116896 from thockin/apimachinery_util_diff_cleanup ... apimachinery util/diff cleanups	2023-04-13 02:26:37 -07:00
Kubernetes Prow Robot	caad9d5630	Merge pull request #116593 from danwinship/proxy-unused-cleanup ... remove some dead code in cmd/kube-proxy	2023-04-12 14:54:44 -07:00
Kubernetes Prow Robot	5d8c99a6fe	Merge pull request #117138 from tosi3k/job-syncs ... Add `--concurrent-job-syncs` flag to kube-controller-manager	2023-04-12 09:58:42 -07:00
Tim Hockin	bc302fa414	Replace uses of ObjectReflectDiff with cmp.Diff ... ObjectReflectDiff is already a shim over cmp.Diff, so no actual output or behavior changes	2023-04-12 08:48:03 -07:00
Dan Winship	be101a748d	Remove some unused winkernel arguments/fields/functions ... The winkernel proxy was originally created by copying+pasting from the iptables code, but some iptables-specific things were never removed (and one function got left behind after its functionality was moved into the shared proxy code).	2023-04-12 09:41:38 -04:00
Dan Winship	8a790ac2e1	Remove unused ProxyServer.EventClient field ... The port to Events v1 left some cruft behind.	2023-04-12 09:41:38 -04:00
Dan Winship	9754386c76	Remove write-only ProxyServer fields	2023-04-12 09:41:37 -04:00
Antoni Zawodny	c69689659a	Add --concurrent-job-syncs flag to kube-controller-manager	2023-04-12 14:19:39 +02:00
Kubernetes Prow Robot	2308086e29	Merge pull request #116503 from codetalks-new/br_fix_text ... [fix][typing] startResourceClaimController errrorf message has typos	2023-04-11 23:18:31 -07:00
Kubernetes Prow Robot	1acc2b4ae0	Merge pull request #117169 from tukwila/etcd_version ... supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0	2023-04-11 21:17:19 -07:00
Kubernetes Prow Robot	7da3893003	Merge pull request #117102 from ardaguclu/move-genericiooptions ... Move genericclioptions.IOStreams to genericiooptions.IOStreams	2023-04-11 20:21:17 -07:00
Kubernetes Prow Robot	dcf3792310	Merge pull request #116730 from danwinship/network-owners ... sig-network OWNERS fixups	2023-04-11 18:19:44 -07:00
Kubernetes Prow Robot	61457b939d	Merge pull request #116648 from ncdc/admission-clients ... admission ApplyTo: take in clients	2023-04-11 18:18:41 -07:00
Kubernetes Prow Robot	19042c6071	Merge pull request #116605 from danwinship/hollow-proxy ... Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark	2023-04-11 18:18:30 -07:00
Kubernetes Prow Robot	779abe6ebe	Merge pull request #115399 from 3u13r/feat/documentTLS13Exception ... Add note about TLS 1.3 cipher suites	2023-04-11 15:35:27 -07:00
guangli.bao	046bb89256	supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 ... Signed-off-by: guangli.bao <guangli.bao@daocloud.io>	2023-04-08 17:56:21 +08:00
Arda Güçlü	b4e4db336f	More migrations from genericclioptions to genericiooptions	2023-04-05 17:05:23 +03:00
Arda Güçlü	c3497b30ac	More migrations from genericclioptions to genericiooptions	2023-04-05 15:03:09 +03:00
Monis Khan	e9866d2794	Clear front proxy headers after authentication is complete ... This matches the logic we have for the Authorization header as well as the impersonation headers. Signed-off-by: Monis Khan <mok@microsoft.com>	2023-03-21 10:51:22 -04:00
Dan Winship	fc8892d26d	Add more labels (esp. area/kube-proxy) to sig-network OWNERS	2023-03-18 11:29:38 -04:00
Paco Xu	7afcfe1826	kubelet: use filepath.Clean before init, validate it in setupDataDirs	2023-03-17 15:45:39 +08:00
Dan Winship	1c7155e7ff	Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark ... This way it inherits the OWNERS from pkg/proxy which makes it easier for sig-network to keep it in sync with changes made to internal proxy APIs.	2023-03-16 09:47:54 -04:00
Taahir Ahmed	6a75e7c40c	ClusterTrustBundles: Define types ... This commit is the main API piece of KEP-3257 (ClusterTrustBundles). This commit: * Adds the certificates.k8s.io/v1alpha1 API group * Adds the ClusterTrustBundle type. * Registers the new type in kube-apiserver. * Implements the type-specfic validation specified for ClusterTrustBundles: - spec.pemTrustAnchors must always be non-empty. - spec.signerName must be either empty or a valid signer name. - Changing spec.signerName is disallowed. * Implements the "attest" admission check to restrict actions on ClusterTrustBundles that include a signer name. Because it wasn't specified in the KEP, I chose to make attempts to update the signer name be validation errors, rather than silently ignored. I have tested this out by launching these changes in kind and manipulating ClusterTrustBundle objects in the resulting cluster using kubectl.	2023-03-15 20:10:18 -07:00
Dan Winship	068ee321bc	Add CloudDualStackNodeIPs feature gate(s) ... Add CloudDualStackNodeIPs feature gates for kubelet and cloud-controller-manager and use as appropriate.	2023-03-15 17:15:51 -04:00
Dan Winship	77e0fbe774	Update ParseNodeIPArgument for cloud dual-stack ... Add an arg to ParseNodeIPArgument saying whether to allow dual-stack IPs for external cloud providers. Update kubelet for the new API, but always pass "false" for now.	2023-03-15 14:50:17 -04:00
Dan Winship	0f1f1711fe	Move kubelet --node-ip parsing to component-helpers ... The same code should be used to parse the command-line argument and the annotation. Unfortunately, for compatiblity reasons, they have to handle invalid inputs differently... (It doesn't make sense to put this code in cloud-provider, since ParseNodeIPArgument is used for the non-cloud-provider case too.)	2023-03-15 14:50:17 -04:00
Andy Goldstein	364b66ddd6	admission ApplyTo: take in clients ... Change admission ApplyTo() to take in clients instead of a rest.Config. Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>	2023-03-15 11:15:49 -04:00
Maciej Borsz	0ba519fee0	Add missing trace dependency to kubemark	2023-03-15 13:01:42 +00:00
Mengjiao Liu	017bb93887	certificate controller: use contextual logging	2023-03-15 11:26:08 +08:00
Kubernetes Prow Robot	f44d561c1f	Merge pull request #115075 from aojea/ipaddress ... IPAddress allocator	2023-03-14 19:26:13 -07:00
Kubernetes Prow Robot	1586138519	Merge pull request #115750 from saschagrunert/otel-beta ... Graduate `KubeletTracing` feature to beta	2023-03-14 16:34:33 -07:00
Antonio Ojea	811c2f50a1	remove apiserver limitations ... Change-Id: I97b35d912ba5d86857cf82d3eddd65b648030005	2023-03-14 22:58:11 +00:00
Kubernetes Prow Robot	27e23bad7d	Merge pull request #116529 from pohly/controllers-with-name ... kube-controller-manager: convert to structured logging	2023-03-14 14:12:55 -07:00
Kubernetes Prow Robot	466c48bdc7	Merge pull request #116002 from charles-chenzz/master ... resourceClaimController should be registered like the others one to keep code clean	2023-03-14 14:12:40 -07:00
Patrick Ohly	99151c39b7	kube-controller-manager: convert to structured logging ... Most of the individual controllers were already converted earlier. Some log calls were missed or added and then not updated during a rebase. Some of those get updated here to fill those gaps. Adding of the name to the logger used by each controller gets consolidated in this commit. By using the name under which the controller is registered we ensure that the names in the log are consistent.	2023-03-14 19:16:32 +01:00
Kubernetes Prow Robot	49649c89ea	Merge pull request #113584 from yangjunmyfm192085/volume-contextual-logging ... volume: use contextual logging	2023-03-14 10:40:16 -07:00
Kubernetes Prow Robot	f769c66aa8	Merge pull request #113622 from 249043822/br-context-logging-daemon ... daemonset: use contextual logging	2023-03-14 09:38:28 -07:00
Kubernetes Prow Robot	fe9dc2ee11	Merge pull request #116573 from claudiubelu/fix-kubeadm-unittests ... unit tests: Fixes init and rejoin unit tests for Windows	2023-03-14 08:36:52 -07:00
Kubernetes Prow Robot	4f76e4a0fd	Merge pull request #115603 from pacoxu/coredns-v1.10.1 ... update coredns to v1.10.1	2023-03-14 08:36:28 -07:00
Claudiu Belu	4f16887a11	unit tests: Fixes init and rejoin unit tests for Windows ... The default CRI Socket on Windows is npipe://./pipe/containerd-containerd.	2023-03-14 09:45:16 +00:00
Patrick Ohly	29941b8d3e	api: resource.k8s.io v1alpha1 -> v1alpha2 ... For Kubernetes 1.27, we intend to make some breaking API changes: - rename PodScheduling -> PodSchedulingHints (https://github.com/kubernetes/kubernetes/issues/114283) - extend ResourceClaimStatus (https://github.com/kubernetes/enhancements/pull/3802) We need to switch from v1alpha1 to v1alpha2 for that.	2023-03-14 07:52:03 +01:00
ZhangKe10140699	7198bcffcd	daemonset: use contextual logging	2023-03-14 08:50:27 +08:00
杨军10092085	361e4ff0fa	volume: use contextual logging	2023-03-14 08:37:30 +08:00
Kubernetes Prow Robot	02a654a635	Merge pull request #116043 from sanposhiho/featuregate-check ... fix(HPA): ignore the container resource metrics in HPA controller when the feature gate is disabled	2023-03-13 12:14:50 -07:00
Kubernetes Prow Robot	3106a5c553	Merge pull request #116301 from andyzhangx/remove-azuredisk-code ... Remove Azure disk in-tree storage plugin	2023-03-13 10:38:48 -07:00
Kubernetes Prow Robot	a0b1bee7c5	Merge pull request #115840 from atosatto/remove-taint-manager-cli ... Remove enable-taint-manager and pod-eviction-timeout CLI flags	2023-03-13 08:13:10 -07:00
Kubernetes Prow Robot	492a08c916	Merge pull request #113525 from 249043822/br-context-logging-deployment ... deployment controller: use contextual logging	2023-03-13 08:13:02 -07:00
Kubernetes Prow Robot	185cd95b9c	Merge pull request #113443 from yangjunmyfm192085/namespace-contextual-logging ... namespace controller: use contextual logging	2023-03-13 04:34:44 -07:00
ZhangKe10140699	66bda6c092	deployment controller: use contextual logging	2023-03-13 19:00:44 +08:00
Paco Xu	376bda41c7	undeprecate kubelet --provider-id flag	2023-03-13 16:51:32 +08:00
JunYang	f5bd8c86d4	namespace controller: use contextual logging	2023-03-13 14:59:17 +08:00
Kubernetes Prow Robot	16bc942a6b	Merge pull request #113464 from mengjiao-liu/contextual-logging-controller-bootstrap ... Migrate `pkg/controller/bootstrap` to contextual logging	2023-03-12 20:12:42 -07:00
Mengjiao Liu	e56f3e0781	Migrate pkg/controller/bootstrap to contextual logging	2023-03-13 10:18:40 +08:00
codetalks	c94bcabd7e	[fix][typing] startResourceClaimController errrorf message has typos	2023-03-12 12:06:33 +08:00
andyzhangx	c2b2a7622f	revert azuredisk test removal change ... revert revert vendor changes revert revert fix	2023-03-11 07:10:05 +00:00
tangwz	be080584c6	scheduler(NodeResourcesFit & NodeResourcesBalancedAllocation): calculatePodResourceRequest in PreScore phase (#115655) ... * scheduler(NodeResourcesFit): calculatePodResourceRequest in PreScore phase * scheduler(NodeResourcesFit and NodeResourcesBalancedAllocation): calculatePodResourceRequest in PreScore phase * modify the comments and tests. * revert the tests. * don't need consider nodes. * use list instead of map. * add comment for podRequests. * avoid using negative wording in variable names.	2023-03-10 07:44:53 -08:00
Kubernetes Prow Robot	2e3c5003b9	Merge pull request #115630 from Jefftree/agg-discovery-metrics ... Add metrics for aggregated discovery	2023-03-10 07:44:41 -08:00
Kubernetes Prow Robot	c88b61f553	Merge pull request #113910 from mengjiao-liu/contextual-logging-pkg-controller-certificates ... clusterroleaggregation: use contextual logging	2023-03-10 04:34:50 -08:00
Kubernetes Prow Robot	cb00077cd3	Merge pull request #113471 from ncdc/gc-contextual-logging ... garbagecollector: use contextual logging	2023-03-10 04:34:39 -08:00
Kubernetes Prow Robot	352665e290	Merge pull request #116131 from SataQiu/fix-kubelet-20230228 ... kubelet: avoid duplicate printing the flag deprecation warnings during re-parsing	2023-03-09 22:43:41 -08:00
Kubernetes Prow Robot	e57d968323	Merge pull request #116015 from SataQiu/clean-kubelet-20230223 ... kubelet: remove the deprecated --master-service-namespace flag	2023-03-09 22:43:34 -08:00
Kubernetes Prow Robot	a3ad4d7623	Merge pull request #114017 from calvin0327/cleanup-containerruntime-options ... cleanup container runtime options	2023-03-09 21:33:06 -08:00
Kubernetes Prow Robot	c58c1efd03	Merge pull request #112882 from pintuiitbhi/comment ... apiserver: grammar correction of comment	2023-03-09 21:32:54 -08:00
Jefftree	387d97605e	Add metrics for aggregated discovery	2023-03-09 17:24:02 +00:00
Kubernetes Prow Robot	f90643435e	Merge pull request #113840 from 249043822/br-context-logging-statefulset ... statefulset: use contextual logging	2023-03-09 06:42:02 -08:00
andyzhangx	5d0a54dcb5	remove Azure Disk in-tree driver code ... fix	2023-03-09 13:24:08 +00:00
Paco Xu	a1def4b9c0	pod-infra-container-image: update comments as it will be removed in couple more releases ... Signed-off-by: Paco Xu <paco.xu@daocloud.io>	2023-03-09 11:14:32 +08:00
Kubernetes Prow Robot	8d5c96fed2	Merge pull request #116093 from swatisehgal/topologymanager-ga-graduation ... node: topologymgr: Graduate Kubelet Topology Manager to GA	2023-03-08 16:56:06 -08:00
Kubernetes Prow Robot	8fa82976fc	Merge pull request #116356 from pacoxu/cleanup-bump_qps_kubelet ... sync default qps of kubelet change everywhere	2023-03-08 15:42:41 -08:00
Maksim Nabokikh	c1431af4f8	KEP-3325: Promote SelfSubjectReview to Beta (#116274) ... * Promote SelfSubjectReview to Beta Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> * Fix whoami API Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> * Fixes according to code review Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> --------- Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2023-03-08 15:42:33 -08:00
Kubernetes Prow Robot	03ff890ef4	Merge pull request #116329 from dims/drop-aws-kubelet-credential-provider-and-cleanup-aws-storage-e2e-tests ... Drop aws kubelet credential provider and cleanup aws storage e2e tests	2023-03-08 06:49:11 -08:00
Andy Goldstein	26e3dab78b	garbagecollector: use contextual logging ... Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>	2023-03-08 08:37:56 -05:00
ZhangKe10140699	a239b9986b	Migrated the StatefulSet controller (within `kube-controller-manager) to use [contextual logging](https://k8s.io/docs/concepts/cluster-administration/system-logs/#contextual-logging)	2023-03-08 18:57:57 +08:00
calvin0327	0ffac50126	cleanup container runtime options ... Signed-off-by: calvin0327 <wen.chen@daocloud.io>	2023-03-08 16:53:19 +08:00
Paco Xu	f368413d65	sync default qps of kubelet change	2023-03-08 14:04:51 +08:00
Jiahui Feng	feb18b3f5f	implmementing type checking ... with multi-type support.	2023-03-07 15:49:19 -08:00
Andrea Tosatto	cae19f9e85	Remove deprecated pod-eviction-timeout flag from controller-manager	2023-03-07 18:14:18 +00:00
kerthcet	98bbeae99f	address comments ... Signed-off-by: kerthcet <kerthcet@gmail.com>	2023-03-07 18:11:51 +00:00
kerthcet	15daa48e30	Deprecate CLI flag pod-eviction-timeout ... Signed-off-by: kerthcet <kerthcet@gmail.com>	2023-03-07 18:11:51 +00:00
kerthcet	e5c812bbe7	Remove CLI flag enable-taint-manager ... Signed-off-by: kerthcet <kerthcet@gmail.com>	2023-03-07 18:11:49 +00:00
Kubernetes Prow Robot	37326f7cea	Merge pull request #112670 from yangjunmyfm192085/delklogV0 ... use contextual logging（nodeipam and nodelifecycle part）	2023-03-07 09:40:33 -08:00
Kubernetes Prow Robot	4401af2c3e	Merge pull request #116219 from SataQiu/fix-kube-controller-manager-20230302 ... kube-controller-manager: fix a bug that the kubeconfig field of kubecontrollermanager.config.k8s.io configuration is not populated correctly	2023-03-07 08:28:46 -08:00
Davanum Srinivas	90d185b7e1	Drop AWS kubelet credential provider and cleanup AWS storage e2e tests ... Signed-off-by: Davanum Srinivas <davanum@gmail.com>	2023-03-07 09:00:12 -05:00
Kubernetes Prow Robot	637bd66165	Merge pull request #115332 from obaranov1/ttlafterfinished-logging-migration ... Migrate /pkg/controller/ttlafterfinished to structured and contextual logging	2023-03-07 04:20:08 -08:00
Naman Lakhwani	b6f9a65558	Migrating pkg/controller/serviceaccount to contextual logging (#114918) ... * migrating pkg/controller/serviceaccount to contextual logging Signed-off-by: Naman <namanlakhwani@gmail.com> * small nit Signed-off-by: Naman <namanlakhwani@gmail.com> * capitalising first letter of error Signed-off-by: Naman <namanlakhwani@gmail.com> * addressed review comments Signed-off-by: Naman <namanlakhwani@gmail.com> * small nit to add key Signed-off-by: Naman <namanlakhwani@gmail.com> --------- Signed-off-by: Naman <namanlakhwani@gmail.com>	2023-03-07 04:19:59 -08:00
Naman Lakhwani	8f45b64c93	Migrated pkg/controller/replicaset to contextual logging (#114871) ... * migrated controller/replicaset to contextual logging Signed-off-by: Naman <namanlakhwani@gmail.com> * small nits Signed-off-by: Naman <namanlakhwani@gmail.com> * addressed changes Signed-off-by: Naman <namanlakhwani@gmail.com> * small nit Signed-off-by: Naman <namanlakhwani@gmail.com> * taking t as input Signed-off-by: Naman <namanlakhwani@gmail.com> --------- Signed-off-by: Naman <namanlakhwani@gmail.com>	2023-03-07 04:19:51 -08:00
Kubernetes Prow Robot	4aaa4df840	Merge pull request #113986 from songxiao-wang87/runwxs-test2 ... Migrate StorageVersionGC to contextual logging	2023-03-07 04:19:43 -08:00
Kubernetes Prow Robot	471b392f43	Merge pull request #113916 from songxiao-wang87/runwxs-test1 ... Migrate ttl_controller to contextual logging	2023-03-07 04:18:30 -08:00
Kubernetes Prow Robot	3489796d5c	Merge pull request #113428 from mengjiao-liu/contextual-logging-controller-cronjob ... Update `pkg/controller/cronjob/` for contextual logging	2023-03-07 01:28:18 -08:00
JunYang	780ef3afb0	use klog.InfoS instead of klog.V(0),Info	2023-03-07 15:50:01 +08:00
torredil	6aebda9b1e	Remove AWS legacy cloud provider + EBS in-tree storage plugin ... Signed-off-by: torredil <torredil@amazon.com>	2023-03-06 14:01:15 +00:00
Swati Sehgal	6a62f0236a	node: topologymgr: trivial internal variable renaming ... Since Topology manager is graduating to GA, we remove internal configuration variable names with `Experimental` prefix. There is no expected change in behavior, only trival variable renaming. Signed-off-by: Swati Sehgal <swsehgal@redhat.com>	2023-03-06 12:51:11 +00:00
Swati Sehgal	d536a342b4	node: topologymgr: GA graduation implies Feature Gate is ON by default ... Signed-off-by: Swati Sehgal <swsehgal@redhat.com>	2023-03-06 12:51:05 +00:00
SataQiu	eb541bb819	controller-manager: fix a bug that the kubeconfig field of kubecontrollermanager.config.k8s.io configuration is not set correctly	2023-03-04 11:17:55 +08:00
Sergey Kanzhelev	04189b1fc4	rename ExperimentalPodPidsLimit to PodPidsLimit	2023-03-04 01:48:16 +00:00
Kubernetes Prow Robot	b4b2345f9a	Merge pull request #116106 from alexzielenski/revert-116062-revert-field-manager ... Revert "Revert "Merge pull request #115324 from alexzielenski/apiserver/smd/use-openapiv3"	2023-03-01 19:09:07 -08:00
SataQiu	91089ce65b	kubelet: remove the deprecated --master-service-namespace flag	2023-03-01 18:44:59 +08:00
Kubernetes Prow Robot	bd1435dccd	Merge pull request #114016 from songxiao-wang87/runwxs-test3 ... word misspelling	2023-02-28 14:53:16 -08:00
Alexander Zielenski	c485cb2435	supply OpenAPIV3Config unconditionally ... the handlers are still gated, but OpenAPIV3 is required for SSA	2023-02-28 13:29:57 -08:00
SataQiu	75ef759810	kubelet: avoid duplicate printing the flag deprecation warnings during re-parsing	2023-02-28 22:58:40 +08:00
Kubernetes Prow Robot	fb37f1331b	Merge pull request #113574 from chendave/cleanup_testcases ... kubeadm: Improve testcases for `init` and `join` command	2023-02-28 00:43:16 -08:00
SataQiu	70b33409de	kubeadm: modify '--config' flag from required to optional for 'kubeadm kubeconfig user'	2023-02-27 12:19:31 +08:00
Dave Chen	a825450707	kubeadm: improve test coverage by validating the data structure ... data structure is what returned if everything okay, but this structure is not validated at all both in `init` and `join` cmd. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-02-27 10:41:25 +08:00
Paco Xu	b24725eed7	update coredns to v1.10.1 ... Signed-off-by: Paco Xu <paco.xu@daocloud.io>	2023-02-26 09:25:40 +08:00
Kensei Nakada	33daba24fb	fix(HPA): ignore the container resource metrics in HPA controller when the feature gate is disabled	2023-02-25 23:04:07 +00:00
Paco Xu	b1ee8c8b82	kubeadm: no need to check if target coredns version is not changed	2023-02-25 21:53:28 +08:00
Kubernetes Prow Robot	70c129fea5	Merge pull request #115420 from chendave/2806 ... kubeadm: skip ipv4 check if the cluster is using IPv6 address	2023-02-23 02:51:36 -08:00
charles-chenzz	0891ba9739	resourceClaimController should be registered like the others one to keep code clean	2023-02-23 17:26:30 +08:00
Kubernetes Prow Robot	4dd887797f	Merge pull request #115924 from claudiubelu/fix-kubeadm-unittest ... unit tests: Fixes kubeadm postupgrade failing unit test on Windows	2023-02-22 00:50:08 -08:00
Dave Chen	66f043f650	kubeadm: skip ipv4 check if the cluster is using IPv6 address ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-02-22 10:02:54 +08:00
Kubernetes Prow Robot	06b6644fcf	Merge pull request #115815 from Huang-Wei/pod-scheduling-readiness-beta ... Graduate PodSchedulingReadiness to beta	2023-02-21 14:24:32 -08:00
Claudiu Belu	2e2ef9b0e7	unit tests: Fixes kubeadm postupgrade failing unit test on Windows ... The unit test TestWriteKubeletConfigFiles fails on Windows because the file not found error message is different on Windows.	2023-02-21 16:53:06 +00:00
obaranov1	21adaa1490	logging migration of the ttlafterfinished ... Signed-off-by: Oksana Baranova <oksana.baranova@intel.com>	2023-02-21 14:55:03 +02:00
Kubernetes Prow Robot	bd914b493c	Merge pull request #115676 from chendave/conversion_api ... kubeadm: remove the manual conversion from versioned cluster cfg to internal cfg	2023-02-20 02:53:48 -08:00
Kubernetes Prow Robot	9e356a4132	Merge pull request #115719 from saschagrunert/seccomp-default-ga ... Graduate `SeccompDefault` feature to stable / GA	2023-02-20 01:11:51 -08:00
Wei Huang	72863f65d6	Graduate PodSchedulingReadiness to beta	2023-02-17 18:45:20 -08:00
Kubernetes Prow Robot	d9ed2ff4b0	Merge pull request #114687 from freddie400/migrate-hpa ... Migrate pkg/controller/podautoscaler to contextual logging	2023-02-17 05:44:03 -08:00
Freddie	dee494ece1	squashing without rebase	2023-02-17 01:47:52 +05:30
Kubernetes Prow Robot	ffe410bbb4	Merge pull request #115604 from pacoxu/fix-design-proposals-links ... old design proposals are now moved to Design Proposals Archive repo	2023-02-16 09:55:38 -08:00
Kubernetes Prow Robot	8e31885e36	Merge pull request #115575 from SataQiu/fix-20230207 ... kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch	2023-02-16 00:45:38 -08:00
Paco Xu	3d536bd14b	API docs: point to current docs instead of archived designs	2023-02-16 15:32:08 +08:00
Sascha Grunert	37caed0e19	Graduate SeccompDefault feature to stable / GA ... Updating the required code and docs for SeccompDefault to go GA, which now means that we enable the feature per default. Signed-off-by: Sascha Grunert <sgrunert@redhat.com>	2023-02-15 15:28:07 +01:00
Kubernetes Prow Robot	f545ff3ba8	Merge pull request #115610 from SataQiu/detect-sandbox-20230208 ... kubeadm: show a warning message when detecting that the sandbox image of the container runtime is inconsistent with that used by kubeadm	2023-02-14 19:26:23 -08:00
Andy Goldstein	71ec5ed81d	resourcequota: use contexual logging (#113315) ... Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>	2023-02-14 07:19:31 -08:00
Sascha Grunert	a28385ebe2	Graduate KubeletTracing feature to beta ... We now graduate `KubeletTracing` to beta, which means we enable the feature gate per default. Part of https://github.com/kubernetes/enhancements/issues/2831 Signed-off-by: Sascha Grunert <sgrunert@redhat.com>	2023-02-14 10:05:35 +01:00
Lucas Severo Alves	6b34fafdaf	Add ctx logging involved in KS startup (#115588) ... * ctx logging involved in startup as per https://github.com/kubernetes/kubernetes/pull/111155#pullrequestreview-1283257121 * use klog.Background().Error in flag handling * revert scheduler_perf changes * refence issue in code comment * enable ctx logcheck for cmd/kube-scheduler	2023-02-13 09:19:29 -08:00
SataQiu	d12b4d4c67	kubeadm: show a warning message when detecting that the sandbox image of the container runtime is inconsistent with that used by kubeadm	2023-02-10 14:59:40 +08:00
Dave Chen	82990268ec	kubeadm: remove the manual conversion from versioned cluster cfg to internal cfg ... The manual conversion was needed to adapt `ClusterConfiguration.DNS` from v1beta2 to v1beta3, now that v1beta2 is removed from the code base, the manual conversion is unnecessary as well. The help to reduce the maintenance efforts. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-02-10 14:46:15 +08:00
Leonard Cohnen	77692f1b1c	fix linting	2023-02-08 17:46:18 +01:00
Paco Xu	019d2615af	archived design proposals are now moved to Design Proposals Archive Repo.	2023-02-08 11:12:22 +08:00
Kubernetes Prow Robot	22b88dea36	Merge pull request #115315 from enj/enj/i/kas_kubelet_conn_close ... kubelet/client: collapse transport wiring onto standard approach	2023-02-07 07:01:14 -08:00
SataQiu	69e50cabd2	kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch	2023-02-07 18:24:31 +08:00
Kubernetes Prow Robot	8e20effbb7	Merge pull request #114695 from chendave/fix_cross_move ... kubeadm: backup kubelet config for "upgrade node" and "upgrade apply"	2023-02-07 02:18:58 -08:00
Kubernetes Prow Robot	6eb008620c	Merge pull request #115379 from artemvmin/serial-mkfs ... Add an option to limit the number of concurrent mkfs calls	2023-02-06 18:26:58 -08:00
Monis Khan	754cb3d601	kubelet/client: collapse transport wiring onto standard approach ... Signed-off-by: Monis Khan <mok@microsoft.com>	2023-02-06 20:34:49 -05:00
Kubernetes Prow Robot	561a35f358	Merge pull request #115038 from mercedes-benz/tobiasgiese/kubeadmfix-etcd-learner-join ... kubeadm: fix etcd learner join	2023-02-06 02:09:01 -08:00
Artem Minyaylov	f573e14942	Update k8s.io/utils to latest version ... Update all usages of FakeExec to pointer to avoid copying the mutex	2023-02-04 11:05:22 -08:00
Leonard Cohnen	fabf1cba94	Add warning about TLS 1.3 cipher suites	2023-02-02 17:02:38 +01:00
Mengjiao Liu	6f2cd1b5bd	Update pkg/controller/cronjob/ for contextual logging	2023-02-02 14:27:13 +08:00
Dave Chen	5127cbf949	kubeadm: backup kubelet config file for upgrade apply ... Back up kubelet config file for `kubeadm upgrade apply`, some code refactoring is done to de-dup some redundant code logic. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-02-02 12:09:18 +08:00
Dave Chen	9e6e13e562	kubeadm: include the err got from PrintDryRunFile ... The error was ingored which means if anything wrong from `PrintDryRunFiles`, it was sliently ignored. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-02-02 12:00:19 +08:00
Dave Chen	c55a98fde9	kubeadm: fix invalid cross-device link error ... The root cause for that error is because `rename` doesn't work across different mount points. The kubelet config file and back up directory are mounted to different file system in kinder environment. ``` df /var/lib/kubelet/config.yaml | tail -n1 | awk '{print $1}' /dev/sda2 df /etc/kubernetes/tmp/kubeadm-kubelet-configxxx | tail -n1 | awk '{print $1}' overlay ``` Call `cp` instead of `rename` to back up the kubelet file would fix that issue. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-02-02 11:43:18 +08:00
Dave Chen	016cc0c120	kubeadm:[cherry-pick]backup kubelet config for "upgrade node" ... This addresses the TODO item so that the old kubelet config file could be recovered if something goes wrong. Signed-off-by: Dave Chen <dave.chen@arm.com> Co-authored-by: Paco Xu <paco.xu@daocloud.io>	2023-02-02 11:43:18 +08:00
Kubernetes Prow Robot	5d4776adc1	Merge pull request #114948 from haoruan/feature-api-doc-field-linter ... Add linter to check if api docs match field tag names	2023-01-30 16:21:09 -08:00
Kubernetes Prow Robot	5681b0da14	Merge pull request #115338 from danwinship/nodeutil.gethostname ... Move GetHostname() from k/k/pkg/util/node to k/component-helpers/node/util	2023-01-30 09:07:20 -08:00
Kubernetes Prow Robot	4b074c816e	Merge pull request #115298 from knelasevero/StartTestServerCtx ... Pass context to StartTestServer to get contextualized logger from it during tests	2023-01-30 09:07:12 -08:00
Kubernetes Prow Robot	a94a35293b	Merge pull request #114490 from MadhavJivrajani/update-contention-profiling-docs ... *: Make docs more accurate for the contention-profiling flag	2023-01-29 17:20:49 -08:00
songxiao-wang87	8c7f3c2116	Making a run test. ... Signed-off-by: songxiao-wang87 <wang.xiaosong23@zte.com.cn>	2023-01-28 03:14:57 +00:00
Dan Winship	f994ae2521	Move GetHostname() from k/k/pkg/util/node to k/component-helpers/node/util ... In fact, this actually uses pkg/util/node's GetHostname() but takes the unit tests from cmd/kubeadm/app/util's private fork of that function since they were more extensive. (Of course the fact that kubeadm had a private fork of this function is a strong argument for moving it to component-helpers.)	2023-01-27 18:24:38 -05:00
Mohamed Zaian	90570b7595	etcd: Update to version 3.5.7	2023-01-27 17:24:00 +01:00
Lucas Severo Alves	6a06b63554	comment change from t.Fatal to panic	2023-01-25 11:44:12 +01:00
Lucas Severo Alves	096d2e5895	remove unwanted newlines	2023-01-24 21:45:32 +01:00
Lucas Severo Alves	636f8e1a3e	chore: changes needed before #111155	2023-01-24 17:55:32 +01:00
Patrick Ohly	bc6c7fa912	logging: fix names of keys ... The stricter checking with the upcoming logcheck v0.4.1 pointed out these names which don't comply with our recommendations in https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/migration-to-structured-logging.md#name-arguments.	2023-01-23 14:24:29 +01:00
Patrick Ohly	66dfac3b18	kube-proxy: support the logging feature gates ... When trying to bring up a cluster via kubeadm with these feature gates enabled, kube-proxy fails because it didn't know about them: kind: Cluster apiVersion: kind.x-k8s.io/v1alpha4 nodes: - role: control-plane - role: worker - role: worker featureGates: {"DynamicResourceAllocation":true,"ContextualLogging":true} runtimeConfig: {"resource.k8s.io/v1alpha1":"true"} => 2023-01-20T07:07:54.474966617Z stderr F E0120 07:07:54.474846 1 run.go:74] "command failed" err="failed complete: unrecognized feature gate: ContextualLogging" The effect of the logging feature gates is minor for kube-proxy, supporting them is mostly useful for the sake of consistency and to support kubeadm.	2023-01-20 19:31:57 +01:00
Clayton Coleman	95051a63b3	wait: Use a context implementation for ContextForChannel ... ContextForChannel uses a goroutine to transform a channel close to a context cancel. However, this exposes a synchronization issue if we want to unify the underlying implementation between contextless and with context - a ConditionFunc that closes the channel today expects the behavior that no subsequent conditions will be invoked (we have a test in wait_test.go TestUntilReturnsImmediately that verifies this expectation). We can't unify the implementation without ensuring this property holds. To do that this commit changes from the goroutine propagation to implementing context.Context and using stopCh as the Done(). We then implement Err() by returning context.Canceled and stub the other methods. Since our context cannot be explicitly cancelled by users, we cease to return the cancelFn and callers that need that behavior must wrap the context as normal. This should be invisible to clients - they would already observe the same behavior from the context, and the existing error behavior of Poll* is preserved (which ignores ctx.Err()). As a side effect, one less goroutine is created making it more efficient.	2023-01-18 10:00:47 -05:00
Hao Ruan	2adb95c376	Add linter to check if api docs match field tag names	2023-01-18 10:49:12 +08:00
Tobias Giese	ea46c91868	kubeadm: promote member after the static pod manifest was written ... Signed-off-by: Tobias Giese <tobias.giese@mercedes-benz.com> Co-authored-by: Christian Schlotter <christi.schlotter@gmail.com>	2023-01-16 11:11:58 +01:00
Kubernetes Prow Robot	fd885b751d	Merge pull request #115068 from neolit123/revert-115000-feature/UpdateOrCreateTokenAddErrProcessing ... Revert "UpdateOrCreateToken get secrets err handling optimization"	2023-01-15 07:30:31 -08:00
Kubernetes Prow Robot	3a8e2e399b	Merge pull request #114393 from danielvegamyhre/myfeature ... Option to ignore existing pods' preferred inter-pod affinities if the incoming pod has no preferred inter-pod affinities	2023-01-13 17:28:15 -08:00
Daniel Vega-Myhre	41817b1888	optionally ignore preferred terms of existing pods unless incoming pod ... has inter-pod affinities	2023-01-13 23:15:53 +00:00
Lubomir I. Ivanov	7938631e22	Revert "UpdateOrCreateToken get secrets err handling optimization"	2023-01-14 00:11:49 +02:00
Kubernetes Prow Robot	a66aad2d80	Merge pull request #115000 from helen-frank/feature/UpdateOrCreateTokenAddErrProcessing ... UpdateOrCreateToken get secrets err handling optimization	2023-01-12 19:57:12 -08:00
Kubernetes Prow Robot	2b69bec35d	Merge pull request #114901 from SataQiu/fix-lint-error-20230108 ... Fix gocritic lint errors for cmd/kubeadm/*	2023-01-12 09:05:06 -08:00
helen	e6591d24ce	when UpdateOrCreateTokens get secrets, if the error is not a NotFound, the error is thrown in time ... Signed-off-by: helen <haitao.zhang@daocloud.io>	2023-01-12 20:50:02 +08:00
SataQiu	3df577ea28	kubeadm: remove unused variable DefaultAuditPolicyLogMaxAge	2023-01-12 12:30:30 +08:00
Dave Chen	765ef1783b	kubeadm: stop using of CRI endpoints without URL scheme ... run the testcase with `-v` flag will reveal the warning, e.g. `W1103 ... Usage of CRI endpoints without URL scheme is deprecated...` Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-01-12 10:59:34 +08:00
Dave Chen	a7b610c3bb	kubeadm: use the right methods for logging if no args are passing ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-01-12 10:59:34 +08:00
Dave Chen	aae1f2a85f	kubeadm: cri-socket is not allowed for mixed configuration ... Set the `cri-socket` both in flags and config file will hit errors, this should not be a valid case to validate in current testcases. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-01-12 10:59:34 +08:00
Kubernetes Prow Robot	280473ebc4	Merge pull request #114773 from yangjunmyfm192085/fixsmallerrorlog ... fix a small log error about proxy	2023-01-11 07:51:43 -08:00
Kubernetes Prow Robot	6699db9f59	Merge pull request #114957 from claudiubelu/kubeadm-preflight-checks-admin ... unit tests: Fixes kubeadm enforce requirements test	2023-01-11 03:33:43 -08:00
Claudiu Belu	3af2c257e8	unit tests: Fixes kubeadm enforce requirements test ... enforceRequirements will run preflight checks, including whether the user is privileged is not. Because of this, the test will make different assertions based on the user's UID. However, we don't have UIDs on Windows, so we're asserting the wrong thing. This fix addresses the issue.	2023-01-10 16:56:14 +00:00
Jordan Liggitt	3b64cb5f11	Include head and tail of clipped test messages	2023-01-10 11:26:34 -05:00
SataQiu	e0f11d9c5b	kubeadm: fix gocritic lint errors	2023-01-08 11:23:26 +08:00
SataQiu	5d99ad1182	kubeadm: update .import-restrictions	2023-01-07 23:46:02 +08:00
Ian K. Coolidge	f3829c4be3	cpuset: Rename 'NewCPUSet' to 'New'	2023-01-06 23:32:51 +00:00
TommyStarK	527b905aaa	cmd/kubeapiserver: Clean code, avoid unnecessary condition, avoid non-nil but zero-length slice ... Signed-off-by: TommyStarK <thomasmilox@gmail.com>	2023-01-06 18:03:41 +01:00
Kubernetes Prow Robot	4a98fa2536	Merge pull request #114540 from pacoxu/kubeadm-v1beta2 ... remove deprecated Kubeadm v1beta2 API	2023-01-05 21:29:58 -08:00
Kubernetes Prow Robot	fcaa32bd99	Merge pull request #114725 from danwinship/kube-proxy-startup-cleanup ... (minor) kube-proxy startup cleanup	2023-01-05 13:57:59 -08:00
Kubernetes Prow Robot	2d534e4bea	Merge pull request #114842 from chendave/nil_pointer ... kubeadm: fix the nil pointer dereference in testcase	2023-01-05 05:32:22 -08:00
Paco Xu	cca7a205ad	remove kubeadm v1beta2 support	2023-01-05 21:30:26 +08:00
Dave Chen	23f75bf40e	kubeadm: fix the nil pointer dereference in testcase ... `genCSRConfig.kubeadmConfig` is possible to be nil if there any error from the config loading, so access the field should only be done if there is no error in the previous step. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-01-05 16:21:15 +08:00
Dave Chen	49732716de	kubeadm: unittest might run as non-root ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-01-05 12:13:19 +08:00
Paco Xu	b3056ea9bd	remove the deprecated kubeadm v1beta2 API	2023-01-04 12:19:15 +08:00
Kubernetes Prow Robot	b532f2b3e7	Merge pull request #112136 from pacoxu/migrate-runtime-endpoint-flags ... kubelet: migrate container runtime endpoint flag to config	2023-01-03 09:29:31 -08:00
Dan Winship	169604d906	Validate single-stack --nodeport-addresses sooner ... In the dual-stack case, iptables.NewDualStackProxier and ipvs.NewDualStackProxier filtered the nodeport addresses values by IP family before creating the single-stack proxiers. But in the single-stack case, the kube-proxy startup code just passed the value to the single-stack proxiers without validation, so they had to re-check it themselves. Fix that.	2023-01-03 09:01:45 -05:00
Dan Winship	e7ed7220eb	Explicitly pass IP family to proxier ... Rather than re-determining it from the iptables object in both proxies.	2023-01-03 09:01:45 -05:00
Dan Winship	fb84c4f0f0	Fix kube-proxy dual-stack-iptables-binary-presence check ... Kube-proxy was checking that iptables supports both IPv4 and IPv6 and falling back to single-stack if not. But it always fell back to the primary IP family, regardless of which family iptables supported... Fix it so that if the primary IP family isn't supported then it bails out entirely.	2023-01-03 09:01:35 -05:00
JunYang	281a2bdd2f	fix a small log error about proxy	2023-01-03 20:07:20 +08:00
Kubernetes Prow Robot	1edbb8cf1a	Merge pull request #114719 from chendave/cleanup_copy ... kubeadm: return the output from stdout and stderr	2023-01-02 19:49:31 -08:00
Dave Chen	fd60b9c492	kubeadm: return the output from stdout and stderr ... It was just saying the copy of file failed with `exit status 1`, no much details for what's going wrong. Combine the stderr and stdout and show those info will be easier for us to fix the problem. Signed-off-by: Dave Chen <dave.chen@arm.com>	2023-01-03 10:45:12 +08:00
Claudiu Belu	87f094c5e8	Replaces path.Operation with filepath.Operation (part 2) ... The path module has a few different functions: Clean, Split, Join, Ext, Dir, Base, IsAbs. These functions do not take into account the OS-specific path separator, meaning that they won't behave as intended on Windows. For example, Dir is supposed to return all but the last element of the path. For the path "C:\some\dir\somewhere", it is supposed to return "C:\some\dir\", however, it returns ".". Instead of these functions, the ones in filepath should be used instead.	2023-01-01 00:15:30 +00:00
JunYang	cc4126a010	use klog.InfoS instead of klog.V(0).Info-proxy part	2022-12-29 11:16:51 +08:00
Kubernetes Prow Robot	68b96575a2	Merge pull request #114669 from Nordix/ipvs-remove-module-check ... Ipvs: remove module check	2022-12-26 10:09:27 -08:00
Kubernetes Prow Robot	8a71485643	Merge pull request #114658 from neolit123/1.27-fix-dry-run-server-version ... kubeadm: return stored FakedServerVersion when dry-running	2022-12-22 19:05:26 -08:00
Lars Ekman	cd15ca0548	proxy/ipvs: Check that a dummy virtual server can be added ... This tests both ipvs and the configured scheduler	2022-12-22 20:36:53 +01:00
Lubomir I. Ivanov	f8da9ab287	kubeadm: return stored FakedServerVersion when dry-running ... If we are dry-running, do not attempt to fetch the /version resource and just return the stored FakeServerVersion, which is done when constructing the dry-run client in upgrade/common.go#getClient(). The problem here is that during upgrade dry-run client reactors are backed by a dynamic client via NewClientBackedDryRunGetterFromKubeconfig() and for GetActions there seems to be no analog to Discovery().Serverversion() resource for a dynamic client(?).	2022-12-22 19:53:35 +02:00
Kubernetes Prow Robot	30e0e8edb9	Merge pull request #114597 from songxiao-wang87/runwxs-test10 ... Add test for cmd/kubeadm/app/images/images.go	2022-12-22 00:13:25 -08:00
Kubernetes Prow Robot	6e65c98681	Merge pull request #114596 from andrewsykim/cloud-node-ipam ... Don't run cloud IPAM controller when cloud provider is not enabled	2022-12-21 16:33:25 -08:00
Kubernetes Prow Robot	a6d66d15f6	Merge pull request #114632 from neolit123/1.27-fix-dry-run-server-version ... kubeadm: handle dry run GET actions from fake discovery	2022-12-21 04:11:26 -08:00
Lubomir I. Ivanov	54b73deaca	kubeadm: handle dry run GET actions from fake discovery ... The kubeadm dry run client reactor code is flawed as it assumes all invoked "get" verb actions can be casted to GetAction. Apparently that is not the case when Discovery().ServerVersion() and other discovery calls are made. In such cases the action type is the bare ActionImpl. Catch if an action can be casted to ActionImpl and construct a GetAction from it. GetActionImpl only suppersets ActionImpl with a Name field (empty string in this case). Add unit test for Discovery().ServerVersion().	2022-12-21 11:49:59 +02:00
songxiao-wang87	e09c1327b0	Making a run test. ... Signed-off-by: songxiao-wang87 <wang.xiaosong23@zte.com.cn>	2022-12-21 07:00:35 +00:00
Andrew Sy Kim	0a4f582c8b	cloud-controller-manager: don't run cloud IPAM controller when cloud provider is not enabled ... Signed-off-by: Andrew Sy Kim <andrewsy@google.com>	2022-12-20 10:29:02 -05:00
Andrew Sy Kim	99d83fac37	kube-controller-manager: don't run cloud IPAM controller when cloud provider is not enabled ... Signed-off-by: Andrew Sy Kim <andrewsy@google.com>	2022-12-20 10:29:02 -05:00
Lubomir I. Ivanov	b0f38b223e	kubeadm: revert feature to backup kubelet config for "upgrade node" ... There seems to be a bug where it's not possible to write to /etc/kubernetes/tmp... at the time of backing up the old kubelet config.yaml Also this kubelet config backup only targets "upgrade node" and it should also target "upgrade apply". Revert the related changes until a fully working feature is implemented.	2022-12-20 16:28:28 +02:00
Kubernetes Prow Robot	03bfbdd8aa	Merge pull request #114455 from SataQiu/fix-kubeadm-2022121302 ... kubeadm: fix the bug that kubeadm always do CRI detection even if it is not required by phase subcommand	2022-12-19 00:51:44 -08:00
Jordan Liggitt	78cb3862f1	Fix indentation/spacing in comments to render correctly in godoc	2022-12-17 23:27:38 -05:00
Kubernetes Prow Robot	fdafd50085	Merge pull request #113318 from pacoxu/learner-mode ... kubeadm: enable etcd's learner mode when joining etcd members	2022-12-16 21:55:41 -08:00
Paco Xu	37f5da904b	kubeadm: remove nested loops for member promotion	2022-12-17 12:40:15 +08:00
Shihang Zhang	4fd09a06d6	lock LegacyServiceAccountTokenNoAutoGeneration	2022-12-16 10:45:35 -08:00
Paco Xu	b3deecfb17	add etcd as learner mode and promote when fg EtcdLearnerMode is enabled ... - use etcd backoff to wait; still has many warning messages Signed-off-by: Paco Xu <paco.xu@daocloud.io>	2022-12-16 21:09:59 +08:00
Paco Xu	0d2952202e	kubeadm upgrade: fix dry run of backing up kubelet config file ... Signed-off-by: Paco Xu <paco.xu@daocloud.io>	2022-12-16 17:02:28 +08:00
Kubernetes Prow Robot	c1c0e4fe0b	Merge pull request #114489 from aimuz/replace2tag ... kubeadm: replace Runtime.GOOS with go:build tag	2022-12-15 07:27:47 -08:00
Kubernetes Prow Robot	930271fbd8	Merge pull request #114330 from chendave/backup_kubelet ... kubeadm: backup the kubelet config file before writting the new one	2022-12-15 07:27:36 -08:00
aimuz	4860b67b48	kubeadm: replace Runtime.GOOS with go:build tag ... Signed-off-by: aimuz <mr.imuz@gmail.com>	2022-12-15 17:57:45 +08:00
Dave Chen	cd1f082179	kubeadm: backup the kubelet config file before writting the new one ... This addresses the TODO item so that the old kubelet config file could be recovered if something goes wrong. Signed-off-by: Dave Chen <dave.chen@arm.com>	2022-12-15 10:16:36 +08:00
Kubernetes Prow Robot	69fe066adc	Merge pull request #114477 from chendave/kubeadm_reviewer ... kubeadm: add chendave as kubeadm reviewer	2022-12-14 13:01:36 -08:00
Kubernetes Prow Robot	bf49c7c0b5	Merge pull request #114080 from chendave/fix_testcases ... kubeadm: fix invalid testcase for `enforceRequirements`	2022-12-14 11:55:56 -08:00
Kubernetes Prow Robot	08160f7975	Merge pull request #113465 from chendave/golang_generic ... kubeadm: bump to use golang generic	2022-12-14 11:55:34 -08:00
Madhav Jivrajani	f236ab24df	*: Make docs more accurate for the contention-profiling flag ... The --contention-profiling flag enables block profiling by calling SetBlockProfileRate(). It, however does not call SetMutexProfileFraction which enables mutex profiling. Mutex profiling gives us information about lock contention whereas block profiling on the other hand gives us information on gorotuines being blocked on sync primitives. Updating the docs to "block profiling" in order to make it more accurate. Eventhough a block profile may reflect contention points on locks to some extent, it also talks about other sources where goroutines may be blocked. Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>	2022-12-14 17:34:47 +05:30
SataQiu	2501a46b80	kubeadm: avoid CRI detection for phase subcommand when it's --cri-socket flag is not set	2022-12-14 12:00:49 +08:00
Paco Xu	861db2348e	kubeadm: add feature gate EtcdLearnerMode alpha	2022-12-14 11:07:46 +08:00
Dave Chen	8995346259	kubeadm: add chendave as kubeadm reviewer ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2022-12-14 10:54:03 +08:00
Dave Chen	8c7609fbe2	kubeadm: bump to use golang generic ... Signed-off-by: Dave Chen <dave.chen@arm.com>	2022-12-14 10:31:18 +08:00
Andy Goldstein	0bdcb93b06	Create new conversion Factory interface ... Create a new conversion Factory interface for CRDs, and split out NewDelegatingConverter as a standalone package-level function, instead of being part of CRConverterFactory. Signed-off-by: Andy Goldstein <andy.goldstein@redhat.com>	2022-12-13 14:38:21 -05:00
Kubernetes Prow Robot	6b9035513b	Merge pull request #113981 from TommyStarK/unit-tests/cmd-kube-controller-manager-app-options ... cmd/kube-controller-manager/app/options: Improving test coverage	2022-12-13 06:25:34 -08:00
TommyStarK	454290c583	cmd/kube-controller-manager/app/options: Improving test coverage ... Add a snippet of the expected error string related to the aspect being tested Signed-off-by: TommyStarK <thomasmilox@gmail.com>	2022-12-13 14:05:48 +01:00
SataQiu	c51ce945a5	kubeadm: add missing --cri-socket flag for upload-certs phase	2022-12-13 16:59:17 +08:00
Paco Xu	f28f40e521	remove a flag check that was introduced in #112542; address several comments ... Signed-off-by: Paco Xu <paco.xu@daocloud.io>	2022-12-13 14:00:29 +08:00
Aditi Sharma	214a0ee7b8	Migrate container runtime endpoint flag to config ... Signed-off-by: Aditi Sharma <adi.sky17@gmail.com> Signed-off-by: Paco Xu <paco.xu@daocloud.io>	2022-12-13 14:00:29 +08:00
Kubernetes Prow Robot	014e3be258	Merge pull request #114409 from SataQiu/kubeadm-20221211 ... kubeadm: cleanup the temporary workaround about kubelet --container-runtime flag	2022-12-11 03:11:14 -08:00
SataQiu	76bb3364d2	kubeadm: cleanup the temporary workaround about kubelet --container-runtime flag	2022-12-11 15:52:12 +08:00
Kubernetes Prow Robot	d2ed6d355e	Merge pull request #114279 from pacoxu/coredns-v1.10.0 ... update coredns to v1.10.0	2022-12-10 12:21:52 -08:00
Kubernetes Prow Robot	b7684889be	Merge pull request #114379 from SergeyKanzhelev/RotateCertificateIsGA ... rotate-certificates is a GA feature now	2022-12-10 09:06:24 -08:00
Kubernetes Prow Robot	f380944261	Merge pull request #114338 from champtar/kubeadm-priority ... kubeadm: set priority for "system-node-critical" Pods	2022-12-10 09:05:48 -08:00
Kubernetes Prow Robot	9e3e47f56a	Merge pull request #114176 from QuantumEnergyE/kubeadm_retry_patch_node ... Retry patch when then service is unavailable or timeout.	2022-12-10 06:05:26 -08:00
Kubernetes Prow Robot	7754f007d6	Merge pull request #114169 from jpbetz/improve-kubelet-flag-errors ... Improve error messages of flags that parse quantities and percentages	2022-12-10 06:05:11 -08:00
TommyStarK	270141aa0b	cmd/kube-controller-manager/app/options: Improving test coverage ... Signed-off-by: TommyStarK <thomasmilox@gmail.com>	2022-12-10 13:36:12 +01:00
Kubernetes Prow Robot	2e6d3393f7	Merge pull request #113998 from SataQiu/fix-kubeadm-20221117 ... kubeadm: respect user provided kubeconfig during discovery process	2022-12-10 03:17:39 -08:00
Kubernetes Prow Robot	da588a31d4	Merge pull request #112627 from hj-johannes-lee/fix-typo-3 ... Kubemark: fix typos to be HollowKubeletOptions	2022-12-09 15:43:14 -08:00
Kubernetes Prow Robot	ee8e76c6ea	Merge pull request #113943 from Octopusjust/k8s-pr10 ... Add test for cmd/kubeadm/app/constants/constants.go	2022-12-09 14:35:31 -08:00
Kubernetes Prow Robot	15f47da1c9	Merge pull request #113874 from SataQiu/clean-20221113 ... kubeadm: remove unused command flag constants	2022-12-09 14:34:48 -08:00
Kubernetes Prow Robot	6d823a3815	Merge pull request #113823 from TommyStarK/unit-tests/cmd-kube-apiserver-app-options ... cmd/kube-apiserver/app/options: Improving test coverage	2022-12-09 14:34:33 -08:00
Kubernetes Prow Robot	6c0f680be9	Merge pull request #113672 from falser101/fix/kubelet_cleanup ... fix: Remove dependency on github.com/pkg/errors	2022-12-09 14:34:19 -08:00
Sergey Kanzhelev	3067259782	rotate-certificates is a GA feature now	2022-12-09 09:02:51 +00:00
Mengjiao Liu	c28b287253	clusterroleaggregation: use contextual logging	2022-12-09 11:02:47 +08:00
Etienne Champetier	64eef3e9fa	kubeadm: set priority for "system-node-critical" Pods ... Priority is normally set by the admission controller when missing. For static pods there seems to be some corner cases, as, if priority is not explicitly set, Graceful Node Shutdown will shutdown static pods with the other pods that have priority 0 or unset. Signed-off-by: Etienne Champetier <e.champetier@ateme.com>	2022-12-07 14:19:28 -05:00
Paco Xu	34d845502f	kubeadm: use coredns v1.10.0	2022-12-05 11:42:43 +08:00
Paco Xu	f0d1a39e8f	add etcd 3.5.6-0 to kuebadm supported etcd version	2022-12-01 18:41:32 +08:00
QuantumEnergyE	847a39afc0	Retry patch when then service is unavailable or timeout.	2022-11-29 23:09:31 +08:00
Joe Betz	ab3c353227	Improve error messages for parse errors of --kube-reserved, --system-reserved and --qos-reserved	2022-11-28 16:35:26 -05:00
Dave Chen	2121ce17da	kubeadm: fix invalid testcase for enforceRequirements ... These testcases are too vague, they are not test against the scenario they want, but instead all of them are failed due to client cannot be created. `kubeconfig` file is created and mocked the function of `loadConfig` in order to make those testcases valid. Signed-off-by: Dave Chen <dave.chen@arm.com>	2022-11-24 16:52:44 +08:00
SataQiu	21cd660a1f	kubeadm: respect user provided kubeconfig during discovery process	2022-11-24 12:29:10 +08:00
Paco Xu	75f89875f8	use etcd 3.5.6-0 after promotion	2022-11-24 09:45:56 +08:00
songxiao-wang87	9ae5af4b6a	StorageVersionGC logger ... Signed-off-by: songxiao-wang87 <wang.xiaosong23@zte.com.cn>	2022-11-23 03:20:12 +00:00
songxiao-wang87	23fa8032ff	word misspelling ... Signed-off-by: songxiao-wang87 <wang.xiaosong23@zte.com.cn>	2022-11-23 00:29:36 +00:00
ZhangYu	ad2d23eb9f	Add test for cmd/kubeadm/app/phases/upgrade/compute.go	2022-11-21 10:25:30 +08:00
TommyStarK	44c94f98b6	fix typo in cmd/kube-apiserver/app/options/validation_test.go ... Put back test case that was dropped by mistake. Signed-off-by: TommyStarK <thomasmilox@gmail.com>	2022-11-16 19:25:31 +01:00
ZhangYu	44285a16ec	Add test for cmd/kubeadm/app/constants/constants.go ... Add test for cmd/kubeadm/app/constants/constants.go	2022-11-16 14:50:32 +08:00
Mark Rossetti	534f052a8d	Updating pause image refernces to 3.9 ... Signed-off-by: Mark Rossetti <marosset@microsoft.com>	2022-11-14 10:24:54 -08:00
SataQiu	69547267ef	kubeadm: remove unused command flag constants	2022-11-13 17:56:58 +08:00
Kubernetes Prow Robot	d1c0171aed	Merge pull request #111023 from pohly/dynamic-resource-allocation ... dynamic resource allocation	2022-11-11 16:21:56 -08:00
Ed Bartosh	ae0f38437c	kubelet: add support for dynamic resource allocation ... Dependencies need to be updated to use github.com/container-orchestrated-devices/container-device-interface. It's not decided yet whether we will implement Topology support for DRA or not. Not having any toppology-related code will help to avoid wrong impression that DRA is used as a hint provider for the Topology Manager.	2022-11-11 21:58:03 +01:00
Alexander Zielenski	3c68fe6596	fix aggregated discovery version sorting ... add test for level based priorities	2022-11-10 17:16:14 -08:00
Patrick Ohly	0133df3929	kube-controller-manager: add ResourceClaim controller ... The controller uses the exact same logic as the generic ephemeral inline volume controller, just for inline ResourceClaimTemplate -> ResourceClaim. In addition, it supports removal of pods from the ReservedFor field when those pods are known to not need the claim anymore. At the moment, only this special case is supported. Removal of arbitrary objects would imply granting full read access to all types to determine whether a) an object is gone and b) if the current incarnation is the one which is listed in ReservedFor. This may get added later.	2022-11-10 20:23:50 +01:00
Patrick Ohly	5cca60f0b8	api: dynamic resource allocation API ... This adds a new resource.k8s.io API group with v1alpha1 as version. It contains four new types: resource.ResourceClaim, resource.ResourceClass, resource.ResourceClaimTemplate, and resource.PodScheduling.	2022-11-10 20:08:24 +01:00
TommyStarK	47fdbd97d3	cmd/kube-apiserver/app/options: Improving test coverage ... Signed-off-by: TommyStarK <thomasmilox@gmail.com>	2022-11-10 16:20:20 +01:00
Kubernetes Prow Robot	8058e8eff8	Merge pull request #113171 from Jefftree/aggregated-discovery-generic ... Aggregated discovery server changes	2022-11-09 00:08:12 -08:00
jianfei.zhang	01a6668ece	fix: Remove dependency on github.com/pkg/errors ... Signed-off-by: jianfei.zhang <jianfei.zhang@daocloud.io>	2022-11-09 09:54:34 +08:00
Kubernetes Prow Robot	e62cfabf93	Merge pull request #112050 from nilekhc/kms-hot-reload ... Implements hot reload of the KMS `EncryptionConfiguration`	2022-11-08 17:24:12 -08:00
Alexander Zielenski	b64df605b4	add aggregated-apiservices to aggregated discovery ... Co-authored-by: Jeffrey Ying <jeffrey.ying86@live.com>	2022-11-08 14:44:50 -08:00
Alexander Zielenski	6e83f67505	add new aggregated resourcemanager to genericapiserver ... Co-authored-by: Jeffrey Ying <jeffrey.ying86@live.com>	2022-11-08 14:44:49 -08:00
Nilekh Chaudhari	761b7822fc	feat: implements kms encryption config hot reload ... This change enables hot reload of encryption config file when api server flag --encryption-provider-config-automatic-reload is set to true. This allows the user to change the encryption config file without restarting kube-apiserver. The change is detected by polling the file and is done by using fsnotify watcher. When file is updated it's process to generate new set of transformers and close the old ones. Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>	2022-11-08 21:47:59 +00:00
Kubernetes Prow Robot	2f22404003	Merge pull request #113747 from thockin/safer-controller-init-map ... Make static controller registration slightly safer	2022-11-08 12:43:25 -08:00
Kubernetes Prow Robot	3a99a5954d	Merge pull request #113629 from andrewsykim/apiserver-identity-beta ... Promote APIServerIdentity to Beta	2022-11-08 12:43:10 -08:00
Tim Hockin	d577e2bfb1	Make static controller registration slightly safer ... As we have more and more of these, the risk of a dup name seems non-zero.	2022-11-08 09:44:19 -08:00
Kubernetes Prow Robot	e2b9fd760d	Merge pull request #113710 from kerthcet/deprecate/enable-taint-manager ... Deprecate CLI flag pod-eviction-timeout in KCM	2022-11-08 09:34:22 -08:00
Kubernetes Prow Robot	95bd687a28	Merge pull request #113275 from Huang-Wei/kep-3521-B ... [KEP-3521] Part 2: Core scheduling implementation	2022-11-07 23:18:19 -08:00
Kubernetes Prow Robot	595ea32411	Merge pull request #113314 from cici37/celIntegration ... CEL validation in Admission chain	2022-11-07 17:08:33 -08:00
Andrew Sy Kim	02020b20e7	kube-apiserver: remove flags --identity-lease-duration-seconds and --identity-lease-renew-interval-seconds ... Signed-off-by: Andrew Sy Kim <andrewsy@google.com>	2022-11-07 19:36:22 -05:00
Kubernetes Prow Robot	243ba086e7	Merge pull request #112914 from PiotrProkop/topology-manager-policies-flag ... node: topologymanager: Improved multi-numa alignment in Topology Manager	2022-11-07 16:00:51 -08:00
Wei Huang	0b27f25252	PreEnqueue implementation ... - Add PreEnqueuePlugin to Scheduler Framework - Implement PreEnqueuePlugin in scheduler queue - Implementation of SchedulingGates plugin - Metrics	2022-11-07 14:02:58 -08:00
Cici Huang	0486e06261	Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control	2022-11-07 20:51:51 +00:00
Kubernetes Prow Robot	b1dd1cd2f1	Merge pull request #113529 from enj/enj/i/kms_single_healthz ... kms: add wiring to support automatic encryption config reload	2022-11-07 11:20:42 -08:00
Monis Khan	22e540bc48	kms: add wiring to support automatic encryption config reload ... This change adds a flag --encryption-provider-config-automatic-reload which will be used to drive automatic reloading of the encryption config at runtime. While this flag is set to true, or when KMS v2 plugins are used without KMS v1 plugins, the /healthz endpoints associated with said plugins are collapsed into a single endpoint at /healthz/kms-providers - in this state, it is not possible to configure exclusions for specific KMS providers while including the remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude a particular KMS is not possible. This single healthz check handles checking all configured KMS providers. When reloading is enabled but no KMS providers are configured, it is a no-op. k8s.io/apiserver does not support dynamic addition and removal of healthz checks at runtime. Reloading will instead have a single static healthz check and swap the underlying implementation at runtime when a config change occurs. Signed-off-by: Monis Khan <mok@microsoft.com>	2022-11-07 12:03:18 -05:00
kerthcet	b6d021b7e3	Deprecate CLI flag pod-eviction-timeout in KCM ... Signed-off-by: kerthcet <kerthcet@gmail.com>	2022-11-08 00:21:56 +08:00
Kubernetes Prow Robot	108523d037	Merge pull request #113352 from ping035627/k8s-221027 ... Correct some incorrect comments	2022-11-05 08:22:24 -07:00
Jordan Liggitt	318b089918	Stop creating three copies of admission plugins	2022-11-04 13:35:15 -04:00
Kubernetes Prow Robot	1bf4af4584	Merge pull request #111930 from azylinski/new-histogram-pod_start_sli_duration_seconds ... New histogram: Pod start SLI duration	2022-11-04 07:28:14 -07:00
Kubernetes Prow Robot	d86c013b0d	Merge pull request #108250 from cyclinder/add_flag_in_proxy ... kube-proxy: add a flag to disable nodePortOnLocalhost	2022-11-03 17:10:13 -07:00
Kubernetes Prow Robot	d802bd56ac	Merge pull request #113559 from wojtek-t/clean_shutdown_5 ... Clean shutdown of few more integration tests	2022-11-03 09:01:45 -07:00
PiotrProkop	d5dd42dfac	Improved multi-numa alignment in Topology Manager: introduce TopologyManagerOptions ... Signed-off-by: PiotrProkop <pprokop@nvidia.com>	2022-11-03 10:45:21 +01:00
PiotrProkop	daee219210	Improved multi-numa alignment in Topology Manager: add topology-manager-policy-options flag in Kubelet ... This patch adds new Kubelet option topologyManagerPolicyOptions. To introduce new TopologyManager options, first we need to introduce new flag called `topology-manager-policy-options` to allow users to modify behaviour of best-effort and restricted policies. Signed-off-by: PiotrProkop <pprokop@nvidia.com>	2022-11-03 09:45:33 +01:00
Kubernetes Prow Robot	a091b01878	Merge pull request #112053 from helen-frank/fix/patchKubeletLongDescription ... sync website change	2022-11-02 21:39:46 -07:00
Kubernetes Prow Robot	433787d25b	Merge pull request #113018 from fromanirh/cpumanager-ga-features ... node: kubelet: cpumgr: CPU Manager to GA	2022-11-02 14:41:01 -07:00
Kubernetes Prow Robot	25dc4c4f32	Merge pull request #112980 from swatisehgal/devicemanager-ga-graduation ... node: devicemgr: Graduate Kubelet DeviceManager to GA	2022-11-02 13:17:01 -07:00
Wojciech Tyczyński	3786cfdf85	Clean shutdown of serving integration test	2022-11-02 21:08:43 +01:00
Francesco Romani	a6b928d90c	kubelet: cpumgr: internal variable trivial rename ... CPUManager is going GA, thus it makes little sense to keep the names of the internal configuration variables `Experimental*`. Trivial rename only. Signed-off-by: Francesco Romani <fromani@redhat.com>	2022-11-02 18:41:42 +01:00