Commit Graph

12228 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
da02fdb2ae Merge pull request #123339 from skitt/canonical-json-patch
Update kustomize, use canonical json-patch v4 import
2024-05-29 08:02:24 -07:00
Kubernetes Prow Robot
529896474f Merge pull request #124688 from neolit123/1.31-always-rotate-etcd-certs-on-upgrade
kubeadm: ensure that etcd certs are rotated on apiserver upgrade
2024-05-29 05:10:30 -07:00
Kubernetes Prow Robot
afebfdc5d4 Merge pull request #125158 from mttrb/kubeadm-grammar
Fix grammar in kubeadm output
2024-05-29 03:30:45 -07:00
Kubernetes Prow Robot
3833d37b28 Merge pull request #124685 from saschagrunert/kubeadm-crictl
Make `kubeadm` independent from `crictl`
2024-05-29 03:30:31 -07:00
Lubomir I. Ivanov
f4d5e1d65d kubeadm: ensure that etcd certs are rotated on apiserver upgrade
Currently if etcd.yaml does not have a diff on "kubeadm upgrade"
certificate renewal for it is also skipped.

Check if kube-apiserver.yaml needs an upgrade, if so and if
cert renewal is not disabled, renew etcd's certs and restart
its static pod.
2024-05-29 13:07:41 +03:00
Sascha Grunert
7d1bfd9872 Make kubeadm independent from crictl
With the new `cri-client` staging repository it's finally possible to
decouple `kubeadm` from `crictl`.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-05-29 08:58:01 +02:00
Kubernetes Prow Robot
1ff1207d22 Merge pull request #124017 from carlory/rm-ctrl-flags
kube-controller-manager removes deprecated command flags
2024-05-28 10:54:22 -07:00
Stephen Kitt
5300466a5c Use canonical json-patch v4 import
The canonical import for json-patch v4 is
gopkg.in/evanphx/json-patch.v4 (see
https://github.com/evanphx/json-patch/blob/master/README.md#get-it for
reference).

Using the v4-specific path should also reduce the risk of unwanted v5
upgrade attempts, because they won't be offered as automated upgrades
by dependency upgrade management tools, and they won't happen through
indirect dependencies (see
https://github.com/kubernetes/kubernetes/pull/120327 for context).

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-05-28 10:48:22 +02:00
Matthew Robinson
8b1b32f226 Fix grammar in kubeadm output 2024-05-28 11:55:23 +08:00
carlory
214287b370 kube-controller-manager removed deprecated command flags: --volume-host-cidr-denylist and --volume-host-allow-local-loopback 2024-05-27 10:59:09 +08:00
Lubomir I. Ivanov
5e290ebc90 switch k/k to pause version 3.10 2024-05-24 10:02:51 +03:00
Kubernetes Prow Robot
903aeed208 Merge pull request #125096 from carlory/add-carlory-as-kubeadm-reviewer
Add carlory (myself) in kubeadm reviewers
2024-05-23 21:02:44 -07:00
Kubernetes Prow Robot
ef39aa896a Merge pull request #124948 from SataQiu/clean-20240519
kube-controller-manager: remove the deprecated horizontal-pod-autoscaler-upscale-delay and horizontal-pod-autoscaler-downscale-delay flags
2024-05-23 08:15:56 -07:00
carlory
ba7b3bcbb6 Add carlory (myself) in kubeadm reviewers 2024-05-23 22:07:57 +08:00
Kubernetes Prow Robot
25b3912c0d Merge pull request #124997 from neolit123/1.31-deprecate-rootless-cp-fg
kubeadm: deprecate the RootlessControlPlane feature gate
2024-05-22 19:40:50 -07:00
Kubernetes Prow Robot
44c45484e0 Merge pull request #124465 from neolit123/1.31-add-etcd-livez-readyz
kubeadm: use etcd 3.5.11's /livez and /readyz endpoints for probes
2024-05-21 04:40:23 -07:00
Lubomir I. Ivanov
4a6d3187fa kubeadm: deprecate the RootlessControlPlane feature gate
The feature was left in alpha for a few releases, since
k8s started planning on a broader feature UserNamespacesSupport,
which is what kubeadm should integrate with.

UserNamespacesSupport graduated to beta in 1.30.
Once it graduates to GA kubeadm can start using it an remove
RootlessControlPlane.
2024-05-20 16:55:11 +03:00
SataQiu
4bd3baece3 kube-controller-manager: remove the deprecated horizontal-pod-autoscaler-upscale-delay and horizontal-pod-autoscaler-downscale-delay flags 2024-05-19 17:49:23 +08:00
Kubernetes Prow Robot
a31030543c Merge pull request #124920 from kimsehwan96/update-an-incorrect-comment-in-kubeadm-controlplane-join-phase
Update an incorrect comment in kubeadm controlplane join phase
2024-05-17 06:03:51 -07:00
Kubernetes Prow Robot
67012614c3 Merge pull request #124442 from neolit123/1.31-add-image-pull-policy-to-upgrade-config
kubeadm: support image pull mode and policy in UpgradeConfiguration
2024-05-16 20:12:52 -07:00
kimsehwan96
894a838a1a Update an incorrect comment in kubeadm controlplane join phase 2024-05-17 12:09:42 +09:00
Kubernetes Prow Robot
06b813fd29 Merge pull request #124634 from saschagrunert/cri-staging-code
Move `pkg/kubelet/cri/remote` to `cri-client`
2024-05-16 07:33:06 -07:00
Kubernetes Prow Robot
22f3ce5e5e Merge pull request #124820 from SataQiu/feat-kubeadm-20240511
kubeadm: add support for patching a corednsdeployment target
2024-05-16 02:38:22 -07:00
Lubomir I. Ivanov
df87a503c2 kubeadm: use UpgradeNodeConfiguration.IgnorePreflightErrors
When using UpgradeNodeConfiguration.IgnorePreflightErrors the field
is currently ignored in favor of the "defualted" field created
by configutil.FetchInitConfigurationFromCluster.

Fix this bug.
2024-05-16 11:34:39 +03:00
Lubomir I. Ivanov
0faa2bfbc1 kubeadm: support image pull mode and policy in UpgradeConfiguration
Add Upgrade{Apply|Node}Configuration.{ImagePullPolicy|ImagePullSerial}.
The same feature already exists in NodeRegistrationOptions for
{Init|Join}Configuration.
2024-05-16 11:34:39 +03:00
Kubernetes Prow Robot
60ca8489be Merge pull request #124790 from carlory/cleanup-volume-cluster
Remove clusterName from VolumeOptions
2024-05-15 17:23:12 -07:00
Sascha Grunert
2aa9e76be1 Move pkg/kubelet/cri/remote to cri-client
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-05-14 10:58:18 +02:00
Kubernetes Prow Robot
68baa105f0 Merge pull request #124838 from carlory/kubeadm-cleanup-todo-1
kubeadm: remove outdate todo
2024-05-14 01:51:11 -07:00
Kubernetes Prow Robot
59ba132f16 Merge pull request #124544 from carlory/remove-cephfs
remove the support for in-tree volume plugin cephfs
2024-05-13 14:09:52 -07:00
Kubernetes Prow Robot
63e85caac5 Merge pull request #124741 from saschagrunert/remote-runtime-logging
Make remote runtime and image service logging independent
2024-05-13 08:52:32 -07:00
carlory
7582a768b7 kubeadm: remove outdate todo 2024-05-13 12:08:57 +08:00
SataQiu
1329935739 kubeadm: add support for patching a corednsdeployment target 2024-05-11 18:21:20 +08:00
carlory
9c92b37d4e remove clusterName from VolumeOptions 2024-05-10 16:42:31 +08:00
carlory
ab0205bb33 remove pkg/cloudprovider 2024-05-10 15:44:58 +08:00
carlory
6795820cfa remove the support for in-tree volume plugin cephfs 2024-05-10 15:00:26 +08:00
carlory
c8e91b9bc2 CephRBD volume plugin ( ) and its csi migration support were removed in this release 2024-05-09 22:55:34 +08:00
Kubernetes Prow Robot
35f85bbb3f Merge pull request #124717 from carlory/revert-kubelet-volumeplugins
Revert kubelet volume plugin files
2024-05-09 04:34:17 -07:00
Kubernetes Prow Robot
eeb42fa543 Merge pull request #124678 from my-git9/dns-test-54
kubeadm: increase ut coverage for addon/dns
2024-05-08 21:46:39 -07:00
Sascha Grunert
9c712466f6 Make remote runtime and image service logging independent
It's now possible to pass around the `*klog.Logger` which can also be
`nil` to disable logging at all.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-05-08 10:32:21 +02:00
Kubernetes Prow Robot
78bc18dcb0 Merge pull request #124715 from SataQiu/fix-kubeadm-20240507
kubeadm: remove deprecated UpgradeAddonsBeforeControlPlane featuregate
2024-05-07 13:29:24 -07:00
Kubernetes Prow Robot
72786649b6 Merge pull request #124652 from neolit123/1.31-add-cert-expiration-v1beta4
kubeadm: add support for custom cert validity period in v1beta4
2024-05-07 10:38:51 -07:00
carlory
23700e0336 revert cmd/kubelet/app/plugins.go and cmd/kubelet/app/plugins_providers.go, but remove gcp dependencies 2024-05-07 11:49:11 +08:00
SataQiu
6f94700886 kubeadm: remove deprecated UpgradeAddonsBeforeControlPlane featuregate 2024-05-07 09:24:10 +08:00
Kubernetes Prow Robot
4d17d30029 Merge pull request #124519 from dims/drop-all-the-providery-things-take-2
Remove gcp in-tree cloud provider and credential providers
2024-05-06 08:03:14 -07:00
Davanum Srinivas
7f9a0ef5d2 Fixes from review by Jan Šafránek/Andrew/Michael
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-05-03 15:11:36 -04:00
xin.li
d1dff562ad kubeam: increase ut coverage for addon/dns
Signed-off-by: xin.li <xin.li@daocloud.io>
2024-05-03 21:21:06 +08:00
SataQiu
1c82e03c2a kubeadm: remove unused CreateKubeConfigFileFunc type 2024-05-03 16:19:51 +08:00
Lubomir I. Ivanov
d105ddd350 kubeadm: update the IsPriviligedUser preflight check on Windows
Use GetCurrentProcessToken() instead of checking the groups of a user.

The Go stdlib way of fetching the groups of an user appears
to be failing on some Windows setups. Which could be a regression
in later Go versions, or simply the code does not work on certain
setups.
2024-05-02 20:23:02 +03:00
Davanum Srinivas
7187d9af81 address comments during review
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-05-01 18:01:25 -04:00
Dr. Stefan Schimanski
1d0c72d15a aggregator: move construction to generic controlplane
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-05-01 19:44:20 +02:00