Commit Graph

7536 Commits (035332f1ab664c1a2dc2b1144b7a0a7f1f10f46d)

Author SHA1 Message Date
Yann Hodique 4d9c01d747 replace golang.org/x/exp/inotify with standalone library
The inotify code was removed from golang.org/x/exp several years ago. Therefore
importing it from that path prevents downstream consumers from using any module
that makes use of more recent features of golang.org/x/exp.

This change is a followup to google/cadvisor#2060 which was merged with #70889

This fixes #68478
2018-11-13 14:51:40 -08:00
Lubomir I. Ivanov 24b4280e3f
Revert "kubeadm: Create control plane with ClusterFirstWithHostNet dns policy" 2018-11-14 00:18:32 +02:00
Lubomir I. Ivanov 865904d0e1 kubeadm: update notes and example config in v1beta1 godocs 2018-11-13 23:52:42 +02:00
k8s-ci-robot bea07c0dc6
Merge pull request #70935 from neolit123/kubeadm-update-cmd-go
kubeadm: update the state in app/cmd.go
2018-11-13 13:45:41 -08:00
k8s-ci-robot 8b562218b7
Merge pull request #70876 from chuckha/idempotency
kubeadm: Adds tests to node patching
2018-11-13 13:45:31 -08:00
k8s-ci-robot 3cba75ea60
Merge pull request #70603 from chuckha/pod-infra-container-image
kubeadm: set pod-infra-container-image for the kubelet
2018-11-13 13:45:02 -08:00
Mike Danese bf02f55147 rootcacertpublisher: trigger resync on namespace add and update
Last cleanup was a bit overzealous.
2018-11-13 11:38:45 -08:00
Mike Danese 766aab509a dedup APIAudiences config in kube-apiserver, use GenericConfig field 2018-11-13 11:07:31 -08:00
Yago Nobre 7a9a8f5f35
kubeadm graduate addons phase 2018-11-13 16:33:59 -02:00
k8s-ci-robot bfb95290b9
Merge pull request #70795 from yuexiao-wang/print-join-command
kubeadm: print the join command
2018-11-13 10:11:21 -08:00
Lubomir I. Ivanov 9a37f2d878
kubeadm: set pod-infra-container-image for the kubelet
The kubelet allows you to set `--pod-infra-container-image`
(also called `PodSandboxImage` in the kubelet config),
which can be a custom location to the "pause" image in the case
of Docker. Other CRIs are not supported.

Set the CLI flag for the Docker case in flags.go using
WriteKubeletDynamicEnvFile().
2018-11-13 13:10:22 -05:00
Thomas Riccardi 068cdaa56c Recognize newer docker versions without -ce/-ee suffix
Since docker 18.09, the ServerVersion field format changed: the `-ce`
or `-ee` suffix disappeared:

- docker 18.06: `18.06.1-ce`
- docker 18.09: `18.09.0`

This was not expected by the docker_validator version regexp, which
assumed newer docker versions ended with `-[a-z]{2}`.
This made the validator return an error, whereas we expect it to
return only a warning (by recognizing it as a newer but not yet
supported docker version).

This commit relax the version regexp to also recognize `18.09.0`.
The docker validator now returns a warning, as tested.
2018-11-13 18:55:29 +01:00
Chuck Ha db3d636f91
updates license year
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-13 12:49:42 -05:00
Chuck Ha 5792eeb137
kubeadm: Adds tests to node patching
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-13 12:48:54 -05:00
k8s-ci-robot 9199025b24
Merge pull request #70849 from yagonobre/rm-dynamic-kubelet
Remove DynamicKubeletConfig from init and join workflow
2018-11-13 08:54:34 -08:00
k8s-ci-robot bd2cb5a72d
Merge pull request #70831 from mikedanese/securesvcacct
add BoundServiceAccountTokenVolume feature
2018-11-13 08:54:25 -08:00
Ruben Orduz 89a5d5cadd iptables reset text message
Signed-off-by: Ruben Orduz <rubenoz@gmail.com>
2018-11-13 10:36:43 -05:00
Yago Nobre 62c9303ecf
Remove DynamicKubeletConfig from init and join workflow, also remove DynamicKubeletConfig feature gate 2018-11-13 11:56:24 -02:00
stewart-yu 43574d1be3 remove kube-controller-manager dependency on the legacyscheme, using client-go scheme 2018-11-13 19:45:59 +08:00
yuexiao-wang 5851fd556b kubeadm: print the join command should happen after all the phases in init have finished
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-11-13 19:05:10 +08:00
fabriziopandini 7f1b2a62a7 fix kubeadm upgrade 2018-11-13 09:14:16 +01:00
k8s-ci-robot bcef72bf06
Merge pull request #70877 from yagonobre/reset
Handler error when kubeconfig file not exist on kubeadm reset
2018-11-12 23:56:57 -08:00
k8s-ci-robot 3c5c6025bf
Merge pull request #70807 from Klaven/kubeadm_1221
kubeadm: Remove AuditPolicyConfiguration
2018-11-12 15:43:23 -08:00
Mike Danese f4ff26679f add BoundServiceAccountTokenVolume feature
* require TokenRequest to be enabled and configured
* bind ca.crt publisher to this feature rather than to TokenRequest
2018-11-12 13:11:47 -08:00
k8s-ci-robot 08784ad9af
Merge pull request #70842 from mikedanese/simplify
combine syncs in rootcacertpublisher
2018-11-12 12:01:45 -08:00
Marek 064f74b2e8 fixes kubeadm 1221 to remove AuditPolicyConfiguration
Added conversion test and failure.
2018-11-12 14:33:26 -05:00
Yago Nobre 5e31a6bb74
Handler error when kubeconfig file not exist on kubeadm reset 2018-11-12 10:36:35 -02:00
zhangmingld fb73574d77 use glog.info instead glog.infof when no var 2018-11-12 17:30:37 +08:00
k8s-ci-robot 99811e2540
Merge pull request #70870 from fabriziopandini/kubeadm-config-JoinControlPlane
Kubeadm config refactor JoinControlPlane
2018-11-12 00:53:09 -08:00
k8s-ci-robot 5fb8229218
Merge pull request #70024 from fabriziopandini/kubeadm-addons-config
kubeadm - addon configuration in the kubeadm config API.
2018-11-12 00:52:59 -08:00
k8s-ci-robot 04bb2171a7
Merge pull request #70885 from neolit123/phase-mark-control-plane
kubeadm: graduate the mark-control-plane-phase
2018-11-11 19:07:10 -08:00
k8s-ci-robot b99c8b994f
Merge pull request #70743 from bart0sh/PR0039-kubeadm-dont-prepull-etcd-if-not-required
kubeadm: prepull Etcd image only if required
2018-11-11 19:07:00 -08:00
Lubomir I. Ivanov c46e949799 kubeadm: update the state in app/cmd.go
- BETA->GA
- master->control-plane
- exclude @ mentions as only members can use them
2018-11-12 04:04:56 +02:00
Mike Danese 206f5892a7 combine syncs in rootcacertpublisher
and some misc simplifications.
2018-11-11 11:29:32 -08:00
stewart-yu 529dbd27ac auto-generated file 2018-11-11 17:19:38 +08:00
stewart-yu a77652e9ab kube-scheduler: output flags in logical sections 2018-11-11 17:19:38 +08:00
Davanum Srinivas cf142a2d21
add log_file option to kubelet flags
Change-Id: I5e75902739e2f869244d1b8b229be2580aca8149
2018-11-10 22:22:01 -05:00
RA489 daae2a86ea kubeadm: graduate mark-control-plane phase
Co-authored-by: Lubomir I. Ivanov <lubomirivanov@vmware.com>
2018-11-11 04:56:55 +02:00
fabriziopandini fa161370f0 autogenerated 2018-11-10 17:37:00 +01:00
fabriziopandini d484c8c087 kubeadm refactor joinControlPlane config 2018-11-10 17:36:49 +01:00
fabriziopandini 446d80693c autogenerated 2018-11-10 17:27:51 +01:00
fabriziopandini 6759334f6e add DNS struct to kubeadm config 2018-11-10 17:27:39 +01:00
Davanum Srinivas 954996e231
Move from glog to klog
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
2018-11-10 07:50:31 -05:00
k8s-ci-robot 97baad34a7
Merge pull request #67006 from mbohlool/crd_webhook_conversion
CRD webhook conversion
2018-11-10 02:33:51 -08:00
Mehdy Bohlool e2ca575d0f CRD Conversion 2018-11-09 15:57:35 -08:00
k8s-ci-robot d90f868c00
Merge pull request #70793 from rosti/use-hyperkube
kubeadm: UnifiedControlPlaneImage string -> UseHyperKubeImage bool
2018-11-09 14:31:28 -08:00
k8s-ci-robot 54fe139d4e
Merge pull request #70761 from luxas/rename_apiendpoint
kubeadm v1beta1: InitConfiguration.APIEndpoint -> LocalAPIEndpoint
2018-11-09 14:31:19 -08:00
k8s-ci-robot c3d05c816d
Merge pull request #70757 from ereslibre/remove-cluster-name-from-join-configuration
kubeadm: Remove cluster name from JoinConfiguration
2018-11-09 12:46:09 -08:00
Rostislav M. Georgiev b551ad596a kubeadm: UnifiedControlPlaneImage -> UseHyperKubeImage
Up until now UnifiedControlPlaneImage existed as a string value as part of the
ClusterConfiguration. This provided an override for the Kubernetes core
component images with a single custom image. It is mostly used to override the
control plane images with the hyperkube image. This saves both bandwith and
disk space on the control plane nodes.
Unfortunately, this specified an entire image string (complete with its prefix,
image name and tag). This disables upgrades of setups that use hyperkube.
Therefore, to enable upgrades on hyperkube setups and to make configuration
more convenient, the UnifiedControlPlaneImage option is replaced with a boolean
option, called UseHyperKubeImage. If set to true, this option replaces the
image name of any Kubernetes core components with hyperkube, thus allowing for
upgrades and respecting the image repository and version, specified in the
ClusterConfiguration.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-09 17:35:20 +02:00
Lucas Käldström 48c273b07e
autogenerated 2018-11-09 14:47:58 +02:00
Lucas Käldström 5656338b6e
Update unit tests after the rename 2018-11-09 14:47:45 +02:00
Lucas Käldström 731bcdc864
kubeadm: InitConfiguration.APIEndpoint -> LocalAPIEndpoint 2018-11-09 14:47:21 +02:00
k8s-ci-robot 8825843126
Merge pull request #70323 from qingsenLi/git181010
[kubeadm/app/..add other packages]Switch to github.com/pkg/errors
2018-11-09 01:02:06 -08:00
qingsenLi e94dd19e03 [kubeadm/app/..add other packages]Switch to github.com/pkg/errors 2018-11-09 18:54:03 +08:00
k8s-ci-robot e0ce8478b2
Merge pull request #70825 from mikedanese/cleanup
finish controller name change and don't double check feature flag
2018-11-08 23:45:55 -08:00
k8s-ci-robot 34be549935
Merge pull request #70727 from yagonobre/bootstrap-token
kubeadm graduate bootstrap-token phase
2018-11-08 17:36:24 -08:00
k8s-ci-robot be800e623a
Merge pull request #69663 from sttts/sttts-scheduler-secure-serving
scheduler: enable secure port and authn/z
2018-11-08 17:36:14 -08:00
Mike Danese 1469bb413e finish controller name change and don't double check feature flag 2018-11-08 15:51:49 -08:00
Rafael Fernández López 47b4e04842
kubeadm: Remove cluster name from JoinConfiguration 2018-11-08 23:29:52 +01:00
k8s-ci-robot b2b25462c1
Merge pull request #70755 from ereslibre/remove-feature-gates-from-join-configuration
kubeadm: Remove feature gates from JoinConfiguration
2018-11-08 14:27:08 -08:00
k8s-ci-robot 91d6d75303
Merge pull request #70796 from detiber/revCoreDNS
[kubeadm] Update CoreDNS Version
2018-11-08 12:13:10 -08:00
k8s-ci-robot f212b9db23
Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml
Switch to sigs.k8s.io/yaml from ghodss/yaml
2018-11-08 10:57:36 -08:00
k8s-ci-robot 3f5db92840
Merge pull request #68812 from WanLinghao/token_projection_ca_secret_create
Create Ca-certificate configmap  used by token projected volume
2018-11-08 10:57:25 -08:00
Rafael Fernández López fb88c199cd
kubeadm: Remove feature gates from JoinConfiguration
Relay on the feature gates provided by the ClusterConfiguration
when downloaded from the cluster during the join process.
2018-11-08 19:35:50 +01:00
Dr. Stefan Schimanski 1588af4031 kube-scheduler: add secure serving and authn/z integration tests 2018-11-08 16:43:59 +01:00
Dr. Stefan Schimanski 0ba66130b3 kube-scheduler: split out cmd Run func 2018-11-08 16:43:59 +01:00
Dr. Stefan Schimanski d91feb6d18 kube-scheduler: move stopCh creation out of scheduler factory code
Enforces clean ownership of the channel.
2018-11-08 16:43:59 +01:00
tanshanshan cb95edafe8 kube-scheduler: enable secure ports 10259 2018-11-08 16:43:59 +01:00
Jason DeTiberus 30048e2e6a
[kubeadm] Update CoreDNS Version
Resolves an issue that has been seen with ExternalName services not resolving.
2018-11-08 08:55:48 -05:00
k8s-ci-robot 1af76aee9a
Merge pull request #69863 from stewart-yu/stewart-cloud-controller-manager-clean
fix register wrong configz for *-controller-manager
2018-11-08 04:06:43 -08:00
k8s-ci-robot 16d0992534
Merge pull request #69753 from wangzhen127/diff-node-status
Update kubelet node status report logic with node lease feature
2018-11-07 20:26:45 -08:00
WanLinghao efac533f92 To inject ca.crt into container when projected volume was specified, configmap should be created in each namespace.
This patch add a controller called "root-ca-cert-publisher" to complete above job as well as some bootstrap rbac policies.
2018-11-08 11:33:47 +08:00
k8s-ci-robot e41f297d11
Merge pull request #69878 from Klaven/kubeadm_1072
Fixes /kubernetes/kubeadm/issues/1072 Cleanup of selfhosting logic
2018-11-07 19:10:25 -08:00
Yago Nobre e743f0e475
kubeadm graduate bootstrap-token phase 2018-11-08 01:01:21 -02:00
Lubomir I. Ivanov 8bc0447d8c kubeadm: use client-go's MakeCSRFromTemplate() in 'renew'
Create CSR using the mentioned function which also encodes the
type CertificateRequestBlockType.

Without that 'certs renew' is failing with:
'PEM block type must be CERTIFICATE REQUEST'
2018-11-08 01:16:33 +02:00
k8s-ci-robot df713d2711
Merge pull request #70729 from Pingan2017/remove-dulp-default
remove duplicate default in `kubelet --help`
2018-11-07 14:26:34 -08:00
Zhen Wang 98fc4a107a Update kubelet node status report logic with node lease feature
When node lease feature is enabled, kubelet reports node status to api server
only if there is some change or it didn't report over last report interval.
2018-11-07 11:59:42 -08:00
Davanum Srinivas 43f523d405
Switch to sigs.k8s.io/yaml from ghodss/yaml
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
2018-11-07 13:17:32 -05:00
Marek Counts 18dc529d05 Removed feature gates selfhosting, HA and store certs in secrets.
Added new alpha command to pivot to self hosted
Removed slelfhosting upgrade ability
Added warning message to self hosted pivot
added certs in secrets flag to new selfhosting comand
2018-11-07 11:44:54 -05:00
Ed Bartosh 328c1825d4 kubeadm: prepull Etcd image only if required
Prepull Etcd image only if external Etcd is not used and
--etcd-upgrade=false is not specified.

Fixes: kubernetes/kubeadm#1214
2018-11-07 14:59:37 +02:00
Pingan2017 55a29589c8 remove duplicate default in kubelet --help 2018-11-07 14:41:03 +08:00
k8s-ci-robot 7737576629
Merge pull request #70405 from yagonobre/upload-config
kubeadm graduate upload-config phase
2018-11-06 16:12:44 -08:00
k8s-ci-robot 50de3a0d79
Merge pull request #69659 from cheftako/lintClean3
Fixes lint errors in kubeapiserver packages
2018-11-06 14:02:05 -08:00
Dr. Stefan Schimanski 4860f8732a testservers: return Run method errors correctly 2018-11-06 15:14:24 +01:00
Yago Nobre 79f1b66f4e
kubeadm graduate upload-config phase 2018-11-06 11:30:46 -02:00
k8s-ci-robot c6c88f1bf1
Merge pull request #70666 from neolit123/phase-fix-hidden
kubeadm: make sure that commands are not added for hidden phases
2018-11-05 20:59:47 -08:00
k8s-ci-robot be85dc07d9
Merge pull request #70534 from sttts/sttts-kube-ctrl-mgr-command-owner
cmd/kube-controller-manager: add myself as owner
2018-11-05 16:32:43 -08:00
k8s-ci-robot 7ac1f8974b
Merge pull request #70635 from xichengliudui/fix18110202
Modify and update the comments
2018-11-05 14:20:20 -08:00
k8s-ci-robot faed5aa974
Merge pull request #70537 from yagonobre/validate-kubeconfig
Validate kubeconfig files in case of external CA mode
2018-11-05 14:20:10 -08:00
k8s-ci-robot c8e5233971
Merge pull request #70646 from Pingan2017/kubelet-default
remove duplicate default value in `kubelet --help`
2018-11-05 12:58:26 -08:00
Lubomir I. Ivanov 4a098980d6 kubeadm: make sure that commands are not added for hidden phases 2018-11-05 22:15:31 +02:00
k8s-ci-robot 1059feddbc
Merge pull request #70584 from Songjoy/fix-typo
fix typo Kubernets to Kubernetes
2018-11-05 11:42:17 -08:00
k8s-ci-robot b3441e1348
Merge pull request #69662 from ereslibre/conditional-ipvs-check
kubeadm: Perform IPVS check on join only if the cluster was set up with IPVS
2018-11-05 10:24:17 -08:00
Dr. Stefan Schimanski 447720b4c6 cmd/kube-controller-manager: add myself as approver 2018-11-05 12:00:27 +01:00
Rostislav M. Georgiev eb6f7b1f17 kubeadm: Add configurable control plane up timeout
Until now the control plane timeout was fixed to 4 minutes and users did not
have the ability to change it. This commit allows that timeout to be configured
via the new `timeoutForControlPlane` option in the API server config (itself a
member of the ClusterConfiguration).

The default timeout is still 4 minutes.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-05 12:36:28 +02:00
xichengliudui 453197c3b7 Modify the wrong function name
Modify and update the comments

Modify and update the comments
2018-11-05 05:16:33 -05:00
Pingan2017 7db1252023 remove duplicate default value in kubelet --help 2018-11-05 17:47:00 +08:00
k8s-ci-robot f379f7b3e8
Merge pull request #70589 from fabriziopandini/kubeadm-phase-flags
Kubeadm phases - improve flags management
2018-11-04 19:19:07 -08:00
walter 2af982abb9 Fixes lint errors in kubeapiserver packages
Fixes lint errors in kubeapiserver/admission, kubeapiserver/authorizer,
kubeapiserver/authenticator. Also enables lint testing of these
directories.
Fixed go format.
Fixed changes from config.
2018-11-04 17:22:41 -08:00
Yago Nobre 52ef8ebd97
Update bazel 2018-11-04 19:02:12 -02:00
Yago Nobre e1320bba36
Validate kubeconfig files in case of external CA mode 2018-11-04 18:58:46 -02:00
fabriziopandini 3e5133e793 autogenerated 2018-11-04 19:47:04 +01:00
fabriziopandini d63bae610f improve flags management in phases 2018-11-04 19:46:55 +01:00
k8s-ci-robot 14120dd44a
Merge pull request #70611 from yagonobre/rsa
Fix error wrap on pki_helpers
2018-11-03 11:05:14 -07:00
Yago Nobre a80a573074
Fix error wrap on pki_helpers 2018-11-03 10:17:20 -03:00
k8s-ci-robot 474e27f914
Merge pull request #70495 from rosti/writable-to-readonly-volumes
kubeadm: Writable to ReadOnly in HostPathMount
2018-11-03 01:43:02 -07:00
k8s-ci-robot ee94a56214
Merge pull request #70551 from liztio/fix-renew-overflow
Fix overflow issue on renewal
2018-11-02 16:44:39 -07:00
k8s-ci-robot 5e76248e23
Merge pull request #70512 from neolit123/phase-wait-control-plane
kubeadm: graduate wait-control-plane phase
2018-11-02 16:44:20 -07:00
Rostislav M. Georgiev 6c9e347e31 kubeadm: Writable to ReadOnly in HostPathMount
Writable was added to HostPathMount in v1alpha1 in order to control if an extra
volume is mounted in read only or writable mode.
Usually, in Kubernetes, this option is referred to as ReadOnly, instead of
Writable and is defaulted to `false`. However, at the time, all extra volumes
to pods were defaulted to read-only. Therefore, to avoid changes to existing
v1alpha1 configs, this option had to be added with reversed meaning.

Hence, it's called `writable`.

Now, with the migration towards v1beta1, we can safely change this to ReadOnly
and get it in sync with the reset of Kubernetes.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-02 18:02:06 +02:00
k8s-ci-robot b83a947ee9
Merge pull request #70371 from rosti/control-plane-substructs
kubeadm: Control plane config moved to substructs
2018-11-02 08:38:47 -07:00
liz adf9d7a031
Fix overflow issue on renewal
Co-authored-by: Ruben Orduz <rubenoz@gmail.com>
2018-11-02 10:12:57 -04:00
Lubomir I. Ivanov cbb448113d kubeadm: graduate wait-control-plane phase 2018-11-02 15:47:23 +02:00
k8s-ci-robot 7f32ad0287
Merge pull request #70529 from SataQiu/fix-2018110101
Fix the expression of some comments
2018-11-02 05:29:05 -07:00
Songjoy e8a09871e0
fix typo Kubernets to Kubernetes
fix typo Kubernets to Kubernetes in line 239
2018-11-02 20:24:01 +08:00
Rostislav M. Georgiev d14c27a347 kubeadm: Control plane config moved to substructs
In v1alpha3's, control plane component config options were nested directly into
the ClusterConfiguration structure. This is cluttering the config structure and
makes it hard to maintain. Therefore the control plane config options must be
separated into different substructures in order to graduate the format to beta.

This change does the following:

- Introduces a new structure called ControlPlaneComponent, that contains fields
  common to all control plane component types. These are currently extra args
  and extra volumes.

- Introduce a new structure called APIServer that contains
  ControlPlaneComponent and APIServerCertSANs field (from ClusterConfiguration)

- Replace all API Server, Scheduler and Controller Manager options in
  ClusterConfiguration with APIServer, ControllerManager and Scheduler fields
  of APIServer and ControlPlaneComponent types.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-02 11:38:56 +02:00
k8s-ci-robot 400438a887
Merge pull request #70336 from yuexiao-wang/move-pkiutil
kubeadm: move certs/pkiutil to generic kubeadm utils
2018-11-01 22:16:45 -07:00
k8s-ci-robot 78b43cc631
Merge pull request #70388 from neolit123/phase-etcd
kubeadm: graduate etcd phase
2018-11-01 13:44:16 -07:00
k8s-ci-robot 8e9c376cb3
Merge pull request #70452 from neolit123/remove-token-test
kubeadm: remove the unit test TestRunListTokens
2018-11-01 09:53:14 -07:00
Lubomir I. Ivanov 31049f972a kubeadm: graduate the etcd phase 2018-11-01 18:29:17 +02:00
jiaxuanzhou f253171dfe simplify logic for func BuildArgumentListFromMap 2018-11-01 23:15:48 +08:00
Dr. Stefan Schimanski 12f7d02e88 cmd/cloud-controller-manager: add myself as approver 2018-11-01 12:26:00 +01:00
SataQiu d32526fba4 improve the expression of some comments 2018-11-01 17:44:37 +08:00
Rafael Fernández López 242e071fa2
kubeadm: Perform IPVS check on join only if the cluster was set up with IPVS. 2018-11-01 09:43:16 +01:00
yuexiao-wang 4f0c2ecf09 move certs/pkiutil to generic kubeadm utils
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-11-01 15:05:19 +08:00
k8s-ci-robot a95c0c36e5
Merge pull request #70341 from yagonobre/fix-typos
Fix typos on cmd/kubeadm
2018-10-31 17:08:59 -07:00
fabriziopandini b56e122e66 autogenerated 2018-10-31 22:19:01 +01:00
fabriziopandini 0c31c79e7b kubeadm alpha commands 2018-10-31 22:18:39 +01:00
Yago Nobre cc670e29a1
Fix typos on cmd/kubeadm/app/cmd 2018-10-31 16:32:02 -03:00
k8s-ci-robot 587f020a1a
Merge pull request #70368 from thomasem/cmd_test_to_cmd
Swap cmd_test to cmd package in kubeadm/app/cmd/config_test.go
2018-10-31 11:50:32 -07:00
Lubomir I. Ivanov 968fdb95e3 kubeadm: move the control-plane phase to the phase runner
Remove custom flags that were previously available per
sub-phase. Rely on the config passed to 'kubeadm init' for that.

Remove redundant functions in manifests.go.

Move the audit policy settings to the control plane phase (under
API server).
2018-10-31 16:05:14 +02:00
Lubomir I. Ivanov f337f0e580 kubeadm: remove the unit test TestRunListTokens
Remove the test based on these points:

- it's apparently flaky by more than one reports and it's hard to debug.
- it's not a CLI unit test.
- it's testing API objects using a fake API server which is a bad hack...
- existing e2e tests already provide coverage for all
the `expectedError: false` cases.
2018-10-30 22:49:01 +02:00
k8s-ci-robot 739998f8fe
Merge pull request #70098 from fabriziopandini/kubeadm-graduate-kubeconfig
Kubeadm graduate kubeconfig phase
2018-10-30 12:22:48 -07:00
k8s-ci-robot 0a405f4a86
Merge pull request #69812 from rosti/single-api-endpoint
kubeadm: Remove multiple API server endpoints support upon join
2018-10-30 12:22:38 -07:00
k8s-ci-robot d196d63c01
Merge pull request #69884 from liggitt/self-sign-in-memory
Allow components to generate certificates in-memory
2018-10-30 11:03:29 -07:00
fabriziopandini 4f26d1de5f autogenerated 2018-10-30 16:35:37 +01:00
fabriziopandini 3cadb3ca1d kubeadm graduate kubeconfig phase 2018-10-30 16:35:29 +01:00
Rostislav M. Georgiev a3e7d7e038 kubeadm: APIServerEndpoints -> APIServerEndpoint
In the past the discovery configuration expected, that we can support multiple
API server endpoints. In practice, we always end up with a single API server
endpoint, because, even in HA setups, we use a load balancer scheme for API
servers.
Therefore, to reduce complexity and improve readability of the config, the
multiple API server endpoints support is removed from the bootstrap token
discovery join method and configuration.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-10-30 16:10:28 +02:00
k8s-ci-robot 03a145de8a
Merge pull request #70271 from yuexiao-wang/switch-errors-1
[kubeadm/app/]switch to github.com/pkg/errors
2018-10-30 03:38:35 -07:00
yuexiao-wang c0a9b4d04d add BUILD
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-10-30 16:23:52 +08:00
yuexiao-wang cc303c8774 [kubeadm/app/]switch to github.com/pkg/errors
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-10-30 16:23:24 +08:00
k8s-ci-robot a5356359cb
Merge pull request #69518 from Pingan2017/remove-skip-preflight-checks-deprecated-info
remove flag '--skip-preflight-checks' deprecated info
2018-10-29 15:53:50 -07:00
k8s-ci-robot 8c6fbd708c
Merge pull request #70331 from ereslibre/graduate-certs
kubeadm: Graduate certs phase
2018-10-29 14:38:43 -07:00
k8s-ci-robot ab61dcda62
Merge pull request #70003 from yagonobre/kubeadm-clean-etcd-dir
Get the etcd data path from kubeadm config or etcd pod manifest on kubeadm reset
2018-10-29 14:38:22 -07:00
Rafael Fernández López 00a7240a3a
kubeadm: graduate `certs` phase 2018-10-29 17:23:31 +01:00
Thomas Maddox f4a98e83ed
Swap cmd_test to cmd package in kubeadm/app/cmd/config_test.go 2018-10-29 09:18:27 -05:00
zuoxiu.jm 7f608eb5df prune internal informer from kubeapiserver constructor 2018-10-29 11:30:44 +08:00
Yago Nobre b35e22abe1
Update bazel 2018-10-28 17:04:53 -03:00
Yago Nobre 0c9e922fcd
Get etcd data dir from kubeadm config or use etcd manifest as fallback on kubeadm reset 2018-10-28 17:04:53 -03:00
fabriziopandini fbd6d2d68a autogenerated 2018-10-27 18:04:44 +02:00
fabriziopandini d30492ee8f kubeadm graduate kubelet-start phase 2018-10-27 18:04:33 +02:00
k8s-ci-robot 1df4f8eaf6
Merge pull request #70028 from liggitt/move-extensions-types
move internal apps API types out of extensions package
2018-10-26 15:56:13 -07:00
k8s-ci-robot b104eac566
Merge pull request #67133 from yue9944882/refactor/admission-config-complete-new-flow
Refactor admission controller contructor with Config.Complete.New flow
2018-10-26 12:22:01 -07:00
Marc Power eb818f95d1 Bind coredns containers to linux nodes to avoid Windows scheduling 2018-10-26 11:47:17 -07:00
yuexiao-wang f15410692e [kubeadm/app/util]switch to github.com/pkg/errors
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-10-26 15:17:21 +08:00
yue9944882 6a8faa6e40 replace contrustor of ad controller with config.complete.new flow
review:
1. import order
2. only set nil field on complete
3. replace hardcoded default namespace
2018-10-26 11:49:37 +08:00
Jordan Liggitt d0577ace6b fixup extensions->apps references 2018-10-25 21:12:57 -04:00
k8s-ci-robot 0ba00ec3a3
Merge pull request #69209 from Pingan2017/control-config
remove flag: insecure-experimental-approve-all-kubelet-csrs-for-group
2018-10-25 17:51:22 -07:00
k8s-ci-robot 584a86736e
Merge pull request #70071 from xichengliudui/fix18102203
Fix grammatical errors and repeat words
2018-10-25 07:12:20 -07:00
k8s-ci-robot abb8f66ff4
Merge pull request #70186 from yuexiao-wang/switch-errors
[kubeadm/app/cmd]switch to github.com/pkg/errors
2018-10-25 05:55:19 -07:00
yuexiao-wang f9084c6ce6 [kubeadm/app/cmd]switch to github.com/pkg/errors
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-10-25 15:05:04 +08:00
k8s-ci-robot eff7492d38
Merge pull request #70182 from SataQiu/fix-20181024
Fix incorrect return value of kubeadm pre-flight checks
2018-10-24 16:58:22 -07:00
Kim Min 79599ac419 Prune internal clientset/informer from kubeapiserver admission initializer (#70167)
* externalize pv resize admission controller

* externalize podtolerationrestriction admission controller

* externalize podnodeselector admission controller

* remove internal clientset/informer from kubeapiserver admission initializer

* minor change: fixes scheduler integration test compiliation
2018-10-24 14:47:16 -07:00
k8s-ci-robot 553a169d25
Merge pull request #70049 from fabriziopandini/kubeadm-graduate-kubelet-start
kubeadm - graduate kubelet-start phase
2018-10-24 09:44:17 -07:00
fabriziopandini 4505aa2108 autogenerated 2018-10-24 12:57:42 +02:00
fabriziopandini a3d90cc824 kubeadm graduate kubelet-start phase 2018-10-24 12:57:31 +02:00
SataQiu 23e67a1b80 fix incorrect return value of kubeadm pre-flight checks 2018-10-24 18:00:31 +08:00
zuoxiu.jm 38ddb4413a update token authn constructor 2018-10-24 16:56:38 +08:00
k8s-ci-robot c0974d7399
Merge pull request #69516 from feiskyer/win-npipe
Switch windows runtime endpoints to npipe
2018-10-23 16:44:41 -07:00
k8s-ci-robot dad07683b1
Merge pull request #69013 from ibrasho-forks/switch-to-http.Error
Update usages of http.ResponseWriter.WriteHeader to use http.Error
2018-10-23 15:31:55 -07:00
k8s-ci-robot 6617394faf
Merge pull request #70056 from bart0sh/PR0035-kubeadm-certsapi-handling-err
kubeadm: fix missing error handling
2018-10-23 02:08:40 -07:00
k8s-ci-robot 4d182cec03
Merge pull request #70105 from mikedanese/trev1
promote --service-account-api-audiences to top level kube-apiserver config
2018-10-22 23:59:34 -07:00
k8s-ci-robot 46ec13cf7d
Merge pull request #70027 from bart0sh/PR0031-kubeadm-sort-volumes
kubeadm: sort pod Volumes and VolumeMounts
2018-10-22 22:46:42 -07:00
k8s-ci-robot 15c15bedb7
Merge pull request #70048 from bart0sh/PR0032-kubeadm-add-NumCPUCheck
kubeadm: check required number of CPUs on master
2018-10-22 21:18:38 -07:00
Mike Danese 371b1e7fed promote --service-account-api-audiences to top level kube-apiserver config
The service account authenticator isn't the only authenticator that
should respect API audience. The authentication config structure should
reflect that.
2018-10-22 18:21:37 -07:00
k8s-ci-robot db4c86f560
Merge pull request #70055 from bart0sh/PR0034-kubeadm-upgrade-misc-fixes
2 minor fixes for kubeadm upgrade
2018-10-22 11:19:28 -07:00
Pengfei Ni 053b71d5d2 Switch windows runtime endpoints to npipe 2018-10-22 21:28:36 +08:00
xichengliudui 7946697e82 Fix grammatical errors and repeat words 2018-10-21 09:50:54 -04:00
Ed Bartosh daa111156f kubeadm: fix missing error handling
Handled error returned from CertificateSigningRequests().Get()
2018-10-21 11:26:42 +03:00
Ed Bartosh 149fbe3874 kubeadm: don't prepull etcd image on upgrade
Skipped prepulling etcd image if external etcd is used.

Fixes: kubernetes/kubeadm#1136
2018-10-21 10:07:02 +03:00
Ed Bartosh 1ada4b23b7 kubeadm: fix typo: missing round bracket 2018-10-21 00:42:08 +03:00
k8s-ci-robot 7cbb999518
Merge pull request #70023 from SataQiu/fix-20181019
clean up redundant code for kubeadm join
2018-10-20 11:17:53 -07:00
k8s-ci-robot a6e273214b
Merge pull request #69617 from rosti/config-defaults-split
kubeadm: Introduce config print init/join-defaults
2018-10-20 08:04:53 -07:00
Ed Bartosh d230b24612 kubeadm: check required number of CPUs on master
Implemented preflight check to ensure that number of CPUs
on the master node is not less than required.
2018-10-20 17:54:54 +03:00
k8s-ci-robot 0bf8a51f4b
Merge pull request #69666 from fabriziopandini/kubeadm-graduate-preflight
Kubeadm graduate preflight phase
2018-10-20 05:58:53 -07:00
k8s-ci-robot 2b8af57488
Merge pull request #70040 from liggitt/remove-deprecated-scheduler-config
Remove temporary workaround for scheduler alpha config-loading
2018-10-20 03:11:55 -07:00
k8s-ci-robot 2dc9acc23b
Merge pull request #69922 from xichengliudui/fix181017
Delete repeated words and fix misspellings
2018-10-20 01:47:53 -07:00
Jordan Liggitt 33a866c470 Remove temporary workaround for scheduler alpha config-loading 2018-10-20 01:07:28 -04:00
k8s-ci-robot cbb422c214
Merge pull request #70038 from andrewsykim/cloud-initialize-stopch
pass in stopCh to cloud provider Initialize method for custom controllers
2018-10-19 20:23:54 -07:00
k8s-ci-robot b47510c1bb
Merge pull request #69886 from bart0sh/PR0030-kubeadm-fix-1054-upgrade-same-version
kubeadm: skip upgrade if manifest is not changed
2018-10-19 14:52:46 -07:00
andrewsykim 2908174517 pass in stopCh to cloud provider Initialize method for custom controllers 2018-10-19 17:51:58 -04:00
Ed Bartosh ebb0af9e8f kubeadm: sort pod Volumes and VolumeMounts
Order of Volumes and VolumeMounts in the pod objects created by
kubeadm is undefined as they're represended as maps in the
controlPlaneHostPathMounts struct.

This influences 'kubeadm upgrade' logic in a way that even when
manifest of the component is not changed kubeadm tries to upgrade
it because most of the time current and new pods are not equal
due to the different order of Volumes and VolumeMounts.

For example 'kubeadm apply diff' almost always shows difference
in Volumes and VolumeMounts because of this:
     volumeMounts:
+    - mountPath: /etc/kubernetes/pki
+      name: k8s-certs
+      readOnly: true
     - mountPath: /etc/ssl/certs
       name: ca-certs
+      readOnly: true
+    - mountPath: /etc/pki
+      name: etc-pki
+      readOnly: true
+    - mountPath: /usr/share/ca-certificates
+      name: usr-share-ca-certificates
       readOnly: true
     - mountPath: /etc/ca-certificates
       name: etc-ca-certificates
       readOnly: true
-    - mountPath: /etc/pki
-      name: etc-pki
-      readOnly: true
-    - mountPath: /etc/kubernetes/pki
-      name: k8s-certs
-      readOnly: true
-    - mountPath: /usr/share/ca-certificates
-      name: usr-share-ca-certificates
-      readOnly: true

Sorting Volumes and VolumeMounts should fix this issue and help
to avoid unnecessary upgrades.
2018-10-19 18:22:47 +03:00
SataQiu 41937c21c0 clean up redundant code 2018-10-19 22:20:25 +08:00
yuexiao-wang 8af042af6d fix reference to controlManagerExtraAargs
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-10-19 20:22:34 +08:00
k8s-ci-robot b7c2d923ef
Merge pull request #69927 from SataQiu/fix-20181017
remove duplicate root check for kubeadm
2018-10-19 01:26:30 -07:00
k8s-ci-robot 52de5c55e3
Merge pull request #69883 from chrisohaver/coredns-default
Make CoreDNS default in kubeup and update CoreDNS version/manifest in kubeup and kubeadm
2018-10-18 18:39:12 -07:00
k8s-ci-robot 125cb7b1ad
Merge pull request #69846 from andrewrynhard/fix-kubeadm-join-taints
kubeadm: Fix node join taints
2018-10-18 14:44:19 -07:00
Chris O'Haver 0cfb4bbe2c make coredns kubeup default, update manifest 2018-10-18 14:52:38 -04:00
Rostislav M. Georgiev 91049ef77b kubeadm: Introduce config print init/join-defaults
In order to improve the UX of kubeadm, it was decided to introduce the
following subcommands:

- `kubeadm config print` - this is currently only a placeholder for subcommands
  that deal printing of some kind of configuration.
- `kubeadm config print init-defaults` - prints the default combination of
  InitConfiguration and ClusterConfiguration. Selected component configs can be
  printed too if the `--component-configs` command line switch is used.
- `kubeadm config print join-defaults` - prints the default JoinConfiguration.
  This command also supports the use of `--component-configs`.
- `kubeadm config print-defaults` is deprecated in favor of
  `kubeadm config print init/join-defaults`.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-10-18 14:21:02 +03:00
fabriziopandini 22da6a66a2 autogenerated 2018-10-18 11:52:15 +02:00
fabriziopandini abac950cd7 kubeadm graduate preflight phase 2018-10-18 11:52:04 +02:00
Jordan Liggitt b7160d4ee2 Allow components to generate certificates in-memory 2018-10-17 09:10:40 -04:00
SataQiu 8d4f4d3d70 remove duplicate kubeadm root check 2018-10-17 18:07:10 +08:00
Ed Bartosh ad0179897d kubeadm: skip upgrade if manifest is not changed
When doing upgrades kubeadm generates new manifest and
waits until kubelet restarts correspondent pod.

However, kubelet won't restart pod if there are no changes
in the manifest. That makes kubeadm stuck waiting for
restarted pod.

Skipping upgrade if new component manifest is the same as
current manifest should solve this.

Fixes: kubernetes/kubeadm#1054
2018-10-17 11:07:51 +03:00
k8s-ci-robot 1e4ad048fa
Merge pull request #67763 from rosti/join-discovery-split
kubeadm: Split discovery from JoinConfiguration
2018-10-16 19:25:47 -07:00
k8s-ci-robot ee4346651c
Merge pull request #69800 from xichengliudui/fix181015
Fixing grammatical errors
2018-10-16 17:53:20 -07:00
k8s-ci-robot 1d3d1e8968
Merge pull request #68518 from leakingtapan/golint-fix-volume-empty-dir
fix golint issues for pkg/volume/empty_dir
2018-10-16 17:52:44 -07:00
Andrew Rynhard 197fd02dca
Fix node join taints 2018-10-16 14:24:53 -07:00
k8s-ci-robot d169696b2e
Merge pull request #69622 from fabriziopandini/kubeadm-add-phase-runner
kubeadm refactor cmd init
2018-10-16 13:01:42 -07:00
k8s-ci-robot c2d9321044
Merge pull request #69340 from stevesloka/fixHostNameOverride
Allow hostname-override arg to be used if specified
2018-10-16 13:01:32 -07:00
Rostislav M. Georgiev 576b8d3f4f kubeadm: Split discovery from JoinConfiguration
This change splits out discovery fields from JoinConfiguration by performing
the following changes:

- Introduce a BootstrapTokenDiscovery structure, that houses configuration
  options needed for bootstrap token based discovery.

- Introduce a FileDiscovery structure, that houses configuration options
  (currently only a single option) needed for KubeConfig based discovery.

- Introduce a Discovery structure, that houses common options (such as
  discovery timeout and TLS bootstrap token) as well as pointer to an instance
  of either BootstrapTokenDiscovery or FileDiscovery structures.

- Replace the old discovery related JoinConfiguration members with a single
  Discovery member.

This change is required in order to cleanup the code of unnecessary logic and
make the serialized JoinConfiguration more structured (and therefore, more
intuitive).

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-10-16 15:25:32 +03:00
stewart-yu a2942e5f9c fix register wrong configz for *-controller-manager 2018-10-16 18:00:25 +08:00
fabriziopandini 68b4286ae0 cmd init refactor 2018-10-16 11:38:42 +02:00
k8s-ci-robot 21cb721ca2
Merge pull request #69842 from liggitt/etcd2-cleanup
etcd2 code cleanup, remove deserialization cache
2018-10-15 23:27:56 -07:00
xichengliudui 0dba66a2a1 Delete repeated words and fix misspellings
Delete repeated words and fix misspellings
2018-10-16 01:05:05 -04:00
Jordan Liggitt c8db31b84a etcd2 code cleanup, remove deserialization cache 2018-10-15 22:17:44 -04:00
k8s-ci-robot cf3a930938
Merge pull request #69607 from mikedanese/audctx
tokenreview: add APIAudiences config to generic API server and augment context
2018-10-15 19:03:43 -07:00
k8s-ci-robot 2f8b585d9c
Merge pull request #69330 from vaikas-google/json-patch
Add support for JSON patch in fake client
2018-10-15 15:04:32 -07:00
k8s-ci-robot d54e0fc0bc
Merge pull request #69670 from atlassian/simplify-rand-seed
Simplify rand seeding
2018-10-15 13:53:01 -07:00
Cheng Pan 42ef7ae8d5 fix golint issues for pkg/volume/empty_dir 2018-10-15 20:00:36 +00:00
Tomáš Kukrál a031d03501
use etcd endpoint from advertise-client-urls
It makes more sense to use advertised etcd endpoints instead of using
listened client URLS.

I'm solving this use case: Listen on localhost and public IP but I don't
want to add multiple endpoints to kube-apiservers because it's targeting
same etcd server.
2018-10-15 21:23:13 +02:00
k8s-ci-robot b11211ed8c
Merge pull request #69645 from neolit123/kubeadm-set-version-fix
kubeadm: modify SetKubernetesVersion
2018-10-15 11:40:42 -07:00
xichengliudui a20fbf0b5a Fix syntax error
Fixing grammatical errors
2018-10-15 06:52:55 -04:00
Ibrahim AshShohail 2fb3ba71f1
Update usages of http.ResponseWriter.WriteHeader to use http.Error
Signed-off-by: Ibrahim AshShohail <me@ibrasho.com>
2018-10-14 05:58:00 +03:00
k8s-ci-robot 653b027200
Merge pull request #69646 from zhouhaozz/delete-cert
certs: Delete useless code
2018-10-13 08:47:13 -07:00
Lubomir I. Ivanov fa9940c71c kubeadm: modify SetKubernetesVersion
Without this patch SetKubernetesVersion does not set
a version in all locations where it's called, because
the passed config to it always has a default version
stable-1.

This always triggers the != "" check and the function
returns without setting a version.

Validate against DefaultKubernetesVersion and "" instead.

This fixes all cases where fetching a version from the internet
is not needed at all - e.g. "kubeadm token create".

Also make SetKubernetesVersion default to version.Get().String()
and add unit tests for the function.
2018-10-13 17:16:22 +03:00
k8s-ci-robot e4200cea9c
Merge pull request #69354 from yujuhong/rm-jwt
GCP: Remove the deprecated google-json-key support
2018-10-12 17:16:46 -07:00
k8s-ci-robot f22334f14d
Merge pull request #69720 from fabriziopandini/kubeadm-add-etcd-ports-constant
Kubeadm - Add etcd ports constant
2018-10-12 16:02:01 -07:00
k8s-ci-robot 7d45044c11
Merge pull request #69684 from fabriziopandini/kubeadm-add-phase-runner2
kubeadm add phase runner
2018-10-12 14:48:56 -07:00
fabriziopandini 6a8ace5c65 add phase runner 2018-10-12 17:55:10 +02:00
fabriziopandini 66e846fa26 Add etcd ports constant 2018-10-12 09:33:07 +02:00
Zhen Wang e35d808aa2 NodeLifecycleController treats node lease renewal as a heartbeat signal 2018-10-11 16:07:15 -07:00
k8s-ci-robot 820c9eef3f
Merge pull request #69512 from islinwb/reuse_GetNodeIP
Reuse func getNodeIP
2018-10-11 13:45:22 -07:00
k8s-ci-robot 94306c12f5
Merge pull request #69057 from denkensk/create-a-new-scheduler-constructor
create-a-new-scheduler-constructor
2018-10-11 13:45:02 -07:00
k8s-ci-robot 709ac9ce85
Merge pull request #69624 from bart0sh/PR0029-kubeadm-token-mix-config-with-print-join-command
kubeadm: allow usage --config with --print-join-command
2018-10-11 11:06:58 -07:00
k8s-ci-robot 8f620950e2
Merge pull request #69614 from mitar/patch-1
Adding more kernel config paths
2018-10-11 03:36:22 -07:00
Mikhail Mazurskiy 3a243090a5
Simplify random seed initialization
There is no need to set the time zone as the result does not
depend on it
2018-10-11 21:01:15 +11:00
Ville Aikas a363b15385 Add support for JSON patch in fake client 2018-10-11 08:13:50 +00:00
Zhou Hao 081cf49671 certs: Delete useless code
Signed-off-by: Zhou Hao <zhouhao.oci@gmail.com>
2018-10-11 09:16:48 +08:00
k8s-ci-robot 8a4022fd49
Merge pull request #69517 from SataQiu/fix-2018100801
cleanup: delete duplicate lines
2018-10-10 16:46:45 -07:00
k8s-ci-robot 77742ea94c
Merge pull request #69301 from neolit123/kubeadm-version-stable
kubeadm: handle stable-1 as the default version
2018-10-10 12:01:18 -07:00
k8s-ci-robot ccf6611c65
Merge pull request #69586 from neolit123/kubeadm-cleanup-init
kubadm: remove misleading message in `init`
2018-10-10 06:03:24 -07:00
k8s-ci-robot c487e67290
Merge pull request #69575 from fabriziopandini/Kubeadm-api-doc
kubeadm - improve api config documentation
2018-10-10 06:03:04 -07:00
Ed Bartosh eacff9436e kubeadm: allow usage --config with --print-join-command
kubeadm token create  --print-join-command --config <path>
fails with Error: can not mix '--config' with arguments [print-join-command]

As print-joint command can't be put into the configuration file it
should be possible to use those 2 options at the same time.

Added print-join-command options to the list of exceptions in
ValidateMixedArguments check to allow its usage with --config option.

Fixes: kubernetes/kubeadm#1166
2018-10-10 16:00:55 +03:00
wangqingcan 608911d5ac add test for new constructor 2018-10-10 17:15:10 +08:00
wangqingcan a74fd15e62 create a new scheduler constructor 2018-10-10 17:10:10 +08:00
Mitar 3f8ef7c6f8
Adding more kernel config paths 2018-10-10 00:37:14 -07:00
Mike Danese 21fd8f2041 tokenreview: add APIAudiences config to generic API server and augment context 2018-10-09 22:47:10 -07:00
Lubomir I. Ivanov 28c936ea7f kubadm: remove misleading message in `init`
The message right before the kubelet boots up the control
plane is misleading because the image pulling is now part of
preflight.

Remove the message.
2018-10-09 22:27:12 +03:00
fabriziopandini 17cf652783 kubeadm-improve-apidoc 2018-10-09 17:40:05 +02:00
k8s-ci-robot f9acfd8e38
Merge pull request #69527 from liggitt/remove-quorum
Remove deprecated --etcd-quorum-read flag
2018-10-08 23:38:02 -07:00
Weibin Lin 2d2ecb15d2 update bazel 2018-10-09 10:27:27 +08:00
Weibin Lin 0d57ec2938 reuse func getNodeIP 2018-10-09 10:27:27 +08:00
Jordan Liggitt cff79c5421 Remove deprecated --etcd-quorum-read flag 2018-10-08 21:56:01 -04:00
Pingan2017 e734553d3d remove --skip-preflight-checks deprecated info 2018-10-08 17:23:46 +08:00
SataQiu 6b7951a2d0 cleanup: delete duplicate lines 2018-10-08 17:14:22 +08:00
RA489 8729cade98 util/config` packages; filenames and methods should be updated to use new names 2018-10-08 14:12:17 +05:30
Guoliang Wang 187e2e01c9 Move scheduler cache interface and implementation to pkg/scheduler/internal/cache 2018-10-06 20:48:59 +08:00
k8s-ci-robot 0f17e9ade6
Merge pull request #69386 from cblecker/go-1.11
Update to go1.11.1
2018-10-05 17:35:51 -07:00
k8s-ci-robot 13705ac81e
Merge pull request #68310 from cheftako/cpiMove
Moving the cloudprovider interface to staging.
2018-10-05 13:29:01 -07:00
Christoph Blecker 97b2992dc1
Update gofmt for go1.11 2018-10-05 12:59:38 -07:00
k8s-ci-robot b836fa432e
Merge pull request #69420 from ereslibre/fix-kubeadm-panic
kubeadm: do not panic if etcd local alpha phase is called when an external etcd config is used
2018-10-05 10:55:30 -07:00
Rostislav M. Georgiev f0d82fb5f4 kubeadm: Allow mixing Init and Join Configurations
This change allows mixing InitConfiguration/ClusterConfiguration with
JoinConfiguration in a single YAML file, by performing the following changes:

- Replace the explicit error in `DetectUnsupportedVersion` with a warning.
- Modify `NodeConfigFileAndDefaultsToInternalConfig` to use only
  `JoinConfiguration`.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-10-05 10:46:23 +03:00
Rafael Fernández López 503c6c7b85
kubeadm: do not panic if etcd local alpha phase is called when an external etcd config is used
If etcd local alpha phase is called manually while the kubeadm configuration
points to an external etcd cluster kubeadm panics.
2018-10-05 07:55:17 +02:00
Walter Fender f3f46d5f5a Moving the cloudprovider interface to staging.
Individual implementations are not yet being moved.
Fixed all dependencies which call the interface.
Fixed golint exceptions to reflect the move.
Added project info as per @dims and
https://github.com/kubernetes/kubernetes-template-project.
Added dims to the security contacts.
Fixed minor issues.
Added missing template files.
Copied ControllerClientBuilder interface to cp.
This allows us to break the only dependency on K8s/K8s.
Added TODO to ControllerClientBuilder.
Fixed GoDeps.
Factored in feedback from JustinSB.
2018-10-04 14:41:20 -07:00
Lubomir I. Ivanov 505413581e kubeadm: handle stable-1 as the default version
The default version in kubeadm is now `stable-1`. This will
pull a version from the `stable-1.txt` endpoint which might
end up being newer than the version of the client by a magnitude
of MINOR or even a MAJOR release.

To be able to prevent this scenario add the new helper function:
validateStableVersion()

This function determines if the remote version is newer than the
local client version and if that's the case it returns `stable-X.xx`
that conforms with the version of the client. If not it returns
the remote version.
2018-10-05 00:02:57 +03:00
fabriziopandini b4092acdb6 autogenerated 2018-10-04 13:20:20 +02:00
fabriziopandini 9aec633c40 Fix tests 2018-10-04 13:20:11 +02:00
fabriziopandini 488ac6825b Automated bump from v1alpha3 references to v1beta1 2018-10-04 12:03:38 +02:00
fabriziopandini 8ae5179a7b Add a duplicated v1beta1 API 2018-10-04 12:02:50 +02:00
k8s-ci-robot 50ce55e7c5
Merge pull request #69392 from justinsb/fix_go_111_printf_kubeadm
kubeadm: fix printf format error
2018-10-03 22:43:12 -07:00
k8s-ci-robot 5dd78df7da
Merge pull request #68982 from aruneli/master
Fixes #65869 Do not listen insecurely if secure port is specified
2018-10-03 17:32:28 -07:00
k8s-ci-robot e03886c34a
Merge pull request #68297 from leakingtapan/golint-fix-gce-pd
fix golint for pkg/volume/gce_pd
2018-10-03 13:01:34 -07:00
Justin Santa Barbara 34b8433006 kubeadm: fix printf format error
go test in 1.11 verifies format strings; this fix is needed for the
test to pass with go 1.11.
2018-10-03 15:16:04 -04:00
k8s-ci-robot f149d2a2c2
Merge pull request #68409 from wgliang/feature/remove-chaosclien
Remove unused chaosclient
2018-10-02 21:46:22 -07:00
k8s-ci-robot 94d300db32
Merge pull request #68290 from mkenigs/68201-cmd-kubeadm
Update import-boss - cmd/kubeadm
2018-10-02 21:46:12 -07:00
k8s-ci-robot c179a9c9df
Merge pull request #67356 from yliaog/master
Moved staging/src/k8s.io/client-go/tools/bootstrap to staging/src/k8s…
2018-10-02 20:35:51 -07:00
Yu-Ju Hong ed92397eff GCP: Remove the deprecated google-json-key support
The flag was deprecated in 1.10. According to the deprecation policy, it
is safe to remove the flag now.
2018-10-02 16:53:28 -07:00
Steve Sloka 5834f94598 Allow hostname-override flag to be used if specified
Signed-off-by: Steve Sloka <steves@heptio.com>
2018-10-02 16:09:01 -04:00
Yu Liao fc21115c3f Moved staging/src/k8s.io/client-go/tools/bootstrap to staging/src/k8s.io/cluster-bootstrap 2018-10-02 09:46:13 -07:00
Lubomir I. Ivanov 94e4c25ae6 kubeadm: include better details about v1alpha3 godocs
- update examples in v1alpha3/doc.go
- add docs link when printing `kubeadm config print-default`
2018-10-02 19:12:41 +03:00
k8s-ci-robot 2b5b88e483
Merge pull request #68664 from tanshanshan/addversion
add version logging to cloud-controller
2018-10-01 23:37:48 -07:00
k8s-ci-robot 27456975d4
Merge pull request #69290 from neolit123/reviewer
cmd/kubeadm: add neolit123 as reviewer
2018-10-01 22:20:58 -07:00
k8s-ci-robot 1fbf7c5542
Merge pull request #69259 from xichengliudui/fix180929
Fix typo
2018-10-01 22:20:39 -07:00
k8s-ci-robot 2f2b445e0b
Merge pull request #69058 from fabriziopandini/kubeadm-cleanup-v1alpha3-api-conversion-and-restore-fuzzer
Kubeadm cleanup v1alpha3 api conversion and restore fuzzer
2018-10-01 18:04:24 -07:00
Cheng Pan 7d68fd00e6 fix golint for pkg/volume/gce_pd 2018-10-01 18:58:30 +00:00
Lubomir I. Ivanov 0de2607443 cmd/kubeadm: add neolit123 as reviewer 2018-10-01 19:11:31 +03:00
Ed Bartosh b1b719fa68 kubeadm: fix kubeadm join using existing certs
If 'kubeadm join' is run with --discovery-file option it still
prompts for bootstrap token. This makes it impossible to use
existing client certificates mentioned in the discovery file.

Fixed by checking for empty bootstrap token only if discovery file
is not specified.

Fixes: kubernetes/kubeadm#1142
2018-10-01 18:20:20 +03:00
RA489 824ed161d5 Rename the constant that refers to the `kubeadm-config` ConfigMap 2018-10-01 15:50:04 +05:30
xichengliudui 3e2d2ea42d fix typo 2018-09-29 06:17:20 -04:00
matthew 51ae0e426a updated cmd/kubeadm/.import-restrictions with dependencies
Removed redundant prefixes

Update .import-restrictions
2018-09-28 17:28:40 -05:00
fabriziopandini dd8a7aa257 autogenerated 2018-09-28 10:45:13 +02:00
fabriziopandini 19be8be4f3 Restore fuzzer test 2018-09-28 10:43:45 +02:00
fabriziopandini 8e887e1eee cleanup v1alpha3 conversion to internal 2018-09-28 10:42:38 +02:00
Pingan2017 3bf4a975d4 remove flag: insecure-experimental-approve-all-kubelet-csrs-for-group 2018-09-28 15:21:20 +08:00
k8s-ci-robot 3c43f089b2
Merge pull request #69155 from mooncak/fix_duplicate_words
remove duplicate words in files
2018-09-27 12:21:46 -07:00
k8s-ci-robot 587914c29d
Merge pull request #69055 from fabriziopandini/kubeadm-remove-v1alpha2
Kubeadm remove v1alpha2 api
2018-09-27 12:21:26 -07:00
mooncake 9c561d0c68 remove duplicate words in files 2018-09-27 22:58:47 +08:00
k8s-ci-robot 2662ca309d
Merge pull request #69037 from shubheksha/fix/68964-simplify-run-method-kube-scheduler-server
Simplify kube-scheduler's run() method
2018-09-27 07:18:11 -07:00
k8s-ci-robot 43a9e08e02
Merge pull request #68990 from carlisia/c-pauseversion
Change pause version value to a constant for image
2018-09-27 04:48:59 -07:00
k8s-ci-robot 3fe21e5433
Merge pull request #68922 from BenTheElder/version-staging
move pkg/util/version to staging
2018-09-26 22:59:42 -07:00
k8s-ci-robot 823530d4db
Merge pull request #68917 from zhangmingld/fixwordserr
Fix some typo err
2018-09-26 22:59:32 -07:00
k8s-ci-robot e9fe3f77e9
Merge pull request #68890 from andrewrynhard/dnspolicy
kubeadm: Create control plane with ClusterFirstWithHostNet dns policy
2018-09-26 20:37:57 -07:00
fabriziopandini 4f5374e7cc autogenerated 2018-09-26 17:39:27 +02:00
fabriziopandini bb8eec4934 removal of v1alpha2 2018-09-26 17:39:18 +02:00
k8s-ci-robot 4ca9fa737e
Merge pull request #68760 from jessfraz/only-set-sysctl-if-not-set
pkg/proxy: only set sysctl if not already set
2018-09-26 04:56:59 -07:00
k8s-ci-robot 8c1fe2e1df
Merge pull request #68455 from Klaven/kubeadm_883
kubeadm 883 Updated logging to be consistent.
2018-09-26 02:27:47 -07:00
Arun 1761031f5f Fixes #65869 Do not listen insecurely if secure port is specified 2018-09-25 19:06:34 -07:00
Guoliang Wang 1eceb1dcdb Remove unused chaosclient 2018-09-26 08:43:01 +08:00
Shubheksha Jalan 564ee22123 simplify run method of kube-scheduler cmd 2018-09-26 00:39:37 +05:30
k8s-ci-robot c16691037d
Merge pull request #68255 from leakingtapan/golint-fix-ebs
Fix golint for pkg/volume/aws_ebs
2018-09-25 06:13:33 -07:00
k8s-ci-robot a67689dfca
Merge pull request #68245 from jingyih/remove_tagName_in_goDoc
*: Remove comment tags in GoDoc
2018-09-25 06:13:23 -07:00
k8s-ci-robot 893e87bf30
Merge pull request #68079 from huangqg/fix_kubeadm_typo
fix typos in some files
2018-09-25 05:02:04 -07:00
k8s-ci-robot 0805860dba
Merge pull request #67870 from yue9944882/refactor/externalize-resource-quota-admission-controller
Externalize resource quota admission controller & controller reconciliation
2018-09-25 02:41:40 -07:00
Benjamin Elder 8b56eb8588 hack/update-gofmt.sh 2018-09-24 12:21:29 -07:00
Benjamin Elder f828c6f662 hack/update-bazel.sh 2018-09-24 12:03:24 -07:00
Benjamin Elder 5f7531f75e fix kubeadm import restrictions 2018-09-24 12:03:24 -07:00
Benjamin Elder 088cf3c37b find & replace version import 2018-09-24 12:03:24 -07:00
Carlisia 401f3f824c
Change pause version value to a constant for image
Closes #1137
2018-09-23 14:27:53 -07:00
Cheng Pan 000e30086b fix golint for pkg/volume/aws_ebs 2018-09-22 05:56:05 +00:00
k8s-ci-robot 5e5f7e5389
Merge pull request #68906 from neolit123/docker-verify
kubeadm: fix broken Docker 17.xx validation
2018-09-21 09:36:09 -07:00
k8s-ci-robot 7b62ae3186
Merge pull request #68639 from liggitt/scheduler-legacy-config
Coerce componentconfig/v1alpha1 KubeSchedulerConfiguration to kubescheduler.config.k8s.io/v1alpha1
2018-09-21 09:35:50 -07:00
k8s-ci-robot 7568f21e60
Merge pull request #68789 from timothysc/kubeadm-1.12
Use the v1.12 branch by default
2018-09-21 08:23:54 -07:00
k8s-ci-robot d39102d92e
Merge pull request #68900 from MrHohn/kube-dns-1.14.13
Bump kube-dns to 1.14.13
2018-09-20 20:35:46 -07:00
k8s-ci-robot 0c28933109
Merge pull request #68836 from chuckha/update-godoc
Update kubeadm v1alpha3 example configuration
2018-09-20 19:24:26 -07:00
zhangmingld 3648f73337 fix some typo 2018-09-21 10:20:21 +08:00
Lubomir I. Ivanov 209045ddd5 kubeadm: fix broken Docker 17.xx validation
A previous commit updated 17.xx -> 18.xx without considering
that some systems still use 17.xx.

Add handling for 17.0[3,6,9] as validated versions.
Also re-format the error message because the version is not validated
per maximum basis, but rather based on existing validation.
2018-09-21 01:00:53 +03:00
Timothy St. Clair ee35211c72 Use the v1.12 branch by default
Signed-off-by: Timothy St. Clair <timothysc@gmail.com>
2018-09-20 16:41:09 -05:00
Chuck Ha 7ddc8738cb
Update kubeadm v1alpha3 example configuration
closes kubernetes/kubeadm#1132

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-09-20 16:13:58 -04:00
Zihong Zheng 576d6e5c92 Bump kube-dns to 1.14.13
- Update Alpine base image to 3.8.1.
- Build multi-arch images correctly.
2018-09-20 12:36:02 -07:00
Andrew Rynhard 8f6ec989e0
Create control plane with ClusterFirstWithHostNet dns policy 2018-09-20 09:51:59 -07:00
Jess Frazelle f8ba640ced
pkg/proxy: only set sysctl if not already set
This will allow for kube-proxy to be run without `privileged` and
with only adding the capability `NET_ADMIN`.

Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
2018-09-19 15:29:53 -04:00
k8s-ci-robot 09051940de
Merge pull request #68830 from rosti/kill-getgenericarchimage
kubeadm: Use GetGenericImage for kube-dns
2018-09-19 09:47:50 -07:00
k8s-ci-robot fd0a7a4ab4
Merge pull request #68808 from neolit123/kubeadm-cert-renew
kubeadm: include the 'certs renew' sub-command in the CLI
2018-09-19 09:47:40 -07:00
Rostislav M. Georgiev 68ed2bdd35 kubeadm: Use GetGenericImage for kube-dns
As kube-dns transitioned to fat manifests, it's no longer required to use arch
suffixed images. This change makes use of fat manifests for kube-dns and
removes the last few calls to the GetGenericArchImage function, thus removing
GetGenericArchImage too.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-09-19 17:23:15 +03:00
k8s-ci-robot 9228bec334
Merge pull request #68579 from verult/adc-crd-access
Updating CSI e2e test to create CSI CRDs
2018-09-19 02:00:30 -07:00
k8s-ci-robot 191949da4a
Merge pull request #68430 from prameshj/update-dns
Update kube-dns container images.
2018-09-18 23:41:31 -07:00
Lubomir I. Ivanov 48d52a3075 kubeadm: include the 'certs renew' sub-command in the CLI
The command seems to be missing in the CLI.
Add it as sub-command under 'kubeadm alpha phase certs'.
2018-09-19 05:09:00 +03:00
Pavithra Ramesh 216dc8ada8 Update kube-dns container images.
This fixes an issue where SRV records were incorrectly being compressed.
Also updated kubedns version for kubeadm
Upgrade to 1.14.12 with manifest support. Runs dnsmasq version 2.78
2018-09-18 17:44:42 -07:00
Cheng Xing 8555408f42 Removing CRD installation from attach detach controller 2018-09-18 14:25:15 -07:00
k8s-ci-robot e7eb26919b
Merge pull request #68749 from liztio/renew-etcd-certs
Renew certificates as part of upgrade rather than recreating them
2018-09-18 10:11:02 -07:00
k8s-ci-robot 9d8c9cc9fe
Merge pull request #68495 from yuansisi/fix-20180910
Upgrade kubeadm's version of docker support
2018-09-18 06:09:59 -07:00
k8s-ci-robot 80fb2be3e4
Merge pull request #68742 from chuckha/example-fix
Update kubeadm v1alpha3 example
2018-09-17 13:07:53 -07:00
liz c2a93cbe06
Renew certificates as part of upgrade rather than recreating them 2018-09-17 13:24:34 -04:00
k8s-ci-robot 36f658aada
Merge pull request #68707 from neolit123/remove-root-unit-test
kubeadm: remove unit test TestNewCmdReset
2018-09-17 08:52:18 -07:00
Chuck Ha bd8f56cc01
Update kubeadm v1alpha3 example
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-09-17 10:54:31 -04:00
xichengliudui 97c9fa3cb9 Upgrade kubeadm's version of docker support 2018-09-17 04:44:48 -04:00
tanshanshan fdfcc181bf add version to cloud-controller 2018-09-17 08:58:14 +08:00
Lubomir I. Ivanov ff222d5ee8 kubeadm: remove unit test TestNewCmdReset
Remove the test called TestNewCmdReset in cmd/reset_test.go, since it
can prompt for root password and it then calls an actual reset
and shuts down the kubelet.
2018-09-15 05:29:15 +03:00
Lubomir I. Ivanov fb365768e0 kubeadm: update MinimumControlPlaneVersion to v1.11.0
Update MinimumControlPlaneVersion to v1.11.0. Also update related
unit tests and test configurations.
2018-09-15 05:26:40 +03:00
Jordan Liggitt 761ac275b8
Coerce componentconfig/v1alpha1 KubeSchedulerConfiguration to kubescheduler.config.k8s.io/v1alpha1 2018-09-14 14:40:22 -04:00