Commit Graph

6348 Commits (094116ac9a0f5794881792db1be21099b510f4cf)

Author SHA1 Message Date
Kubernetes Submit Queue aa7d9b1da9 Merge pull request #52950 from liggitt/persist-rbac-v1
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Change RBAC storage version to v1 for 1.9

v1 was introduced in 1.8, but storage version remained at v1beta1 to accommodate HA rolling upgrades. in 1.9, we can change the persisted and preferred version to v1

```release-note
RBAC objects are now stored in etcd in v1 format. After completing an upgrade to 1.9, RBAC objects (Roles, RoleBindings, ClusterRoles, ClusterRoleBindings) should be migrated to ensure all persisted objects are written in `v1` format, prior to `v1alpha1` support being removed in a future release.
```
2017-10-03 00:24:31 -07:00
Kubernetes Submit Queue 028ee090f6 Merge pull request #49393 from hongchaodeng/etcd_update
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

etcd: update version to 3.1.10

ref: https://github.com/kubernetes/kubernetes/issues/49386

Need image pushed:
```
gcr.io/google_containers/etcd:3.1.10
```
2017-10-02 23:29:51 -07:00
Kubernetes Submit Queue 431d49d7b2 Merge pull request #53344 from MrHohn/remove-notexist-addonmanager-comment
Automatic merge from submit-queue (batch tested with PRs 52685, 53344). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Don't referece not-exist addon manager manifests in comment

**What this PR does / why we need it**:
`addon-manager-multinode.json` and `addon-manager-singlenode.json` have been removed by b814b62447 (diff-89347a70de188b3c15f5ee15323658d2).

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #NONE

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2017-10-02 19:24:13 -07:00
Kubernetes Submit Queue 0ac7cb0c60 Merge pull request #53307 from aknuds1/upgrade-elasticsearch-to-5.6.2
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Upgrade fluentd-elasticsearch addon to Elasticsearch/Kibana 5.6.2

Upgrade Elasticsearch and Kibana to version 5.6.2. I also upgrade some API versions of manifests to correspond to Kubernetes 1.8, I hope the latter is uncontroversial?

```release-notes
```
2017-10-02 17:25:28 -07:00
Hongchao Deng 39e5a56691 etcd: update version to 3.1.10 2017-10-02 12:27:46 -07:00
Zihong Zheng c12ff68d39 Don't referece not-exist addon manager manifests in comment 2017-10-02 11:38:04 -07:00
kairen b779fdd9f7 Update influxdb and grafana controller to latest version 2017-10-02 16:16:28 +08:00
Arve Knudsen 64fcdf04c4 fluentd-elasticsearch add-on: Upgrade API versions 2017-10-01 12:28:16 +02:00
Arve Knudsen 1f6647d3cd fluentd-elasticsearch add-on: Upgrade to Elasticsearch/Kibana 5.6.2 2017-10-01 12:26:18 +02:00
Kubernetes Submit Queue e3dc09d95c Merge pull request #53266 from mikedanese/compute-rw
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

gce: remove compute-rw, see what breaks

Fixes https://github.com/kubernetes/kubernetes/issues/8074

**Release note**:
```release-note
```
2017-09-29 21:11:39 -07:00
Kubernetes Submit Queue bff7821dab Merge pull request #53225 from crassirostris/fix-basic-audit
Automatic merge from submit-queue (batch tested with PRs 51021, 53225, 53094, 53219). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix basic audit in GCE deploy scripts

Fix https://github.com/kubernetes/kubernetes/issues/53154

Since AdvancedAudit feature gate is now enabled by default, we should explicitly disable it when using basic audit.
2017-09-29 12:38:19 -07:00
Mike Danese 4d2733d801 gce: remove compute-rw, see what breaks 2017-09-29 12:00:02 -07:00
Mik Vyatskov 259260566f Fix basic audit in GCE deploy scripts
Signed-off-by: Mik Vyatskov <vmik@google.com>
2017-09-29 14:03:48 +02:00
Kubernetes Submit Queue c98dfbfaeb Merge pull request #53093 from MrHohn/kube-proxy-mount-lock
Automatic merge from submit-queue (batch tested with PRs 50280, 52529, 53093, 53108, 53168). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Remove touch-lock init container from kube-proxy

**What this PR does / why we need it**: Ack https://github.com/kubernetes/kubeadm/issues/298, touch-lock init container is no longer needed after we have https://github.com/kubernetes/kubernetes/pull/46597.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #NONE

**Special notes for your reviewer**:
/assign @bowei @cmluciano 
cc @dixudx 

**Release note**:

```release-note
NONE
```
2017-09-28 14:59:25 -07:00
Kubernetes Submit Queue e44eaaaacf Merge pull request #53208 from mikedanese/shitshitshit
Automatic merge from submit-queue (batch tested with PRs 49249, 53203, 53209, 53208, 53177). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

gce:restrict file permissions for PKI assets

from 644 to 600

Fixes https://github.com/kubernetes/kubernetes/issues/52999
2017-09-28 14:02:21 -07:00
Kubernetes Submit Queue 89123504d2 Merge pull request #53203 from Cynerva/gkk/fix-lint
Automatic merge from submit-queue (batch tested with PRs 49249, 53203, 53209, 53208, 53177). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix lint error on kubernetes-worker

**What this PR does / why we need it**:

This fixes a lint error on kubernetes-worker that's causing problems in our CI builds.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2017-09-28 14:02:16 -07:00
Kubernetes Submit Queue d96c485f92 Merge pull request #53095 from MrHohn/fix-kube-proxy-ds-owner
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix kube-proxy addon OWNERS file

**What this PR does / why we need it**: Sorry for the typo :(

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #NONE

**Special notes for your reviewer**:
/assign @thockin @bowei 

**Release note**:

```release-note
NONE
```
2017-09-28 11:05:49 -07:00
Mike Danese 87e528d436 gce:restrict file permissions for PKI assets
from 644 to 600
2017-09-28 09:29:18 -07:00
George Kraft afd01971ea Fix lint error on kubernetes-worker 2017-09-28 08:54:06 -05:00
Bowei Du dfc8f7ad98 Update kube-dns to version 1.14.5 2017-09-27 11:37:18 -07:00
Kubernetes Submit Queue f25bb13a82 Merge pull request #52663 from wwwtyro/rye/s390x-ingress-controller-support
Automatic merge from submit-queue (batch tested with PRs 50988, 50509, 52660, 52663, 52250). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

s390x ingress controller support

**What this PR does / why we need it**: Adds support for an s390x ingress image to the juju kubernetes-worker charm.

**Release note**:
```
Adds support for an s390x ingress image to the juju kubernetes-worker charm.
```
2017-09-27 05:32:27 -07:00
Zihong Zheng fb6e700c7d Fix kube-proxy addon OWNERS file 2017-09-26 18:20:02 -07:00
Zihong Zheng 1c85a63366 Remove touch-lock init container from kube-proxy 2017-09-26 18:05:18 -07:00
Kubernetes Submit Queue bafe4fb49f Merge pull request #52998 from liggitt/audit-scale
Automatic merge from submit-queue (batch tested with PRs 52721, 53057, 52493, 52998, 52896). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Adjust audit policy to omit high-volume or large responses from expected actors

Builds on https://github.com/kubernetes/kubernetes/pull/52960

Possibly related to density test failures https://github.com/kubernetes/kubernetes/issues/51899#issuecomment-331924016
2017-09-26 15:51:23 -07:00
Kubernetes Submit Queue e381a737fe Merge pull request #53005 from mwielgus/ca-1.0.0
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Mark Cluster Autoscaler as GA (1.0.0)

This is basically the same version as 0.7.0(-beta2). However to reduce confusion among users we decided to name the first GA version of CA as 1.0.0.

```release-note
Cluster Autoscaler 1.0.0
```
2017-09-25 12:23:24 -07:00
Kubernetes Submit Queue 66b0bdb6e2 Merge pull request #51670 from karataliu/logdump
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Add fallback function 'detect-project' in skeleton util

**What this PR does / why we need it**:

detect-project is not implemented by default:
When use ./hack/ginkgo-e2e.sh to run e2e test with custom providers, it will prompt
```
log-dump.sh: line 70: detect-project: command not found
```
And script exits with code 127.

**Which issue this PR fixes**

**Special notes for your reviewer**:

**Release note**:
`NONE`

@shyamjvs
2017-09-25 12:23:11 -07:00
Marcin Wielgus a8c5d92905 Mark Cluster Autoscaler as GA (1.0.0) 2017-09-25 19:46:22 +02:00
Kubernetes Submit Queue 4714cddc22 Merge pull request #52960 from liggitt/gather-audit-log
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Include audit log in master log capture
2017-09-25 10:25:32 -07:00
Jordan Liggitt 20453f9e87
Adjust audit policy for scale issues 2017-09-25 13:13:14 -04:00
Jordan Liggitt 232db3b888
Change RBAC storage version to v1 for 1.9 2017-09-25 10:02:21 -04:00
Konstantinos Tsakalozos 90e15b4bea Fix oversized comment line, lint error 2017-09-25 16:33:19 +03:00
Jordan Liggitt d7699028f6
Include audit log in master log capture 2017-09-24 19:59:53 -04:00
Kubernetes Submit Queue 0dc096a9d1 Merge pull request #52929 from krousey/gciupgrades
Automatic merge from submit-queue (batch tested with PRs 52880, 52855, 52761, 52885, 52929). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Add cos as an alias for gci in the upgrade script

This was causing some issues when upgrading from a GCI image. This is the same conversion happening in config-defaults.sh.

https://k8s-gubernator.appspot.com/build/kubernetes-jenkins/logs/ci-kubernetes-e2e-gce-stable2-stable1-upgrade-cluster-new/205

The node image was being left at COS, and when we  went to build the kube-env, we only check against "gci". This caused us to not fully construct the environment for nodes and then they couldn't fully come up after an upgrade.

I've already fixed the CI test suites to explicitly specify "gci", but this auto-detection logic should be fixed too.

Fixes: #52930
2017-09-24 04:30:15 -07:00
Kubernetes Submit Queue 8e7f5d8c8b Merge pull request #52855 from NickrenREN/remove-rackspace
Automatic merge from submit-queue (batch tested with PRs 52880, 52855, 52761, 52885, 52929). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Remove cloud provider rackspace

**What this PR does / why we need it**:
For now, we have to implement functions in both `rackspace` and `openstack` packages if we want to add function for cinder, for example [resize for cinder](https://github.com/kubernetes/kubernetes/pull/51498).  Since openstack has implemented all the functions rackspace has,  and rackspace is considered deprecated for a long time, [rackspace deprecated](https://github.com/rackspace/gophercloud/issues/592) ,
after talking with @mikedanese  and @jamiehannaford offline ,  i sent this PR to remove `rackspace` in favor of `openstack`

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #52854

**Special notes for your reviewer**:

**Release note**:
```release-note
The Rackspace cloud provider has been removed after a long deprecation period. It was deprecated because it duplicates a lot of the OpenStack logic and can no longer be maintained. Please use the OpenStack cloud provider instead.
```
2017-09-24 04:30:04 -07:00
Kubernetes Submit Queue e9dbad33ae Merge pull request #52537 from juju-solutions/feature/s390x
Automatic merge from submit-queue (batch tested with PRs 52355, 52537, 52551, 52403, 50673). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Add s390x to juju kubernetes

**What this PR does / why we need it**: With this PR we add support for s390x to juju kubernetes worker

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: 

**Special notes for your reviewer**:

**Release note**:

```Kubernetes deployments to s390x via Juju 
```
2017-09-23 15:26:54 -07:00
Kubernetes Submit Queue c6ef395023 Merge pull request #52445 from Cynerva/gkk/cdk-service-kicker
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Fix kubernetes charms not restarting services properly after host reboot on LXD

**What this PR does / why we need it**:

This fixes an issue when running the Kubernetes charms on LXD where the services don't restart properly after a reboot of the host machine.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/357

**Special notes for your reviewer**:

See https://github.com/juju-solutions/layer-cdk-service-kicker

**Release note**:

```release-note
Fix kubernetes charms not restarting services properly after host reboot on LXD
```
2017-09-23 14:30:08 -07:00
Kubernetes Submit Queue 4adddfea59 Merge pull request #47912 from jacekn/runtime-config
Automatic merge from submit-queue (batch tested with PRs 51438, 52182, 51607, 47912, 51595). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Add api-extra-args support to the kubernetes-master juju layer

**What this PR does / why we need it**: It adds api-extra-args config option to the kubernetes-master juju layer

**Which issue this PR fixes**: fixes #46778

**Special notes for your reviewer**:


```release-note
Add api-extra-args support to the kubernetes-master juju layer
```
2017-09-23 08:09:51 -07:00
Kubernetes Submit Queue be9c8c6e47 Merge pull request #52786 from yujunz/fix-url
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Fix url for Saltstack administration document

Got an 404 not found error on `https://kubernetes.io/docs/admin/salt.md`



**What this PR does / why we need it**:

Fixed a wrong url in document

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

NONE

**Release note**:

```release-note
NONE
```
2017-09-22 18:26:10 -07:00
Kris 51b4486888 Add cos as an alias for gci in the upgrade script 2017-09-22 15:34:51 -07:00
Marcin Wielgus 4604d17b09 Bump cluster autoscaler to 0.7.0-beta2 2017-09-22 23:17:23 +01:00
NickrenREN 39c48d3605 remove rackspace related code 2017-09-22 18:06:50 +08:00
Dong Liu 5cfe0ee48d Conditionally run detect-project in log-dump 2017-09-21 13:41:30 +08:00
Kubernetes Submit Queue 74604d123d Merge pull request #52565 from crassirostris/sd-logging-update-plugin-0.6.7
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

[fluentd-gcp addon] Update Stackdriver plugin to version 0.6.7

A new gem among all fixes Java logging severity parsing and string timestamp parsing

Also sync the buffer size with the gem guidelines, making it 1M instead of 2M.

/cc @igorpeshansky
2017-09-20 16:09:31 -07:00
Ryan Phillips 7d979dd3d9 bump tags 2017-09-20 12:58:29 -05:00
Mik Vyatskov e73eb86dda [fluentd-gcp addon] Remove audit logs from the fluentd configuration 2017-09-20 11:08:59 +02:00
Kubernetes Submit Queue ad823fce03 Merge pull request #52725 from loburm/fix-heapster-network
Automatic merge from submit-queue (batch tested with PRs 51081, 52725). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Fix mistype that causes breakage of e2e test.

**What this PR does / why we need it**:
Mistype in the configuration that breaks configuration with special heapster node.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #
Fixes #52496.
2017-09-19 13:34:58 -07:00
Marian Lobur a57ba588fb Fix mistype that causes breakage of e2e test. 2017-09-19 16:05:41 +02:00
Kubernetes Submit Queue 16670f1a95 Merge pull request #52541 from crassirostris/audit-fluentd-format
Automatic merge from submit-queue (batch tested with PRs 48970, 52497, 51367, 52549, 52541). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

[fluentd-gcp addon] By default ingest audit logs in JSON format

As https://github.com/kubernetes/kubernetes/pull/50971 set default audit log format for advanced auditing to JSON and https://github.com/kubernetes/kubernetes/pull/51943 makes advanced auditing default, fluentd should also ingest audit logs as JSON by default.

```release-note
[fluentd-gcp addon] By default ingest apiserver audit logs written to file in JSON format.
```
2017-09-19 01:17:49 -07:00
Kubernetes Submit Queue 7b8d7dee52 Merge pull request #51367 from cjcullen/abacaway
Automatic merge from submit-queue (batch tested with PRs 48970, 52497, 51367, 52549, 52541). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Default ABAC to off in GCE (for new clusters).

**What this PR does / why we need it**:
Disables the legacy ABAC authorizer by default on GCE/GKE clusters using kube-up.sh. Existing clusters upgrading to 1.8 will keep their existing configuration.

**Release note**:
```release-note
New GCE or GKE clusters created with `cluster/kube-up.sh` will not enable the legacy ABAC authorizer by default. If you would like to enable the legacy ABAC authorizer, export ENABLE_LEGACY_ABAC=true before running `cluster/kube-up.sh`.
```
2017-09-19 01:17:45 -07:00
Kubernetes Submit Queue 5efab5a121 Merge pull request #52497 from jcbsmpsn/add-signing-duration-configuration-flag
Automatic merge from submit-queue (batch tested with PRs 48970, 52497, 51367, 52549, 52541). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>..

Add configuration support for signing duration.

Fixes https://github.com/kubernetes/kubernetes/issues/52286
Fixes https://github.com/kubernetes/kubernetes/issues/52282
Reverses revert (with fixes) https://github.com/kubernetes/kubernetes/pull/52299

```release-note
Add CLUSTER_SIGNING_DURATION environment variable to cluster
configuration scripts to allow configuration of signing duration of
certificates issued via the Certificate Signing Request API.
```
2017-09-19 01:17:42 -07:00