5b64a98689
Stop using API server's `--insecure-port`
2019-01-22 17:31:39 +05:30
f97770b175
kubeadm: Detect CRIs automatically
...
In order to allow for a smoother UX with CRIs different than Docker, we have to
make the --cri-socket command line flag optional when just one CRI is
installed.
This change does that by doing the following:
- Introduce a new runtime function (DetectCRISocket) that will attempt to
detect a CRI socket, or return an appropriate error.
- Default to using the above function if --cri-socket is not specified and
CRISocket in NodeRegistrationOptions is empty.
- Stop static defaulting to DefaultCRISocket. And rename it to
DefaultDockerCRISocket. Its use is now narrowed to "Docker or not"
distinguishment and tests.
- Introduce AddCRISocketFlag function that adds --cri-socket flag to a flagSet.
Use that in all commands, that support --cri-socket.
- Remove the deprecated --cri-socket-path flag from kubeadm config images pull
and deprecate --cri-socket in kubeadm upgrade apply.
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2019-01-21 16:12:04 +02:00
3ec18a5aed
Merge pull request #73029 from neolit123/join-phases
...
kubeadm: include a phase runner for `join`
2019-01-20 10:53:47 -08:00
3fd7187b4c
Merge pull request #73059 from SataQiu/fix-20190118
...
Print more error details about CertSANs validation
2019-01-20 08:21:10 -08:00
9744d40f37
kubeadm: include a phase runner for `join`
...
- add a phase runner
- expose more joinData fields and getter methods
- add TODOs
2019-01-20 16:31:13 +02:00
6dc6ce78d9
kubeadm: adapt timeout for new etcd member to join
2019-01-20 12:39:53 +01:00
f2b133d7b4
Merge pull request #72984 from ereslibre/wait-for-etcd-when-growing
...
kubeadm: wait for the etcd cluster to be available when growing it
2019-01-19 23:57:46 -08:00
7bf6ff2ec1
print more error details about CertSANs validation
2019-01-20 08:42:09 +08:00
f22f594d34
kubeadm: verify that present certificates contain at least the required SANs
...
This avoids ending in a wrong cluster state by assuming that the
present certificates will work. It is specially important when we
are growing etcd from 1 member to 2, in which case in case of failure
upon joining etcd will be unavailable.
2019-01-19 16:00:19 +01:00
31e4ece51f
Merge pull request #73075 from hello2mao/cloudprovider-informer
...
Set the informer on the user cloud object for out-off-tree cloudproviders
2019-01-18 09:01:52 -08:00
5024611b87
Set the informer on the user cloud object
2019-01-18 22:29:42 +08:00
26d58d37a7
Merge pull request #72970 from sttts/sttts-wait-for-http-server-finished-shutdown
...
apiserver: sync with http server shutdown to flush existing connections
2019-01-18 03:06:36 -08:00
b4cb3fd37c
kubeadm: wait for the etcd cluster to be available when growing it
...
When the etcd cluster grows we need to explicitly wait for it to be
available. This ensures that we are not implicitly doing this in
following steps when they try to access the apiserver.
2019-01-18 12:04:39 +01:00
5b47f99164
apiserver: sync with https server shutdown to flush existing connections
2019-01-18 10:56:38 +01:00
9e638676e9
Remove explicit nil initialization and correct error string.
...
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2019-01-18 09:29:25 +05:30
865d6a71f6
Merge pull request #69902 from pbarker/audit-int
...
integration test for dynamic audit
2019-01-17 17:11:28 -08:00
1739e343a8
autogen files
...
all the autogen files that got updated due to the changes to move logs.
2019-01-17 09:16:36 -05:00
ba81a5409a
move logs into component-base
...
all the code changes to move move /apiserver/pkg/util/logs into /component-base/logs
2019-01-17 09:16:21 -05:00
ba7aaa911d
Update dedent to latest release
...
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2019-01-17 08:30:07 +01:00
34d57f295f
adds dynamic audit integration test generated
2019-01-16 16:27:51 -08:00
d995047366
adds dynamic audit integration test
2019-01-16 16:24:02 -08:00
6d479af411
Merge pull request #72870 from MalloZup/fix-join-ha
...
Kubeadm/HA: pull images during join for control-plane
2019-01-16 04:03:20 -08:00
a84d33193f
auto-generated file
2019-01-16 16:07:21 +08:00
3518fb400c
fix all reference for wrap componentconfig type
2019-01-16 16:07:19 +08:00
5b43a24318
get rid of copied fields in the options and using wraped componentconfig fields
2019-01-16 16:07:16 +08:00
7a8ac58756
Merge pull request #72924 from liggitt/remove-swagger
...
Remove swagger 1.2, swagger-ui
2019-01-15 20:19:20 -08:00
69cb938a6a
Merge pull request #72909 from MalloZup/minor-print
...
Kubeadm: Use fmt.Println instead of fmt.Printf
2019-01-15 12:53:43 -08:00
9c48ca4899
Merge pull request #72823 from dims/bump-version-of-docker-to-18.09
...
Bump Docker supported version to 18.09
2019-01-15 11:45:06 -08:00
9229399bd6
Remove build/verify scripts for swagger 1.2 API docs, API server swagger ui / swagger 1.2 config
2019-01-15 13:33:06 -05:00
86b6bbd1b9
Pre-pull images after preflight for HA setup.
...
If download fails continue with a warning only
2019-01-15 16:49:31 +01:00
a7225bc15c
Kubeadm: Use fmt.Println instead of fmt.Printf
2019-01-15 09:22:24 +01:00
3820f7400f
auto-generated file
2019-01-15 09:14:09 +08:00
72729db87f
refactor code logic for cloud-controller manager
2019-01-15 09:14:09 +08:00
bbd992df13
add --controller flag for cloud-controller manager
2019-01-15 09:09:00 +08:00
3b0b74f5b1
Merge pull request #72764 from andrewsykim/cloud-node-lifecycle-controller-rbac
...
Use node-controller cluster role for node-lifecycle and cloud-node-lifecycle controller
2019-01-14 16:44:57 -08:00
426714c245
use node-controller cluster role for node e-lifecycle and cloud-node-lifecycle controller
2019-01-14 15:00:21 -05:00
a2daf66a0d
Use better error var name in kube-proxy code ( #72849 )
...
* Use better error var name in kube-proxy code
Signed-off-by: hchiramm <hchiramm@redhat.com>
* Unexport ErrReadOnlySysFS error variable
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2019-01-14 08:00:11 -08:00
8c87ef51b8
kubeadm: reduce variables scope and hide private funcs
...
This is a minor cleanup which helps to make the code of kubeadm a bit
less error-prone by reducing the scope of local variables and
unexporting functions that are not meant to be used outside of their
respective modules.
2019-01-14 15:29:42 +02:00
62fc6df5c2
Bump Docker supported version to 18.09
...
For 1.14, let's switch to latest Docker 18.09
Change-Id: Ib8d4d9dd3cb51cf4780623389a4bcb101d3c8fa7
2019-01-13 21:41:33 -05:00
ef70b1159d
Merge pull request #72442 from fabriziopandini/join-refactor
...
Refactor the kubeadm join command
2019-01-12 08:06:25 -08:00
23315c8192
Merge pull request #72802 from foxyriver/dedent
...
format help text
2019-01-11 23:14:59 -08:00
d313c3b5e4
Merge pull request #72682 from whypro/metrics-port
...
Add `metrics-port` to kube-proxy cmd flags.
2019-01-11 15:53:40 -08:00
e44330dfab
Merge pull request #72455 from rojkov/test-e2e-node-gke
...
e2e-node-tests: fix path to system specs
2019-01-11 03:30:37 -08:00
b02e1e17ec
format help text
2019-01-11 10:18:56 +08:00
3d9c6eb9e6
Merge pull request #72727 from bart0sh/PR0057-kubeadm-selfhosting-pivot-controller-manager-add-front-proxy-ca
...
kubeadm: add front-proxy CA certificate to selfhosting controller-manager
2019-01-10 05:06:57 -08:00
0dbc99719a
Merge pull request #72076 from derekwaynecarr/pid-limiting
...
SupportPodPidsLimit feature beta with tests
2019-01-10 01:18:30 -08:00
43fce8d6e4
e2e-node-tests: fix path to system specs
...
e2e-node tests may use custom system specs for validating nodes to
conform the specs. The functionality is switched on when the tests
are run with this command:
make SYSTEM_SPEC_NAME=gke test-e2e-node
Currently the command fails with the error:
F1228 16:12:41.568836 34514 e2e_node_suite_test.go:106] Failed to load system spec: open /home/rojkov/go/src/k8s.io/kubernetes/k8s.io/kubernetes/cmd/kubeadm/app/util/system/specs/gke.yaml: no such file or directory
Move the spec file under `test/e2e_node/system/specs` and introduce a single
public constant referring the file to use instead of multiple private constants.
2019-01-10 10:37:55 +02:00
2c8b571d57
Merge pull request #71875 from wgliang/cleanup/remove-newfrom-functions
...
Move users of `factory.NewConfigFactory` to `scheduler.New`
2019-01-09 13:55:51 -08:00
bce9d5f204
SupportPodPidsLimit feature beta with tests
2019-01-09 10:50:59 -05:00
d91861e883
kubeadm: add front-proxy CA certificate to selfhosting controller-manager
...
Selfhosting pivoting fails when using --store-certs-in-secrets
as controller-manager fails to start because of missing front-proxy CA
certificate:
unable to load client CA file: unable to load client CA file: open
/etc/kubernetes/pki/front-proxy-ca.crt: no such file or directory
Added required certificate to fix this.
This should fix kubernetes/kubeadm#1281
2019-01-09 17:01:18 +02:00
fd842480d1
Refactor the kubeadm join command
2019-01-09 12:46:53 +01:00
11f248fd35
Remove deprecated automanaged tag from some go rules
2019-01-08 14:40:57 -08:00
3c24c99b08
Move users of `factory.NewConfigFactory` to `scheduler.New`
2019-01-09 06:40:30 +08:00
cc67ccfd7f
Merge pull request #71731 from cheftako/leaseMetric
...
Add gauge metric for master of leader election.
2019-01-08 08:57:53 -08:00
1b28775db1
Merge pull request #72569 from luxas/component_base_init
...
Create the k8s.io/component-base staging repo
2019-01-08 03:18:35 -08:00
d52ba6413d
Add `metrics-port` to kube-proxy cmd flags.
2019-01-08 16:35:30 +08:00
8148d95ac9
kubeadm selfhosting: fix pod spec mutation for controller-manager
...
Modified command line options --authentication-kubeconfig and
--authorization-kubeconfig to point out to the correct location
of the controller-manager.conf
This should fix this controller-manager crash:
failed to get delegated authentication kubeconfig: failed to get
delegated authentication kubeconfig: stat
/etc/kubernetes/controller-manager.conf: no such file or directory
Related issue: kubernetes/kubeadm#1281
2019-01-07 15:20:02 +02:00
fdf381098b
Merge pull request #72622 from shavidissa/patch-1
...
Updated the term master to control plane
2019-01-07 04:55:48 -08:00
b06462f040
Merge pull request #72513 from fabriziopandini/init-unit-test
...
Add kubeadm init unit test
2019-01-07 03:46:33 -08:00
2a6c5b9b9e
Updated the term master to control plane
2019-01-07 11:26:31 +05:30
1edd2723f8
autogenerated files
2019-01-06 15:48:53 +02:00
0140c82c16
Updated references from k8s.io/{apiserver,apimachinery} to the new k8s.io/component-base repo. Co-authored-by @Klaven
2019-01-06 14:01:26 +02:00
816dfab180
Merge pull request #72572 from fabriziopandini/cleanup-getControllerManagerCommand
...
kubeadm: cleanup getControllerManagerCommand
2019-01-04 09:02:35 -08:00
ada466dc67
cleanup-getControllerManagerCommand
2019-01-04 14:08:04 +01:00
d8eba8817b
Merge pull request #72528 from bart0sh/PR0056-kubeadm-selfhosting-upgrade-use-t.Run
...
kubeadm: use t.Run in selfhosting and update phases
2019-01-04 04:11:33 -08:00
8a60166fba
Merge pull request #72512 from AdamDang/patch-20
...
Typo fix in error message: kubadm->kubeadm
2019-01-03 21:58:57 -08:00
ad579a58da
Merge pull request #72011 from ping035627/k8s-181213
...
Add Broadcaster.StartLogging for scheduler
2019-01-03 20:21:43 -08:00
73bca32cf0
Merge pull request #68557 from sttts/sttts-storage-compaction-once
...
apiserver: start only one compactor per unique storagebackend transport config
2019-01-03 14:37:39 -08:00
442098bdec
kubeadm: use t.Run in selfhosting and update phases
...
Used T.Run API for kubeadm tests in app/phases/selfhosting and
app/phases/update directories
This should improve testing output and make it more visible
which test is doing what.
2019-01-03 19:23:54 +02:00
bfa5876311
Merge pull request #72383 from cheftako/owners
...
Adding cheftako to reviewers
2019-01-03 09:18:32 -08:00
8252610f91
Merge pull request #72514 from fabriziopandini/cleanup-etcd-client
...
kubeadm: cleanup etcd client
2019-01-03 06:58:30 -08:00
c9302caf6c
error-imports-cleanups
2019-01-03 13:25:18 +01:00
3fa36acaa7
autogenerated
2019-01-03 13:00:47 +01:00
684b80f8b8
cleanup kubeadm etcd client
2019-01-03 12:21:17 +01:00
699983645d
add kubeadm init unit tests
2019-01-03 12:04:30 +01:00
8c13df8b6a
Typo fix in error message: kubadm->kubeadm
...
Typo fix: kubadm->kubeadm
2019-01-03 18:32:10 +08:00
60561cddf1
Merge pull request #72484 from AdamDang/patch-19
...
Typo fix: control plan->control plane
2019-01-03 02:11:51 -08:00
98b3e42127
Merge pull request #72483 from bart0sh/PR0055-kubeadm-rest-app-use-T.Run
...
kubeadm: use T.Run API in app/
2019-01-02 21:10:57 -08:00
a7cb03f4cf
Merge pull request #72463 from wnxn/kubeadm-typo
...
Fix typo cgroupDriver -> cgroup-driver
2019-01-02 10:11:51 -08:00
da59a6da4a
Merge pull request #72478 from bart0sh/PR0054-kubeadm-selfhosting-pivot-kube-apiserver
...
kubeadm: add required etcd certs to selfhosting api-server
2019-01-02 07:43:30 -08:00
215db4d46b
kubeadm: use T.Run API in app/
...
Used T.Run API for kubeadm tests in app/
This should improve testing output and make it more visible
which test is doing what.
2019-01-02 17:14:02 +02:00
05e31068da
Typo fix: control plan->control plane
...
Typo fix: control plan->control plane
2019-01-02 22:10:57 +08:00
58eb3e4b3a
Merge pull request #72302 from stewart-yu/stewart-controller-reviewer
...
add myself to cmd/[kube-]controller-manager OWNERS
2019-01-02 05:59:42 -08:00
7b242533a2
apiserver: separate transport setting from storagebackend.Config
2019-01-02 12:52:38 +01:00
7b058c4357
kubeadm: add required etcd certs to selfhosting api-server
...
Selfhosting pivoting fails when using --store-certs-in-secrets
as api-server fails to start because of missing etcd/ca and
apiserver-etcd-client certificates:
F1227 16:01:52.237352 1 storage_decorator.go:57] Unable to create storage backend:
config (&{ /registry [https://127.0.0.1:2379 ]
/etc/kubernetes/pki/apiserver-etcd-client.key
/etc/kubernetes/pki/apiserver-etcd-client.crt
/etc/kubernetes/pki/etcd/ca.crt true 0xc000884120 <nil> 5m0s 1m0s}),
err (open /etc/kubernetes/pki/apiserver-etcd-client.crt: no such file or directory)
Added required certificates to fix this.
Secret name for etc/ca certifcate has been converted to conform RFC-1123 subdomain
naming conventions to prevent this TLS secret creation failure:
unable to create secret: Secret "etcd/ca" is invalid: metadata.name:
Invalid value: "etcd/ca": a DNS-1123 subdomain must consist of lower
case alphanumeric characters, '-' or '.', and must start and end with an
alphanumeric character (e.g. 'example.com', regex used for validation is
'[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
Related issue: kubernetes/kubeadm#1281
2019-01-02 13:40:04 +02:00
c28cf37c1f
fix typo: if -> it
...
fix typo: if -> it
2019-01-02 17:07:13 +08:00
02e6c18c56
Merge pull request #72443 from Zyqsempai/refactor-token-flag-names-into-const
...
Moved token related flags to constants.
2019-01-01 10:31:21 -08:00
993c65634e
Merge pull request #71973 from MalloZup/fix-1234
...
Exclude by default address flag fix #1234
2019-01-01 05:36:18 -08:00
b502b99d25
Merge pull request #72457 from bart0sh/PR0053-kubeadm-app-cmd-use-T.Run
...
kubeadm: use T.Run API in app/cmd
2019-01-01 04:00:36 -08:00
d50338c1ed
Fix typo cgroupDriver -> cgroup-driver
...
Signed-off-by: Xin Wang <wileywang@yunify.com>
2019-01-01 19:46:18 +08:00
6e182ed5ea
Merge pull request #71816 from liggitt/service-account-lookup
...
Look up service accounts from informer before trying live lookup
2018-12-31 21:18:55 -08:00
b9898eb2ad
Token related flags refactored into constants.
...
Moved token related flags to constants.
Token related flags refactored into constants.
Moved token related flags to constants.
Used new Consts flags in api's validation
Build deps fix
Moved token related flags to constants.
Used new Consts flags in api's validation
Build deps fix
Lint fix
Lint BUILD
2019-01-01 03:46:19 +02:00
645c1fa1ab
kubeadm: use T.Run API in app/cmd
...
Used T.Run API for kubeadm tests in app/cmd
This should improve testing output and make it more visible
which test is doing what.
2018-12-31 14:29:52 +02:00
d57ec59867
kubeadm: use T.Run API in app/apis/kubeadm
...
Used T.Run API for kubeadm tests in app/apis/kubeadm
This should improve testing output and make it more visible
which test is doing what.
2018-12-31 00:08:27 +02:00
13e59ab9ad
Merge pull request #72433 from bart0sh/PR0050-kubeadm-app-util-use-T.Run
...
kubeadm: use T.Run API in app/util
2018-12-30 03:45:41 -08:00
01c9e67c90
kubeadm: fix incorrect package name in idempotency_test.go
2018-12-29 18:30:30 +02:00
47b4d8fc81
kubeadm: use T.Run API in app/util
...
Used T.Run API for kubeadm tests in app/util/
2018-12-29 18:27:38 +02:00
7d8554643e
Merge pull request #72367 from rojkov/fix-golint-warnings
...
kubeadm: fix golint warnings for redundant ifs
2018-12-28 12:03:15 -08:00
b89ab2c0c3
Merge pull request #72299 from bart0sh/PR0046-kubeadm-add-CurrentKubernetesVersion
...
kubeadm: add CurrentKubernetesVersion
2018-12-28 12:03:05 -08:00
2cc92a09fd
Merge pull request #72399 from bart0sh/PR0049-kubeadm-app-util-system-fix-golint-warnings
...
kubeadm: fix golint warnings in package_validator
2018-12-28 09:44:31 -08:00
RA489