github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
74,683 Commits
31 Branches
881 Tags
634 MiB
Commit Graph

5679 Commits (4c18fbcbb58c6b3d649498a4c53736f76a764d7e)

Author SHA1 Message Date
yue9944882 2fcf418698 drop crd api fields 2018-12-29 15:58:20 +08:00
Kubernetes Prow Robot 18464d472a
Merge pull request #71599 from bouk/fake-eviction 
client-go/testing: Straighten out fake implementation of Evictions
 2018-12-28 14:48:59 -08:00
Kubernetes Prow Robot 7c112762b0
Merge pull request #72406 from wojtek-t/speedup_listers 
Speedup listers for empty selectors
 2018-12-28 08:17:06 -08:00
wojtekt 91e7f466b9 Speedup listers for empty selectors 2018-12-28 16:01:16 +01:00
Wei Guo a766ed2d2b WaitFor returns immediately when done is closed 2018-12-28 19:43:10 +08:00
Walter Fender 97426ce7a5 Adding cheftako to reviewers 
Also adding as an owners to pkg/cloudprovider.
 2018-12-27 15:25:20 -08:00
Jordan Liggitt 73dcfe12da Stop checking VolumeScheduling feature gate 2018-12-27 17:45:45 -05:00
Clayton Coleman 1f590e697e
Make wrapping a client transport more pleasant 
Properly wrapping a transport can be tricky. Make the normal case
(adding a non-nil transport wrapper to a config) easier with a helper.
Also enforce a rough ordering, which in the future we can use to
simplify the WrapTransport mechanism down into an array of functions
we execute in order and avoid wrapping altogether.
 2018-12-27 13:11:41 -05:00
Clayton Coleman 09890b6c48
leaderelection: Allow leader elected code to step down on a context cancel 
The current code simply exits without continuing to renew the lease, which means
participants using a slower lease duration might have to wait multiple minutes
before a new leader is elected. Allow an optional flag to be set on
LeaderElectionConfig that will release the lease when the calling context is
cancelled. Callers *must* ensure their lease guarded code has completed before
the context is cancelled, or other processes may acquire the lease before this
lease has released.

Add an example command that demonstrates how cancellation could be done.

As a convenience to users, make event recorder optional - not all users of the
lock code will need a recorder.
 2018-12-27 13:11:07 -05:00
Walter Fender f192657380 Add gauge metric for master of leader election. 
Fixes #71730
0 indicates standby, 1 indicates master, label indicates which lease.
Tweaked name and documentation
Factored in Mike Danese feedback.
Removed dependency on prometheus from client-go using adapter.
Centralized adapter import.
Fixed godeps
Fixed boilerplate.
Put in fixes for caesarxuchao
 2018-12-27 09:40:33 -08:00
Vikranth Thati 15c7e93f14 Use pkg/util/json Marshal and Unmarshal instead of 'encoding/json' to preserve numbers, rather than casting to float64 automatically. 2018-12-27 12:31:45 +05:30
Kubernetes Prow Robot 81a1f12dab
Merge pull request #70277 from kdada/master 
Fix goroutine leak of wait.poller
 2018-12-26 22:29:47 -08:00
danielqsj c183646baf Return admission metrics with true units 2018-12-26 22:58:56 +08:00
danielqsj 88c4b64400 Change endpoints metrics to conform guideline 2018-12-26 22:51:45 +08:00
danielqsj 47938c3733 Change storage metrics to conform guideline 2018-12-26 22:30:26 +08:00
Kubernetes Prow Robot 5252352ad8
Merge pull request #70863 from mysunshine92/wym-1109 
fix spelling errors its
 2018-12-24 21:24:50 -08:00
Kubernetes Prow Robot 190f6d870e
Merge pull request #71946 from bart0sh/PR0045-kubeadm-1260-simplify-minimum-kubernetes-version-bumps 
kubeadm: simplify minimum Kubernetes version bumps
 2018-12-21 21:28:53 -08:00
Kubernetes Prow Robot 5354f8bdfe
Merge pull request #72239 from wojtek-t/v1_lease_api 
Promote Lease API to v1
 2018-12-21 10:03:36 -08:00
Kubernetes Prow Robot 29b3ec9108
Merge pull request #72140 from wgliang/feature/adaptive-percentage-find-nodes 
Set percentage of nodes scored in each cycle dynamically based on the…
 2018-12-20 12:36:45 -08:00
wojtekt 9664779bdd Autogenerated code 2018-12-20 20:22:11 +01:00
wojtekt 73d14dede6 Promote Lease API to v1 2018-12-20 15:39:57 +01:00
Kubernetes Prow Robot 3dc1772268
Merge pull request #71891 from WanLinghao/daemonset_storage_test_fix 
Fix unit test error in pkg/registry/apps/daemonset/storage/
 2018-12-20 04:42:09 -08:00
Kubernetes Prow Robot cbc3ec7899
Merge pull request #67791 from tallclair/runtimeclass-api 
Add node-api staging repo w/ RuntimeClass API
 2018-12-20 03:11:33 -08:00
Kubernetes Prow Robot c3e60b6e1c
Merge pull request #72143 from karataliu/kubectl.aad 
Fix aad support in kubectl for sovereign cloud
 2018-12-19 22:04:51 -08:00
Kubernetes Prow Robot 6902f3112d
Merge pull request #71176 from idealhack/fix-unreachable-code-and-golint-warnings 
Fix go vet and golint warnings
 2018-12-19 20:45:16 -08:00
Guoliang Wang 6515c4e09b Set percentage of nodes scored in each cycle dynamically based on the cluster size 2018-12-20 11:20:00 +08:00
Kubernetes Prow Robot 6da32b078f
Merge pull request #72006 from soltysh/allnamespaces_shorthand 
Introduce -A as a shorthand for --all-namespaces in kubectl
 2018-12-19 14:13:40 -08:00
Kubernetes Prow Robot 1bd7c7126c
Merge pull request #70370 from liggitt/to_apps_v1 
Switch client and test usage to apps/v1
 2018-12-19 14:13:28 -08:00
Ed Bartosh af07603178 version: add 3 methods 
Added WithMajor, WithMinor, WithPatch and WithPreRelease methods
to the Version API.

These methods return copy of the Version object with one changed
property(Major, Minor, Patch or preRelease).
 2018-12-19 20:41:25 +02:00
Kubernetes Prow Robot 544c49ab03
Merge pull request #72193 from kargakis/owners 
Remove myself from OWNERS where I am not active
 2018-12-19 10:25:58 -08:00
Kubernetes Prow Robot 3f9673bf5d
Merge pull request #70994 from mborsz/cache 
Refactor the memcached discovery client
 2018-12-19 10:25:46 -08:00
Jordan Liggitt fd9e9b01b1 Remove uses of extensions/v1beta1 clients 2018-12-19 11:18:53 -05:00
Maciej Szulik 885bed15da Introduce -A as a shorthand for --all-namespaces in kubectl 2018-12-19 14:37:43 +01:00
Dr. Stefan Schimanski c0d8ad1578 apiserver: check that request fail after shutdown 2018-12-19 12:41:58 +01:00
Michalis Kargakis c602a9ed4f
Remove myself from OWNERS where I am not active 2018-12-19 10:19:22 +01:00
Kubernetes Prow Robot be5a1fb734
Merge pull request #70875 from Liujingfang1/enable-kustomize 
Enable kustomize in kubectl
 2018-12-19 00:51:41 -08:00
Kubernetes Prow Robot 819cfed09a
Merge pull request #71179 from idealhack/fix-cancel-functions 
Call cancel functions to avoid context leaks
 2018-12-18 23:35:35 -08:00
WanLinghao 80b6459bd0 Fix unit test error in pkg/registry/apps/daemonset/storage/ 2018-12-19 13:34:03 +08:00
Kubernetes Prow Robot 5554a446a9
Merge pull request #65632 from cofyc/vendor 
Vendor github.com/prometheus/client_golang/prometheus/testutil package
 2018-12-18 21:27:38 -08:00
Tim Allclair baa6ca502b Generated code 2018-12-18 16:06:56 -08:00
Tim Allclair 03fdecbde4 Add node-api code generators 2018-12-18 16:06:56 -08:00
Tim Allclair 665baac004 Add node.k8s.io API types 2018-12-18 16:06:56 -08:00
Bouke van der Bijl 869adf8bd7 client-go/testing: Straighten out fake implementation of Evictions 
Make Evictions the same between Policyv1beta1 and Corev1
 2018-12-18 21:24:49 +01:00
Maciej Borsz c94bee0b8b Refactor memCacheClient to retry requests. 2018-12-18 09:46:01 +01:00
Dong Liu 092f398825 Fix aad support in kubectl for sovereign cloud 2018-12-18 13:51:02 +08:00
Wei Guo 2306eb4125 stop goroutine of poller when WaitFor returns 2018-12-18 10:58:46 +08:00
Tim Allclair 2f6f3be23e Add new node-api repo 2018-12-17 16:29:37 -08:00
Jingfang Liu ac209ccdc0 remove the opt out choice of kustomize 2018-12-17 14:52:07 -08:00
Kubernetes Prow Robot 9aeb7b07c0
Merge pull request #71795 from zjj2wry/version_priority 
Switch sample apiserver internalversion informer to external
 2018-12-17 10:57:45 -08:00
Kubernetes Prow Robot 5a5111f888
Merge pull request #72053 from wojtek-t/streaming_limit 
Increase limit for object size in streaming serializer
 2018-12-14 17:28:45 -08:00
wojtekt 886400f62a Increase limit for object size in streaming serializer 2018-12-14 12:43:39 +01:00
Kubernetes Prow Robot cab34050e7
Merge pull request #71225 from jta/master 
Fix duped watch in client-go/testing.
 2018-12-13 14:17:55 -08:00
Jingfang Liu d349998abe add test for Builder to cover kustomization directories 2018-12-12 09:42:19 -08:00
Jingfang Liu 26c07715c7 add kustomizationVisitor type and use it when kustomization is enabled 2018-12-12 09:41:42 -08:00
danielqsj 42214c5ac4 Using histogram metrics instead of summary 2018-12-12 17:53:24 +08:00
danielqsj b828bc1a50 Use prometheus conventions for workqueue metrics 2018-12-12 16:55:13 +08:00
Kubernetes Prow Robot 3ed107ff0e
Merge pull request #71542 from smarterclayton/endpoints_cleanup 
Ensure all response object modification happens in one place
 2018-12-10 18:44:37 -08:00
Kubernetes Prow Robot 611c3510d8
Merge pull request #71601 from liggitt/surface-insecure-port-help 
Surface help for insecure ports to explain how to disable
 2018-12-07 09:08:39 -08:00
Kubernetes Prow Robot 16fb54ef7c
Merge pull request #71785 from sttts/sttts-aggregator-condition-time 
aggregator: fix available condition transition time
 2018-12-07 07:58:19 -08:00
Kubernetes Prow Robot 1a82272782
Merge pull request #71684 from danielqsj/typo-fix 
Fix typos like limitting
 2018-12-07 07:58:09 -08:00
Jordan Liggitt 4a79e25727 test verifying upgraded backend 2018-12-07 09:03:41 -05:00
Jordan Liggitt 819b502768 Surface help for insecure ports to explain how to disable 2018-12-07 08:56:20 -05:00
zhengjiajin a9c35d3b84 only generate internal deepcopy defaulter conversion 2018-12-07 21:18:43 +08:00
Dr. Stefan Schimanski 7db6f7a89c aggregator: fix available condition transition time 2018-12-07 12:22:24 +01:00
Kubernetes Prow Robot 2ea5000379
Merge pull request #69803 from rfranzke/fix/metav1_duration_openapi 
Add OpenAPI scheme methods for metav1.Duration
 2018-12-07 00:03:47 -08:00
Di Xu 4b524ef995 kubectl loads config file once and uses persistent client config 2018-12-07 15:41:40 +08:00
zhengjiajin e3b2e9d8a3 prune internalversion clientset lister informer 2018-12-07 11:46:21 +08:00
zhengjiajin be13db1b85 Switch sample apiserver internalversion informer to external 2018-12-07 11:46:03 +08:00
Kubernetes Prow Robot b703016614
Merge pull request #70983 from xichengliudui/fix18111302 
Delete some redundant code
 2018-12-06 19:03:08 -08:00
Haowei Cai 7c6d9d634b Fix crd workqueue metric names 2018-12-06 16:36:08 -08:00
Kubernetes Prow Robot 257a6d5bfa
Merge pull request #71755 from liggitt/tolerate-authn-lookup-failure 
Allow kube-scheduler to tolerate cluster auth config lookup failure
 2018-12-06 11:05:13 -08:00
Rafael Franzke 712cbc5a3d Add OpenAPI scheme methods for metav1.Duration 2018-12-06 15:05:46 +01:00
Kubernetes Prow Robot 0351853ea1
Merge pull request #71657 from mrIncompetent/informer-gen/respect-resourceName-tag 
make informer-gen respect the resourceName tag
 2018-12-06 03:50:26 -08:00
Kubernetes Prow Robot 82b0d8fd37
Merge pull request #71380 from sttts/sttts-aggregator-metrics-available 
aggregator: add APIService unavailability metrics
 2018-12-06 00:02:55 -08:00
Jordan Liggitt 416e114215 Allow kube-scheduler to tolerate cluster auth config lookup failure 2018-12-05 14:13:47 -05:00
mrIncompetent 574816dff5 update bazel 2018-12-05 12:30:42 +01:00
mrIncompetent 7e9c09caf5 make informer-gen respect the resourceName tag 2018-12-05 12:30:39 +01:00
Kubernetes Prow Robot 2bd14ea60e
Merge pull request #71713 from liggitt/tokenfile-reload 
Plumb token and token file through rest.Config
 2018-12-04 11:41:03 -08:00
Jordan Liggitt dba85e58de Plumb token and token file through rest.Config 2018-12-04 13:04:24 -05:00
Kubernetes Prow Robot 300b1bab8b
Merge pull request #71636 from tao12345666333/rm-duplicate-word 
remove duplicate word
 2018-12-04 04:12:20 -08:00
Kubernetes Prow Robot a9b69dc381
Merge pull request #71615 from jpbetz/etcd-3.3.10-0-image 
Update default etcd server to 3.3.10 for kubernetes 1.14
 2018-12-04 02:54:34 -08:00
Kubernetes Prow Robot 3a83f291ef
Merge pull request #71088 from smarterclayton/wait_cap 
util: Refactor Backoff to return the next step rather than sleeping
 2018-12-03 23:28:05 -08:00
danielqsj 3c055aa4b4 Fix typos like limitting 2018-12-04 11:01:40 +08:00
Clayton Coleman e62d389fb0
util: Refactor Backoff to return the next step rather than sleeping 
Allows consumers to use Backoff as a generator rather than have to
call ExponentialBackoff
 2018-12-03 16:43:16 -05:00
Joe Betz 862b945e5a Update default etcd server to 3.3.10 for kubernetes 1.13 2018-12-03 11:03:49 -08:00
Dr. Stefan Schimanski fce6eb0903 aggregator: add metrics for request errors 2018-12-03 14:58:17 +01:00
Dr. Stefan Schimanski 7190b17e5a apiserver: add component label to request metrics 2018-12-03 14:58:13 +01:00
Kubernetes Prow Robot dc9261bc3b
Merge pull request #71174 from smarterclayton/debug_kubeadm 
Restore bootstrap in the background with fix to preserve kubeadm behavior
 2018-12-03 05:49:57 -08:00
Dr. Stefan Schimanski ff6e028755 apiserver: add group+version to request metrics 2018-12-03 14:29:50 +01:00
Jintao Zhang b32bd6e812 remove duplicate word 
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2018-12-03 19:24:45 +08:00
Yecheng Fu 9632e4349e vendor github.com/prometheus/client_golang/prometheus/testutil package 
updating staging godeps
 2018-12-02 10:25:55 +08:00
Kubernetes Prow Robot d158952293
Merge pull request #70722 from yue9944882/test/enchance-test-regression-for-versioning-codec 
Part of #68464: Enchance unit test regression for unstructured in versioning codec
 2018-12-01 15:00:36 -08:00
Kubernetes Prow Robot 4b9b7ffc6f
Merge pull request #71273 from deads2k/agg-02-detect 
only update the apiservice status if the status has changed
 2018-12-01 10:36:23 -08:00
k8s-ci-robot 5d8e93cbc4
Merge pull request #71525 from logicalhan/api-service-condition-tests 
add unit tests for api-service condition methods and also refactor out getAPIServiceConditionByType
 2018-11-30 08:20:18 -08:00
k8s-ci-robot 96516bd961
Merge pull request #71263 from ZYecho/fix-spellings 
fix typo: namspace -> namespace
 2018-11-30 06:33:50 -08:00
k8s-ci-robot 3e1c0d47c2
Merge pull request #71318 from sttts/sttts-etcd-v 
apiserver: set klog as etcdclient logger
 2018-11-29 21:45:22 -08:00
k8s-ci-robot 79e5cb2cb7
Merge pull request #71302 from liggitt/verify-unit-test-feature-gates 
Split mutable and read-only access to feature gates, limit tests to readonly access
 2018-11-29 21:45:12 -08:00
k8s-ci-robot 15556551be
Merge pull request #68942 from nikhita/csi-api-staging-restrict-imports 
Add import restrictions for csi-api
 2018-11-29 21:44:42 -08:00
k8s-ci-robot 1fd45cfb24
Merge pull request #71272 from sttts/sttts-unstructured-accessor-intermediate-not-found 
unstructured: return not-found if intermediate path is not found
 2018-11-29 19:04:55 -08:00
k8s-ci-robot a08d89c0f5
Merge pull request #70959 from MikeSpreitzer/group-still-not-optional 
Clarified syntax doc on --watch-cache-sizes
 2018-11-29 19:04:46 -08:00
k8s-ci-robot 81eb9ce491
Merge pull request #71217 from jsafrane/status-update-unit-test 
CSI v1 leftovers
 2018-11-29 15:26:53 -08:00
k8s-ci-robot 4372d62ff5
Merge pull request #71211 from jsafrane/meta-status-reset 
Refactor status PrepareForUpdate into standalone method
 2018-11-29 15:26:42 -08:00
k8s-ci-robot 409bfc4337
Merge pull request #71047 from pivotal-k8s/bump-k8s-utils 
Bump k8s.io/uitls to 8e7ff06
 2018-11-29 11:17:08 -08:00
k8s-ci-robot 163b54dc4d
Merge pull request #70995 from stewart-yu/stewart-sample-controller-redurabce-import 
remove duplicated import
 2018-11-29 11:16:39 -08:00
k8s-ci-robot d0ac922996
Merge pull request #70440 from nikhita/add-license-headers 
Add license header to non-generated proto files
 2018-11-29 00:48:05 -08:00
k8s-ci-robot 86d4d95e0d
Merge pull request #70426 from sttts/sttts-testserver-run-errors 
testservers: return Run method errors correctly
 2018-11-29 00:47:45 -08:00
Clayton Coleman 63c49ba55a
Better organize object conversion in response handling 
Prepare to support watch by cleaning up the conversion method and
splitting out each transition into a smaller method.
 2018-11-28 22:03:51 -05:00
Clayton Coleman 56a25d8c5f
Ensure all response object modification happens in one place 
Make setLink and setListLink the same, and make them happen in transformResponseObject.
Make those methods also responsible for ensuring an empty list. Then move outputMediaType
negotiation before all other calls in the specific methods, to ensure we fail fast.

Refactoring in preparation to support type conversion on watch.
 2018-11-28 21:34:26 -05:00
Han Kang 47ed1019a3 add unit tests for api-service condition methods and also refactor out getAPIServiceConditionByType 2018-11-28 15:26:36 -08:00
Yang Li 3d9e2f09d0 Pass locks by pointer instead of by value 2018-11-27 10:24:25 +08:00
Yang Li 43f9302b90 Fix golint warnings 2018-11-27 10:24:25 +08:00
João Taveira Araújo bd268c9971 Fix duped watch in client-go/testing. 
This commit fixes a bug in the client-go/testing fixture whereby a
watcher would fire twice for objects with no namespace.
 2018-11-26 14:07:37 -08:00
Nikhita Raghunath b3ad9e697c csi-api: fix Saad Ali's username in SECURITY_CONTACTS 2018-11-27 00:51:26 +05:30
Jingfang Liu 5604a15024 update staging Godeps and import restrictions 2018-11-26 11:03:00 -08:00
Jingfang Liu 09855d31db copy kustomize/k8sdeps into cli-runtime 2018-11-26 11:01:56 -08:00
Jordan Liggitt f199f3d5a3 Set deadline for returning backend error 2018-11-26 09:15:13 -05:00
Dr. Stefan Schimanski a00d08610f apiserver: set klog as etcdclient logger 2018-11-26 11:46:04 +01:00
Jordan Liggitt b84e3dd6f8 Verify backend upgraded connection 2018-11-25 14:25:38 -05:00
David Eads 541f036a49 only update the apiservice status if the status has changed 2018-11-21 16:28:45 -05:00
k8s-ci-robot 2b0212de9c
Merge pull request #71206 from stlaz/enc_config_opt 
Rename '--experimental-encryption-provider-config' to '--encryption-provider-config'
 2018-11-21 11:30:12 -08:00
Jordan Liggitt 2498ca7606 drop VerifyFeatureGatesUnchanged 2018-11-21 11:51:33 -05:00
Jordan Liggitt d440ecdd3b Update non-test code to use DefaultMutableFeatureGate 2018-11-21 11:51:33 -05:00
Jordan Liggitt 1d6db5924f Tighten feature gate interface to split out mutating methods 2018-11-21 11:51:32 -05:00
k8s-ci-robot 3d5998edcd
Merge pull request #71298 from stewart-yu/stewart-controller-manager-flags 
add missing flags in *-controller-manager --help
 2018-11-21 05:58:20 -08:00
Jay Lim 10dd5d6631 *-controller-manager: fix missing global flags for --help 2018-11-21 17:39:14 +08:00
Christoph Blecker c7d3951927
Update github.com/json-iterator/go to 1.1.4 2018-11-20 18:13:01 -08:00
Dr. Stefan Schimanski 52b1718a63 unstructured: return not-found if intermediate path is not found 2018-11-20 17:21:52 +01:00
zhangyue 596a20ca8a fix typo: namspace -> namespace 
Signed-off-by: zhangyue <zy675793960@yeah.net>
 2018-11-20 21:47:27 +08:00
Sergei Orlov 21c1bb8830
kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'. 
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
 2018-11-19 16:34:09 +01:00
Jan Safranek 0c4b89fad6 Fix typo 2018-11-19 15:28:14 +01:00
Jan Safranek 787611a614 Refactor status PrepareForUpdate into standalone method 
Someone else might find reseting metadata fields useful.
 2018-11-19 14:46:06 +01:00
k8s-ci-robot 7ba79c3183
Merge pull request #71128 from yue9944882/chore/add-reviewer 
Add yue9944882 to CRD/CR apiserver reviewer
 2018-11-18 14:14:17 -08:00
Yang Li 8dc9619d44 Call cancel functions to avoid context leaks 2018-11-18 17:40:35 +08:00
Yang Li 267425667f Fix unreachable code 2018-11-18 04:16:25 +08:00
Clayton Coleman 486577df17 Restore "Make bootstrap client cert loading part of rotation"" 
This reverts the revert of commit 3464222267.
 2018-11-17 13:44:58 -05:00
Clayton Coleman 3464222267
Revert "Make bootstrap client cert loading part of rotation" 
This reverts commit 0af19875ad.

Revert "Ensure the bootstrap rotation code is tested by forcing rotation"

This reverts commit de293b2d7d.
 2018-11-17 10:24:39 -05:00
k8s-ci-robot 46ebebcc4f
Merge pull request #65763 from x13n/audit-logging 
Add option to k8s apiserver to reject incoming requests upon audit failure
 2018-11-17 04:39:56 -08:00
k8s-ci-robot 3be3510814
Merge pull request #69890 from smarterclayton/bootstrap_retry 
Make bootstrap client cert loading part of rotation
 2018-11-16 22:46:33 -08:00
k8s-ci-robot ec2e767e59
Merge pull request #71167 from msau42/block-beta 
Promote raw block volume support to beta
 2018-11-16 20:28:03 -08:00
k8s-ci-robot f38cc95505
Merge pull request #62692 from mikedanese/trev2 
authn: extend authenticator.Token to support audience validation
 2018-11-16 20:27:25 -08:00
Clayton Coleman de293b2d7d
Ensure the bootstrap rotation code is tested by forcing rotation 
Expose both a Stop() method (for cleanup) and a method to force
cert rotation, but only expose Stop() on the interface.

Verify that we choose the correct client.
 2018-11-16 21:50:52 -05:00
Clayton Coleman 0af19875ad
Make bootstrap client cert loading part of rotation 
Ensure that bootstrap+clientcert-rotation in the Kubelet can:

1. happen in the background so that static pods aren't blocked by bootstrap
2. collapse down to a single call path for requesting a CSR
3. reorganize the code to allow future flexibility in retrieving bootstrap creds

Fetching the first certificate and later certificates when the kubelet
is using client rotation and bootstrapping should share the same code
path. We also want to start the Kubelet static pod loop before
bootstrapping completes. Finally, we want to take an incremental step
towards improving how the bootstrap credentials are loaded from disk
(potentially allowing for a CLI call to get credentials, or a remote
plugin that better integrates with cloud providers or KSMs).

Reorganize how the kubelet client config is determined. If rotation is
off, simplify the code path. If rotation is on, load the config
from disk, and then pass that into the cert manager. The cert manager
creates a client each time it tries to request a new cert.

Preserve existing behavior where:

1. bootstrap kubeconfig is used if the current kubeconfig is invalid/expired
2. we create the kubeconfig file based on the bootstrap kubeconfig, pointing to
   the location that new client certs will be placed
3. the newest client cert is used once it has been loaded
 2018-11-16 21:50:26 -05:00
k8s-ci-robot 39c8219999
Merge pull request #71158 from liggitt/revert-openapi-publish 
Revert openapi publish
 2018-11-16 18:22:43 -08:00
k8s-ci-robot 1e22f080ec
Merge pull request #67383 from stlaz/enc_config_promotion 
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file
 2018-11-16 16:31:30 -08:00
Mike Danese effad15ecc patch webhook authenticator to support token review with arbitrary audiences 2018-11-16 19:30:42 -05:00
Mike Danese 162699ca30 autogenerated 2018-11-16 17:54:33 -05:00
Mike Danese 04837fdef1 authn: add Audiences to TokenReview 2018-11-16 17:54:33 -05:00
Jordan Liggitt 8799eb4e2e Revert "Merge pull request #67205 from roycaihw/crd-openapi-spec" 
This reverts commit 54ee58b2d6, reversing
changes made to 9e2820e4c9.
 2018-11-16 16:36:24 -05:00
Jordan Liggitt ad2b916d7c Revert "Merge pull request #71137 from sttts/sttts-crd-openapi-spec-recursive-v2-prune" 
This reverts commit 3ea3cfc3be, reversing
changes made to fab7009997.
 2018-11-16 16:36:04 -05:00
k8s-ci-robot 3ea3cfc3be
Merge pull request #71137 from sttts/sttts-crd-openapi-spec-recursive-v2-prune 
apiextensions: prune {any,one}Of + Not recursively on OpenAPI v2 conversion
 2018-11-16 13:20:25 -08:00
k8s-ci-robot c418e2a04f
Merge pull request #71120 from WanLinghao/audit_log_fix 
fix a description error in DynamicAuditing feature
 2018-11-16 13:20:07 -08:00
k8s-ci-robot 9878253c3c
Merge pull request #70998 from deads2k/client-07-listwatchtimeout 
update the client generator to set a client-side timeout
 2018-11-16 13:19:57 -08:00
Matthew Wong 7a6acefd21 Generate code for BlockVolume beta promotion 2018-11-16 13:38:59 -05:00
Matthew Wong 2ff98f7832 Promote BlockVolume to beta 2018-11-16 13:38:59 -05:00
WanLinghao 84aa00c03d fix a description error in DynamicAuditing feature 2018-11-17 01:49:02 +08:00
Dr. Stefan Schimanski 0d9a022533 apiextensions: prune {any,one}Of + Not recursively on OpenAPI v2 conversion 2018-11-16 18:42:01 +01:00
David Eads 8f7edec615 generated 2018-11-16 12:41:17 -05:00
David Eads 493bc79c04 update client generator for local timeout 2018-11-16 11:43:37 -05:00
Jordan Liggitt 248d661327 Add tests to ensure storage feature gate changes don't escape packages 2018-11-16 10:52:53 -05:00
k8s-ci-robot f1e4ec8e48
Merge pull request #71076 from liggitt/preserve-stack 
Propagate panics up handler chain
 2018-11-16 05:13:09 -08:00
k8s-ci-robot 54ee58b2d6
Merge pull request #67205 from roycaihw/crd-openapi-spec 
Serve OpenAPI spec for registered CRDs
 2018-11-16 05:12:41 -08:00
zuoxiu.jm af505dcd14 add reviewer 2018-11-16 20:12:28 +08:00
k8s-ci-robot 9e2820e4c9
Merge pull request #71067 from sttts/sttts-handler-panic 
apiserver: preserve stack trace in handler panic beyond timeout handler
 2018-11-16 03:57:11 -08:00
Daniel Kłobuszewski 7a10f4eda7 Add option to k8s apiserver to reject incoming requests upon audit failure 2018-11-16 10:32:49 +01:00
saad-ali 9d4810f25a Bump grpc from 1.7.5 to 1.13.0 2018-11-15 16:39:42 -08:00
Haowei Cai 94e3c2899f generated 2018-11-15 11:03:04 -08:00
Haowei Cai e0d4c65b53 Convert and construct OpenAPI v2 spec from CRD 
validation OpenAPI v3 Schema
 2018-11-15 11:02:47 -08:00
Haowei Cai 3222a7033c Apiextensions-apiserver aggregates CRD schemas 
efficiently without checking conflicts, and wire up CRD discovery
controller to serve OpenAPI spec.
 2018-11-15 11:02:11 -08:00
Haowei Cai 92d95df0ba Enable aggregator apiserver resyncing openapi spec 
from delegation apiservers
 2018-11-15 11:00:25 -08:00
Jordan Liggitt 0952c9ee96 apiserver: propagate panics from REST handlers correctly 2018-11-15 12:35:51 -05:00
Dr. Stefan Schimanski 96fd0482f4 apiserver: preserve stack trace in handler panic beyond timeout handler 2018-11-15 17:36:11 +01:00
Hannes Hörl 0d4b5c98f8 Bump k8s.io/uitls to 8e7ff06 
The reason for the bump is the new functionality of the
k8s.io/utils/exec package which allows
- to get a hold of the process' std{out,err} as `io.Reader`s
- to `Start` a process and `Wait` for it

This should help on addressing #70890 by allowing to wrap std{out,err}
of the process to be wrapped with a `io.limitedReader`.

It also updates
- k8s.io/kubernetes/pkg/probe/exec.FakeCmd
- k8s.io/kubernetes/pkg/kubelet/prober.execInContainer
- k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet.fakeCmd
to implement the changed interface.

The dependency on 'k8s.io/utils/pointer' to the new version has also
been bumped in some staging repos:
- apiserver
- kube-controller-manager
- kube-scheduler
 2018-11-15 13:25:12 +00:00
k8s-ci-robot b7e2980a57
Merge pull request #68576 from jennybuckley/openapi-optimize 
Build OpenAPI Definitions per group instead of per resource
 2018-11-15 05:04:57 -08:00
k8s-ci-robot b1a52a38e9
Merge pull request #67257 from pbarker/audit 
dynamic audit configuration
 2018-11-15 02:42:59 -08:00
k8s-ci-robot f48e18faa4
Merge pull request #70971 from cheftako/leaseCheck 
Report KCM as unhealthy if leader election is wedged.
 2018-11-15 01:30:59 -08:00
Dr. Stefan Schimanski e43e5e2e45 apiserver: in timeout_test separate out handler 2018-11-15 09:56:53 +01:00
xichengliudui 3b9798efe9 update notes 2018-11-15 01:29:59 -05:00
k8s-ci-robot 726c07eb26
Merge pull request #69929 from jsafrane/csi-ga 
Promote CSIPersistentVolume feature to GA
 2018-11-14 20:34:58 -08:00
k8s-ci-robot 22eb2b0dae
Merge pull request #70966 from awly/cert-triple-cleanup 
Remove k8s.io/client-go/util/cert/triple
 2018-11-14 19:20:07 -08:00
k8s-ci-robot 4fb368e5fd
Merge pull request #70801 from Adirio/deltafifo-cleanup 
DeltaFIFO cleanup
 2018-11-14 19:19:57 -08:00
Patrick Barker 5cb70e369f adds dynamic audit configuration generated 2018-11-15 01:03:45 +00:00
Walter Fender 9c43ee6d6e Report KCM as unhealthy if leader election is wedged. 
Feedback from lavalamp and deads2k.
Changed Check() logic to be central to LeaderElector.
Further changes, especially cleaning up the test code.
 2018-11-14 16:57:37 -08:00
Patrick Barker eb89d3dddd adds dynamic audit configuration 2018-11-14 17:54:06 -07:00
jennybuckley d02a543f37 Update generated 2018-11-14 12:50:11 -08:00
jennybuckley 758e8623e9 Build OpenAPI Definitions per group instead of per resource 2018-11-14 12:50:02 -08:00
k8s-ci-robot 68fb529ec1
Merge pull request #70969 from awly/node-csr-move 
Move csr.RequestNodeCertificate into kubelet bootstrap package
 2018-11-14 11:37:58 -08:00
k8s-ci-robot ca338b91f5
Merge pull request #70676 from logicalhan/exclude-checks 
add ability to disable health checks on kube-apiserver for healthz using query-params
 2018-11-14 11:37:48 -08:00
k8s-ci-robot 774f162884
Merge pull request #70999 from liggitt/oversized-spdystream-frames 
Ensure oversized data frames are not written to spdystreams
 2018-11-14 09:26:06 -08:00
Jan Safranek e95b188656 Generated files 2018-11-14 14:01:16 +01:00
Jan Safranek b9d9b7f16f Promote VolumeAttachment to storage.k8s.io/v1 API 2018-11-14 14:01:16 +01:00
Adrián Orive 0b16c43f59 DeltaFIFO cleanup 
Remove non-needed else condition
Remove non-needed swallow copy
Simplify return for IsClosed()
Keep amount decrement next to element extraction from the queue

Signed-off-by: Adrián Orive <adrian.orive.oneca@gmail.com>
 2018-11-14 09:00:02 +01:00
Jordan Liggitt 0202e269a3 Fix sending oversided data frames to spdy stream 2018-11-13 22:13:09 -05:00
k8s-ci-robot d399e079f2
Merge pull request #71002 from awly/certutil-cleanup 
Remove unused funcs in certutil
 2018-11-13 14:59:46 -08:00
k8s-ci-robot bc6aee19b0
Merge pull request #70884 from lavalamp/workqueue 
add a metric that can be used to notice stuck worker threads
 2018-11-13 14:59:27 -08:00
Han Kang f1f1bc83fd add ability to exclude health checks from failing healthz by passing in a query param 2018-11-13 14:48:44 -08:00
k8s-ci-robot 1777be5fbe
Merge pull request #70735 from wojtek-t/use_watch-cache_when_rv=0 
Use watch cache when rv=0 even when limit is set
 2018-11-13 13:45:13 -08:00
Andrew Lytvynov 09db5bc951 Remove k8s.io/client-go/util/cert/triple 
The package is unused.
 2018-11-13 13:08:50 -08:00
xichengliudui 9a25d46e8b Delete some redundant code 
Delete some redundant code
 2018-11-13 14:19:36 -05:00
Andrew Lytvynov 5c073abfe1 Move csr.RequestNodeCertificate into kubelet bootstrap package 
This func is only used by the kubelet and there's no need to pollute
client-go API with it.
 2018-11-13 10:27:51 -08:00
Andrew Lytvynov 162b364292 Remove unused funcs in certutil 2018-11-13 10:26:43 -08:00
Stanislav Laznicka 628d1fef37
autogen files 2018-11-13 18:06:12 +01:00
wojtekt 4242d1b760 Use watch cache when rv=0 even when limit is set 2018-11-13 16:52:30 +01:00
Slava Semushin c21cb548e6
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file. 
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
 2018-11-13 14:05:21 +01:00
stewart-yu 217dbeafaf remove duplicated import 2018-11-13 20:08:39 +08:00
k8s-ci-robot efd19d3c94
Merge pull request #70970 from awly/unexport-csr-parsecsr 
Unexport csr.ParseCSR
 2018-11-12 18:31:45 -08:00
Andrew Lytvynov 41334cfdd3 Unexport csr.ParseCSR 
This func is only used internally and was copied from
k8s.io/kubernetes/pkg/apis/certificates.
 2018-11-12 17:15:09 -08:00
k8s-ci-robot 27cf50d85e
Merge pull request #70322 from mikedanese/audoidc 
make oidc authenticator (more?) audience aware
 2018-11-12 17:03:29 -08:00
Daniel Smith 680ddd49d8 fixup! add longest_running_processor_microseconds metric 
fix data race
 2018-11-12 12:57:42 -08:00
Mike Danese a714d9cd04 make oidc authenticator (more?) audience aware 
Part of https://github.com/kubernetes/kubernetes/issues/69893
 2018-11-12 12:43:21 -08:00
Mike Spreitzer fc20359fed Clarified syntax doc on --watch-cache-sizes 
Noted that group must be omitted for resources of apiVersion v1 (the
legacy core API) and included for others.

Fixes #65393
 2018-11-12 14:45:45 -05:00
Daniel Smith fd77aa5a41 add longest_running_processor_microseconds metric 2018-11-12 10:52:18 -08:00
stewart-yu 529dbd27ac auto-generated file 2018-11-11 17:19:38 +08:00
stewart-yu a77652e9ab kube-scheduler: output flags in logical sections 2018-11-11 17:19:38 +08:00
Daniel Smith 578962d934 fixup! Test workqueue metrics 
change units to seconds
 2018-11-10 18:46:43 -08:00
Daniel Smith 44a87baf09 fixup! Test workqueue metrics 2018-11-10 18:24:59 -08:00
Davanum Srinivas e558e291d1
s/glog/klog/ - keep up with master 
Change-Id: I27ff0545bc456ed8c0900cfeb90555f9ab7ae235
 2018-11-10 07:57:01 -05:00
Davanum Srinivas 68ce375d00
Update all the staging Godeps.json 
Change-Id: I64b30c68a606b4f5c095a66496a1e48c4d62ea88
 2018-11-10 07:50:32 -05:00
Davanum Srinivas 954996e231
Move from glog to klog 
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
 2018-11-10 07:50:31 -05:00
k8s-ci-robot 97baad34a7
Merge pull request #67006 from mbohlool/crd_webhook_conversion 
CRD webhook conversion
 2018-11-10 02:33:51 -08:00
PingWang 7750422a9d Fix function comment 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2018-11-10 15:38:56 +08:00
k8s-ci-robot 413ccb15c6
Merge pull request #70021 from pbarker/audit-plugins 
dynamic audit plugins
 2018-11-09 18:34:45 -08:00
Daniel Smith 74c50c0ad3 generated files 2018-11-09 16:24:12 -08:00
Daniel Smith 5a8444ceec Test workqueue metrics 2018-11-09 16:24:12 -08:00
Mehdy Bohlool d51d0164c5 Update generated files 2018-11-09 15:57:35 -08:00
Mehdy Bohlool e2ca575d0f CRD Conversion 2018-11-09 15:57:35 -08:00
Patrick Barker 54fd930d0e adds dynamic audit plugins generated 2018-11-09 15:38:08 -07:00
Patrick Barker 8eb2150689 adds dynamic audit plugins 2018-11-09 15:38:00 -07:00
k8s-ci-robot daea190bee
Merge pull request #70753 from logicalhan/healthz-test 
fix healthz checkerNames test so that it tests against the expected output
 2018-11-09 14:31:09 -08:00
yameiwang fe5f7aab77 fix spelling errors its 2018-11-10 03:12:49 +08:00
Daniel Smith 6195d1005d add a metric that can be used to notice stuck worker threads 2018-11-09 10:50:11 -08:00
k8s-ci-robot e133ab274d
Merge pull request #70515 from davidz627/feature/csiNodeInfo 
Add explicit "Installed" field to CSINodeInfo and change update semantics
 2018-11-09 06:42:09 -08:00
David Zhu 06f3b26012 Change semantics of driver install and uninstall in CSINodeInfo to use new fields. 2018-11-08 19:45:01 -08:00
David Zhu 3595dee6cc Add fields available and volumePluginMechanism to CSINodeInfo CRD API Object. Split CSINodeInfo into Spec and Status. 2018-11-08 19:44:51 -08:00
k8s-ci-robot be800e623a
Merge pull request #69663 from sttts/sttts-scheduler-secure-serving 
scheduler: enable secure port and authn/z
 2018-11-08 17:36:14 -08:00
Haowei Cai 01c3274677 generated 2018-11-08 11:19:40 -08:00
Haowei Cai 3de9c01e85 Remove unused openapi-gen cmd 
as we switched to use k8s.io/kube-openapi/cmd/openapi-gen
 2018-11-08 11:07:33 -08:00
k8s-ci-robot f212b9db23
Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml 
Switch to sigs.k8s.io/yaml from ghodss/yaml
 2018-11-08 10:57:36 -08:00
tanshanshan cb95edafe8 kube-scheduler: enable secure ports 10259 2018-11-08 16:43:59 +01:00
zuoxiu.jm 1e8dee3931 enchance test regression for versioning codec 2018-11-08 22:55:24 +08:00
k8s-ci-robot 3c10143967
Merge pull request #60195 from humblec/glusterfs-pvspec-3 
Refactor GlusterFS PV spec.
 2018-11-08 00:24:39 -08:00
k8s-ci-robot 16d0992534
Merge pull request #69753 from wangzhen127/diff-node-status 
Update kubelet node status report logic with node lease feature
 2018-11-07 20:26:45 -08:00
Lv Jiawei c1fa760b75
Comment error in ItemExponentialFailureRateLimiter 
The backoff value is baseDelay*2^<num-failures> in ItemExponentialFailureRateLimiter.When . But the comment is baseDelay*10^<num-failures>.
 2018-11-08 12:13:23 +08:00
k8s-ci-robot e998d6c2bc
Merge pull request #70718 from cblecker/godep-round-a-million 
Fork godep to fix inconsistent abbreviation size
 2018-11-07 19:10:45 -08:00
k8s-ci-robot 66989e8bf3 Merge pull request #70670 from deads2k/default-healthz 
Add `With` method for allowed paths on delegated authorization
 2018-11-07 19:10:35 -08:00
k8s-ci-robot 5371ccdcde
Merge pull request #70289 from CharlyF/listing-datadog-cluster-agent 
Adding Datadog Cluster Agent to the list of Custom Metrics Providers
 2018-11-07 12:53:09 -08:00
k8s-ci-robot 7155b8a364
Merge pull request #70211 from roycaihw/crd-multi-version-x 
CRD supports multi-version Schema, Subresources and AdditionalPrintColumns
 2018-11-07 12:52:58 -08:00
Zhen Wang 98fc4a107a Update kubelet node status report logic with node lease feature 
When node lease feature is enabled, kubelet reports node status to api server
only if there is some change or it didn't report over last report interval.
 2018-11-07 11:59:42 -08:00
David Eads 77b56ec9e3 add With method for allowed URL options on delegated authorization 2018-11-07 14:49:28 -05:00
k8s-ci-robot 471aff6673
Merge pull request #70663 from wenjiaswe/gonet110 
Upgrade golang.org/x/net image to release-branch.go1.10
 2018-11-07 11:36:22 -08:00
Christoph Blecker d15da2c586
Update godeps 2018-11-07 11:02:07 -08:00
Han Kang 0623f630ab fix healthz checkerNames test so that it tests against the expected output 2018-11-07 10:31:15 -08:00
Davanum Srinivas 43f523d405
Switch to sigs.k8s.io/yaml from ghodss/yaml 
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
 2018-11-07 13:17:32 -05:00
Haowei Cai 5b545bbc13 generated 2018-11-07 09:38:49 -08:00
Haowei Cai 52cdc33669 Integration test (please review with -w to ignore 
whitespace changes)
 2018-11-07 09:38:31 -08:00
Haowei Cai 1282ed5efe API server serves CRD per-version schema/subresources/columns 2018-11-07 09:37:55 -08:00
Haowei Cai 0ab3d2c344 Validation, defaulting and pre-create/update strategy for 
CRD per-version schema/subresources/columns
 2018-11-07 09:37:14 -08:00
Haowei Cai e5587f52a7 Add feature gate and API changes for multi-version 
schema, subresources and columns
 2018-11-07 09:36:17 -08:00
k8s-ci-robot 7fe59165b6
Merge pull request #70193 from saad-ali/csiCRDAddon 
Register CSI CRDs as addon
 2018-11-06 23:55:56 -08:00
k8s-ci-robot 0aba557741
Merge pull request #70600 from liggitt/sig-auth-subprojects 
Add owners/approvers aliases for sig-auth subprojects
 2018-11-06 17:55:07 -08:00
Wenjia Zhang adf155ee9f update staging godeps for golang.org/x/net/... to release-branch.go1.10 2018-11-06 15:49:50 -08:00
saad-ali a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
k8s-ci-robot 08deddfdbc
Merge pull request #70671 from deads2k/delegated-system-master 
allow delegated authorization to have privileged groups
 2018-11-06 08:17:46 -08:00
David Eads 0b70b7a7c9 allow delegated authorization to have privileged groups 2018-11-06 10:03:54 -05:00
Dr. Stefan Schimanski 4860f8732a testservers: return Run method errors correctly 2018-11-06 15:14:24 +01:00
Humble Chirammal bdb051c72d Refactor GlusterFS PV spec. 
This patch introduces glusterfsPersistentVolumeSource addition
to glusterfsVolumeSource. All fields remains same as glusterfsVolumeSource
with an addition of a new field
called `EndpointsNamespace` to define namespace of endpoint in the
spec.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2018-11-06 15:51:01 +05:30
Jordan Liggitt 35178d352d auth policy subproject approvers/reviewers 2018-11-06 00:57:39 -05:00
Jordan Liggitt 666c93a834 encryption-at-rest approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4ebe084376 certificates subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 9ae79f9653 authorizers subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fa2a0cc8a authenticators subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fe30e92fa audit subproject owners/reviewers 2018-11-06 00:57:38 -05:00
k8s-ci-robot 710bfb440e
Merge pull request #70606 from mikedanese/tfreload 
periodically reload tokens read from TokenFile in kubeconfig
 2018-11-05 20:59:38 -08:00
k8s-ci-robot e6b3d31bcf
Merge pull request #70556 from pbarker/audit-test-fix 
updates audit endpoints test
 2018-11-05 19:04:36 -08:00
k8s-ci-robot c8604653f0
Merge pull request #70449 from mikedanese/simplcache 
remove webhook cache implementation and replace with token cache
 2018-11-05 16:32:34 -08:00
Mike Danese 0ec4d6d396 remove webhook cache implementation and replace with the token cache 
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:

* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.
 2018-11-05 13:08:45 -08:00
k8s-ci-robot 714711e52d
Merge pull request #70476 from charrywanganthony/backendGroupVersionV1 
Use `audit.k8s.io/v1` as default value of option --audit-webhook-vers…
 2018-11-05 11:41:58 -08:00
Mike Danese 718adb7473 periodically reload tokens read from TokenFile in kubeconfig 
Like we do with InClusterConfig.
 2018-11-05 10:04:28 -08:00
k8s-ci-robot 2bbfd500a8
Merge pull request #70593 from bbbmj/typo 
chore(apiserver): nit fix
 2018-11-02 21:28:50 -07:00
k8s-ci-robot d7f90253e9
Merge pull request #70553 from pbarker/webhook-refactor 
refactors kubeapiserver webhook utility to be generic
 2018-11-02 18:01:38 -07:00
包梦江 c5e51dc2e4 chore(apiserver): nit fix 2018-11-03 02:32:04 +08:00
k8s-ci-robot 023892af3c
Merge pull request #70525 from seunghunee/issue-69743 
Reduce leaderelection's renewed lease verbosity
 2018-11-02 10:47:11 -07:00
Patrick Barker d33f347ba8 refactors kubeapiserver webhook utility to be generic generated 2018-11-02 11:42:04 -06:00
Patrick Barker 1081fffdd5 refactors kubeapiserver webhook utility to be generic 2018-11-02 11:41:58 -06:00
k8s-ci-robot 77fd16e0e7
Merge pull request #69266 from SataQiu/fix-20180930 
Remove the redundant space
 2018-11-02 08:38:37 -07:00
k8s-ci-robot 9fb1153bd8
Merge pull request #70550 from liggitt/cleanup-scale-clients 
Drop generated clients for Scale types
 2018-11-02 05:29:15 -07:00
SataQiu c9bc625428 Remove the redundant space 2018-11-02 15:45:11 +08:00
k8s-ci-robot 45550cadbe
Merge pull request #70477 from andyzhangx/azure-ultrassd-sdk 
add azure UltraSSD disk support
 2018-11-01 22:16:55 -07:00
k8s-ci-robot a831ea20a4
Merge pull request #69976 from atlassian/update-few-dependencies 
Update a few dependencies
 2018-11-01 22:16:16 -07:00
Chao Wang 9671a035f7 Use `audit.k8s.io/v1` as default value of option --audit-webhook-version and --audit-log-version in release 1.13 2018-11-02 09:35:15 +08:00
Patrick Barker 5a84453e4e updates audit endpoints test 2018-11-01 18:02:41 -06:00
k8s-ci-robot 1165d661f0
Merge pull request #69916 from mikedanese/trev9 
create audience unaware authenticator wrappers
 2018-11-01 13:43:56 -07:00
Jordan Liggitt ff9dc86b3c Drop generated clients for Scale types 2018-11-01 14:49:51 -04:00
k8s-ci-robot b04f83dcd8
Merge pull request #70437 from liggitt/get-scale 
Add GetScale/UpdateScale methods to apps/v1 clients
 2018-11-01 11:11:32 -07:00
k8s-ci-robot 215234d3a3
Merge pull request #67778 from gyuho/typo 
staing/apimachinery: fix typo "perfer" to "prefer"
 2018-11-01 03:21:02 -07:00
seunghunee 920db78bea leaderelection: reduce renewed lease verbosity 
This patch changes the renewed lease log level from 4 to 5 of leaderelection.go

Fix: #69743
 2018-11-01 08:12:07 +00:00
andyzhangx f1bd292c76 add ultrassd support 
update stagin Godeps.json

update godeps license

fix test failure

fix comments
 2018-11-01 06:30:15 +00:00
k8s-ci-robot 6f897af2da
Merge pull request #70260 from lavalamp/schema-fix 
bump kube-openapi dep
 2018-10-31 23:04:56 -07:00
k8s-ci-robot 11706d3803
Merge pull request #67795 from mbohlool/crd_conversion_api_changes 
CRD Conversion API Changes
 2018-10-31 23:04:37 -07:00
Daniel Smith dcb10d81d1 update generated deps 2018-10-31 17:11:23 -07:00
k8s-ci-robot c81a4a09cf
Merge pull request #70453 from liggitt/api-owners 
Update API-related owners files
 2018-10-31 17:09:08 -07:00
Mikhail Mazurskiy 8763223ab9
Update a few dependencies 
github.com/go-openapi/*
github.com/asaskevich/govalidator
 2018-11-01 09:59:43 +11:00
Mike Danese c704d70d49 create audience unaware authenticator wrappers 2018-10-31 15:31:49 -07:00
Mike Danese 817cf70191 move audience context functions to authenticator package 2018-10-31 14:50:11 -07:00
Mehdy Bohlool e27096cdb4 Update generated files 2018-10-31 14:47:13 -07:00
Mehdy Bohlool 998e22dd5c FeatureGate and API Validation for CRD Webhook Conversion 2018-10-31 11:14:47 -07:00
Mehdy Bohlool 1587d189cb Refactor webhookclientConfig validation of admission and audit registration 2018-10-31 11:14:47 -07:00
Mehdy Bohlool 530c79939f API Types for CRD conversion 2018-10-31 11:14:47 -07:00
k8s-ci-robot 797f5afd2d
Merge pull request #70436 from liggitt/retain-keys 
Fix retainKeys patchStrategy in apps/deployments
 2018-10-31 10:32:17 -07:00
andyzhangx d210b4bcf3 upgrade azure sdk to support ultra ssd 
update Godeps.json

update azure sdk for ultrassd support

update bazel

fix build failure
 2018-10-31 10:08:52 +00:00
k8s-ci-robot 9e31e6567f
Merge pull request #70168 from wgliang/update-vendor/coreos-etcd 
Update vendor package github.com/coreos/...
 2018-10-30 19:48:30 -07:00
k8s-ci-robot 1dd7e6f65c
Merge pull request #70295 from caesarxuchao/ownerRef-nonnamespaced 
Fixing comments on the OwnerReference
 2018-10-30 16:16:18 -07:00
Jordan Liggitt 8c20bdaf46 Update API-related owners files 2018-10-30 17:05:08 -04:00
k8s-ci-robot 93d1567c6f
Merge pull request #70032 from iamneha/delete_namespaced_job_spec 
Fix(bug): make body an optional parameter in [DELETE] /apis/batch/v1/…
 2018-10-30 11:03:40 -07:00
k8s-ci-robot d196d63c01
Merge pull request #69884 from liggitt/self-sign-in-memory 
Allow components to generate certificates in-memory
 2018-10-30 11:03:29 -07:00
Chao Xu 1cc316f4dc Update comments on the OwnerReference to acknowledge that the owning 
object can be cluster scoped.
 2018-10-30 10:28:44 -07:00
Nikhita Raghunath 6285db6576 Add license header to non-generated proto files 2018-10-30 22:29:07 +05:30
Jordan Liggitt 4de1912c6e Add GetScale/UpdateScale methods to apps/v1 clients 2018-10-30 12:10:07 -04:00
Jordan Liggitt e6a8b29554 Fix retainKeys patchStrategy in apps/deployments 2018-10-30 11:48:50 -04:00
Jordan Liggitt 15a81f51d8 Fix GetScale/UpdateScale type for replicationcontroller client 2018-10-30 11:45:16 -04:00
k8s-ci-robot 361f8c31bd
Merge pull request #70314 from samdamana/auth-revert 
Revert "limit forbidden error to details of what was forbidden"
 2018-10-29 17:11:27 -07:00
k8s-ci-robot 952e7b07c6
Merge pull request #70310 from mikedanese/trev10 
echo audiences in anonymous and insecure authenticators
 2018-10-29 17:11:18 -07:00
k8s-ci-robot 5cf90790fe
Merge pull request #69059 from caesarxuchao/unconditional-generation-increment 
The metadata.generation of a Custom Resource is always incremented
 2018-10-29 12:07:51 -07:00
qingsenLi 3e83f0f08a fix typo and instead of amd 2018-10-30 01:27:50 +08:00
k8s-ci-robot d0a10f0ca9
Merge pull request #70311 from juanvallejo/jvallejo/fix-continueonerror-visitor 
fix ContinueOnError visitor
 2018-10-29 08:31:25 -07:00
Walter Fender 99ebe87471 Added tracing for long running requests. 
Added tracing for use cases where etcd is not the cause of long running
requests.
Fixed spelling.
Factored in Wojtek-t feedback.
 2018-10-29 00:37:32 -07:00
Gyuho Lee 1adb8100ba staing/apimachinery: fix typo "perfer" to "prefer" 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2018-10-27 20:29:54 -07:00
k8s-ci-robot b7b0aae435
Merge pull request #70031 from nrfox/requeue-on-error 
Sample Controller: requeue work item on syncHandler error
 2018-10-27 03:19:59 -07:00
Neha Yadav 31372f1612 fix(bug): make body a optional parameter in [DELETE] /apis/batch/v1/namespaces/{namespace}/jobs/{name} 2018-10-27 09:33:36 +05:30
Samuel Davidson 294e02ed4b Revert "limit forbidden error to details of what was forbidden" 
This reverts commit ecbd013795.
 2018-10-26 15:58:09 -07:00
k8s-ci-robot 1df4f8eaf6
Merge pull request #70028 from liggitt/move-extensions-types 
move internal apps API types out of extensions package
 2018-10-26 15:56:13 -07:00
juanvallejo 4d753d4a59
fix ContinueOnError visitor 2018-10-26 18:35:06 -04:00
Mike Danese f94bc6193e echo audiences in anonymous and insecure authenticators 
part of https://github.com/kubernetes/kubernetes/issues/69893
 2018-10-26 15:33:54 -07:00
k8s-ci-robot 85555a7d73
Merge pull request #68559 from yue9944882/chore/respect-goflags-in-codegen 
chore(codegen): respect GOFLAGS when compiling code-generator
 2018-10-26 12:22:10 -07:00
Jordan Liggitt 7df2f9785e remove CustomMetricTarget 2018-10-25 21:11:52 -04:00
k8s-ci-robot 12cf545195
Merge pull request #70234 from Adirio/Adirio-patch-1 
Map allocation optimization for client-go/tools/cache
 2018-10-25 11:47:00 -07:00
k8s-ci-robot b6fd5d93b2
Merge pull request #69389 from smarterclayton/wait_error 
kubectl wait must handle errors returned by watch
 2018-10-25 09:40:41 -07:00
k8s-ci-robot f4bf0e8d33
Merge pull request #70237 from nikhita/proto-remove-trailing-whitespace 
Remove trailing whitespace in the protobuf generator
 2018-10-25 08:25:06 -07:00
Adrián 2299f45f52 Optimized map allocation in Replace methods 
Initial allocation of several maps as the sizes are known

Signed-off-by: Adrián Orive <adrian.orive.oneca@gmail.com>
 2018-10-25 14:25:00 +02:00
Nikhita Raghunath e60b0a129a generated proto: remove trailing whitespace 2018-10-25 16:37:33 +05:30
k8s-ci-robot 3a680bc42d
Merge pull request #70100 from lavalamp/schema-fix 
API Schema fix: container port keys
 2018-10-25 04:01:25 -07:00
Nikhita Raghunath 4911ad8ff1 Remove trailing whitespace in proto generator 2018-10-25 16:08:11 +05:30
k8s-ci-robot ed39bd45f5
Merge pull request #70087 from liggitt/fix-crd-internal-types 
Fix custom resource handler in-memory version
 2018-10-25 02:11:04 -07:00
zuoxiu.jm cac4ad79a3 make use of common generator script in aggregator codegen 2018-10-25 16:02:36 +08:00
zuoxiu.jm 615bcb2f88 respect GOFLAGS when compiling aggregator and add env args 2018-10-25 16:00:28 +08:00
k8s-ci-robot d96f235051
Merge pull request #69991 from agunnerson-ibm/issue-69471 
certificate_manager: Check that template differs from current cert before rotation
 2018-10-24 21:35:09 -07:00
Andrew Gunnerson b9ab65d689
certificate_manager: Check that template differs from current cert before rotation 
With the current behavior, when kubelet starts, a `templateChanged`
event is always fired off because it only checks if `getLastRequest`
matches `getTemplate`. The last request only exists in memory and thus
is initially `nil` and can't ever match the current template during
startup.

This causes kubelet to request the signing of a new CSR every time it's
restarted. This commit changes the behavior so that `templateChanged` is
only fired off if the currently template doesn't match both the current
certificate and the last template.

Fixes #69471

Signed-off-by: Andrew Gunnerson <andrew.gunnerson@us.ibm.com>
 2018-10-24 17:14:58 -04:00
k8s-ci-robot c89b239cfa
Merge pull request #69795 from yue9944882/chore/resync-psp-api 
Resycn psp v1beta1 api with internal
 2018-10-24 09:44:09 -07:00
Guoliang Wang d462e1e8d7 Update vendor package github.com/coreos/... 2018-10-24 07:52:40 +00:00
zuoxiu.jm e4a8ad49ee sync missing secret type to external api repo 2018-10-24 15:46:57 +08:00
k8s-ci-robot dad07683b1
Merge pull request #69013 from ibrasho-forks/switch-to-http.Error 
Update usages of http.ResponseWriter.WriteHeader to use http.Error
 2018-10-23 15:31:55 -07:00
charlyF 8532168d01
adding Datadog Cluster Agent to the list of Custom Metrics Providers 
Signed-off-by: charlyF <charly@datadoghq.com>
 2018-10-23 17:30:18 -04:00
k8s-ci-robot 1fe288ec02
Merge pull request #70138 from liggitt/optional-ca-bundle 
Correct optional/omitempty indicator on webhook cabundle
 2018-10-23 13:52:38 -07:00
k8s-ci-robot eef8154833
Merge pull request #69554 from nikhita/cloud-provider-import-restrictions 
Add import restrictions for cloud-provider
 2018-10-23 12:29:29 -07:00
k8s-ci-robot 5e8e8dcff8
Merge pull request #70101 from imjching/68026-fix-golint-failures-discovery 
Fix linting issues in staging/src/k8s.io/client-go/discovery/*
 2018-10-23 11:17:40 -07:00
Jordan Liggitt fbd5597e99 Add system root unit test 2018-10-23 13:50:03 -04:00
Jordan Liggitt 921c60d30f Generated files 2018-10-23 13:50:03 -04:00
Jordan Liggitt d00906f44e Fix omitempty/optional indicator on CABundle fields 2018-10-23 13:50:03 -04:00
Jordan Liggitt 1c5d3ab85e Avoid short-circuiting conversion when decoding into opinionated unstructured objects 2018-10-23 09:04:25 -04:00
Jordan Liggitt b51ac8f7d5 Instantiate unstructured objects with versions in custom resource handler 2018-10-23 09:04:25 -04:00
Jordan Liggitt 0e9b06df0f Allow specifying the hub group-version for a handler 2018-10-23 09:00:51 -04:00
Jordan Liggitt 870d121d5e Inline patch#toUnversioned 2018-10-23 09:00:51 -04:00
Jordan Liggitt 3332a0c972 Test custom resource scaling with multiple versions 2018-10-23 09:00:51 -04:00
Dr. Stefan Schimanski 7e0775e5ec apiextensions: add smoke test checking that patches apply to non-storage versions 2018-10-23 09:00:51 -04:00
k8s-ci-robot e77e8ffbf5
Merge pull request #69730 from xichengliudui/fix18101204 
Fix some typo
 2018-10-22 23:59:24 -07:00
k8s-ci-robot baa8d800ad
Merge pull request #69582 from mikedanese/trev7 
tokenreview: authenticator interface changes
 2018-10-22 23:59:04 -07:00
k8s-ci-robot 2f9b65143e
Merge pull request #69946 from mateuszmatejczyk/annotation 
Add EndpointsLastTriggerTime annotation.
 2018-10-22 18:28:47 -07:00
Jay Lim 7a317e6262 Fix linting issues in staging/src/k8s.io/client-go/discovery/* 
Signed-off-by: Jay Lim <jay@imjching.com>
 2018-10-22 20:09:45 -04:00
k8s-ci-robot 9fb4a2aa9a
Merge pull request #70060 from pbarker/audit-webhook 
updates shared apiserver webhook client
 2018-10-22 17:07:46 -07:00
Daniel Smith fdd502c2ff generated files 2018-10-22 16:18:33 -07:00
k8s-ci-robot 1af393d58e
Merge pull request #69866 from xichengliudui/fix181016 
Remove duplicate words
 2018-10-22 15:35:36 -07:00
k8s-ci-robot 8e7e226422
Merge pull request #69636 from p0lyn0mial/sample_controller_factory_start 
fixes the way the informers are started in sample controller pkg
 2018-10-22 15:35:26 -07:00
k8s-ci-robot 04d3949048
Merge pull request #69895 from jpbetz/webhook-metrics-cardinality-fix 
Reduce cardinality of admission webhook metrics
 2018-10-22 14:21:29 -07:00
Matt Matejczyk 6ffd88aeda Update the doc to say that we will use RFC 3339 format to store the timestamp. 2018-10-22 15:47:09 -04:00
Matt Matejczyk 8014d73345 Merge branch 'master' of https://github.com/kubernetes/kubernetes into annotation 2018-10-22 14:25:08 -04:00
Matt Matejczyk f005ea8976 Make it clear that the timestamp is a unix time in millis. 2018-10-22 14:14:58 -04:00
p0lyn0mial e55ca64dbd fixes the way the informers are started in sample controller pkg 2018-10-22 20:11:23 +02:00
Mike Danese 809f278b03 make token cache include audience in hash key 2018-10-22 10:16:59 -07:00
Mike Danese e5227216c0 rebase authenticators onto new interface. 2018-10-22 10:16:59 -07:00
Mike Danese 11be171757 tokenreview: authenticator interface changes 2018-10-22 10:16:58 -07:00
Patrick Barker 5874a1f8fa updates shared apiserver webhook client 2018-10-21 10:03:28 -05:00
Daniel Smith 5dc3b8e63b fix container port to key by both port and protocol 2018-10-19 16:10:31 -07:00
andrewsykim 2908174517 pass in stopCh to cloud provider Initialize method for custom controllers 2018-10-19 17:51:58 -04:00
Matt Matejczyk d99b68a6e2 Update annotation name and documentation. 2018-10-19 16:57:49 -04:00
nrfox 8f86654b8e Requeue work item on syncHandler error 2018-10-19 13:54:31 -04:00
Matt Matejczyk 536cee71b4 Merge branch 'master' into annotation 2018-10-19 13:54:06 -04:00
Matt Matejczyk 4cdab7c985 Rename and update the doc. 2018-10-19 13:11:56 -04:00
Matt Matejczyk 7f7a4590b9 Specify in the documentation that the timestamp will be expressed in milliseconds. 2018-10-19 12:19:02 -04:00
k8s-ci-robot c0d9a0728c
Merge pull request #69897 from code-sleuth/develop 
Remove error output from stdout to stderr
 2018-10-19 04:57:33 -07:00
Ibrahim Mbaziira 7480650e05
Remove error output from stdout to stderr 2018-10-19 00:28:36 +03:00
Matt Matejczyk 803ee8426d Add EndpointsLastTriggerTime annotation. 2018-10-18 09:25:27 -04:00
k8s-ci-robot b5c25728ec
Merge pull request #69718 from andyzhangx/azurefile-premium 
support Azure premium file for azure file plugin
 2018-10-18 05:18:50 -07:00
k8s-ci-robot 0652e098d0
Merge pull request #67547 from pbarker/audit-api 
dynamic audit configuration api
 2018-10-17 16:19:39 -07:00
Chao Xu 417db5f708 Changes when .metadata.generation of a CR increments. 
If the custom resource participates the spec/status convention, the
metadata.generation of the CR increments whenever there is any change,
except for the changes to the metadata or the changes to the status.

If the CR does not participate the spec/status convention, the
metadata.generation of the CR increments whenever there is any change,
except for the changes to the metadata.

A CR is considered to participate the spec/status convention if and only if the
"CustomResourceSubresources" feature gate is turned on and when the CRD
has `.spec.subresources.status={}`.
 2018-10-17 11:02:38 -07:00
k8s-ci-robot 688550b2d3
Merge pull request #69838 from mikedanese/testonly 
make tokentest available to tests only
 2018-10-17 08:42:02 -07:00
Jordan Liggitt b7160d4ee2 Allow components to generate certificates in-memory 2018-10-17 09:10:40 -04:00
k8s-ci-robot 399cade806
Merge pull request #69914 from mikedanese/trev8 
add some helpers to Audiences to find intersecting audiences
 2018-10-17 00:04:37 -07:00
k8s-ci-robot a3e6c3c0a0
Merge pull request #69900 from php-coder/update_owners_files 
Remove myself from OWNERS files
 2018-10-17 00:04:27 -07:00
andyzhangx bc2c79a43a add azure premium file support 
update bazel and fix goftm

use defaultStorageAccountKind

fix test failure

update godep license file

fix staging godeps issue

update staging godeps

fix comments, use one API call for file creation
 2018-10-17 03:27:29 +00:00
Mike Danese 01ce5bb8a4 add some helpers to Audiences to find intersecting audiences 2018-10-16 20:01:58 -07:00
k8s-ci-robot 31438712d6
Merge pull request #69269 from miguelbernadi/fix-golint-issues-68026 
Fix undocumented golint errors
 2018-10-16 19:25:56 -07:00