Commit Graph

1479 Commits (63ce112d9e1cee3afcc16c07e90d7ea188652f62)

Author SHA1 Message Date
Solly Ross acf2d8ff1c Update metrics-server to v0.3.0
v0.3.0 is the latest version of metrics-server, and brings a number of
internal stability improvements as well as some bugfixes and features.

NB: this currently disables Kubelet auth entirely, since this setup
needs to work on GKE for the tests, and GKE doesn't support delegated
Kubelet auth yet.  When that's rectified, we can switch this over to
use secure options.
2018-08-30 12:10:09 -04:00
saravanan30erd c493bef26e fix the fluentd config params 2018-08-28 17:26:27 +04:00
Zihong Zheng 5c83a340bc Bump ip-masq-agent to v2.1.1
- Update debian-iptables image for CVEs.
- Change chain name to IP-MASQ to be compatible with the
pre-injected masquerade rules.
2018-08-27 16:30:04 -07:00
liangwei 5ea138f4e9 remove rescheduler 2018-08-22 11:49:14 +08:00
Kubernetes Submit Queue 3f6717a097
Merge pull request #67582 from monotek/kibana
Automatic merge from submit-queue (batch tested with PRs 67493, 67617, 67582, 67337). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

updates kibana to 6.3.2

**What this PR does / why we need it**:
* updates kibana to 6.3.2 

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:
needed as es was updated to 6.3.2 too in https://github.com/kubernetes/kubernetes/pull/67484


**Release note**:

```release-note
updates kibana to 6.3.2 
```
2018-08-20 20:39:13 -07:00
Kubernetes Submit Queue e9de06d4df
Merge pull request #67544 from monotek/fluentd-elasticsearch
Automatic merge from submit-queue (batch tested with PRs 67593, 67544). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

fixes json logging in fluentd-elasticsearch image

**What this PR does / why we need it**: 
* fixes json logging in fluentd-elasticsearch image by downgrading fluent-plugin-kubernetes_metadata_filter plugin to version 2.0.0
* adds missing pos files to fluentd config 
* adds mapping type name 

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #
* https://github.com/helm/charts/issues/7168

**Special notes for your reviewer**:
* https://github.com/fabric8io/fluent-plugin-kubernetes_metadata_filter/issues/145
* https://github.com/uken/fluent-plugin-elasticsearch/issues/442

**Release note**:

```release-note
fixes json logging in fluentd-elasticsearch image by downgrading fluent-plugin-kubernetes_metadata_filter plugin to version 2.0.0
```
2018-08-20 11:50:13 -07:00
André Bauer f8cea1b028 updates kibana to 6.3.2 2018-08-20 10:00:01 +02:00
André Bauer 6390e590cc added missing pos files & added mapping type name in fluentd config 2018-08-20 09:55:38 +02:00
Kubernetes Submit Queue 31420467ae
Merge pull request #67302 from dixudx/dnsmasq_add_loop_detect
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

add --dns-loop-detect option to dnsmasq run by kube-dns

**What this PR does / why we need it**:

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #67299

**Special notes for your reviewer**:
/cc @kubernetes/sig-network-pr-reviews 

**Release note**:

```release-note
add --dns-loop-detect option to dnsmasq run by kube-dns
```
2018-08-18 08:47:18 -07:00
Yu Liao 77d76c05b4 Removed istio related addon manifests, as the directory is deprecated. 2018-08-17 13:04:26 -07:00
André Bauer 9b5c5650eb use image 2.2.0 again 2018-08-17 21:49:44 +02:00
André Bauer 6ab218d4dd fixed typo 2018-08-17 21:48:44 +02:00
André Bauer 61a709a7b2 fixed json logging in fluentd-elasticsearch image 2018-08-17 16:43:27 +02:00
Kubernetes Submit Queue de1656abbb
Merge pull request #67484 from monotek/elasticsearch
Automatic merge from submit-queue (batch tested with PRs 66793, 67405, 67068, 67501, 67484). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

updates es-image to elasticsearch 6.3.2

**What this PR does / why we need it**:
* updates es-image to elasticsearch 6.3.2

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
updates es-image to elasticsearch 6.3.2
```
2018-08-17 05:05:27 -07:00
Karol Wychowaniec d5b32d8830 Fix parameter for fluentd-gcp-scaler 2018-08-16 16:18:51 +02:00
André Bauer 9f88fe8016 updates es-image to elasticsearch 6.3.2 2018-08-16 09:51:52 +02:00
André Bauer 2b12f2f944 updated fluentd to 1.2.4 2018-08-15 15:17:00 +02:00
Kubernetes Submit Queue 803e96eb28
Merge pull request #66185 from vantuvt/vantuvt-patch-3
Automatic merge from submit-queue (batch tested with PRs 66177, 66185, 67136, 67157, 65065). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Update configure-helper.sh to support heapster resource optimizations

**What this PR does / why we need it**:

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-08-15 02:09:08 -07:00
Kubernetes Submit Queue cef8e585c1
Merge pull request #66177 from vantuvt/vantuvt-patch-2
Automatic merge from submit-queue (batch tested with PRs 66177, 66185, 67136, 67157, 65065). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Templatize the scaling policy for metrics-server

**What this PR does / why we need it**:

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-08-15 02:09:04 -07:00
Di Xu 25f9909cba add --dns-loop-detect option to dnsmasq run by kube-dns 2018-08-11 22:30:25 +08:00
Van Tu d347d283bf Add comments clarifying the use of the minClusterSize flag. 2018-08-08 15:27:50 -04:00
Van Tu b601a02625 Add comment to clarify the use of the minClusterSize flag. 2018-08-08 13:41:59 -04:00
Kubernetes Submit Queue 3c05d926db
Merge pull request #66260 from tanshanshan/fixtaint
Automatic merge from submit-queue (batch tested with PRs 66634, 66260). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

ip-masq-agent daemonset will be scheduled in all nodes.

**What this PR does / why we need it**:
ip-masq-agent tolerate NoSchedule and NoExecute so that it will be scheduled in all nodes.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #66255 

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-08-07 18:38:00 -07:00
Kubernetes Submit Queue ce63916aa6
Merge pull request #67074 from kawych/master
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Bump Heapster to v1.6.0-beta.1

**What this PR does / why we need it**:
Bump Heapster to version v1.6.0-beta.1

**Release note**:
```release-note
Bump Heapster to v1.6.0-beta.1
```
2018-08-07 06:42:01 -07:00
Kubernetes Submit Queue 51faf6ebdb
Merge pull request #66485 from bmoyles0117/apply-latest-stackdriver-fixes
Automatic merge from submit-queue (batch tested with PRs 59030, 64666, 66251, 66485, 66813). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

A large set of improvements to the Stackdriver components.

**What this PR does / why we need it**:
This PR delivers a large set of improvements for both the Stackdriver Logging agent and the Stackdriver Metadata agent.

**Release note**:
```release-note
Metadata Agent Improvements
Bump metadata agent version to 0.2-0.0.21-1.
Expand the metadata agent's access to all API groups.
Remove metadata agent config maps in favor of command line flags.
Update the metadata agent's liveness probe to a new /healthz handler.

Logging Agent Improvements
Bump logging agent version to 0.2-1.5.33-1-k8s-1.
Appropriately set log severity for k8s_container.
Fix detect exceptions plugin to analyze message field instead of log field.
Fix detect exceptions plugin to analyze streams based on local resource id.
Disable the metadata agent for monitored resource construction in logging.
Disable timestamp adjustment in logs to optimize performance.
Reduce logging agent buffer chunk limit to 512k to optimize performance.
```
2018-08-06 12:21:08 -07:00
Bryan Moyles 32c2bfadfd A large set of improvements to the Stackdriver components.
Metadata Agent Improvements
Bump metadata agent version to 0.2-0.0.21-1.
Expand the metadata agent's access to all API groups.
Remove metadata agent config maps in favor of command line flags.
Update the metadata agent's liveness probe to a new /healthz handler.

Logging Agent Improvements
Bump logging agent version to 0.2-1.5.33-1-k8s-1.
Appropriately set log severity for k8s_container.
Fix detect exceptions plugin to analyze message field instead of log field.
Fix detect exceptions plugin to analyze streams based on local resource id.
Disable the metadata agent for monitored resource construction in logging.
Disable timestamp adjustment in logs to optimize performance.
Reduce logging agent buffer chunk limit to 512k to optimize performance.
2018-08-06 11:26:35 -04:00
Karol Wychowaniec b70e0d9152 Bump Heapster to v1.6.0-beta.1 2018-08-06 16:49:03 +02:00
Kubernetes Submit Queue e3060fb26c
Merge pull request #66235 from yue9944882/fixes-default-storage-class-reconcile
Automatic merge from submit-queue (batch tested with PRs 66235, 66908, 66907). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

set standard storage class addon mode to "ensure-exists"

**What this PR does / why we need it**:

Change addon mode for standard storage class to `EnsureExists`.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #66222

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-08-02 11:30:10 -07:00
Kubernetes Submit Queue 921edffc0b
Merge pull request #66630 from dekkagaijin/bump-proxy
Automatic merge from submit-queue (batch tested with PRs 66225, 66648, 65799, 66630, 66619). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Bump to k8s.gcr.io/metadata-proxy:v0.1.10

This PR bumps the metadata-proxy to a version which is compatible with `gcloud`'s GCE Metadata access_token logic.

```release-note
NONE
```
2018-07-27 16:42:15 -07:00
Karol Wychowaniec dccfc54766 Bump Heapster to v1.5.4 2018-07-26 15:31:26 +02:00
Jake Sanders 1a6ccd070b Bump to k8s.gcr.io/metadata-proxy:v0.1.10
Signed-off-by: Jake Sanders <jsand@google.com>
2018-07-25 15:32:30 -07:00
Van Tu 2bce0cb164 Update configure-helper.sh to support heapster resource optimizations
In addition to the shell script changes the heapster yaml has been
updated to use addon resizer 1.8.3 for the heapster-nanny. Addon resizer 1.8.3
is being used to take advantage of the new minClusterSize flag. Note this is a
no-op change. The values specified for heapster-nanny reflect the current
configuration used with version 1.8.2.
2018-07-22 17:33:24 -04:00
Van Tu 8bd0a306b5 Templatize the scaling policy for metrics-server
Also update the metrics-server-nanny to use addon resizer 1.8.3 to leverage the
minSizeCluster command line flag. This is a no-op change.
2018-07-22 17:26:59 -04:00
Kubernetes Submit Queue 7bc860a691
Merge pull request #66157 from loburm/upgrade_event_exporter
Automatic merge from submit-queue (batch tested with PRs 66238, 66157). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Bump version of event-exporter.

```release-note
Bump event-exporter to 0.2.2 to pick up security fixes.
```
2018-07-18 08:46:59 -07:00
tanshanshan c8a4c65b95 Add NoSchedule and NoExecute tolerations to ip-masq-agent 2018-07-18 08:50:35 +08:00
yue9944882 8c55cb9450 set standard storage class addon mode to "ensure-exists" 2018-07-16 18:16:25 +08:00
Marian Lobur 3b8dfb38bb Bump version of event-exporter. 2018-07-13 13:20:58 +02:00
Zihong Zheng ea1829bfdc Bump cluster-proportional-autoscaler to 1.2.0 2018-07-11 18:01:15 -07:00
Kubernetes Submit Queue f682299b0f
Merge pull request #65919 from IvanovOleg/master
Automatic merge from submit-queue (batch tested with PRs 65794, 65919). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Incremented the elasticsearch version

**What this PR does / why we need it**:
Applies changes implemented in:
https://github.com/kubernetes/kubernetes/pull/65627

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```
NONE
```
2018-07-10 15:36:04 -07:00
Oleg Ivanov 7e814ec5cc Incremented the elasticsearch version 2018-07-06 22:00:51 +03:00
wojtekt 0cf4037714 Bump addon resizer image to 1.8.2 2018-07-05 14:48:58 +02:00
Kubernetes Submit Queue dc0afb24d1
Merge pull request #65381 from ostromart/istio-fix-latest-label
Automatic merge from submit-queue (batch tested with PRs 65381, 65751). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Change prometheus versions from latest to tag

**What this PR does / why we need it:**
Istio 0.8.0 yaml references Prometheus components at :latest tag. This affects reproducability and means some versions may not be security scanned.  
https://github.com/kubernetes/kubernetes/issues/65160
2018-07-03 06:16:03 -07:00
Kubernetes Submit Queue df09802b60
Merge pull request #65627 from IvanovOleg/master
Automatic merge from submit-queue (batch tested with PRs 64758, 65627). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fixed the wrong elasticsearch node counter

**What this PR does / why we need it**:
I am experiencing the nasty bug during the deployment of the elasticsearch-logging statefulset on my custom Kubernetes in Azure (AzureDisk persistant storage). Let's imaging that we want two master nodes which our elasticsearch will try to find during the discovery procedure. Because of the delay between creation of two nodes (azure disk creation) there will be a situation when only one node exists in the service endpoint list and it will be enough to pass the elasticsearch logging discovery step. Only one node will be written to the elasticsearch.yml, but it expects two. Elasticsearch will not be able to find required two nodes. Then Kubernetes will terminate the first pod while the second pod is almost ready (remove that endpoint from service). Then it adds the ip of the second pod to the endpoint and discovery fails as well. This is the endless procedure.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
Fixes the wrong elasticsearch node counter

```
2018-06-30 04:41:59 -07:00
Oleg Ivanov ad381d885d Fixed the wrong elasticsearch node counter 2018-06-29 23:03:04 +03:00
Kubernetes Submit Queue b9237462ac
Merge pull request #65474 from davidebelloni/patch-1
Automatic merge from submit-queue (batch tested with PRs 65319, 64513, 65474, 65601, 65634). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Enable “Kubernetes Monitoring” and “PodSecurityPolicies” on the same cluster

Without that the daemonset "metadata-agent" return:

```pods "metadata-agent-" is forbidden: unable to validate against any pod security policy: [spec.containers[0].securityContext.containers[0].hostPort: Invalid value: 8799: Host port 8799 is not allowed to be used. Allowed ports: []]```

```release-note
NONE
```
2018-06-29 12:15:12 -07:00
Davide Belloni d8d894ae11
Renamed with psp-binding suffix 2018-06-29 12:23:29 +02:00
Davide Belloni 957b6ff187
FIX removed file 2018-06-29 12:21:48 +02:00
Davide Belloni 54573a3505
bugfix separated files 2018-06-29 12:16:46 +02:00
Davide Belloni 7fe017f848
Moved under podsecuritypolicies directory 2018-06-29 12:15:54 +02:00
Kubernetes Submit Queue 90f681be10
Merge pull request #65589 from rajansandeep/scrapeport
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add prometheus scrape port to CoreDNS service

**What this PR does / why we need it**:
Add prometheus scrape port

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #https://github.com/kubernetes/kubeadm/issues/955

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-06-29 02:13:13 -07:00