64083a0576
Generate the clientset
2016-01-12 11:30:04 -08:00
22cfa5ea7e
build: move some of hack/lib/ into a new cluster/lib/
...
Some functionality in hack/lib is currently depended on by
cluster/common.sh so kube-up from the full release tar (which
does not include hack/) is currently broken. With this PR we
create cluster/lib/ and move the necessary bits from hack/
over to get kube-up working again.
Fixes: 96d1b8d1b2
2016-01-11 17:10:26 -08:00
7edbe09e59
Add new known flags and sort them
2016-01-06 21:09:20 -05:00
059c2aa799
Mitigate node out of disk status oscillation by delaying it.
...
Implement a flag that defines the frequency at which a node's out of
disk condition can change its status. Use this flag to suspend out of
disk status changes in the time period specified by the flag, after
the status is changed once.
Set the flag to 0 in e2e tests so that we can predictably test out of
disk node condition.
Also, use util.Clock interface for all time related functionality in
the kubelet. Calling time functions in unversioned package or time
package such as unversioned.Now() or time.Now() makes it really hard
to test such code. It also makes the tests flaky and sometimes
unnecessarily slow due to time.Sleep() calls used to simulate the
time elapsed. So use util.Clock interface instead which can be faked
in the tests.
2016-01-04 12:23:38 -08:00
a9b0696166
Update auto generated docs for kubelet
...
Add node-ip flag to know-flags.txt
2016-01-03 10:18:58 -08:00
da0ac31182
Set conntrack params in kube-proxy
...
Add flags to control max connections (set to 256k vs 64k default) and TCP
established timeout (set to 1 day vs 5 day default). Flags can be set to 0 to
mean "don't change it".
This is only set at startup, and not wrapped in a rectifier loop.
Tested manually.
2015-12-30 15:46:40 -08:00
728ed4bb83
Merge pull request #19142 from gmarek/grab-metrics
...
Auto commit by PR queue bot
2015-12-30 01:44:28 -08:00
7a2c33e323
contrib/mesos/scheduler: make debug handler for kubelet configurable
2015-12-29 14:39:59 +01:00
1df78a2398
Add a framework for multiple writers for various test data summaries
2015-12-29 10:26:44 +01:00
fec5206f1a
Merge pull request #13840 from nelcy/master
...
Auto commit by PR queue bot
2015-12-28 23:55:32 -08:00
2dcafa3854
Add a flag that will make test gather metrics from all running components after the test finishes.
2015-12-28 12:10:39 +01:00
fa76de79e5
Add support for flex volume. Flex volume adds support for thirdparty(vendor)
...
volumes and custom mounts.
2015-12-23 14:11:38 -08:00
d9f3607292
Implement multi-scheduler:
...
1. Name default scheduler with name `kube-scheduler`
2. The default scheduler only schedules the pods meeting the following condition:
- the pod has no annotation "scheduler.alpha.kubernetes.io/name: <scheduler-name>"
- the pod has annotation "scheduler.alpha.kubernetes.io/name: kube-scheduler"
update gofmt
update according to @david's review
run hack/test-integration.sh, hack/test-go.sh and local e2e.test
2015-12-22 10:49:40 +08:00
1562d84c96
Merge pull request #18628 from mikedanese/expose-master-count
...
Auto commit by PR queue bot
2015-12-19 12:42:05 -08:00
a09d85bd83
expose master count configuration in a cli option on apiserver
2015-12-18 13:10:41 -08:00
b838d8ce18
Add informers to deployment controller
2015-12-17 19:29:54 -08:00
5a579a2555
Merge pull request #16028 from derekwaynecarr/make_cmd
...
Auto commit by PR queue bot
2015-12-16 08:41:59 -08:00
5e0948586c
Add kubectl create [SUBCOMMAND] pattern
2015-12-14 13:43:45 -05:00
67e98fcfa8
executor, scheduler: make default pod roles configurable
...
Currently if a pod is being scheduled with no meta.RolesKey label
attached to it, per convention the first configured mesos (framework)
role is being used.
This is quite limiting and also lets e2e tests fail. This commit
introduces a new configuration option "--mesos-default-pod-roles" defaulting to
"*" which defines the default pod roles in case the meta.RolesKey pod
label is missing.
2015-12-14 15:18:39 +01:00
4fc1bf1f23
Added PersistentVolumeController
2015-12-11 10:33:30 -05:00
9bbe6012e3
Merge pull request #17683 from pwittrock/node_e2e_tests
...
Auto commit by PR queue bot
2015-12-09 12:50:22 -08:00
ca3524639d
Add .md and .yaml exceptions to verify-flags-underscore.py.
...
Also removed duplicated exception checks for file extensions.
2015-12-07 16:33:27 -08:00
47250d8b1b
Add exception for hack/jenkins/README.md
2015-12-07 15:32:18 -08:00
55d4f70f8e
Resource quota observes deletes faster
2015-12-03 17:35:05 -05:00
ad925dd2e8
Add verification to code gen
2015-12-02 14:14:49 -08:00
7644d34759
Merge pull request #15775 from mesosphere/sur-k8sm-482-resource-roles
...
Auto commit by PR queue bot
2015-12-01 05:36:52 -08:00
6ade0a1217
Add a tool for monitoring log generation rates
2015-11-30 16:04:48 +01:00
6b358e43dd
Merge pull request #17747 from saad-ali/fixErrorCreatingPDTry2
...
Refactor GCE wrapper library to allow execution from E2E test suite
2015-11-25 15:57:42 -08:00
42b200a0a0
Refactor GCE wrapper library to allow execution from E2E test suite
...
This reverts commit 147b6911f56fd986065b
2015-11-25 11:48:06 -08:00
9aa0efa393
Turn flannel off by default
2015-11-25 09:43:48 +01:00
ad2d3d4c20
Docs etc
2015-11-25 09:42:59 +01:00
ec5ecb18fa
Initial Pod e2e test
2015-11-24 15:40:16 -08:00
683e908f0a
Merge pull request #17265 from gambol99/rj/node_labels
...
Auto commit by PR queue bot
2015-11-24 06:55:31 -08:00
336c74710c
Merge pull request #17260 from pwittrock/node_e2e_tests
...
Auto commit by PR queue bot
2015-11-23 10:34:19 -08:00
9eae47c6e6
scheduler: implement role awareness
2015-11-23 17:27:14 +01:00
4cb0beeefd
Merge pull request #17392 from jlowdermilk/e2e-clean-slate
...
Auto commit by PR queue bot
2015-11-23 03:19:24 -08:00
c2526c93fa
- adding the -node-label flag to the kubelet which allows for a initial tagging / labelling of the node on cluster registration
...
- the labels can come from a series of key=pair value or file:///path_to_file which contains key pairs
2015-11-18 23:20:58 +00:00
49e1baa313
Test runner harness for node e2e tests
2015-11-18 13:05:01 -08:00
e95cf1d109
Delete orphaned namespaces at e2e start for soak tests
...
This will help prevent soak clusters getting hosed if a test is
interrupted without cleaning up resources.
2015-11-18 09:57:19 -08:00
e2c315ee99
modifying readFileContentInLoop to display iteratively file content and eventually check initial content
2015-11-14 22:52:34 +01:00
5e9fe7abff
Fix Kubemark tests by not gathering resource usage data
2015-11-09 11:45:07 +01:00
a6a64820d7
Make generation of the apply annotation optional
2015-11-06 15:08:50 -08:00
b3fde3beed
sort known flags
2015-11-03 15:15:56 -08:00
9b953d75d2
Merge pull request #16111 from mesosphere/sttts-sandbox-overlay
...
Auto commit by PR queue bot
2015-11-03 03:00:57 -08:00
4062e2be2f
Add executor sandbox overlay mechanism to distribute nsenter and socat
2015-11-03 11:27:40 +01:00
f2208a9855
Merge pull request #16269 from gmarek/delete-namespace
...
Auto commit by PR queue bot
2015-10-29 02:34:31 -07:00
0150d87a73
Add an option to not delete a namespace after e2e test
2015-10-27 09:23:50 +01:00
73713ce268
edit: Windows fixes
...
Contains the following fixes for Windows users of kubectl edit:
* Defaults to notepad as the default Windows editor
* Uses CRLF line endings
* Ensures a file lock is freed
2015-10-24 17:06:49 +02:00
edd10d8a83
Merge pull request #15914 from vishh/serialize-pull
...
make kubelet image pulls serialized by default.
2015-10-23 14:04:23 +02:00
29c2706ba0
Merge pull request #15797 from ArtfulCoder/udpTimeoutFlag
...
Auto commit by PR queue bot
2015-10-22 22:52:40 -07:00
0df4b46d4c
Adding a kubelet flag to optionally enable parallel image pulls.
2015-10-22 17:19:51 -07:00
d172ca6986
Added UdpIdleTimeout flag
2015-10-21 17:25:35 -07:00
d4de35e177
Merge pull request #15921 from brendandburns/fix2
...
Add a --expose flag to kubectl run
2015-10-21 13:17:26 -07:00
54fd60727e
add a --expose flag to kubectl run
2015-10-20 20:21:09 -07:00
2ff043e75f
Add ownership inspection to mount tester image
2015-10-19 18:42:07 -04:00
8105aa44a0
Implement kubectl autoscale
2015-10-19 09:59:22 -07:00
d3ca12f61b
Merge pull request #15053 from smarterclayton/stdin_once
...
Auto commit by PR queue bot
2015-10-17 00:03:32 -07:00
e12019c658
Merge pull request #15682 from smarterclayton/make_proxy_resync_longer
...
Auto commit by PR queue bot
2015-10-16 20:30:36 -07:00
e9a465d635
Make kubectl run attach behave like docker run
...
Have stdin closed by default, can be left open with --leave-stdin-open.
Add e2e tests for the behavior.
2015-10-16 20:33:51 -04:00
9440d17041
Proxy resync period should not be 30 seconds
2015-10-15 11:26:49 -04:00
7ef2a1b293
Merge pull request #15427 from brendandburns/controllerversion
...
Auto commit by PR queue bot
2015-10-15 05:38:33 -07:00
8c753c84eb
Merge pull request #15191 from caesarxuchao/validate-UID
...
Auto commit by PR queue bot
2015-10-15 04:20:24 -07:00
947a558320
Dynamically enable controllers based on what resources the server has.
...
Dynamically delete namespaces based on what resources the server has.
2015-10-14 15:53:19 -07:00
be0754750f
add common fields validation before updaing a resource; make the repair of malformed update request flippable by a flag.
2015-10-13 16:28:32 -07:00
69351e3e88
Expose kube-api burst/qps settings for kube components
...
Default to hardcodes for components that had them, and 5.0 qps, 10 burst
for those that relied on client defaults
Unclear if maybe it'd be better to just assume these are set as part of
the incoming kubeconfig. For now just exposing them as flags since it's
easier for me to manually tweak.
2015-10-12 11:56:15 -04:00
fa60bbe8e6
add flag to kubelet to ignore the cidr passed down by the apiserver on the master
2015-10-08 21:21:19 -07:00
df79026b79
Extend resyncPeriods in controllers in production.
2015-10-08 09:10:09 +02:00
123a5bd465
Merge pull request #13978 from jayunit100/api_server_append_13152
...
NodePort option: Allowing for apiservers behind load-balanced endpoint.
2015-10-06 20:09:03 -04:00
f4bbb32bd9
Merge pull request #15024 from mikedanese/expcontroller
...
enable all experimental controllers in controller-manager with one flag
2015-10-06 14:20:11 -07:00
be2a2ec3cd
NodePort apiserver option for exposing KubernetesMasterService NodePort on startup.
2015-10-05 20:34:25 -04:00
32b9d8aad0
Merge pull request #14823 from wojtek-t/move_events_to_separate_etcd
...
Move events to a separate etcd instance
2015-10-05 16:28:04 -07:00
833be48d61
enable all experimental flags with one controller
2015-10-05 14:54:19 -07:00
0b6bcab091
Merge pull request #15049 from Juniper/opencontrail-provisioning
...
Add opencontrail networking provisioning support in kubernetes via salt based provisioning
2015-10-05 14:40:11 -07:00
84f8f01d45
Merge pull request #14432 from mesosphere/sur-k8sm-492-launch-grace-period
...
MESOS make launchGracePeriod configurable
2015-10-05 13:27:12 -07:00
0f1cbe37a4
Events in separate etcd
2015-10-05 10:54:24 +02:00
d50d7763da
Add opencontrail networking provisioning support in kubernetes salt based provisioning
...
OpenContrail is an open-source based networking software which provides virtualization support for the cloud.
This change-set adds ability to install and provision opencontrail software for networking in kubernetes based cloud environment.
There are basically 3 components
o kube-network-manager -- plugin between contrail components and kubernets components
o provision_master.sh -- OpenContrail software installer and provisioner in master node
o provision_minion.sh -- OpenContrail software installer and provisioner in minion node(s)
These are driven via salt configuration files
One can provision opencontrail by just setting "export NETWORK_PROVIDER=opencontrail"
Optionally, OPENCONTRAIL_TAG, and OPENCONTRAIL_KUBERNETES_TAG can be used to
specify opencontrail and contrail-kubernetes software versions to install and provision.
Public-IP Subnet provided by contrail can be configured via OPENCONTRAIL_PUBLIC_SUBNET
environment variable
At this moment, plan is to add support for aws, gce and vagrant based platforms
For more information on contrail-kubernetes, please visit https://github.com/juniper/contrail-kubernetes For more information on opencontrail, please visit http://www.opencontrail.org
2015-10-03 08:03:02 -07:00
f3cfdb0ef7
Extended prediction algorithm in Initial Resource to use also namespace
2015-10-02 14:56:06 +02:00
42c84954fd
executor,scheduler: make launchGracePeriod configurable
2015-10-02 07:43:49 +02:00
e827934d78
Merge pull request #12677 from andronat/kubectl_doc_cmd
...
A new command to read types' description from Swagger - kubectl explain
2015-09-29 19:35:37 -07:00
b661cfd21e
Merge pull request #14643 from liguangbo/change_Oom_to_OOM
...
Auto commit by PR queue bot
2015-09-29 18:54:22 -07:00
12299087da
Change Oom to OOM
2015-09-28 18:18:04 +08:00
dd3bd73948
Initial Kubemark commit
2015-09-28 11:39:05 +02:00
e8b9dde623
new kubectl explain command
2015-09-26 14:25:53 +03:00
44b0bb1ae7
Merge pull request #14325 from mikedanese/podgc
...
add pod garbage collection
2015-09-25 11:24:01 -07:00
039acb8c1d
Merge pull request #14463 from nikhiljindal/DeploymentOnGCE
...
Allow enabling deployment controller on GCE and GKE
2015-09-25 13:47:36 +02:00
376faea1cf
add pod garbage collection
2015-09-24 22:47:53 -07:00
c449baea46
Remove ExpStorageVersion and Add StorageVersions to APIServer struct
2015-09-24 17:44:59 -07:00
ed5d24ed52
Allow enabling deployment controller on GCE and GKE
2015-09-24 11:37:16 -07:00
d3beca6f06
Merge pull request #14381 from dchen1107/fix
...
Flag controlled RLIMIT_NOFILE for kubelet.
2015-09-23 16:30:11 -07:00
5649939a36
Add new flag to flag file.
2015-09-22 15:18:34 -07:00
bd3cd82a12
Change kube-proxy flag: annotation for proxy-mode
...
This changes the --legacy-userspace-proxy flag to be a string flag
--proxy-mode. If specified, the flag will be respected ('userspace' and
'iptables' being valid values). If left blank (default) we will choose the
"best". best means userspace for now UNLESS the user adds an annotation
(net.experimental.kubernetes.io/proxy-mode) to their node, in which case we
will try to use that.
This allows people to try it on a single machine without fear of global failure
and without it getting rolled back on reboots. It is a poor-man's config blob.
2015-09-21 18:06:24 -07:00
c96c76b729
Merge pull request #13780 from smarterclayton/pod_logs
...
Auto commit by PR queue bot
2015-09-21 17:02:47 -07:00
c2e90cd154
Support extended pod logging options
...
Increase the supported controls on pod logging. Add validaiton to pod
log options. Ensure the Kubelet is using a consistent, structured way to
process pod log arguments.
Add ?sinceSeconds=<durationInSeconds>, &sinceTime=<RFC3339>, ?timestamps=<bool>,
?tailLines=<number>, and ?limitBytes=<number>
2015-09-21 15:39:32 -04:00
f21d9ac9e4
Support pods with containers using host ipc
...
Add a HostIPC field to the Pod Spec to create containers sharing
the same ipc of the host.
This feature must be explicitly enabled in apiserver using the
option host-ipc-sources.
Signed-off-by: Federico Simoncelli <fsimonce@redhat.com>
2015-09-18 21:13:39 +02:00
445fde3dc5
Merge pull request #13447 from pweil-/pid-mode
...
Auto commit by PR queue bot
2015-09-16 23:34:35 -07:00
65fbf5a5fb
Created netexec docker image
2015-09-15 19:05:03 -07:00
e0aeb1151b
Merge pull request #9870 from markturansky/recyc_config
...
Allow Volume Plugins to be configurable
2015-09-15 17:53:49 -07:00
ed80c2b940
pid mode
2015-09-15 13:51:44 -04:00
96a90f45c3
Allow disabling waiting for a service account in e2e tests
2015-09-15 12:49:49 -04:00
7bc55b5aea
configurable pv recyclers
2015-09-15 12:48:25 -04:00
c97b9db700
Adding a deploymentController
2015-09-14 18:39:46 -07:00
cb481b4a00
Merge pull request #13837 from brendandburns/kubectl2
...
Auto commit by PR queue bot
2015-09-11 17:18:29 -07:00
9ba13ff361
Address comments
2015-09-11 13:55:16 -07:00
5be8817315
Turning on pod autoscaler on GCE.
...
Implemented optional turning on of pod autoscaler in kube-up script for GCE.
2015-09-11 12:03:41 +02:00
44ce4aa423
Create a LB for a K8S with the LB-IP provided by user.
2015-09-10 21:05:06 -07:00
e7b9c50ba1
kubelet/rkt: add support for different stage1 image.
...
Also enable grace stop for service files.
2015-09-10 14:58:03 -07:00
a48f218264
Merge pull request #13754 from tummychow/labels-deps
...
Move util.StringSet into its own package
2015-09-10 13:10:54 -07:00
78ce5da988
Move util.StringSet into its own package
...
A lot of packages use StringSet, but they don't use anything else from
the util package. Moving StringSet into another package will shrink
their dependency trees significantly.
2015-09-10 12:04:15 -07:00
08442974bb
Revert "Turning on pod autoscaler on GCE."
2015-09-10 11:46:37 -07:00
b41862b670
Turning on pod autoscaler on GCE.
...
Implemented optional turning on of pod autoscaler in kube-up script for GCE.
2015-09-10 16:10:01 +02:00
fe0a7ae51a
Merge pull request #13740 from soltysh/fix_runtime_config_flag
...
Fixed passing RUNTIME_CONFIG flag
2015-09-09 17:15:30 -07:00
08aae94dea
Fixed passing RUNTIME_CONFIG flag, since currently it fails passing eg.
...
RUNTIME_CONFIG="experimental/v1=true" to the server.
2015-09-09 21:55:57 +02:00
1460a1fb9e
Rate limit events in kubelet
...
1. Add EvnetRecordQps and EventBurst parameter in kubelet.
2. If EvnetRecordQps and EventBurst was set, rate limit events in kubelet
with a independent ratelimiter as setted.
2015-09-09 16:57:21 +08:00
45742e885c
Merge pull request #13452 from aveshagarwal/master-api-rate-burst-remove
...
Auto commit by PR queue bot
2015-09-09 00:42:59 -07:00
cf908df89c
add flags for initial executor cpu and memory resources
2015-09-06 02:16:09 +00:00
e4fbfa9777
Merge pull request #13025 from pires/example_elasticsearch
...
Revamped Elasticsearch example
2015-09-04 12:28:17 -07:00
47af1a0c9b
Merge pull request #13421 from mesosphere/optout_pod_resource_constraints
...
MESOS: Add --contain-pod-resources flag to determine how k8s-mesos will contain pod resources
2015-09-04 13:43:22 +02:00
48b9c365c7
Merge pull request #13308 from timothysc/watch-cache-disable
...
Plumb through configuration option to disable watch cache
2015-09-04 13:40:46 +02:00
0a64995b7b
Revamped Elasticsearch example that now uses an Alpine Linux container with JRE 8u51 and Elasticsearch 1.7.1.
...
Replaced Go discovery mechanism for Elasticsearch discovery plug-in that supports Kubernetes.
2015-09-04 09:39:14 +01:00
a1cea8dd87
Flexible resource accounting and pod resource containment:
...
- new: introduce AllocationStrategy, Predicate, and Procurement to scheduler pkg
- new: --contain-pod-resources flag (workaround for docker+systemd+mesos problems)
- new: --account-for-pod-resources flag (for testing overcommitment)
- bugfix: forward -v flag from minion controller to executor
2015-09-04 00:49:13 +00:00
c9f2d3151b
Merge pull request #13155 from derekwaynecarr/enforce_limits
...
Map cpu limits to cpu-quota in docker run
2015-09-03 16:28:04 -07:00
d1c7a5f04e
Merge pull request #13362 from mesosphere/proxy-runtime
...
Auto commit by PR queue bot
2015-09-03 15:26:56 -07:00
f0d0e2a089
Remove unused api-rate and api-burst params.
2015-09-03 17:57:35 -04:00
5dc74e8dbf
Add support for CFS quota in kubelet
2015-09-03 13:44:28 -04:00
77e2d4f918
Merge pull request #13132 from piosz/initial
...
Implemented first version of InitialResources plugin.
2015-09-02 13:11:35 +02:00
f7bb05f58e
Merge pull request #13504 from Huawei-PaaS/fix_heapster_cadvisor_port
...
Fix a typo `-cadvisor_port` to `--cadvisor-port`
2015-09-02 12:13:49 +02:00
d2a0f2b66f
Fix a typo `-cadvisor_port` to `--cadvisor-port`
...
Where `-cadvisor_port` should be `--cadvisor-port`
2015-09-02 17:52:52 +00:00
7fbd290167
moved cgroup-root detection to minion service; kube proxy now configured to run in mesos container
2015-09-02 06:13:26 +00:00
7967642cf0
Implemented first version of InitialResources plugin.
2015-09-01 17:24:13 +02:00
de60651cc0
Merge pull request #12858 from MatMaul/master
...
Auto commit by PR queue bot
2015-08-30 21:46:50 -07:00
4a7115d272
Merge pull request #11955 from pedro-r-marques/flag_resolv_conf
...
Auto commit by PR queue bot
2015-08-30 21:03:54 -07:00
b6e355d2d3
Merge pull request #13142 from jszczepkowski/exp-flag
...
Auto commit by PR queue bot
2015-08-28 17:08:06 -07:00
8cf3d1a792
Merge pull request #13050 from mesosphere/minion-path
...
Auto commit by PR queue bot
2015-08-28 10:46:26 -07:00
2145371c45
Plumb through configuration option to disable watch cache
...
because we are seeing anomolies on our cluster.
2015-08-28 12:36:40 -05:00
cac58f6db7
Add --path-override to minion to change the PATH env var of subprocesses;
...
pass hostname-override through to kube-proxy (if defined)
2015-08-27 22:57:04 +00:00
99b1da848d
Add kubelet '--resolv-conf' flag.
...
Allow the user to specify the resolver configuration file that is used
to determine the default DNS parameters. This defaults to the system's
/etc/resolv.conf.
2015-08-26 15:41:36 -07:00
4caa5e80b1
Updated deprecated flags (address and port). Added an option to pass runtime-config.
2015-08-26 13:28:40 +02:00
57f18a0e04
Add a dockercfg_path parameter to the Mesos scheduler (the main purpose is to handle private repos auth).
...
This is implemented by copying the dockercfg file in the executor work directory.
2015-08-26 11:21:08 +02:00
2de49358ab
Added flags for horizontal pod autoscaler to controller-manager.
...
Added flags for horizontal pod autoscaler to controller-manager.
2015-08-25 17:28:17 +02:00
03f4e52812
Make verify-flags-underscore.py return error on failure
...
We were running it in shippable and travis, but since it didn't return
an error it wasn't actually catching things.
2015-08-24 22:12:17 -05:00
a09425d828
Merge pull request #10933 from andronat/swagger_auto_type_docs
...
Automatic Generation of Swagger Documentation in Types
2015-08-24 10:35:58 -07:00
30a1fb06c7
Merge pull request #10957 from yifan-gu/oidc
...
plugin/pkg/auth: add OpenID Connect token authenticator
2015-08-21 18:51:04 -07:00
9f21ae21e8
swagger type documentation generator
2015-08-22 02:26:03 +02:00
0a8291505a
Merge pull request #9234 from ZJU-SEL/fix-e2e-test-hostdir
...
fix e2e hostdir test
2015-08-21 15:51:42 -07:00
6376e41850
plugin/pkg/auth: add OpenID Connect token authenticator.
...
Also add related new flags to apiserver:
"--oidc-issuer-url", "--oidc-client-id", "--oidc-ca-file", "--oidc-username-claim",
to enable OpenID Connect authentication.
2015-08-21 15:27:08 -07:00
81ab51709a
Add --cleanup-iptables flag to kube-proxy
...
Adds a flag to cleanup iptables rules created by kube-proxy per
https://github.com/mesosphere/kubernetes-mesos/issues/353#issuecomment-1
27382832
2015-08-21 14:44:11 -04:00
3df1b9e151
Merge pull request #12986 from BenTheElder/masquerade_all_flag
...
Add flag to masquerade all in kube-proxy when using iptables proxier
2015-08-21 10:28:07 +02:00
1a18588a60
Merge pull request #12960 from smarterclayton/network_tester
...
Auto commit by PR queue bot
2015-08-20 22:44:30 -07:00
1f2076ce64
Add flag to masquerade all in kube-proxy when using iptables proxier
2015-08-20 20:12:32 -04:00
b6b8e99393
External IPs support.
2015-08-20 16:10:01 -07:00
9b01580946
Merge pull request #12872 from runningwild/master
...
Fix several problems with using rkt on gce
2015-08-20 15:46:16 -07:00
9ee7b76bba
Allow testing graceful shutdown via network-tester
2015-08-19 22:06:37 -04:00
faeb45d69f
fix host dir, to test volume r/w with different containers within a pod
...
Signed-off-by: He Simei <hesimei@zju.edu.cn>
2015-08-20 08:55:19 +08:00
8a43bd621e
Merge pull request #12745 from eparis/even-less-dash-false-positive
...
verify-flags-underscore.py: Even fewer dash false positives
2015-08-19 17:03:29 -07:00
d42864b0ad
Merge pull request #12112 from JanetKuo/update-kubectl-get-pods-running
...
Hide terminated pods in 'kubectl' Printer by default
2015-08-19 12:51:18 -07:00
80e799fc0c
Allow configuring the rkt binary in a kubelet with a flag.
...
This is necessary because coreos comes with rkt installed, and if we want to use a different version
we need some way to avoid the default one.
2015-08-19 09:42:13 -04:00
08e6a43c1d
Revert "Merge pull request #9165 from smarterclayton/graceful"
...
This reverts commit 4f856b595dd78525a83b
2015-08-18 17:34:49 -07:00
44a7a52a94
Hide failed/succeeded pods in 'kubectl get pods' by default
2015-08-18 13:47:19 -07:00
adc97bf936
Conversions
2015-08-18 09:08:45 -04:00
ca310ffdac
Sort output from hack/verify-flag-underscore.py
...
So we get some consistency and readability to the exceptions.txt
2015-08-17 11:32:18 -07:00
b432f036db
verify-flags-underscore.py: ignore juju variables
2015-08-17 11:19:32 -07:00
f3fd2e1028
verify-flags-underscore.py: ignore if trailed by :
...
These are often yaml definitions, and thus not usages of kubernetes
flags. Not necessarily always, but usually.
2015-08-17 11:19:32 -07:00
d1ba0bb692
verify-flags-underscore.py: ignore salt grains
2015-08-17 11:19:31 -07:00
d7f9477a94
verify-flags-underscore.py: exclude salt variable which look like flags
2015-08-17 11:19:31 -07:00
7f96f9312b
verify-flags-underscore.py: ignore 'flags' that look like bash variables
...
We ignore bad 'flags' if they are proceeded by $ or { as these are
likely bash variables and not in fact bad flag usage.
2015-08-17 11:19:31 -07:00
055d648ed7
Change log_flush_frequency to use -
...
Since we have the rename, we don't need our declaration to look like
glog's.
2015-08-17 11:19:31 -07:00
c560f41a4b
Update docs which were incorrectly using _ in flag names
...
Each of these was verified that the actual flag declaration correctly
used -
2015-08-17 11:18:43 -07:00
68716c7712
verify-flags-underscore.py: Remove contrib/ exceptions
...
As contrib was removed.
2015-08-17 11:08:24 -07:00
fa40ced8f8
move contrib/for-tests to test/images
2015-08-14 20:42:46 -07:00
56f6ad0c01
Specifically exclude some flag definitions in verify-flag-underscore.sh
...
We know there are some flags (declared with an _) which we wish to
ignore. These flags are used by container definitions, e2e, etc. By
explicitly ignoring those flags we can cut the amount of noise in the
whitelist.
2015-08-14 14:11:02 -04:00
30d34d0e59
Reduce false positives with verify-flag-underscore.sh by updating regex
...
Check to make sure there is not an alphanumeric character immeditely
before or after the 'flag'. It there is an alphanumeric character then
this is obviously not actually the flag we care about. For example if
the project declares a flag "valid-name" but the regex finds something
like "invalid_name" we should not match. Clearly this "invalid_name" is
not actually a wrong usage of the "valid-name" flag.
2015-08-13 21:06:39 -04:00
c6a5b43df1
Update flag-dash whitelist
...
PRs older than the verifier landed in HEAD. So update the whitelist
2015-08-13 17:43:00 -04:00
d8a60d2271
Merge pull request #12623 from thockin/proxy-ipt
...
Auto commit by PR queue bot
2015-08-13 13:10:39 -07:00
776132e1ae
Make kube-proxy iptables sync period configurable
2015-08-13 09:53:32 -07:00
937db3f70d
Keystone authentication plugin
2015-08-13 09:46:30 -07:00
99b8df1812
Add field based sorting to the kubectl command line.
2015-08-12 16:51:36 -07:00
f54098fe00
Verify all flag usage does not use _
...
This works by defining two 'static' lists in hack. The first is the list
of all flags in the project which use a `-` or an `_` in their name. All
files being processed by verify-flags-underscore.py (or all files in the
repo if no filename arguments are given) will be searched for flag
declaration using a simple regex. Its not super smart. If a flag is
found which is not in the static list it will complain/reject the commit
until a human adds it to the list. If we do not keep a static list of
flags it takes >.2 seconds to find them 'all' at runtime. Since this is
run in pre-commit saving every part of a second helps.
After it finds all of the flags it runs all of the arguments (or all
files in repo if no arguments) looking for usage of those flags which
includes an `_`. There are lots of places where these are false
positives. For example we have a flag named oom-adj-score but the kernel
calls it oom_adj_score. To handle this we keep a second 'whitelist' of
lines which are allowed to use these flag names with an `_`.
Running the entire git repo looking for flags in every golang file and
looking in every single file for bad usage takes about 8.75 seconds.
Running it in the precommit hook where we only check things that changed
takes about .06 seconds.
2015-08-12 16:17:02 -04:00
Chao Xu