Commit Graph

8422 Commits (92b2e906d7aa618588167817feaed137a44e6d92)

Author SHA1 Message Date
Mike Danese 4edec1f3be cluster/gce: fix unset variable when insecure port is enabled 2019-05-16 19:47:11 -07:00
Lantao Liu bc1a78d31e Support using docker containerd in COS and Ubuntu on GCE.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-05-16 13:53:57 -07:00
Peter Hornyack 5c32b4bbb2 Windows GCE nodes: pull infra/pause container image during node setup 2019-05-16 11:45:56 -07:00
chaowang 9ba0d47465
Remove deprecated Kubelet security controls
Change-Id: I9f770e6780b60e881092690f6f177d726f474fe3
2019-05-16 13:33:52 -04:00
Kubernetes Prow Robot f8d2b6b982
Merge pull request #77918 from mborsz/coredns
Make dns memory limit configurable
2019-05-16 08:49:08 -07:00
Jake Sanders db6eff7378
remove zmerlynn@ from cluster/gce/OWNERS
Your watch has ended.
2019-05-15 18:47:28 -07:00
yankaiz 14015d9ce1 Add 198.51.100.0/24 to non-masq ranges.
Groupped the IP ranges by RFC and type.

Change reference for 198.18.0.0/15 from RFC 2544 to RFC 6815.
2019-05-15 16:23:41 -07:00
Yu-Ju Hong abed7cc0a9 GCE/Windows: add instructions about stackdriver logging in README
Setting LOGGING_STACKDRIVER_RESOURCE_TYPES ensures that the both Linux
and Windows nodes send logs to the same resources with the same tags.
2019-05-15 11:59:37 -07:00
Yuwen Ma 454460f875 Bump metrics-server to v0.3.3 2019-05-15 11:44:45 -07:00
Peter Hornyack 5d669f2946 Use CNI plugins v0.8.0 release. 2019-05-15 10:59:46 -07:00
Kubernetes Prow Robot 4d3d153210
Merge pull request #77904 from mborsz/revert-76396-reapply-75624
Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers."
2019-05-15 07:06:41 -07:00
Maciej Borsz 59af63c687 Make coredns memory limit configurable 2019-05-15 13:35:28 +02:00
Kubernetes Prow Robot 47cef03dab
Merge pull request #77748 from yuwenma/etcd-release
Update etcd* version to use latest released images.
2019-05-15 00:04:35 -07:00
Maciej Borsz 9da7db76b7
Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers." 2019-05-15 08:31:19 +02:00
Pavithra Ramesh e1748407a5 Doc changes for nodelocaldns graduating to beta 2019-05-14 14:01:33 -07:00
Kubernetes Prow Robot d6c8edd391
Merge pull request #77690 from MrHohn/CPVA-0.7.0
Bump cluster-proportional-vertical-autoscaler to 0.7.1
2019-05-14 07:17:21 -07:00
Kubernetes Prow Robot 2c67fb397d
Merge pull request #77358 from yuwenma/node-termination-handler
Updated gce node-termination-handler yaml.
2019-05-13 18:25:09 -07:00
Yuwen Ma 1f0f050fde Update etcd* version to use latest released images. 2019-05-13 17:28:40 -07:00
Zihong Zheng 66086c32cf Bump cluster-proportional-vertical-autoscaler to 0.7.1 2019-05-13 13:22:27 -07:00
Marian Lobur 60e5717f4f Bump image of event-exporter.
Image has a new base image that have some security issue fixes.
2019-05-13 16:27:25 +02:00
Kubernetes Prow Robot 222ced7d20
Merge pull request #77642 from mm4tt/chunk_size
Revert #77552 now the actual fix #77580 got merged
2019-05-13 05:02:33 -07:00
Kubernetes Prow Robot 5d9d5bca79
Merge pull request #77765 from coffeepac/es-6.7.2
upgrade elasticsearch for vuln handling
2019-05-11 17:20:10 -07:00
Kubernetes Prow Robot b6c53beed5
Merge pull request #72667 from jeefy/update-dashboard-owners
Update OWNERS so it isn't single threaded.
2019-05-11 00:46:12 -07:00
Kubernetes Prow Robot 1c18c3263a
Merge pull request #77386 from SataQiu/fix-shellcheck-20190503
Fix shellcheck failures of cluster/gce/upgrade-aliases.sh
2019-05-10 21:30:24 -07:00
Kubernetes Prow Robot 5669014f52
Merge pull request #76854 from ialidzhikov/update-images
Update gem versions
2019-05-10 19:28:24 -07:00
Patrick Christopher 65fcbf4afb upgrade elasticsearch for vuln handling 2019-05-10 16:57:17 -07:00
Kubernetes Prow Robot 91069c0260
Merge pull request #77689 from MrHohn/CPA-1.6.0
Bump cluster-proportional-autoscaler to 1.6.0
2019-05-10 16:32:49 -07:00
Kubernetes Prow Robot 5184b866d6
Merge pull request #77424 from MrHohn/gce-manifest-owners
Add OWNERS file for gce/manifests
2019-05-09 20:13:57 -07:00
Kubernetes Prow Robot a3f8e95f68
Merge pull request #77607 from dekkagaijin/mip
when disabled, don't create the API server's insecure port mapping
2019-05-09 17:52:10 -07:00
Jake Sanders 2576713a40 when disabled, don't create the API server's insecure port mapping 2019-05-09 11:50:59 -07:00
Zihong Zheng beba9921aa Bump cluster-proportional-autoscaler to 1.6.0 2019-05-09 11:25:12 -07:00
Matt Matejczyk b4a8beb037 Revert #77552 now the #77580 has been merged
The https://github.com/kubernetes/kubernetes/pull/77552 was a temporary workaround that is no longer needed now as https://github.com/kubernetes/kubernetes/pull/77580 got in.
2019-05-09 09:03:34 +02:00
Kubernetes Prow Robot bec5345cc6
Merge pull request #77569 from yuwenma/patch-5
Bump metrics-server version to v0.3.3
2019-05-08 20:13:13 -07:00
Zihong Zheng e6287c61e6 Add OWNERS file for gce/manifests 2019-05-08 17:39:23 -07:00
Kubernetes Prow Robot 5bd88c85bf
Merge pull request #77568 from yujuhong/catch-exception
GCE/Windows: ignore stopping errors for stackdriver
2019-05-08 17:15:38 -07:00
Kubernetes Prow Robot df117c7625
Merge pull request #73637 from ramnar/branch_bug_fix
Removes deprecated label kubernetes.io/cluster-service in yaml files of kubernetes add-ons. Bug fix #72757
2019-05-08 14:31:51 -07:00
Kubernetes Prow Robot 5277e4a11a
Merge pull request #77552 from mm4tt/chunk_size
Add --chunk-size=0 to disable pagination when listing nodes.
2019-05-07 23:38:44 -07:00
Kubernetes Prow Robot 0befec7fb6
Merge pull request #77447 from dekkagaijin/mip
disable the apiserver's insecure port by default
2019-05-07 22:14:32 -07:00
Kubernetes Prow Robot b34d7ac0ce
Merge pull request #77458 from grayluck/agent-v2.3.0
Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
2019-05-07 17:52:58 -07:00
Yuwen Ma 7f629b6921
Bump metrics-server version to v0.3.3 2019-05-07 17:44:23 -07:00
Yu-Ju Hong eadacaf058 GCE/Windows: ignore stopping errors for stackdriver 2019-05-07 17:17:34 -07:00
Kubernetes Prow Robot dca61deaf9
Merge pull request #77029 from StevenACoffman/patch-1
Update k8s.gcr.io/k8s-dns-node-cache image version
2019-05-07 14:31:02 -07:00
Matt Matejczyk cb223dab04 Add --chunk-size=0 to disable pagination when listing nodes.
Otherwise the default of 500 is used which started breaking large
cluster tests, e.g.
https://prow.k8s.io/view/gcs/kubernetes-jenkins/logs/ci-kubernetes-e2e-gce-scale-performance/1125672232488538115
2019-05-07 17:34:31 +02:00
yankaiz 1059a71973 Bump ip-masq-agent version to v2.3.0. Enable nomasq for reserved IPs.
Added the non-masq ranges to configure-helper.sh so that GCE clusters
will have the non-masq IP ranges aligned with GKE clusters.
2019-05-06 22:32:34 -07:00
Kubernetes Prow Robot e1d40da0df
Merge pull request #76396 from yuwenma/reapply-75624
[Re-Apply][Distroless] Convert the GCE manifests for master containers.
2019-05-06 21:31:39 -07:00
Jake Sanders e4d521e825 disable the apiserver insecure port by default in configure-helper 2019-05-06 19:26:57 -07:00
Jake Sanders ff4c372eaa ensure that kubectl works when the master insecure port is disabled 2019-05-06 19:25:41 -07:00
Kubernetes Prow Robot 6027a38e78
Merge pull request #77282 from MrHohn/addon-manager-9.0.1
Bump addon-manager to v9.0.1
2019-05-06 14:01:52 -07:00
Yuwen Ma 53bace16df Updated gce node-termination-handler yaml. 2019-05-06 11:29:47 -07:00
Yuwen Ma b8a8bdb127 [Distroless] Convert the GCE manifests for master containers.
* Touched containers: kube-apiserver, kube-scheduler,
kube-controller-manager.
* Remove the shell dependencies when upstart the containers.
* Reformat the command parameters to ["Exec", "Param1", "Param2"]
2019-05-06 08:04:06 -07:00
Kubernetes Prow Robot 5f8d290346
Merge pull request #75675 from mwwolters/addon-manager-kubeconfig
Added function to create kubeconfig for addon-manager
2019-05-03 22:17:51 -07:00
Kubernetes Prow Robot c3ebf67c63
Merge pull request #77414 from yujuhong/fix-sd-logging
GCE/Windows: send container logs to the proper resource
2019-05-03 19:50:15 -07:00
Kubernetes Prow Robot 8b0c36d620
Merge pull request #77328 from varunmar/ip-masq-cve-fix
Bump the version of the ip-masq-agent addon to pick up CVE fixes
2019-05-03 18:26:28 -07:00
Mark Wolters 1456979e93 Added function to create kubeconfig for addon-manager 2019-05-03 15:12:16 -07:00
Kubernetes Prow Robot dbad8f360c
Merge pull request #77357 from dekkagaijin/md-proxy-bump
Bump metadata-proxy image to v0.1.12
2019-05-03 15:11:52 -07:00
Yu-Ju Hong 9f65407833 GCE/Windows: send container logs to the proper resource
This PR fixes a bug where all container logs are sent to the "k8s_node"
resource by adding a "match" directive that applies only to container
logs.
2019-05-03 11:32:19 -07:00
Kubernetes Prow Robot eb41c9c5fc
Merge pull request #77369 from immutableT/remove-enc-from-kube-up
Remove the option of encrypting secrets in etcd via a locally stored key.
2019-05-03 02:56:29 -07:00
SataQiu 2ba0231670 fix shellcheck failures of cluster/gce/upgrade-aliases.sh 2019-05-03 17:01:15 +08:00
Kubernetes Prow Robot 6a23a6278f
Merge pull request #77378 from yujuhong/kill-sd
GCE/Windows: force kill the stackdriver processes when necessary
2019-05-02 20:20:17 -07:00
Yu-Ju Hong bee570a2f0 GCE/Windows: force kill the stackdriver processes when necessary
StackdriverLogging service sometimes cannot be stopped properly. This
work around the bug by force killing the processes.
2019-05-02 18:52:31 -07:00
Kubernetes Prow Robot 0b10d1b830
Merge pull request #77140 from dekkagaijin/glbc
use static token to authenticate glbc
2019-05-02 16:22:30 -07:00
Kubernetes Prow Robot 83f769c2a3
Merge pull request #77139 from cmluciano/cml/ingressnetv1beta1default
ingress: use networking api group for default storage of ingress
2019-05-02 16:22:18 -07:00
immutablet 1ae9cb2f88 Remove encryption via locally stored key. 2019-05-02 15:09:02 -07:00
Jake Sanders 0b6eb2bf89
Bump metadata-proxy image to v0.1.12
Rebases the image on `gcr.io/distroless/static:latest` per kubernetes/enhancements#900

https://github.com/GoogleCloudPlatform/k8s-metadata-proxy/releases/tag/v0.1.12
2019-05-02 11:57:52 -07:00
Kubernetes Prow Robot d2ce69d9ad
Merge pull request #76762 from serathius/fluentd-gcp-scaler-0-5-2
Pick up security patches for fluentd-gcp-scaler by upgrading to version 0.5.2
2019-05-02 07:00:26 -07:00
Jake Sanders 8bd0b45eae use static token to authenticate glbc 2019-05-01 22:24:48 -07:00
Kubernetes Prow Robot 206eb91c15
Merge pull request #77035 from chardch/fix-device-plugin
Fix a bug in the gpu device plugin
2019-05-01 22:10:17 -07:00
Kubernetes Prow Robot ef99b770f5
Merge pull request #76525 from yuwenma/patch-4
Rebase etcd-empty-dir-cleanup to debian-base
2019-05-01 18:42:17 -07:00
Varun Marupadi d4443fef81 Bump the version of the ip-masq-agent addon to pick up CVE fixes
This is related to the same CVE fixes in PR #75845

The CVEs are in the dependencies of ip-masq-agent -
debian-base bump at: https://github.com/kubernetes-incubator/ip-masq-agent/pull/31
debian-iptables-amd64 bump at: https://github.com/kubernetes-incubator/ip-masq-agent/pull/30
2019-05-01 18:26:27 -07:00
Christopher M. Luciano 4bac85c162
ingress: use networking api group for default storage of ingress
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>

The change to registrytest was found by liggitt to mitigate a NPE error.
This is necessary since ingress is a cohabitating resource that is not
stored in the default version for the networking resource.

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
2019-05-01 15:14:11 -04:00
Steve Coffman 7f30be79b3 Update k8s-dns-node-cache image version
This revised image resolves kubernetes dns#292 by updating the image from `k8s-dns-node-cache:1.15.2` to `k8s-dns-node-cache:1.15.2`
2019-05-01 13:38:42 -04:00
ialidzhikov becbed87f1 Update gem versions
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-05-01 20:13:31 +03:00
Zihong Zheng 037d4b3a07 Bump addon-manager to v9.0.1
- Rebase image on debian-base:v1.0.0.
2019-04-30 15:19:08 -07:00
Kubernetes Prow Robot 31d36d865c
Merge pull request #77172 from ialidzhikov/remove-cluster-service-label
Clean up cluster-service label from fluentd-elastic
2019-04-30 09:21:41 -07:00
Kubernetes Prow Robot 62020ebe38
Merge pull request #77224 from qingling128/master
Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8 to fix segmentation fault bug.
2019-04-29 21:33:35 -07:00
Kubernetes Prow Robot 4ebe11a6cb
Merge pull request #76110 from DirectXMan12/infra/prune-owners
Prune directxman12 from metrics/autoscaling OWNERS
2019-04-29 14:35:36 -07:00
Ling Huang d3fb7115ab Upgrade Stackdriver Logging Agent addon image from 1.6.0 to 1.6.8. 2019-04-29 15:07:10 -04:00
Kubernetes Prow Robot 855c291cb8
Merge pull request #76858 from SataQiu/fix-cluster-clientbin-20190420
Fix shellcheck failures of cluster/clientbin.sh
2019-04-29 07:46:22 -07:00
Kubernetes Prow Robot 9b437f9520
Merge pull request #76909 from Huang-Wei/fix-iks-kubemark
kubemark: fix and enhance kubemark scripts for IKS
2019-04-29 06:30:23 -07:00
ialidzhikov 5fc1bcba3f Clean up cluster-service label from fluentd-elastic
Signed-off-by: ialidzhikov <i.alidjikov@gmail.com>
2019-04-27 22:52:01 +03:00
Wojciech Tyczynski 0d77f62c02
Revert "override ETCD_SERVER with https instead http when mTLS is enabled" 2019-04-27 06:50:20 +02:00
Wei Huang fbec01dc71
kubemark: fix and enhance kubemark scripts for IKS
- fix shell script issues
  - `bx` is deprecated; rename to `ibmcloud`
  - remove unnecessay variable replacement in hollow-node_template.yaml
  - add replacement logic for HOLLOW_KUBELET_TEST_ARGS and HOLLOW_PROXY_TEST_ARGS
  - don't hardcode KUBEMARK_IMAGE_REGISTRY to brandondr96
- make cluster number and spec configurable
  - make number and spec of workers configurable
  - separate NUM_NODES and KUBEMARK_NUM_NODES
2019-04-26 10:15:29 -07:00
SataQiu aacab2ee75 fix shellcheck failures of cluster/clientbin.sh 2019-04-26 18:43:33 +08:00
Krzysztof Siedlecki 862662f49e removing quotation marks 2019-04-26 00:25:58 +02:00
Kubernetes Prow Robot f043e49a93
Merge pull request #77050 from joelsmith/master
Fix link for resource metrics pipeline
2019-04-25 04:35:21 -07:00
Joel Smith f55ebc6129 Fix link for resource metrics pipeline
See https://github.com/kubernetes/website/pull/12934
2019-04-24 22:38:48 -06:00
Richard Chen 2c681334c2 Fix a bug in the gpu device plugin where not all devices were registered.
Refer to https://github.com/GoogleCloudPlatform/container-engine-accelerators/pull/110
2019-04-24 18:02:00 -07:00
Kubernetes Prow Robot 2c2e7a01bb
Merge pull request #76655 from SataQiu/fix-shell-cluster-20190417
Fix shellcheck failures of cluster/gce/gci/shutdown.sh
2019-04-23 23:50:04 -07:00
Kubernetes Prow Robot c669b216dd
Merge pull request #76958 from yujuhong/docker-logs
GCE/Windows: Configure Docker to rotate container logs
2019-04-23 20:28:12 -07:00
Kubernetes Prow Robot 06bc7e3e00
Merge pull request #76792 from dekkagaijin/insecure-port
add option to disable the apiserver's insecure port via env var
2019-04-23 14:02:35 -07:00
Kubernetes Prow Robot 0df8b10557
Merge pull request #76786 from dekkagaijin/master
add additional approvers from GKE
2019-04-23 14:02:23 -07:00
Yu-Ju Hong 6e12de0744 GCE/Windows: Configure Docker to rotate container logs 2019-04-23 11:53:16 -07:00
Kubernetes Prow Robot 888b81b638
Merge pull request #76238 from Dieken/30s-ttl-for-coredns
change default 5s ttl to 30s for coredns to be same with kube-dns/dnsmasq
2019-04-23 06:20:09 -07:00
Kubernetes Prow Robot a961c13db5
Merge pull request #76640 from george-angel/master
update k8s.gcr.io/k8s-dns-node-cache image version
2019-04-22 14:38:02 -07:00
Kubernetes Prow Robot aa11d0edef
Merge pull request #76850 from yujuhong/sd-agent
GCE/Windows: enable stackdriver logging agent
2019-04-22 13:18:03 -07:00
SataQiu 903c5a53b3 fix shellcheck failures of cluster/gce/gci/shutdown.sh 2019-04-22 11:46:45 +08:00
aaa c4898d6f56 fix shellcheck failures list-resources.sh
update pull request

update pull request

update pull request
2019-04-21 18:17:44 -04:00
Kubernetes Prow Robot 31903e644b
Merge pull request #76152 from SataQiu/fix-shell-cluster-20190404
Fix some shellcheck failures of cluster/*.sh
2019-04-19 18:59:41 -07:00
Yu-Ju Hong 4cd2625719 GCE/Windows: enable stackdriver logging agent
This change bumps the stackdriver logging agent version to v1-9,
re-enable it, and change the script/configuration to:
  * Create /var/log in the startup script, since the fluentd
    configuration expects the directory to exists
  * Add support for collecting kubelet/kube-proxy logs
2019-04-19 15:41:48 -07:00
Yu-Ju Hong 05074e9dde GCE/Windows: add cluster-location to instance metadata
This will be used by stackdriver to annotate the logs.
2019-04-19 15:41:48 -07:00