Commit Graph

2612 Commits (98fa2c7d32e59f798ff4201dfdcb439554392beb)

Author SHA1 Message Date
Maciej Borsz afeabe99b7 Fix typo in create-heapster-node 2019-02-01 11:04:23 +01:00
Kubernetes Prow Robot 244795a06a
Merge pull request #73442 from pjh/gce-windows-cluster
Update cluster/gce/ scripts to support Windows nodes.
2019-01-31 18:20:37 -08:00
Kubernetes Prow Robot 46fc4dd96a
Merge pull request #73577 from wojtek-t/remove_vmodule
Remove vmodule from apiserver to reduce lock contention
2019-01-31 04:59:42 -08:00
wojtekt 3032d92736 Remove vmodule from apiserver to reduce lock contention 2019-01-31 10:53:44 +01:00
Peter Hornyack f0f7829934 Update cluster/gce scripts to support Windows nodes. 2019-01-30 19:49:07 -08:00
Matt Matejczyk 12904ac911 Tune suggested master disk sizes for big clusters.
Looks like the get-master-root-disk-size() and get-master-disk-size() functions didn't anticipate
clusters bigger than 2K nodes.

In https://github.com/kubernetes/kubernetes/issues/72976 we found out
that 100GB may be not enough for large clusters (5K nodes) when it comes
to master root disk size.

Updating both get-master-root-disk-size() and get-master-disk-size() to
make them consistent and match cluster sizes with get-master-size()
function.
2019-01-29 10:48:08 +01:00
Kubernetes Prow Robot d306d68a36
Merge pull request #72978 from liggitt/addon-changelog
Update addon-manager changelog/image
2019-01-24 16:30:00 -08:00
Kubernetes Prow Robot c21f60f862
Merge pull request #73268 from wojtek-t/better_scale_inflights
Better scale max-inflight request limits to correlate them with master VM size
2019-01-24 10:37:25 -08:00
wojtekt d911ebbc3f Correlate max-inflight values in GCE with master VM sizes 2019-01-24 15:13:36 +01:00
Yu-Ju Hong 2edd3e3f52 GCE: add yujuhong to OWNERS 2019-01-23 14:46:29 -08:00
Kubernetes Prow Robot 0713f29c28
Merge pull request #72062 from jpbetz/gce-logrotate-check-interval
Perform GCE master log rotation check every 5 minutes
2019-01-16 14:45:22 -08:00
Jordan Liggitt df97217f7f Update addon-manager changelog/image 2019-01-16 13:26:39 -05:00
Kubernetes Prow Robot d95b9f16d1
Merge pull request #70144 from wenjiaswe/etcdKasTls
Add mTLS encription between etcd and kube-apiserver in GCE
2019-01-16 02:51:06 -08:00
Tim Allclair 485b21e8cb Fix kube-proxy PodSecurityPolicy RoleBinding namespace 2019-01-09 17:57:15 -08:00
Wenjia Zhang c17233c41c add mTLS encription between etcd and kube-apiserver in GCE 2019-01-07 13:52:20 -08:00
Kubernetes Prow Robot 9cdfdba14c
Merge pull request #71924 from yujuhong/node-binaries
GCE: enable downloading and staging of the node binaries
2018-12-28 18:07:26 -08:00
Han Kang e9a39533c3 fail faster for readiness checks 2018-12-27 16:17:02 -08:00
Joe Betz 1ba05d51a6 Perform GCE log rotation check every 5 minutes 2018-12-18 10:13:41 -08:00
Kubernetes Prow Robot cf813b247d
Merge pull request #71977 from rramkumar1/kube-dns-ordering
DNS service ordering for addon manager
2018-12-18 01:47:49 -08:00
wojtekt fc346b2086 Allow for configuring etcd servers addresses in kubemark 2018-12-13 11:50:49 +01:00
Rohit Ramkumar bc44940835 Modify dns addons dir to prepend 0 on dir name. Ensures proper ordering upon creation by addon manager 2018-12-12 13:15:08 -08:00
Yu-Ju Hong f87fcf6ce8 GCE: enable downloading and staging of the node binaries
Currently, only kubernetes-server-linux-<arch>.tar.gz will be downloaded
and staged for tests. It is not possible to test a cluster where the
platform/arch of the nodes differs from that of the master
control-plane. This changes allows downloading and staging node
binaries, in addition to the existing server binaries.
2018-12-10 16:58:44 -08:00
Matt Brannock d99422884b Create managed instance groups for nodes in parallel 2018-12-04 13:56:52 -08:00
Kubernetes Prow Robot a9b69dc381
Merge pull request #71615 from jpbetz/etcd-3.3.10-0-image
Update default etcd server to 3.3.10 for kubernetes 1.14
2018-12-04 02:54:34 -08:00
Joe Betz 862b945e5a Update default etcd server to 3.3.10 for kubernetes 1.13 2018-12-03 11:03:49 -08:00
Zhen Wang 29de74375a Use Node-Problem-Detector v0.6.0 2018-11-28 11:44:36 -08:00
Łukasz Osipiuk 6db2483e0b Update Cluster Autoscaler version to 1.13.0 2018-11-28 16:06:18 +01:00
k8s-ci-robot 414cfbd821
Merge pull request #71452 from losipiuk/lo/update-ca-version-1.13
Update Cluster Autoscaler version to 1.13.0-rc.2
2018-11-27 07:06:34 -08:00
Łukasz Osipiuk 0fac5aaaad Update Cluster Autoscaler version to 1.13.0-rc.2 2018-11-27 12:47:42 +01:00
k8s-ci-robot 396271cf52
Merge pull request #70954 from qingling128/master
Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2.
2018-11-25 23:09:07 -08:00
k8s-ci-robot 2b0212de9c
Merge pull request #71206 from stlaz/enc_config_opt
Rename '--experimental-encryption-provider-config' to '--encryption-provider-config'
2018-11-21 11:30:12 -08:00
k8s-ci-robot a19bf332de
Merge pull request #71124 from Random-Liu/make-fluentd-container-runtime-service-configurable
Make fluentd container runtime service configurable.
2018-11-21 07:49:42 -08:00
Sergei Orlov 21c1bb8830
kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'.
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-19 16:34:09 +01:00
k8s-ci-robot ca696fef26
Merge pull request #69848 from mikedanese/projadmission
migrate service account volume to a projected volume when BoundServiceAccountTokenVolumes are enabled
2018-11-16 22:46:23 -08:00
k8s-ci-robot 1e22f080ec
Merge pull request #67383 from stlaz/enc_config_promotion
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file
2018-11-16 16:31:30 -08:00
Mike Danese 98c468de8d update PSPs to allow projected volumes 2018-11-16 19:32:44 +00:00
Lantao Liu 1670b4089a Make fluentd container runtime service configurable. 2018-11-16 02:17:55 -08:00
Han Kang e1d9128978 increase the liveness probe delay for GCE e2e tests, to avoid premature teardown 2018-11-15 10:21:10 -08:00
k8s-ci-robot ca338b91f5
Merge pull request #70676 from logicalhan/exclude-checks
add ability to disable health checks on kube-apiserver for healthz using query-params
2018-11-14 11:37:48 -08:00
k8s-ci-robot 79dab474c0
Merge pull request #70555 from prameshj/nodelocaldnscache
Support running a nodelocal dns cache
2018-11-14 00:18:56 -08:00
Pavithra Ramesh 6d7c5e90ed Removed .salt template , using .sed template
Removed default config options from yaml.
Removed unused yaml files
2018-11-13 18:33:34 -08:00
Han Kang 895dd4187b exclude etcd from the liveness health check for the kube-apiserver on GCE 2018-11-13 14:48:56 -08:00
Slava Semushin c21cb548e6
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file.
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-13 14:05:21 +01:00
Pavithra Ramesh 73b548db06 Support running a nodelocal dns cache
This change includes the yaml files and gce startup script changes
to run this addon. It is disabled by default, can be enabled by setting
KUBE_ENABLE_NODELOCAL_DNS=true
An ip address is required for the cache instance to listen for
requests on, default is a link local ip address of value 169.254.25.10

addressed review comments, updated image location
Picked a different prometheus port so stats port is not same as the
coredns deployment

Removed the nodelocaldns-ready label.
Set memory limit to 30Mi
2018-11-12 14:54:20 -08:00
Mike Danese f3611a6264 always enable TokenRequest in GCE kube-up.sh 2018-11-12 11:24:52 -08:00
Ling Huang 02b7ed3291 Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2. 2018-11-12 13:21:44 -05:00
saad-ali 4a4176db42 Fix CSI CRD installation for Alpha clusters 2018-11-07 19:46:54 -08:00
k8s-ci-robot 9844baa2ff
Merge pull request #70696 from loburm/remove_cluster_autoscaler_spam
Filter out spammy audit logs from cluster autoscaler.
2018-11-07 12:53:19 -08:00
saad-ali a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
Marian Lobur 433be3410a Filter out spammy audit logs from cluster autoscaler. 2018-11-06 14:44:02 +01:00
Mike Danese 8c1e928501 gce: move more stuff into main and refactor detect whether configure-helpers.sh was sourced 2018-10-31 10:07:50 -07:00
Jeff Grafton 7b93b50e40 Update to use kube-addon-manager:v8.9 2018-10-24 16:19:51 -07:00
k8s-ci-robot 4cbeddd7b2
Merge pull request #70094 from mwwolters/prepare-log-file-args
Changed prepare-log-file to take args for setting uid/gid for log files.
2018-10-24 12:32:53 -07:00
Mark Wolters c9d34073f2 Changed prepare-log-file to take args for setting uid/gid for log files. 2018-10-19 11:57:26 -07:00
Chris O'Haver 0cfb4bbe2c make coredns kubeup default, update manifest 2018-10-18 14:52:38 -04:00
k8s-ci-robot 50f574f360
Merge pull request #68288 from loburm/truncating_backend
Enable audit logging truncating backend.
2018-10-11 18:26:34 -07:00
k8s-ci-robot 1aef63124b
Merge pull request #68920 from qingling128/master
Enable insertId generation, and update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s.
2018-10-11 13:44:51 -07:00
Walter Fender 8b3099ced7 Differentiate multizone zonal from Regional Cluster.
Fixed go format and unit test.
Collapse lines.
Switched to using regional throughout and added warning for HA Zonal.
2018-10-09 11:28:22 -07:00
Ling Huang d8da1baf48 Enable insertId generation, update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s and add priorityClassName for Metadata Agent. 2018-10-09 13:42:40 -04:00
wojtekt 3fdb5b92f4 Fix overwriting env variables in kube-apiserver manifest 2018-10-08 14:21:37 +02:00
Christoph Blecker 97b2992dc1
Update gofmt for go1.11 2018-10-05 12:59:38 -07:00
k8s-ci-robot 5602ab7761
Merge pull request #68379 from immutableT/kms-plugin-via-gke
Enable configure-helper.sh to support two scenarios for etcd level encryption: decryption and adding encryption to existing clusters.
2018-10-04 23:38:42 -07:00
immutablet 4bc62be0e6 Run kms-plugin in its own POD. 2018-10-04 09:19:57 -07:00
k8s-ci-robot 82a52de097
Merge pull request #68247 from awly/fetch-exec-plugin-license
Fetch gke-exec-plugin license file along with the binary
2018-10-03 15:21:31 -07:00
Zihong Zheng 81eae648cb Bump addon-manager to v8.8
- Rebase docker image on debian-base:0.3.2.
2018-10-02 11:43:40 -07:00
k8s-ci-robot da5730e883
Merge pull request #69033 from feiskyer/crictl-update
Update crictl to v1.12.0
2018-10-02 02:23:33 -07:00
Marian Lobur 3928818b64 Enable audit logging truncating backend. 2018-10-02 07:58:01 +02:00
Marian Lobur 5a118f9d2f Extract cpu requests to separate env variables. 2018-10-02 07:54:39 +02:00
k8s-ci-robot bf130aa29c
Merge pull request #69051 from cadmuxe/change_netd_node_selector
update netd node selector label to cloud.google.com/gke-netd-ready
2018-10-01 18:04:14 -07:00
k8s-ci-robot 0d5c8c2325
Merge pull request #67912 from yliaog/e2e
"gcloud beta compute networks subnets" does not work with the latest gcloud release
2018-10-01 18:03:55 -07:00
k8s-ci-robot 2a544bc709
Merge pull request #68565 from vantuvt/vantuvt-patch-1
Bug fix - revert metrics-server base CPU resources back to 40 mCPU
2018-10-01 10:59:15 -07:00
Yu Liao f4482e3abb "gcloud beta compute networks subnets" stopped working, fails with the
erros:  - The request did not match the specified API.
"gcloud compute networks subnets" works with the latest gcloud release.
2018-09-28 15:42:20 -07:00
Van Tu d3b4f2dac4 Bug fix - revert metrics-server base CPU resources back to 40 mCPU
The reduction in base CPU resources resulted in a significant increase in
start times from ~30 second to 1-4 minutes.
2018-09-28 06:18:39 -04:00
Pengfei Ni fa42ba649a Update crictl to v1.12.0 2018-09-26 09:15:10 +08:00
Koonwah Chen dc57a69c4f update netd node selector label to cloud.google.com/gke-netd-ready 2018-09-25 14:03:33 -07:00
k8s-ci-robot 74e6ee1d34
Merge pull request #67174 from charrywanganthony/auditv1beta1Tov1_gce.sh
use v1 version of advanced audit policy in gce shell
2018-09-24 13:19:44 -07:00
k8s-ci-robot 95ab206e34
Merge pull request #68896 from ixdy/etcd-3.2.24-1
cluster/gce and test/: update etcd:3.2.24-0 image to etcd:3.2.24-1
2018-09-21 14:37:43 -07:00
k8s-ci-robot 9dc5bb56a6
Merge pull request #68492 from vishh/68372
Fix node label assignment for GCE k8s clusters.
2018-09-21 04:12:08 -07:00
Jeff Grafton 3388e0ce5f Update to use etcd:3.2.24-1 image 2018-09-20 12:40:26 -07:00
k8s-ci-robot b33b0fb093
Merge pull request #68615 from loburm/revert_cpu_decrease
Revert "#67504: Decrease CPU requests of master components in two times."
2018-09-20 12:31:17 -07:00
Francois Tur 5c20fff19d
Revert "Add DNS pod resource monitoring option" 2018-09-19 14:54:29 -04:00
k8s-ci-robot ab02fd6f8a
Merge pull request #68683 from chrisohaver/trackdns
Add DNS pod resource monitoring option
2018-09-19 09:47:29 -07:00
k8s-ci-robot 95d3ce1578
Merge pull request #68739 from losipiuk/lo/ca-1.12
Update Cluster Autoscaler version 1.12.0
2018-09-19 06:22:04 -07:00
k8s-ci-robot 48203db09a
Merge pull request #68387 from Katharine/logdump-with-coverage
Add coverage profile retrieval to log dumps
2018-09-18 22:34:30 -07:00
Andrew Lytvynov cea579f3c4 Fetch gke-exec-plugin license file along with the binary 2018-09-18 15:49:15 -07:00
Chris O'Haver 7ea51a551c do not merge: test coredns with mem bump 2018-09-18 12:06:44 -04:00
Łukasz Osipiuk f53537a37e Update Cluster Autoscaler version 1.12.0 2018-09-17 16:42:26 +02:00
Shyam JVS 73b014b51a
Revert "Enable CoreDNS as default for kube-up deployments" 2018-09-13 18:57:01 +02:00
Marian Lobur 1deb5acc2f Revert cpu resource decrease. 2018-09-13 11:13:07 +02:00
Vishnu kannan 9dc14488e3 1. Do not set Accelerator Node labels on master node in GCE k8s clusters
2. Do not set Preemptible node label on master node unless the master node is explicitly set to be preemptible.

Signed-off-by: Vishnu kannan <vishnuk@google.com>
2018-09-10 14:50:42 -07:00
Kubernetes Submit Queue 59bcf0dadf
Merge pull request #67950 from dims/remove-e2e-image-puller
Automatic merge from submit-queue (batch tested with PRs 67950, 68195). If you want to cherry-pick this change to another branch, please follow the instructions here: https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md.

Remove e2e-image-puller

**What this PR does / why we need it**:

A long time ago, We added the image prepulling as a workaround due to
the overwhelming amount of flake caused by pulling during the tests.
This functionality has been broken for a while now when we switched to a
COS image where mounting `docker` binary into `busybox` stopped working.
So we just have dead code we should clean up.

Change-Id: I538171a5c1d9361eee7f9e0a99655b88b1721e3e

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #63355

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-09-07 11:19:36 -07:00
Kubernetes Submit Queue 361746266a
Merge pull request #68318 from timothysc/etcd-3-2-24
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions here: https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md.

Update default etcd server to 3.2.24 for kubernetes 1.12

**What this PR does / why we need it**:
Update default etcd server to 3.2.24 for kubernetes 1.12

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
xref #68147 

**Special notes for your reviewer**:
NONE

**Release note**:

```
Update default etcd server to 3.2.24 for kubernetes 1.12
```

/assign @wojtek-t @jpbetz @dims 
/cc @kubernetes/sig-cluster-lifecycle-pr-reviews @gyuho
2018-09-07 04:42:11 -07:00
Katharine Berry e17499c8e6 Include coverage information when dumping logs. 2018-09-06 16:24:32 -07:00
Kubernetes Submit Queue 659092d8ba
Merge pull request #68191 from losipiuk/update-ca-1.12.0-beta.1-master
Automatic merge from submit-queue (batch tested with PRs 68119, 68191). If you want to cherry-pick this change to another branch, please follow the instructions here: https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md.

Update cluster autoscaler to 1.12.0-beta.1

Update Cluster Autoscaler to version 1.12.0-beta.1 which is compatible with k8s 1.12.
Note: this is pre release version. Update to the final version of CA image will be done a week before k8s release deadline.

Version skip from 1.3.x to 1.12.x is to synchronize version numbering between Cluster Autoscaler and k8s core.
```release-note
NONE
```
2018-09-06 16:20:40 -07:00
Kubernetes Submit Queue 3811360d0b
Merge pull request #68299 from MrHohn/addon-manager-v-8-7
Automatic merge from submit-queue (batch tested with PRs 68087, 68256, 64621, 68299, 68296). If you want to cherry-pick this change to another branch, please follow the instructions here: https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md.

Bump addon-manager to v8.7

**What this PR does / why we need it**:
Major changes:
- Support extra `--prune-whitelist` resources in kube-addon-manager.
- Update kubectl to v1.10.7.

Basically picking up https://github.com/kubernetes/kubernetes/pull/67743.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #NONE

**Special notes for your reviewer**:
/assign @Random-Liu @mikedanese 

**Release note**:

```release-note
Bump addon-manager to v8.7
- Support extra `--prune-whitelist` resources in kube-addon-manager.
- Update kubectl to v1.10.7.
```
2018-09-06 14:49:43 -07:00
Kubernetes Submit Queue 5878b2877f
Merge pull request #68256 from mikedanese/nourand
Automatic merge from submit-queue (batch tested with PRs 68087, 68256, 64621, 68299, 68296). If you want to cherry-pick this change to another branch, please follow the instructions here: https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md.

gce: use getrandom instead of urandom for on node rng

```release-note
NONE
```
2018-09-06 14:49:36 -07:00
Timothy St. Clair ad2ed0e7df Update default etcd server to 3.2.24 for kubernetes 1.12
Signed-off-by: Timothy St. Clair <timothysc@gmail.com>
2018-09-06 10:24:57 -05:00
Kubernetes Submit Queue a555044125
Merge pull request #67139 from NetApp/dev-random-fix-67091
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions here: https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md.

Fix an issue about generation of secret key with invalid key size in gce

Replace /dev/random to /dev/urandom to avoid generation of secret key with invalid key size.



**What this PR does / why we need it**:
In GCE env, AESGCM encryption of secrets by default generates a secret key with /dev/random which sometime generates a key with invalid size.
This cause the cluster/kube-up.sh to fail in gce environment.

This PR replaces /dev/random with  /dev/urandom to have a secret key generated consistently with right size.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #67091

**Special notes for your reviewer**:

**Release note**:

```release-note
cluster/gce: generate consistent key sizes in config-default.sh using /dev/urandom instead of /dev/random  
```
2018-09-05 17:13:43 -07:00
Kubernetes Submit Queue e2e60d2707
Merge pull request #68161 from tallclair/runtimeclass-addon
Automatic merge from submit-queue (batch tested with PRs 68161, 68023, 67909, 67955, 67731). If you want to cherry-pick this change to another branch, please follow the instructions here: https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md.

Register RuntimeClass CRD as an addon

**What this PR does / why we need it**:

Register the RuntimeClass CRD when the RuntimeClass feature gate is enabled. This is done in through the addon manager.

This is an alternative approach to https://github.com/kubernetes/kubernetes/pull/67924

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
For https://github.com/kubernetes/features/issues/585

**Release note**:
Covered by #67737
```release-note
NONE
```

/sig node
/kind feature
/priority important-soon
/milestone v1.12
2018-09-05 14:51:41 -07:00
Zihong Zheng e9127b0dba Bump addon-manager to v8.7
- Support extra `--prune-whitelist` resources in kube-addon-manager.
- Update kubectl to v1.10.7.
2018-09-05 11:01:01 -07:00