02e6c18c56
Merge pull request #72443 from Zyqsempai/refactor-token-flag-names-into-const
...
Moved token related flags to constants.
2019-01-01 10:31:21 -08:00
993c65634e
Merge pull request #71973 from MalloZup/fix-1234
...
Exclude by default address flag fix #1234
2019-01-01 05:36:18 -08:00
b502b99d25
Merge pull request #72457 from bart0sh/PR0053-kubeadm-app-cmd-use-T.Run
...
kubeadm: use T.Run API in app/cmd
2019-01-01 04:00:36 -08:00
d50338c1ed
Fix typo cgroupDriver -> cgroup-driver
...
Signed-off-by: Xin Wang <wileywang@yunify.com>
2019-01-01 19:46:18 +08:00
6e182ed5ea
Merge pull request #71816 from liggitt/service-account-lookup
...
Look up service accounts from informer before trying live lookup
2018-12-31 21:18:55 -08:00
b9898eb2ad
Token related flags refactored into constants.
...
Moved token related flags to constants.
Token related flags refactored into constants.
Moved token related flags to constants.
Used new Consts flags in api's validation
Build deps fix
Moved token related flags to constants.
Used new Consts flags in api's validation
Build deps fix
Lint fix
Lint BUILD
2019-01-01 03:46:19 +02:00
645c1fa1ab
kubeadm: use T.Run API in app/cmd
...
Used T.Run API for kubeadm tests in app/cmd
This should improve testing output and make it more visible
which test is doing what.
2018-12-31 14:29:52 +02:00
d57ec59867
kubeadm: use T.Run API in app/apis/kubeadm
...
Used T.Run API for kubeadm tests in app/apis/kubeadm
This should improve testing output and make it more visible
which test is doing what.
2018-12-31 00:08:27 +02:00
13e59ab9ad
Merge pull request #72433 from bart0sh/PR0050-kubeadm-app-util-use-T.Run
...
kubeadm: use T.Run API in app/util
2018-12-30 03:45:41 -08:00
01c9e67c90
kubeadm: fix incorrect package name in idempotency_test.go
2018-12-29 18:30:30 +02:00
47b4d8fc81
kubeadm: use T.Run API in app/util
...
Used T.Run API for kubeadm tests in app/util/
2018-12-29 18:27:38 +02:00
7d8554643e
Merge pull request #72367 from rojkov/fix-golint-warnings
...
kubeadm: fix golint warnings for redundant ifs
2018-12-28 12:03:15 -08:00
b89ab2c0c3
Merge pull request #72299 from bart0sh/PR0046-kubeadm-add-CurrentKubernetesVersion
...
kubeadm: add CurrentKubernetesVersion
2018-12-28 12:03:05 -08:00
2cc92a09fd
Merge pull request #72399 from bart0sh/PR0049-kubeadm-app-util-system-fix-golint-warnings
...
kubeadm: fix golint warnings in package_validator
2018-12-28 09:44:31 -08:00
60fc0bf75b
kubeadm: fix golint warnings in package_validator
...
Fixed the following golint warnigns:
- package_validator.go:68:1: receiver name should not be an underscore, omit the name if it is unused
- package_validator.go:89:1: receiver name should be a reflection of its identity; don't use generic names such as "this" or "self"
- package_validator.go:96:1: receiver name should be a reflection of its identity; don't use generic names such as "this" or "self"
- package_validator.go:119:1: receiver name should be a reflection of its identity; don't use generic names such as "this" or "self"
2018-12-28 13:38:10 +02:00
e6c3ab013c
kubeadm: use T.Run API in app/util/system
...
Used T.Run API for kubeadm tests in app/util/system
2018-12-28 13:09:07 +02:00
97426ce7a5
Adding cheftako to reviewers
...
Also adding as an owners to pkg/cloudprovider.
2018-12-27 15:25:20 -08:00
73dcfe12da
Stop checking VolumeScheduling feature gate
2018-12-27 17:45:45 -05:00
f192657380
Add gauge metric for master of leader election.
...
Fixes #71730
0 indicates standby, 1 indicates master, label indicates which lease.
Tweaked name and documentation
Factored in Mike Danese feedback.
Removed dependency on prometheus from client-go using adapter.
Centralized adapter import.
Fixed godeps
Fixed boilerplate.
Put in fixes for caesarxuchao
2018-12-27 09:40:33 -08:00
0bf0b3ef1a
kubeadm: fix golint warnings for redundant ifs
...
When golint is run against kubeadm it reports severel warnings like
redundant if ...; err != nil check, just return error instead.
Fix the warnings by just returning error.
2018-12-27 15:37:39 +02:00
639101289c
kubeadm: use T.Run API in test/cmd
...
Used T.Run API for kubeadm tests in cmd/kubeadm/test/cmd/
This should improve testing output and make it more visible
which test is doing what.
2018-12-27 15:22:32 +02:00
e6937ec27f
kubeadm: add CurrentKubernetesVersion
...
Replaced hardcoded "v0.13.0" strings with CurrentKubernetesVersion variable.
This should help with a regular release version bumps.
2018-12-27 11:29:59 +02:00
197fc67693
Merge pull request #72215 from caesarxuchao/minor-test-fix
...
Fix the unit test patch to not modify the node name
2018-12-25 19:57:09 -08:00
0fa23716f0
add myself to cmd/[kube-]controller-manager OWNERS
2018-12-23 12:43:32 +08:00
190f6d870e
Merge pull request #71946 from bart0sh/PR0045-kubeadm-1260-simplify-minimum-kubernetes-version-bumps
...
kubeadm: simplify minimum Kubernetes version bumps
2018-12-21 21:28:53 -08:00
5354f8bdfe
Merge pull request #72239 from wojtek-t/v1_lease_api
...
Promote Lease API to v1
2018-12-21 10:03:36 -08:00
ba01a6e960
Add Broadcaster.StartLogging
...
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
modify StartLogging to V(6)
Signed-off-by: PingWang <wang.ping5@zte.com.cn>
2018-12-21 08:55:48 +08:00
6148992056
Replace address with bind-address
2018-12-20 22:14:16 +01:00
29b3ec9108
Merge pull request #72140 from wgliang/feature/adaptive-percentage-find-nodes
...
Set percentage of nodes scored in each cycle dynamically based on the…
2018-12-20 12:36:45 -08:00
73d14dede6
Promote Lease API to v1
2018-12-20 15:39:57 +01:00
0c7e207904
Merge pull request #72064 from jayunit100/patch-2
...
(one liner) Update server.go's dockerd messages to be CRI based.
2018-12-20 04:42:35 -08:00
4a21a774e9
Merge pull request #72059 from rojkov/kubeadm-check-remote-version-v2
...
kubeadm: refactor validateStableVersion()
2018-12-20 04:42:25 -08:00
6515c4e09b
Set percentage of nodes scored in each cycle dynamically based on the cluster size
2018-12-20 11:20:00 +08:00
7ce7a80cda
Merge pull request #71355 from bradhoekstra/kube-proxy-services-optional
...
Make kube-proxy service abstraction optional
2018-12-19 15:27:12 -08:00
7223f0fd16
Fix the unit test patch to not modify the node name
2018-12-19 14:02:33 -08:00
b40018da7b
kubeadm: simplify minimum Kubernetes version bumps
...
Replaced hardcoded "v0.12.0" strings with MinimumControlPlaneVersion and
MinimumKubeletVersion global variables.
This should help with a regular release version bumps.
2018-12-19 20:41:25 +02:00
842bd1e1ec
update deployment, daemonset, replicaset, statefulset to apps/v1
2018-12-19 10:46:45 -05:00
b97092ca8f
Merge pull request #71399 from resouer/eclass-task-1
...
Eclass task 1: clean up old code
2018-12-18 08:47:13 -08:00
73b9effcb6
Merge pull request #72030 from ereslibre/fix-race-condition-on-node-join
...
Fix race condition when joining nodes
2018-12-18 03:02:40 -08:00
1081e919e3
Eclass Task 1: clean up old equiv class code
...
Co-authored-by: Harry Zhang <resouer@gmail.com>
Co-authored-by: Wang Qingcan <wangqingcan@baidu.com>
2018-12-17 17:05:49 -08:00
e2be7c91d9
Merge pull request #70344 from andrewsykim/consolidate-node-delete
...
consolidate node deletion logic between kube-controller-manager and cloud-controller-manager
2018-12-17 15:49:16 -08:00
60f754a8a3
kubeadm: fix nil check in join config creation
2018-12-17 13:57:37 -05:00
b9c2139ccc
kubeadm: refactor validateStableVersion()
...
Currently the function `cmd/kubeadm/app/util.validateStableVersion()`
doesn't validate remote versions in the special case when the client
version is empty. This makes the code more difficult to reason about,
because the function may successfully return a string which isn't a valid version.
Move handling the special case outside of the function to the place
where its meaning is more obvious.
2018-12-17 17:05:41 +02:00
2f92250977
Make Error message CRI compliant, retain dockerd directions.
2018-12-16 16:16:57 -05:00
4b6d91c2c3
kubeadm: print stack trace in case of unexpected error
2018-12-14 12:23:54 +02:00
1c04caa043
Merge pull request #71945 from pytimer/kubeadm-etcd-fix
...
kubeadm: fixed etcd sync endpoints
2018-12-13 21:41:46 -08:00
6a8a832f61
Fix race condition when joining nodes
...
Despite we were checking for the kubelet kubeconfig file to be present, the
kubelet first writes this file and then the certificates the kubeconfig file
refers to. This represents a race condition in kubeadm in which when we confirm
that the kubelet's kubeconfig file is present we continue creating a clientset
out of it. However, the clientset creation will ensure that the certificates the
kubeconfig file refers to exist on the filesystem.
To fix this problem, not only wait for the kubelet's kubeconfig file to be
present, but also ensure that we can create a clientset ouf of it on our polling
process, while we wait for the kubelet to have performed the TLS bootstrap.
2018-12-13 20:51:35 +01:00
15300ed765
Merge pull request #71967 from PaulineLc/remove-space-hyperkube
...
Removed redundant spaces in a comment
2018-12-12 11:36:31 -08:00
05183bffe5
Merge pull request #71872 from yuexiao-wang/scheduler-nodeinfo
...
[scheduler cleanup phase 2]: Rename `pkg/scheduler/cache` to `pkg/scheduler/nodeinfo`
2018-12-12 08:08:33 -08:00
3678c7ab1c
removed spaces in comment
2018-12-11 12:13:57 -08:00
f3353c358d
[scheduler cleanup phase 2]: Rename to
...
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-12-11 11:21:12 +08:00
48d757b6bb
kubeadm: fixed etcd sync endpoints
2018-12-11 10:03:22 +08:00
0b13221f68
Merge pull request #71885 from dims/create-etcd-with-0700-permissions
...
Create /var/lib/etcd with 0700
2018-12-10 14:08:33 -08:00
486f407b1d
Merge pull request #71890 from odacremolbap/replace-proxy-with-kubelet-kubeadm-docs
...
replace proxy with kubelet at kubeadm v1beta1 docs
2018-12-10 05:39:49 -08:00
21a8d08fab
Merge pull request #71258 from bart0sh/PR0042-kubeadm-1159-improve-hostport-error-messages
...
kubeadm: improve hostport parsing error messages
2018-12-09 23:59:06 -08:00
996845d9d9
replace proxy with kubelet at kubeadm v1beta1 docs
2018-12-09 08:51:34 +01:00
836f413cf1
Create /var/lib/etcd with 0700
...
If we let the hostpath with DirectoryOrCreate to create this directory
it defaults to 0755. A default install should use 0700 for better
security especially if the directory is not present.
Change-Id: Idc0266685895767b0d1c5710c8a4fb704805652f
2018-12-08 19:42:58 -05:00
c06c08e5ae
Merge pull request #71828 from yuexiao-wang/cleanup-upgrad-etcd-left
...
kubeadm: fixed cleanup upgrade from no-TLS etcd to TLS etcd
2018-12-08 02:39:54 -08:00
39f71245b3
kubeadm: fixed cleanup upgrade from no-TLS etcd to TLS etcd
...
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-12-08 08:38:03 +08:00
c3364cf48d
kubeadm: remove unused func runCmdPhase
...
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-12-07 13:30:32 +02:00
a9dc919f82
Look up service accounts from informer before trying live lookup
2018-12-06 16:48:39 -05:00
fa0ef745cf
Merge pull request #71803 from yagonobre/fix-init-bootstrap
...
Use kubeconfig flag instead of kubeconfig-dir in kubeadm init phase bootstrap-token
2018-12-06 13:13:14 -08:00
257a6d5bfa
Merge pull request #71755 from liggitt/tolerate-authn-lookup-failure
...
Allow kube-scheduler to tolerate cluster auth config lookup failure
2018-12-06 11:05:13 -08:00
05e5a3473d
Use kubeconfig flag instead of kubeconfig-dir in kubeadm init phase bootstrap-token
2018-12-06 14:42:45 -02:00
284cc82e71
Update bazel
2018-12-05 16:43:07 -05:00
416e114215
Allow kube-scheduler to tolerate cluster auth config lookup failure
2018-12-05 14:13:47 -05:00
5610ac3c9c
cleanup upgrade from non-TLS etcd to TLS etcd
...
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-12-05 23:10:13 +08:00
0214031fcf
Merge pull request #71702 from yuexiao-wang/move-test
...
kubeadm: move test utilites out of /test
2018-12-04 20:06:54 -08:00
7af52384ea
Merge pull request #71467 from rosti/nuke-config-print-defaults
...
kubeadm: remove kubeadm config print-defaults
2018-12-04 10:04:32 -08:00
0dc0659e07
move test utilites out of /test
...
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-12-04 19:27:17 +08:00
b6c8ef298e
Merge pull request #71663 from bart0sh/PR0044-kubeadm-1294-fix-unmount-kubelet-dirs
...
kubeadm: properly umount dirs in /var/lib/kubelet
2018-12-04 02:54:44 -08:00
a9b69dc381
Merge pull request #71615 from jpbetz/etcd-3.3.10-0-image
...
Update default etcd server to 3.3.10 for kubernetes 1.14
2018-12-04 02:54:34 -08:00
862b945e5a
Update default etcd server to 3.3.10 for kubernetes 1.13
2018-12-03 11:03:49 -08:00
5329f09663
consolidate node deletion logic between node lifecycle and cloud node controller
2018-12-03 13:33:53 -05:00
48a961cfa2
kubeadm: properly umount dirs in /var/lib/kubelet
...
'kubeadm reset' uses incorrect way of unmounting /var/lib/kubelet
directories. It queries /proc/mounts for /var/lib/kubelet mount point.
If /var/lib/kubelet directory is also mounted it makes 'kubelet reset'
to unmount it too, which is incorrect. It also makes it fail as it
can't unmount /var/lib/kubelet before unmounting mounts inside it.
Fixed by querying /var/lib/kubelet/ instead of /var/lib/kubelet.
This should exclude /var/lib/kubelet from the query results even if
it's mounted.
Fixes : kubernetes/kubeadm#1294
2018-12-03 18:45:52 +02:00
ffb670b8a8
kubeadm: remove kubeadm config print-defaults
...
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-12-03 17:43:42 +02:00
dc9261bc3b
Merge pull request #71174 from smarterclayton/debug_kubeadm
...
Restore bootstrap in the background with fix to preserve kubeadm behavior
2018-12-03 05:49:57 -08:00
30d61f2f71
Merge pull request #71558 from luxas/kubeadm_owners
...
Update kubeadm OWNERS file
2018-11-30 15:09:55 -08:00
67bca44801
Merge pull request #71465 from aanm/fix-kubeadm-documentation
...
apis/kubeadm/v1beta1: fix typo in localApiEndpoint -> localAPIEndpoint
2018-11-30 01:19:58 -08:00
a93fe6e9ef
Merge pull request #71357 from rosti/forgotten-println
...
kubeadm: Remove forgotten debug Println
2018-11-30 00:04:27 -08:00
d9581ca041
Merge pull request #71340 from yuexiao-wang/fix-test
...
fix test names for manifests
2018-11-30 00:04:18 -08:00
79e5cb2cb7
Merge pull request #71302 from liggitt/verify-unit-test-feature-gates
...
Split mutable and read-only access to feature gates, limit tests to readonly access
2018-11-29 21:45:12 -08:00
9c74dc4ef3
Merge pull request #70834 from zhangmingld/gloginfoinsteadinfof
...
use glog.info instead glog.infof when no var
2018-11-29 19:04:27 -08:00
409bfc4337
Merge pull request #71047 from pivotal-k8s/bump-k8s-utils
...
Bump k8s.io/uitls to 8e7ff06
2018-11-29 11:17:08 -08:00
791758b1ef
Merge pull request #71038 from neolit123/remove-dyn-kubelet-const
...
kubeadm: remove leftover DynamicKubeletConfig constant
2018-11-29 11:16:58 -08:00
c026e070d0
Update kubeadm OWNERS file
2018-11-29 13:12:49 +02:00
a2353d5bdb
Merge pull request #67360 from jiaxuanzhou/1.11
...
simplify logic for func BuildArgumentListFromMap
2018-11-29 02:01:03 -08:00
86d4d95e0d
Merge pull request #70426 from sttts/sttts-testserver-run-errors
...
testservers: return Run method errors correctly
2018-11-29 00:47:45 -08:00
c2d93cb1b2
Merge pull request #69063 from stewart-yu/stewart-componentconfig-clodeclean03
...
remove dependency on the legacyscheme, using self-scheme
2018-11-28 21:44:57 -08:00
8b11fda27b
Merge pull request #67931 from tanshanshan/littleprint
...
make error info clearly
2018-11-28 21:44:28 -08:00
5c1260b934
apis/kubeadm/v1beta1: fix typo in localApiEndpoint -> localAPIEndpoint
...
As localApiEndpoint is ignored by json.Unmarshaller this should be
localAPIEndpoint as defined in the json tag of the source code.
Signed-off-by: André Martins <aanm90@gmail.com>
2018-11-27 17:48:44 +01:00
bb6101dfbb
Merge pull request #71385 from neolit123/kubeadm-fix-mark-control-plane-config
...
kubeadm: add missing --config flag to mark-control-plane phase
2018-11-24 09:29:49 -08:00
7098f1ad38
Merge pull request #71382 from yagonobre/fix-reset
...
Fix kubeadm reset in case of external etcd
2018-11-24 01:59:58 -08:00
a1a7ecaab3
kubeadm: add missing --config flag to mark-control-plane phase
2018-11-24 05:18:03 +02:00
52835fbc80
Fix kubeadm reset in case of external etcd
2018-11-23 16:27:00 -02:00
12e5eb7dc9
Merge pull request #71011 from sigma/pr/fix-inotify
...
replace golang.org/x/exp/inotify with standalone library
2018-11-22 18:07:51 -08:00
d7823bee59
Merge pull request #71360 from fabriziopandini/fix-etcd-connection
...
Fix etcd connect for join --control-plane
2018-11-22 09:35:31 -08:00
8a53031b4e
Fix etcd connect for join --control-plane
2018-11-22 17:17:27 +01:00
69f100e3b7
Merge pull request #70204 from imjching/70145-fix-glog-flags-apiserver
...
kube-apiserver: fix missing global flags for --help
2018-11-22 08:11:13 -08:00
0110b6e8bf
kubeadm: Remove forgotten debug Println
...
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-22 17:05:23 +02:00
b6a0718858
Merge pull request #71323 from bart0sh/PR0043-kubeadm-init-use-commandline-options-with-config
...
kubeadm: override node registration options from command line (follow-up)
2018-11-22 01:46:51 -08:00
8d9ac261c4
Merge pull request #71315 from rosti/config-migrate-fix
...
kubeadm: config migrate handles more valid configs
2018-11-22 00:37:33 -08:00
1d38de3a29
fix test names for manifests
...
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-11-22 15:30:24 +08:00
b4b4718fc1
kubeadm: override node registration options from command line
...
'kubeadm init' silently ignores --node-name and --cri-socket
command line options if --config option is specified.
Implemented setting 'name' and 'criSocket' options from the command
line even if --config command line option is used.
2018-11-21 21:39:07 +02:00
7fbdcf889a
kube-apiserver: fix missing global flags for --help
...
Signed-off-by: Jay Lim <jay@imjching.com>
2018-11-21 12:30:09 -05:00
d440ecdd3b
Update non-test code to use DefaultMutableFeatureGate
2018-11-21 11:51:33 -05:00
18e5736b0f
Filter out services with alternate service proxy
2018-11-21 11:25:15 -05:00
037fb6103e
kubeadm: config migrate handles more valid configs
...
kubeadm config migrate uses AnyConfigFileAndDefaultsToInternal, which can
unmarshal config from file only if InitConfiguration or JoinConfiguration are
present. Even with that in mind, it can only return a singlie config object,
with InitConfiguration taking precendence over JoinConfiguration. Thus, the
following cases were not handled properly, while they were perfectly valid for
kubeadm init/join:
- ClusterConfiguration only file caused kubeadm config migrate to exit with
error.
- Init + Join configurations in the same file caused Init + Cluster
configuration to be produced (ignoring JoinConfiguration). The same is valid
when the combo is Init + Cluster + Join configurations.
- Cluster + Join configuration ignores ClusterConfiguration and only
JoinConfiguration gets migrated.
To fix this, the following is done:
- Introduce MigrateOldConfigFromFile which migrates old config from a file,
while ensuring that all kubeadm originated input config kinds are taken care
of. Add comprehensive unit tests for this.
- Replace the use of AnyConfigFileAndDefaultsToInternal in
kubeadm config migrate with MigrateOldConfigFromFile.
- Remove the no longer used and error prone AnyConfigFileAndDefaultsToInternal.
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-21 13:18:39 +02:00
97f9c6afe7
auto-generated file
2018-11-21 17:39:15 +08:00
f5836c865b
add --cloud-provider-gce-lb-src-cidrs for *-controller-manager, and add test
2018-11-21 17:39:15 +08:00
10dd5d6631
*-controller-manager: fix missing global flags for --help
2018-11-21 17:39:14 +08:00
1431aeb45d
Merge pull request #71283 from Klaven/kubeadm_857
...
Updates to always pass spec.nodeName as --hostname-override
2018-11-20 17:31:24 -08:00
aac9ee1793
Merge pull request #71259 from rosti/minver-bump-12
...
kubeadm: Bump minimum Kubernetes version to v1.12
2018-11-20 17:31:15 -08:00
f8983a8988
Merge pull request #70633 from leblancd/kubeadm_etcd_v6_fix
...
Fix kubeadm etcd manifests to use brackets around IPv6 addrs
2018-11-20 15:34:24 -08:00
5ad7e4ee09
Fixes kubeadm 857
...
updated manifest file to always pass spec.nodeName as the --hostname-override.
2018-11-20 17:44:26 -05:00
012e46320b
kubeadm: override node registration options from command line
...
'kubeadm join' silently ignores --node-name and --cri-socket
command line options if --config option is specified.
In some cases it's much easier for users to override these parameters
from the command line instead of updating config, especially for
multi-node automatic deployments where only node name should be changed.
Implemented setting 'name' and 'criSocket' options from the command
line even if --config command line option is used.
2018-11-20 16:26:57 +02:00
aa414e139e
kubeadm: Bump minimum Kubernetes version to v1.12
...
Bump MinimumControlPlaneVersion and MinimumKubeletVersion to v1.12 and update
any related tests.
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-20 16:21:49 +02:00
bab556f7a6
kubeadm: improve hostport parsing error messages
...
Added hostport and host/port parts to the error messages
produced by ParseHostPort API.
This should help users to better identify parsing issues.
Fixes : kubernetes/kubeadm#1159
2018-11-20 13:21:36 +02:00
50e02fd0cc
Merge pull request #71229 from chuckha/etcd-server
...
kubeadm: adds etcd server version for 1.13
2018-11-19 16:25:42 -08:00
956dcdd4ca
Merge pull request #71232 from liztio/sparse-cert-creation
...
Sparse cert creation for `kubeadm init`
2018-11-19 15:07:32 -08:00
2f14e1801e
`kubeadm init` supports sparse certificates
2018-11-19 16:55:16 -05:00
16d6daf520
Merge pull request #71219 from neolit123/kubeadm-go-docs-1.13
...
kubeadm: fix issues in the v1beta1 godoc
2018-11-19 13:03:25 -08:00
9e8228f14a
Move some test functions into test utils
2018-11-19 14:38:10 -05:00
679d4397cf
kubeadm: adds etcd server version for 1.13
...
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-19 14:34:00 -05:00
c185836e64
Add flags to kubeadm init phase uploadconfig all
2018-11-19 14:02:29 -02:00
bc6837ffe3
kubeadm: fix issues in the v1beta1 godoc
...
- make the whole config example actually pass strict verification
(i.e. make the config work with --config)
- add print init-defaults/join defaults
- other small fixes
2018-11-19 17:26:34 +02:00
fde87329cb
bootstrap: Use kubeconfig contents as seed for cert dir if necessary
...
kubeadm uses certificate rotation to replace the initial high-power
cert provided in --kubeconfig with a less powerful certificate on
the masters. This requires that we pass the contents of the client
config certData and keyData down into the cert store to populate
the initial client.
Add better comments to describe why the flow is required. Add a test
that verifies initial cert contents are written to disk. Change
the cert manager to not use MustRegister for prometheus so that
it can be tested.
2018-11-17 19:52:12 -05:00
486577df17
Restore "Make bootstrap client cert loading part of rotation""
...
This reverts the revert of commit 3464222267
2018-11-17 13:44:58 -05:00
3464222267
Revert "Make bootstrap client cert loading part of rotation"
...
This reverts commit 0af19875adde293b2d7d
2018-11-17 10:24:39 -05:00
de293b2d7d
Ensure the bootstrap rotation code is tested by forcing rotation
...
Expose both a Stop() method (for cleanup) and a method to force
cert rotation, but only expose Stop() on the interface.
Verify that we choose the correct client.
2018-11-16 21:50:52 -05:00
0af19875ad
Make bootstrap client cert loading part of rotation
...
Ensure that bootstrap+clientcert-rotation in the Kubelet can:
1. happen in the background so that static pods aren't blocked by bootstrap
2. collapse down to a single call path for requesting a CSR
3. reorganize the code to allow future flexibility in retrieving bootstrap creds
Fetching the first certificate and later certificates when the kubelet
is using client rotation and bootstrapping should share the same code
path. We also want to start the Kubelet static pod loop before
bootstrapping completes. Finally, we want to take an incremental step
towards improving how the bootstrap credentials are loaded from disk
(potentially allowing for a CLI call to get credentials, or a remote
plugin that better integrates with cloud providers or KSMs).
Reorganize how the kubelet client config is determined. If rotation is
off, simplify the code path. If rotation is on, load the config
from disk, and then pass that into the cert manager. The cert manager
creates a client each time it tries to request a new cert.
Preserve existing behavior where:
1. bootstrap kubeconfig is used if the current kubeconfig is invalid/expired
2. we create the kubeconfig file based on the bootstrap kubeconfig, pointing to
the location that new client certs will be placed
3. the newest client cert is used once it has been loaded
2018-11-16 21:50:26 -05:00
440a5ad7cb
Don't allow --csr-only for CA certs or all
2018-11-16 15:22:37 -08:00
f4fd7b0b2b
Merge pull request #71069 from fabriziopandini/kubeadm-phases-add-all-subcommands
...
Kubeadm - add all subcommands to phases
2018-11-16 15:17:03 -08:00
5ec9349276
Merge pull request #70917 from dims/add-log-file-option-to-kubelet-flags
...
add log_file option to kubelet flags
2018-11-16 15:16:53 -08:00
fab7009997
Merge pull request #71135 from luxas/kubeadm_repo_flag
...
kubeadm: Allow customizing the image repository via flags
2018-11-16 13:20:16 -08:00
99887716c5
Fix kubeadm etcd manifests to use brackets around IPv6 addrs
...
When 'kubeadm init ...' is used with an IPv6 kubeadm configuration,
kubeadm currently generates an etcd.yaml manifest that uses IP:port
combinatins where the IP is an IPv6 address, but it is not enclosed
in square brackets, e.g.:
- --advertise-client-urls=https://fd00:20::2:2379
For IPv6 advertise addresses, this should be of the form:
- --advertise-client-urls=https://[fd00:20::2]:2379
The lack of brackets around IPv6 addresses in cases like this is
causing failures to bring up IPv6-only clusters with Kubeadm as
described in kubernetes/kubeadm Issues #1212 .
This format error is fixed by using net.JoinHostPort() to generate
URLs as shown above.
Fixes kubernetes/kubeadm Issue #1212
2018-11-16 15:12:29 -05:00
7ff49c99d3
Merge pull request #71126 from rosti/warn-api-bind-override
...
kubeadm: Warn on API server bind address override
2018-11-16 12:04:10 -08:00
a666003b36
kubeadm: Allow customizing the image repository via flags
2018-11-16 23:52:56 +08:00
1308c7d2f5
kubeadm phases add all subcommands
2018-11-16 16:39:04 +01:00
e94a9f9321
Merge pull request #71085 from bsalamat/leader-election-fix
...
Report kube-scheduler unhealthy if leader election is wedged
2018-11-16 05:13:28 -08:00
a5f06fdd16
Merge pull request #71066 from fabriziopandini/kubeadm-fix-validateMixedArgs
...
Kubeadm - Fix validateMixedArgs for phases
2018-11-16 03:57:01 -08:00
0908af5e09
Merge pull request #71061 from yagonobre/init-todo
...
Remove todo from init phase
2018-11-16 03:56:52 -08:00
b46fbbc4e6
kubeadm: Warn on API server bind address override
...
ChooseAPIServerBindAddress is silently overriding the requested bind IP
address for the API server if that address is deemed unsuitable. This is
currently done only if the IP is a loopback one (127.0.0.0/8; ::1/128).
It's best to at least issue a warning if such override occurs, so that there
are no surprised users by this.
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-16 13:00:52 +02:00
973b5d291d
Merge pull request #71053 from yagonobre/upload-config-fix
...
Fix `kubeadm upload-config kubeadm` example
2018-11-16 01:53:50 -08:00
dc6632ad4c
Merge pull request #71046 from liztio/certs-renew-use-api-fix
...
Certs renew use api fix
2018-11-16 01:53:40 -08:00
4b98060f4e
Merge pull request #70901 from neolit123/kubeadm-strict-config
...
kubeadm: enable strict config unmarhaling
2018-11-15 23:52:36 -08:00
8797db339d
Merge pull request #69827 from tomkukral/kadm-etcd
...
use etcd endpoints from advertise-client-urls
2018-11-15 17:25:17 -08:00
2473bba9e5
kubeadm: update autogenerated bazel
2018-11-16 02:22:04 +02:00
cc60625930
kubeadm: handle strict config unmarshaling
2018-11-16 02:21:31 +02:00
3d3cc63cc8
Merge pull request #70809 from liztio/csr
...
Generate CSRs for kubeadm
2018-11-15 15:00:02 -08:00
6afb9a117b
Fix renewing certificates via the API
...
Poll for events, print CSR name, and parse PEM instead of CSR
2018-11-15 14:02:47 -08:00
7b4d4bc8ac
Merge pull request #70508 from dashpole/pod_resources_socket
...
Add socket-based kubelet pod resources API.
2018-11-15 13:43:44 -08:00
504466c4e6
Merge pull request #68267 from liggitt/node-label-update
...
Limit kubelets from updating their own labels when NodeRestriction is enabled
2018-11-15 11:11:02 -08:00
34b4a5bbee
Add watchdog for leader election logic getting wedged
2018-11-15 11:02:14 -08:00
5fc1a9a87c
Option to generate CSRs instead of issued certificates
2018-11-15 10:47:54 -08:00
630cb53f82
add kubelet grpc server for pod-resources service
2018-11-15 09:43:20 -08:00
0d4b5c98f8
Bump k8s.io/uitls to 8e7ff06
...
The reason for the bump is the new functionality of the
k8s.io/utils/exec package which allows
- to get a hold of the process' std{out,err} as `io.Reader`s
- to `Start` a process and `Wait` for it
This should help on addressing #70890 by allowing to wrap std{out,err}
of the process to be wrapped with a `io.limitedReader`.
It also updates
- k8s.io/kubernetes/pkg/probe/exec.FakeCmd
- k8s.io/kubernetes/pkg/kubelet/prober.execInContainer
- k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet.fakeCmd
to implement the changed interface.
The dependency on 'k8s.io/utils/pointer' to the new version has also
been bumped in some staging repos:
- apiserver
- kube-controller-manager
- kube-scheduler
2018-11-15 13:25:12 +00:00
b1a52a38e9
Merge pull request #67257 from pbarker/audit
...
dynamic audit configuration
2018-11-15 02:42:59 -08:00
807338e96a
Fix validateMixedArgs for phases
2018-11-15 11:38:18 +01:00
f48e18faa4
Merge pull request #70971 from cheftako/leaseCheck
...
Report KCM as unhealthy if leader election is wedged.
2018-11-15 01:30:59 -08:00
4fdac19603
Merge pull request #71059 from timothysc/kubeadmmsg
...
Minor update to the comment block characters for kubeadm
2018-11-14 23:20:07 -08:00
8b110e27fc
Remove todo from init phase
2018-11-15 01:43:56 -02:00
aea4a4e0fb
Minor update to the comment block characters for kubeadm
2018-11-14 20:31:11 -06:00
e3ddaaad1d
Merge pull request #71045 from neolit123/kubeadm-go-docs-1.13
...
kubeadm: fix godocs indentation for v1beta1
2018-11-14 17:25:50 -08:00
2965d24547
Merge pull request #71043 from chuckha/etcd-doc
...
kubeadm: document required etcd configuration
2018-11-14 17:25:40 -08:00
bb2fcd90f3
Merge pull request #71040 from fabriziopandini/kubeadm-phases-local-flags
...
Kubeadm phases - add local flags
2018-11-14 17:25:30 -08:00
9c43ee6d6e
Report KCM as unhealthy if leader election is wedged.
...
Feedback from lavalamp and deads2k.
Changed Check() logic to be central to LeaderElector.
Further changes, especially cleaning up the test code.
2018-11-14 16:57:37 -08:00
eb89d3dddd
adds dynamic audit configuration
2018-11-14 17:54:06 -07:00
606bbc0457
Fix kubeadm upload-config kubeadm example
2018-11-14 22:28:51 -02:00
1240274204
Merge pull request #71037 from rdodev/reset-iptables
...
Reset helptext alignment
2018-11-14 15:39:46 -08:00
da49adb52f
kubeadm: fix godocs indentation for v1beta1
2018-11-15 00:13:58 +02:00
02ec1e84b0
kubeadm: document required etcd configuration
...
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-14 17:05:24 -05:00
0df79e4daa
Merge pull request #71008 from neolit123/kubeadm-go-docs-1.13
...
kubeadm: update notes and example config in v1beta1 godocs
2018-11-14 13:16:54 -08:00
1a9fd268a9
Merge pull request #71005 from mikedanese/certpubfix
...
rootcacertpublisher: trigger resync on namespace add and update
2018-11-14 11:38:07 -08:00
1b9986b219
Kubeadm phases - add local flags
2018-11-14 20:29:52 +01:00
ba7d3c3ba8
Merge pull request #71009 from timothysc/phaseflow
...
Fixup language on help message to denote phases
2018-11-14 09:26:20 -08:00
98f3fb5059
kubeadm: remove leftover DynamicKubeletConfig constant
2018-11-14 17:32:45 +02:00
d5cd412ae0
reset helptext alignment
...
Signed-off-by: Ruben Orduz <rubenoz@gmail.com>
2018-11-14 09:59:48 -05:00
3e6d414b55
Merge pull request #70967 from mikedanese/fixtropts
...
Fix broken defaulting and validation in TokenRequest enablement
2018-11-13 22:03:42 -08:00
9fb2dcad5e
Limit kubelets from updating their own labels
2018-11-13 23:48:47 -05:00
ef3380b42d
Fixup language on help message to denote phases
...
Signed-off-by: Timothy St. Clair <timothysc@gmail.com>
2018-11-13 20:16:15 -06:00
90295640ef
Merge pull request #71010 from neolit123/revert-68890-dnspolicy
...
Revert "kubeadm: Create control plane with ClusterFirstWithHostNet dns policy"
2018-11-13 18:07:33 -08:00
20bad760fc
cleanup error handling in apiserver opts validation
2018-11-13 17:27:13 -08:00
06935e1c90
split TokenRequest initialization out of run and into complete and validate
2018-11-13 17:27:13 -08:00
8d27e5683c
Merge pull request #70874 from rdodev/reset-iptables
...
iptables reset text message
2018-11-13 16:14:04 -08:00
48d788de6f
Merge pull request #71001 from Deepomatic/recognize_docker_1809_version
...
Recognize newer docker versions without -ce/-ee suffix: 18.09.0
2018-11-13 14:59:36 -08:00
4d9c01d747
replace golang.org/x/exp/inotify with standalone library
...
The inotify code was removed from golang.org/x/exp several years ago. Therefore
importing it from that path prevents downstream consumers from using any module
that makes use of more recent features of golang.org/x/exp.
This change is a followup to google/cadvisor#2060 which was merged with #70889
This fixes #68478
2018-11-13 14:51:40 -08:00
24b4280e3f
Revert "kubeadm: Create control plane with ClusterFirstWithHostNet dns policy"
2018-11-14 00:18:32 +02:00
865904d0e1
kubeadm: update notes and example config in v1beta1 godocs
2018-11-13 23:52:42 +02:00
bea07c0dc6
Merge pull request #70935 from neolit123/kubeadm-update-cmd-go
...
kubeadm: update the state in app/cmd.go
2018-11-13 13:45:41 -08:00
8b562218b7
Merge pull request #70876 from chuckha/idempotency
...
kubeadm: Adds tests to node patching
2018-11-13 13:45:31 -08:00
3cba75ea60
Merge pull request #70603 from chuckha/pod-infra-container-image
...
kubeadm: set pod-infra-container-image for the kubelet
2018-11-13 13:45:02 -08:00
bf02f55147
rootcacertpublisher: trigger resync on namespace add and update
...
Last cleanup was a bit overzealous.
2018-11-13 11:38:45 -08:00
766aab509a
dedup APIAudiences config in kube-apiserver, use GenericConfig field
2018-11-13 11:07:31 -08:00
7a9a8f5f35
kubeadm graduate addons phase
2018-11-13 16:33:59 -02:00
bfb95290b9
Merge pull request #70795 from yuexiao-wang/print-join-command
...
kubeadm: print the join command
2018-11-13 10:11:21 -08:00
9a37f2d878
kubeadm: set pod-infra-container-image for the kubelet
...
The kubelet allows you to set `--pod-infra-container-image`
(also called `PodSandboxImage` in the kubelet config),
which can be a custom location to the "pause" image in the case
of Docker. Other CRIs are not supported.
Set the CLI flag for the Docker case in flags.go using
WriteKubeletDynamicEnvFile().
2018-11-13 13:10:22 -05:00
068cdaa56c
Recognize newer docker versions without -ce/-ee suffix
...
Since docker 18.09, the ServerVersion field format changed: the `-ce`
or `-ee` suffix disappeared:
- docker 18.06: `18.06.1-ce`
- docker 18.09: `18.09.0`
This was not expected by the docker_validator version regexp, which
assumed newer docker versions ended with `-[a-z]{2}`.
This made the validator return an error, whereas we expect it to
return only a warning (by recognizing it as a newer but not yet
supported docker version).
This commit relax the version regexp to also recognize `18.09.0`.
The docker validator now returns a warning, as tested.
2018-11-13 18:55:29 +01:00
db3d636f91
updates license year
...
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-13 12:49:42 -05:00
5792eeb137
kubeadm: Adds tests to node patching
...
Signed-off-by: Chuck Ha <ha.chuck@gmail.com>
2018-11-13 12:48:54 -05:00
9199025b24
Merge pull request #70849 from yagonobre/rm-dynamic-kubelet
...
Remove DynamicKubeletConfig from init and join workflow
2018-11-13 08:54:34 -08:00
bd2cb5a72d
Merge pull request #70831 from mikedanese/securesvcacct
...
add BoundServiceAccountTokenVolume feature
2018-11-13 08:54:25 -08:00
89a5d5cadd
iptables reset text message
...
Signed-off-by: Ruben Orduz <rubenoz@gmail.com>
2018-11-13 10:36:43 -05:00
62c9303ecf
Remove DynamicKubeletConfig from init and join workflow, also remove DynamicKubeletConfig feature gate
2018-11-13 11:56:24 -02:00
43574d1be3
remove kube-controller-manager dependency on the legacyscheme, using client-go scheme
2018-11-13 19:45:59 +08:00
5851fd556b
kubeadm: print the join command should happen after all the phases in init have finished
...
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2018-11-13 19:05:10 +08:00
7f1b2a62a7
fix kubeadm upgrade
2018-11-13 09:14:16 +01:00
bcef72bf06
Merge pull request #70877 from yagonobre/reset
...
Handler error when kubeconfig file not exist on kubeadm reset
2018-11-12 23:56:57 -08:00
3c5c6025bf
Merge pull request #70807 from Klaven/kubeadm_1221
...
kubeadm: Remove AuditPolicyConfiguration
2018-11-12 15:43:23 -08:00
f4ff26679f
add BoundServiceAccountTokenVolume feature
...
* require TokenRequest to be enabled and configured
* bind ca.crt publisher to this feature rather than to TokenRequest
2018-11-12 13:11:47 -08:00
08784ad9af
Merge pull request #70842 from mikedanese/simplify
...
combine syncs in rootcacertpublisher
2018-11-12 12:01:45 -08:00
064f74b2e8
fixes kubeadm 1221 to remove AuditPolicyConfiguration
...
Added conversion test and failure.
2018-11-12 14:33:26 -05:00
5e31a6bb74
Handler error when kubeconfig file not exist on kubeadm reset
2018-11-12 10:36:35 -02:00
fb73574d77
use glog.info instead glog.infof when no var
2018-11-12 17:30:37 +08:00
99811e2540
Merge pull request #70870 from fabriziopandini/kubeadm-config-JoinControlPlane
...
Kubeadm config refactor JoinControlPlane
2018-11-12 00:53:09 -08:00
5fb8229218
Merge pull request #70024 from fabriziopandini/kubeadm-addons-config
...
kubeadm - addon configuration in the kubeadm config API.
2018-11-12 00:52:59 -08:00
04bb2171a7
Merge pull request #70885 from neolit123/phase-mark-control-plane
...
kubeadm: graduate the mark-control-plane-phase
2018-11-11 19:07:10 -08:00
b99c8b994f
Merge pull request #70743 from bart0sh/PR0039-kubeadm-dont-prepull-etcd-if-not-required
...
kubeadm: prepull Etcd image only if required
2018-11-11 19:07:00 -08:00
c46e949799
kubeadm: update the state in app/cmd.go
...
- BETA->GA
- master->control-plane
- exclude @ mentions as only members can use them
2018-11-12 04:04:56 +02:00
206f5892a7
combine syncs in rootcacertpublisher
...
and some misc simplifications.
2018-11-11 11:29:32 -08:00
529dbd27ac
auto-generated file
2018-11-11 17:19:38 +08:00
a77652e9ab
kube-scheduler: output flags in logical sections
2018-11-11 17:19:38 +08:00
cf142a2d21
add log_file option to kubelet flags
...
Change-Id: I5e75902739e2f869244d1b8b229be2580aca8149
2018-11-10 22:22:01 -05:00
daae2a86ea
kubeadm: graduate mark-control-plane phase
...
Co-authored-by: Lubomir I. Ivanov <lubomirivanov@vmware.com>
2018-11-11 04:56:55 +02:00
fa161370f0
autogenerated
2018-11-10 17:37:00 +01:00
d484c8c087
kubeadm refactor joinControlPlane config
2018-11-10 17:36:49 +01:00
446d80693c
autogenerated
2018-11-10 17:27:51 +01:00
6759334f6e
add DNS struct to kubeadm config
2018-11-10 17:27:39 +01:00
954996e231
Move from glog to klog
...
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
* github.com/kubernetes/repo-infra
* k8s.io/gengo/
* k8s.io/kube-openapi/
* github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods
Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
2018-11-10 07:50:31 -05:00
97baad34a7
Merge pull request #67006 from mbohlool/crd_webhook_conversion
...
CRD webhook conversion
2018-11-10 02:33:51 -08:00
e2ca575d0f
CRD Conversion
2018-11-09 15:57:35 -08:00
d90f868c00
Merge pull request #70793 from rosti/use-hyperkube
...
kubeadm: UnifiedControlPlaneImage string -> UseHyperKubeImage bool
2018-11-09 14:31:28 -08:00
54fe139d4e
Merge pull request #70761 from luxas/rename_apiendpoint
...
kubeadm v1beta1: InitConfiguration.APIEndpoint -> LocalAPIEndpoint
2018-11-09 14:31:19 -08:00
c3d05c816d
Merge pull request #70757 from ereslibre/remove-cluster-name-from-join-configuration
...
kubeadm: Remove cluster name from JoinConfiguration
2018-11-09 12:46:09 -08:00
b551ad596a
kubeadm: UnifiedControlPlaneImage -> UseHyperKubeImage
...
Up until now UnifiedControlPlaneImage existed as a string value as part of the
ClusterConfiguration. This provided an override for the Kubernetes core
component images with a single custom image. It is mostly used to override the
control plane images with the hyperkube image. This saves both bandwith and
disk space on the control plane nodes.
Unfortunately, this specified an entire image string (complete with its prefix,
image name and tag). This disables upgrades of setups that use hyperkube.
Therefore, to enable upgrades on hyperkube setups and to make configuration
more convenient, the UnifiedControlPlaneImage option is replaced with a boolean
option, called UseHyperKubeImage. If set to true, this option replaces the
image name of any Kubernetes core components with hyperkube, thus allowing for
upgrades and respecting the image repository and version, specified in the
ClusterConfiguration.
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-09 17:35:20 +02:00
48c273b07e
autogenerated
2018-11-09 14:47:58 +02:00
5656338b6e
Update unit tests after the rename
2018-11-09 14:47:45 +02:00
731bcdc864
kubeadm: InitConfiguration.APIEndpoint -> LocalAPIEndpoint
2018-11-09 14:47:21 +02:00
8825843126
Merge pull request #70323 from qingsenLi/git181010
...
[kubeadm/app/..add other packages]Switch to github.com/pkg/errors
2018-11-09 01:02:06 -08:00
e94dd19e03
[kubeadm/app/..add other packages]Switch to github.com/pkg/errors
2018-11-09 18:54:03 +08:00
e0ce8478b2
Merge pull request #70825 from mikedanese/cleanup
...
finish controller name change and don't double check feature flag
2018-11-08 23:45:55 -08:00
34be549935
Merge pull request #70727 from yagonobre/bootstrap-token
...
kubeadm graduate bootstrap-token phase
2018-11-08 17:36:24 -08:00
be800e623a
Merge pull request #69663 from sttts/sttts-scheduler-secure-serving
...
scheduler: enable secure port and authn/z
2018-11-08 17:36:14 -08:00
1469bb413e
finish controller name change and don't double check feature flag
2018-11-08 15:51:49 -08:00
47b4e04842
kubeadm: Remove cluster name from JoinConfiguration
2018-11-08 23:29:52 +01:00
b2b25462c1
Merge pull request #70755 from ereslibre/remove-feature-gates-from-join-configuration
...
kubeadm: Remove feature gates from JoinConfiguration
2018-11-08 14:27:08 -08:00
91d6d75303
Merge pull request #70796 from detiber/revCoreDNS
...
[kubeadm] Update CoreDNS Version
2018-11-08 12:13:10 -08:00
f212b9db23
Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml
...
Switch to sigs.k8s.io/yaml from ghodss/yaml
2018-11-08 10:57:36 -08:00
3f5db92840
Merge pull request #68812 from WanLinghao/token_projection_ca_secret_create
...
Create Ca-certificate configmap used by token projected volume
2018-11-08 10:57:25 -08:00
fb88c199cd
kubeadm: Remove feature gates from JoinConfiguration
...
Relay on the feature gates provided by the ClusterConfiguration
when downloaded from the cluster during the join process.
2018-11-08 19:35:50 +01:00
1588af4031
kube-scheduler: add secure serving and authn/z integration tests
2018-11-08 16:43:59 +01:00
0ba66130b3
kube-scheduler: split out cmd Run func
2018-11-08 16:43:59 +01:00
d91feb6d18
kube-scheduler: move stopCh creation out of scheduler factory code
...
Enforces clean ownership of the channel.
2018-11-08 16:43:59 +01:00
cb95edafe8
kube-scheduler: enable secure ports 10259
2018-11-08 16:43:59 +01:00
30048e2e6a
[kubeadm] Update CoreDNS Version
...
Resolves an issue that has been seen with ExternalName services not resolving.
2018-11-08 08:55:48 -05:00
1af76aee9a
Merge pull request #69863 from stewart-yu/stewart-cloud-controller-manager-clean
...
fix register wrong configz for *-controller-manager
2018-11-08 04:06:43 -08:00
16d0992534
Merge pull request #69753 from wangzhen127/diff-node-status
...
Update kubelet node status report logic with node lease feature
2018-11-07 20:26:45 -08:00
efac533f92
To inject ca.crt into container when projected volume was specified, configmap should be created in each namespace.
...
This patch add a controller called "root-ca-cert-publisher" to complete above job as well as some bootstrap rbac policies.
2018-11-08 11:33:47 +08:00
e41f297d11
Merge pull request #69878 from Klaven/kubeadm_1072
...
Fixes /kubernetes/kubeadm/issues/1072 Cleanup of selfhosting logic
2018-11-07 19:10:25 -08:00
e743f0e475
kubeadm graduate bootstrap-token phase
2018-11-08 01:01:21 -02:00
8bc0447d8c
kubeadm: use client-go's MakeCSRFromTemplate() in 'renew'
...
Create CSR using the mentioned function which also encodes the
type CertificateRequestBlockType.
Without that 'certs renew' is failing with:
'PEM block type must be CERTIFICATE REQUEST'
2018-11-08 01:16:33 +02:00
df713d2711
Merge pull request #70729 from Pingan2017/remove-dulp-default
...
remove duplicate default in `kubelet --help`
2018-11-07 14:26:34 -08:00
98fc4a107a
Update kubelet node status report logic with node lease feature
...
When node lease feature is enabled, kubelet reports node status to api server
only if there is some change or it didn't report over last report interval.
2018-11-07 11:59:42 -08:00
43f523d405
Switch to sigs.k8s.io/yaml from ghodss/yaml
...
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
2018-11-07 13:17:32 -05:00
18dc529d05
Removed feature gates selfhosting, HA and store certs in secrets.
...
Added new alpha command to pivot to self hosted
Removed slelfhosting upgrade ability
Added warning message to self hosted pivot
added certs in secrets flag to new selfhosting comand
2018-11-07 11:44:54 -05:00
328c1825d4
kubeadm: prepull Etcd image only if required
...
Prepull Etcd image only if external Etcd is not used and
--etcd-upgrade=false is not specified.
Fixes : kubernetes/kubeadm#1214
2018-11-07 14:59:37 +02:00
55a29589c8
remove duplicate default in kubelet --help
2018-11-07 14:41:03 +08:00
7737576629
Merge pull request #70405 from yagonobre/upload-config
...
kubeadm graduate upload-config phase
2018-11-06 16:12:44 -08:00
50de3a0d79
Merge pull request #69659 from cheftako/lintClean3
...
Fixes lint errors in kubeapiserver packages
2018-11-06 14:02:05 -08:00
4860f8732a
testservers: return Run method errors correctly
2018-11-06 15:14:24 +01:00
79f1b66f4e
kubeadm graduate upload-config phase
2018-11-06 11:30:46 -02:00
c6c88f1bf1
Merge pull request #70666 from neolit123/phase-fix-hidden
...
kubeadm: make sure that commands are not added for hidden phases
2018-11-05 20:59:47 -08:00
be85dc07d9
Merge pull request #70534 from sttts/sttts-kube-ctrl-mgr-command-owner
...
cmd/kube-controller-manager: add myself as owner
2018-11-05 16:32:43 -08:00
7ac1f8974b
Merge pull request #70635 from xichengliudui/fix18110202
...
Modify and update the comments
2018-11-05 14:20:20 -08:00
faed5aa974
Merge pull request #70537 from yagonobre/validate-kubeconfig
...
Validate kubeconfig files in case of external CA mode
2018-11-05 14:20:10 -08:00
c8e5233971
Merge pull request #70646 from Pingan2017/kubelet-default
...
remove duplicate default value in `kubelet --help`
2018-11-05 12:58:26 -08:00
4a098980d6
kubeadm: make sure that commands are not added for hidden phases
2018-11-05 22:15:31 +02:00
1059feddbc
Merge pull request #70584 from Songjoy/fix-typo
...
fix typo Kubernets to Kubernetes
2018-11-05 11:42:17 -08:00
b3441e1348
Merge pull request #69662 from ereslibre/conditional-ipvs-check
...
kubeadm: Perform IPVS check on join only if the cluster was set up with IPVS
2018-11-05 10:24:17 -08:00
447720b4c6
cmd/kube-controller-manager: add myself as approver
2018-11-05 12:00:27 +01:00
eb6f7b1f17
kubeadm: Add configurable control plane up timeout
...
Until now the control plane timeout was fixed to 4 minutes and users did not
have the ability to change it. This commit allows that timeout to be configured
via the new `timeoutForControlPlane` option in the API server config (itself a
member of the ClusterConfiguration).
The default timeout is still 4 minutes.
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-05 12:36:28 +02:00
453197c3b7
Modify the wrong function name
...
Modify and update the comments
Modify and update the comments
2018-11-05 05:16:33 -05:00
7db1252023
remove duplicate default value in kubelet --help
2018-11-05 17:47:00 +08:00
f379f7b3e8
Merge pull request #70589 from fabriziopandini/kubeadm-phase-flags
...
Kubeadm phases - improve flags management
2018-11-04 19:19:07 -08:00
2af982abb9
Fixes lint errors in kubeapiserver packages
...
Fixes lint errors in kubeapiserver/admission, kubeapiserver/authorizer,
kubeapiserver/authenticator. Also enables lint testing of these
directories.
Fixed go format.
Fixed changes from config.
2018-11-04 17:22:41 -08:00
52ef8ebd97
Update bazel
2018-11-04 19:02:12 -02:00
e1320bba36
Validate kubeconfig files in case of external CA mode
2018-11-04 18:58:46 -02:00
3e5133e793
autogenerated
2018-11-04 19:47:04 +01:00
d63bae610f
improve flags management in phases
2018-11-04 19:46:55 +01:00
14120dd44a
Merge pull request #70611 from yagonobre/rsa
...
Fix error wrap on pki_helpers
2018-11-03 11:05:14 -07:00
a80a573074
Fix error wrap on pki_helpers
2018-11-03 10:17:20 -03:00
474e27f914
Merge pull request #70495 from rosti/writable-to-readonly-volumes
...
kubeadm: Writable to ReadOnly in HostPathMount
2018-11-03 01:43:02 -07:00
ee94a56214
Merge pull request #70551 from liztio/fix-renew-overflow
...
Fix overflow issue on renewal
2018-11-02 16:44:39 -07:00
5e76248e23
Merge pull request #70512 from neolit123/phase-wait-control-plane
...
kubeadm: graduate wait-control-plane phase
2018-11-02 16:44:20 -07:00
6c9e347e31
kubeadm: Writable to ReadOnly in HostPathMount
...
Writable was added to HostPathMount in v1alpha1 in order to control if an extra
volume is mounted in read only or writable mode.
Usually, in Kubernetes, this option is referred to as ReadOnly, instead of
Writable and is defaulted to `false`. However, at the time, all extra volumes
to pods were defaulted to read-only. Therefore, to avoid changes to existing
v1alpha1 configs, this option had to be added with reversed meaning.
Hence, it's called `writable`.
Now, with the migration towards v1beta1, we can safely change this to ReadOnly
and get it in sync with the reset of Kubernetes.
Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
2018-11-02 18:02:06 +02:00
b83a947ee9
Merge pull request #70371 from rosti/control-plane-substructs
...
kubeadm: Control plane config moved to substructs
2018-11-02 08:38:47 -07:00
adf9d7a031
Fix overflow issue on renewal
...
Co-authored-by: Ruben Orduz <rubenoz@gmail.com>
2018-11-02 10:12:57 -04:00
cbb448113d
kubeadm: graduate wait-control-plane phase
2018-11-02 15:47:23 +02:00
7f32ad0287
Merge pull request #70529 from SataQiu/fix-2018110101
...
Fix the expression of some comments
2018-11-02 05:29:05 -07:00
e8a09871e0
fix typo Kubernets to Kubernetes
...
fix typo Kubernets to Kubernetes in line 239
2018-11-02 20:24:01 +08:00
Kubernetes Prow Robot