github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
72,651 Commits
32 Branches
881 Tags
633 MiB
Commit Graph

32370 Commits (c47c6432f582c790d2f6eefc647d21b8c9642c5f)

Author SHA1 Message Date
Maciej Szulik aeb35206be Set delete propagation policy to background when removing jobs and its dependents 2018-12-06 17:23:07 +01:00
Kubernetes Prow Robot ad728da0e6
Merge pull request #71770 from yue9944882/automated-cherry-pick-of-#71744-origin-release-1.13 
Automated cherry pick of #71744: fixes autoscaling types conversion
 2018-12-06 05:17:48 -08:00
Pengfei Ni f6e8f3b183 Fix Azure node's internal IP address 
Only use the first IP address got from instance metadata. This is
because Azure CNI would setup a list of IP addresses in instance metata,
while only the first one is the Node's IP.
 2018-12-06 15:18:15 +08:00
zuoxiu.jm ff4c2cd0ed fixes autoscaling types conversion 2018-12-06 12:42:55 +08:00
Bobby (Babak) Salamat 669c5f42bf autogenerated files 2018-12-03 11:34:24 -08:00
Bobby (Babak) Salamat eb31bbb8d2 Change sort function of the scheduling queue to avoid starvation 2018-12-03 11:34:24 -08:00
Harsh Desai 29bea17b39 Update portworx to move from glog to klog 
Signed-off-by: Harsh Desai <harsh@portworx.com>
 2018-11-29 18:28:07 -08:00
Harsh Desai 41076f175b cache portworx API port 
- reused client whenever possible
- refactor get client function into explicit cluster-wide and local functions

Signed-off-by: Harsh Desai <harsh@portworx.com>
 2018-11-29 18:28:07 -08:00
Harsh Desai 40cf4b75ea Lookup PX api port from k8s service 
Fixes #70033

Signed-off-by: Harsh Desai <harsh@portworx.com>
 2018-11-29 18:28:07 -08:00
saad-ali 18050e308c Allow CSI Drivers suporting 0.x/1.x to use old dir 
Allow drivers implmenting both CSI 0.x and 1.x to use the old volume
plugin directory in addition to the the new volume plugin directory.
 2018-11-28 11:11:37 -08:00
andyzhangx cd2930258c fix detch azure disk issue by clean vm cache 2018-11-28 06:25:09 +00:00
Vladimir Vivien e86bdc7989 Forces fsnotify CREATE and REMOVE to occur serially 2018-11-26 22:11:47 -05:00
k8s-ci-robot 1e50c57113
Merge pull request #70740 from mfpierre/fix-kubectl-get-sort-out-of-range 
Fix index out of range error when sorting kubectl get
 2018-11-24 12:19:06 -08:00
andyzhangx 7b14a5a2a0 should return error when attach/detach failed 2018-11-23 12:42:13 +00:00
k8s-ci-robot 205eaee0e5
Merge pull request #71145 from gnufied/test-mounted-detach 
Fix volume detach while mount in progress
 2018-11-22 23:27:48 -08:00
k8s-ci-robot 12e5eb7dc9
Merge pull request #71011 from sigma/pr/fix-inotify 
replace golang.org/x/exp/inotify with standalone library
 2018-11-22 18:07:51 -08:00
k8s-ci-robot 20e1ab6744
Merge pull request #71314 from saad-ali/csi03Compat 
Reintroduce CSI 0.3.x support in CSI Volume Plugin
 2018-11-21 19:58:33 -08:00
saad-ali a7c5582bba Permit use of deprecated dir in device plugin. 2018-11-21 18:37:31 -08:00
saad-ali aa8244beb5 Modify CSI to handle both 0.3 and 1.0 
Modify the CSI volume plugin to handle CSI version 0.x as well as 1.x
 2018-11-21 18:37:31 -08:00
saad-ali d1b44857ad Add missing feature gate to CSI driver uninstall 2018-11-21 18:37:31 -08:00
saad-ali 2b44ec5e9c Reduce csipb dependencies 
Remove csipb dependency from everywhere except the CSI client in
preperation for supporting multiple CSI clients.
 2018-11-21 18:37:31 -08:00
saad-ali 8f666d9e41 Modify kubelet watcher to support old versions 
Modify kubelet plugin watcher to support older CSI drivers that use an
the old plugins directory for socket registration.
Also modify CSI plugin registration to support multiple versions of CSI
registering with the same name.
 2018-11-21 18:37:31 -08:00
k8s-ci-robot 9801572181
Merge pull request #71212 from cofyc/fix71068 
Clear pod binding cache
 2018-11-21 05:58:10 -08:00
k8s-ci-robot 28182b6606
Merge pull request #71156 from apelisse/race-condition-diff 
Optimistic-locking on diff
 2018-11-21 03:35:04 -08:00
Yecheng Fu 8fc00ebda6 Clear pod binding cache. 2018-11-21 11:24:53 +08:00
Antoine Pelisse a889f37505 Optimistic-locking on diff 
There is currently a race-condition when diffing, where we get the
object and then run a server-side dry-run patch and compare the two
results. If something changes the object on the server between the get
and the patch, the diff is going to show unrelated changes. We can now
specify the exact revisionversion that we want to patch, and that will
return a conflict, and we can retry multiple times to get a
non-conflicting diff. Eventually (after 3 times), we diff without
checking the version and throw a warning that the diff might be
partially wrong.
 2018-11-20 14:34:37 -08:00
Antoine Pelisse 89daa462ff Allow kubectl patcher to patch specific version 
Give a new "ResourceVersion" option to the patch so that the patch can
be forced against a specific version. Also there is no way to customize
how many retries the patcher should do on conflicts, so also add a
"Retries" option that let's one customize it.
 2018-11-20 14:34:08 -08:00
k8s-ci-robot 514a5b8f16
Merge pull request #70878 from jingxu97/Nov/repd 
Remove useBetaAPI option from getReplicaZoneURI
 2018-11-20 11:40:51 -08:00
Hemant Kumar d2b6e30143 Fix bug with volume getting marked as not in-use with pending op 
Add test for verifying volume detach
 2018-11-20 11:58:47 -05:00
Clayton Coleman 3464222267
Revert "Make bootstrap client cert loading part of rotation" 
This reverts commit 0af19875ad.

Revert "Ensure the bootstrap rotation code is tested by forcing rotation"

This reverts commit de293b2d7d.
 2018-11-17 10:24:39 -05:00
k8s-ci-robot e3420cc46f
Merge pull request #70494 from RenaudWasTaken/pluginwatcher 
Ignore non socket files in the kubelet plugin watcher
 2018-11-16 22:46:42 -08:00
k8s-ci-robot 3be3510814
Merge pull request #69890 from smarterclayton/bootstrap_retry 
Make bootstrap client cert loading part of rotation
 2018-11-16 22:46:33 -08:00
k8s-ci-robot ec2e767e59
Merge pull request #71167 from msau42/block-beta 
Promote raw block volume support to beta
 2018-11-16 20:28:03 -08:00
k8s-ci-robot df8ad8eae1
Merge pull request #71166 from Random-Liu/fix-kubelet-panic 
Fix kubelet panic.
 2018-11-16 20:27:53 -08:00
k8s-ci-robot 7e621ccb08
Merge pull request #71063 from Huang-Wei/nodeinfo-clone-panic 
fix a scheduler panic due to internal cache inconsistency
 2018-11-16 20:27:44 -08:00
k8s-ci-robot 1f3057b7fb
Merge pull request #70898 from Huang-Wei/preemption-issue 
ensure scheduler preemptor behaves in an efficient/correct path
 2018-11-16 20:27:35 -08:00
k8s-ci-robot f38cc95505
Merge pull request #62692 from mikedanese/trev2 
authn: extend authenticator.Token to support audience validation
 2018-11-16 20:27:25 -08:00
Clayton Coleman de293b2d7d
Ensure the bootstrap rotation code is tested by forcing rotation 
Expose both a Stop() method (for cleanup) and a method to force
cert rotation, but only expose Stop() on the interface.

Verify that we choose the correct client.
 2018-11-16 21:50:52 -05:00
Clayton Coleman 0af19875ad
Make bootstrap client cert loading part of rotation 
Ensure that bootstrap+clientcert-rotation in the Kubelet can:

1. happen in the background so that static pods aren't blocked by bootstrap
2. collapse down to a single call path for requesting a CSR
3. reorganize the code to allow future flexibility in retrieving bootstrap creds

Fetching the first certificate and later certificates when the kubelet
is using client rotation and bootstrapping should share the same code
path. We also want to start the Kubelet static pod loop before
bootstrapping completes. Finally, we want to take an incremental step
towards improving how the bootstrap credentials are loaded from disk
(potentially allowing for a CLI call to get credentials, or a remote
plugin that better integrates with cloud providers or KSMs).

Reorganize how the kubelet client config is determined. If rotation is
off, simplify the code path. If rotation is on, load the config
from disk, and then pass that into the cert manager. The cert manager
creates a client each time it tries to request a new cert.

Preserve existing behavior where:

1. bootstrap kubeconfig is used if the current kubeconfig is invalid/expired
2. we create the kubeconfig file based on the bootstrap kubeconfig, pointing to
   the location that new client certs will be placed
3. the newest client cert is used once it has been loaded
 2018-11-16 21:50:26 -05:00
k8s-ci-robot 4821291398
Merge pull request #71095 from msau42/csi-devicepath 
Remove devicePath dependency for CSI volumes
 2018-11-16 18:22:24 -08:00
k8s-ci-robot f877b2257a
Merge pull request #71074 from jsafrane/volume-manager-races 
Fix race between MountVolume and UnmountDevice
 2018-11-16 18:22:14 -08:00
Renaud Gaubert 1a3fbf1f13 Update e2e tests to include CSI 2018-11-17 01:52:57 +01:00
Renaud Gaubert 229418f261 Update pluginwatcher to ignore CSI metadata dir and non socket files 2018-11-17 01:51:00 +01:00
k8s-ci-robot b6bbb01f04
Merge pull request #71058 from verult/nodeinfomanager-retry 
Augmenting API call retry in nodeinfomanager; Revert #70891
 2018-11-16 16:31:40 -08:00
Michelle Au 18453b01e6 Tolerate apiserver being older than controller-manager 2018-11-16 16:31:27 -08:00
Mike Danese effad15ecc patch webhook authenticator to support token review with arbitrary audiences 2018-11-16 19:30:42 -05:00
Mike Danese ed17876e52 plumb apiAudience to TokenReview registry 2018-11-16 19:30:42 -05:00
Lantao Liu 59e80cdac3 Fix kubelet panic. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-11-16 16:21:57 -08:00
Michelle Au 974d47ecf8 Remove devicePath dependency for CSI volumes 2018-11-16 15:40:35 -08:00
Mike Danese 162699ca30 autogenerated 2018-11-16 17:54:33 -05:00
Mike Danese 04837fdef1 authn: add Audiences to TokenReview 2018-11-16 17:54:33 -05:00
Wei Huang b4fd11512a
ensure scheduler preemptor behaves in an efficient/correct path 
- don't update nominatedMap cache when Pop() an element from activeQ
- instead, delete the nominated info from cache when it's "assumed"
- unit test behavior adjusted
- expose SchedulingQueue in factory.Config
 2018-11-16 14:22:15 -08:00
k8s-ci-robot 9878253c3c
Merge pull request #70998 from deads2k/client-07-listwatchtimeout 
update the client generator to set a client-side timeout
 2018-11-16 13:19:57 -08:00
Wei Huang a86ba8b3c4
fix a scheduler panic due to internal cache inconsistency 2018-11-16 13:02:13 -08:00
Cheng Xing ca18690ceb Augmenting API call retry in nodeinfomanager 2018-11-16 13:00:22 -08:00
k8s-ci-robot 4e9c2a7a9b
Merge pull request #71114 from Lion-Wei/ipvs-reuse 
fix IPVS low throughput issue
 2018-11-16 12:04:00 -08:00
k8s-ci-robot e26b730143
Merge pull request #71103 from Pingan2017/autoscale-sts-kubectl 
support statefulset in kubectl autoscale command
 2018-11-16 12:03:51 -08:00
k8s-ci-robot 1b059e577c
Merge pull request #71101 from seans3/qos-resource-fix 
kubectl: small internal to external type fix
 2018-11-16 12:03:41 -08:00
Matthew Wong 9bbf768ad6 Fix BlockVolume feature gate toggling in validation & defaults unit tests 2018-11-16 13:38:59 -05:00
Matthew Wong dd517c9ff2 Update all tests to account for BlockVolume enabled by default 2018-11-16 13:38:59 -05:00
Matthew Wong 2ff98f7832 Promote BlockVolume to beta 2018-11-16 13:38:59 -05:00
David Eads 8f7edec615 generated 2018-11-16 12:41:17 -05:00
Jordan Liggitt 733dd9dfd7 Add tests to ensure feature gate changes don't escape kubelet/scheduler packages 2018-11-16 10:52:53 -05:00
Jordan Liggitt de8bf9b63d fix scheduler and kubelet unit tests leaking feature flag changes 2018-11-16 10:52:53 -05:00
Jordan Liggitt 248d661327 Add tests to ensure storage feature gate changes don't escape packages 2018-11-16 10:52:53 -05:00
Jordan Liggitt 358c092abe fix storage unit tests leaking feature flag changes 2018-11-16 10:52:52 -05:00
Michelle Au fd64c08240 Fix storage feature gate test setting 2018-11-16 10:49:40 -05:00
k8s-ci-robot 7c4d097faf
Merge pull request #71104 from yue9944882/chore/follow-up-cli-describer-externalization 
Follow-up of #70950: Duplicated versioned client in describer
 2018-11-16 07:34:39 -08:00
k8s-ci-robot 92fe9d9491
Merge pull request #71081 from vladimirvivien/kubelet-plugin-watcher-ga-fix 
Kubelet Plugin Registration GA migration fix
 2018-11-16 05:13:18 -08:00
Jan Safranek 5283537401 Fixed clearing of devicePath after UnmountDevice 
UnmountDevice must not clear devicepath, because such devicePath
may come from node.status (e.g. on AWS) and subsequent MountDevice
operation (that may be already enqueued) needs it.
 2018-11-16 13:24:42 +01:00
k8s-ci-robot 666739ac0c
Merge pull request #70580 from tsmetana/check-pvc-binding-again 
PV Controller: fix recycling
 2018-11-16 03:56:33 -08:00
k8s-ci-robot 6fc60428a7
Merge pull request #71020 from saad-ali/updateCSI10 
Bump CSI Spec to 1.0.0 and gRPC to 1.13.0
 2018-11-16 01:53:21 -08:00
k8s-ci-robot 1cdc918e11
Merge pull request #70728 from Pingan2017/remove-kubectl-run-container 
Remove deprecated kubectl command aliases 'run-container'
 2018-11-16 01:53:11 -08:00
k8s-ci-robot a856c7ab1d
Merge pull request #70973 from ping035627/k8s-181113 
Refactor New function
 2018-11-15 23:52:54 -08:00
liangwei f39060c604 set net/ipv4/vs/conn_reuse_mode to 0 2018-11-16 15:17:24 +08:00
k8s-ci-robot cde4c9ebe1
Merge pull request #68635 from mkimuram/issue/68424 
CSI block volume refactor to fix target path
 2018-11-15 21:35:42 -08:00
zuoxiu.jm 5ede82cdc7 fixes duplicated describer client 2018-11-16 11:30:05 +08:00
Pingan2017 c3bb1c4601 support statefulset in kubectl autoscale command 2018-11-16 10:42:39 +08:00
Sean Sullivan 6a57de315d kubectl: small internal to external type fix 2018-11-15 16:45:17 -08:00
saad-ali 09d3dce38a Update CSI client to pick up CSI v1.0.0 changes 2018-11-15 16:39:59 -08:00
Masaki Kimura 9c56b53390 Fix the comment for csi block pathes to make look the same to filesystem 2018-11-15 23:26:19 +00:00
k8s-ci-robot e615df9d23
Merge pull request #70950 from yue9944882/chore/prune-cli-describer-internal 
Use versioned types in kubectl describer
 2018-11-15 15:00:12 -08:00
k8s-ci-robot e4ee887121
Merge pull request #69303 from appian/host_aliases_on_same_line 
Write HostAliases aliases on same line per host IP
 2018-11-15 14:59:52 -08:00
k8s-ci-robot 7cf211d7de
Merge pull request #69196 from CaoShuFeng/job.yaml 
fix kubectl wait with no resource name provided
 2018-11-15 14:59:42 -08:00
Vladimir Vivien b195396154 Kubelet Plugin Registration v1 update fix 2018-11-15 17:40:35 -05:00
k8s-ci-robot 7b4d4bc8ac
Merge pull request #70508 from dashpole/pod_resources_socket 
Add socket-based kubelet pod resources API.
 2018-11-15 13:43:44 -08:00
k8s-ci-robot 504466c4e6
Merge pull request #68267 from liggitt/node-label-update 
Limit kubelets from updating their own labels when NodeRestriction is enabled
 2018-11-15 11:11:02 -08:00
David Ashpole 630cb53f82 add kubelet grpc server for pod-resources service 2018-11-15 09:43:20 -08:00
David Ashpole 288667f436 add KubeletPodResources feature-gate 2018-11-15 09:38:59 -08:00
David Ashpole aa9ba976ac generate go client for kubelet podresources API 2018-11-15 09:38:59 -08:00
David Ashpole 3ece501f6b add kubelet pod-resources API definition 2018-11-15 09:38:59 -08:00
zuoxiu.jm da9387131e prune internal clients from kubectl describer 2018-11-16 00:11:10 +08:00
Tomas Smetana f9c9ef6ec0 PV Controller: fix recycling 
In the situation when a PVC is deleted and a new one with the same name
bound to a different PV the "old" PV may fail to recycle since it's
associaded with a PVC that is detected as being in use. This may cause
the recycler processes to hang.
 2018-11-15 16:38:25 +01:00
k8s-ci-robot b1a52a38e9
Merge pull request #67257 from pbarker/audit 
dynamic audit configuration
 2018-11-15 02:42:59 -08:00
PingWang 9e760732c3 Refactor New function 
Signed-off-by: PingWang <wang.ping5@zte.com.cn>

add comments for InitPolicyFromFile

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

make the methods package private

Signed-off-by: PingWang <wang.ping5@zte.com.cn>
 2018-11-15 14:30:19 +08:00
k8s-ci-robot 843a67b215
Merge pull request #70559 from vladimirvivien/kubelet-plugin-watcher-ga 
Graduate Kubelet plugin registration/watcher to GA
 2018-11-14 20:35:08 -08:00
k8s-ci-robot 726c07eb26
Merge pull request #69929 from jsafrane/csi-ga 
Promote CSIPersistentVolume feature to GA
 2018-11-14 20:34:58 -08:00
k8s-ci-robot 012a438dbe
Merge pull request #68655 from goodluckbot/kubectl-cordon-drain-uncordon 
Support multiple arguments for cordon and drain
 2018-11-14 20:34:48 -08:00
Masaki Kimura 6d7b5f1d1b Delegate creation of publishPath to driver and allow creating device file directly 2018-11-15 01:14:12 +00:00
Patrick Barker 5cb70e369f adds dynamic audit configuration generated 2018-11-15 01:03:45 +00:00
Patrick Barker eb89d3dddd adds dynamic audit configuration 2018-11-14 17:54:06 -07:00
Jordan Liggitt eaff4fd4d2 Tolerate existing CSI fields in PVs when the feature is disabled 2018-11-14 17:57:54 -05:00
k8s-ci-robot 9c304cf0cb
Merge pull request #70157 from mikedanese/trev1 
retrofit svcacct token authenticator to support audience validation
 2018-11-14 13:16:44 -08:00
Masaki Kimura d8c6fe5202 Change stagingPath to be a directory 2018-11-14 20:53:28 +00:00
k8s-ci-robot 5a84dffc75
Merge pull request #71007 from mikedanese/allowdefault 
TokenRequestProjections should allow API server to default empty audience
 2018-11-14 11:38:16 -08:00
k8s-ci-robot 1a9fd268a9
Merge pull request #71005 from mikedanese/certpubfix 
rootcacertpublisher: trigger resync on namespace add and update
 2018-11-14 11:38:07 -08:00
k8s-ci-robot 68fb529ec1
Merge pull request #70969 from awly/node-csr-move 
Move csr.RequestNodeCertificate into kubelet bootstrap package
 2018-11-14 11:37:58 -08:00
Masaki Kimura f0354ad605 Fix for adding block volume support to CSI RBD driver 2018-11-14 19:20:56 +00:00
k8s-ci-robot 774f162884
Merge pull request #70999 from liggitt/oversized-spdystream-frames 
Ensure oversized data frames are not written to spdystreams
 2018-11-14 09:26:06 -08:00
Jan Safranek 8cfce0af99 Tighten up validation of VolumeAttachment fields 2018-11-14 16:46:59 +01:00
Michelle Au 498cd61f41 Add volumeattachment status subresource 2018-11-14 14:01:16 +01:00
Jan Safranek e95b188656 Generated files 2018-11-14 14:01:16 +01:00
Jan Safranek 633431c38a Promote CSIPersistentVolumeSource to GA 2018-11-14 14:01:16 +01:00
Jan Safranek 534ce94c22 Move CSIPersistentVolume feature to GA 2018-11-14 14:01:16 +01:00
Vladimir Vivien f16d3c56f6 Kubelet plugin watcher update to v1 2018-11-14 05:46:27 -05:00
Vladimir Vivien 668c532dda Pluginregistration package updat to v1 2018-11-14 05:46:19 -05:00
k8s-ci-robot a44c2b9eeb
Merge pull request #70035 from liggitt/retain-quota-metadata 
Avoid dropping resourcequota metadata in controller
 2018-11-14 01:29:53 -08:00
k8s-ci-robot 3e6d414b55
Merge pull request #70967 from mikedanese/fixtropts 
Fix broken defaulting and validation in TokenRequest enablement
 2018-11-13 22:03:42 -08:00
Jordan Liggitt 9fb2dcad5e Limit kubelets from updating their own labels 2018-11-13 23:48:47 -05:00
Mike Danese 67bbf753cb retrofit svcacct token authenticator to support audience validation 2018-11-13 20:38:41 -08:00
Mike Danese 3167b15908 TokenRequestProjections should allow API server to default empty audience 2018-11-13 20:25:16 -08:00
k8s-ci-robot 4c4a76557d
Merge pull request #70956 from apelisse/add-diff-test 
Add test for CRD server-dry-run and fix bug
 2018-11-13 19:45:53 -08:00
k8s-ci-robot d3a21cf5a2
Merge pull request #70848 from cofyc/fix64590 
Improve usability of CSI plugin metrics
 2018-11-13 19:45:43 -08:00
k8s-ci-robot 54243e1921
Merge pull request #69344 from zegl/improve-kubectl-apply-prune-output 
Fix dry-run output in kubectl apply --prune
 2018-11-13 19:45:34 -08:00
AdamDang cc4d38c768 Typo fix: healtcheck->healthcheck (#65394) 
Typo fix: healtcheck->healthcheck

Typo fix: healtcheck->healthcheck
 2018-11-13 19:45:24 -08:00
Jordan Liggitt 0202e269a3 Fix sending oversided data frames to spdy stream 2018-11-13 22:13:09 -05:00
k8s-ci-robot 50c384ff9e
Merge pull request #70833 from WanLinghao/typo_fix 
fix a typo import by myself
 2018-11-13 18:07:23 -08:00
k8s-ci-robot d00cb23c8d
Merge pull request #71006 from liggitt/kubectl-run-apps-v1 
update kubectl run to generate apps/v1 deployments
 2018-11-13 16:14:23 -08:00
k8s-ci-robot a04e854428
Merge pull request #70742 from ddebroy/ddebroy-csinode1 
Add validation of CSINodeInfo fields before Create/Update actions
 2018-11-13 16:13:55 -08:00
k8s-ci-robot 709e6ac3e2
Merge pull request #70413 from Pingan2017/kubectl-config-view 
validate args for kubectl config view
 2018-11-13 16:13:45 -08:00
k8s-ci-robot bc6aee19b0
Merge pull request #70884 from lavalamp/workqueue 
add a metric that can be used to notice stuck worker threads
 2018-11-13 14:59:27 -08:00
k8s-ci-robot 68b4be3e19
Merge pull request #70775 from freehan/pod-ready-cli 
add readiness gates in kubectl extended output for pods
 2018-11-13 14:59:18 -08:00
k8s-ci-robot a88f2973e0
Merge pull request #70466 from Pingan2017/get-statefulset 
Improve human-readable output of Deployments and StatefulSets
 2018-11-13 14:59:08 -08:00
Yann Hodique 4d9c01d747 replace golang.org/x/exp/inotify with standalone library 
The inotify code was removed from golang.org/x/exp several years ago. Therefore
importing it from that path prevents downstream consumers from using any module
that makes use of more recent features of golang.org/x/exp.

This change is a followup to google/cadvisor#2060 which was merged with #70889

This fixes #68478
 2018-11-13 14:51:40 -08:00
WanLinghao fb3d1caf9b fix a typo error imported by https://github.com/kubernetes/kubernetes/pull/68812 2018-11-13 13:23:10 -08:00
Vladimir Vivien a160e259f3 Feature gate update to GA 2018-11-13 16:03:39 -05:00
Jordan Liggitt 03f26e4612 update kubectl run to generate apps/v1 deployments 2018-11-13 14:39:25 -05:00
Mike Danese bf02f55147 rootcacertpublisher: trigger resync on namespace add and update 
Last cleanup was a bit overzealous.
 2018-11-13 11:38:45 -08:00
Mike Danese 766aab509a dedup APIAudiences config in kube-apiserver, use GenericConfig field 2018-11-13 11:07:31 -08:00
Andrew Lytvynov 5c073abfe1 Move csr.RequestNodeCertificate into kubelet bootstrap package 
This func is only used by the kubelet and there's no need to pollute
client-go API with it.
 2018-11-13 10:27:51 -08:00
k8s-ci-robot bd2cb5a72d
Merge pull request #70831 from mikedanese/securesvcacct 
add BoundServiceAccountTokenVolume feature
 2018-11-13 08:54:25 -08:00
k8s-ci-robot 67b7d9777d
Merge pull request #70749 from brancz/log-metrics 
pkg/kubelet/logs: Add container log size metric
 2018-11-13 06:47:08 -08:00
Deep Debroy 05759a9091 Handle validation of drivers in Spec and Status 
Signed-off-by: Deep Debroy <ddebroy@docker.com>
 2018-11-13 02:35:30 -08:00
Deep Debroy af73d7bdc1 Add validation of CSINodeInfo before Create/Update calls 
Signed-off-by: Deep Debroy <ddebroy@docker.com>
 2018-11-13 00:48:56 -08:00
k8s-ci-robot 468c99ea24
Merge pull request #70558 from seans3/custom-column-move 
kubectl: move custom columns printers and flags
 2018-11-12 22:17:30 -08:00
Daniel Smith 980242c209 fixup! add longest_running_processor_microseconds metric 2018-11-12 21:57:57 -08:00
k8s-ci-robot 27cf50d85e
Merge pull request #70322 from mikedanese/audoidc 
make oidc authenticator (more?) audience aware
 2018-11-12 17:03:29 -08:00
Sean Sullivan e0b712d428 kubectl: move custom columns printers and flags 2018-11-12 14:31:59 -08:00
k8s-ci-robot 3bcbc5da79
Merge pull request #70887 from seans3/kubectl-get-fix 
kubectl get: remove internal resource dependency
 2018-11-12 13:20:08 -08:00
Mike Danese f4ff26679f add BoundServiceAccountTokenVolume feature 
* require TokenRequest to be enabled and configured
* bind ca.crt publisher to this feature rather than to TokenRequest
 2018-11-12 13:11:47 -08:00
Frederic Branczyk 4724fca678
pkg/kubelet/stats: Add container log size metric 2018-11-12 22:04:50 +01:00
Mike Danese a714d9cd04 make oidc authenticator (more?) audience aware 
Part of https://github.com/kubernetes/kubernetes/issues/69893
 2018-11-12 12:43:21 -08:00
k8s-ci-robot 08784ad9af
Merge pull request #70842 from mikedanese/simplify 
combine syncs in rootcacertpublisher
 2018-11-12 12:01:45 -08:00
Antoine Pelisse d3d4d268ac Add test for CRD server-dry-run and fix bug 
Add a new test to make sure we can server-dry-run CRDs and also fix a
typo now that we have a test, we could notice that it doesn't work.
 2018-11-12 11:06:27 -08:00
Daniel Smith fd77aa5a41 add longest_running_processor_microseconds metric 2018-11-12 10:52:18 -08:00
juanvallejo 18e969e8b6
update bazel 2018-11-12 10:13:48 -05:00
juanvallejo 9f1cc8571e
defer finalizing pods for cronjobs to server delete 2018-11-12 10:13:48 -05:00
k8s-ci-robot d8e78c8ac5
Merge pull request #66149 from honkiko/do-not-take-all-endpoints-into-ipset 
hairpin ipset could only contain local endpoints
 2018-11-12 02:04:09 -08:00
Bill Warshaw ab507dfc1f Write HostAliases aliases on same line per host IP 
* change HostAliases to put all aliases for an IP
  on the same line in /etc/hosts rather than writing
  one line per IP-alias pair
* having multiple entries in /etc/hosts for the same IP
  causes issues with DNS resolution for some software
* https://unix.stackexchange.com/questions/102660/hosts-file-is-it-incorrect-to-have-the-same-ip-address-on-multiple-lines
 2018-11-11 20:54:52 -05:00
Yecheng Fu dfe0a08f05 Improve usability of CSI plugin metrics 
Use full qualified plugin name if volume spec is present.
 2018-11-12 09:21:49 +08:00
Mike Danese 206f5892a7 combine syncs in rootcacertpublisher 
and some misc simplifications.
 2018-11-11 11:29:32 -08:00
goodluckbot df31468ce7 Support multiple arguments for cordon and drain 2018-11-12 00:28:36 +08:00
Gustav Westling 37c253aba1 Fix the TestRunApplyPrintsValidObjectList test 
The fake webclient should return one ConfigMap per request, not the whole ConfigMapList

Also added additional tests to the output
 2018-11-11 15:19:29 +01:00
Gustav Westling 74e63c8f00 Fix dry-run output in kubectl apply --prune 
Makes dry-run output match what would happen when running in non dry-run mode.

Objects would only get added to visitedUids if running in non dry-run mode.

visitedUids is used by prune() to know if an action should be taked on the item or not.

Fixes #67863
 2018-11-11 15:06:38 +01:00
Daniel Smith 578962d934 fixup! Test workqueue metrics 
change units to seconds
 2018-11-10 18:46:43 -08:00
Davanum Srinivas e558e291d1
s/glog/klog/ - keep up with master 
Change-Id: I27ff0545bc456ed8c0900cfeb90555f9ab7ae235
 2018-11-10 07:57:01 -05:00
Davanum Srinivas 954996e231
Move from glog to klog 
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
 2018-11-10 07:50:31 -05:00
k8s-ci-robot 7872a1db2f
Merge pull request #70856 from lojies/cleanuptaint 
code cleanup for kubectl taint
 2018-11-10 00:14:22 -08:00
k8s-ci-robot 2a3d55f607
Merge pull request #70813 from ravisantoshgudimetla/revert-limits-priority 
Revert resource limits priority function
 2018-11-10 00:14:12 -08:00
k8s-ci-robot b8fece50f5
Merge pull request #70892 from mikedanese/schedrace 
Fix a race in the scheduler.
 2018-11-09 23:01:15 -08:00
k8s-ci-robot be71fbe511
Merge pull request #70034 from wangzhen127/cleanup-node-lease 
Delete node lease if the corresponding node is deleted
 2018-11-09 23:01:05 -08:00
k8s-ci-robot bb4fbc2770
Merge pull request #70821 from RenaudWasTaken/fix-pluginwatcher-panic 
Pluginwatcher: Fix panic on failed startup
 2018-11-09 20:25:41 -08:00
Pingan2017 182a66f9b7 add Ready column for kubectl get sts command 2018-11-10 10:40:33 +08:00
k8s-ci-robot 2dcdad297e
Merge pull request #70883 from seans3/printing-test-remove 
kubectl: remove redundant test
 2018-11-09 16:23:13 -08:00
k8s-ci-robot ebaba20ed1
Merge pull request #70837 from kubernetes/revert-70605-affinity_lock_opt 
Revert "Hold mutex lock shorter when processing inter-pod affinity/anti-affin…"
 2018-11-09 16:22:55 -08:00
k8s-ci-robot 94bc005fb1
Merge pull request #70830 from mtaufen/dkcfg-fix 
Don't compare interface values in dynamic config controller
 2018-11-09 16:22:46 -08:00
k8s-ci-robot e3ddd8577a
Merge pull request #70820 from seans3/kubectl-convert-deprecate 
kubectl convert: add deprecation warning for 1.13
 2018-11-09 16:22:36 -08:00
Mike Danese 62c3ec969d Fix a race in the scheduler. 
Loop over priorityConfigs seperately. The node loop can only safely
modify result[i][index]. Before this change it sometimes modified
result[i] concurrently with other loops.

Fixes: 7164967662

==================== Test output for //pkg/scheduler/core:go_default_test:
==================
WARNING: DATA RACE
Read at 0x00c0005e8ed0 by goroutine 22:
  k8s.io/kubernetes/pkg/scheduler/core.PrioritizeNodes.func2()
      pkg/scheduler/core/generic_scheduler.go:667 +0x2ea
  k8s.io/kubernetes/vendor/k8s.io/client-go/util/workqueue.ParallelizeUntil.func1()
      staging/src/k8s.io/client-go/util/workqueue/parallelizer.go:65 +0x9e

Previous write at 0x00c0005e8ed0 by goroutine 21:
  k8s.io/kubernetes/pkg/scheduler/core.PrioritizeNodes.func2()
      pkg/scheduler/core/generic_scheduler.go:668 +0x450
  k8s.io/kubernetes/vendor/k8s.io/client-go/util/workqueue.ParallelizeUntil.func1()
      staging/src/k8s.io/client-go/util/workqueue/parallelizer.go:65 +0x9e

Goroutine 22 (running) created at:
  k8s.io/kubernetes/vendor/k8s.io/client-go/util/workqueue.ParallelizeUntil()
      staging/src/k8s.io/client-go/util/workqueue/parallelizer.go:57 +0x1a3
  k8s.io/kubernetes/pkg/scheduler/core.PrioritizeNodes()
      pkg/scheduler/core/generic_scheduler.go:682 +0x592
  k8s.io/kubernetes/pkg/scheduler/core.(*genericScheduler).Schedule()
      pkg/scheduler/core/generic_scheduler.go:186 +0x77d
  k8s.io/kubernetes/pkg/scheduler/core.TestGenericScheduler.func1()
      pkg/scheduler/core/generic_scheduler_test.go:464 +0x91f
  testing.tRunner()
      GOROOT/src/testing/testing.go:827 +0x162

Goroutine 21 (running) created at:
  k8s.io/kubernetes/vendor/k8s.io/client-go/util/workqueue.ParallelizeUntil()
      staging/src/k8s.io/client-go/util/workqueue/parallelizer.go:57 +0x1a3
  k8s.io/kubernetes/pkg/scheduler/core.PrioritizeNodes()
      pkg/scheduler/core/generic_scheduler.go:682 +0x592
  k8s.io/kubernetes/pkg/scheduler/core.(*genericScheduler).Schedule()
      pkg/scheduler/core/generic_scheduler.go:186 +0x77d
  k8s.io/kubernetes/pkg/scheduler/core.TestGenericScheduler.func1()
      pkg/scheduler/core/generic_scheduler_test.go:464 +0x91f
  testing.tRunner()
      GOROOT/src/testing/testing.go:827 +0x162
==================
--- FAIL: TestGenericScheduler (0.01s)
    --- FAIL: TestGenericScheduler/test_6 (0.00s)
        testing.go:771: race detected during execution of test
    testing.go:771: race detected during execution of test
FAIL
 2018-11-09 15:21:22 -08:00
Sean Sullivan c814f61510 kubectl get: remove internal resource dependency 2018-11-09 11:33:11 -08:00
Sean Sullivan 6b0f66d864 kubectl: remove redundant test 2018-11-09 11:12:20 -08:00
Daniel Smith 6195d1005d add a metric that can be used to notice stuck worker threads 2018-11-09 10:50:11 -08:00
Michael Taufen 1089cb629f Don't compare interface values in dynamic config controller 
This previously caused a panic when moving lastKnownGood between two
non-nil values, because we were comparing the interface wrapper instead
of comparing the NodeConfigSources. The case of moving from one non-nil
lastKnownGood config to another doesn't appear to be tested by the e2e
node tests. I added a unit test and an e2e node test to help catch bugs
with this case in the future.
 2018-11-09 10:45:12 -08:00
Jing Xu c5b5f64f3b Remove useBetaAPI option from getReplicaZoneURI 
This is a follow up PR for #70716. Remove useBetaAPI option since
Regional PD is already GA.
 2018-11-09 09:45:43 -08:00
k8s-ci-robot e133ab274d
Merge pull request #70515 from davidz627/feature/csiNodeInfo 
Add explicit "Installed" field to CSINodeInfo and change update semantics
 2018-11-09 06:42:09 -08:00
lojies e3d69d8c33 code cleanup for kubectl taint 2018-11-09 16:22:00 +08:00
k8s-ci-robot e0ce8478b2
Merge pull request #70825 from mikedanese/cleanup 
finish controller name change and don't double check feature flag
 2018-11-08 23:45:55 -08:00
k8s-ci-robot 8c2509de5b
Merge pull request #70716 from jingxu97/Nov/versionupdate 
Move Regional PD to GA
 2018-11-08 23:45:45 -08:00
David Zhu 06f3b26012 Change semantics of driver install and uninstall in CSINodeInfo to use new fields. 2018-11-08 19:45:01 -08:00
David Zhu 4621887037 Updated test files with new fields 2018-11-08 19:45:01 -08:00
Babak "Bobby" Salamat a2c0958428
Revert "Hold mutex lock shorter when processing inter-pod affinity/anti-affin…" 2018-11-08 18:26:26 -08:00
Minhan Xia 55d88c5d0b add description for pod readiness gate 2018-11-08 18:17:59 -08:00
k8s-ci-robot be800e623a
Merge pull request #69663 from sttts/sttts-scheduler-secure-serving 
scheduler: enable secure port and authn/z
 2018-11-08 17:36:14 -08:00
Renaud Gaubert 11fef8ba3b Pluginwatcher should prevent kubelet from starting if we cannot watch the plugin root 2018-11-09 00:20:22 +00:00
Mike Danese 1469bb413e finish controller name change and don't double check feature flag 2018-11-08 15:51:49 -08:00
Renaud Gaubert 3a467ff44b Pluginwatcher: log error when walking fs rather than fail 2018-11-08 23:22:07 +00:00
Renaud Gaubert 3f5039a2d1 Fix pluginwatcher panic on failed startup 2018-11-08 23:22:07 +00:00
Sean Sullivan 62ec499d6f kubectl convert: add deprecation warning for 1.13 2018-11-08 11:50:49 -08:00
k8s-ci-robot f212b9db23
Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml 
Switch to sigs.k8s.io/yaml from ghodss/yaml
 2018-11-08 10:57:36 -08:00
k8s-ci-robot 3f5db92840
Merge pull request #68812 from WanLinghao/token_projection_ca_secret_create 
Create Ca-certificate configmap  used by token projected volume
 2018-11-08 10:57:25 -08:00
ravisantoshgudimetla 5d60471688 Revert resource limits priority function 2018-11-08 13:44:24 -05:00