github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
72,651 Commits
32 Branches
881 Tags
633 MiB
Commit Graph

5224 Commits (c47c6432f582c790d2f6eefc647d21b8c9642c5f)

Author SHA1 Message Date
k8s-ci-robot d399e079f2
Merge pull request #71002 from awly/certutil-cleanup 
Remove unused funcs in certutil
 2018-11-13 14:59:46 -08:00
k8s-ci-robot bc6aee19b0
Merge pull request #70884 from lavalamp/workqueue 
add a metric that can be used to notice stuck worker threads
 2018-11-13 14:59:27 -08:00
Han Kang f1f1bc83fd add ability to exclude health checks from failing healthz by passing in a query param 2018-11-13 14:48:44 -08:00
k8s-ci-robot 1777be5fbe
Merge pull request #70735 from wojtek-t/use_watch-cache_when_rv=0 
Use watch cache when rv=0 even when limit is set
 2018-11-13 13:45:13 -08:00
Andrew Lytvynov 09db5bc951 Remove k8s.io/client-go/util/cert/triple 
The package is unused.
 2018-11-13 13:08:50 -08:00
Andrew Lytvynov 5c073abfe1 Move csr.RequestNodeCertificate into kubelet bootstrap package 
This func is only used by the kubelet and there's no need to pollute
client-go API with it.
 2018-11-13 10:27:51 -08:00
Andrew Lytvynov 162b364292 Remove unused funcs in certutil 2018-11-13 10:26:43 -08:00
Stanislav Laznicka 628d1fef37
autogen files 2018-11-13 18:06:12 +01:00
wojtekt 4242d1b760 Use watch cache when rv=0 even when limit is set 2018-11-13 16:52:30 +01:00
Slava Semushin c21cb548e6
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file. 
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
 2018-11-13 14:05:21 +01:00
k8s-ci-robot efd19d3c94
Merge pull request #70970 from awly/unexport-csr-parsecsr 
Unexport csr.ParseCSR
 2018-11-12 18:31:45 -08:00
Andrew Lytvynov 41334cfdd3 Unexport csr.ParseCSR 
This func is only used internally and was copied from
k8s.io/kubernetes/pkg/apis/certificates.
 2018-11-12 17:15:09 -08:00
k8s-ci-robot 27cf50d85e
Merge pull request #70322 from mikedanese/audoidc 
make oidc authenticator (more?) audience aware
 2018-11-12 17:03:29 -08:00
Daniel Smith 680ddd49d8 fixup! add longest_running_processor_microseconds metric 
fix data race
 2018-11-12 12:57:42 -08:00
Mike Danese a714d9cd04 make oidc authenticator (more?) audience aware 
Part of https://github.com/kubernetes/kubernetes/issues/69893
 2018-11-12 12:43:21 -08:00
Daniel Smith fd77aa5a41 add longest_running_processor_microseconds metric 2018-11-12 10:52:18 -08:00
stewart-yu 529dbd27ac auto-generated file 2018-11-11 17:19:38 +08:00
stewart-yu a77652e9ab kube-scheduler: output flags in logical sections 2018-11-11 17:19:38 +08:00
Daniel Smith 578962d934 fixup! Test workqueue metrics 
change units to seconds
 2018-11-10 18:46:43 -08:00
Daniel Smith 44a87baf09 fixup! Test workqueue metrics 2018-11-10 18:24:59 -08:00
Davanum Srinivas e558e291d1
s/glog/klog/ - keep up with master 
Change-Id: I27ff0545bc456ed8c0900cfeb90555f9ab7ae235
 2018-11-10 07:57:01 -05:00
Davanum Srinivas 68ce375d00
Update all the staging Godeps.json 
Change-Id: I64b30c68a606b4f5c095a66496a1e48c4d62ea88
 2018-11-10 07:50:32 -05:00
Davanum Srinivas 954996e231
Move from glog to klog 
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
 2018-11-10 07:50:31 -05:00
k8s-ci-robot 97baad34a7
Merge pull request #67006 from mbohlool/crd_webhook_conversion 
CRD webhook conversion
 2018-11-10 02:33:51 -08:00
k8s-ci-robot 413ccb15c6
Merge pull request #70021 from pbarker/audit-plugins 
dynamic audit plugins
 2018-11-09 18:34:45 -08:00
Daniel Smith 74c50c0ad3 generated files 2018-11-09 16:24:12 -08:00
Daniel Smith 5a8444ceec Test workqueue metrics 2018-11-09 16:24:12 -08:00
Mehdy Bohlool d51d0164c5 Update generated files 2018-11-09 15:57:35 -08:00
Mehdy Bohlool e2ca575d0f CRD Conversion 2018-11-09 15:57:35 -08:00
Patrick Barker 54fd930d0e adds dynamic audit plugins generated 2018-11-09 15:38:08 -07:00
Patrick Barker 8eb2150689 adds dynamic audit plugins 2018-11-09 15:38:00 -07:00
k8s-ci-robot daea190bee
Merge pull request #70753 from logicalhan/healthz-test 
fix healthz checkerNames test so that it tests against the expected output
 2018-11-09 14:31:09 -08:00
Daniel Smith 6195d1005d add a metric that can be used to notice stuck worker threads 2018-11-09 10:50:11 -08:00
k8s-ci-robot e133ab274d
Merge pull request #70515 from davidz627/feature/csiNodeInfo 
Add explicit "Installed" field to CSINodeInfo and change update semantics
 2018-11-09 06:42:09 -08:00
David Zhu 06f3b26012 Change semantics of driver install and uninstall in CSINodeInfo to use new fields. 2018-11-08 19:45:01 -08:00
David Zhu 3595dee6cc Add fields available and volumePluginMechanism to CSINodeInfo CRD API Object. Split CSINodeInfo into Spec and Status. 2018-11-08 19:44:51 -08:00
k8s-ci-robot be800e623a
Merge pull request #69663 from sttts/sttts-scheduler-secure-serving 
scheduler: enable secure port and authn/z
 2018-11-08 17:36:14 -08:00
Haowei Cai 01c3274677 generated 2018-11-08 11:19:40 -08:00
Haowei Cai 3de9c01e85 Remove unused openapi-gen cmd 
as we switched to use k8s.io/kube-openapi/cmd/openapi-gen
 2018-11-08 11:07:33 -08:00
k8s-ci-robot f212b9db23
Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml 
Switch to sigs.k8s.io/yaml from ghodss/yaml
 2018-11-08 10:57:36 -08:00
tanshanshan cb95edafe8 kube-scheduler: enable secure ports 10259 2018-11-08 16:43:59 +01:00
k8s-ci-robot 3c10143967
Merge pull request #60195 from humblec/glusterfs-pvspec-3 
Refactor GlusterFS PV spec.
 2018-11-08 00:24:39 -08:00
k8s-ci-robot 16d0992534
Merge pull request #69753 from wangzhen127/diff-node-status 
Update kubelet node status report logic with node lease feature
 2018-11-07 20:26:45 -08:00
k8s-ci-robot e998d6c2bc
Merge pull request #70718 from cblecker/godep-round-a-million 
Fork godep to fix inconsistent abbreviation size
 2018-11-07 19:10:45 -08:00
k8s-ci-robot 66989e8bf3 Merge pull request #70670 from deads2k/default-healthz 
Add `With` method for allowed paths on delegated authorization
 2018-11-07 19:10:35 -08:00
k8s-ci-robot 5371ccdcde
Merge pull request #70289 from CharlyF/listing-datadog-cluster-agent 
Adding Datadog Cluster Agent to the list of Custom Metrics Providers
 2018-11-07 12:53:09 -08:00
k8s-ci-robot 7155b8a364
Merge pull request #70211 from roycaihw/crd-multi-version-x 
CRD supports multi-version Schema, Subresources and AdditionalPrintColumns
 2018-11-07 12:52:58 -08:00
Zhen Wang 98fc4a107a Update kubelet node status report logic with node lease feature 
When node lease feature is enabled, kubelet reports node status to api server
only if there is some change or it didn't report over last report interval.
 2018-11-07 11:59:42 -08:00
David Eads 77b56ec9e3 add With method for allowed URL options on delegated authorization 2018-11-07 14:49:28 -05:00
k8s-ci-robot 471aff6673
Merge pull request #70663 from wenjiaswe/gonet110 
Upgrade golang.org/x/net image to release-branch.go1.10
 2018-11-07 11:36:22 -08:00
Christoph Blecker d15da2c586
Update godeps 2018-11-07 11:02:07 -08:00
Han Kang 0623f630ab fix healthz checkerNames test so that it tests against the expected output 2018-11-07 10:31:15 -08:00
Davanum Srinivas 43f523d405
Switch to sigs.k8s.io/yaml from ghodss/yaml 
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
 2018-11-07 13:17:32 -05:00
Haowei Cai 5b545bbc13 generated 2018-11-07 09:38:49 -08:00
Haowei Cai 52cdc33669 Integration test (please review with -w to ignore 
whitespace changes)
 2018-11-07 09:38:31 -08:00
Haowei Cai 1282ed5efe API server serves CRD per-version schema/subresources/columns 2018-11-07 09:37:55 -08:00
Haowei Cai 0ab3d2c344 Validation, defaulting and pre-create/update strategy for 
CRD per-version schema/subresources/columns
 2018-11-07 09:37:14 -08:00
Haowei Cai e5587f52a7 Add feature gate and API changes for multi-version 
schema, subresources and columns
 2018-11-07 09:36:17 -08:00
k8s-ci-robot 7fe59165b6
Merge pull request #70193 from saad-ali/csiCRDAddon 
Register CSI CRDs as addon
 2018-11-06 23:55:56 -08:00
k8s-ci-robot 0aba557741
Merge pull request #70600 from liggitt/sig-auth-subprojects 
Add owners/approvers aliases for sig-auth subprojects
 2018-11-06 17:55:07 -08:00
Wenjia Zhang adf155ee9f update staging godeps for golang.org/x/net/... to release-branch.go1.10 2018-11-06 15:49:50 -08:00
saad-ali a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
k8s-ci-robot 08deddfdbc
Merge pull request #70671 from deads2k/delegated-system-master 
allow delegated authorization to have privileged groups
 2018-11-06 08:17:46 -08:00
David Eads 0b70b7a7c9 allow delegated authorization to have privileged groups 2018-11-06 10:03:54 -05:00
Humble Chirammal bdb051c72d Refactor GlusterFS PV spec. 
This patch introduces glusterfsPersistentVolumeSource addition
to glusterfsVolumeSource. All fields remains same as glusterfsVolumeSource
with an addition of a new field
called `EndpointsNamespace` to define namespace of endpoint in the
spec.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2018-11-06 15:51:01 +05:30
Jordan Liggitt 35178d352d auth policy subproject approvers/reviewers 2018-11-06 00:57:39 -05:00
Jordan Liggitt 666c93a834 encryption-at-rest approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4ebe084376 certificates subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 9ae79f9653 authorizers subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fa2a0cc8a authenticators subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fe30e92fa audit subproject owners/reviewers 2018-11-06 00:57:38 -05:00
k8s-ci-robot 710bfb440e
Merge pull request #70606 from mikedanese/tfreload 
periodically reload tokens read from TokenFile in kubeconfig
 2018-11-05 20:59:38 -08:00
k8s-ci-robot e6b3d31bcf
Merge pull request #70556 from pbarker/audit-test-fix 
updates audit endpoints test
 2018-11-05 19:04:36 -08:00
k8s-ci-robot c8604653f0
Merge pull request #70449 from mikedanese/simplcache 
remove webhook cache implementation and replace with token cache
 2018-11-05 16:32:34 -08:00
Mike Danese 0ec4d6d396 remove webhook cache implementation and replace with the token cache 
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:

* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.
 2018-11-05 13:08:45 -08:00
k8s-ci-robot 714711e52d
Merge pull request #70476 from charrywanganthony/backendGroupVersionV1 
Use `audit.k8s.io/v1` as default value of option --audit-webhook-vers…
 2018-11-05 11:41:58 -08:00
Mike Danese 718adb7473 periodically reload tokens read from TokenFile in kubeconfig 
Like we do with InClusterConfig.
 2018-11-05 10:04:28 -08:00
k8s-ci-robot 2bbfd500a8
Merge pull request #70593 from bbbmj/typo 
chore(apiserver): nit fix
 2018-11-02 21:28:50 -07:00
k8s-ci-robot d7f90253e9
Merge pull request #70553 from pbarker/webhook-refactor 
refactors kubeapiserver webhook utility to be generic
 2018-11-02 18:01:38 -07:00
包梦江 c5e51dc2e4 chore(apiserver): nit fix 2018-11-03 02:32:04 +08:00
k8s-ci-robot 023892af3c
Merge pull request #70525 from seunghunee/issue-69743 
Reduce leaderelection's renewed lease verbosity
 2018-11-02 10:47:11 -07:00
Patrick Barker d33f347ba8 refactors kubeapiserver webhook utility to be generic generated 2018-11-02 11:42:04 -06:00
Patrick Barker 1081fffdd5 refactors kubeapiserver webhook utility to be generic 2018-11-02 11:41:58 -06:00
k8s-ci-robot 77fd16e0e7
Merge pull request #69266 from SataQiu/fix-20180930 
Remove the redundant space
 2018-11-02 08:38:37 -07:00
k8s-ci-robot 9fb1153bd8
Merge pull request #70550 from liggitt/cleanup-scale-clients 
Drop generated clients for Scale types
 2018-11-02 05:29:15 -07:00
SataQiu c9bc625428 Remove the redundant space 2018-11-02 15:45:11 +08:00
k8s-ci-robot 45550cadbe
Merge pull request #70477 from andyzhangx/azure-ultrassd-sdk 
add azure UltraSSD disk support
 2018-11-01 22:16:55 -07:00
k8s-ci-robot a831ea20a4
Merge pull request #69976 from atlassian/update-few-dependencies 
Update a few dependencies
 2018-11-01 22:16:16 -07:00
Chao Wang 9671a035f7 Use `audit.k8s.io/v1` as default value of option --audit-webhook-version and --audit-log-version in release 1.13 2018-11-02 09:35:15 +08:00
Patrick Barker 5a84453e4e updates audit endpoints test 2018-11-01 18:02:41 -06:00
k8s-ci-robot 1165d661f0
Merge pull request #69916 from mikedanese/trev9 
create audience unaware authenticator wrappers
 2018-11-01 13:43:56 -07:00
Jordan Liggitt ff9dc86b3c Drop generated clients for Scale types 2018-11-01 14:49:51 -04:00
k8s-ci-robot b04f83dcd8
Merge pull request #70437 from liggitt/get-scale 
Add GetScale/UpdateScale methods to apps/v1 clients
 2018-11-01 11:11:32 -07:00
k8s-ci-robot 215234d3a3
Merge pull request #67778 from gyuho/typo 
staing/apimachinery: fix typo "perfer" to "prefer"
 2018-11-01 03:21:02 -07:00
seunghunee 920db78bea leaderelection: reduce renewed lease verbosity 
This patch changes the renewed lease log level from 4 to 5 of leaderelection.go

Fix: #69743
 2018-11-01 08:12:07 +00:00
andyzhangx f1bd292c76 add ultrassd support 
update stagin Godeps.json

update godeps license

fix test failure

fix comments
 2018-11-01 06:30:15 +00:00
k8s-ci-robot 6f897af2da
Merge pull request #70260 from lavalamp/schema-fix 
bump kube-openapi dep
 2018-10-31 23:04:56 -07:00
k8s-ci-robot 11706d3803
Merge pull request #67795 from mbohlool/crd_conversion_api_changes 
CRD Conversion API Changes
 2018-10-31 23:04:37 -07:00
Daniel Smith dcb10d81d1 update generated deps 2018-10-31 17:11:23 -07:00
k8s-ci-robot c81a4a09cf
Merge pull request #70453 from liggitt/api-owners 
Update API-related owners files
 2018-10-31 17:09:08 -07:00
Mikhail Mazurskiy 8763223ab9
Update a few dependencies 
github.com/go-openapi/*
github.com/asaskevich/govalidator
 2018-11-01 09:59:43 +11:00
Mike Danese c704d70d49 create audience unaware authenticator wrappers 2018-10-31 15:31:49 -07:00
Mike Danese 817cf70191 move audience context functions to authenticator package 2018-10-31 14:50:11 -07:00
Mehdy Bohlool e27096cdb4 Update generated files 2018-10-31 14:47:13 -07:00
Mehdy Bohlool 998e22dd5c FeatureGate and API Validation for CRD Webhook Conversion 2018-10-31 11:14:47 -07:00
Mehdy Bohlool 1587d189cb Refactor webhookclientConfig validation of admission and audit registration 2018-10-31 11:14:47 -07:00
Mehdy Bohlool 530c79939f API Types for CRD conversion 2018-10-31 11:14:47 -07:00
k8s-ci-robot 797f5afd2d
Merge pull request #70436 from liggitt/retain-keys 
Fix retainKeys patchStrategy in apps/deployments
 2018-10-31 10:32:17 -07:00
andyzhangx d210b4bcf3 upgrade azure sdk to support ultra ssd 
update Godeps.json

update azure sdk for ultrassd support

update bazel

fix build failure
 2018-10-31 10:08:52 +00:00
k8s-ci-robot 9e31e6567f
Merge pull request #70168 from wgliang/update-vendor/coreos-etcd 
Update vendor package github.com/coreos/...
 2018-10-30 19:48:30 -07:00
k8s-ci-robot 1dd7e6f65c
Merge pull request #70295 from caesarxuchao/ownerRef-nonnamespaced 
Fixing comments on the OwnerReference
 2018-10-30 16:16:18 -07:00
Jordan Liggitt 8c20bdaf46 Update API-related owners files 2018-10-30 17:05:08 -04:00
k8s-ci-robot 93d1567c6f
Merge pull request #70032 from iamneha/delete_namespaced_job_spec 
Fix(bug): make body an optional parameter in [DELETE] /apis/batch/v1/…
 2018-10-30 11:03:40 -07:00
k8s-ci-robot d196d63c01
Merge pull request #69884 from liggitt/self-sign-in-memory 
Allow components to generate certificates in-memory
 2018-10-30 11:03:29 -07:00
Chao Xu 1cc316f4dc Update comments on the OwnerReference to acknowledge that the owning 
object can be cluster scoped.
 2018-10-30 10:28:44 -07:00
Jordan Liggitt 4de1912c6e Add GetScale/UpdateScale methods to apps/v1 clients 2018-10-30 12:10:07 -04:00
Jordan Liggitt e6a8b29554 Fix retainKeys patchStrategy in apps/deployments 2018-10-30 11:48:50 -04:00
Jordan Liggitt 15a81f51d8 Fix GetScale/UpdateScale type for replicationcontroller client 2018-10-30 11:45:16 -04:00
k8s-ci-robot 361f8c31bd
Merge pull request #70314 from samdamana/auth-revert 
Revert "limit forbidden error to details of what was forbidden"
 2018-10-29 17:11:27 -07:00
k8s-ci-robot 952e7b07c6
Merge pull request #70310 from mikedanese/trev10 
echo audiences in anonymous and insecure authenticators
 2018-10-29 17:11:18 -07:00
k8s-ci-robot 5cf90790fe
Merge pull request #69059 from caesarxuchao/unconditional-generation-increment 
The metadata.generation of a Custom Resource is always incremented
 2018-10-29 12:07:51 -07:00
k8s-ci-robot d0a10f0ca9
Merge pull request #70311 from juanvallejo/jvallejo/fix-continueonerror-visitor 
fix ContinueOnError visitor
 2018-10-29 08:31:25 -07:00
Walter Fender 99ebe87471 Added tracing for long running requests. 
Added tracing for use cases where etcd is not the cause of long running
requests.
Fixed spelling.
Factored in Wojtek-t feedback.
 2018-10-29 00:37:32 -07:00
Gyuho Lee 1adb8100ba staing/apimachinery: fix typo "perfer" to "prefer" 
Signed-off-by: Gyuho Lee <leegyuho@amazon.com>
 2018-10-27 20:29:54 -07:00
k8s-ci-robot b7b0aae435
Merge pull request #70031 from nrfox/requeue-on-error 
Sample Controller: requeue work item on syncHandler error
 2018-10-27 03:19:59 -07:00
Neha Yadav 31372f1612 fix(bug): make body a optional parameter in [DELETE] /apis/batch/v1/namespaces/{namespace}/jobs/{name} 2018-10-27 09:33:36 +05:30
Samuel Davidson 294e02ed4b Revert "limit forbidden error to details of what was forbidden" 
This reverts commit ecbd013795.
 2018-10-26 15:58:09 -07:00
k8s-ci-robot 1df4f8eaf6
Merge pull request #70028 from liggitt/move-extensions-types 
move internal apps API types out of extensions package
 2018-10-26 15:56:13 -07:00
juanvallejo 4d753d4a59
fix ContinueOnError visitor 2018-10-26 18:35:06 -04:00
Mike Danese f94bc6193e echo audiences in anonymous and insecure authenticators 
part of https://github.com/kubernetes/kubernetes/issues/69893
 2018-10-26 15:33:54 -07:00
k8s-ci-robot 85555a7d73
Merge pull request #68559 from yue9944882/chore/respect-goflags-in-codegen 
chore(codegen): respect GOFLAGS when compiling code-generator
 2018-10-26 12:22:10 -07:00
Jordan Liggitt 7df2f9785e remove CustomMetricTarget 2018-10-25 21:11:52 -04:00
k8s-ci-robot 12cf545195
Merge pull request #70234 from Adirio/Adirio-patch-1 
Map allocation optimization for client-go/tools/cache
 2018-10-25 11:47:00 -07:00
k8s-ci-robot b6fd5d93b2
Merge pull request #69389 from smarterclayton/wait_error 
kubectl wait must handle errors returned by watch
 2018-10-25 09:40:41 -07:00
k8s-ci-robot f4bf0e8d33
Merge pull request #70237 from nikhita/proto-remove-trailing-whitespace 
Remove trailing whitespace in the protobuf generator
 2018-10-25 08:25:06 -07:00
Adrián 2299f45f52 Optimized map allocation in Replace methods 
Initial allocation of several maps as the sizes are known

Signed-off-by: Adrián Orive <adrian.orive.oneca@gmail.com>
 2018-10-25 14:25:00 +02:00
Nikhita Raghunath e60b0a129a generated proto: remove trailing whitespace 2018-10-25 16:37:33 +05:30
k8s-ci-robot 3a680bc42d
Merge pull request #70100 from lavalamp/schema-fix 
API Schema fix: container port keys
 2018-10-25 04:01:25 -07:00
Nikhita Raghunath 4911ad8ff1 Remove trailing whitespace in proto generator 2018-10-25 16:08:11 +05:30
k8s-ci-robot ed39bd45f5
Merge pull request #70087 from liggitt/fix-crd-internal-types 
Fix custom resource handler in-memory version
 2018-10-25 02:11:04 -07:00
zuoxiu.jm cac4ad79a3 make use of common generator script in aggregator codegen 2018-10-25 16:02:36 +08:00
zuoxiu.jm 615bcb2f88 respect GOFLAGS when compiling aggregator and add env args 2018-10-25 16:00:28 +08:00
k8s-ci-robot d96f235051
Merge pull request #69991 from agunnerson-ibm/issue-69471 
certificate_manager: Check that template differs from current cert before rotation
 2018-10-24 21:35:09 -07:00
Andrew Gunnerson b9ab65d689
certificate_manager: Check that template differs from current cert before rotation 
With the current behavior, when kubelet starts, a `templateChanged`
event is always fired off because it only checks if `getLastRequest`
matches `getTemplate`. The last request only exists in memory and thus
is initially `nil` and can't ever match the current template during
startup.

This causes kubelet to request the signing of a new CSR every time it's
restarted. This commit changes the behavior so that `templateChanged` is
only fired off if the currently template doesn't match both the current
certificate and the last template.

Fixes #69471

Signed-off-by: Andrew Gunnerson <andrew.gunnerson@us.ibm.com>
 2018-10-24 17:14:58 -04:00
k8s-ci-robot c89b239cfa
Merge pull request #69795 from yue9944882/chore/resync-psp-api 
Resycn psp v1beta1 api with internal
 2018-10-24 09:44:09 -07:00
Guoliang Wang d462e1e8d7 Update vendor package github.com/coreos/... 2018-10-24 07:52:40 +00:00
zuoxiu.jm e4a8ad49ee sync missing secret type to external api repo 2018-10-24 15:46:57 +08:00
k8s-ci-robot dad07683b1
Merge pull request #69013 from ibrasho-forks/switch-to-http.Error 
Update usages of http.ResponseWriter.WriteHeader to use http.Error
 2018-10-23 15:31:55 -07:00
charlyF 8532168d01
adding Datadog Cluster Agent to the list of Custom Metrics Providers 
Signed-off-by: charlyF <charly@datadoghq.com>
 2018-10-23 17:30:18 -04:00
k8s-ci-robot 1fe288ec02
Merge pull request #70138 from liggitt/optional-ca-bundle 
Correct optional/omitempty indicator on webhook cabundle
 2018-10-23 13:52:38 -07:00