github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
73,831 Commits
32 Branches
881 Tags
633 MiB
Commit Graph

5463 Commits (cd2d33eaa3ab5afcf95bca4fa3b67e630ac17ac5)

Author SHA1 Message Date
Dr. Stefan Schimanski 7db6f7a89c aggregator: fix available condition transition time 2018-12-07 12:22:24 +01:00
Kubernetes Prow Robot 2ea5000379
Merge pull request #69803 from rfranzke/fix/metav1_duration_openapi 
Add OpenAPI scheme methods for metav1.Duration
 2018-12-07 00:03:47 -08:00
Di Xu 4b524ef995 kubectl loads config file once and uses persistent client config 2018-12-07 15:41:40 +08:00
zhengjiajin e3b2e9d8a3 prune internalversion clientset lister informer 2018-12-07 11:46:21 +08:00
zhengjiajin be13db1b85 Switch sample apiserver internalversion informer to external 2018-12-07 11:46:03 +08:00
Kubernetes Prow Robot b703016614
Merge pull request #70983 from xichengliudui/fix18111302 
Delete some redundant code
 2018-12-06 19:03:08 -08:00
Kubernetes Prow Robot 257a6d5bfa
Merge pull request #71755 from liggitt/tolerate-authn-lookup-failure 
Allow kube-scheduler to tolerate cluster auth config lookup failure
 2018-12-06 11:05:13 -08:00
Rafael Franzke 712cbc5a3d Add OpenAPI scheme methods for metav1.Duration 2018-12-06 15:05:46 +01:00
Kubernetes Prow Robot 0351853ea1
Merge pull request #71657 from mrIncompetent/informer-gen/respect-resourceName-tag 
make informer-gen respect the resourceName tag
 2018-12-06 03:50:26 -08:00
Kubernetes Prow Robot 82b0d8fd37
Merge pull request #71380 from sttts/sttts-aggregator-metrics-available 
aggregator: add APIService unavailability metrics
 2018-12-06 00:02:55 -08:00
Jordan Liggitt 416e114215 Allow kube-scheduler to tolerate cluster auth config lookup failure 2018-12-05 14:13:47 -05:00
mrIncompetent 574816dff5 update bazel 2018-12-05 12:30:42 +01:00
mrIncompetent 7e9c09caf5 make informer-gen respect the resourceName tag 2018-12-05 12:30:39 +01:00
Kubernetes Prow Robot 2bd14ea60e
Merge pull request #71713 from liggitt/tokenfile-reload 
Plumb token and token file through rest.Config
 2018-12-04 11:41:03 -08:00
Jordan Liggitt dba85e58de Plumb token and token file through rest.Config 2018-12-04 13:04:24 -05:00
Kubernetes Prow Robot 300b1bab8b
Merge pull request #71636 from tao12345666333/rm-duplicate-word 
remove duplicate word
 2018-12-04 04:12:20 -08:00
Kubernetes Prow Robot a9b69dc381
Merge pull request #71615 from jpbetz/etcd-3.3.10-0-image 
Update default etcd server to 3.3.10 for kubernetes 1.14
 2018-12-04 02:54:34 -08:00
Kubernetes Prow Robot 3a83f291ef
Merge pull request #71088 from smarterclayton/wait_cap 
util: Refactor Backoff to return the next step rather than sleeping
 2018-12-03 23:28:05 -08:00
danielqsj 3c055aa4b4 Fix typos like limitting 2018-12-04 11:01:40 +08:00
Clayton Coleman e62d389fb0
util: Refactor Backoff to return the next step rather than sleeping 
Allows consumers to use Backoff as a generator rather than have to
call ExponentialBackoff
 2018-12-03 16:43:16 -05:00
Joe Betz 862b945e5a Update default etcd server to 3.3.10 for kubernetes 1.13 2018-12-03 11:03:49 -08:00
Dr. Stefan Schimanski fce6eb0903 aggregator: add metrics for request errors 2018-12-03 14:58:17 +01:00
Dr. Stefan Schimanski 7190b17e5a apiserver: add component label to request metrics 2018-12-03 14:58:13 +01:00
Kubernetes Prow Robot dc9261bc3b
Merge pull request #71174 from smarterclayton/debug_kubeadm 
Restore bootstrap in the background with fix to preserve kubeadm behavior
 2018-12-03 05:49:57 -08:00
Dr. Stefan Schimanski ff6e028755 apiserver: add group+version to request metrics 2018-12-03 14:29:50 +01:00
Jintao Zhang b32bd6e812 remove duplicate word 
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2018-12-03 19:24:45 +08:00
Yecheng Fu 9632e4349e vendor github.com/prometheus/client_golang/prometheus/testutil package 
updating staging godeps
 2018-12-02 10:25:55 +08:00
Kubernetes Prow Robot d158952293
Merge pull request #70722 from yue9944882/test/enchance-test-regression-for-versioning-codec 
Part of #68464: Enchance unit test regression for unstructured in versioning codec
 2018-12-01 15:00:36 -08:00
Kubernetes Prow Robot 4b9b7ffc6f
Merge pull request #71273 from deads2k/agg-02-detect 
only update the apiservice status if the status has changed
 2018-12-01 10:36:23 -08:00
k8s-ci-robot 5d8e93cbc4
Merge pull request #71525 from logicalhan/api-service-condition-tests 
add unit tests for api-service condition methods and also refactor out getAPIServiceConditionByType
 2018-11-30 08:20:18 -08:00
k8s-ci-robot 96516bd961
Merge pull request #71263 from ZYecho/fix-spellings 
fix typo: namspace -> namespace
 2018-11-30 06:33:50 -08:00
k8s-ci-robot 3e1c0d47c2
Merge pull request #71318 from sttts/sttts-etcd-v 
apiserver: set klog as etcdclient logger
 2018-11-29 21:45:22 -08:00
k8s-ci-robot 79e5cb2cb7
Merge pull request #71302 from liggitt/verify-unit-test-feature-gates 
Split mutable and read-only access to feature gates, limit tests to readonly access
 2018-11-29 21:45:12 -08:00
k8s-ci-robot 15556551be
Merge pull request #68942 from nikhita/csi-api-staging-restrict-imports 
Add import restrictions for csi-api
 2018-11-29 21:44:42 -08:00
k8s-ci-robot 1fd45cfb24
Merge pull request #71272 from sttts/sttts-unstructured-accessor-intermediate-not-found 
unstructured: return not-found if intermediate path is not found
 2018-11-29 19:04:55 -08:00
k8s-ci-robot a08d89c0f5
Merge pull request #70959 from MikeSpreitzer/group-still-not-optional 
Clarified syntax doc on --watch-cache-sizes
 2018-11-29 19:04:46 -08:00
k8s-ci-robot 81eb9ce491
Merge pull request #71217 from jsafrane/status-update-unit-test 
CSI v1 leftovers
 2018-11-29 15:26:53 -08:00
k8s-ci-robot 4372d62ff5
Merge pull request #71211 from jsafrane/meta-status-reset 
Refactor status PrepareForUpdate into standalone method
 2018-11-29 15:26:42 -08:00
k8s-ci-robot 409bfc4337
Merge pull request #71047 from pivotal-k8s/bump-k8s-utils 
Bump k8s.io/uitls to 8e7ff06
 2018-11-29 11:17:08 -08:00
k8s-ci-robot 163b54dc4d
Merge pull request #70995 from stewart-yu/stewart-sample-controller-redurabce-import 
remove duplicated import
 2018-11-29 11:16:39 -08:00
k8s-ci-robot d0ac922996
Merge pull request #70440 from nikhita/add-license-headers 
Add license header to non-generated proto files
 2018-11-29 00:48:05 -08:00
k8s-ci-robot 86d4d95e0d
Merge pull request #70426 from sttts/sttts-testserver-run-errors 
testservers: return Run method errors correctly
 2018-11-29 00:47:45 -08:00
Clayton Coleman 63c49ba55a
Better organize object conversion in response handling 
Prepare to support watch by cleaning up the conversion method and
splitting out each transition into a smaller method.
 2018-11-28 22:03:51 -05:00
Clayton Coleman 56a25d8c5f
Ensure all response object modification happens in one place 
Make setLink and setListLink the same, and make them happen in transformResponseObject.
Make those methods also responsible for ensuring an empty list. Then move outputMediaType
negotiation before all other calls in the specific methods, to ensure we fail fast.

Refactoring in preparation to support type conversion on watch.
 2018-11-28 21:34:26 -05:00
Han Kang 47ed1019a3 add unit tests for api-service condition methods and also refactor out getAPIServiceConditionByType 2018-11-28 15:26:36 -08:00
Yang Li 3d9e2f09d0 Pass locks by pointer instead of by value 2018-11-27 10:24:25 +08:00
Yang Li 43f9302b90 Fix golint warnings 2018-11-27 10:24:25 +08:00
João Taveira Araújo bd268c9971 Fix duped watch in client-go/testing. 
This commit fixes a bug in the client-go/testing fixture whereby a
watcher would fire twice for objects with no namespace.
 2018-11-26 14:07:37 -08:00
Nikhita Raghunath b3ad9e697c csi-api: fix Saad Ali's username in SECURITY_CONTACTS 2018-11-27 00:51:26 +05:30
Jingfang Liu 5604a15024 update staging Godeps and import restrictions 2018-11-26 11:03:00 -08:00
Jingfang Liu 09855d31db copy kustomize/k8sdeps into cli-runtime 2018-11-26 11:01:56 -08:00
Jordan Liggitt f199f3d5a3 Set deadline for returning backend error 2018-11-26 09:15:13 -05:00
Dr. Stefan Schimanski a00d08610f apiserver: set klog as etcdclient logger 2018-11-26 11:46:04 +01:00
Jordan Liggitt b84e3dd6f8 Verify backend upgraded connection 2018-11-25 14:25:38 -05:00
David Eads 541f036a49 only update the apiservice status if the status has changed 2018-11-21 16:28:45 -05:00
k8s-ci-robot 2b0212de9c
Merge pull request #71206 from stlaz/enc_config_opt 
Rename '--experimental-encryption-provider-config' to '--encryption-provider-config'
 2018-11-21 11:30:12 -08:00
Jordan Liggitt 2498ca7606 drop VerifyFeatureGatesUnchanged 2018-11-21 11:51:33 -05:00
Jordan Liggitt d440ecdd3b Update non-test code to use DefaultMutableFeatureGate 2018-11-21 11:51:33 -05:00
Jordan Liggitt 1d6db5924f Tighten feature gate interface to split out mutating methods 2018-11-21 11:51:32 -05:00
k8s-ci-robot 3d5998edcd
Merge pull request #71298 from stewart-yu/stewart-controller-manager-flags 
add missing flags in *-controller-manager --help
 2018-11-21 05:58:20 -08:00
Jay Lim 10dd5d6631 *-controller-manager: fix missing global flags for --help 2018-11-21 17:39:14 +08:00
Christoph Blecker c7d3951927
Update github.com/json-iterator/go to 1.1.4 2018-11-20 18:13:01 -08:00
Dr. Stefan Schimanski 52b1718a63 unstructured: return not-found if intermediate path is not found 2018-11-20 17:21:52 +01:00
zhangyue 596a20ca8a fix typo: namspace -> namespace 
Signed-off-by: zhangyue <zy675793960@yeah.net>
 2018-11-20 21:47:27 +08:00
Sergei Orlov 21c1bb8830
kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'. 
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
 2018-11-19 16:34:09 +01:00
Jan Safranek 0c4b89fad6 Fix typo 2018-11-19 15:28:14 +01:00
Jan Safranek 787611a614 Refactor status PrepareForUpdate into standalone method 
Someone else might find reseting metadata fields useful.
 2018-11-19 14:46:06 +01:00
k8s-ci-robot 7ba79c3183
Merge pull request #71128 from yue9944882/chore/add-reviewer 
Add yue9944882 to CRD/CR apiserver reviewer
 2018-11-18 14:14:17 -08:00
Yang Li 8dc9619d44 Call cancel functions to avoid context leaks 2018-11-18 17:40:35 +08:00
Yang Li 267425667f Fix unreachable code 2018-11-18 04:16:25 +08:00
Clayton Coleman 486577df17 Restore "Make bootstrap client cert loading part of rotation"" 
This reverts the revert of commit 3464222267.
 2018-11-17 13:44:58 -05:00
Clayton Coleman 3464222267
Revert "Make bootstrap client cert loading part of rotation" 
This reverts commit 0af19875ad.

Revert "Ensure the bootstrap rotation code is tested by forcing rotation"

This reverts commit de293b2d7d.
 2018-11-17 10:24:39 -05:00
k8s-ci-robot 46ebebcc4f
Merge pull request #65763 from x13n/audit-logging 
Add option to k8s apiserver to reject incoming requests upon audit failure
 2018-11-17 04:39:56 -08:00
k8s-ci-robot 3be3510814
Merge pull request #69890 from smarterclayton/bootstrap_retry 
Make bootstrap client cert loading part of rotation
 2018-11-16 22:46:33 -08:00
k8s-ci-robot ec2e767e59
Merge pull request #71167 from msau42/block-beta 
Promote raw block volume support to beta
 2018-11-16 20:28:03 -08:00
k8s-ci-robot f38cc95505
Merge pull request #62692 from mikedanese/trev2 
authn: extend authenticator.Token to support audience validation
 2018-11-16 20:27:25 -08:00
Clayton Coleman de293b2d7d
Ensure the bootstrap rotation code is tested by forcing rotation 
Expose both a Stop() method (for cleanup) and a method to force
cert rotation, but only expose Stop() on the interface.

Verify that we choose the correct client.
 2018-11-16 21:50:52 -05:00
Clayton Coleman 0af19875ad
Make bootstrap client cert loading part of rotation 
Ensure that bootstrap+clientcert-rotation in the Kubelet can:

1. happen in the background so that static pods aren't blocked by bootstrap
2. collapse down to a single call path for requesting a CSR
3. reorganize the code to allow future flexibility in retrieving bootstrap creds

Fetching the first certificate and later certificates when the kubelet
is using client rotation and bootstrapping should share the same code
path. We also want to start the Kubelet static pod loop before
bootstrapping completes. Finally, we want to take an incremental step
towards improving how the bootstrap credentials are loaded from disk
(potentially allowing for a CLI call to get credentials, or a remote
plugin that better integrates with cloud providers or KSMs).

Reorganize how the kubelet client config is determined. If rotation is
off, simplify the code path. If rotation is on, load the config
from disk, and then pass that into the cert manager. The cert manager
creates a client each time it tries to request a new cert.

Preserve existing behavior where:

1. bootstrap kubeconfig is used if the current kubeconfig is invalid/expired
2. we create the kubeconfig file based on the bootstrap kubeconfig, pointing to
   the location that new client certs will be placed
3. the newest client cert is used once it has been loaded
 2018-11-16 21:50:26 -05:00
k8s-ci-robot 39c8219999
Merge pull request #71158 from liggitt/revert-openapi-publish 
Revert openapi publish
 2018-11-16 18:22:43 -08:00
k8s-ci-robot 1e22f080ec
Merge pull request #67383 from stlaz/enc_config_promotion 
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file
 2018-11-16 16:31:30 -08:00
Mike Danese effad15ecc patch webhook authenticator to support token review with arbitrary audiences 2018-11-16 19:30:42 -05:00
Mike Danese 162699ca30 autogenerated 2018-11-16 17:54:33 -05:00
Mike Danese 04837fdef1 authn: add Audiences to TokenReview 2018-11-16 17:54:33 -05:00
Jordan Liggitt 8799eb4e2e Revert "Merge pull request #67205 from roycaihw/crd-openapi-spec" 
This reverts commit 54ee58b2d6, reversing
changes made to 9e2820e4c9.
 2018-11-16 16:36:24 -05:00
Jordan Liggitt ad2b916d7c Revert "Merge pull request #71137 from sttts/sttts-crd-openapi-spec-recursive-v2-prune" 
This reverts commit 3ea3cfc3be, reversing
changes made to fab7009997.
 2018-11-16 16:36:04 -05:00
k8s-ci-robot 3ea3cfc3be
Merge pull request #71137 from sttts/sttts-crd-openapi-spec-recursive-v2-prune 
apiextensions: prune {any,one}Of + Not recursively on OpenAPI v2 conversion
 2018-11-16 13:20:25 -08:00
k8s-ci-robot c418e2a04f
Merge pull request #71120 from WanLinghao/audit_log_fix 
fix a description error in DynamicAuditing feature
 2018-11-16 13:20:07 -08:00
k8s-ci-robot 9878253c3c
Merge pull request #70998 from deads2k/client-07-listwatchtimeout 
update the client generator to set a client-side timeout
 2018-11-16 13:19:57 -08:00
Matthew Wong 7a6acefd21 Generate code for BlockVolume beta promotion 2018-11-16 13:38:59 -05:00
Matthew Wong 2ff98f7832 Promote BlockVolume to beta 2018-11-16 13:38:59 -05:00
WanLinghao 84aa00c03d fix a description error in DynamicAuditing feature 2018-11-17 01:49:02 +08:00
Dr. Stefan Schimanski 0d9a022533 apiextensions: prune {any,one}Of + Not recursively on OpenAPI v2 conversion 2018-11-16 18:42:01 +01:00
David Eads 8f7edec615 generated 2018-11-16 12:41:17 -05:00
David Eads 493bc79c04 update client generator for local timeout 2018-11-16 11:43:37 -05:00
Jordan Liggitt 248d661327 Add tests to ensure storage feature gate changes don't escape packages 2018-11-16 10:52:53 -05:00
k8s-ci-robot f1e4ec8e48
Merge pull request #71076 from liggitt/preserve-stack 
Propagate panics up handler chain
 2018-11-16 05:13:09 -08:00
k8s-ci-robot 54ee58b2d6
Merge pull request #67205 from roycaihw/crd-openapi-spec 
Serve OpenAPI spec for registered CRDs
 2018-11-16 05:12:41 -08:00
zuoxiu.jm af505dcd14 add reviewer 2018-11-16 20:12:28 +08:00
k8s-ci-robot 9e2820e4c9
Merge pull request #71067 from sttts/sttts-handler-panic 
apiserver: preserve stack trace in handler panic beyond timeout handler
 2018-11-16 03:57:11 -08:00
Daniel Kłobuszewski 7a10f4eda7 Add option to k8s apiserver to reject incoming requests upon audit failure 2018-11-16 10:32:49 +01:00
saad-ali 9d4810f25a Bump grpc from 1.7.5 to 1.13.0 2018-11-15 16:39:42 -08:00
Haowei Cai 94e3c2899f generated 2018-11-15 11:03:04 -08:00
Haowei Cai e0d4c65b53 Convert and construct OpenAPI v2 spec from CRD 
validation OpenAPI v3 Schema
 2018-11-15 11:02:47 -08:00
Haowei Cai 3222a7033c Apiextensions-apiserver aggregates CRD schemas 
efficiently without checking conflicts, and wire up CRD discovery
controller to serve OpenAPI spec.
 2018-11-15 11:02:11 -08:00
Haowei Cai 92d95df0ba Enable aggregator apiserver resyncing openapi spec 
from delegation apiservers
 2018-11-15 11:00:25 -08:00
Jordan Liggitt 0952c9ee96 apiserver: propagate panics from REST handlers correctly 2018-11-15 12:35:51 -05:00
Dr. Stefan Schimanski 96fd0482f4 apiserver: preserve stack trace in handler panic beyond timeout handler 2018-11-15 17:36:11 +01:00
Hannes Hörl 0d4b5c98f8 Bump k8s.io/uitls to 8e7ff06 
The reason for the bump is the new functionality of the
k8s.io/utils/exec package which allows
- to get a hold of the process' std{out,err} as `io.Reader`s
- to `Start` a process and `Wait` for it

This should help on addressing #70890 by allowing to wrap std{out,err}
of the process to be wrapped with a `io.limitedReader`.

It also updates
- k8s.io/kubernetes/pkg/probe/exec.FakeCmd
- k8s.io/kubernetes/pkg/kubelet/prober.execInContainer
- k8s.io/kubernetes/cmd/kubeadm/app/phases/kubelet.fakeCmd
to implement the changed interface.

The dependency on 'k8s.io/utils/pointer' to the new version has also
been bumped in some staging repos:
- apiserver
- kube-controller-manager
- kube-scheduler
 2018-11-15 13:25:12 +00:00
k8s-ci-robot b7e2980a57
Merge pull request #68576 from jennybuckley/openapi-optimize 
Build OpenAPI Definitions per group instead of per resource
 2018-11-15 05:04:57 -08:00
k8s-ci-robot b1a52a38e9
Merge pull request #67257 from pbarker/audit 
dynamic audit configuration
 2018-11-15 02:42:59 -08:00
k8s-ci-robot f48e18faa4
Merge pull request #70971 from cheftako/leaseCheck 
Report KCM as unhealthy if leader election is wedged.
 2018-11-15 01:30:59 -08:00
Dr. Stefan Schimanski e43e5e2e45 apiserver: in timeout_test separate out handler 2018-11-15 09:56:53 +01:00
xichengliudui 3b9798efe9 update notes 2018-11-15 01:29:59 -05:00
k8s-ci-robot 726c07eb26
Merge pull request #69929 from jsafrane/csi-ga 
Promote CSIPersistentVolume feature to GA
 2018-11-14 20:34:58 -08:00
k8s-ci-robot 22eb2b0dae
Merge pull request #70966 from awly/cert-triple-cleanup 
Remove k8s.io/client-go/util/cert/triple
 2018-11-14 19:20:07 -08:00
k8s-ci-robot 4fb368e5fd
Merge pull request #70801 from Adirio/deltafifo-cleanup 
DeltaFIFO cleanup
 2018-11-14 19:19:57 -08:00
Patrick Barker 5cb70e369f adds dynamic audit configuration generated 2018-11-15 01:03:45 +00:00
Walter Fender 9c43ee6d6e Report KCM as unhealthy if leader election is wedged. 
Feedback from lavalamp and deads2k.
Changed Check() logic to be central to LeaderElector.
Further changes, especially cleaning up the test code.
 2018-11-14 16:57:37 -08:00
Patrick Barker eb89d3dddd adds dynamic audit configuration 2018-11-14 17:54:06 -07:00
jennybuckley d02a543f37 Update generated 2018-11-14 12:50:11 -08:00
jennybuckley 758e8623e9 Build OpenAPI Definitions per group instead of per resource 2018-11-14 12:50:02 -08:00
k8s-ci-robot 68fb529ec1
Merge pull request #70969 from awly/node-csr-move 
Move csr.RequestNodeCertificate into kubelet bootstrap package
 2018-11-14 11:37:58 -08:00
k8s-ci-robot ca338b91f5
Merge pull request #70676 from logicalhan/exclude-checks 
add ability to disable health checks on kube-apiserver for healthz using query-params
 2018-11-14 11:37:48 -08:00
k8s-ci-robot 774f162884
Merge pull request #70999 from liggitt/oversized-spdystream-frames 
Ensure oversized data frames are not written to spdystreams
 2018-11-14 09:26:06 -08:00
Jan Safranek e95b188656 Generated files 2018-11-14 14:01:16 +01:00
Jan Safranek b9d9b7f16f Promote VolumeAttachment to storage.k8s.io/v1 API 2018-11-14 14:01:16 +01:00
Adrián Orive 0b16c43f59 DeltaFIFO cleanup 
Remove non-needed else condition
Remove non-needed swallow copy
Simplify return for IsClosed()
Keep amount decrement next to element extraction from the queue

Signed-off-by: Adrián Orive <adrian.orive.oneca@gmail.com>
 2018-11-14 09:00:02 +01:00
Jordan Liggitt 0202e269a3 Fix sending oversided data frames to spdy stream 2018-11-13 22:13:09 -05:00
k8s-ci-robot d399e079f2
Merge pull request #71002 from awly/certutil-cleanup 
Remove unused funcs in certutil
 2018-11-13 14:59:46 -08:00
k8s-ci-robot bc6aee19b0
Merge pull request #70884 from lavalamp/workqueue 
add a metric that can be used to notice stuck worker threads
 2018-11-13 14:59:27 -08:00
Han Kang f1f1bc83fd add ability to exclude health checks from failing healthz by passing in a query param 2018-11-13 14:48:44 -08:00
k8s-ci-robot 1777be5fbe
Merge pull request #70735 from wojtek-t/use_watch-cache_when_rv=0 
Use watch cache when rv=0 even when limit is set
 2018-11-13 13:45:13 -08:00
Andrew Lytvynov 09db5bc951 Remove k8s.io/client-go/util/cert/triple 
The package is unused.
 2018-11-13 13:08:50 -08:00
xichengliudui 9a25d46e8b Delete some redundant code 
Delete some redundant code
 2018-11-13 14:19:36 -05:00
Andrew Lytvynov 5c073abfe1 Move csr.RequestNodeCertificate into kubelet bootstrap package 
This func is only used by the kubelet and there's no need to pollute
client-go API with it.
 2018-11-13 10:27:51 -08:00
Andrew Lytvynov 162b364292 Remove unused funcs in certutil 2018-11-13 10:26:43 -08:00
Stanislav Laznicka 628d1fef37
autogen files 2018-11-13 18:06:12 +01:00
wojtekt 4242d1b760 Use watch cache when rv=0 even when limit is set 2018-11-13 16:52:30 +01:00
Slava Semushin c21cb548e6
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file. 
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
 2018-11-13 14:05:21 +01:00
stewart-yu 217dbeafaf remove duplicated import 2018-11-13 20:08:39 +08:00
k8s-ci-robot efd19d3c94
Merge pull request #70970 from awly/unexport-csr-parsecsr 
Unexport csr.ParseCSR
 2018-11-12 18:31:45 -08:00
Andrew Lytvynov 41334cfdd3 Unexport csr.ParseCSR 
This func is only used internally and was copied from
k8s.io/kubernetes/pkg/apis/certificates.
 2018-11-12 17:15:09 -08:00
k8s-ci-robot 27cf50d85e
Merge pull request #70322 from mikedanese/audoidc 
make oidc authenticator (more?) audience aware
 2018-11-12 17:03:29 -08:00
Daniel Smith 680ddd49d8 fixup! add longest_running_processor_microseconds metric 
fix data race
 2018-11-12 12:57:42 -08:00
Mike Danese a714d9cd04 make oidc authenticator (more?) audience aware 
Part of https://github.com/kubernetes/kubernetes/issues/69893
 2018-11-12 12:43:21 -08:00
Mike Spreitzer fc20359fed Clarified syntax doc on --watch-cache-sizes 
Noted that group must be omitted for resources of apiVersion v1 (the
legacy core API) and included for others.

Fixes #65393
 2018-11-12 14:45:45 -05:00
Daniel Smith fd77aa5a41 add longest_running_processor_microseconds metric 2018-11-12 10:52:18 -08:00
stewart-yu 529dbd27ac auto-generated file 2018-11-11 17:19:38 +08:00
stewart-yu a77652e9ab kube-scheduler: output flags in logical sections 2018-11-11 17:19:38 +08:00
Daniel Smith 578962d934 fixup! Test workqueue metrics 
change units to seconds
 2018-11-10 18:46:43 -08:00
Daniel Smith 44a87baf09 fixup! Test workqueue metrics 2018-11-10 18:24:59 -08:00
Davanum Srinivas e558e291d1
s/glog/klog/ - keep up with master 
Change-Id: I27ff0545bc456ed8c0900cfeb90555f9ab7ae235
 2018-11-10 07:57:01 -05:00
Davanum Srinivas 68ce375d00
Update all the staging Godeps.json 
Change-Id: I64b30c68a606b4f5c095a66496a1e48c4d62ea88
 2018-11-10 07:50:32 -05:00
Davanum Srinivas 954996e231
Move from glog to klog 
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
 2018-11-10 07:50:31 -05:00
k8s-ci-robot 97baad34a7
Merge pull request #67006 from mbohlool/crd_webhook_conversion 
CRD webhook conversion
 2018-11-10 02:33:51 -08:00
k8s-ci-robot 413ccb15c6
Merge pull request #70021 from pbarker/audit-plugins 
dynamic audit plugins
 2018-11-09 18:34:45 -08:00
Daniel Smith 74c50c0ad3 generated files 2018-11-09 16:24:12 -08:00
Daniel Smith 5a8444ceec Test workqueue metrics 2018-11-09 16:24:12 -08:00
Mehdy Bohlool d51d0164c5 Update generated files 2018-11-09 15:57:35 -08:00
Mehdy Bohlool e2ca575d0f CRD Conversion 2018-11-09 15:57:35 -08:00
Patrick Barker 54fd930d0e adds dynamic audit plugins generated 2018-11-09 15:38:08 -07:00
Patrick Barker 8eb2150689 adds dynamic audit plugins 2018-11-09 15:38:00 -07:00
k8s-ci-robot daea190bee
Merge pull request #70753 from logicalhan/healthz-test 
fix healthz checkerNames test so that it tests against the expected output
 2018-11-09 14:31:09 -08:00
yameiwang fe5f7aab77 fix spelling errors its 2018-11-10 03:12:49 +08:00
Daniel Smith 6195d1005d add a metric that can be used to notice stuck worker threads 2018-11-09 10:50:11 -08:00
k8s-ci-robot e133ab274d
Merge pull request #70515 from davidz627/feature/csiNodeInfo 
Add explicit "Installed" field to CSINodeInfo and change update semantics
 2018-11-09 06:42:09 -08:00
David Zhu 06f3b26012 Change semantics of driver install and uninstall in CSINodeInfo to use new fields. 2018-11-08 19:45:01 -08:00
David Zhu 3595dee6cc Add fields available and volumePluginMechanism to CSINodeInfo CRD API Object. Split CSINodeInfo into Spec and Status. 2018-11-08 19:44:51 -08:00
k8s-ci-robot be800e623a
Merge pull request #69663 from sttts/sttts-scheduler-secure-serving 
scheduler: enable secure port and authn/z
 2018-11-08 17:36:14 -08:00
Haowei Cai 01c3274677 generated 2018-11-08 11:19:40 -08:00
Haowei Cai 3de9c01e85 Remove unused openapi-gen cmd 
as we switched to use k8s.io/kube-openapi/cmd/openapi-gen
 2018-11-08 11:07:33 -08:00
k8s-ci-robot f212b9db23
Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml 
Switch to sigs.k8s.io/yaml from ghodss/yaml
 2018-11-08 10:57:36 -08:00
tanshanshan cb95edafe8 kube-scheduler: enable secure ports 10259 2018-11-08 16:43:59 +01:00
zuoxiu.jm 1e8dee3931 enchance test regression for versioning codec 2018-11-08 22:55:24 +08:00
k8s-ci-robot 3c10143967
Merge pull request #60195 from humblec/glusterfs-pvspec-3 
Refactor GlusterFS PV spec.
 2018-11-08 00:24:39 -08:00
k8s-ci-robot 16d0992534
Merge pull request #69753 from wangzhen127/diff-node-status 
Update kubelet node status report logic with node lease feature
 2018-11-07 20:26:45 -08:00
Lv Jiawei c1fa760b75
Comment error in ItemExponentialFailureRateLimiter 
The backoff value is baseDelay*2^<num-failures> in ItemExponentialFailureRateLimiter.When . But the comment is baseDelay*10^<num-failures>.
 2018-11-08 12:13:23 +08:00
k8s-ci-robot e998d6c2bc
Merge pull request #70718 from cblecker/godep-round-a-million 
Fork godep to fix inconsistent abbreviation size
 2018-11-07 19:10:45 -08:00
k8s-ci-robot 66989e8bf3 Merge pull request #70670 from deads2k/default-healthz 
Add `With` method for allowed paths on delegated authorization
 2018-11-07 19:10:35 -08:00
k8s-ci-robot 5371ccdcde
Merge pull request #70289 from CharlyF/listing-datadog-cluster-agent 
Adding Datadog Cluster Agent to the list of Custom Metrics Providers
 2018-11-07 12:53:09 -08:00
k8s-ci-robot 7155b8a364
Merge pull request #70211 from roycaihw/crd-multi-version-x 
CRD supports multi-version Schema, Subresources and AdditionalPrintColumns
 2018-11-07 12:52:58 -08:00
Zhen Wang 98fc4a107a Update kubelet node status report logic with node lease feature 
When node lease feature is enabled, kubelet reports node status to api server
only if there is some change or it didn't report over last report interval.
 2018-11-07 11:59:42 -08:00
David Eads 77b56ec9e3 add With method for allowed URL options on delegated authorization 2018-11-07 14:49:28 -05:00
k8s-ci-robot 471aff6673
Merge pull request #70663 from wenjiaswe/gonet110 
Upgrade golang.org/x/net image to release-branch.go1.10
 2018-11-07 11:36:22 -08:00
Christoph Blecker d15da2c586
Update godeps 2018-11-07 11:02:07 -08:00
Han Kang 0623f630ab fix healthz checkerNames test so that it tests against the expected output 2018-11-07 10:31:15 -08:00
Davanum Srinivas 43f523d405
Switch to sigs.k8s.io/yaml from ghodss/yaml 
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
 2018-11-07 13:17:32 -05:00
Haowei Cai 5b545bbc13 generated 2018-11-07 09:38:49 -08:00
Haowei Cai 52cdc33669 Integration test (please review with -w to ignore 
whitespace changes)
 2018-11-07 09:38:31 -08:00
Haowei Cai 1282ed5efe API server serves CRD per-version schema/subresources/columns 2018-11-07 09:37:55 -08:00
Haowei Cai 0ab3d2c344 Validation, defaulting and pre-create/update strategy for 
CRD per-version schema/subresources/columns
 2018-11-07 09:37:14 -08:00
Haowei Cai e5587f52a7 Add feature gate and API changes for multi-version 
schema, subresources and columns
 2018-11-07 09:36:17 -08:00
k8s-ci-robot 7fe59165b6
Merge pull request #70193 from saad-ali/csiCRDAddon 
Register CSI CRDs as addon
 2018-11-06 23:55:56 -08:00
k8s-ci-robot 0aba557741
Merge pull request #70600 from liggitt/sig-auth-subprojects 
Add owners/approvers aliases for sig-auth subprojects
 2018-11-06 17:55:07 -08:00
Wenjia Zhang adf155ee9f update staging godeps for golang.org/x/net/... to release-branch.go1.10 2018-11-06 15:49:50 -08:00
saad-ali a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
k8s-ci-robot 08deddfdbc
Merge pull request #70671 from deads2k/delegated-system-master 
allow delegated authorization to have privileged groups
 2018-11-06 08:17:46 -08:00
David Eads 0b70b7a7c9 allow delegated authorization to have privileged groups 2018-11-06 10:03:54 -05:00
Dr. Stefan Schimanski 4860f8732a testservers: return Run method errors correctly 2018-11-06 15:14:24 +01:00
Humble Chirammal bdb051c72d Refactor GlusterFS PV spec. 
This patch introduces glusterfsPersistentVolumeSource addition
to glusterfsVolumeSource. All fields remains same as glusterfsVolumeSource
with an addition of a new field
called `EndpointsNamespace` to define namespace of endpoint in the
spec.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
 2018-11-06 15:51:01 +05:30
Jordan Liggitt 35178d352d auth policy subproject approvers/reviewers 2018-11-06 00:57:39 -05:00
Jordan Liggitt 666c93a834 encryption-at-rest approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4ebe084376 certificates subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 9ae79f9653 authorizers subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fa2a0cc8a authenticators subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fe30e92fa audit subproject owners/reviewers 2018-11-06 00:57:38 -05:00
k8s-ci-robot 710bfb440e
Merge pull request #70606 from mikedanese/tfreload 
periodically reload tokens read from TokenFile in kubeconfig
 2018-11-05 20:59:38 -08:00
k8s-ci-robot e6b3d31bcf
Merge pull request #70556 from pbarker/audit-test-fix 
updates audit endpoints test
 2018-11-05 19:04:36 -08:00
k8s-ci-robot c8604653f0
Merge pull request #70449 from mikedanese/simplcache 
remove webhook cache implementation and replace with token cache
 2018-11-05 16:32:34 -08:00
Mike Danese 0ec4d6d396 remove webhook cache implementation and replace with the token cache 
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:

* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.
 2018-11-05 13:08:45 -08:00
k8s-ci-robot 714711e52d
Merge pull request #70476 from charrywanganthony/backendGroupVersionV1 
Use `audit.k8s.io/v1` as default value of option --audit-webhook-vers…
 2018-11-05 11:41:58 -08:00
Mike Danese 718adb7473 periodically reload tokens read from TokenFile in kubeconfig 
Like we do with InClusterConfig.
 2018-11-05 10:04:28 -08:00
k8s-ci-robot 2bbfd500a8
Merge pull request #70593 from bbbmj/typo 
chore(apiserver): nit fix
 2018-11-02 21:28:50 -07:00
k8s-ci-robot d7f90253e9
Merge pull request #70553 from pbarker/webhook-refactor 
refactors kubeapiserver webhook utility to be generic
 2018-11-02 18:01:38 -07:00
包梦江 c5e51dc2e4 chore(apiserver): nit fix 2018-11-03 02:32:04 +08:00
k8s-ci-robot 023892af3c
Merge pull request #70525 from seunghunee/issue-69743 
Reduce leaderelection's renewed lease verbosity
 2018-11-02 10:47:11 -07:00
Patrick Barker d33f347ba8 refactors kubeapiserver webhook utility to be generic generated 2018-11-02 11:42:04 -06:00
Patrick Barker 1081fffdd5 refactors kubeapiserver webhook utility to be generic 2018-11-02 11:41:58 -06:00
k8s-ci-robot 77fd16e0e7
Merge pull request #69266 from SataQiu/fix-20180930 
Remove the redundant space
 2018-11-02 08:38:37 -07:00
k8s-ci-robot 9fb1153bd8
Merge pull request #70550 from liggitt/cleanup-scale-clients 
Drop generated clients for Scale types
 2018-11-02 05:29:15 -07:00
SataQiu c9bc625428 Remove the redundant space 2018-11-02 15:45:11 +08:00
k8s-ci-robot 45550cadbe
Merge pull request #70477 from andyzhangx/azure-ultrassd-sdk 
add azure UltraSSD disk support
 2018-11-01 22:16:55 -07:00
k8s-ci-robot a831ea20a4
Merge pull request #69976 from atlassian/update-few-dependencies 
Update a few dependencies
 2018-11-01 22:16:16 -07:00
Chao Wang 9671a035f7 Use `audit.k8s.io/v1` as default value of option --audit-webhook-version and --audit-log-version in release 1.13 2018-11-02 09:35:15 +08:00
Patrick Barker 5a84453e4e updates audit endpoints test 2018-11-01 18:02:41 -06:00
k8s-ci-robot 1165d661f0
Merge pull request #69916 from mikedanese/trev9 
create audience unaware authenticator wrappers
 2018-11-01 13:43:56 -07:00
Jordan Liggitt ff9dc86b3c Drop generated clients for Scale types 2018-11-01 14:49:51 -04:00
k8s-ci-robot b04f83dcd8
Merge pull request #70437 from liggitt/get-scale 
Add GetScale/UpdateScale methods to apps/v1 clients
 2018-11-01 11:11:32 -07:00
k8s-ci-robot 215234d3a3
Merge pull request #67778 from gyuho/typo 
staing/apimachinery: fix typo "perfer" to "prefer"
 2018-11-01 03:21:02 -07:00
seunghunee 920db78bea leaderelection: reduce renewed lease verbosity 
This patch changes the renewed lease log level from 4 to 5 of leaderelection.go

Fix: #69743
 2018-11-01 08:12:07 +00:00
andyzhangx f1bd292c76 add ultrassd support 
update stagin Godeps.json

update godeps license

fix test failure

fix comments
 2018-11-01 06:30:15 +00:00
k8s-ci-robot 6f897af2da
Merge pull request #70260 from lavalamp/schema-fix 
bump kube-openapi dep
 2018-10-31 23:04:56 -07:00
k8s-ci-robot 11706d3803
Merge pull request #67795 from mbohlool/crd_conversion_api_changes 
CRD Conversion API Changes
 2018-10-31 23:04:37 -07:00
Daniel Smith dcb10d81d1 update generated deps 2018-10-31 17:11:23 -07:00
k8s-ci-robot c81a4a09cf
Merge pull request #70453 from liggitt/api-owners 
Update API-related owners files
 2018-10-31 17:09:08 -07:00
Mikhail Mazurskiy 8763223ab9
Update a few dependencies 
github.com/go-openapi/*
github.com/asaskevich/govalidator
 2018-11-01 09:59:43 +11:00
Mike Danese c704d70d49 create audience unaware authenticator wrappers 2018-10-31 15:31:49 -07:00
Mike Danese 817cf70191 move audience context functions to authenticator package 2018-10-31 14:50:11 -07:00
Mehdy Bohlool e27096cdb4 Update generated files 2018-10-31 14:47:13 -07:00
Mehdy Bohlool 998e22dd5c FeatureGate and API Validation for CRD Webhook Conversion 2018-10-31 11:14:47 -07:00
Mehdy Bohlool 1587d189cb Refactor webhookclientConfig validation of admission and audit registration 2018-10-31 11:14:47 -07:00
Mehdy Bohlool 530c79939f API Types for CRD conversion 2018-10-31 11:14:47 -07:00
k8s-ci-robot 797f5afd2d
Merge pull request #70436 from liggitt/retain-keys 
Fix retainKeys patchStrategy in apps/deployments
 2018-10-31 10:32:17 -07:00
andyzhangx d210b4bcf3 upgrade azure sdk to support ultra ssd 
update Godeps.json

update azure sdk for ultrassd support

update bazel

fix build failure
 2018-10-31 10:08:52 +00:00
k8s-ci-robot 9e31e6567f
Merge pull request #70168 from wgliang/update-vendor/coreos-etcd 
Update vendor package github.com/coreos/...
 2018-10-30 19:48:30 -07:00
k8s-ci-robot 1dd7e6f65c
Merge pull request #70295 from caesarxuchao/ownerRef-nonnamespaced 
Fixing comments on the OwnerReference
 2018-10-30 16:16:18 -07:00
Jordan Liggitt 8c20bdaf46 Update API-related owners files 2018-10-30 17:05:08 -04:00
k8s-ci-robot 93d1567c6f
Merge pull request #70032 from iamneha/delete_namespaced_job_spec 
Fix(bug): make body an optional parameter in [DELETE] /apis/batch/v1/…
 2018-10-30 11:03:40 -07:00
k8s-ci-robot d196d63c01
Merge pull request #69884 from liggitt/self-sign-in-memory 
Allow components to generate certificates in-memory
 2018-10-30 11:03:29 -07:00
Chao Xu 1cc316f4dc Update comments on the OwnerReference to acknowledge that the owning 
object can be cluster scoped.
 2018-10-30 10:28:44 -07:00