Commit Graph

5185 Commits (d440ecdd3b41a4fc4a207195e1bb976422d6d35e)

Author SHA1 Message Date
Walter Fender 9c43ee6d6e Report KCM as unhealthy if leader election is wedged.
Feedback from lavalamp and deads2k.
Changed Check() logic to be central to LeaderElector.
Further changes, especially cleaning up the test code.
2018-11-14 16:57:37 -08:00
Patrick Barker eb89d3dddd adds dynamic audit configuration 2018-11-14 17:54:06 -07:00
jennybuckley d02a543f37 Update generated 2018-11-14 12:50:11 -08:00
jennybuckley 758e8623e9 Build OpenAPI Definitions per group instead of per resource 2018-11-14 12:50:02 -08:00
k8s-ci-robot 68fb529ec1
Merge pull request #70969 from awly/node-csr-move
Move csr.RequestNodeCertificate into kubelet bootstrap package
2018-11-14 11:37:58 -08:00
k8s-ci-robot ca338b91f5
Merge pull request #70676 from logicalhan/exclude-checks
add ability to disable health checks on kube-apiserver for healthz using query-params
2018-11-14 11:37:48 -08:00
k8s-ci-robot 774f162884
Merge pull request #70999 from liggitt/oversized-spdystream-frames
Ensure oversized data frames are not written to spdystreams
2018-11-14 09:26:06 -08:00
Jan Safranek e95b188656 Generated files 2018-11-14 14:01:16 +01:00
Jan Safranek b9d9b7f16f Promote VolumeAttachment to storage.k8s.io/v1 API 2018-11-14 14:01:16 +01:00
Adrián Orive 0b16c43f59 DeltaFIFO cleanup
Remove non-needed else condition
Remove non-needed swallow copy
Simplify return for IsClosed()
Keep amount decrement next to element extraction from the queue

Signed-off-by: Adrián Orive <adrian.orive.oneca@gmail.com>
2018-11-14 09:00:02 +01:00
Jordan Liggitt 0202e269a3 Fix sending oversided data frames to spdy stream 2018-11-13 22:13:09 -05:00
k8s-ci-robot d399e079f2
Merge pull request #71002 from awly/certutil-cleanup
Remove unused funcs in certutil
2018-11-13 14:59:46 -08:00
k8s-ci-robot bc6aee19b0
Merge pull request #70884 from lavalamp/workqueue
add a metric that can be used to notice stuck worker threads
2018-11-13 14:59:27 -08:00
Han Kang f1f1bc83fd add ability to exclude health checks from failing healthz by passing in a query param 2018-11-13 14:48:44 -08:00
k8s-ci-robot 1777be5fbe
Merge pull request #70735 from wojtek-t/use_watch-cache_when_rv=0
Use watch cache when rv=0 even when limit is set
2018-11-13 13:45:13 -08:00
Andrew Lytvynov 09db5bc951 Remove k8s.io/client-go/util/cert/triple
The package is unused.
2018-11-13 13:08:50 -08:00
Andrew Lytvynov 5c073abfe1 Move csr.RequestNodeCertificate into kubelet bootstrap package
This func is only used by the kubelet and there's no need to pollute
client-go API with it.
2018-11-13 10:27:51 -08:00
Andrew Lytvynov 162b364292 Remove unused funcs in certutil 2018-11-13 10:26:43 -08:00
Stanislav Laznicka 628d1fef37
autogen files 2018-11-13 18:06:12 +01:00
wojtekt 4242d1b760 Use watch cache when rv=0 even when limit is set 2018-11-13 16:52:30 +01:00
Slava Semushin c21cb548e6
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file.
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-13 14:05:21 +01:00
k8s-ci-robot efd19d3c94
Merge pull request #70970 from awly/unexport-csr-parsecsr
Unexport csr.ParseCSR
2018-11-12 18:31:45 -08:00
Andrew Lytvynov 41334cfdd3 Unexport csr.ParseCSR
This func is only used internally and was copied from
k8s.io/kubernetes/pkg/apis/certificates.
2018-11-12 17:15:09 -08:00
k8s-ci-robot 27cf50d85e
Merge pull request #70322 from mikedanese/audoidc
make oidc authenticator (more?) audience aware
2018-11-12 17:03:29 -08:00
Daniel Smith 680ddd49d8 fixup! add longest_running_processor_microseconds metric
fix data race
2018-11-12 12:57:42 -08:00
Mike Danese a714d9cd04 make oidc authenticator (more?) audience aware
Part of https://github.com/kubernetes/kubernetes/issues/69893
2018-11-12 12:43:21 -08:00
Daniel Smith fd77aa5a41 add longest_running_processor_microseconds metric 2018-11-12 10:52:18 -08:00
stewart-yu 529dbd27ac auto-generated file 2018-11-11 17:19:38 +08:00
stewart-yu a77652e9ab kube-scheduler: output flags in logical sections 2018-11-11 17:19:38 +08:00
Daniel Smith 578962d934 fixup! Test workqueue metrics
change units to seconds
2018-11-10 18:46:43 -08:00
Daniel Smith 44a87baf09 fixup! Test workqueue metrics 2018-11-10 18:24:59 -08:00
Davanum Srinivas e558e291d1
s/glog/klog/ - keep up with master
Change-Id: I27ff0545bc456ed8c0900cfeb90555f9ab7ae235
2018-11-10 07:57:01 -05:00
Davanum Srinivas 68ce375d00
Update all the staging Godeps.json
Change-Id: I64b30c68a606b4f5c095a66496a1e48c4d62ea88
2018-11-10 07:50:32 -05:00
Davanum Srinivas 954996e231
Move from glog to klog
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
  * github.com/kubernetes/repo-infra
  * k8s.io/gengo/
  * k8s.io/kube-openapi/
  * github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods

Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
2018-11-10 07:50:31 -05:00
k8s-ci-robot 97baad34a7
Merge pull request #67006 from mbohlool/crd_webhook_conversion
CRD webhook conversion
2018-11-10 02:33:51 -08:00
k8s-ci-robot 413ccb15c6
Merge pull request #70021 from pbarker/audit-plugins
dynamic audit plugins
2018-11-09 18:34:45 -08:00
Daniel Smith 74c50c0ad3 generated files 2018-11-09 16:24:12 -08:00
Daniel Smith 5a8444ceec Test workqueue metrics 2018-11-09 16:24:12 -08:00
Mehdy Bohlool d51d0164c5 Update generated files 2018-11-09 15:57:35 -08:00
Mehdy Bohlool e2ca575d0f CRD Conversion 2018-11-09 15:57:35 -08:00
Patrick Barker 54fd930d0e adds dynamic audit plugins generated 2018-11-09 15:38:08 -07:00
Patrick Barker 8eb2150689 adds dynamic audit plugins 2018-11-09 15:38:00 -07:00
k8s-ci-robot daea190bee
Merge pull request #70753 from logicalhan/healthz-test
fix healthz checkerNames test so that it tests against the expected output
2018-11-09 14:31:09 -08:00
Daniel Smith 6195d1005d add a metric that can be used to notice stuck worker threads 2018-11-09 10:50:11 -08:00
k8s-ci-robot e133ab274d
Merge pull request #70515 from davidz627/feature/csiNodeInfo
Add explicit "Installed" field to CSINodeInfo and change update semantics
2018-11-09 06:42:09 -08:00
David Zhu 06f3b26012 Change semantics of driver install and uninstall in CSINodeInfo to use new fields. 2018-11-08 19:45:01 -08:00
David Zhu 3595dee6cc Add fields available and volumePluginMechanism to CSINodeInfo CRD API Object. Split CSINodeInfo into Spec and Status. 2018-11-08 19:44:51 -08:00
k8s-ci-robot be800e623a
Merge pull request #69663 from sttts/sttts-scheduler-secure-serving
scheduler: enable secure port and authn/z
2018-11-08 17:36:14 -08:00
Haowei Cai 01c3274677 generated 2018-11-08 11:19:40 -08:00
Haowei Cai 3de9c01e85 Remove unused openapi-gen cmd
as we switched to use k8s.io/kube-openapi/cmd/openapi-gen
2018-11-08 11:07:33 -08:00
k8s-ci-robot f212b9db23
Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml
Switch to sigs.k8s.io/yaml from ghodss/yaml
2018-11-08 10:57:36 -08:00
tanshanshan cb95edafe8 kube-scheduler: enable secure ports 10259 2018-11-08 16:43:59 +01:00
k8s-ci-robot 3c10143967
Merge pull request #60195 from humblec/glusterfs-pvspec-3
Refactor GlusterFS PV spec.
2018-11-08 00:24:39 -08:00
k8s-ci-robot 16d0992534
Merge pull request #69753 from wangzhen127/diff-node-status
Update kubelet node status report logic with node lease feature
2018-11-07 20:26:45 -08:00
k8s-ci-robot e998d6c2bc
Merge pull request #70718 from cblecker/godep-round-a-million
Fork godep to fix inconsistent abbreviation size
2018-11-07 19:10:45 -08:00
k8s-ci-robot 66989e8bf3 Merge pull request #70670 from deads2k/default-healthz
Add `With` method for allowed paths on delegated authorization
2018-11-07 19:10:35 -08:00
k8s-ci-robot 5371ccdcde
Merge pull request #70289 from CharlyF/listing-datadog-cluster-agent
Adding Datadog Cluster Agent to the list of Custom Metrics Providers
2018-11-07 12:53:09 -08:00
k8s-ci-robot 7155b8a364
Merge pull request #70211 from roycaihw/crd-multi-version-x
CRD supports multi-version Schema, Subresources and AdditionalPrintColumns
2018-11-07 12:52:58 -08:00
Zhen Wang 98fc4a107a Update kubelet node status report logic with node lease feature
When node lease feature is enabled, kubelet reports node status to api server
only if there is some change or it didn't report over last report interval.
2018-11-07 11:59:42 -08:00
David Eads 77b56ec9e3 add With method for allowed URL options on delegated authorization 2018-11-07 14:49:28 -05:00
k8s-ci-robot 471aff6673
Merge pull request #70663 from wenjiaswe/gonet110
Upgrade golang.org/x/net image to release-branch.go1.10
2018-11-07 11:36:22 -08:00
Christoph Blecker d15da2c586
Update godeps 2018-11-07 11:02:07 -08:00
Han Kang 0623f630ab fix healthz checkerNames test so that it tests against the expected output 2018-11-07 10:31:15 -08:00
Davanum Srinivas 43f523d405
Switch to sigs.k8s.io/yaml from ghodss/yaml
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
2018-11-07 13:17:32 -05:00
Haowei Cai 5b545bbc13 generated 2018-11-07 09:38:49 -08:00
Haowei Cai 52cdc33669 Integration test (please review with -w to ignore
whitespace changes)
2018-11-07 09:38:31 -08:00
Haowei Cai 1282ed5efe API server serves CRD per-version schema/subresources/columns 2018-11-07 09:37:55 -08:00
Haowei Cai 0ab3d2c344 Validation, defaulting and pre-create/update strategy for
CRD per-version schema/subresources/columns
2018-11-07 09:37:14 -08:00
Haowei Cai e5587f52a7 Add feature gate and API changes for multi-version
schema, subresources and columns
2018-11-07 09:36:17 -08:00
k8s-ci-robot 7fe59165b6
Merge pull request #70193 from saad-ali/csiCRDAddon
Register CSI CRDs as addon
2018-11-06 23:55:56 -08:00
k8s-ci-robot 0aba557741
Merge pull request #70600 from liggitt/sig-auth-subprojects
Add owners/approvers aliases for sig-auth subprojects
2018-11-06 17:55:07 -08:00
Wenjia Zhang adf155ee9f update staging godeps for golang.org/x/net/... to release-branch.go1.10 2018-11-06 15:49:50 -08:00
saad-ali a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
k8s-ci-robot 08deddfdbc
Merge pull request #70671 from deads2k/delegated-system-master
allow delegated authorization to have privileged groups
2018-11-06 08:17:46 -08:00
David Eads 0b70b7a7c9 allow delegated authorization to have privileged groups 2018-11-06 10:03:54 -05:00
Humble Chirammal bdb051c72d Refactor GlusterFS PV spec.
This patch introduces glusterfsPersistentVolumeSource addition
to glusterfsVolumeSource. All fields remains same as glusterfsVolumeSource
with an addition of a new field
called `EndpointsNamespace` to define namespace of endpoint in the
spec.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2018-11-06 15:51:01 +05:30
Jordan Liggitt 35178d352d auth policy subproject approvers/reviewers 2018-11-06 00:57:39 -05:00
Jordan Liggitt 666c93a834 encryption-at-rest approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4ebe084376 certificates subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 9ae79f9653 authorizers subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fa2a0cc8a authenticators subproject approvers/reviewers 2018-11-06 00:57:38 -05:00
Jordan Liggitt 4fe30e92fa audit subproject owners/reviewers 2018-11-06 00:57:38 -05:00
k8s-ci-robot 710bfb440e
Merge pull request #70606 from mikedanese/tfreload
periodically reload tokens read from TokenFile in kubeconfig
2018-11-05 20:59:38 -08:00
k8s-ci-robot e6b3d31bcf
Merge pull request #70556 from pbarker/audit-test-fix
updates audit endpoints test
2018-11-05 19:04:36 -08:00
k8s-ci-robot c8604653f0
Merge pull request #70449 from mikedanese/simplcache
remove webhook cache implementation and replace with token cache
2018-11-05 16:32:34 -08:00
Mike Danese 0ec4d6d396 remove webhook cache implementation and replace with the token cache
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:

* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.
2018-11-05 13:08:45 -08:00
k8s-ci-robot 714711e52d
Merge pull request #70476 from charrywanganthony/backendGroupVersionV1
Use `audit.k8s.io/v1` as default value of option --audit-webhook-vers…
2018-11-05 11:41:58 -08:00
Mike Danese 718adb7473 periodically reload tokens read from TokenFile in kubeconfig
Like we do with InClusterConfig.
2018-11-05 10:04:28 -08:00
k8s-ci-robot 2bbfd500a8
Merge pull request #70593 from bbbmj/typo
chore(apiserver): nit fix
2018-11-02 21:28:50 -07:00
k8s-ci-robot d7f90253e9
Merge pull request #70553 from pbarker/webhook-refactor
refactors kubeapiserver webhook utility to be generic
2018-11-02 18:01:38 -07:00
包梦江 c5e51dc2e4 chore(apiserver): nit fix 2018-11-03 02:32:04 +08:00
k8s-ci-robot 023892af3c
Merge pull request #70525 from seunghunee/issue-69743
Reduce leaderelection's renewed lease verbosity
2018-11-02 10:47:11 -07:00
Patrick Barker d33f347ba8 refactors kubeapiserver webhook utility to be generic generated 2018-11-02 11:42:04 -06:00
Patrick Barker 1081fffdd5 refactors kubeapiserver webhook utility to be generic 2018-11-02 11:41:58 -06:00
k8s-ci-robot 77fd16e0e7
Merge pull request #69266 from SataQiu/fix-20180930
Remove the redundant space
2018-11-02 08:38:37 -07:00
k8s-ci-robot 9fb1153bd8
Merge pull request #70550 from liggitt/cleanup-scale-clients
Drop generated clients for Scale types
2018-11-02 05:29:15 -07:00
SataQiu c9bc625428 Remove the redundant space 2018-11-02 15:45:11 +08:00
k8s-ci-robot 45550cadbe
Merge pull request #70477 from andyzhangx/azure-ultrassd-sdk
add azure UltraSSD disk support
2018-11-01 22:16:55 -07:00
k8s-ci-robot a831ea20a4
Merge pull request #69976 from atlassian/update-few-dependencies
Update a few dependencies
2018-11-01 22:16:16 -07:00
Chao Wang 9671a035f7 Use `audit.k8s.io/v1` as default value of option --audit-webhook-version and --audit-log-version in release 1.13 2018-11-02 09:35:15 +08:00