Commit Graph

406 Commits (ed021fed4c38b5c82696fea84b3173e98bc16922)

Author SHA1 Message Date
Yifan Gu ae22bd5710 plugin/pkg/auth: add tests for OpenID Connect authenticator. 2015-08-21 15:27:08 -07:00
Yifan Gu 6376e41850 plugin/pkg/auth: add OpenID Connect token authenticator.
Also add related new flags to apiserver:
"--oidc-issuer-url", "--oidc-client-id", "--oidc-ca-file", "--oidc-username-claim",
to enable OpenID Connect authentication.
2015-08-21 15:27:08 -07:00
Clayton Coleman 02dbb95447 Add TerminationGracePeriodSeconds to API
Set defaulting for pod spec
2015-08-20 11:03:38 -04:00
Robert Bailey 08e6a43c1d Revert "Merge pull request #9165 from smarterclayton/graceful"
This reverts commit 4f856b595d, reversing
changes made to d78525a83b.

Conflicts:
	pkg/kubelet/status_manager.go
2015-08-18 17:34:49 -07:00
Kris Rousey ae6c64d9bb Moving everyone to unversioned client 2015-08-18 10:23:03 -07:00
Clayton Coleman b842a7dd15 Revert "Revert "Gracefully delete pods from the Kubelet""
This reverts commit 98115facfd.
2015-08-18 08:57:02 -04:00
Robert Bailey 5d58c2ca77 Merge pull request #12718 from HaiyangDING/ChangeLimitToRequest
Use request to deal with resource requirement in priority functions.
2015-08-17 13:52:28 -07:00
Karl Isenberg 61c9dd876e Improve readability of scheduling failure logs 2015-08-17 12:17:48 +02:00
Brendan Burns 8bd9592b7f Merge pull request #12544 from liggitt/ServiceSpreadingPriority
Auto commit by PR queue bot
2015-08-14 17:09:43 -07:00
dinghaiyang 43c2bd72cb Use resource request instead of resource limit to deal with resource
requirement in priority functions.
2015-08-14 17:25:48 +08:00
Brendan Burns b50330d851 Merge pull request #12539 from jiangyaoguo/keep-event-reason-consistent-in-scheduler-controller
Keep event reason consistent in scheduler and controller
2015-08-13 14:08:52 -07:00
Ruddarraju, Uday Kumar Raju 937db3f70d Keystone authentication plugin 2015-08-13 09:46:30 -07:00
jiangyaoguo 5d3522dc7a Keep event reason consistant in scheduler and controller 2015-08-13 11:33:32 +08:00
Jordan Liggitt cf7a2cdfff Re-add ServiceSpreadingPriority priority algorithm 2015-08-12 08:39:04 -04:00
dingh 472a66aee1 Update comments.
Change limit to request in the comments for CheckPodsExceedingFreeResources()
2015-08-12 17:30:09 +08:00
Kris Rousey 565189f5b8 Correcting all go vet errors 2015-08-11 13:55:37 -07:00
Alex Robinson 11fcd3bb39 Merge pull request #12478 from eparis/use-pflag-network
Use pflags for net.IP and net.IPNet instead of custom flag types
2015-08-10 11:55:54 -07:00
Marek Grabowski 5f9cefc1d8 Merge pull request #12441 from vlajos/typofixes-vlajos-20150807
typofix - https://github.com/vlajos/misspell_fixer
2015-08-10 16:33:52 +02:00
Eric Paris fe6b633e2a Convert for util.IP to just use a net.IP
pflag can handle IP addresses so use the pflag code instead of doing it
ourselves. This means our code just uses net.IP and we don't have all of
the useless casting back and forth!
2015-08-10 10:15:05 -04:00
Marek Grabowski e034712456 Merge pull request #11788 from HaiyangDING/ImproveClarityResource
Improve clarity around PodFitsResource(issue#11453)
2015-08-10 09:56:32 +02:00
Veres Lajos 9f77e49109 typofix - https://github.com/vlajos/misspell_fixer 2015-08-08 22:31:48 +01:00
Satnam Singh bee48f4ce5 Merge pull request #12035 from AnanyaKumar/requests
Add support for request
2015-08-07 14:27:34 -07:00
Jerzy Szczepkowski d6dab28b96 Revert "Move prioritizer function EqualPriority to package priorities" 2015-08-07 15:51:26 +02:00
dinghaiyang dab7280ae4 Improve clarity around PodFitsResource by showing pods limits in `kubectl describe node` 2015-08-07 16:58:11 +08:00
dinghaiyang ebbcd4a3ba Move prioritizer function EqualPriority to package priorities 2015-08-07 09:56:54 +08:00
Ananya Kumar ef1e576810 Add support for request 2015-08-05 19:00:19 -07:00
Mike Danese 17defc7383 run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
Mike Danese 8e33cbfa28 rewrite go imports 2015-08-05 17:30:03 -07:00
Alex Mohr b90663924b Merge pull request #12146 from deads2k/tweak-testclient
make testclient more precise
2015-08-04 14:49:11 -07:00
Alex Mohr 1311b9dce1 Merge pull request #11886 from gmarek/ratelimit
Auto commit by PR queue bot
2015-08-04 11:39:53 -07:00
deads2k 182885e897 make testclient more precise 2015-08-04 13:35:59 -04:00
Alex Mohr 9df26f27dd Merge pull request #12169 from mikedanese/patch-1
Auto commit by PR queue bot
2015-08-03 21:08:05 -07:00
Mike Danese ba87868577 changed unused fmt statement to be a log statement 2015-08-03 15:12:44 -07:00
gmarek d27ad5b714 Controller codebase refactoring 2015-08-03 17:06:25 +02:00
gmarek 4cc0a2f117 Allow changing Schedulers RateLimitter setting during startup. 2015-08-03 15:27:19 +02:00
Mike Danese 356c9ffb4d Merge pull request #10667 from gmarek/scheduler
Add spreading by controllers
2015-07-31 14:52:42 -07:00
gmarek 94eb52de33 Add spreading by controllers 2015-07-31 16:28:50 +02:00
Muhammed Uluyol 58a875ac2c Add (stopgap) support for an experimental API prefix. 2015-07-30 18:14:29 -07:00
Mike Danese 1b84fb7d74 make testclient threadsafe by guarding internal state with accessors 2015-07-29 16:17:17 -07:00
deads2k 9386db8c99 support multiple index values for a single object 2015-07-29 07:54:09 -04:00
Mike Danese ae1c8e55ef Merge pull request #11737 from thockin/cleanup-remove-v1beta3
Remove v1beta3
2015-07-24 10:25:56 -07:00
Vish Kannan c60238921f Merge pull request #11051 from nak3/AWSElasticBlockStore
Update comment about NoDiskConflict predicate
2015-07-23 17:49:37 -07:00
Tim Hockin 1c3233a1d4 Remove v1beta3 2015-07-23 17:21:27 -07:00
Wojciech Tyczynski d30704af87 Merge pull request #11682 from nak3/priorities-fix
Remove unused argument from fractionOfCapacity()
2015-07-23 12:57:22 +02:00
Kenjiro Nakayama a176001aa1 Fix calculation comment for LeastRequestedPriority 2015-07-22 17:18:19 +09:00
Kenjiro Nakayama 5d3958ff64 Remove unused argument from fractionOfCapacity() 2015-07-22 15:43:50 +09:00
Prashanth Balasubramanian 0728c08a1e Fix scheduler race 2015-07-12 23:14:24 -07:00
Kenjiro Nakayama 78a8d287e9 Comment update 2015-07-10 21:11:15 +09:00
gmarek b25c97bca4 Add more logging to scheduler predicates to help debugging max_pods e2e test flakyness 2015-07-08 10:48:50 +02:00
David Oppenheimer bdf22e3121 Increase zero-limit pod RAM for spreading to 200 MB to match cluster
addon pods and represent less trivial fraction of typical machine RAM
(e.g. n1-standard-1).
2015-07-07 13:48:57 -07:00
Zach Loafman 8278928b66 Merge pull request #10661 from davidopp/somebranch
When scheduling, treat zero limit-pods as having nonzero limit when calculating priorities
2015-07-06 13:18:54 -07:00
Yu-Ju Hong ea16e52f9b Merge pull request #10642 from davidopp/clean
Clarify and make less verbose event message for infeasible pods.
2015-07-06 12:55:00 -07:00
David Oppenheimer 2e3f2ea20b gofmt 2015-07-05 21:31:54 -07:00
David Oppenheimer 9fbccb4ff7 Respond to review comments. 2015-07-05 15:41:52 -07:00
David Oppenheimer 4ea8b8a66d Get rid of separate DumbSpreading function and just treat zero-limit
pods as having a constant non-zero memory and CPU limit.
2015-07-05 11:39:35 -07:00
hyeongkyu.lee 55f1f241e6 Fixed typo 2015-07-03 18:03:45 +09:00
David Oppenheimer 44ed229069 Foo. 2015-07-03 01:40:00 -07:00
David Oppenheimer 53518e37a6 Add a test for DumbSpreadingPriority. 2015-07-03 01:34:07 -07:00
David Oppenheimer cb9d515004 Add DumbSpreadingPriority, which tries to spread pods across nodes. 2015-07-03 00:45:54 -07:00
David Oppenheimer 950ab8f219 Clarify and make less verbose event message for infeasible pods. 2015-07-01 19:22:48 -07:00
Jordan Liggitt ecebac9395 Add option to require API tokens to exist in admission 2015-06-30 16:12:45 -04:00
derekwaynecarr d0441a9fba Prevent deletion of default namespace 2015-06-23 14:38:50 -04:00
derekwaynecarr f6fb72ec51 Admission control attributes has access to resource name 2015-06-23 13:54:55 -04:00
Jeff Lowdermilk 0c7fbacfb1 Merge pull request #10052 from derekwaynecarr/admission_subresources
Admission control exposes subresource
2015-06-22 13:11:58 -07:00
Jordan Liggitt 68a8a25494 Rename pod.spec.serviceAccount -> pod.spec.serviceAccountName for v1 2015-06-18 22:38:00 -04:00
derekwaynecarr 795e444ba3 ResourceQuota should ignore subresources 2015-06-18 16:03:40 -04:00
derekwaynecarr 9a747cde38 LimitRanger should ignore subresources 2015-06-18 15:43:48 -04:00
derekwaynecarr fce7adf3e7 Admission control exposes subresource 2015-06-18 15:00:46 -04:00
Chao Xu a309d3e652 Update pkg/api/testapi because namespace is always in the path since we remove v1beta1/2 2015-06-16 14:12:03 -07:00
Abhi Shah 2c93add90b Merge pull request #9613 from brendandburns/scheduler
Fix the scheduler to ignore terminated pods.
2015-06-12 10:05:09 -07:00
Brendan Burns 97634c7fbf Fix the scheduler to ignore terminated pods. 2015-06-10 14:38:08 -07:00
James DeFelice 7d66559725 added comments at the top of native k8s files which, if changed, might affect some of the k8sm code 2015-06-10 20:31:22 +00:00
Prashanth Balasubramanian 4bb3efaaad Scheduler doesn't send all fit predicate failures as events 2015-06-05 18:52:55 -07:00
Prashanth B 04209c4371 Merge pull request #9274 from lavalamp/logSpam
Demote log spam
2015-06-04 15:51:16 -07:00
Daniel Smith 32caedd882 Demote log spam
These messages are only useful if you want to debug a particular
scheduler assigment, and they are extremely verbose-- they each print
out a line per host per assignment. Let's try to keep our log messages
linear in the number of assigments.
2015-06-04 14:08:11 -07:00
derekwaynecarr 14d2128238 Fix namespace controller on delete to not care if item not found 2015-06-03 22:59:07 -04:00
feihujiang ebc8eab590 get Events to be logged 2015-06-03 15:05:07 +08:00
Filip Grzadkowski 98115facfd Revert "Gracefully delete pods from the Kubelet" 2015-06-02 23:40:05 +02:00
Brian Grant 808932c079 Merge pull request #9056 from runningwild/master
Change isVolumeConflict so read-only gce persistent disks don't confl…
2015-06-02 13:14:13 -07:00
Clayton Coleman 72ee028cab Gracefully delete pods from the Kubelet
This commit wires together the graceful delete option for pods
on the Kubelet.  When a pod is deleted on the API server, a
grace period is calculated that is based on the
Pod.Spec.TerminationGracePeriodInSeconds, the user's provided grace
period, or a default.  The grace period can only shrink once set.
The value provided by the user (or the default) is set onto metadata
as DeletionGracePeriod.

When the Kubelet sees a pod with DeletionTimestamp set, it uses the
value of ObjectMeta.GracePeriodSeconds as the grace period
sent to Docker.  When updating status, if the pod has DeletionTimestamp
set and all containers are terminated, the Kubelet will update the
status one last time and then invoke Delete(pod, grace: 0) to
clean up the pod immediately.
2015-06-01 19:23:59 -04:00
Jonathan Wills 882462ad87 Change isVolumeConflict so read-only gce persistent disks don't conflict with each other 2015-06-01 08:13:48 -04:00
Rohit Jnagal ef3d03e6f1 Merge pull request #8875 from derekwaynecarr/limit_range_not_use_requests
Do not set container requests in limit ranger for Kube 1.0
2015-05-29 13:26:00 -07:00
Rohit Jnagal ff51f0b2e1 Merge pull request #8696 from derekwaynecarr/force_namespace_creation
Force explicit namespace provision, update e2e for failures
2015-05-29 09:28:47 -07:00
Tim Hockin d0daabb34b Merge pull request #8471 from bprashanth/scheduler_burst
Limit the scheduler to a burst qps of 30
2015-05-28 16:55:25 -07:00
Chao Xu 9c1153322e update PodSpec.Host to PodSpec.NodeName in /pkg/api/types.go and /pkg/api/v1beta3/types.go 2015-05-28 14:10:06 -07:00
derekwaynecarr 3e8b1d5e01 Update all salt providers to force explicit namespace creation; update e2e 2015-05-28 13:45:49 -04:00
Prashanth Balasubramanian 4004a68ae9 Limit the scheduler to a burst qps of 30 and rate limit pod binding 2015-05-27 16:35:09 -07:00
derekwaynecarr 05f099211f Do not set container.requests for v1 2015-05-27 14:27:01 -04:00
deads2k 590bd048a5 add pull secrets to service accounts 2015-05-22 14:05:19 -04:00
Derek Carr 9b1fb6dca1 Merge pull request #8233 from csrwng/connect_adm_ctrl
Admission control to prevent exec on privileged pods
2015-05-21 14:35:28 -04:00
Cesar Wong e95d9c416d Admission control to prevent exec on privileged pods 2015-05-21 13:56:51 -04:00
Cesar Wong 68ad63b5e2 Add operation checking to admission control handlers
Adds a new method to the handler interface that returns true only if the
admission control handler handles that operation.
2015-05-21 13:51:43 -04:00
Dawn Chen 40480d8504 Merge pull request #8532 from derekwaynecarr/improve_event_readability
Improve event readability for generic scheduler
2015-05-21 09:25:32 -07:00
Wojciech Tyczynski 5fbe58b2c8 Revert "Make scheduler optimistic about its bindings" 2015-05-19 14:27:28 -07:00
derekwaynecarr 8ee06a9983 Improve event readability 2015-05-19 17:26:24 -04:00
David Oppenheimer 44b1e1ca0c Fix stylistic isues with #5547. Closes #4910. 2015-05-18 23:32:06 -07:00
Victor Marmol 45874d5f76 Merge pull request #5547 from gmarek/client3
Add a resource specifying number of Pods that are allowed to run on Kubelet.
2015-05-18 11:11:43 -07:00
Vish Kannan 969023f3ec Merge pull request #8389 from smarterclayton/chatty_endpoints_controller
Endpoints controller is logging too much
2015-05-18 09:40:57 -07:00
Derek Carr eb12565960 Merge pull request #8203 from pweil-/expose-context-to-admission
Expose user info to admission controllers
2015-05-18 08:25:10 -04:00
Clayton Coleman d00f705652 Tone down scheduler logging
Having no nodes in the cluster is unusual and is likely a test
environment, and when a pod is deleted there is no need to log
information about our inability to schedule it.
2015-05-16 19:46:50 -04:00