github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/test/e2e
History
Kubernetes Submit Queue 1732a8b9bd Merge pull request #51562 from nicksardo/gce-attempt-firewall 
Automatic merge from submit-queue (batch tested with PRs 51915, 51294, 51562, 51911)

GCE: Gracefully handle permission errors when attempting to create firewall rules

Purpose of this PR is to raise events from the GCE cloud provider if the GCE service account does not have the permissions necessary to create/update/delete firewall rules. 

Fixes #51812

**Release note**:
```release-note
NONE
```

Example Events:

```
Events:
  FirstSeen     LastSeen        Count   From                    SubObjectPath   Type            Reason                          Message
  ---------     --------        -----   ----                    -------------   --------        ------                          -------
  2m            2m              1       service-controller                      Normal          EnsuringLoadBalancer            Ensuring load balancer
  2m            2m              1       gce-cloudprovider                       Normal          LoadBalancerManualChange        Firewall change required by network admin: `gcloud compute firewall-rules create aa8a1dd628ddb11e78ce042010a80000 --network https://www.googleapis.com/compute/v1/projects/playground/global/networks/e2e-test-nicksardo --description "{\"kubernetes.io/service-name\":\"default/myechosvc1\", \"kubernetes.io/service-ip\":\"\"}" --allow tcp:9000 --source-ranges 0.0.0.0/0 --target-tags e2e-test-nicksardo-minion --project playground`
  2m            2m              1       gce-cloudprovider                       Normal          LoadBalancerManualChange        Firewall change required by network admin: `gcloud compute firewall-rules create k8s-1aee5045e658d174-node-hc --network https://www.googleapis.com/compute/v1/projects/playground/global/networks/e2e-test-nicksardo --description "" --allow tcp:10256 --source-ranges 130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22 --target-tags e2e-test-nicksardo-minion --project playground`
  1m            1m              1       service-controller                      Normal          EnsuredLoadBalancer             Ensured load balancer
```
 		2017-09-05 08:47:28 -07:00
..
apimachinery Tolerate group discovery errors in e2e ns cleanup 2017-09-04 17:31:17 -04:00
apps Merge pull request #51734 from soltysh/cronjobs_beta 2017-09-03 18:22:27 -07:00
auth Merge pull request #49457 from mkumatag/tests_multiarch 2017-09-02 15:18:10 -07:00
autoscaling Renamed ClusterSize and WaitForClusterSize to NumberOfReadyNodes and WaitForReadyNodes, respectively. 2017-08-29 11:53:17 +02:00
chaosmonkey Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
common Merge pull request #51816 from liggitt/xiangpengzhao-remove-initc-anno 2017-09-03 17:35:11 -07:00
framework Merge pull request #51562 from nicksardo/gce-attempt-firewall 2017-09-05 08:47:28 -07:00
generated Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
instrumentation Fix Stackdriver Logging tests for large clusters 2017-09-04 21:54:03 +02:00
kubectl Correct CronJob group version at remaining places 2017-09-03 11:17:33 +02:00
lifecycle Merge pull request #49457 from mkumatag/tests_multiarch 2017-09-02 15:18:10 -07:00
manifest Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
network Merge pull request #51805 from yujuhong/net-tiers-static-ip-test 2017-09-03 10:33:12 -07:00
node remove OutOfDisk from controllers 2017-09-04 17:35:55 -07:00
perftype Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
scalability Make threshold for glbc mem-usage scale with nodes in density test 2017-08-28 13:24:24 +02:00
scheduling Merge pull request #49457 from mkumatag/tests_multiarch 2017-09-02 15:18:10 -07:00
servicecatalog Port e2e tests for multi architecture 2017-09-01 05:40:52 +05:30
storage Merge pull request #51833 from verult/VolumeIoOom 2017-09-05 02:14:56 -07:00
testing-manifests Merge pull request #51816 from liggitt/xiangpengzhao-remove-initc-anno 2017-09-03 17:35:11 -07:00
upgrades Job failure policy support in JobController 2017-09-03 12:07:12 +02:00
BUILD Fix bazel 2017-09-01 05:39:00 +05:30
README.md Update docs/ URLs to point to proper locations 2017-06-05 22:13:54 -07:00
dashboard.go
…
e2e-example-config.json
…
e2e.go Merge pull request #51539 from saad-ali/enableAlphaGCEDiskAPI 2017-08-30 03:59:35 -07:00
e2e_test.go move some e2e tests to SIG respectively 2017-08-16 14:34:50 +08:00
events.go run hack/update-all 2017-06-22 11:31:03 -07:00
example_cluster_dns.go Scripted migration from clientset_generated to client-go. 2017-07-17 15:05:37 -07:00
examples.go Add rbac.authorization.k8s.io/v1 2017-08-09 17:04:54 -04:00
gke_local_ssd.go Migrate api.Registry to testapi.Groups in tests. 2017-07-17 15:05:38 -07:00
gke_node_pools.go
…
limit_range.go Merge pull request #47403 from zhangxiaoyu-zidif/e2e-delete-meaningless-check 2017-06-23 02:59:23 -07:00
network_partition.go Job failure policy support in JobController 2017-09-03 12:07:12 +02:00
pod_gc.go Port e2e tests for multi architecture 2017-09-01 05:40:52 +05:30
pods.go Port e2e tests for multi architecture 2017-09-01 05:40:52 +05:30
pre_stop.go Port e2e tests for multi architecture 2017-09-01 05:40:52 +05:30
resource_quota.go let resourcequota evaluator handle uninitialid pod and pvc 2017-08-24 14:50:03 -07:00
ssh.go
…
ubernetes_lite.go Scripted migration from clientset_generated to client-go. 2017-07-17 15:05:37 -07:00

README.md

See e2e-tests

Analytics