zhangzhifei16
2db729cfa4
Add flatz to kubelet auth.
...
Fix: Move flagz to InstallDebuggingHandlers.
Move flagz to the lower switch statemen
Fix linter
Drop the function parameter for the read-only server.
2025-03-13 10:11:59 +08:00
Tim Allclair
97cb563cae
Require auth for all new Kubelet endpoints
2025-02-19 12:17:05 -08:00
Vinayak Goyal
3a780a1c1b
KEP-2862: Graduate to BETA.
2025-01-24 21:36:00 +00:00
zhifei92
b9fc5678d9
Not using fine-grained auth.
2024-12-17 13:27:01 +08:00
zhangzhifei16
7caff55fd9
Add statusz to kubelet auth.
2024-12-11 14:34:13 +08:00
zhifei92
816cd40280
Unify ComponentKubelet and add unit tests.
2024-12-10 10:32:14 +08:00
Jian Zeng
94cd0a0892
feat(kubelet): only returns logs that match the given stream
...
Signed-off-by: Jian Zeng <anonymousknight96@gmail.com >
2024-11-07 13:52:16 +08:00
zhangzhifei16
1381e41f28
feat: Integrate device plugin registration gRPC server health checks.
2024-11-05 19:59:56 +08:00
Richa Banker
6eeac6d32f
Add tests
2024-10-30 14:01:32 -07:00
zhifei92
dac7332ed2
integrate kubelet with the systemd watchdog
...
feat: add unit test
feat: add FeatureGate for SystemdWatchdog
fix: linter and failed tests
feat: add SystemdWatchdog to versioned feature list yaml
2024-10-21 10:46:14 +08:00
Kubernetes Prow Robot
f5ae0413ca
Merge pull request #126347 from vinayakankugoyal/kep2862impl
...
KEP-2862: Fine-grained Kubelet API Authorization
2024-10-18 03:53:04 +01:00
Vinayak Goyal
b1f290d444
KEP-2862: Fine-grained Kubelet API Authorization
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com >
2024-10-17 20:53:27 +00:00
Kubernetes Prow Robot
a7fcc89ac0
Merge pull request #125936 from sivchari/use-ptr
...
use utils/ptr package instead of utils/pointer
2024-10-07 01:02:04 +01:00
sivchari
4eab3cca0a
use utils/ptr package instead of utils/pointer
...
Signed-off-by: sivchari <shibuuuu5@gmail.com >
2024-10-03 11:33:12 +09:00
Kubernetes Prow Robot
909f9b912e
Merge pull request #127692 from mmorel-35/testifylint/expected-actual@k8s.io/kubernetes
...
fix: enable expected-actual rule from testifylint in module `k8s.io/kubernetes`
2024-09-28 05:54:01 +01:00
Matthieu MOREL
f736cca0e5
fix: enable expected-actual rule from testifylint in module k8s.io/kubernetes
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com >
2024-09-27 07:56:31 +02:00
Matthieu MOREL
b7248077a9
fix: enable formatter rule from testifylint in module k8s.io/kubernetes
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com >
2024-09-26 08:19:54 +02:00
Marek Siarkowicz
3ee8178768
Cleanup defer from SetFeatureGateDuringTest function call
2024-04-24 20:25:29 +02:00
Kubernetes Prow Robot
3fda574e5e
Merge pull request #121770 from frzifus/tracing_kubelet_read-only
...
pass tracerprovider to kublet-readonly server
2024-04-17 23:59:33 -07:00
Adrian Reber
da8ffcd1dc
Switch 'ContainerCheckpoint' from Alpha to Beta
...
* Forensic Container Checkpointing as described in KEP 2008 moves from
Alpha to Beta. This is corresponding code change.
* Adapt e2e test to handle
'(rpc error: code = Unimplemented desc = unknown method CheckpointContainer'
and
'(rpc error: code = Unimplemented desc = method CheckpointContainer not implemented)'
and
'(rpc error: code = Unknown desc = checkpoint/restore support not available)'
One error message is if the CRI implementation does
not implement the CRI RPC (too old) and the second is
if the CRI implementation does explicitly not support the feature.
The third error message can be seen if the container engine
explicitly disabled the checkpoint/restore support,
* As described in the corresponding KEP 2008 explicitly test for
disabled functionality.
* Extended test to look for the checkpoint kubelet metric.
* Extended test to look for the CRI error metric.
* Add separate sub-resource permission to control permissions on
the checkpoint kubelet API endpoint
Signed-off-by: Adrian Reber <areber@redhat.com >
2024-02-19 18:09:38 +00:00
Benedikt Bongartz
c823a21a7a
apply public endpoint filter only for kubelet-readonly
...
Signed-off-by: Benedikt Bongartz <bongartz@klimlive.de >
2024-01-11 00:43:41 +01:00
Davanum Srinivas
d621e09a52
remove unused GetRawContainerInfo
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2023-12-15 05:56:22 -08:00
Kevin Hannon
26923b91e8
implementation of split disk kep
2023-11-01 14:46:33 -04:00
Sean Sullivan
168998e87b
StreamTranslator and FallbackExecutor for WebSockets
2023-10-23 15:33:38 -07:00
Sascha Grunert
db9fcfeed2
Move cri/streaming to k8s.io/kubelet staging repository
...
Container runtimes like CRI-O and containerd reuse the code by copying
it from Kubernetes. To have a single source of truth for the streaming
server we now move the already isolated implementation to the
k8s.io/kubelet staging repository. This way runtimes can re-use the code
without copying the parts.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com >
2023-06-05 08:08:18 +02:00
TommyStarK
1fcc8fbf59
kubelet: Replace deprecated pointer function
...
Signed-off-by: TommyStarK <thomasmilox@gmail.com >
2023-01-08 13:44:09 +01:00
Peter Hunt
6298ce68e2
kubelet: wire ListPodSandboxMetrics
...
Signed-off-by: Peter Hunt <pehunt@redhat.com >
2022-11-08 14:47:08 -05:00
David Ashpole
64af1adace
Second attempt: Plumb context to Kubelet CRI calls ( #113591 )
...
* plumb context from CRI calls through kubelet
* clean up extra timeouts
* try fixing incorrectly cancelled context
2022-11-05 06:02:13 -07:00
Antonio Ojea
9c2b333925
Revert "plumb context from CRI calls through kubelet"
...
This reverts commit f43b4f1b95 .
2022-11-02 13:37:23 +00:00
David Ashpole
f43b4f1b95
plumb context from CRI calls through kubelet
2022-10-28 02:55:28 +00:00
Kubernetes Prow Robot
127f33f63d
Merge pull request #111221 from inosato/remove-ioutil-from-kubelet
...
Remove ioutil in kubelet/kubeadm and its tests
2022-09-17 21:56:28 -07:00
Sally O'Malley
47e7d8034f
kubelet tracing
...
Signed-off-by: Sally O'Malley <somalley@redhat.com >
Co-authored-by: David Ashpole <dashpole@google.com >
2022-08-01 12:55:02 -04:00
inosato
3b95d3b076
Remove ioutil in kubelet and its tests
...
Signed-off-by: inosato <si17_21@yahoo.co.jp >
2022-07-30 12:35:26 +09:00
Adrian Reber
fc37a7a990
kubelet: wire checkpoint container support through
...
This adds the last pieces to wire through the container checkpoint
support in the kubelet.
Signed-off-by: Adrian Reber <areber@redhat.com >
2022-07-14 10:27:41 +00:00
Tim Allclair
e1069c6495
Don't follow redirects with spdy
2022-03-04 16:08:58 -08:00
Sascha Grunert
de37b9d293
Make CRI v1 the default and allow a fallback to v1alpha2
...
This patch makes the CRI `v1` API the new project-wide default version.
To allow backwards compatibility, a fallback to `v1alpha2` has been added
as well. This fallback can either used by automatically determined by
the kubelet.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com >
2021-11-17 11:05:05 -08:00
Niels de Vos
e22012950b
Add Kubelet.ListBlockVolumesForPod()
2021-04-22 08:36:20 +02:00
fengzixu
edc1c62471
feature: add CSIVolumeHealth feature and gate
...
1. add EventRecorder to ResourceAnalyzer
2. add CSIVolumeHealth feature and gate
2021-03-10 01:16:37 +09:00
pacoxu
cd54bd94e9
deprecate cAdvisor json metrics collected by Kubelet
...
- remove unused code for cadvisor json metrics collected
Signed-off-by: pacoxu <paco.xu@daocloud.io >
2021-03-02 15:36:21 +08:00
Sri Saran Balaji Vellore Rajakumar
af05a7eca3
Refactor Kubelet Server to take kubeConfiguration instead of multiple fields
2021-02-11 16:15:35 -08:00
Sri Saran Balaji Vellore Rajakumar
51cdf4e97b
Add support to disable /debug/pprof and /debug/flags/v endpoint
...
Co-authored-by: xiaofei.sun <sunxiaofei@kuaishou.com >
Co-authored-by: SaranBalaji90 <srisaranbalaji@gmail.com >
2021-02-11 15:56:53 -08:00
Tim Allclair
a439bc5572
Remove --redirect-container-streaming functionality ( #95935 )
...
* Remove --redirect-container-streaming functionality
* Update bazel
2020-11-09 11:50:11 -08:00
Marek Siarkowicz
7d309e0104
Move Kubelet Summary API to staging repo
2020-09-22 18:23:28 +02:00
RainbowMango
3c7caff44d
remove deprecated kubelet endpoint /metrics/resource/v1alpha1
2020-08-28 09:16:56 +08:00
David Ashpole
1f70708f6c
update cAdvisor to v0.37.0
2020-07-09 10:23:10 -07:00
Sri Saran Balaji Vellore Rajakumar
05240c9218
Add support for disabling /logs endpoint in kubelet
2020-07-06 07:52:30 -07:00
Davanum Srinivas
5692926914
Move packages for slightly better UX for consumers
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2020-05-20 10:57:46 -04:00
Kubernetes Prow Robot
036fcda230
Merge pull request #89412 from coderanger/fix-kubelet-method-metrics
...
Apply the same style of fix as #87913 but for HTTP methods too.
2020-05-18 17:43:36 -07:00
Kubernetes Prow Robot
ba35704b51
Merge pull request #81443 from mikedanese/socks5
...
rest.Config: support configuring an explict proxy URL
2020-05-10 06:05:50 -07:00
Mike Danese
652a48d2e7
wire up proxier in spdy transport
...
and delete useless function
2020-05-07 09:13:58 -07:00