Commit Graph

14575 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ae550b62da Merge pull request #106122 from rezakrimi/issue/105862
making some apiserver metrics stable
2021-11-08 10:55:19 -08:00
Kubernetes Prow Robot
bafa87c553 Merge pull request #105817 from yylt/edit
Fix edit command
2021-11-08 09:15:20 -08:00
Kubernetes Prow Robot
c9baa14d70 Merge pull request #105794 from margocrawf/master
--as-uid flag in kubectl and kubeconfigs.
2021-11-08 07:03:13 -08:00
Sai Harsha Kottapalli
17919b1841 Refactor Apply cmd to split flags from options (#102240)
* Refactor Apply cmd to split flags from options

* refactor code

* fix subcommands
2021-11-08 07:02:00 -08:00
Kubernetes Prow Robot
67a7d4056a Merge pull request #103634 from CKchen0726/remove_unnecessary_code
remove unnecessary function after PR #88885 merged
2021-11-08 06:00:59 -08:00
Nikhita Raghunath
5deae0121e staging/publishing: fix go version for go1.16.10 2021-11-08 10:16:07 +05:30
Walter Fender
fbc13f22f8 Bump konnectivity to v0.0.25
/kind feature

Bump konnectivity network proxy to v0.0.25.
Includes fixes for a few resource leaks.
Adds better logging for debugging.
Moves to golang1.17.
Adds additional keepalives.
Fixes HTTP-CONNECT goroutine leak.

Fixes # N/A

```release-note
NONE
```

```docs
NONE
```

Update the images.
2021-11-07 14:34:09 -08:00
Carlos Panato
abbf8c3bed [go1.17] Update to go1.17.3
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2021-11-07 16:29:35 +01:00
Margo Crawford
7e079f5144 --as-uid flag in kubectl and kubeconfigs.
This corresponds to previous work to allow impersonating UIDs:
* Introduce Impersonate-UID header: #99961
* Add UID to client-go impersonation config #104483

Signed-off-by: Margo Crawford <margaretc@vmware.com>
2021-11-05 13:23:49 -07:00
Kubernetes Prow Robot
0b0007ae68 Merge pull request #105421 from brianpursley/kubernetes-105146
Fix bug where using kubectl patch with $deleteFromPrimitiveList on an empty or nonexistent list adds the item to be removed
2021-11-05 12:44:40 -07:00
Kubernetes Prow Robot
cee4aa09b0 Merge pull request #102917 from bysnupy/patch-1
Use "Capacity" instead of "Allocatable" for an accurate node memory total size
2021-11-05 11:39:09 -07:00
Kubernetes Prow Robot
d2aa5fc100 Merge pull request #106177 from aojea/RoundTripperWrapper
client-go token source transport implement RoundTripperWrapper interface
2021-11-05 07:53:53 -07:00
Reza Karimi
894e31f41a making some apiserver metrics stable 2021-11-05 14:50:05 +00:00
Antonio Ojea
938cc5445d assert RoundTripperWrapper interface 2021-11-05 14:53:22 +01:00
Kubernetes Prow Robot
47041cd2a2 Merge pull request #105140 from brianpursley/kubectl-1101
Add --override-type flag to kubectl run and kubectl expose
2021-11-05 05:13:52 -07:00
Antonio Ojea
ef190f860a client-go token source transport implement RoundTripperWrapper interface 2021-11-05 12:22:23 +01:00
brianpursley
0e697e19ac Add --override-type flag to kubectl run and kubectl expose to allow the choice of using a JSON Patch or Strategic Merge Patch to apply the override to the generated output. 2021-11-05 07:10:47 -04:00
Kubernetes Prow Robot
451e1addd8 Merge pull request #105960 from ueokande/max-unavailable-pdb-tests
test: Assert max unavailable for PDB test cases
2021-11-04 13:36:22 -07:00
Kubernetes Prow Robot
1d8966f4f9 Merge pull request #106140 from jonyhy96/fix-flake
component-base: npe when renew hiddenCollectors
2021-11-04 12:34:43 -07:00
Kubernetes Prow Robot
dc93951ad0 Merge pull request #106090 from pohly/log-v-flags
component-base: move v/vmodule/log-flush-frequency into LoggingConfiguration
2021-11-04 12:34:34 -07:00
Kubernetes Prow Robot
2af34cf54d Merge pull request #105940 from dobsonj/kep-1682-ga
Move CSIVolumeFSGroupPolicy feature to GA
2021-11-04 12:34:23 -07:00
Kubernetes Prow Robot
ce1f5af849 Merge pull request #105541 from pohly/component-base-owners
component-base: avoid accumulating default labels
2021-11-04 11:22:23 -07:00
Kubernetes Prow Robot
4c659c5342 Merge pull request #105648 from kkkkun/kkkkun/fix-metric
GET should be transformed to watch in kube-Apiserver
2021-11-04 07:48:04 -07:00
Shin'ya UEOKA
5c76507c3f test: Assert max unavailable for PDB test cases 2021-11-04 22:49:45 +09:00
kkkkun
5f98d8f798 Fix bug: Specical GET should be transformed to WATCH 2021-11-04 21:33:30 +08:00
Kubernetes Prow Robot
f1b000db7c Merge pull request #106146 from pohly/json-output-default
component-base: use stderr as default output stream for JSON
2021-11-04 04:22:04 -07:00
Patrick Ohly
b4988a4259 component-base: use stderr as default output stream for JSON
This makes it consistent with klog's text output and avoids polluting the
programs normal output with log messages. This may become relevant for command
line tools like "kubectl".
2021-11-04 10:24:01 +01:00
haoyun
1a21a53f7e fix: npe when renew hiddenCollectors
Signed-off-by: haoyun <yun.hao@daocloud.io>
2021-11-04 11:10:07 +08:00
Kubernetes Prow Robot
904e97281f Merge pull request #94986 from tkashem/audit-drop-managed-fields
drop managed fields from audit entries
2021-11-03 16:24:03 -07:00
Kubernetes Prow Robot
8e2d7a3d64 Merge pull request #105983 from jiahuif-forks/dep/bump-smd
Upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.0
2021-11-03 15:24:32 -07:00
Kubernetes Prow Robot
f28881de25 Merge pull request #106106 from liggitt/podsecurity-beta-webhook
PodSecurity: update webhook manifest for beta
2021-11-03 14:20:45 -07:00
Kubernetes Prow Robot
a65bb64c09 Merge pull request #104372 from astraw99/fix_label_msg
Fix `kubectl unlabel` response msg
2021-11-03 14:20:32 -07:00
Jordan Liggitt
9f92fb0d7e PodSecurity: update webhook manifest to use named port 2021-11-03 15:04:04 -04:00
Jordan Liggitt
f6456d098e PodSecurity: update webhook manifest to target linux/amd64 node 2021-11-03 15:04:04 -04:00
Jordan Liggitt
d92e0dbea6 PodSecurity: update webhook manifest to label namespace as restricted 2021-11-03 15:04:03 -04:00
Jordan Liggitt
4986780da3 PodSecurity: update webhook manifest for beta 2021-11-03 15:04:03 -04:00
Kubernetes Prow Robot
63c4a22ae9 Merge pull request #105819 from tosi3k/client-go-traces
Add more info to the ListAndWatch trace
2021-11-03 11:48:44 -07:00
Kubernetes Prow Robot
0b8ac0c0fc Merge pull request #106121 from wojtek-t/pf_watch_10
P&F fix watch tracker bug
2021-11-03 10:43:34 -07:00
Wojciech Tyczyński
b1d0fde370 P&F fix watch tracker bug 2021-11-03 15:02:51 +01:00
Jordan Liggitt
2567165182 PodSecurity: trim path when building webhook binary
Change-Id: I76650e2fab2186671f0534109d04846134e7525d
2021-11-03 13:00:11 +00:00
Patrick Ohly
4df70dfd41 component-base: initialize logging as soon as possible
In various places log messages where emitted as part of validation or even
before it (for example, cli.PrintFlags). Those log messages did not use the
final logging configuration, for example text output instead of JSON or not the
final verbosity. The last point became more obvious after moving the setup of
verbosity into logs.Options.Apply because PrintFlags never printed anything
anymore.

In order to force applications to deal with logging as soon as possible, the
Options.Validate and Options.Apply methods are now private. Applications should
use the new Options.ValidateAndApply directly after parsing.
2021-11-03 11:55:54 +01:00
Patrick Ohly
3948cb8d1b component-base: move v/vmodule/log-flush-frequency into LoggingConfiguration
These three options are the ones from logs.AddFlags which are not deprecated.
Therefore it makes sense to make them available also via the configuration file
support in the one command which currently supports that (kubelet).

Long-term, all commands should use LoggingConfiguration, either with a
configuration file (as in kubelet) or via flags (kube-scheduler,
kube-apiserver, kube-controller-manager).

Short-term, both approaches have to be supported. As the majority of the
commands only use logs.AddFlags, that function by default continues to register
the flags and only leaves that to Options.AddFlags when explicitly requested.

A drive-by bug fix is done for log flushing: the periodic flushing called
klog.Flush and therefore missed explicit flushing of the newer logr
backend. This bug was never present in any release Kubernetes and therefore the
fix is not submitted in a separate PR.
2021-11-03 07:41:46 +01:00
Kubernetes Prow Robot
9af2ece18a Merge pull request #106089 from liggitt/podsecurity-beta
PodSecurity: promote config and feature gate to beta
2021-11-02 22:22:57 -07:00
Kubernetes Prow Robot
e48cb8adb0 Merge pull request #106017 from tallclair/unit-test
[PodSecurity] Expand unit test coverage and fix error cases
2021-11-02 18:00:19 -07:00
Kubernetes Prow Robot
c2c0f91385 Merge pull request #101004 from lojies/cleanupforkubectl
code cleanup for kubectl
2021-11-02 17:58:58 -07:00
Tim Allclair
81661d5a34 [PodSecurity] Add metrics test coverage 2021-11-02 14:56:43 -07:00
Tim Allclair
c3398729e0 [PodSecurity] Include error audit annotation on all non-forbidden errors 2021-11-02 14:56:43 -07:00
Tim Allclair
98c86b350c [PodSecurity] Errors validating PodControllers are non blocking 2021-11-02 14:56:42 -07:00
Tim Allclair
e1c4e85b52 [PodSecurity] Add ValidatePod unit test 2021-11-02 14:56:40 -07:00
Kubernetes Prow Robot
47c63a39ed Merge pull request #106097 from liggitt/feature/pod-security/unique-controller-pods-validation
Update pods validation based on uniqueness of controller
2021-11-02 14:28:13 -07:00