Kubernetes Prow Robot
feb758027c
Merge pull request #106907 from cyclinder/remove_dockershim_flags
...
Clean up dockershim flags in the kubelet
2022-01-18 09:09:09 -08:00
Shu Muto
676972235a
Remove dashboard from cluster scripts
2022-01-18 14:48:49 +09:00
cyclinder
07999dac70
Clean up dockershim flags in the kubelet
...
Signed-off-by: cyclinder <qifeng.guo@daocloud.io >
Co-authored-by: Ciprian Hacman <ciprian@hakman.dev >
Signed-off-by: Ciprian Hacman <ciprian@hakman.dev >
2022-01-14 16:02:50 +02:00
Jordan Liggitt
5d9b7ae9e5
Remove fluentd-elasticsearch addon
2022-01-14 08:23:51 -05:00
Shihang Zhang
17c2be0667
limit the scope of 169.254.169.252/32 to host
2022-01-12 10:36:59 -08:00
Kubernetes Prow Robot
5d950ceee4
Merge pull request #104669 from arekkusu/patch-3
...
Update GKE kubernetes sources download link
2022-01-10 14:36:25 -08:00
JD Nurme
30fabbc0cb
updated flag name
2022-01-06 19:51:17 +00:00
Mike Danese
384e9cec1b
don't expand $(ls -A /scrub) in PV_RECYCLER_TEMPLATE
...
Before we write the template.
2021-11-10 11:14:45 -08:00
JD Nurme
4a9703a219
Added env variable for cloud-provider
2021-11-09 00:45:34 +00:00
Walter Fender
35737ff810
Switched ANP w/ grpc to not use destHost strategy.
...
Factored in feedback from caesarxuchao
2021-11-05 11:56:56 -07:00
Walter Fender
f7185b0be1
Add mTLS as default HTTPConnect egress configuration for GCP.
...
We currently have UDS as the configuration with GRPC.
Some users are setting up egress to remote konnectivity servers.
Cannot use UDS for this configuration.
Should have a config setup which validates the mTLS configuration.
Fixed lint errors from shell check.
Fix volumes to not include pki for ANP in grpc mode.
2021-11-05 11:39:39 -07:00
Paco Xu
a48a2efbd4
remove deprecated validEgressSelectorNames 'master' ( #102242 )
...
* remove deprecated validEgressSelectorNames 'master'
Signed-off-by: pacoxu <paco.xu@daocloud.io >
* update gce configure: replace deprecated egress name 'master' with 'controlplane'
Signed-off-by: pacoxu <paco.xu@daocloud.io >
* add dup error for EgressSelection & fix converting alpha/beta to v1 name
2021-09-16 07:09:46 -07:00
Alex
bea25d8024
Update GKE kubernetes sources download link
...
Fix non-working link provided on MOTD to download GKE source release.
Now point to correct location, confirmed same file as provided in "/home/kubernetes/kubernetes-src.tar.gz"
2021-08-31 10:31:23 +09:00
Alex
0c2474968e
MOTD: Remove '-gke.*' in link to source version
...
When actually running in GKE, the version will contain "-gke.*". This makes the reference / link to the source version invalid.
Workaround by using bash variable expansion to remove this gke version substring.
Ex following:
- https://github.com/kubernetes/kubernetes/tree/v1.18.20-gke.501
Should actually be:
- https://github.com/kubernetes/kubernetes/tree/v1.18.20
2021-08-23 19:55:36 +09:00
Kubernetes Prow Robot
1d693cd832
Merge pull request #104109 from caesarxuchao/keepalive
...
add a keepalive time to the konnectivity server
2021-08-05 06:09:46 -07:00
Kubernetes Prow Robot
f886190b48
Merge pull request #103436 from loburm/config_kube_proxy
...
Make cpu request of kube proxy configurable by env variable.
2021-08-04 19:00:40 -07:00
Kubernetes Prow Robot
9c5cefb230
Merge pull request #101781 from ptabor/20210506-retry-dns-resolve
...
Retry hostname->IP: [Errno -2] Name or service not known
2021-08-04 18:59:27 -07:00
vteratipally
5d84ffa6c2
Update configure-helper.sh
2021-08-04 14:36:16 -07:00
vteratipally
b0039559dd
Update configure-helper.sh
2021-08-04 13:19:00 -07:00
Chao Xu
572a24d854
add a keepalive time to the konnectivity server
2021-08-04 12:48:32 -07:00
vteratipally
0376c58c44
Update configure-helper.sh
...
add live-restore true by default.
2021-08-04 12:09:10 -07:00
Julie Qi
2a4a1c1d00
disable aufs module
2021-07-21 23:25:19 -07:00
Marian Lobur
5d80d6e7c3
Make cpu request of kube proxy configurable by env variable.
2021-07-02 16:00:56 +02:00
Piotr Tabor
de442ef860
Retry hostname->IP: [Errno -2] Name or service not known
...
During cluster configuration, the hostname is getting resolved to IP,
as etcd requires IP address as listening address.
Due to connectivity flakes or delayed network inititalization, sometimes
the IP fails to be resolved to a name with following error:
```
[Errno -2] Name or service not known
```
that leads to attempt to run etcd with empty flag.
The PR adds a proper retry (up to 5 minutes) in case the connectivity
problems happens.
I considered alternatives like: `getent hosts foo`, but unfortunetelly thay
can return IPv6 that etcd is not ready for (yet).
2021-07-01 12:20:07 +02:00
Vinayak Goyal
774d228637
remove the path if it exists before writing pki data.
...
if setfacl is called before chmod g+r at anypoint during the lifetime of
the cluster then the default group does not have read permissions on the
file. so we explicitly grant the default group read permissions. See
https://gist.github.com/mmdriley/85ca34f711acbec4b1b94902add488e5 for a
repro.
2021-06-18 11:03:37 -07:00
Joseph Anttila Hall
9d514b2de4
Konnectivity: tune flags for larger clusters (5k nodes).
2021-06-10 14:05:44 -07:00
Kubernetes Prow Robot
9d27400fe2
Merge pull request #102040 from njuptlzf/fix_conversion
...
Fix auditing failed of request: encoding failed
2021-06-05 19:58:38 -07:00
njuptlzf
7b0fbb7292
add audit log test cases for cross-group subresource
2021-06-06 09:52:05 +08:00
Marek Siarkowicz
4ebc0c94a4
Remove legacy metrics client from podautoscaler
2021-06-04 23:06:32 +02:00
Kubernetes Prow Robot
d541872f9a
Merge pull request #102239 from Haleygo/clean-up-AlgorithmProvider-flag-and-pkg
...
clean up algorithmprovider pkg and remove scheduler deprecated algorithm-provider flag
2021-05-27 00:54:23 -07:00
Haleygo
2769e99dba
remove scheduler deprecated algorithm-provider flag and clean up algorithmprovider pkg
2021-05-26 13:19:44 +08:00
Kubernetes Prow Robot
06d44d2f42
Merge pull request #101168 from mikedanese/warning
...
add a warning about the filter table
2021-05-24 21:48:40 -07:00
Kubernetes Prow Robot
77937b1e8e
Merge pull request #101628 from bobbypage/addon-termination-handler
...
Remove node termination handler addon
2021-05-24 11:31:39 -07:00
Kubernetes Prow Robot
e8cf412e5e
Merge pull request #101881 from vinayakankugoyal/konnectivity
...
Update konnectivity network proxy server to run as non-root, by defau…
2021-05-13 23:16:04 -07:00
Vinayak Goyal
b951b9349f
Update konnectivity network proxy server to run as non-root, by default in kube-up.
2021-05-13 12:35:34 -07:00
Avritt Rohwer
0a5a697882
Fix bug in retry-forever usage.
...
- Push retry-forever wrapping to curl invocations.
- Collect curl retry flags into a single variable.
- Remove 'sudo: false' in master.yaml, is unnecessary and breaks older
cloud-init versions.
- Change log-error status reason to be more accurate.
- Fix the some 'python' invocations to 'python3'.
2021-05-12 09:22:20 -07:00
Kubernetes Prow Robot
ca0c04e4d3
Merge pull request #101164 from vinayakankugoyal/apiservernonroot
...
Run control-plane as non root in kube-up.
2021-05-06 17:33:14 -07:00
Kubernetes Prow Robot
8955f55fcf
Merge pull request #101678 from vinayakankugoyal/goodbye-basicauth
...
Remove remnants of basic auth from cluster bootstrap.
2021-05-06 14:14:14 -07:00
Vinayak Goyal
6aa495ddc6
Revert - Recursive chown the /etc/srv/sshproxy if kube-apiserver is running as non root. This way if a key already exists we will be able to read it.
2021-05-06 14:02:53 -07:00
David Porter
dac06aefb0
Revert "Revert "cluster: Use python3 everywhere""
...
This reverts commit 7038338e0f .
2021-05-03 21:43:15 -07:00
Kubernetes Prow Robot
c5b900b69c
Merge pull request #97399 from davidxia/comment-typo
...
Fix typo in comment
2021-05-01 04:57:59 -07:00
Vinayak Goyal
b87762966d
Remove remnants of basic auth from cluster bootstrap.
2021-04-30 11:23:14 -07:00
David Porter
e02ff0687e
Remove node termination handler addon
2021-04-29 14:42:23 -07:00
Paco Xu
7038338e0f
Revert "cluster: Use python3 everywhere"
2021-04-26 11:21:44 +08:00
David Porter
3f87f4f278
Use python3 everywhere
2021-04-23 14:33:58 -07:00
Kubernetes Prow Robot
ae35c6f10c
Merge pull request #101255 from basantsa1989/stack-type
...
Adding stack-type to gce cloud config (to be used for dual stack in legacy-cloud-providers gce code)
2021-04-22 15:55:28 -07:00
Basant Amarkhed
e15d811652
Adding stack-type to cloud config (to be used for dual stack in legacy-cloud-providers code)
2021-04-19 19:06:55 +00:00
Shihang Zhang
297ad30610
dnat to 169.254.169.252 for metadata server traffic
2021-04-19 10:47:51 -07:00
Kubernetes Prow Robot
28c877dcb6
Merge pull request #101043 from benhxy/tls-2
...
Use GKE specific configuration for kubeconfig file generation
2021-04-16 11:54:51 -07:00
Mike Danese
ba3fc65072
add a warning about the filter table
2021-04-15 16:22:28 -07:00