scottk/kubernetes
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/kubernetes.git synced 2025-11-07 22:03:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
93,054 Commits 1 Branch 0 Tags
479249b3a3ca0a118568ea0b87717c7b0d32d33f
Commit Graph

9488 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
4f6aa5a921 Merge pull request #85091 from fabriziopandini/alpha-certs-reads-incluster-config 
kubeadm: alpha certs command should read in-cluster config
 2019-11-13 09:27:42 -08:00
Kubernetes Prow Robot
9648d56765 Merge pull request #84118 from neolit123/1.17-kubeadm-add-kubelet-post-phase 
kubeadm: enable kubelet client certificate rotation on primary CP nodes
 2019-11-13 09:25:13 -08:00
David Eads
3fbfe60ed2 make client authentication optional for test kube-apiserver 2019-11-13 10:25:28 -05:00
Chuck Ha
8fcf892498 Remove an infinite poll 
This infinite poll can make kubeadm init/join hang forever due
to a lack of function cancelling.

Signed-off-by: Chuck Ha <chuckh@vmware.com>
 2019-11-13 10:10:41 -05:00
Lubomir I. Ivanov
431fd630ff kubeadm: enable kubelet client certificate rotation on primary CP nodes 
- Don't always print to stdout that the kubelet is starting.
instead delegate this to the callers of TryStartKubelet.
- Add a new root kubeadm init phase called "kubelet-finalize"
- Add a sub-phase to "kubelet-finalize"
called "experimental-cert-rotation"
- "cert-rotation" performs the following actions:
  - tries to guess if kubelet client cert rotation is enabled
  - update the kubelet.conf to use the rotatable cert/key
 2019-11-13 15:49:33 +02:00
David Eads
3aede35b3b dynamic reload cluster authentication info for aggregated API servers 2019-11-13 07:54:27 -05:00
Igor Zibarev
6350095d3c scheduler: make algorithm source an option 
Changes scheduler.New so that algorithm source is moved from the
parameter to an option. The default algorithm source is source with the
DefaultProvider.
 2019-11-13 10:22:29 +03:00
RainbowMango
b2fbdee9bb Deal with auto-generated files. 
- Update bazel by hack/update-bazel.sh
 2019-11-13 10:32:53 +08:00
RainbowMango
ac0562b00c Add metrics flag to show hidden metrics to kube-apiserver 2019-11-13 10:32:52 +08:00
Kubernetes Prow Robot
eedfb6bc7a Merge pull request #79223 from rosti/kubeadm-component-configs-versioned 
kubeadm: component configs versioned
 2019-11-12 15:38:11 -08:00
Kubernetes Prow Robot
ea2750eaa6 Merge pull request #84718 from yastij/remove-validators 
remove system validators package from kubeadm and use k8s.io/system-validators
 2019-11-12 11:50:53 -08:00
Kubernetes Prow Robot
94efa988f4 Merge pull request #84813 from deads2k/admission-feature-gates 
remove global variable dependency from admission plugins
 2019-11-12 10:23:14 -08:00
Sandeep Rajan
f931dad722 bump coredns version and update manifest 2019-11-12 13:05:09 -05:00
Kubernetes Prow Robot
36373b37fd Merge pull request #84672 from hwdef/fix-staticcheck2 
cmd:fix staticcheck warning
 2019-11-12 09:06:06 -08:00
Rostislav M. Georgiev
ec4840f0b2 kubeadm: Amend the hyperkube deprecation change 
The PR introducing 5bb8069 got merged accidentally (the CI robot not
respecting a hold). Hence, the feedback to that PR is merged separately.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-12 16:23:05 +02:00
Kubernetes Prow Robot
681d22428b Merge pull request #84768 from liggitt/delegated-authnz-v1 
switch delegated authnz to v1 APIs
 2019-11-12 04:48:35 -08:00
fabriziopandini
a372dff648 alpha certs tries to read in-cluster config 2019-11-12 10:35:31 +01:00
Yassine TIJANI
b9fe59c93e remove system validators package from kubeadm and use k8s.io/system-validators instead 
Signed-off-by: Yassine TIJANI <ytijani@vmware.com>
 2019-11-12 01:09:56 +01:00
Kubernetes Prow Robot
cf06a2efd6 Merge pull request #85095 from liggitt/protocol_errors 
Plumb configured acceptContentType to client config
 2019-11-11 14:46:58 -08:00
Kubernetes Prow Robot
e008523f76 Merge pull request #85092 from fabriziopandini/alpha-certs-skips-missing-certs 
kubeadm: alpha certs should skip missing files
 2019-11-11 14:46:47 -08:00
Jordan Liggitt
7349a824df generated 2019-11-11 17:19:12 -05:00
Jordan Liggitt
d54a70db5c Switch kubelet/aggregated API servers to use v1 subjectaccessreviews 2019-11-11 17:19:11 -05:00
Jordan Liggitt
5ef4fe959a Switch kubelet/aggregated API servers to use v1 tokenreviews 2019-11-11 17:19:10 -05:00
Kubernetes Prow Robot
fc0bf06983 Merge pull request #85044 from neolit123/1.17-deprecate-cri-socket-upgrade 
kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply"
 2019-11-11 12:56:37 -08:00
Jordan Liggitt
1cac7457a2 Plumb configured acceptContentType to client config 2019-11-11 10:54:38 -05:00
Rostislav M. Georgiev
5bb80694ec kubeadm: Deprecate hyperkube use 
As the hyperkube image is itself deprecated and moved out of tree, its use with
kubeadm gets deprecated too. Hence, deprecation messages will be printed when
it is used.

Signed-off-by: Rostislav M. Georgiev <rostislavg@vmware.com>
 2019-11-11 17:03:25 +02:00
fabriziopandini
7d986a982c alpha certs skip missing files 2019-11-11 15:48:49 +01:00
Kubernetes Prow Robot
939e1e6488 Merge pull request #85043 from neolit123/1.17-enable-secure-ports 
kubeadm: use the secure ports for kube-scheduler and kcm health checks
 2019-11-10 13:27:01 -08:00
Lubomir I. Ivanov
ebfdb25c05 kubeadm: always use a short timeout for clientset creation 
ToClientSet() in kubeconfig.go creates a clientset from
the passed Config object (kubeconfig). For IP addresses
that are not reachable e.g. Get() calls for ConfigMaps
can block for a few minutes with the default timeout.

Modify the timeout to a shorter value by passing an override.
 2019-11-10 05:39:38 +02:00
Kubernetes Prow Robot
01676976c9 Merge pull request #85017 from LouisJackman/remove-goroutine-leak-in-kubeadm-wait 
Remove potential Goroutine leak in kubeadm wait.go
 2019-11-09 14:03:40 -08:00
Lubomir I. Ivanov
efc0ec5ffe kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply" 
Remove the flag "--cri-socket" from the "kubeadm upgrade apply"
command. It has been marked as deprecated since 1.14.
 2019-11-09 23:34:56 +02:00
Lubomir I. Ivanov
23ba857b50 kubeadm: use the secure ports for kube-scheduler and kcm health checks 
The insecure ports were deprecated in 1.12 and 1.13.
 2019-11-09 23:21:39 +02:00
Kubernetes Prow Robot
1ca74c7991 Merge pull request #85030 from ahg-g/ahg-nodestoscore 
Set default percentageOfNodesToScore in kube-scheduler back to "adaptive"
 2019-11-09 11:11:39 -08:00
Kubernetes Prow Robot
9920b733ba Merge pull request #85024 from neolit123/1.17-fix-etcd-node-upgrade 
kubeadm: fix skipped etcd upgrade on secondary CP nodes
 2019-11-09 07:13:39 -08:00
Abdullah Gharaibeh
9fb380ceff set default percentageOfNodesToScore in kube-scheduler back to 0 (maning adaptive) 2019-11-09 06:34:06 -05:00
Kubernetes Prow Robot
49a9b6cadf Merge pull request #84727 from danwinship/ipv6-bind 
fix apiserver to advertise IPv6 endpoints if bound to IPv6
 2019-11-08 18:44:24 -08:00
Lubomir I. Ivanov
cc0320d41a kubeadm: fix skipped etcd upgrade on secondary cp nodes 2019-11-09 03:59:59 +02:00
Kubernetes Prow Robot
3c7706bf9c Merge pull request #84591 from TheLastProject/feature/print-join-as-admin-command 
Let token create help with joining a master
 2019-11-08 13:48:43 -08:00
Louis Jackman
62e314a556 Remove potential Goroutine leak in kubeadm wait.go 
There are two writes yet only one read on a non-buffered channel that is
created locally and not passed anywhere else.

Therefore, it could leak one of its two spawned Goroutines if either:
* The provided `f` takes longer than an erroneous result from
  `waiter.WaitForHealthyKubelet`, or;
* The provided `f` completes before an erroneous result from
  `waiter.WaitForHealthyKubelet`.

The fix is to add a one-element buffer so that the channel write happens
for the second Goroutine in these cases, allowing it to finish and freeing
references to the now-buffered channel, letting it to be GC'd.
 2019-11-08 21:05:19 +00:00
David Eads
675c2fb924 add featuregate inspection as admission plugin initializer 2019-11-08 13:07:40 -05:00
Kubernetes Prow Robot
ab1b374dd9 Merge pull request #84523 from rajansandeep/skipmigration 
Retain CoreDNS corefile when migration fails in kubeadm
 2019-11-08 09:00:29 -08:00
Kubernetes Prow Robot
ae15368355 Merge pull request #84351 from wojtek-t/promote_node_lease_to_GA 
Promote node lease to GA
 2019-11-08 09:00:15 -08:00
Sylvia van Os
dea6d6491a Add --certificate-key flag to token create 2019-11-07 21:27:31 +01:00
Kubernetes Prow Robot
84fcf126c1 Merge pull request #84662 from dims/script-based-hyperkube-to-avoid-dependencies 
Script based hyperkube to avoid dependencies
 2019-11-07 09:04:50 -08:00
Kubernetes Prow Robot
a5fe905be4 Merge pull request #82705 from deads2k/agg-authn-publish 
use controller to publish cluster authentication info
 2019-11-07 09:03:10 -08:00
Kubernetes Prow Robot
c843d9614c Merge pull request #84888 from neolit123/1.17-fix-kube-proxy-env-vars 
kubeadm: fix an issue with the kube-proxy container env. variables
 2019-11-07 04:37:09 -08:00
Kubernetes Prow Robot
73b2c82b28 Merge pull request #83592 from jianzzha/opt-reserved-cpus 
added --reserved-cpus kubelet command option
 2019-11-06 22:14:42 -08:00
Lubomir I. Ivanov
0b4e5ee3b8 kubeadm: fix an issue with the kube-proxy container env. variables 
3993c42431 introduced the propagation of *_PROXY
host env. variables to the kube-proxy container.

To allow The NODE_NAME variable to be properly updated by the downward
API make, sure we preserve the existing variables when adding *_PROXY.
 2019-11-07 03:05:59 +02:00
Jordan Liggitt
297570e06a hack/update-vendor.sh 2019-11-06 17:42:34 -05:00
Kubernetes Prow Robot
e6287b05c0 Merge pull request #84812 from alculquicondor/fix/write-config 
Write scheduler configuration from config file
 2019-11-06 12:20:58 -08:00