Commit Graph

33663 Commits

Author SHA1 Message Date
Tim Allclair
e6ea4f0538 Don't follow non-local redirects for http probes 2019-03-15 11:04:30 -07:00
Jacob Tanenbaum
c3548165d5 Clear conntrack entries on 0 -> 1 endpoint transition with externalIPs
As part of the endpoint creation process when going from 0 -> 1 conntrack entries
are cleared. This is to prevent an existing conntrack entry from preventing traffic
to the service. Currently the system ignores the existance of the services external IP
addresses, which exposes that errant behavior

This adds the externalIP addresses of udp services to the list of conntrack entries that
get cleared. Allowing traffic to flow

Signed-off-by: Jacob Tanenbaum <jtanenba@redhat.com>
2019-03-15 11:18:51 -04:00
WanLinghao
a0a8ea4829 Clean empty package import by #69504 2019-03-15 14:32:20 +08:00
caiweidong
92aee22646 Remove the unused variabe: syncDuration in volumemanager 2019-03-15 10:04:41 +08:00
Kubernetes Prow Robot
d5a3db0039 Merge pull request #74311 from hpedrorodrigues/fix-lb-sg-deletion
Ensure ownership when deleting a load balancer security group
2019-03-14 18:10:58 -07:00
Kubernetes Prow Robot
b3ec6c17f1 Merge pull request #75144 from Huang-Wei/followup-74222
kubelet: updated logic of verifying a static critical pod
2019-03-14 14:41:00 -07:00
Fabio Rapposelli
d22a39db8a stop vsphere cloud provider from spamming logs with failed to patch IP
Fixes: #75236
2019-03-14 22:39:13 +01:00
andyzhangx
4b4b6cdcab fix race condition issue for smb mount on windows
change var name
2019-03-14 15:02:15 +00:00
Pengfei Ni
a304297c99 Fix panic when removing docker images 2019-03-14 18:53:02 +08:00
Jordan Liggitt
f2a0c0342c Revert "Revert kubelet to default to ttl cache secret/configmap behavior"
This reverts commit cd1c9f9018.
2019-03-13 15:12:26 -07:00
Clayton Coleman
4c87a14e6b Avoid allocating when performing VisitRulesFor on service accounts
Service account authorization checks are done frequently and were
observed to perform 7% of allocations on a system running e2e tests.
The allocation comes from when we walk the authorization rules to
find matching service accounts.

Optimize the check for service account names to avoid allocating.
2019-03-13 17:40:21 -04:00
Wei Huang
2b554b4286 scheduler: cleanup unused parameters in unschedulableQ 2019-03-13 11:54:16 -07:00
Hemant Kumar
97ec61561a Allow different operation names 2019-03-13 14:20:45 -04:00
Kubernetes Prow Robot
517922f31a Merge pull request #75308 from msau42/csi-beta-e2e
ignore kubeclient nil in csi plugin init
2019-03-13 05:49:46 -07:00
ymlong
58f8c0207d Correcting some spelling errors 2019-03-13 15:00:32 +08:00
Wei Huang
d67e7fd47f kubelet: updated logic of verifying a static critical pod
- check if a pod is static by its static pod info
- meanwhile, check if a pod is critical by its corresponding mirror pod info
2019-03-12 23:40:20 -07:00
caiweidong
5fa000e5ed Change log: avoid to print raw json response too frequently 2019-03-13 13:07:01 +08:00
Pengfei Ni
84617c8b51 Allow disable outbound snat when Azure standard load balancer is used 2019-03-13 10:29:41 +08:00
Michelle Au
398777f261 ignore kubeclient nil in csi plugin init 2019-03-12 16:29:08 -07:00
Kubernetes Prow Robot
cc8afb25fc Merge pull request #74040 from ajatprabha/issue_73648
add ResourceVersion to DeleteOptions.Preconditions
2019-03-12 15:44:38 -07:00
Kubernetes Prow Robot
f33e5e8f7a Merge pull request #74394 from thockin/proxy-reject-lb-no-endpoints
Kube-proxy: ICMP reject via LBs when no endpoints
2019-03-12 13:18:40 -07:00
Laurent Bernaille
09f821ddb5 [kube-proxy/ipvs] Add flag to enable strict ARP 2019-03-12 15:56:22 +01:00
ajatprabha
4ddc198c39 pin ResourceVersion precondition only when specified 2019-03-12 17:00:41 +05:30
ajatprabha
42f0a36f44 check for ResourceVersion conflict in separate if block 2019-03-12 17:00:39 +05:30
ajatprabha
8f48d76271 add ResourceVersion to DeleteOptions.Preconditions 2019-03-12 17:00:39 +05:30
Kubernetes Prow Robot
9cbccd3859 Merge pull request #75256 from feiskyer/fix-75198
Ensure Azure load balancer cleaned up on 404 or 403
2019-03-12 02:52:40 -07:00
Laurent Bernaille
96818ea31e [kube-proxy/ipvs] Do not delete existing VS and RS when starting 2019-03-12 09:40:55 +01:00
Kubernetes Prow Robot
eb6a1b651c Merge pull request #72942 from caesarxuchao/expose-storage-version-hash
Populate the storage version hash
2019-03-11 21:36:36 -07:00
goodluckbot
8d991e6ee2 Pick node for preemption based on start time of pods 2019-03-12 12:30:15 +08:00
Tim Hockin
de25d6cb95 Kube-proxy: REJECT LB IPs with no endpoints
We REJECT every other case.  Close this FIXME.

To get this to work in all cases, we have to process service in
filter.INPUT, since LB IPS might be manged as local addresses.
2019-03-11 20:33:45 -07:00
WanLinghao
686b526de4 remove unused functions in pkg/controller/nodelifecycle/node_lifecycle_controller.go 2019-03-12 11:01:47 +08:00
Kubernetes Prow Robot
43b6ddf3c6 Merge pull request #75087 from andyzhangx/unmount-issue-windows
fix smb unmount issue on Windows
2019-03-11 17:58:37 -07:00
Kubernetes Prow Robot
243e740885 Merge pull request #74809 from oxddr/secrets-and-maps
Fix secret/configmap management for terminated pods
2019-03-11 16:42:36 -07:00
Chao Xu
887cb93d8d generated BUILD
generated proto
2019-03-11 10:26:56 -07:00
Chao Xu
3b618af0d4 Expose storage version hash 2019-03-11 10:26:56 -07:00
Kubernetes Prow Robot
8477c486a8 Merge pull request #74652 from cofyc/fix72500
Delay CSI client initialization
2019-03-11 09:39:27 -07:00
Kubernetes Prow Robot
cd9e590178 Merge pull request #74520 from casusbelli/fix-qb-usermapping
Adds missing user mapping option for Quobyte mounts
2019-03-11 02:45:26 -07:00
Pengfei Ni
88907da9a4 Ensure Azure load balancer cleaned up on 404 or 403 2019-03-11 16:40:23 +08:00
andyzhangx
720a5e20d8 fix smb unmount issue on Windows
fix log warning

use IsCorruptedMnt in GetMountRefs on Windows

use errorno in IsCorruptedMnt check

fix comments: add more error code

add more error no checking

change year

fix comments
2019-03-10 02:13:16 +00:00
Kubernetes Prow Robot
0b4275b6c7 Merge pull request #74760 from apelisse/add-mangerfield-flag
Add "fieldManager" to flag to PATCH/CREATE/UPDATE
2019-03-08 22:27:29 -08:00
Yecheng Fu
fa926ed6e0 Delay CSI client initialization 2019-03-09 13:45:03 +08:00
Kubernetes Prow Robot
b150560107 Merge pull request #74441 from Random-Liu/pod-log-directory
Add namespace and name into the CRI pod log directory
2019-03-08 20:43:30 -08:00
Lantao Liu
0ac651bfc3 Include pod logs in the pod ephemeral storage.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-03-08 16:42:14 -08:00
Lantao Liu
f14c6c95d6 New pod log directory /var/log/pods/NAMESPACE_NAME_UID.
Signed-off-by: Lantao Liu <lantaol@google.com>
2019-03-08 16:42:14 -08:00
Antoine Pelisse
eb904d8fa8 Add "fieldManager" to flag to PATCH/CREATE/UPDATE
And add a corresponding flag in kubectl (for apply), even though the
value is defaulted in kubectl with "kubectl".

The flag is required for Apply patch-type, and optional for other PATCH,
CREATE and UPDATE (in which case we fallback on the user-agent).
2019-03-08 16:03:03 -08:00
Tim Allclair
bc01f97055 Promote RuntimeClass to beta 2019-03-08 13:21:52 -08:00
Matthew Wong
cfea406c1c Fix unit test volumeattachments watch not working 2019-03-08 15:20:31 -05:00
Clayton Coleman
3230a0b4fd Support Table and PartialObjectMetadata on watch
Clean up the code paths that lead to objects being transformed and output with negotiation.
Remove some duplicate code that was not consistent. Now, watch will respond correctly to
Table and PartialObjectMetadata requests. Add unit and integration tests.

When transforming responses to Tables, only the first watch event for a given type will
include the columns. Columns will not change unless the watch is restarted.

Add a volume attachment printer and tighten up table validation error cases.

Disable protobuf from table conversion because Tables don't have protobuf because they
use `interface{}`
2019-03-08 13:03:59 -05:00
Vladimir Vivien
923ad369c8 CSI Inline Volume - Kubelet/Driver code impl 2019-03-08 12:40:09 -05:00
Vladimir Vivien
d998fc8f0f CSI Inline Volume - Generated files 2019-03-08 12:39:58 -05:00