Kubernetes Prow Robot
558c9536a1
Merge pull request #123678 from kinvolk/userns-use-kubelet-user-mappings
...
kubelet: Add logs for userns custom mappings parsing
2024-07-20 19:59:57 -07:00
Kubernetes Prow Robot
52c0ed4673
Merge pull request #124342 from zhifei92/fix-error-check
...
fix error checking in kl.killPod within SyncPod
2024-07-16 16:05:07 -07:00
Kubernetes Prow Robot
fc3abdaf2d
Merge pull request #125470 from everpeace/kep-3619-SupplementalGroupsPolicy-e2e
...
KEP-3619: Add NodeStatus.Features.SupplementalGroupsPolicy API and e2e
2024-07-16 13:57:06 -07:00
Kubernetes Prow Robot
9c763a9c9f
Merge pull request #126104 from cji/5321
...
Add funcs in pkg/filesystem/util to set file permissions on Windows and update container log dir perms
2024-07-16 10:33:05 -07:00
Shingo Omura
f46ecf5648
KEP-3619: Wiring up from RuntimeFeatures.SupplementalGroupsPolicy(CRI) to NodeFeatures.SupplementalGroupsPolicy(API)
...
KEP-3619: fix typos in pkg/kubelet/container/runtime.go
2024-07-16 12:36:00 +09:00
Mark Rossetti
b377dfba0c
Add funcs in pkg/filesystem/util that can actually set file permissiosn
...
on Windows and update container log dir perms to 660 on Windows
2024-07-15 14:22:59 -07:00
Michal Wozniak
5f1ab75d27
Fix that PodIP field is not set for terminal pod
2024-07-12 21:36:12 +02:00
Harshal Patil
68d317a8d1
Add a warning log, event and metric for cgroup version 1
...
Signed-off-by: Harshal Patil <harpatil@redhat.com >
2024-07-09 11:34:46 -04:00
Kubernetes Prow Robot
34b8832edb
Merge pull request #125631 from SergeyKanzhelev/logFailedAdmission
...
improve logging of pod admission denied
2024-06-28 19:36:20 -07:00
Vinayak Goyal
c3ae97056d
Remove kubelet soft admission.
2024-06-28 06:57:04 +00:00
Sergey Kanzhelev
e8e2fda5c3
improve logging of pod admission denied
2024-06-21 17:46:49 +00:00
Kubernetes Prow Robot
a4092e3441
Merge pull request #125017 from fatsheep9146/syncPod-trace-record-error
...
SyncPod record error and set error status to span when return err is non-nil
2024-06-18 17:12:41 -07:00
Kubernetes Prow Robot
e6616033cb
Merge pull request #120844 from bzsuni/cleanup/sets/kubelet
...
[kubelet] Use a generic Set instead of a specified Set
2024-06-14 09:09:17 -07:00
Kubernetes Prow Robot
e702c2e0b6
Merge pull request #124574 from zhangweikop/master
...
enable kubelet server to dynamically load tls certificate files
2024-06-06 09:16:29 -07:00
Wei Zhang
1b303fe5da
enable kubelet server to dynamically load tls certificate files
2024-06-06 03:07:16 +00:00
Kubernetes Prow Robot
a8d51f4f05
Use a generic Set instead of a specified Set in kubelet
...
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io >
2024-06-04 14:25:43 +08:00
Ziqi Zhao
588b72a942
SyncPod record error and set error status to span when return err is not nil
...
Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com >
2024-05-21 13:35:56 +08:00
Sascha Grunert
2aa9e76be1
Move pkg/kubelet/cri/remote to cri-client
...
Signed-off-by: Sascha Grunert <sgrunert@redhat.com >
2024-05-14 10:58:18 +02:00
Sascha Grunert
9c712466f6
Make remote runtime and image service logging independent
...
It's now possible to pass around the `*klog.Logger` which can also be
`nil` to disable logging at all.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com >
2024-05-08 10:32:21 +02:00
Sascha Grunert
7b14e0e382
Decouple kubelet/cri/remote package from pkg/features
...
Importing the `k8s.io/kubernetes/pkg/features` package in the remote
runtime implementation makes it harder to separate the functionalities
at some later point in time.
We now decouple them by checking if the feature is enabled directly in
the kubelet service creation path.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com >
2024-04-29 08:37:02 +02:00
Kubernetes Prow Robot
534d7cbc1a
Merge pull request #123905 from aojea/field_selector
...
Field selector for Services based on ClusterIP and Type
2024-04-19 15:30:55 -07:00
zhifei92
f6f07035a8
fix: fix error checking in kl.killPod within SyncPod
2024-04-19 18:04:18 +08:00
Kubernetes Prow Robot
ef2c682635
Merge pull request #122082 from carlory/remove-keep-terminated-pod-volumes
...
keep-terminated-pod-volumes flag on kubelet is removed
2024-04-17 23:59:54 -07:00
Kubernetes Prow Robot
3fda574e5e
Merge pull request #121770 from frzifus/tracing_kubelet_read-only
...
pass tracerprovider to kublet-readonly server
2024-04-17 23:59:33 -07:00
Antonio Ojea
7d78fb791d
don't watch headless services on kubelet
...
The kubelet watches services only to generate the environment variables
inside a pod, but headless services are not needed for this.
Change-Id: Idb4e893862c55df5e29e13ac92ed288ff573dc0c
2024-04-11 13:09:36 +00:00
Ed Bartosh
26881132bd
kubelet: assign Node as an owner for the ResourceSlice
...
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com >
2024-03-15 09:46:13 +02:00
Rodrigo Campos
868d231ae4
kubelet: Wrap user namespace manager errors
...
So the error message has more context about what part is failing.
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com >
2024-03-13 19:14:55 +01:00
Antonio Ojea
7ab1ef644e
Revert "Implement a field selector for ClusterIP on Services"
2024-03-12 12:20:27 +00:00
Patrick Ohly
d59676a545
dra kubelet: publish NodeResourceSlices
...
The information is received from the DRA driver plugin through a new gRPC
streaming interface. This is backwards compatible with old DRA driver kubelet
plugins, their gRPC server will return "not implemented" and that can be
handled by kubelet. Therefore no API break is needed.
However, DRA drivers need to be updated because the Go API changed. They can
return
status.New(codes.Unimplemented, "no node resource support").Err()
if they don't support the new ListAndWatchResources method and
structured parameters.
The controller in kubelet then synchronizes this information from the driver
with NodeResourceSlice objects, creating, updating and deleting them as needed.
2024-03-07 22:22:13 +01:00
Kubernetes Prow Robot
5b4d97dc5a
Merge pull request #122541 from aojea/headless_selector
...
Implement a field selector for ClusterIP on Services
2024-03-05 17:30:57 -08:00
Antonio Ojea
5122fe0732
don't watch headless services on kubelet
...
The kubelet watches services only to generate the environment variables
inside a pod, but headless services are not needed for this.
Change-Id: I22ee2b3352f8fe71cddfafa6f09b768c0a0e26b4
2024-03-05 17:16:48 +00:00
Kubernetes Prow Robot
dc3f5ec6cc
Merge pull request #112957 from mxpv/log-dir
...
Allow changing pod log directory
2024-03-04 21:07:06 -08:00
carlory
b47c73ee26
keep-terminated-pod-volumes flag on kubelet is removed
2024-03-01 18:42:15 +08:00
Giuseppe Scrivano
b2a92406ef
KEP-127: check for runtime handler userns support
...
block the creation of a pod that requires a user namespace, unless the
runtime handler has support for it.
If the pod requested for a user namespace, and the handler does not
support it then return an error regardless of the feature gate.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com >
2024-02-27 12:01:00 +01:00
Giuseppe Scrivano
024146f705
KEP-127: the kubelet stores runtime helpers
...
as they are received from the ResponseStatus request to the runtime.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com >
2024-02-27 11:07:35 +01:00
Kubernetes Prow Robot
948c5d9b4f
Merge pull request #122780 from pacoxu/fix-mirror-pod-log
...
kubelet: make log more clearer for not create a mirror pod
2024-02-21 13:08:19 -08:00
Peter Hunt
ba8fcb5ef6
kubelet: don't disable gc if max age is specified
...
Signed-off-by: Peter Hunt <pehunt@redhat.com >
2024-02-19 14:44:20 -05:00
Peter Hunt
a8ea936364
image gc: don't start until max age has passed since kubelet started
...
Signed-off-by: Peter Hunt <pehunt@redhat.com >
2024-02-19 14:44:20 -05:00
Maksym Pavlenko
d9e2487d0c
Add PodLogsPath to kubelet config
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2024-02-16 09:55:59 -08:00
Harsha Narayana
ab8c784ee9
kubelet: enable configurable rotation duration and parallel rotate
2024-02-09 16:49:11 +05:30
Paco Xu
9263a66aec
kubelet: make log more clearer for not create a mirror pod
2024-01-15 15:17:21 +08:00
Akihiro Suda
2e999fff02
Fix compiling e2e.test on macOS
...
Fix issue 122650 (regression in PR 122552)
```
$ make WHAT=test/e2e/e2e.test
+++ [0109 10:06:53] Building go targets for darwin/amd64
k8s.io/kubernetes/test/e2e/e2e.test (test)
package k8s.io/kubernetes/test/e2e
imports k8s.io/kubernetes/test/e2e/common
imports k8s.io/kubernetes/test/e2e/common/node
imports k8s.io/kubernetes/pkg/kubelet
imports github.com/opencontainers/runc/libcontainer/userns: C source files not allowed when not using cgo or SWIG: userns_maps.c
!!! [0109 10:06:54] Call tree:
!!! [0109 10:06:54] 1: /Users/suda/gopath/src/k8s.io/kubernetes/hack/lib/golang.sh:948 kube::golang::build_binaries_for_platform(...)
!!! [0109 10:06:54] 2: hack/make-rules/build.sh:27 kube::golang::build_binaries(...)
!!! [0109 10:06:54] Call tree:
!!! [0109 10:06:54] 1: hack/make-rules/build.sh:27 kube::golang::build_binaries(...)
!!! [0109 10:06:54] Call tree:
!!! [0109 10:06:54] 1: hack/make-rules/build.sh:27 kube::golang::build_binaries(...)
make: *** [all] Error 1
```
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2024-01-09 10:42:20 +09:00
Kubernetes Prow Robot
6427e2c9c8
Merge pull request #122578 from carlory/lock-default-ConsistentHTTPGetHandlers
...
lock GA feature-gate ConsistentHTTPGetHandlers to default
2024-01-04 18:00:52 +01:00
Kubernetes Prow Robot
2b1ccec47e
Merge pull request #122087 from fatsheep9146/fix-kubelet-trace-broke
...
fix kubelet trace broke in 1.28
2024-01-04 17:59:39 +01:00
carlory
55c5db172e
lock GA feature-gate ConsistentHTTPGetHandlers to default
2024-01-04 15:12:08 +08:00
Kubernetes Prow Robot
2b5c0c281d
Merge pull request #122310 from weilaaa/use_buildin_max_min_instead
...
use build-in max and min func to instead of k8s.io/utils/integer funcs
2023-12-18 19:25:34 +01:00
weilaaa
eb8f3f194f
use build-in max and min func to instead of k8s.io/utils/integer funcs
2023-12-15 15:09:11 +08:00
Davanum Srinivas
e2cf9692fc
Remove unused code in kubelet - take 1
...
spotted `DockerContainer` in types.go and pulling on whether we
really needed it found that a bunch of code is not really
required.
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2023-12-14 13:31:38 -08:00
Ziqi Zhao
e92501b8fc
optimize the comment
...
Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com >
2023-12-05 22:46:27 +08:00
Ziqi Zhao
f035fea63a
remove unnecessary code
...
Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com >
2023-11-29 09:59:53 +08:00