Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.2:ARM
kubectl
kubectl.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File kubectl.changes of Package kubectl
------------------------------------------------------------------- Wed Mar 25 19:46:06 UTC 2020 - rbrown@suse.com - Update to version 1.18.0: * bump k8s.io/utils package * Simplify dual or single port logic * fix kubectl port-forward for services with explicit local port * Fix the VMSS name and resource group name when updating VMSS for LoadBalancer backendPools. * bump k8s.io utils * Do not reset managedFields in status update strategy * Use discovery to test apply all status * Updating vendored files * Update vendored MountSensitive code for Windows * add unit test for addTopology() * make filteredZones order predictable * Restore orphaning check in gc test * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-rc.1 * Fix isCurrentInstance for Windows by removing the dependency of hostname * e2e wait until controller manager pod ready * Add missing article in prominent release note * add testing * add ExternalTrafficPolicy support for External IPs in ipvs kubeproxy * add ExternalTrafficPolicy support for External IPs in iptables kubeproxy * add feature gate ExternalPolicyForExternalIP for the bug fix * Set unschedulable Condition after setting nominated Node * fix logging on e2e metrics grabber test * Fix unbound variable error in gce/configure.sh * CHANGELOG: Update directory for v1.15.11 release * CHANGELOG: Update directory for v1.16.8 release * CHANGELOG: Update directory for v1.17.4 release * Bump Cluster-Autoscaler to 1.18.0 * Removing ConfigMap as suggestion for IngressClass parameters * Remove kubectl column output test * build/release-images.sh: remove possible duplicate targets * Add tolerations with effect "NoExecute" and "NoSchedule" to allow schedule of nodelocaldns pods on node pools with taints * EndpointSlice and Endpoints should treat terminating pods the same * Remove wait.Until for running Kubelet Bootstrap * Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1 * wait until /metrics are ready on e2e test * let image cache do sort on write instead of on read to avoid data * CHANGELOG: Update directory for v1.18.0-beta.2 release * Implement noopWindowsResourceAllocator * Preserve target apiVersion when decoding into unstructured lists * Fix VMSS cache content * kubelet: Also set PodIPs when assign a host network PodIP * e2e: wait for controller manager pod to be ready * Add NodeCIDR for detect-local-mode * Move TaintBasedEvictions feature gates to GA * test: Detect flakes caused by container teardown races on CRI * metaproxier logging for endpoints ipfamily * Add metaproxier unit tests * client-go: update expansions callers * client-go: add context/options to expansions methods * Use go-bindata built from vendor/ * client-go metadata: update callers * client-go dynamic client: add context to callers * /readyz should start returning failure on shutdown initiation * client-go metadata: plumb context * client-go dynamic context * client-go dynamic client: update DeleteOptions callers * client-go dynamic client: pass DeleteOptions by value * Updated files after rebase * Fix expected version for csidriver * Updated CSIDriver references * Moved CSIDriver to GA * generaetd * refactor egress dialer construction code and add unit test * add metrics and traces for egress dials * Parallelize attach operations across different nodes for volumes that allow multi-attach * exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly * Don't try to create VolumeSpec immediately after underlying PVC is being deleted * Disable HTTP2 while proxying a "Connection: upgrade" request * Allow both GRPC and http-connect mode to be toggled * Checks error for loading audit webhook config to prevent panic * managedfields: Update Apply time if neither object nor managedfields have changed * Bump sigs.k8s.io/structured-merge-diff to v3 * fieldmanager: Add failing test for no-op apply actually writing to etcd * fieldmanager: Move ManagedFields update logic into its own class * Add e2e test for validating JWTs as OIDC tokens * Add Extenders to scheduler v1alpha2 component config * ingress: add alternate resource backend * Work-around for missing metrics on CRI-O exited containers * Renaming: "Change" -> "Add" for consistency with underlying method * Fix queued request accounting, extended queueset test * Disallow use of Plugin or PluginConfig when using Policy * Disallow duplicate PluginConfig in framework creation * Allow container visitor to operate on selected container types * test: Properly detect container runtime flake in e2e test * Update to latest node-cache image * ingress: allow wildcard hosts in IngressRule * Use the v0.0.8 network proxy images * Use versioned autoscaling API group in code-generator examples * dynamic certs: pass valid object to event recorder * dynamic certs: use correct name with event recorder * dynamic certs: do not copy mutex via shallow copy of tls.Config * Bug fix for TM none policy * Start adding tests for verifying correct modes * Check for nil cpuManager * Fix Bazel build * Show kubectl describe ingress error * Hopefully plainer test strings * Implement changes into volume plugins for skipping chown * Update generated files * Define new type for storing volume fsgroupchangepolicy * Fix log formatting for skipper. "INFO" is already logged by Logf, and it wasn't in the format syntax. * kubeadm: deprecate the flag --use-api for cert renewal * Set field manager for kubectl diff --server-side. * Add AnyVolumeDataSource feature gate * Don't log "SHOULD NOT HAPPEN" errors more than once per second * Use the same default namespace across event recorders * kubelet: Clear the podStatusChannel before invoking syncBatch * kubelet: Never restart containers in deleting pods * kubelet: Don't delete pod until all container status is available * kubelet: Preserve existing container status when pod terminated * Test that an always-fail container can't report the pod Succeeded * Add kubectl debug alpha command * Update VolumePVCDatasource to GA for 1.18 * fix scheduler.TestCoSchedulinngWithPermitPlugin and test scheduler.PermitPlugin * Windows specific kubelet flags in kubeadm-flags.env - Uses correct pause image for Windows - Omits systemd specific flags - Common build flags function to be used by Linux and Windows - Uses user configured image repository for Windows pause image * e2e-topology-manager: Wait for SR-IOV device plugin * Utilerrors.Aggregate: Allow using with errors.Is() * Fix GCE PD snapshot flakiness * Generalized NonResourcePolicyRule.NonResourceURLs impl * Promote GMSA to GA * cleanup: move the test of TaintBasedEvictions features to sig-node * client-go: use klog.V(3) for the cert-rotation controller start/stop * Update agnhost to test OIDC validation of JWT tokens * Add FromFile and FromExistingClassName support for SnapshotClass in external storage e2e test * Always include remoteAddr in source IP list for audit (#87167) * Prevent CephFS from logging senstive options * Prevent AzureFile from logging senstive options * Fix MountError Test * Update dep k8s.io/utils to 0a110f9eb7ab * Adding PathType to Ingress * update override behavior for kubectl --tls-server-name * Squash pkg/describe/versioned/ into pkg/describe/ * Support TLS Server Name overrides in kubeconfig file * Provide more verbose empty config error based on the context * Changed kubectl cluster-info dump to not display "Cluster info dumped to standard output" message when output is stdout * Update Cluster Autoscaler version to 1.18.0-gke.0 * cleans up dynamiccertificates package * Add unit tests for IsKubeletClientCSR and IsKubeletServingCSR * Extend client-go csr package to invalidate CSRs based on signerName * bandwidth: use regexp to handle tc output fix newly-added 'chain N' output from 'tc filter show dev XXX' * Hide kubectl.kubernetes.io/last-applied-configuration in describe * Wire --filename flag to exec * Implement simple endpoint slice batching * Make some metrics finer-grained, add dispatch counts, note immediate reject * add a new generic filter goaway * Fix a PodTopologySpread e2e flake * Use GRPC mode for network proxy * Generated API * test/e2e/framework: remove dependencies to internal APIs * move eparis and zmerlynn to cluster/ emeritus_approvers * add bentheelder to cluster/ approvers * Support intermediate certificate in certificate store * Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs * Add default constraints to PodTopologySpread * Update network proxy to v0.0.7 * stop defaulting kubeconfig to http://localhost:8080 * Add ReloadCertFromDisk flag to rest.Config and to kubeconfig which allows the provided client certificate files to be reloaded from disk (currently on every use) * Enable topology-manager-e2e tests to run on MultiNUMA nodes. * Refactor CPUMananger-e2e-tests so that it be reused by topology-manager-e2e-testsuite. * Improve plugin args JSON tags * Bump csi-driver-host-path version to get fixed block snapshots * Currently SRIOV detection logic is reporting error if it fails to detect SRIOV device on the system. This patch aims to fix the same. * hack/update-vendor.sh * Replaced uber atomic with sync atomic, removed unneded "blank import" * Fix block snapshot tests * Fix unit test to fail with proper final gRPC code * Add unit tests * Call NodeUnstage after NodeStage timeout * Call NodeUnpublish after NodePublish timeout * Add uncertain map state to block volumes * Add context and options to scale client * Add mutex to Topology Manager Add/RemoveContainer This was exposed as a potential bug during e2e test debugging of this PR. * Update TopologyManager Feature Gate: - Alpha to Beta. - True by default. - Remove redundant validation checks. * small cleanup for ipvs readme * validate configuration of kube-proxy IPVS tcp,tcpfin,udp timeout * Adding IngressClass to networking/v1beta1 * Support token authentication for network proxy * test/e2e/:remove // TODO: write a wrapper for ExpectNoErrorWithOffset() * test/e2e/framework/service/:simplify function CreateTCPService * Make sure we fail the job and log more details when it does * Move conformance image to debian:stretch-slim * Remove unused function aggregateGoroutinesWithDelay * Switch to UpdateVMs() for updating VMSS backend address pool * Factor-out metrics related logic from authentication logic. * Use only v1 CRD resources in e2e tests * Fixed golint issues in RBD code * Remove prometheus references from pkg/controller/endpointslice * Add UpdateVMs() for VMSS client to allow update multiple VMSSVMs by sequential sync requests and concurent async requests. * update WithPlugin comment, in case remove function * Refactor: move generic functions of integration test to util directory * refactor volume binder * e2e_node add test for PodOverhead feature * storage: confirm that paging and predicate filtering work together * Address comment and remove if condition * Hide deprecated --server-dry-run for kubectl apply * Update README.md * Update README.md * Promote block volume features to GA * Promote the egressselector API to beta * update kube-controller-manager and kube-scheduler to match kube-apiserver defaults * update map keys api doc with validation requirements * scheduler_perf: do not override throughput labels * extend CRD map and set validation * Deprecate --generator flag from kubectl create commands * fix: remove conflict comment of taint "Value" * Bump CSI hostpath driver * test images: ARG instructions should be first * bazel update * volume scheduler: introduce special string type * volume scheduler: move reason strings into volume code * Added non-randomized tests of matching FlowSchema rules * test images: Skip building manifest list if no image was pushed * more artisanal fixes * deref all calls to metav1.NewDeleteOptions that are passed to clients. * automated refactor * update clients * update client gen * audit webhook use network proxy * pass Dialer instead of egressselector to webhooks * authentication webhook via network proxy * Fix default regular expressions in conformance tests runner * Add OWNERS and testing to external extender/v1 api * Rename --enable-inflight-quota-handler to --enable-priority-and-fairness. * Don't save managedFields if object is too large * Remove global variable dependency from runtimeclass admission * PodOverhead: remove feature gate override in tests * Update PodOverhead feature gate for beta * Move scheduler extender API V1 to staging k8s.io/kube-scheduler * certificates: update controllers to understand signerName field * Add Certificate signerName admission plugins * fix unsupported bug * fix: azure disk remediation issue * test images: Rebases nautilus and kitten images * Image Promoter: Allows images to be pushed immediately after being built * Add signerName field to CSR resource spec * fix: azure file mount timeout issue * register metrics from comp-base * Add block cloning tests * Rename GetTopologyPodAmitHandler() as GetAllocateResourcesPodAdmitHandler(). It is named as such to reflect its new function. Also remove the Topology Manager feature gate check at higher level kubelet.go, as it is now done in GetAllocateResourcesPodAdmitHandler(). * Update to golang@1.13.8 * Device Manager - Update unit tests - Pass container to Allocate(). - Loop through containers to call Allocate() on container by container basis. * Device Manager - Refactor allocatePodResources - allocatePodResources logic altered to allow for container by container device allocation. - New type PodReusableDevices - New field in devicemanager devicesToReuse * CPU Manager - Updates to unit tests: - Where previously we called manager.AddContainer(), we now call both manager.Allocate() and manager.AddContainer(). - Some test cases now have two expected errors. One each from Allocate() and AddContainer(). Existing outcomes are unchanged. * CPU Manager - Add check to policy.Allocate() for init conatiners If container allocated CPUs is an init container, release those CPUs back into the shared pool for re-allocation to next container. * CPU Manager - Rename policy.AddContainer() to policy.Allocate() * Change GetTopologyPodAdmitHandler() to be more general * test images: Temporarely exclude Windows test images * tests: Replaces dnsutils image used with agnhost (part 4) * Fix etcd issues on ARM * kubelet: Avoid sending no-op patches * Setting a Pod's nodeAffinity instead of setting .spec.nodeName directly * Fixed in the GCE/PD in-tree volume logic to expose the max number of persistent-disks for each instance type correctly. * Fix an "index out of bound" issue in scheduler preemption e2e * Update etcd debian base image to v2.0.0 * build: Enable kube-cross push/pull from K8s Infra GCR * build: Add justaugustus as reviewer * build: Add OWNERS on build-image/ * add support for single stack IPv6 * Test PodTopologySpread.PreScore instead of internal pre-processing. * Test PodTopologySpread.PreFilter instead of internal pre-processing. * fix the coredns preflight check for unsupported plugins * [refactor] fold PreemptionExecutionPath into the existing top-level SIGDescribe * Add unit test for framework plugin configuration * Fix pkg/controller typos in some error messages, comments etc * Add unit and integration tests for multiple profiles support * fix import formatting in gce_utils.go * gce: remove duplicate patch service method * Add documentation around plugins * Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.1 * fix: corrupted mount point in csi driver * e2e: avoid setting NodeName for CSI driver deployments * Reorder conditions in FindMatchingVolume to avoid checking NodeAffinity in trivial cases. * Ensure webhook/quota/deny admission comes last * Adding AppProtocol to Service and Endpoints Ports * Improve rate limiter latency logging and metrics * update bazel * Fix a scheduler e2e bug on PodTopologySpread scoring * Update version of GCE PD CSI Driver deployed in tests * Updating OWNERS for Windows+Azure tests * Add show-hidden-metrics-for-version to kubelet * test images: Updates agnhost guestbook * apiextions: add list-type: map|set CR validation * [UseNetworkResourceInDifferentTenant] Fix bug of setting incorrect subscription id on azure network resource clients. * Remove AlgorithmSource from v1alpha2 * Support multiple scheduling profiles in a single scheduler * remote patch.go and patch_test.go files * Add BenchmarkSchedulingWaitForFirstConsumerPVs benchmark * Make sig-scalability reviewers / approvers of cluster/gce * Create OWNERS file for cluster/log-dump * Don't rely on contents of optional Condition fields in CSI mock test * Use servicePatch methods from cloud-provider repo in service-controller * Remove alpha feature test for EvenPodsSpread * kube-proxy: fix confusing default value for healthz and metrics bind address, deprecate healthz-port and metrics-port flag * Use compute v1 api to specify network tier * Fix pkg/registry typos in some error message, variable names etc * scheduler: deprecate deprecated metrics in 1.19 * append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.sh fails for prefixes that contain quotes and = sign. * test: don't use hardcoded pod count for memory limit test * Update the conformance list and doc generation logic * update corefile-migration library to 1.0.6 * update coredns to 1.6.7 * Fix recent context change after rebase * Fix golint issues for `core/v1/validation` * Adding Windows CPU limit tests * Fix cpu resource limit on Windows * scheduler_perf: allow to override the default benchtime * scheduler_perf: describe how to run BenchmarkPerfScheduling manually * Add Profiles to kubescheduler.config.k8s.io/v1alpha2 * kubeadm: modify how component volumes are printed * Default grace period to 0 when --force is used to delete an object * Remove the unsupported CloudProviderBackoffMode from Azure cloud provider config. * Deprecate service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset * kubeadm: allow creating a cluster with ECDSA keys * Support cluster using network resources (VNet, LB, IP, etc.) across AAD Tenants. * Add e2e session affinity timeout test * Revert "Mark session affinity tests as [Flaky]" * deflake e2e session affinity tests * kubeadm: fallback to a known etcd version if an unknown k8s version is passed * fix test failure * fix: add remediation in azure disk attach/detach * move well known cloud provider taints to k8s.io/cloud-provider/api * Fix: pkg/apis Typos in comments, function name, error message * Fix initialization bug in `FakeImageService` * use ControllerClientBuilder from k8s.io/cloud-provider in cloud-controller-manager * kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster * tests: Create pod for Windows test * Add release-1.18 publishing rules * Fix typos in some error messages, comments * Fix kubectl describe ingress annotations not sorted * fix kubectl create deployment image name * Respect ignore-volume-az option in admission plugin * Refresh discovery server resources for memCacheClient in parallel * Swith to mock clients for route/routetable/networkinterface tests * Refactor handling of local traffic detection. * Enable field management for all new objects * check ip family for node port connectivity test * Instrument DEK cache fill and request inter-arrival times. * fix alias for stack protector kernel config. * e2e-scheduling: add basic PodOverhead test * Fix aws provider to return no error when instance is not found for InstanceExistsByProviderID * Avoid adding labels to nodes in CSI mock driver * Revert "log-dump.sh: allow to dump extra log files" * tests: Fixes Hybrid cluster network test * Fixes for the `No ref for container` in probes after kubelet restart * test/e2e/framework/node/:remove TODO and make some functions private * test images: Adds building README * Image Promoter: Adds Windows build nodes for Windows test images * test images: Use multiple Windows nodes to build images * test images: Adds multiple Windows channels support * test images: Adds Windows support (part 1) * images: Changes the image naming template * images: Configurable BASEIMAGE hierarchy * images: Adds linux/ prefix to BASEIMAGE entries * test images: Bumps image versions * e2e-framework-node: add runtimeclass to dedup code * Update API doc for feature PodTopologySpread (a.k.a EvenPodsSpread) * Moving Windows RunAsUserName feature to GA * fix get-kube authorization headers * update golang.org/x/crypto * test/e2e/framework/log: optimize PrunedStack() * Add tests for egress selector * Add e2e test to test Except clause in NetworkPolicy * vendor network proxy client * Support empty root CA for konnectivity * Network Proxy: GRPC + HTTP Connect with UDS * e2e: topomgr: extend tests to all the policies * Support injecting errors for `FakeImageService` * log-dump.sh: allow to dump extra log files * empty_dir: Check if hugetlbfs volume is mounted with a correct pagesize * kubeadm: optimize the upgrade path from ClusterStatus to annotations * kubeadm: remove `ClusterStatus` dependency * e2e: topomgr: address reviewer comments * fix: check disk status before disk azure disk * Fix typos in apiclient util * Fix golint errors in pkg/controller/garbagecollector * wait for pruned CR to be invisible from API * test: export a fake Azure cloud Via the exported GetTestCloud(), we can reuse the code for the unit tests in Azure related CSI drivers. * Add --dry-run to more kubectl commands. * kubeadm: do not pin unit tests to a version * kubeadm: update constants for 1.18 * Start deprecation process for StreamingProxyRedirects * add logging for csr being approved and issued. * fix data races for other usage of Q * NetworkPolicy e2e test should wait for Pod ready * e2e: topomgr: properly clean up after completion * e2e: topomgr: add multi-container tests * e2e: topomgr: validate all containers in pod * e2e: topomgr: autodetect NUMA position of VF devs * e2e: topomgr: remove single-numa node hack * e2e: topomgr: early check to detect VFs, not PFs * Implement tests for multiple sizes huge pages * Implement support for multiple sizes huge pages * replaced tokenaccessreview with tokenreview * fix data races in scheduler unit tests * Add init containers to dump info * podlogs: include node name in prefix * optimize kubectl version help info * homogenize metrics naming * test images: Image Promoter sed fix * adding response headers * tests: Replaces images used with agnhost (part 4) * Make MetricCollector configurable for scheduler benchmark tests * Switch EndpointSlice to use discovery v1beta1 api * add delays between goroutines for vm instance update * kubemark: move a channel send out of critical section * Don't call delete for already deleted volumes * kubelet: Record kubelet_evictions when limits are hit * Update default cos image to include runc-1.0.0-rc10 * Add more E2E tests for the ../poddisruptionbudgets endpoint * Honor the RevisionHistoryLimit in StatefulSetSpec * run permit plugins in the scheduling cycle * Add a README describing behaviors * Add BuildArgs to interpodaffinity plugin * rest: remove connection refused from the list of retriable errors * Implement ItemBucketRateLimiter * Fix wrong alpha version for ValidateProxyRedirects * Update Go modules * chore: move caches to a separate package * fix incorrect configuration of kubepods.slice unit by kubelet (issue #88197) * test/e2e/node: fix selinux test failure * Present more concrete information about pod readiness * test/e2e/framework:remove unused code and move const * kubeadm config images list: test structured output * kubeadm config images list: implement structured output * kubeadm config images list: update output API * test/e2e/framework:remove TODO and make func private * Add getPublishDir and getVolumePluginDir * Fix route conflicted operations when updating multiple routes together * update bazel configuration * fix: update max azure disk max count * Remove `FilteredNodesStatuses` argument from `PreScore` interface * Clean up --dry-run values. * E2E tests for PodTopologySpread * Error if --local and --dry-run=server are passed * fix shellcheck failures in health-monitor.sh * update stale pause image comment * bump pause to 3.2 in kubectl test data * bump pause to 3.2 in hack/ * bump pause to 3.2 in test/ * Do not dereference qcAPI which maybe nil * added nodeSelector to constrain it to Linux only * rename to sharedLimitWriter * bump pause to 3.2 in kubelet * bump pause to 3.2 in kubeadm * Shrink mutation detection critical section * Version the API Priority and Fairness FieldManager values * Report scheduler_perf integration test kube-scheduler metrics into artifacts dir * fix: get azure disk lun timeout issue * Add deletion interfaces for VM, VMSS and interface clients * e2e: getCurrentKubeletConfig: move in subpkg * Add show-hidden-metrics-for-version to scheduler * Remove optional from core docs for 'Type' (#88029) * Remove deprecated rolling-update command * Extend CPUManager e2e tests to run on MultiNUMA node with/without HT * Change line terminators from CRLF to LF * Fix a bug in e2epod function * Remove PodBackoffMap * Construct http Request using http.NewRequest * Updated test cos image to include runc-1.0.0-rc10 * remove unused manifest-tool rules * switch pause to docker manifest instead of manifest-tool * Create an OWNERS alias for net-driver-approvers * add a changelog note for pause 3.2 * Update Abdullah as the scheduling feature approver * address review feedback * Replace Beta OS/arch labels with the GA ones * Add a event to PV when mount fails because of fs mismatch * remove TODO and use framework.SingleCallTimeout * Remove HardPodAffinityWeight from v1alpha2 * Fix updated pod NetworkPolicy e2e test * Scheduler: Exclude plugin config for empty policy arguments * OWNERS(releng): Remove aleksandra-malinowska from Patch Release Team * OWNERS(releng): Add Branch Managers to release-engineering-reviewers * kubectl cluster-info dump: use file extension according to output format * CHANGELOG: Update CHANGELOG-1.18.md * use network proxy for proxy subresources * Collect some of scheduling metrics and scheduling throughput * test/e2e/framework/util.go:make function LookForString private * e2e: e2e_node: refactor getCurrentKubeletConfig * Fix unit tests * Add CSI block volume directory cleanup * Remove unnecessary calls to GCE API after PD is created. * Remove client cleanup from TestCleanup * Fix impossible condition in test/e2e/framework/resource_usage_gatherer.go * Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-alpha.5 * Use --dry-run=client,server in kubectl. * Fix gce-cos-master-reboot test * update pause to 3.2 since we changed the build * Move skip method from e2e fw ginkgowrapper to e2e skipper fw * Set up connection onClose prior to adding to connection map * Separate containerd install from config, and other cleanups * Change migrated-to annoation key to follow best practices by removing beta and using 'pv' prefix * Don't show flags in api-versions help * Rename `PostFilter` plugin to `PreScore` * Add ephemeral containers to streamLocation name suggestions * Fix example of kubectl config set-credentials * Remove tautological condition in test/e2e/framework/pod/resource.go * Make Azure clients only retries on specified HTTP status codes * Initialize http Request Header before RoundTrip to avoid panic * Convert volume.TestConfig to use NodeSelection * Pass NodeSelection directly into e2e testsuites so that tests can use them more consistently * Add buffer for GC resync retry to GC e2e tests * Don't set NodeName directly in Pods so that it still goes through the scheduler * kubeadm: update embedded CA in kubeconfig files on renewal * Provide OIDC discovery endpoints * Add CHANGELOG/CHANGELOG-1.15.md for v1.15.10 * proxier: use IPSet from k8s.io/utils/net to store local addresses * userspace proxy: get local addresses only once per sync loop * ipvs proxier: use util proxy methods for getting local addresses * iptables proxier: get local addresses only once per sync loop * update vendor k8s.io/utils to 5f6fbceb4c31 * Add CHANGELOG/CHANGELOG-1.16.md for v1.16.7 * Round times to nearest second before sorting * Avoid running docker specific test in containerd * Add CHANGELOG/CHANGELOG-1.17.md for v1.17.3 * Lower server-side apply percentage to 10% * Add RegisterPluginAsExtensionsWithWeight * Fix serializer test * dump docker image list * Delete pod in volume tests * fix: add azure disk migration support for CSINode * kube-proxy filter Load Balancer Status ingress * Add test * Added API Priority and Fairness filter and config consumer * Support for adding test-handler for containerd * add index for pod cacher * add roycaihw to reviewers in apiextensions-apiserver * Use NodeSelector instead of NodeName in hostexec Pod so that the Pod runs through the scheduler * Add missing tag to vSphere storage E2E tests * e2e: topomgr: introduce sriov setup/teardown funcs * e2e: topomgr: use constants for test limits * e2r: topomgr: improve the test logs * e2e: topomgr: better check for AffinityError * e2e: topomgr: reduce node readiness timeout * e2e: topomgr: get and use topology hints from conf * e2e: topomgr: initial negative tests * e2e: topomgr: add more positive tests * e2e: topomgr: add option to specify the SRIOV conf * e2e: topomgr: autodetect SRIOV resource to use * e2e: topomgr: check pod resource alignment * e2e: topomgr: add test infra * e2e: topomgr: explicit save the kubelet config * migrate authenticator and authorizer to Create * remove authn/z.CreateContext expansions * Pass context to tryAcquireOrRenew * Add fast path to node authorizer for node/edge removal * Switch node authorizer index to refcounts * Add configmap->node destination edges to the node authorizer index * Run Windows kubelet stats e2e tests serially because it needs to start many pods on a single node * Use ProxierHealthUpdater directly to avoid panic * Enable field management for all new objects * Add damemi to sig-scheduling owners * Cleanup "slow-path" logic in scheduler Filters * EndpointSliceTracker should track updated resource version * Garbage collector should orphan ControllerRevisions too * kubeadm: remove 'kubeadm upgrade node config' * test/e2e/framework:move functions to test/e2e/scheduling/ * Change devicemanager to implement HintProvider.Allocate() * Change CPUManager to implement HintProvider.Allocate() * Add Allocate() call to TopologyManager's HintProvider interface * Split devicemanager Allocate into two functions * register queue metrics in controller manager * Make DisruptionController eviction tests serial to avoid flakes * add StatusConflict as non-retriable error for disksClient * tolerate when bazel shutdown errors out * Ability to override versions of containerd/runc * Install containerd package depending on CONTAINER_RUNTIME * Add gid to config.toml only when docker group is present * Treat replaced events that didn't change resourceVersion as resync events * cross build pause with buildx * test/ : fix non-ascii characters * manual fixes * generated: update clients * generated: run refactor * update client gen * remove TODO and unused code * Fix non-ascii characters in test/e2e_node and test/network. * add azure disk WriteAccelerator support * kubeadm: remove 'kubeadm alpha kubelet config download' * kubeadm: deprecate --kubelet-version command line option * fix: add non-retriable errors in azure clients * Update with update-bazel.sh script * Staticcheck: vendor/k8s.io/kubectl/pkg/scale|describe/versioned|cmd/top|cmd/util/editor|cmd/top * some manual fixes * generated: update clients * generated: run refactor * update generators * add exponential backoff with reset to reflector * Refine WaitingPod interface * Bump to latest SMD to pick up performance optimizations * Add code to fix kubelet/metrics memory issue. * Fix docker/journald logging conformance * added env var WINDOWS_CNI_STORAGE_PATH and WINDOWS_CNI_VERSION * Do lenient decoding only for kubescheduler config v1alpha1 * Fix non-ascii characters in test/e2e/storage * Ensure bazel is really brought down * LogResult if there is an error * Drop k8s.io/node-api packages * Remove the exponential backoff in NodeGetInfo * Ensure kubectl is available in PATH by explicitly exporting the script * cluster: Add justaugustus as reviewer * Limit number of instances in single update to GCE target pool * Register conversions for kubectl testing types * Support config kubelet provider id for local cluster. * remove bash examples/comments from the v1beta1 and v1beta2 APIs * Make updateAllocatedDevices() as a public method and call it in podresources api * Use longer pod start timeouts for specific tests * use tars instead of debs to build server images * build: Remove references to debs/rpms in BUILD/dependency files * build: Remove deb and rpm build definitions/specs * Remove deprecated fields from kubescheduler.config.k8s.io/v1alpha2 * gce-addons: Make sure default/limit-range doesn't get overridden * Update conformance requirement check * Remove Error log for nil StartTime * Check getNodeInfoError against nil * Revert "Collect some of scheduling metrics and scheduling throughput" * Calling hcsshim instead of docker api to get stats for windows to greatly reduce latency * adding e2e test to ensure it takes less than 10 seconds to query kubelet stats for windows nodes * Add UpdateTwice and UpdateApply benchmarks for fieldmanager * PodTopologySpread excludes terminatingPods when making scheduling decision * Changed comments to match with interfaces method description * Fixed Golint errors in pkg/registry/core/pod * CHANGELOG: Collapse README.md headings in single list * Add some aliases into import-aliases for e2e framework * Re-adding the [[ as per review comment request * Add kubectl diff exit code doc * CHANGELOG: Move changelog, soft-link to top-level, refresh listing * CHANGELOG: Move changelogs into a subdir to delegate releng approvals * fix staticcheck errors in vendor/k8s.io/legacy-cloud-providers/aws. * update generated file * update translation * Explicitly shutdown bazel after the target finishes * add a flag in azure auth module to omit spn: prefix in audience claim * kubelet: Debug pod status output diff is wrong * Check for node IP * python snippets should work on both old and new python versions * Remove references to prometheus is test/e2e * kubeadm: dual-stack validation allow single stack * validate storage cache indexers * Fix non-ascii characters in test/e2e/node/pods.go * Move 'path' package usage to 'path/filepath' * implement backoff manager * Make oidc authenticator audience agnostic * Updating dependency sigs.k8s.io/yaml to version v1.2.0 * add myself to hack/OWNERS * Change HostPath to EmptyDir for VolumeSubpathEnvExpansion e2e tests * Validation for behaviors * Ensure testing credentials are labeled as such * Validate Except of IPBlock for NetworkPolicy spec * Add CHANGELOG-1.18.md for v1.18.0-alpha.3 * reduce overhead of error message formatting and allocation for scheudler NodeResource filter * Fixed code formatting issues discovered by verify-gofmt * Fixed problem in unit test where error expected/actual comparison was not being performed * Removed unneeded newline (moved to end of directory not found message) * Ignore empty or blank string in path when listing plugins * Fixed code formatting issues discovered by verify-gofmt * Autogenerated * Remove unnecessary manual conversions * Added 'No resources found' message to describe and top pod commands * kube-aggregator: increase log level of AggregationController API group logging * kubectl: allow to preselect interesting container in logs * makes unavailableGauge metric to always reflect the current state of a service * Add a fast path for adding new node in node_autorizer. * Update for loop in server image image creation * Add shellcheck disable for set $wrappable * Simplify and improve find/tar lines * Update after review comment * Fix src_tarball packaging * Replace for loop with find command * Update after review * Update after review comments * Fix shellcheck warnings/errors in /build/lib/release.sh * Fix non-ascii characters in test/e2e/common/projected_configmap.go * Add an option to external storage e2es to use a copy of a pre-installed StorageClass * generated: update clients * remove create expansions form authn/z clients * use generated clients instead of expansions for most of authn/z * Enable FC mount options * Add konnectivity log files * Add defaults to pod affinity args * Only set admission review reponse patch type if the patch is not empty * Ensure specified container runtimes are present * Cleanup logging and creation logic of TopologyManager in prep for beta * Update TopologyManager.GetTopologyHints() to take pointers * Update TopologyManager.Policy.Merge() to return a simple bool * Fix bug in TopologManager RemoveContainer() * fix range copy issue * snapshot clientsets pending context migration * Add error check in kubectl proxy on server setup * test images: Adds Image Promoter details in the README * add indexer for storage cacher * fix kubectl drain ignore daemonsets and others * update network-y stuff for supporting ubuntu/bionic as master * Collect some of scheduling metrics and scheduling throughput * use network proxy for aggregator api * Log when client side rate limiter latency is very high * Adds more unit test on Bind extension for the scheduler * add to api repo documentation * Enable selinux tags in make targets * Update OWNERS * WatchBasedManager stops watching immutable objects * Initial example behaviors * Reduce default CPU requirement for konnectivity server * Added server-side print column about FlowSchema referential integrity * Update GCP Windows node image versions * Ineffassign fixes for pkg/volume * test/e2e/framework: remove skip.go and use e2eskipper subpackage * kube-proxy: validate dual-stack cidrs * Restore statefulset conversion that populates apiVersion/kind in volume templates * Switch pager to return whether the result was paginated * Fix pending_pods, schedule_attempts_total was not recorded * Avoid thundering herd on etcd on masters upgrade * Move 'path' package usage to 'path/filepath'. * Ineffassign fixes for pkg/controller and kubelet * Ineffassign fixes for pkg/proxy * Fix comment whitespace * Use standard default storage media type in local-up-cluster * update github.com/docker/libnetwork to c8a5fca4a652 * Extend --dry-run to support string values. * Fix node authorizer index recomputation * kube-proxy: Only open ipv4 sockets for ipv4 clusters * Add namespace mode targeting to dockershim * Generated code for kubelet namespace targeting * Add namespace targeting to the kubelet * fix: missing variadic dots * Allow Action's Matches function to specify a subresource. * Fix backoff retries for AzureFile client * Add disableAvailabilitySetNodes to avoid VM list for VMSS clusters * grammar change for pods status in tests * fix command variable exited with status 1 * Fix non-ascii characters in test/e2e/common/runtime.go * Make schema error log message more useful * Fixed listType annotations for API Priority and Fairness * Autogenerated and build files for kubescheduler.config.k8s.io/v1alpha2 * Copy kubescheduler.config.k8s.io/v1alpha1 files onto v1alpha2 * Clean ups on kubescheduler.config.k8s.io/v1alpha1 files * Move mutating admission into finishRequest * remove client label from healthz metric test * Add GC e2e debug logging * Allow update of onXPN field in fake GCE clients. * remove client label from apiserver request count metric since it is unbounded * Add foreground deletion check to ensure GC is aware of the new custom type * Revert "Merge pull request #87258 from verult/slow-rxm-attach" * Fix back off when scheduling cycle is delayed * Fix preemption race conditions on heavy utilized nodes * cleanup req.Context() and ResponseWrapper * refactor * regenerate clients * update generator * update rest.Request signatures * various context related cleanups to rest.Request * Update GCI_VERSION to cos-77-12371-114-0 as older image is deprecated * e2e dual stack retry getting endpoints * Set cache to nil data when Azure node provisioning state is deleting * cni: Update CNI version to v0.8.5 * volume binder: enable klog flags in test * volume binder: convert to sub-tests * build: Don't attempt to use mirror for CNI plugin downloads * cni: Update CNI download URLs to use new GCS bucket (k8s-artifacts-cni) * Update GCE Windows smoke-test script to work with 1909 nodes. * Update get-build.sh * Attach a new finalizer in GCE ILB creation. * Register RunPodSandbox* metrics * Clarify sha matching etcd release tag * Add apiVersion to involvedObject * Skip default spreading scoring plugin for pods that define TopologySpreadConstraints * fix apiextensions reference in controller/clusterauthenticationtrust * Fixed a failing test on a RBD mount scenario * bump gengo version * add staging directories to import-boss verify script * add import-restrictions to apiextensions-apiserver/pkg/apis,v1 and v1beta1 * update existing import-restrictions files * Cleanup validation for immutable secrets/configmaps * switch log verbosity for cache refresh logs * various context related cleanups to rest.Request * Reduce public methods for DryRunVerifier * Update container hugepage limit when creating the container * Add comments in several hack/*.sh * Add annotation annealing for migration for PVs and PVCs during syncVolume and syncClaim. This allows external-provisioners to pick up and delete volumes when they have been rolled up from previous kubernetes versions. * don't specify apiVersion when getting AAD token * Update CHANGELOG-1.17.md * Parallelize attach operations across different nodes for volumes that allow multi-attach * set nil cache entry based on old cache * Refactor operation keys for NestedPendingOperations * add logging before kubelet waiting for cert * Expose k8s types that do not roundtrip and a helper to roundtrip without protobuf * Fix kubectl taint's Complete parsing * bumping agnhost version to 2.10 * adding sidecar injecting webhook * More refinement of comments and parameter names for informers * Add logging to scheduler's event handlers * add comment in several hack/ sh scripts. * Withdraw the change of getting version variable * kubeadm: prevent bootstrap of nodes with known names * `./hack/update-openapi-spec.sh` * Cleanup unused Azure client interfaces * Remove doc reference to godep #782 * Register full object as return type for `DELETE` web services. * fix behaviour of aws-load-balancer-security-groups annotation * fix static check in pkg/volume/flocker * Update copyright date for ingress_utils_test.go * Adds more test cases in TestRunBindPlugins for the scheduler * kubeadm: increase timeouts in the etcd client * kubeadm: handle multiple members without names during concurrent join * test/e2e/framework: handle the case where BeforeEach was never called * brushed up according to review * Updated API Priority and Fairness validation to track change in catch-all priority level * Whitelisting *.pkg.dev for the GCP credential provider * Added relevent approvers and reviewers for gci. * fork out a new global-default from catch-all to handle unclassified traffic * /test/e2e/framework:remove TODO in test/e2e/framework/util.go * Bump dependency github.com/prometheus/client_model@v0.2.0 * Add serathius to sig-instrumentation-approvers * Pin dependency github.com/cilium/ebpf * Bump dependency opencontainers/runc@v1.0.0-rc10 * Fix bug of hack/verify-api-groups.sh * Move IngressFromManifest/IngressToManifest to ingress e2e fw * Move GetPortURL to ingress e2e fw * fixed UT * Fix issue with GCE scripts assuming Python2. * Revert "It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc." * Adding taint toleration error reasons * Re-enable apply for 50% of requests * Remove use of CustomResourceSubresources feature gate, CRD field clearing * Remove use of CustomResourceWebhookConversion feature gate * Remove use of CustomResourceDefaulting feature gate * Remove use of CustomResourcePublishOpenAPI feature gate * Remove deprecated GA feature gates * Do not serialize internal type, fix roundtrip * update gopkg.in/yaml.v2 to v2.2.8 * Add support for pre-allocated hugepages with 2 sizes * Return the error from copyInto * fix static check errors in vendor/k8s.io/apimachinery/pkg/api/resource * informers: don't treat relist same as sync * Staticcheck: vendor/k8s.io/kubectl/pkg/cmd/exec|config|certificates * Fix numPDBViolations when victims on same node are assigned same PDB * Debugging 87473, printing out the last state of the dependent * add warning on ObjectReference * Add env var(CNI_TAR_PREFIX) for cni install. cni release has changed the prefix, add a var to make this configurable. * don't wait blindly * remove unused layer of loop structure in processorListener::run * rename dynamic cert loading to be more accurate * add dynamic reloading for CSR signing controllers * Move default binding to a plugin * Migrate health monitor from read only port to healthz port * Record overall Filter latency for all nodes in a scheduling cycle. * Remove kubectl run generators * fix static check errors in test/integration/etcd * Delete the sysctl runtime admit handler * Delete TODO to use docker client * Add mergeFilteredHints: - Move remaining logic from mergeProvidersHints to generic top level mergeFilteredHints function. - Add numaNodes as parameter in order to make generic. - Move single NUMA node specific check to single-numa-node Merge function. * Fix CreateVolume signature in comment * Move filterSingleNumaHints call to top level Merge * kube-proxy: fix incorrect log information * Add filterProvidersHints function: - Move initial 'filtering' functionality to generic function filterProvidersHints level policy.go. - Call new function from top level Merge function. - Rename some variables/parameters to reflect changes. * Update filterHints to filterSingleNumaHints: - Change function name - Remove policy parameter (unnecessary) - Update unit test to reflect change * Remove `scheduler/algorithm/priorities` in import-restrictions * Drop the cadvisor test * Enable verify-import-boss check for e2e framework * bump github.com/google/gofuzz * Tweak new names * kubectl-diff: Test return code on failure and changes * Update Structured Merge Diff to V3 * Remove folder pkg/scheduler/algorithm * kubectl-diff: Return non-1 errors on kubectl failures * Default the --enable-cadvisor-endpoints flag to disabled * bumped pause-win to 1.1.0 * fix flaky test * Update CHANGELOG-1.15.md for v1.15.9. * Update CHANGELOG-1.16.md for v1.16.6. * Update CHANGELOG-1.17.md for v1.17.2. * Move GeneralPredicates logic to kubelet. * Deprecate scheduler's framework.plugins.RegistryArgs * Self nominate aojea as sig-network-reviewer * Move scheduler's SchedulerExtender interface to core/extenders.go * Update CHANGELOG-1.18.md for v1.18.0-alpha.2. * Add comments in several hack/verify-*.sh(s-v) * kubeadm: remove the deprecated GA CoreDNS feature-gate * Fix static check failures in test/e2e/instrumentation/logging/stackdriver * Initialize CPUManager containerMap to set of initial containers * Remove GetBinder member and replace it with a method. * Remove unnecessary slow binding test * client-go/cache/testing: add ability to simulate watch disruption * Refactor docker specific oom const out of qos pkg * Update comments and error messages in the CPUManager * Enable bound tokens in local-up-cluster * Fix multinode storage e2e tests for multizone clusters * Base CPUManager state reconciliation on container state, not pod state * Move CPUManager Pod Status logic before container loop * Fix describe of statefulset prints pointer not value * cleanup: delete unused func * fix static check failure in pkg/controller/disruption and pkg/controller/namespace/deletion * staticcheck: pkg/volume/fc, pkg/volume/portworx and pkg/volume/vsphere_volume * Add comments in several hack/verify-*.sh(g-r) * Use e2eskipper package in test/e2e/common/ * Simplified logic around context cancel, removing bugs * Refactored QueueSet configuration into two phases * Added server-side printers for the API object types for API priority and fairness * Use e2eskipper package in test/e2e/framework/ * Fix static check errors in pkg/util/netsh * Add flowcontrol to apiVersionPriorities * Add: promotion for LimitRange defaults test to Conformance * fix staticcheck errors in pkg/controller/daemon. * Unify --cluster-cidr in KCM and CCM * Clean up TODO around running test as sudo * Bump golang/mock version to v1.3.1 * Fixup comments in internalbootstrap * Use new storage clients in Azure cloud provider * Remove Brad Childs from OWNERS * switch to docker command line * Enabling EndpointSlice feature gate by default * Improve error message when diff binary is not in PATH * Creating new EndpointSliceProxying feature gate for kube-proxy * Made internalbootstrap gin up its own Scheme * add crash protection to wait functions that were missing it * dogged insistence on full verbosity * Move Snapshot from nodeinfo/snapshot to internal/cache * Support DryRun in cli-runtime REST Helper. * removed excess blank line * Rename cache's Snapshot to Dump * update generated files * Updating dependency google.golang.org/genproto to version v0.0.0-20190819201941-24fa4b261c55 * Updating dependency github.com/prometheus/client_model to version v0.0.0-20190812154241-14fe0d1b01d4 * Updating dependency google.golang.org/grpc to version v1.26.0 * Updating dependency github.com/gogo/protobuf to version v1.3.1 * delete unused field * Update validation for API Priority and Fairness * Fix staticcheck in pkg/controller/podgc * Add comments in several hack/verify-generated-*.sh * Update aws-sdk-go dependency to v1.28.2 * Implement default queue sort logic as a scheduler plugin * In test framework LoadConfig(), use CurrentContext.Server for TestContext.Host if it is unset. Otherwise, kubectl exec through http/kubectl proxy tests in test/e2e/kubectl/kubectl.go would fail with "--host variable must be set to the full URI to the api server on e2e run" error. With this change, running the following tests can now pass: $ e2e.test --kubeconfig=xxx --ginkgo.focus="should support exec through" * Modify alias of e2e/framework/job to e2ejob * rename some declartions named context in tests * Remove Brad Childs from OWNERS files * Fix golint errors in test/e2e/storage/vsphere * Move ValidateEndpointsPorts() to e2e test * Update CHANGELOG-1.15.md for v1.15.8. * Update CHANGELOG-1.16.md for v1.16.5. * Update bitmask printing to print in groups of 2 instead of all 64 bits * Add snapshot clients based on armclient * Add vmsize clients based on armclient * Add storageaccount clients based on armclient * Add disk clients based on armclient * Fix the bug PIP's DNS is deleted if no DNS label service annotation is set. * Update TopologyManager single-numa-node logic to handle "don't cares" * Rename TopologyManager test TestPolicyBestEffortMerge for consistency * Cleanup use of defaultAffinity in mergePermutation of TopologyManager * SchedulerPredicates [Serial] validates resource limits of pods that are allowed to run - set resource requests as well * Use reflect.DeepEqual check in policy_test.go * Update "Single NUMA hint generation" expected affinity to nil * Move test case "Two providers, 1 with 2 hints, 1 with single non-preferred hint matching" into specific policy tests * Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 2/2" into specific policy tests * Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 1/2" into specific policy test. * Move test case "Two providers, 1 hint each, no common mask" into specific policy tests. * Move test case "Single TopologyHint with Preferred as false and NUMANodeAffinity as nil" into specific policy tests. * Move test case "Single TopologyHint with Preferred as true and NUMANodeAffinity as nil" into specific policy tests. * Move test case "HintProvider returns empty non-nil map[string][]TopologyHint from provider" into specific policy tests. * Move test case "HintProvider returns -nil map[string][]TopologyHint from provider" into specific policy tests * Move test case 'HintProvider returns empty non-nil map[string][]TopologyHint' into specific policy tests. * Move test case 'TopologyHint not set' into individual policy tests * Restore policy_test.go to upstream Following commits will contain incremental changes to this file to ease review process and ensure all tests are accounted for. * Update checks in mergeProvidersHints: - Initialize best Hint to TopologyHint{} - Update checks. - Move generic unit test case into policy specific tests and updated expected outcome to reflect changes. * Restore original policy none test cases: Mistakenly overwritten in earlier commit * Make mergePermutation generic: - Remove policy parameters to make function generic - Move function into top level policy.go * Refactor filterHints: - Restructure function - Remove bug fix for catching {nil true} - To be fixed in later commit - Restore unit tests to original state for testing filterHints * Make iterateAllProviderTopologyHints generic: - Remove policy parameters to make this function generic. - Move function out of individual policies and into policy.go * Reinstate canAdmitPodResult in policy_none: This is to keep consistency with the other policies. This change may be made across all policies in a future PR, but removing it from the scope of this PR for now. * Edit hints returned from policies and unit tests: - Best Effort Policy: Return hint with nil affinity as opposed to defaultAffinity when provider has no preference for NUMA affinty or no possible NUMA affinities. - Single NUMA Node Policy: Remove defaultHint from mergeProvidersHints. Instead return appropriate TopologyHint where required. - Update unit tests to reflect changes. Some test cases moved into individual policy test functions due to differing returned affinties per policy. * Updates to single-numa-node policy: - Remove getHintMatch method. - Replace with simplified versions of mergePermutation and iterateAllProviderTopologyHints methods - as used in best-effort. - Remove getHintMatch unit tests. * Update unit tests: - Update filterHints test to reflect changes in previous commit. - Some common test cases achieve differing expected results based on policy due to independent merge strategies. These cases are moved into individual policy based test functions. * Update filterHints: - Only append valid preferred-true hints to filtered - Return true if allResourceHints only consist of nil-affinity/preferred-true hints: {nil true}, update defaultHint preference accordingly. * Additional unit tests for Topology Manager methods * Update single-numa-node policy unit tests * Add new functionality for single-numa-node policy: Explanation taken from original commit: - Change the current method of finding the best hint. Instead of going over all permutations, sort the hints and find the narrowest hint common to all resources. - Break out early when merging to a preferred hint is not possible * Return defaultAffinity from PolicyBestEffort: Now that PolicySingleNUMANode is not considered here, return defaultAffinity as was the original case before previous bug fix * Make mergeProviderHints policy-specific: - Remove need to pass policy and numaNodes as arguments - Remove PolicySingleNUMANode special case check in policy_best_effort - Add mergeProviderHints base to policy_single_numa_node for upcoming commit * Update policy_none removing canAdmitPodResult Update unit tests for none_policy Add Name test for policy_restricted * Refactor policy-best-effort - Modularize code with mergePermutation method * Fix ineffectual assignment to CPUSets * Fix golint warning for pkg/util/procfs/procfs_linux.go * test/e2e/framework/rc/:refactor function ByNameContainer * Add comments in several hack/verify-*.sh * move function GetKubemarkMasterComponentResoureUsage * Fix static check failures in test/e2e/instrumentation/monitoring * Deal with auto-generated files. Update bazel by hack/update-bazel.sh * add README.md in hack/ * Add NewFakeKubeRegistry() for testing deprecated metrics. * add comment in hack/update-*.sh * cleanup(scheduler): remove unused function, remove duplicate comment, implement interface * Fix: formatting * Update: podTemplateList name; Fix: initial fetching of PodTemplates * fix golint error in plugin/pkg/auth/authorizer/rbac/bootstrappolicy * Fix: formatting * Fix: formatting * Fix: formatting * Fix: bazel build errors * Promote: Secret patching test * Promote: find Kuberntes Service in default Namespace * Update: formatting, cleanup, ExpectEqual statements * Promote: Namespace patch test * Remove check for empty activePods list in CPUManager removeStaleState * Add proper activePods list in TestGetTopologyHints for CPUManager * preemption: typo cleanup * Update vendor * Add PatchService method in service/helper. * Document the actual git tag the SHA was picked from * Updating dependency github.com/checkpoint-restore/go-criu to version 17b0214 * Updating dependency github.com/coreos/pkg to version 97fdf19 * Updating dependency github.com/elazarl/goproxy to version 947c36d * fix staticcheck errors in pkg/volume/hostpath. * fix static check in cluster/images/etcd-version-monitor * Use new clients in Azure cloud provider * Add virtualmachine clients based on armclient * Add subnet clients based on armclient * Add securitygroup clients based on armclient * Add routetable clients based on armclient * Add route clients based on armclient * Add publicipaddress clients based on armclient * Add loadbalancer clients based on armclient * Add interface clients based on armclient * Fix file name for VMSSVM client * clean node_authorizer code: verb judgement * Clean up commented assertions in tests * Revert "list vm instead of get when getting virtual machine" * remove TODO in test/e2e/framework/skip.go * hack/update-vendor.sh * Remove gonum.org/v1 dependency in code-generator * fix-static:pkg/volume/scaleio/ * Mark session affinity tests as [Flaky] * Fix: formatting * Add integration test for NodeResourceLimits plugin * Add: PodTemplate lifecycle test * Make CustomResourceDefinitionStatus fields optional * Add: ConfigMap lifecycle test * Update CHANGELOG-1.17.md for v1.17.1. * Make sure PDB has observed pods before doing eviction in e2e test * Set managedField probability to 0% * storage e2e: Add context to timeout errors * make request logs greppable * Nominate alculquicondor to sig-scheduling-maintainers * test/e2e/framework:refactor generateWriteBlockCmd due to the same function * Add richer unit tests for OomWatcher * Clean up rkt specific code in `pkg/kubelet/pleg` * Revert "Revert "Add an option to specify kubelet flags for heapster node."" * remove TODO(random-liu): Move pod wait function into this file * Update cri-tools to v1.17.0 * WIP: use e2eskipper package in test/e2e/autoscaling * WIP: use e2eskipper package in test/e2e/cloud * remove TODO in test/e2e/framework/providers/gce/ingress.go * update test data * use e2eskipper package in test/e2e/auth * Use e2eskipper package in e2e/scheduling and e2e/servicecatalog * fix ci-kubernetes-node-kubelet-serial Non-system critical priority classes are not allowed to have a value larger than HighestUserDefinablePriority * e2e/instrumentation:Use e2eskipper package * export changes to mo * modify strings * update po file for kubectl jp translation * kube-proxy unit test FilterIncorrectIPVersion * Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present * Use v1 subjectaccessreview API in controller-manager CSR approver * set test image cloudbuild directory * Split findNodesThatFit into framework and extenders logic * Remove direct use of Snapshot's data structures * Remove scheduler framework dependency on predicates package * Fix a flaky scheduler preemption e2e * Multi arch for nonroot image * Remove unused KUBE_TEST_API logic * Allow embedding logs command * Fix GetPodLogs failures in NetworkPolicy e2e tests * fix staticcheck:pkg/volume/cinder * Fix error-string-capitalization in clientset generator. * fix-static:pkg/volume/emptydir * test/e2e/ui and test/e2e/upgrades:Use e2eskipper package * test/e2e/storage:Use e2eskipper package * e2e/gke_local_ssd.go and e2e/gke_node_pools.go:Use e2eskipper package * Immutable secrets/configmaps tests * Autogenerated * Immutable field and validation * Fix(kubectl): the field of history controllerrevision will be covered by daemonset * updating googleapis/gnostic to v0.1.0 * Update to golang@1.13.6 * test/e2e/windows/:Use e2eskipper package * kubeadm: support automatic retry after failing to pull image * test/e2e/kubectl test/e2e_kubeadm:Use e2eskipper package * e2e/network/: Use e2eskipper package * Remove duplicated ServiceStartTimeout * simplify 1.17 release note for storage * Move from random SHA - update github.com/prometheus/client_model to v0.1.0 * Further tweaking up the wording * update gonum.org/v1/gonum to v0.6.2 * changelog: clarify 1.17 upgrade requirements * updating github.com/smartystreets/goconvey v1.6.4 * update github.com/morikuni/aec to v1.0.0 * Update fieldmanager.go * Ensure a provider ID is set on a node if expected * Update azure_test.go * review: several fixes and addressing comments * add myself as feature approver (for SIG cloud provider) * Fix typo from reseting to resetting * Add some comment to hack/verify-linkcheck.sh * fix staticcheck:pkg/volume/awsebs * clean deprecated apiserver request metrics * remove last part of deprecated metrics * keep apiserver_request_latencies_summary * clean SinceInMicroseconds, convert to SinceInSeconds * remove deprecated metrics of proxy * remove deprecated metrics of dockershim * remove deprecated metrics of apiserver * remove deprecated metrics of scheduler * apply review advice again * remove deprecated metrics of etcd * remove deprecated metrics of kubelet * Image Promoter: Cleans manifest list * e2e/node/:Use e2eskipper package * Fix a flaky e2e test of Job completion * Use e2eskipper package in e2e/apps * fix: typos in comments of admission * clean unused predicate error * Remove scheduler/algorithm/priorities/util package * Add logs of port-forward-tester pod * Add error handling of CloseWrite() * Cleanup scheduler/algorithm/predicates package * Update: comments, searching for secrets in lists * Update Azure owners * fix golint error in pkg/apis/rbac * Remove workaround for RS bug in cmd apps test * refactor(scheduling): remove priorities package * fix nits * create probabilistic SkipNonAppliedManager * Fixed docker.log format * Add: secret data patch check * change Apply signature and move decoding into handlers * Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout" * fix apply --prune to check cli specified namespace * Allow a preloaded gke-exec-auth-plugin * Do not require token secrets when using bound service account tokens * Remove nodes from cache immediately on delete events * feat(scheduling): address disabled plugins in scheduling framework * Remove uses of NodeInfoMap outside of snapshot and cache * Fix kubectl top sort-by cpu and sort-by memory options * move TaintToleration predicate to its plugin * Fix comment * pass through KUBE_BUILD_PLATFORMS to enable build on specified platforms * Add import-aliases check for e2e framework * Add error check for instance insert * Separate skip as framework subpackage * fix staticcheck failures of pkg/util/ipconfig pkg/util/iptables pkg/util/ipvs/testing * fix: remove ErrTopologySpreadConstraintsNotMatch * ipvs proxier README: fix typo * rm errserviceaffinityviolated * Break nodeunschedulable Filter plugins dependency on predicates package * change framework_extension_point_duration_seconds from sampling to always record * Update hostpath and mock csi drivers with latest sidecars * Add VolumeBinder to FrameworkHandle interface * remove test/integration dependency on predicates and algorithmprovider * network proxy with admission wh * remove e2e dependency on scheduler/predicates package * Repair smoke-test for Windows GCE clusters * Update scheduler's RunFilterPlugins to return a plugin to status map * Fix interpodaffinity issue * extend crd openapi e2e timeout to deflake the test, plus small improvements: * Move selector spreading priority code to plugin * Demote Delete Grace Period test to [Flaky] * Use Snapshot.NodeInfoList for listing operations * Enabled reading config files for vsphere e2e tests * Move IsAppArmorSupported() from e2e framework * fix flakes on e2e test TCP CLOSE_WAIT timeout * Cleanup cloud controller manager when closing cluster. * fix a bug that orphan revision cannot be adopted and sts cannot be synced * fix kubectl annotate local error * cleanup(api-machinery): remove unused struct and variable * fix typo * Remove redundant nil check * Add simple explanation to verify-spelling.sh * Break interpodaffinity Filter plugins dependency on predicates package * Image Promoter: Bump timeout limit * Refactor oom watcher to allow greater test coverage * Adding unit tests for kube-scheduler Config Complete() method. * Image Promoter: Remove -it from docker command * token cache: make fetch_total a counter * Add: JSON marshal error failure checking; Fix: formatting * Update: json patch generation * Add: test for finding service from listing all namespaces * Update: test secret contains a default label, secrets are listed via default label, patch payload is marshaled instead of written in raw JSON, secret deleted check; Fix: comments, test namespace usage * Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout" * fix a bug in scheduler's node resource limits score * gofmt reflector.go * Clarified comment on DeltaFIFO::Replace * finished pass over comments on Controller, and commented sharedIndexInformer * A little more comment tweaking for cache.Controller * began turning attention to cache.Controller * Reworded comment on requestedResyncPeriod * Noted divergence between requestedResyncPeriod and resyncPeriod * Started commenting processors * Break volumezone Filter plugins dependency on predicates package * Change PDB tests to use pod conditions instead of phase * fix how we check for node info list consistency * kubeadm: Fix a false positive in a warning * Adding in missing Registry unit tests. * Break serviceaffinity Filter plugins dependency on predicates package * staticcheck:test/integration/master/ * Allow "kubelet --node-ip ::" to mean prefer IPv6 * Break nodelabel Filter plugins dependency on predicates package * staticcheck:test/integration/auth/ * fix kubemark use fake CRI * hollow-node use remote CRI * Remove unused scheduler types * Remove variable EXTERNAL_CLOUD_VOLUME_PLUGIN default value in local-up-cluster.sh * Update: to use framework instead of gomega for testing values * Add: OWNERS file - based off of staging/src/k8s.io/apimachinery/OWNERS * Update: namespaceName value updating order to prevent error expection * Update: formatting, gomega Expect to framework ExpectEqual, framework creation to standard function * Move publish and unpublish counting up in test * Fix: formatting, spelling * use az.List() to check route existence * Add: namespace patch test * Move yaml limit tests to benchmarks * Fix err variable shadowing issue in storage/utils * list vm instead of get when getting virtual machine * allow an SNI cert to be used to respond for a particular IP * move nodeaffinity predicate to its filter plugin * test images: Image Promoter fixes * Move RequestedToCapacityRatio argument processing to its plugin * Require client / server protocols * kubetestgen: improve errors handling * Fix local-up-cluster.sh do not work with non-intree external cloud provider issue. * fix log message error in nodelifecycle * bootstrap flow-control objects * kubeadm upgrades always persist the etcd backup for stacked * rename ExtenderConfig to Extender * Add: test to patch a secret * Break volumerestrictions Filter plugins dependency on predicates package * Break nodevolumelimits Filter plugins dependency on predicates package * Remove `rkt` from container runtime options * Correct comment around which integrations require cadvisor_stats * Remove dead code in fake docker client * Break volumebinding Filter plugins dependency on predicates package * remove unused code and use framework * clarify apiserver bind-address flag usage * fix flakes on e2e test TCP CLOSE_WAIT timeout * addressed comments * fix: correct the mentioned endpointslice manage label name. * fix fake remote CRI * cleanup unused scheduler functions/files * kubeadm: probe address for unspecified ips * Cleanup SetPredicatesOrderingDuringTest due to deprecation of predicates * Cleanup unused parameter of NewGenericScheduler * Break DS controller on scheduler predicates and predicate errors * adding private cluster check * Perform dead storage removal linearly * remove unused code test/e2e/framework/google_compute.go * Kubelet: add a metric to observe time since PLEG last seen * fix staticcheck failures of test/integration/client test/integration/disruption * Fix tests and improve comment on NewDeltaFIFO * Fixed assignment statements * Revised comments about f.knownObjects and added tests for Replace * Merge scheduler's ConfigProducerRegistry into LegacyRegistry * Don't paginate in listwatch * update comments of some funs in scheduling_queue * Remove no longer needed `modifyContainerPIDNamespaceOverrides` * remove TODO in test/e2e/framework/node/resource.go * fix staticcheck of pkg/util/ebtables * Updated comments on internal abstractions in client-go/tools/cache * if no cycle dependency , use framework in test/e2e_node subpackage * Add metrics for VMSS and VMSS clients * Move Azure metrics to a separate package * move functions from e2e/framework/deployment/ to e2e/apps/ and e2e/upgrades * Use new VMSS and VMSSVM client in Azure cloud provider * Add VMSS VM client * Add VMSS client * Addd Azure ARM client with backoff retries * CHANGELOG-1.17: add note about service CIDR bug * Minor nit in error message about feature gate stage * Define algorithm providers in terms of plugins. * Move resource-based priority functions to their Score plugins * Postpone flag warning log to just before it be used. * move funs of framework/volume to e2e/storage * Fix staticcheck failures of test/integration/replicationcontroller * Reword modifications for clarity * e2e: move funs of framework/viperconfig to e2e * clean useless code in client-go test * Skip scheduling the pod if it has been assumed and the pod updates could be skipped. * remove TODO in test/e2e/framework/auth/helpers * Return when removePod failed * Remove Todos for CSR checking * Output test description in TestPreemption * Add error handling for Register() call * Move WaitForFailure() to the test * kubeadm: tolerate whitespace when validating user CA PEMs * Add debugging message to know the pod status * Remove Delete/CreateSyncInNamespace() * Remove `recorder.PastEventf` method * Fixing regex for kubernetes version in kubeadm * Clean up unused variable from unit test. * fix static check failures in component-base/metrics * Update to golang@1.13.5 * refactor(pod log):refactor for container valiate, little cleanup * Switch to new ClientConfig for Azure cloud provider * fix staticcheck failures of test/integration/scale test/integration/serviceaccount test/integration/serving test/integration/volume * Add backoff retry which implements autorest.SendDecorator interface * Fix unit test to run in non-gce environments * Move client config to a separate package * publishing: Update to go@1.13.4 for kubernetes-1.16 * Move podtopologyspread priority logic to its Score plugin * Make CPUManagerCheckpointV2 type an alias of CPUManagerCheckpoint * test images: Adds E2E test image automated build * silence usage when pass bad cmd options * Lock checksum calculation for v1 CPUManager state to pre 1.18 logic * fix: test failures * fix: azure error should not retry on bad reqeust * Fix a typo in interpodaffinity score plugin * feat(scheduling): implement azure, cinder, ebs and gce as filter plugin * Add ipv6 examples for network policy API * Fix ensureStaticIP if name for existed address was changed * proxy: add some interface type assertions * alias kubeadmutil for k8s.io/kubernetes/cmd/kubeadm/app/util * e2e:remove func of framework/replicaset to e2e/upgrades/apps/replicasets.go * Move pod topology spread predicate logic to its filter plugin * fix link in readme * e2e:remove unused func in /test/e2e/framework/autoscaling/autoscaling_utils.go * Cleanup testapi after it has been removed * remove unused code in test/e2e/apps/deployment * Add alias of api/errors in endpointslice.go * remove TODO: Use return type string instead of []string and update func * Add apierrors as alias for k8s.io/apimachinery/pkg/api/errors * Move ServiceAntiAffinityPriority to score plugin * move funcs from test/e2e/framework/job to test/e2e/apps * Improve output of update-openapi-spec.sh when printing logs from file. * feat(scheduling): move csi volume predicates to csi filter plugin * Fixing Potential Race Condition in EndpointSlice Controller. * Use Deployment in sample-apiserver examples * Updating minor grammar errors. * Move CheckNodeUnschedulable predicate to its filter plugin * Move VolumeZone predicate to its Filter plugin * replace grpc.WithDialer which is deprecated * add missing alias of api errors under test * unify alias of api errors under pkg and staging * unify alias of api errors under test * move func EnableAndDisableInternalLB from test/e2e/framework/service to test/e2e/network * Remove unused function NewMetricExporter from e2e test * Deprecate scheduler predicate and priority factory registration * Come out of loop when omitempty is true * fix: azure disk could not mounted on Standard_DC4s/DC2s instances * e2e: move funs of framework/pv to e2e/storage * move nodepreferavoidpods to score plugin * Move ResourceLimitsPriority to its Score plugin * fix shell checks errors in cluster/common.sh * Fix simple typos * update defaultconfig link * Add simple explanation to verify-golint.sh * tighten ceiling for matching-precedence to 10000 * move NoDiskConflict predicate to its filter plugin * Added scheduler algorithm provider registery. * Move RequestedToCapacityRatio to plugins/noderesources * feat: implement node affinity priority as score plugin * add extra group and usage check for bootstraptoken * cleanup scheduler's in-tree plugins registry naming * validation.go: don't clamp the CIDR size calculations * Clean up kube-apiserver reference document * deprecate scheduling_algorithm_predicate/priority_evaluation_seconds * move Taint and toleration predicate to its Score plugin * Deprecate scheduling_duration_seconds Summary metric * Change log level to 3 when --random-fully is not supported * e2e: move funs of framework/deployment/fixtures.go to e2e/apps/deployment.go * fix: remove totalNumNodes from priority metadata * Update modules * Swith to retry.Error for Azure cloud provider * Use retry.Error for all Azure clients * Add retry Error definition * move funcs in replicaset to autoscaling_utils * kubeadm: kube-dns is deprecated and will not be supported in a future version * using string instead of byte * change print log for unity when during kubeadm init * introduce checker for the result of nodeInfo.Node() * Delete unused function from e2e test autoscaling_utils.go * fix kubectl run help image name * If lastTimestamp is not set use firstTimestamp when printing event * feat: implement image locality as score plugin * Move volumebinding predicate to its filter plugin * Add logs for rate limit values * Add unit test for extended ipv4 service IP range * Revert "remove ipallocator in favor of k/utils net package" * Fix staticcheck failures for pkg/proxy/... * Count dropped requests except system previledged group requests. * kubeadm: re-enable kubelet version check test in preflight * Change Azure global rate limit to per client * format test file * Add unit tests for pkg azure/auth * Remove ineffective calls in toUnstructured * Added back the flag to trigger examining all Filters in the scheduler. * fix azure cloud provider bug when lb specified in other resource group * bump k8s.io/utils version * Reuse converter in crdHandler#getOrCreateServingInfoFor * Cleanup failedPredicateMap from generic_scheduler.go * move inter pod affinity predicate logic to its Filter plugin * kubeadm: use bind-address instead of address * On OpenRC ServiceIsActive should not report true if no such service exists * Deprecate AlwaysCheckAllPredicates in scheduler Policy API * apiserver: add localhost to alternateDNS for IPv6 * Add simple reference to synopsis of kube-scheduler * fix apply set last applied namespace * hack/local-up-cluster: modify cloud provider launch to work with aws * Revert "Merge pull request #86376 from xieyanker/kubemark_deployment" * update to use e2e-up.sh instead of kubetest * Add instructions about how to use kubetest to bring up e2e test cluster * Update subnet mask calculation for compatibility with future VNIC changes * Bump Ginkgo module to release version * Bump Ginkgo to support building on riscv64 arch * swap over kube-apiserver manifest to use livez and readyz * Expect NodeUnpublish calls when NodePublish is called * move NodeLabel predicate logic to its Filter plugin * InterPodAffinity Priority as Score plugin * move NodeLabel priority logic to its Score plugin * Add klueska as an approver in test/e2e_node/OWNERS * Return error instead of panic when cpu manager starts failed. * update fluentd to 1.8.0 / fixed gemfile / fixed shellcheck lint problems by using xarg * Update README.md * kubenet: replace gateway with cni result * Revert pull request #85879 "hollow-node use remote CRI" * Sample apiserver: Avoid etcd listening on DNS result for "localhost" * Isolate kubectl test-cmd plugin tests * rename _count to _total in a few metrics * Fix golint failure not contained in .golint_failures * chore: port azure disk csi code to upstream * Fix cpu manager e2e test typo * It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. * Add a config option to azure cloud provider for the pre-configured loadbalancers * Adds PreProcessor and PostProcessor functions for modifying apply behavior * Define workloads specs by YAML * Wait for resizing condition * Allocate map when out points to nil map * remove personal kind.yaml that was added accidentally * Revert "promote e2e tests for taint-tolerations in predicates" * prevent blocking wait in cert reloading * Autogenerated * Remove DefaultConvert * Add CHANGELOG-1.18.md for v1.18.0-alpha.1. * change kubemark from ReplicationController to Deployment * Moves visitedUids and visitedNamespaces (used for pruning) into ApplyOptions * extract PreInitRuntimeService from NewMainKubelet * Adopt kubeadm and kubeproxy unit test after new config field added. * Move patch functionality for apply into its own file. * Moved prune functionality into its own file. * Refactored some apply printing functionality; removed unneeded count and objs variables * Created GetObjects() method for ApplyOptions and integrated into apply * Cloud node controller: Only call once into cloud provider * Split cronjob tests, so they don't interfere * Deal with auto-generated files: - Update bazel by hack/update-bazel.sh - make update * Add show hidden flag to kube-proxy * improves watch and report e2e test to also check IsResourceExpired since the API can return both errors (Gone, Expired) * fix: azure data disk should use same key as os disk by default * Deprecate PredicateMetadata * registered nodeports and noderesources prefilters * Use private master IP in GCE kubemark tests * cleanup(kubectl taint): fix Errorf and comment error, and remove unnecessary bool flag * Add klueska as an approver in pkg/kubelet/cm/OWNERS * support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout * Allow kube-proxy iptables mode to support dual-stack, with the meta-proxier. * Add test cases for a helper function in controller manager * Refactor `kubectl proxy` command to have similar design pattern as other kubectl commands. * Check FileInfo against nil during walk of container dir path * Changes Visit() to Infos() in apply to keep slice of objects * Mark '[sig-apps] CronJob should delete successful/failed finished jobs with limit of one job' flaky * Mark '[sig-scheduling] PreemptionExecutionPath runs ReplicaSets to verify preemption running path' flaky * Job completed event added * Make e2e scale updates unconditional * suffix InSeconds to cacheTTL for clearification * Fix up the sub-test style * Add UID precondition to kubelet pod status patch updates * Add debugging for delete grace period e2e flake * auth: add metrics to token cache * Mark GCEPD test flaky * Update wardle e2e image * Build sample-apiserver image using kubernetes 1.17 / go 1.13 * Disable excessive logging in scheduler plugins * code-gen: fix argument type for plural exceptions * fix staticcheck faulures in 'cmd' pkg * fix misspelling in comment * networkPolicy validation ipv6 unit tests * kms: use negative cachesize value to disable caching * test/e2e: move funcs from test/e2e/pod to other folders * Deal with auto-generated files: - Update bazel by hack/update-bazel.sh * Deprecated metrics under /metrics/resource/v1alpha1 * Add new endpoint for resource metrics. * Fix staticcheck failures for test/images * Move service affinity predicate logic to its plugin. * e2e: move funs of framework/gpu to e2e_node * e2e: move funs of framework/deviceplugin to e2e_node * e2e: move funs of framework/job to e2e/upgrades/apps/job * e2e: move funs of framework/metrics to e2e_node * Promote StartupProbe to beta for 1.18 * fix: formating and typo * fix: address test failure and review comments * Add util function to merge resource lists * Add "kubectl describe node" resource tests * Add huge page usage stats to kubectl describe node * Update go version in go.mod * fix: add unit tests for truncate long subnet name on lb ip configuration * fix: should truncate long subnet name on lb rules * addons: elasticsearch supports automatically setting the advertise address * podfitsresource metadata as prefilter * Update semantics of EvenPodsSpread metadata object * Move EvenPodsSpread metadata computation logic as a PreFilter Plugin * add unit test * e2e: support long CSI driver names * cache ttl is configurable * [auth]Change example in can-i to apps instead of extensions * e2e: move funs of framework/statefulset to e2e/apps & e2e/upgrades * compatibility tests for default provider and mandatory filters * Fix build break - Hyperkube image needs kubelet/kubectl * Update addon permissions * Prune server-side print exemption list * Update generated files * Update storage hash to use ingress type for cross-group comparison * Use openapi fixture for server-side apply tests * Delete ReplicationControllerDummy * Remove references to unserved types * Remove ability to re-enable serving deprecated APIs * Remove testapi * Remove testapi use from pkg/api/testing * Remove use of testapi codecs, selflink, resourcepath functions * Install APIs directly for tests * wrap host ports metadata in a prefilter. * Don't report deletion of attached volume as warning * doc: remove Draven from test package reviewers * fix broken link: https://kubernetes-csi.github.io/docs/Drivers.html * fix staticcheck failures of test/e2e/manifest * move funcs from test/e2e/framework/replicaset to test/e2e/apps * Add getting Storage Quantity to ResourceList * Move added info and status stack trace to the end of line. * test/e2e/: use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue()|BeFalse()) * Clean up conformance tar test data * e2e-topology-manager: Fix bazel tests * Remove priority execution paths in favor of score plugins * remove ds dependeny on scheduler metadata * deprecate scheduler's FailureReason * e2e-topology-manager: Fix package name * e2e-topology-manager: fixes for gofmt * [WIP] e2e-topology-manager: Initial commit for E2E tests * inter-pod affinity prefilter * Upload containerd logs to stackdriver * Do not swallow timeout in manageReplicas * Add an interface to return scheduler framework instance * kubeadm: add basic validation around kubelet.conf parsing * Extend authorization benchmark * code-generator: update BUILD * code-generator: expose plural exceptions via flag * Add a unit test guarantees ClearState will fully clear a collector. * feat: remove several feature gates in 1.18 * fix: remove TaintNodesByCondition feature gate in daemon controller * add hwdef as a reviewer of hack * move test/e2e/framework/lifecycle/ test/framework/cloud/gcp * Ensure that error is returned on NodePublish * promote SataQiu to an approver of test and test/e2e/framework * Make sure critical pod in the preemption test is always cleaned up. * Set core_pattern to an absolute path. * Pass initial set of runtime containers to the CPUManager at startup * Move CPUManager Checkpoint restoration to Start() instead of New() * Update top-level CPUManager to adhere to new state semantics * Update CPUManager policies to adhere to new state semantics * Change CPUManager state to key off of podUID and containerName * Extend makePod() helper in CPUManager to take PodUID and ContainerName * Fix bug in parsing int to string in CPUManager tests * Move containerMap out of static policy and into top-level CPUManager * Update CPUmanager containerMap to allow removal by containerRef * Change CPUManager containerMap to key off of (podUID, containerName) * Update CPUmanager containerMap to also return a containerRef * Move CPUManager ContainerMap to its own package * persist deployed DNS configuration during kubeadm upgrade * fix log format string * expose the clientConfig to consumers trying to build custom clients against the kubeapiserver * dump information for all namespaces related to the test * allow configuration of customized AfterEach functions for all tests * Increase Burst limit for discovery client * Update CHANGELOG-1.16.md for v1.16.4. * Update CHANGELOG-1.15.md for v1.15.7. * Update CHANGELOG-1.14.md for v1.14.10. * Clarify intstr.IntValue() behavior * change CounterVec to use Counter in the Kubelet's Pod Lifecycle Event Generator * client-go: update INSTALL.md to include semver tags * e2e: move funs of framework/service to e2e/network * test/e2e_node/:use framework.Equal() instead of using gomega.Expect(bool).To(gomega.BeTrue(),explain) * Revert "Add an option to specify kubelet flags for heapster node." * test/e2e/storage : use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue(),...) * Eliminate running paths of Predicates in scheduler * fix staticcheck failures of e2e/storage/utils e2e/storage/vsphere * Ensuring kube-proxy does not mutate shared EndpointSlices * shared authenticator lookups * vendor golang.org/x/sync/singleflight * Added alejandrox1 to test/approvers * Adds tests * Generates boilerplate code * Adds the algorithm implementation for the Configurable HPA * Adds validation rules and proper defaults * Introduces all API changes needed for Configurable HPA PR * Fix inter-pod affinity scheduler benchmarks * change FakeWatcher.Stopped to be a private field, as read it directly may cause Read/Write conflict race * fix potential memory leak issue in processing watch request * fix staticcheck failures of e2e/storage/drivers e2e/storage/testsuites * e2e: remove unused method in e2e/framework/log * e2e: move funs of framework/kubelet to e2e/scheduling * Drop v1.15.0 API test data * Add v1.17.0 API compatibility data * Revert "staging/publishing: temporarily disable publishing tags" * Add kind/flake issue template * Update v1.17.0 CHANGELOG to match final draft * optimize required inter-pod affinity * Update CHANGELOG-1.17.md for v1.17.0. * Increasing LoadBalancerPollTimeout from 15 to 22 minutes * update RBAC rules in e2e aggregator test * e2e storage: fix type in comment * Make error message and service message more clear * e2e storage: improve instructions for external driver testing * Add serathius to metrics-server OWNERS file * Remove cluster-monitoring * update total_limit_size * update fluentd-es-configmap * fluentd add port promtheus and health check * es add readiness and liveness health check * e2e: remove unused method in e2e/framework/autoscaling. * invoke getTypedVersion() instead of direct runtime call * Return all predicate failures instead of the first one * move funs of framework/deployment to e2e/apps * updated fluentd to 1.7.4 + plugin updates and switch to debian buster * fix static check in kubectl/pkg/cmd/annotate. * move unwanted console output out of versiongetter. * Fix broken SELinux detection * fix staticcheck failures of test/e2e/storage * kubectl oidc auth-provider: include cluster address in cache key * slim down some lister expansions * ping kmsplugin gentely when in good state * Changed Kubelet client and serving cert TTL/Expiry certs to use gaugefunc for calculating time remaining. * Ensuring EndpointSlices are not used for Windows kube-proxy implementations * kubelet: guarantee at most only one cinfo per containerID * optimize preferred pod affinity * kubectl/drain: add option skip-wait-for-delete-timeout * staging/publishing: temporarily disable publishing tags * correct invalid urls * fix staticcheck in test/integration/apiserver * Fix IPv6 addresses lost issue in pure ipv6 vsphere environment * Add cache for VMSS. * Add an option to specify kubelet flags for heapster node. * kubeadm: Throw an error if the currentContext does not exists * Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made * inject remoteRuntime to kubelet dependency * kubectl change podSecurityPolicy group * promote e2e tests for taint-tolerations in predicates * remove two unused metrics * Two bug fixes: (1) at least log something out if we fail to register our health check, (2) actually register a prometheus metric. I delete the deprecated metric in this block because there isn't any point to it, since no one can be broken by changing a metric that doesn't get collected * Fix nil pointer dereference in the azure provider * disable node deletion detach test * Add current chairs to component base approvers * expect node to be recreated with the same name * When running `kubectl drain` in dry-run, list warnings and pods that would be deleted. * Deflake kubectl custom printing test * Include cloud/gcp in e2e.test * Refactor parsing logic for service IP and ranges, add tests * Fix bug in apiserver service cluster cidr split * Revert "kubeadm: don't check if image exists before pulling" * bazel update * e2e storage: add compile test for public TestSuite API * e2e storage: public API for testsuites, support CSIInlineVolume type for generic resource * Removing conditional check * Included CSINode describer * increase LRU cache size 8x for authorization webhook * added benchmarks for preferred (anti)pod affinity * test/e2e/auth: Fix static check failures * Run all csi-hostpath containers as privileged * Refactor kubelet component config lenient path decoding * add hack/verify-typecheck-providerless.sh * typecheck support setting tags, skipping test code, and ignoring directories * fix staticcheck in test/e2e/network/ * Convert ExpectEqual(err, nil) to ExpectNoError(err) * fix: typo Snapshoting to Snapshotting * fix staticcheck in pkg/printers * Revert "Use ExpectEqual test/e2e_node" * Update GCE Windows startup scripts for TPM-based authentication * Sync the status of static Pods * remove framework dependency from framework sub-package kubectl * moved WriteFileViaContainer and ReadFileViaContainer to kubectl_utils * remove CheckFileSizeViaContainer from framework * move KubectlCmd out of utils into its own package * Use typed errors for special casing volume progress * remove max pods from e2e test * scheduler benchmark: allow to override bench prefix * Fix Cpu Requests priority Windows. * Fix waiting for logexporter log fetching processes * Deleted extra 'phase' in command example * Create kubemark cluster as private * fix staticcheck errors in legacy-cloud-providers/azure * Cleanup converter * Fix bug in ignoring untypes conversions * Cleanup old-style conversions * Cleanup metav1 conversions * run `hack/update-bazel.sh` * Enhance error message for failed controlplane init * fix golint check in test/e2e_node/runner/remote * `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object * hollow-node use remote CRI * handle registry merge error * Utilize Context with timeout in gce_instances.go * Rename PodDisruptionsAllowed to DisruptionsAllowed in type PodDisruptionBudgetStatus * kubectl/drain: add disable-eviction option * Utilize Context with timeout in GCE operations * optimize anti-affinity predicate * Address PR comment * Revert "Fix shellcheck failure in log-dump/log-dump.sh" * Update checks.go * [generated] bazels and vendor/modules.txt * santize codegen scripts * s/apiextensions/apiextensionsv1/ for all imports in k/k * switch to v1 crd * Be more agressive acquiring the iptables lock * fix staticcheck failures of test/e2e/upgrade * Deflake delete grace period e2e * Update CHANGELOG-1.17.md for v1.17.0-rc.2. * Deflake pod readiness e2e * Enable hidden custom collectors when calling SetShowHidden(). * All stable collector should be tracked in registry. * The descs in a stable collector should be tracked by a map instead of slice. * add PredicateFunc for configmap * Use ExpectEqual test/e2e_node * use ExpectEqual of framework in test/e2e/storage * Fix golint issues in test/e2e/lifecycle/ * Fix func VerifyLatencyWithinThreshold() to local * cmd/kube-controller-manager: fix staticcheck warning * apimachinery: fix bugs in a Test function * add err handling in gce/gci * Replace the hostname in the fluentd config file even if the file exists * Add test cases to verify kubelet & kube-proxy can recover if being killed accidentally * Adds initial unit tests for tablegenerator.go * Use GCS bucket for crictl on windows. * Add defaulting logic for EncryptionConfiguration. * make scheduling queue start before the scheduler starts and stops after the scheduler stops * update scheduler benchmarks to be more representative * kubeadm: set cluster name on the controller manager * update gopkg.in/yaml.v2 to v2.2.7 * Ensure that metadata directory is not created if secret is not found * Handle the case of remounts correctly * Rename MarkVolumeMountedOpts to MarkVolumeOpts * Change interface of SetUp function * Change signature of MountDevice function and remove MountDeviceWithStatusTracking * Refactor NodeStage function * Add tests for verifying in-progress state * Update generated files * Add code to handle Setup With Status tracking * Implement return status codes * Ensure webhook backend requests are not artificially rate-limited * Make sure PodExistsInVolume does not uses uncertain volumes * Add code to mark volume as uncertain * Add code for introducing uncertain state of mounts * fix: replace TrimLeft with TrimPrefix and TrimRight with TrimSuffix * Make APIService.spec.service optional in the openapi v2 spec * Cleanup default conversions * Cleanup metav1 conversions * Use new-style conversions in default conversions * Optimize:remove unnecessary judgment * fix staticcheck in test/e2e/cloud/ * Use expect equal test/e2e/upgrades * remove Kubeadm-env file overwrite from apply and node command * kubeadm: Improve resiliency in CreateOrMutateConfigMap * kubeadm: use correct IP family for etcd localhost * Log error when writing checkpoint fails * Remove nodes slice in loop of takeByTopology * optimize scheduler's UpdateNodeInfoSnapshot * Nominate liu-cong to be sig-scheduling reviewer. * Switch addon resizer to 1.8.7 * Remove stale comment re making apiserver common names dynamic * Make cluster auto scaler use leases * Bump Cluster Autoscaler version to 1.17.0 * Fix comment typo * fix golint failures of test/e2e_node/remote * rm -rf staging/src/k8s.io/apiextensions-apiserver/pkg/client * Fix NetworkPolicy PolicyTypes validation * Update go-winio module version from 0.4.11 to 0.4.14 * fix: padded base64 encoded docker auth field * All check for instanceID * apiextensions: filter required nullable to workaround kubectl validation * use framework refactor code in test/e2e/common * drop KUBE_TIMEOUT in test/cmd/kubeadm.sh * setting kubemark node labels * fxing kubemark node labels * Deal with auto-generated files: - Update bazel by hack/update-bazel.sh * Add ClearState() API to Desc. Add create() API for Desc Add annotatedHelp fields to Desc. * Add kind/deprecation to pull request template * Retain objects for a limited lifetime in the mutation cache detector by default * Enable mutation detection * use ExpectEqual of framework in test/e2e/autoscaling/ * Fix iscsi refcounter in the case of no Block iscsi volumes * catch the exception raised in Remove-HnsPolicyList * update cadvisor dependency to v0.35.0 * stop spamming the log on failures with full objects * remove redundant definition of the defaultProvider in the scheduler * Move hostdns.conf out of cni directory. * Add containerd windows support on GCE for test. * export scheduler.Snapshot function, needed for cluster autoscaler integration * Reduce unnecessary Set in updateAllocatedDevices * Deal with auto-generated files: - update bazel by hack/update-bazel.sh * correct invalid urls in CHANGELOG file * Refactor custom collector unit test. * use framewoek in test/e2e/cloud * e2e: use log functions of core framework on pv, testfiles and volume sub packages * Adding KubeProxyConfigMap19 checking in test-e2e-kubeadm * Clarify client-go issue location (#85464) * pkg/master: Fix static check failures * Wait for PV to be available before creating PVCs in volume binding test * increase pv controller resync period to try to deflake api update conflicts * kubeadm: simplify discover/token and add detailed unit tests * Enable update-bazel.sh outside of GOPATH * Delete client node selector during volume creation * add applyto tests for controller configs * fix kube-apiserver poststarthook additions to avoid duplicating them * Fix benchmark artifact parsing. * fixup kubectl test * Attach runtimeclass printer * Attach resourcequota printer * Improve rolebinding/clusterrolebinding printers * Add webhook printers * Add CSINode/CSIDriver printers * Switch TableGenerator/TableConvertor interfaces to metav1 * Fix AWS eventual consistency of AttachDisk * test/e2e/apimachinery: fix staticcheck warning * Extend Registerable interface with FQName() and track collector by name. * lazyInit accepts fqName when init. * kubeadm: Group centric component configs * Flip CSIMigrationOpenStack flag to be beta and off by default * fix golint issues in test/e2e_node * fix broken link:https://kubernetes.io/docs/concepts/overview/object-management-kubectl/ * Use plugin name for filtering metrics * Fix PVC condition check for offline resizing * add test coverage with kubectl get components * modify the error url of autoscaler * Switch storage version to use v1.CSINode in 1.18 * Fix resource version precondition on pod delete * Add RainbowMango to onwer list of metrics stability framework. * Rename Azure driver to Azure Disk driver * add myself to sig-network-approvers * Fix HTTP readiness/liveness probes for local node * Add support for new dual-stack flags for kubernetes-controller- manager in kubeadm: - node-cidr-mask-size-ipv4 - node-cidr-mask-size-ipv6 * don't error if set-resources patch is empty * kubeadm: update image pull tests * fix etcd version check error on ARM * kubeadm: don't check if image exists before pulling * refactor: incorporated the review comments * Revert "remove redundant `source` in shell" * Deep copying EndpointSlices in reconciler before modifying them. * make elasticsearch discovery supports IPv6 * apimachinery: Fix Dropped Test Error (#85427) * removed comments referencing akse * kubectl/drain: Add context support * Provided a mechanism to re-register hidden metrics. * refactor(golint): lint fixes for iptables test file * Hi San Diego (#85424) * Added rest client metrics for client TTL and rot. (#84382) * Fix kubectl conversions * Output port as number in error message * Fix GKE upgrade test. * Update CHANGELOG-1.17.md for v1.17.0-rc.1. * kubeadm: add a upgrade health check that deploys a Job * Dump namespace if the namespace could not be cleaned up * stop_kubemark * fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md * fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/cri-validation.md * Revert "kube-proxy: check KUBE-MARK-DROP" * Print nominated pods on the node when dumping scheduler cached NodeInfo * generalize solution * add pod info when failing to add pod to queue * check service status value returned by EnsureLoadBalancer * Promote a TCP probe test to Conformance * better comments * Fix a bug in port-forward: named port not working with service * misc fixes * Set default value for TEST_CLUSTER_LOG_LEVEL and KUBE_GCE_INSTANCE_PREFIX * fix kubemark output error * Add public documentation for kubelet/apis/config * Set node cidr mask size ipv4/ipv6 config * fix 1-12 number urls * add cofyc as local volume owner * Sets HostNetwork to False for tests which do not require it * apiserver: add Retry-After header to response when apiserver is shutting down * client-go: add connection refused to list of transient errors * upgrade api-version to fix azure file AuthorizationFailure * kubelet/network: add sig-network-approvers to OWNERS * Fix device plugin generator script * use context to check client closed instead of http.CloseNotifier in processing watch request * SafeSysctlWhitelist: add net.ipv4.ping_group_range * chore(gofmt): go format fix * [pkg/auth/nodeidentifier/default_test.go]: fix testing error message typo * Fix golint issues in pkg/kubelet/events/event.go * Remove the derprecated API RawRegister from stability framework * chore(lint): removing the iptables pkg * chore(lint): lint fix in /pkg/util/iptables * chore(lint): fix iptable.go file lint * Wait for kubelet & kube-proxy to be ready within 10s * Support Azure Stack dynamic environments * Plumb test state through to fake volume host creation for error handling * Fix grammar: have -> has * Tolerate unset $GOBIN * added yliaog to OWNERS * Test writing configurations with numeric names * tests: Removes [LinuxOnly] tag from a few tests * Add tests for kubeproxyconfig * Add componentconfig package testing files * Migrate Kubemark to distroless * Enable snapshottable e2e test for csi pd driver * kubeadm: reset raises warnings if it cannot delete folders * proxier: improve node topology event handler logic * remove redundant `source` in shell * use ExpectEqual in /e2e/auth * add ut for scheduler framework * Fix a comment typo in legacyNodeRoleBehaviorFeature * e2e: move LogFailedContainers out of e2e test framework util.go * fix-staticcheck in /test/e2e/windows * Move suites.go to e2e package * Remove e2e/framework/profile_gatherer.go * Add support for GOBIN to generate-groups.sh. * Included FSType in CSI volumes * Clean up cluster-service label from calico-policy-controller * Reduce visibility of prometheus libs * Deal with auto-generated files: - Update bazel by hack/update-bazel.sh * Add flag for which to show hidden metrics to kube-controller-manager * fix the defect in the shell scripts * Add matthyx to sig-node-reviewers * Hide kubelet metrics that have been deprecated in 1.14 * remove unused func * refactor events utils in e2e * Fix golint failures * modify dockerID to containerID * Add johnbelamaric as conformance code reviewer/approver * Fix shellcheck failure in log-dump/log-dump.sh * Fix golint issues in pkg/apis/batch/validation * Fix golint issues in pkg/registry/.../storage * Fix golint issues in pkg/util/sysctl/testing * kubelet: rename HTTPGetter interface * Allow usage of consts and variables for stable metrics in static analysis * Fix golint failures for pkg/kubelet/config/... * Variables collides with imported package name * fix kubelet failed to start on setting hugetlb limits in non-exist cgroup dir cause by kubelet startup be interrupted on setting list of cgroups In the 'cgroupManagerImpl.Exists' not check&recreate the hugetlb cgroup dir. Then setting the limits in non-exist cgroup dir will cause kubelet start failed. * kubelet: add certificate rotation error metric * Replace nginx image with agnhost in sig-node pods tests * correctly handle resetting cpuacct in a live container * Drop version from static openapi json file * simplify volume zone checker * Log mvcc revision compaction as warning * Fix validation for metav1 fuzz targets. * fix syntax error in test * Fix error in periodic resyncs description * Clarify that OnUpdate can mask delete and recreate * Declare constants in pods test as const * ignore image err when docker image has been cleaned up * [k8s.io/sample-controller/controller.go]: fixup minor typo * Centralizes images into agnhost (part 4) * Fix golint errors * Add support for builtin modules in kube-proxy * kubectl: remove unreachable code * Fix etcd-version-monitor readme and yaml file. * Update Calico to v3.8.4 * Bind kube-dns containers to linux nodes to avoid Windows scheduling * Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes * Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes * Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes * update CRI to support hugepages * hostport return error when claim SCTP type port * healthz: instrument root healthz requests for metrics * Clalify how to contribute to kubectl book * cri_stats_provider: do not consider exited containers when calculating cpu usage * Shorten health check timeout for AWS NLB with externalTrafficPolicy: Local * Fix typo * Added e2e test to verify zone support across datacenters in the same vCenter * remove stateCheckPeriod * Bumped the number of times a node tries to lookup itself * Report api request throttling at v=3 * fix path to prow size plugin ------------------------------------------------------------------- Fri Mar 13 10:27:10 UTC 2020 - rbrown@suse.com - Update to version 1.17.4: * Removing kubectl get output e2e test * Adding a temporary fix for kubectl get output e2e test * /readyz should start returning failure on shutdown initiation * test: don't use hardcoded pod count for memory limit test * Fixed in the GCE/PD in-tree volume logic to expose the max number of persistent-disks for each instance type correctly. * Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs * fix: corrupted mount point in csi driver * fix: azure file mount timeout issue * fix behaviour of aws-load-balancer-security-groups annotation * fix: add remediation in azure disk attach/detach * Update to golang@1.13.8 * build: Enable kube-cross push/pull from K8s Infra GCR * build: Add justaugustus as reviewer * build: Add OWNERS on build-image/ * fix get-kube authorization headers * update golang.org/x/crypto * kube-proxy filter Load Balancer Status ingress * kube-proxy unit test FilterIncorrectIPVersion * add delays between goroutines for vm instance update * Updated test cos image to include runc-1.0.0-rc10 * Fix gce-cos-master-reboot test * Fix route conflicted operations when updating multiple routes together * fix: get azure disk lun timeout issue * Set up connection onClose prior to adding to connection map * fix: add azure disk migration support for CSINode * Add annotation annealing for migration for PVs and PVCs during syncVolume and syncClaim. This allows external-provisioners to pick up and delete volumes when they have been rolled up from previous kubernetes versions. * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.3 * Limit number of instances in single update to GCE target pool * Enable selinux tags in make targets ------------------------------------------------------------------- Thu Mar 12 17:26:28 UTC 2020 - rbrown@suse.com - Update to version 1.17.3: * Add code to fix kubelet/metrics memory issue. * Remove Error log for nil StartTime * CHANGELOG: Move changelogs into a subdir to delegate releng approvals * Fix pending_pods, schedule_attempts_total was not recorded * Fixing Potential Race Condition in EndpointSlice Controller. * Restore statefulset conversion that populates apiVersion/kind in volume templates * Use standard default storage media type in local-up-cluster * changelog: clarify 1.17 upgrade requirements * Fix back off when scheduling cycle is delayed * blank out value for unbounded client label * update gopkg.in/yaml.v2 to v2.2.8 * set nil cache entry based on old cache * Revert "It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc." * Fix issue with GCE scripts assuming Python2. * Add/Update CHANGELOG-1.17.md for v1.17.2. * Update to golang@1.13.6 * Fix the bug PIP's DNS is deleted if no DNS label service annotation is set. * kubenet: replace gateway with cni result * Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present * Ensure a provider ID is set on a node if expected * Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes ------------------------------------------------------------------- Tue Feb 04 15:04:34 UTC 2020 - rbrown@suse.com - Update to version 1.17.2: * [1.17] No-op whitespace fix to CHANGELOG-1.17 to trigger a new 1.17 build * Add/Update CHANGELOG-1.17.md for v1.17.1. * Drop version from static openapi json file * Update to golang@1.13.5 * Revert reflector changes from PR #83520 from 1.17 * Fix IPv6 addresses lost issue in pure ipv6 vsphere environment * Fix unit test to run in non-gce environments * fix: azure disk could not mounted on Standard_DC4s/DC2s instances * Use legacyscheme's types rather than testapi ones * Fix nil pointer dereference in the azure provider * Add unit test for extended ipv4 service IP range * Revert "remove ipallocator in favor of k/utils net package" * It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. * Allocate map when out points to nil map * fix: azure data disk should use same key as os disk by default * Check FileInfo against nil during walk of container dir path * Add UID precondition to kubelet pod status patch updates * Add cache for VMSS. * Fix build break - Hyperkube image needs kubelet/kubectl * Include cloud/gcp in e2e.test * Do not swallow timeout in manageReplicas * Sync the status of static Pods * Increase Burst limit for discovery client * Update v1.17.0 CHANGELOG to match final draft * Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made * Fix broken SELinux detection * Add/Update CHANGELOG-1.17.md for v1.17.0. * Kubernetes version v1.17.1-beta.0 openapi-spec file updates * Deflake kubectl custom printing test * Move hostdns.conf out of cni directory. ------------------------------------------------------------------- Thu Dec 12 13:54:23 UTC 2019 - Richard Brown <rbrown@suse.com> - Disable building on openSUSE (except Backports) as kubernetes-client provides identical functionality ------------------------------------------------------------------- Mon Dec 09 22:12:38 UTC 2019 - rbrown@suse.com - Update to version 1.17.0: * Refactor parsing logic for service IP and ranges, add tests * Fix bug in apiserver service cluster cidr split * Switch addon resizer to 1.8.7 * Deflake pod readiness e2e * Add/Update CHANGELOG-1.17.md for v1.17.0-rc.2. * Fix iscsi refcounter in the case of no Block iscsi volumes * Ensure webhook backend requests are not artificially rate-limited * Retain objects for a limited lifetime in the mutation cache detector by default * Enable mutation detection * Make cluster auto scaler use leases * Bump Cluster Autoscaler version to 1.17.0 * fix: padded base64 encoded docker auth field * apiextensions: filter required nullable to workaround kubectl validation * update cadvisor dependency to v0.35.0 * Bumped the number of times a node tries to lookup itself * Wait for PV to be available before creating PVCs in volume binding test * increase pv controller resync period to try to deflake api update conflicts * Fix GKE upgrade test. * Use plugin name for filtering metrics * Provided a mechanism to re-register hidden metrics. * Deep copying EndpointSlices in reconciler before modifying them. * Set node cidr mask size ipv4/ipv6 config * Revert "kube-proxy: check KUBE-MARK-DROP" * Add/Update CHANGELOG-1.17.md for v1.17.0-rc.1. * Initialize FeatureGate map for KubeProxy config. #1929 * Fill in default node cidr mask size when dual stack is not enabled * apiextensions: fixup go-openapi constructor invocations * hack/pin-dependency.sh github.com/go-openapi/validate v0.19.5 * apiextensions: add items+type integration test * fix multiple node cidr masks in providerless build * add providerless tag to vsphere volume code * add providerless tags to new awsebs code * fix providerless build post-CSI migration * Plumb authorization webhook version from CLI to config * Add/Update CHANGELOG-1.17.md for v1.17.0-beta.2. * Update CHANGELOG-1.17.md for v1.17.0-beta.2. * Addon Manager: Fix parsing KUBECTL_EXTRA_PRUNE_WHITELIST * Remove metric be hidden log temporarily. * apiextensions: freeze & doc supported v1.16 OpenAPI formats * fix stress test: it's not doing anything * Skip Node printing in kubectl column test * fix nasty bug * inline GC in expiring cache * Add single-item list/watch to delegated authentication reader role * add comments for compatibility * Disabling EndpointSlice feature gate by default * apiextensions: ratcheting update validation for atomic item of set list-type * apiextensions: factor out predicate iterator in validation * Fix label mutation in endpoints controller * Reverting managed-by-setup annotation * Jump out of spec translation early if the spec is not migratable. Unit tests work after all! * Add CSINodes to AttachDetachControllerRecovery test * Panic on error when creating fake volume host, add a TODO to clean up later * De-race some CSI unit tests that were initializing the plugin manager…ger (and plugins) twice. Set some const variables earlier to support node info manager initialization and wait for initialization to complete before finishing plugin setup. * Update attachdetach-controller role to include permissions to get, list, and watch csinodes for CSIMigration * Flip CSIMigration and CSIMigrationGCE to Beta * kubeadm: Use only stdout when calling kubelet for its version * apiextensions: validate that list-type set has atomic items * apiextensions: clarify validation errors * apiextension: clarify what atomic means * Remove pkg/util/mount (moved out of tree) * kubeadm: use the right name for the no validator function * e2e: promote CRD defaulting test to conformance test * service topology: remove redundant API validation for local external traffic policy * Increase cache size for endpointslices. * pager.go: Don't set ResourveVersion on subsequent List calls * Add logic for translating zone/zones/allowtopologies * Autogenerated files * Flip CSIMigrationAWS flag to be beta and off by default * kube-proxy: sync rules when current node labels change detected * Service Topology implementation * Add API for feature gate ServiceTopology * Restrict mirror pod owner references (#84657) * Allow multiple node cidr masks in cm * Revert "Enable snapshot e2e test for csi pd driver" * Update inline volume translated PV Name to be unique per disk so that staging paths are unique * Separate staging/publish and unstaging/unpublish logics for block * Change publish path for CSI block volume per pod * Disable in-tree plugins migrated to CSI * Brushed up fairqueuing package * Split CustomBlockVolumeMapper and CustomBlockVolumeUnmapper * Refactor BlockVolumeMapper and BlockVolumeUnmapper interface * Move test inputs for EncryptionConfiguration tests into testdata. * migrate token cache to cache.Expiring * Add an expiring cache for the caching token authenticator * Avoid constructing table printer on every componentstatus request * Add support for --runtime-config=api/beta=false, --feature-gates=AllBeta=false * update pd csi driver controller manifests * Ensuring EndpointSlice controller does not start when feature gate or API are disabled * Use CSINodes v1 API in scheduler * Enable snapshottable e2e test for csi pd driver - add pd driver manifests - modify snapshottable test case * Move RegisterNodeFlags() to e2e_node test * Fix --resource-version handling in kubectl * rename PluginConfigArgs to AlgorithmConfigArgs * Change mount.NewOSExec to utilexec.New * Change getDeviceMajorMinor to use unix.Stat * Fix error messages in operation_generator.go * Remove remaining empty file in unmapBindMountDevice * Rename IsBindMountExist to IsDeviceBindMountExist * Remove klog for output error instead return err with context * Improve comments for volume path hanlder and volume.go * Check and return error first in IsSymlinkExist and IsBindMountExist * Move MapBlockVolume call to operation_generator and add UnmapBlockVolume * Make descriptor lock per pod and release it per pod * Change globalMapPath to bind mount from symlink * Check error return from closing connection * Update debian-iptables image digests for v12.0.1 build * Update debian-iptables iptables-wrapper script * Update debian-iptables image digests for v12.0.0 build * Add mode-detecting iptables wrappers to the debian-iptables image * Update debian-base image digests for v2.0.0 build * Bump debian-base to buster * add table convertor to componentstatus * add retry to etcd operations * Specify a port range to ILB firewall rule create. * Renamed FeatureGate RequestManagement to APIPriorityAndFairness * Regenerated pb.go for flowcontrol/v1alpha1 * updated generated files * applied gofmt * Identify cluster scope by a boolean field rather than a special namespace * Enabled discrimination on target namespace * Include *intstr.IntOrString in API compatibility tests * refactor apparmor utils in e2e * Correct the checking of robinIndex * Updating kube-proxy to support new EndpointSlice address types * pkg/kubeapiserver: fix staticcheck warning * pkg/client: fix staticcheck warning * Hide scheduler metrics that have been deprecated in 1.14 * Hide apiserver metrics that have been deprecated in 1.15 * add DeleteOptions conversion * Hide apiserver metrics that have been deprecated in 1.14 Update E2E test accordingly. * test(cr::update): add corresponding tests * add unit tests * remove disk locks per vm * tests: Adds large requests tests * Promoting EndpointSlices to beta * Update dependency vmware/govmomi to v0.20.3 * Update bucket for scheduler framework latency histograms. * Retire mount.Exec for k8s.io/utils/exec * guard kubeadm dependencies on k8s.io/kubernetes * Wait for terminating pods to be deleted * Add TODOs for removing invalid e2e dependencies * Strip nullable for Server-side apply * Update structured-merge-diff to latest version * Update CHANGELOG-1.16.md for v1.16.3. * Update CHANGELOG-1.14.md for v1.14.9. * Update CHANGELOG-1.15.md for v1.15.6. * report cache mises in cached token authenticator benchmark * Refactored PriorityLevelConfiguration * make client authentication optional for test kube-apiserver * Revert "76093 restructure LICENSES file generation" * Revert "76586 Add generated license files" * Increase cache size for leases * Remove an infinite poll * Store topology spread constraints in metadata with labels.Selector * fixed golint errors in pkg/apis/extensions register.go and types.go * Fixed lint and staticcheck oversights * Continue removing file in ManagerImpl#removeContents * kubeadm: enable kubelet client certificate rotation on primary CP nodes * Convert volume binder to use CSINode GA * Expand unit tests for topology translation in csi-translation-lib * Use CSI translation lib in VolumeBinderPredicate * Convert zones to volume topology in CSI translation lib * dynamic reload cluster authentication info for aggregated API servers * add RequiresExactMatch for label.Selector * Add Reset() API to stability framework * Hide proxy metrics that have been deprecated in 1.14 * Added overlooked BUILD files * fix wrong link * Brushing up queueset * Remove memory resource constraint * Windows: Fixes termination-file mounting for containerd * scheduler: make algorithm source an option * Use log functions of core framework on e2e/storage/utils * Add startupProbe result handling to kuberuntime * feat(scale): update CR in UpdatedObjectInfo impl * feat: graduate ResourceQuotaScopeSelectors to GA * Add comments to explain golang.org replace directives * Remove unused func and struct from pod.go * Hide metrics that have been deprecated in 1.14 * Deal with auto-generated files. - Update bazel by hack/update-bazel.sh * Add metrics flag to show hidden metrics to kube-apiserver * Add common flag validation functionality shared by kube-binaries * 76586 Add generated license files * vsphere: check if volume exists before create * Remove unused function from e2e framework rest.go * 76093 restructure LICENSES file generation * serve hns.psm1 StackdriverLogging-v1-9.exe GetGcePdName.dll from GCS * Pass InformerFactory instead of indivisual informers in scheduler configuration logic * fix vmss dirty cache issue * Amend service controller code/test regarding finalizer GA * Promote service load balancer finalizer feature gate to GA * BUILD files * Relax namespace restriction for critical pods * Replaces modifying node object with returning a map of labels - Adds label to update flow so can be picked up by an existing node * Fix incorrect message on describe netpol * Move functions from e2e/framework/util.go Part-4 * allow individual ca bundles to be empty in union * update coredns version to 1.6.5, update manifest and corefile-migration version * Adding e2e tests covering EndpointSlice and Endpoints Controllers * bump vendor of corefile-migration lib to 1.0.4 which support migration of coredns up to version 1.6.5 * bump coredns version and update manifest * Add scheduler plugin execution duration metric. * create utilities inspecting server TLS certs * review changes - *Locked updates * Splitting IP address type into IPv4 and IPv6 for EndpointSlices * review changes * Updated NewSnapshot interface to accept a NodeInfoMap instead of lists of nodes and pods * fairqueuing implementation with unit tests * Quick steps for generating hyperkube image * Merging selectors for spreading into one * remove global variable dep in admission * tests: Replaces guestbook with agnhost equivalent * Promote WebhookAdmissionConfiguration to v1 * kubeadm: Amend the hyperkube deprecation change * AdmissionConfiguration v1 * Promote resource quota admission configuration to v1 * Eliminate couple unnecessary conversions * client-go/tools: Docs: Clarify what's "old" core/v1 and what's "new" events/v1beta1 * Removed clientset param from InjectContent * Remove argument "cs clientset.Interface" from testFlexVolume * Removed 2nd arg "cs" from TestVolumeClient * fixtures.go: Removed unused parameter "client" in testVolumeContent() * utils.go: Changed bashExec to shExec, bash not guaranteed. * test/e2e: Reduce need to use local kubectl * modify url https://github.com/kubernetes/kubernetes/pull62853 to https://github.com/kubernetes/kubernetes/pull/62853 * kube-proxy/ipvs get local addr just once per sync * modify istio url:https://istio.io/news/2018/announcing-0.8/ to https://istio.io/news/2018/announcing-0.8/ * alpha certs tries to read in-cluster config * Convert scheduler to use CSINode GA * Update hostpath CSI driver manifest * Enable volume limits e2e tests for CSI hostpath driver * Promote volume limits to GA * Ensure that Node lease has OwnerReference set * Fix data race in client-go UpdateTransportConfig * Remove unnecessary judgment * remove system validators package from kubeadm and use k8s.io/system-validators instead * - Delete backing string set from a threadSafeMap index when the string set length reaches 0. * generated * Switch kubelet/aggregated API servers to use v1 subjectaccessreviews * Switch kubelet/aggregated API servers to use v1 tokenreviews * Azure: Filter disks with ToBeDetached flag from attach/detach- UT * Azure: Filter disks with ToBeDetached flag from attach/detach * Remove plugin watching of deprecated directory {kubelet_root_dir}/plugins and support for CSI V0 in accordance with deprecation announcement in https://v1-13.docs.kubernetes.io/docs/setup/release/notes/ * adjust token cache benchmarks to get more accurate behavior * Moving WindowsRunAsUserName to beta * Check that endpoint has subset before accessing first subset * remove factory.Config struct and NewFromConfig * make Configurator.Create return a Scheduler * Removed unused method from e2e test framework * Add MetadataProducerFactory for predicates * Plumb configured acceptContentType to client config * kubeadm: Deprecate hyperkube use * alpha certs skip missing files * close scheduler kube-apiserver * publishing: bump Go versions in rules * Update Bazel * Fix RS informer handlers and handling expectations on delete * fix kubectl diff panic * move bindVolumes behind RunPermitPlugins * VolumeSnapshot CRD v1beta1: Enable VolumeSnapshotDataSource feature gate and update e2e tests * Always negotiate a decoder using ClientNegotiator * test: Exit early during resource helper test * test: kubectl unit tests should be using codecs without conversion * test: Set RateLimiter via client config vs direct casting * dynamic: The dynamic client no longer needs a special cased watch * test: Watch should fail immediately on negotiate errors * Create a shim for Codecs that handles client duties * Detect watch protocol errors via an e2e test for apimachinery * Remove deprecated-dynamic client * pkg/credentialprovider: fix staticcheck warning * Fix a typo in pkg/controller * Fix golint issues in pkg/registry/core/service/storage * kubeadm: always use a short timeout for clientset creation * Handle error return from allocatePodResources * Fix golint issues in pkg/apis/autoscaling/validation (#85041) * Print progress updates to stdout and publish to URL * kubeadm: remove the deprecated "--cri-socket" flag for "upgrade apply" * kubeadm: use the secure ports for kube-scheduler and kcm health checks * Fix golint issues in pkg/apis/policy * Fix golint issues in pkg/apis/authorization * set default percentageOfNodesToScore in kube-scheduler back to 0 (maning adaptive) * kubeadm: fix skipped etcd upgrade on secondary cp nodes * added nodeSelector: beta.kubernetes.io/os: linux * kubetestgen implementation * Support specifying a custom subnet for ILB ip * Adding new label to indicate what is managing an EndpointSlice * let standalone npd use kubelet credentials * Move stackdriver startup block after HNS stabilizes. Stackdriver is not functional if metadata-server doesnt respond. At this stage of the init script, metadata server is available * update github.com/docker/libnetwork to f0e46a7 - which bumps it's dependency to github.com/vishvananda/netlink to v1.0.0 * update github.com/vishvananda/netlink to v1.0.0 * Remove potential Goroutine leak in kubeadm wait.go * Update test logic to simulate NodeReady/False and NodeReady/Unknown events correctly * Add translation logic for EBS storage class fstype parameter * Move functions from e2e framework util.go * Enable verify-import-aliases check in CI * Add unit test to catch scheduler's node order evaluation regressions * unit tests * fix a panic when ipam tries to allocate an out of range pre-existing cidr * add featuregate inspection as admission plugin initializer * Add error detail * Remove unused function from e2e framework util.go * Add appProtocol to EndpointSlice.Port * Remove leftover factory directory * noderestriction: update node restriction unit tests to use stable instance-type label * Set TypeSetter in get print flags, like we do everywhere else * scheduler: max attachable volume predicate should also check stable instance-type label * cloud node controller: apply stable instance-type label with backfill to existing nodes * kubelet: add unit tests for backfilling stable os/arch/zone/region/instance-type labels * kubelet: apply both beta and stable instance-type label * api/core/v1: add stable node instance-type label * Move mount/fake.go to mount/fake_mount.go * move exec files back * copy exec file to preserve history * Move password retrieval to openstack_test.go * Remove json-iterator depth patch * bump github.com/json-iterator/go v1.1.8 * Autogenerated * Correctly autogenerate conversions for autoscaling v2beta2 * Revert changes to WaitForStableCluster in scheduler e2e test * Deal with auto-generated files. Update bazel by hack/update-bazel.sh * Migrate custom collector and mark metrics with ALPHA. * Add envs for configuring hollow-node resource usage. * fixing docker fake client InspectExec * feat(scheduler): convert InterPodAffinity to score plugin * pkg/apis: fix staticcheck warning * typo list-type s/associative/map/ * flowcontrol rest storage implementation * clean up PriorityFunction * Add testcases covering large valid patches * fix race condition when attach/delete disk * Add NewLazyMetricWithTimestamp() API to stability framework. * Aggregate mulitple NodePreference custom priorities to a single score plugin. * test/e2e: check both beta and zone label for getting cluster zone * pkg/util/node: update GetZoneKey to check both beta and GA labels * kubelet: set both deprecated Beta and GA labels for zone/region topology from the cloud provider * Deal with auto-generated files. Update bazel by hack/update-bazel.sh * Migrate custom collector for kubelet * node controller: set both deprecated Beta and GA labels for Zone/Region topology * core/v1: update well known labels for zones/regions to topology.kubernetes.io/zone and topology.kubernetes.io/region, mark beta labels as deprecated * fix: return NodeScore in even pods spread priority * Stop Watching when there is encoding error * Setting Hostname from Pods on EndpointSlice to match Endpoints behavior. * Add --certificate-key flag to token create * Set go version in fluentd-elasticsearch addon * Limiting the scope of new kubectl get e2e tests to decrease flakiness * close the kube-apiserver for taint tests * allow a verifyoptionsfunc to indicate that no certpool is available * Fix the import aliase nodev1beta1 * e2e_kubeadm: fix missing suite --test* flags * make azure fail if feature gates are not registered * update to version 7.3.2 * bumping up log level for not updated node * Update e2e framework WaitForStableCluster function * Add reclaimPolicy,volumeBindMode,allowVolumeExpandsion to kubectl get storage class * feat(scheduler): remove deprecated pattern in scheduler priority * Migrate CheckServiceAffinity custom predicate to Filter plugin * Add CustomCollectAndCompare to testutils which especially for custom collector Add GetRawDesc() to Desc. * json unmarshal coded error at function applyJSPatch() * Check for terminated reason appropriate for containerD and dockershim * adding pods lister * update k8s.io/kube-openapi to 30be4d16710a * Changed unmount function for subpath with dirs * Added test case for subpath mount with file * Renamed function * Changed test case to use `filepath.Walk` * Unmount subpath should only scan the first level dir * pkg/controller: fix staticcheck warning * delete unused func in latencies.go * Restrict visibility of prometheus to enforce usage of k8s.io/component-base/metrics * Fix record_command suppression of test errors * Fix run_kubectl_sort_by_tests * Fix run_pod_tests * Fix assert methods * e2e: Fix error where pods not logged * e2e: remove unused KubectlVersion function from framework/util * tests: Fixes tests for Windows (containerd, RunAsUserName) * Use framework.ExpectEqual() in unit test * Deal with auto-generated files. Update bazel by hack/update-bazel.sh * Migrate custom collector to stablility framework * kubeadm: fix an issue with the kube-proxy container env. variables * Added new test, fixed existing tests. * Create ILB firewall name with prefix "k8s-fw". * feat: update interpod affinity priority with map reduce pattern * remove extra white spaces in v1.16 CHANGELOG * add deprecation warning for alpha.service-controller.kubernetes.io/exclude-balancer label in v1.16 CHANGELOG * hack/update-vendor.sh * hack/lint-dependencies.sh * bump golang/x/... dependencies * bump github.com/go-openapi/jsonpointer v0.19.3 * bump kazel, bazel, gazelle * Update build to go1.13.4 * Fix hack/pin-dependency.sh for go1.13 * Fixup integration tests for TLS1.3 * Move e2e_node flag copy into TestMain * opt out of module mode for builds * Remove unused skip functions * remove featuregate hard requirement from azure legacy cloudprovider * panic in featuregate if a requested feature is unknown * delete EqualPriority priority function, and make registering it a no op * Updating EndpointSlices to use PublishNotReadyAddresses from Services. * Fix apiserver to advertise IPv6 endpoints if bound to IPv6 * skip deployment update if migration fails * Fix storage e2e clean up * add close server missing from serviceaccount test * remove clusterauthentinfo configmap if it is too large * remove exist client hooks * publish cluster authentication trust via controller * Ensure devicemanager TopologyHints are regenerated after kubelet restart * fix golint error * Drop cmd/hyperkube * Script based hyperkube * validates non-resoruce-url * Remove Framework dependency on nodeinfo snapshot * e2e: add defaulting test * apiextensions-apiserver: promote defaulting to GA * Eliminate some default conversions * added --reserved-cpus kubelet command option * Correct spelling mistakes * kubeadm: use versioned component configs * Revert "enabling fluentd on kubemark" * refactor autoscaling utils in e2e * Add sig-scalability-approvers/reviewers as kubemark approvers/reviewers * feat: convert selector spread priority to score plugin * enable profiling by default in the scheduler * Fix watch test to expect Expired instead of Gone * Fix migration tranlation library for ebs * bazel files * Move out const strings in pkg/scheduler/api/well_known_labels.go * e2e: Provide more helpful error output for failing test * Move functions from e2e/framework/util.go Part-2 * add service selector cache in endpoint controller and endpointSlice controller * Stop create hidden metrics for custom metrics * Deal with auto-generated files. - Update bazel by hack/update-bazel.sh * Add collector UT, and it's also an example for custom collector * Provides API for create const metric * Provides register apis for custom collector * Provide custome collector interface and default implementation * Extend prometheus.Desc * tracking nodes with pod with affinity * tests: Fixes minor agnhost error * bump CSI version to 1.2.0 * Mark rbac v1beta1 and v1alpha1 deprecated * Change scheduler ComponentConfig fields to nilable * Support comments in hack/.golint_failures * Aggregate mulitple NodePreference custom priorities to a single score plugin. * Validate scheduler configuration from config file * Write scheduler configuration from config file * Fix golint issues in pkg/kubeapiserver * Make GCE PD Access Mode reflect readonly status when translating an inline read only volume * Modify the status code number to HTTP status semantics * Add/Update CHANGELOG-1.17.md for v1.17.0-beta.1. * Update CHANGELOG-1.17.md for v1.17.0-beta.1. * Ensure CPUManager TopologyHints are regenerated after kubelet restart * Ensure health probes are created for local traffic policy UDP services on Azure * Convert multiple node label predicates to be a single filter plugin. * add event to remove and reject waitingpods * Fix typo in error reporting in graceful shutdown test * Add some more comments to GetTopologyHints() in the devicemanager * Sync all CPU and device state before generating TopologyHints for them * Abstract removeStaleState from reconcileState in CPUManager * fix golint failures of pkg/security/apparmor * expose PredicateMetadataProducer in generic scheduler * restrict max string length in log * use time.Until instead of t.Sub(time.Now()) * Promote NodeLease feature to GA * remove github.com/pborman/uuid * Move funcs of suites.go to e2e.go * migrate callers to g/g/uuid * Build: Use a better filter on find * Fix a TaintBasedEviction integration test flake * Move json,yaml,jsonpath printers to correct locations * Fix golint issues in test/e2e_kubeadm * Isolate configuration of etcd related parameters into a separate function. * Fix golint issues in pkg/controller/volume/persistentvolume/options * Revert "Make writing file via container in tests sync for real this time by enclosing multiple commands in quotes" * support URI SANs in local signer * refactor into seperate authority package * don't use cfssl in signer * also fix nil panic in lease and add tests for #84729 * Add benchmark test to compare EvenPodsSpreadPriority and SelectorSpreadPriority * Switch debugger configuration fields to pointers * Prevent panic due to Annotations being nil map * Additional mount comments * Change wardle API group to wardle.example.com * Modularize TopologyManager policy Merge() tests * Move TopologyManager TestPolicyMerge() to shared test file * Abstract TopologyManager Policy Merge() tests into their own function * Fix comments in TopologyManager * Move function from top-level TopologyManager to best-effort policy * Add Merge() API to TopologyManager Policy abstraction * Globalize a few TopologyManager functions * Pass a list of NUMA nodes to the various TopologyManager policies * Make restricted TopologyManager policy inherit from best-effort policy * Break TopologyManager.calculateAffinity() into more modular functions * Added LessThan() and IsEqual() methods for TopologyHints * vendor github.com/google/go-cmp/cmp/cmpopts * remove dependency on cfssl * Validate custom priority policy config. * Set user agent for e2e consistently * simplify check for IPv6 in kubelet. * feat: add SSE+CMK support for azure disk * change directory permissions from 0755 to 0750 * remove hack/e2e.go * Bumpd NodeProblemDetector * Move funcs of nodeutil to cloud/nodes.go. * Refactor the process to get ip address of loopback interface * Use log functions of core framework on test/e2e/framework/kubelet * cmd:fix staticcheck warning * Autogenerated * Add tags for autogenerating conversions for Option types * Add conversion function to pointer metav1.Time * deprecate cleanup-ipvs flag * Add linux selector to kube-proxy yaml. * autogen files * Fixes error in go_pkg() * manual API changes and code refactoring * Adding e2e test to ensure kubectl get output is using custom columns when desired. * Refactor tests for configure-helper.sh by moving environment config to testdata. * Updated usage of certificate.Manager to use new rotation metric * Make writing file via container in tests sync for real this time * Move functions from e2e/framework/util.go * Optimizing some format problems (#82983) * Do some Kubectl optimizations suggested by the golangci linter * Move json/yaml printer tests to correct location * scheduler: improve some comments and validation messages * fix log and annotation :cidr mask size must be <= node mask * Move funcs of create.go to e2e/storage * publishing: fix typo in rules * cmd/kubeadm/app: fix staticcheck warning * Moves test to new print_flags_test.go * Move small test back to printers_test.go * Skip GetPodNetworkStatus when CNI not yet initialized * Rename test/data directory to testdata * Added rotation metric to certificate manager * Remove checks for PodShareProcessNamespace feature gate * adding test for retrying MarkPodsNotReady * MarkPodsNotReady retry fix * Cleaned up skip functions from e2e framework * Update k8s.io/utils dependency to latest * Ensure EndpointSlice exist if Endpoint is unchanged * Grab init containers logs in e2e tests * feat: add azure disk encryption(SSE+CMK) support * log the reconstructed device and add break * Don't use hardcoded /go GOPATH in benchmark-dockerized.sh * Add lenient decoding path for v1alpha1 kube-scheduler config * Add serathius to sig-instrumentation-reviewers * test/e2e: AddOrUpdateAvoidPodOnNode/RemoveAvoidPodsOffNode: retry when conflict hit during annotation update * feat: make prioritizeNodes private function of genericScheduler * publishing: add 1.17 rules * publishing: remove 1.13 rules * Results of running update scripts: update-openapi-spec * Use log functions of core framework on test/e2e/freamwork/psp.go * Migrate EvenPodsSpread Priority as Score plugin in map/reduce style * Fix rebase issue * Dump GKE windows test logs via diagnostics tool * Force file sync after writing file via container and wait for pod to disappear after removal in test * Change the way of synchronization in staging/.../apiserver stopAllDelegates will signal other functions to stop updating, instead of acquiring a Mutex and never unlock it * Move the common logic of checking for kms-plugin's version into gRPC client interceptor. * Add davidz627 as owner of pkg/volume/csi * Update bazel * Add scheduler cache size metrics * Fixing EndpointSlice port validation * Add HTTP 410 (Gone) status code checks to reflector and relist with RV='' * Only put un-filtered pod in podDeleteList * fixes crd per-version validation field path * propagate proxy env var to kube-proxy * fixes for tests to pass with FIPS compiler * Make k8s.io/kubernetes dependency policy explicit * RequestedToCapacityRatio as score plugin * delete nodeinfo lister * Autogenerated * tags * Cleanup clientcmd conversion * Add lenient decoding path for v1alpha1 kube-proxy * fix build failure after azure go sdk upgrade * Update Azure/azure-sdk-for-go * adding api spec change and generated files in staging * Expose filteredNodes to func PriorityMetadataProducer * Fixes staticcheck failures and golint failures * Update generated files * Add mirror pod e2e test * Inject owner references into mirror pods * update-vendor.sh; updates modules files * moved Pull-InfraContainer to the last * Moves kubectl get subcommand to staging * delete unused cache * switched to use the pause image served from gcr * Update priorities to use SharedLister instead of using the snapshot directly * Update etcd.sh to use v3 endpoint * Use DNS_SERVER_IP as --cluster-dns in all cases. * Add conformance-behavior-approvers to OWNERS_ALIASES * Adding owners file for Endpoint controller utils * switch cni plugin download to be from gcs bucket * Delete extraneous CHANGELOG-*.md files on branch. * Kubernetes version v1.18.0-alpha.0 openapi-spec file updates * retain corefile when migration fails * Cancel context to make sure all plugins are cancelled when each schedule finishes * Fix typo in admission webhook * golint changes * If an iptables proxier sync fails, retry after iptablesSyncPeriod * BoundedFrequencyRunner: add RetryAfter * Make sure score plugins are executed when no priority configured * e2e: share /dev with host in hostpath driver deployment * Deal with auto-generated files. - Update bazel by hack/update-bazel.sh * Remove directly reference to Prometheus * move test specific functions from rc_util.go * [generated] ./hack/update-all.sh * adding validation * copy-pasted internal model w/ field-tags pruned * non-generated api models misc * external api models * Remove unused functions in framework.go * Deal with auto-generated files. Update bazel by hack/update-bazel.sh * Introduce GaugeFunc to stability framework * Update default etcd server to 3.4.3 * improve error handling in cloud node controller * Fix a double lock in test/utils * Fix a data race in registrytest * Prevent 2 goroutines from being leaked if proxy hangs * Handle expired errors with RV>0 in pager, don't full list if 1st page is expired * Avoid going back in time in reflector framework * bazel and gofmt fixes * Fix golint errors in pkg/credentialprovider/gcp * Convert attach-detach controller to use v1.CSINode * Update tests to use v1.CSINode * Kubelet creates v1.CSINode * Move feature gate to GA * generated files * Add CSINode to storage/v1 * Add unit test for scheduler custom policy redeclaration validation * removed powershell-yaml module dependency * kubeadm-validators: bump the latest validated Docker version to 19.03 * Autogenerated * Cleanup conversions * e2e storage: bump revision of sidecars and driver * kubeadm: always add a flex volume path for the controller-manager * add a fallback for kube-scheduler when events.k8s.io is disabled * Adds Windows build information as a label on the node * fix TestInterPodAffinity case * better HostExec - separate stdout and stderr - return command exit code - remove kubectl dependency * Remove prometheus references in test/integration * refactor(*): fix comparison to bool constant, return redundant * Update bootstrappolicy RBAC rules for migration to lease API * Migrate components to EndpointsLeases leader election lock * When schedule begins, run snapshot before prefilter plugins * unit test: TestAdmitUnderNodeConditions * use HostExec and sets.String * simplify global mount points check * Add e2e test to check for filesystem volume device mount cleanup * support local volume with block source reconstruction * Change DescribeItem to local func * kube-proxy: check KUBE-MARK-DROP * reject pods when under disk pressure * Update GetMountRefs comments * move funcs of expect.go to e2e/common * Change FuzzTime to FuzzTimeStrict for naming consistency * Kubectl certificate signing: fix certificate deny message (#84400) * Fix metrics will be hidden in current minor release issue. * remove reference to promhttp in kubelet * Convert NodeLabelPresence custom predicate to filter plugin. * Apply feature gates in scheduler policy api compatibility test * Update PredicateMetadataProducer to accept a scheduler SharedLister instead of nodeinfomap * Update GCE PD CSI Driver YAMLS to v0.6.0 for testing. Enable Raw Block tests * Change all scheduler's Node and Pod list/lookups to be from the snapshot rather than the cache. * Separate e2enetwork from e2e core framework * Handle bazel >= 0.25 in stable metric static analysis * Pass list of files through stdin to avoid hitting ARG_MAX on some environments * Adds some basic READMEs to some of the test images * add status.podIPs in downward api * Building peer-finder on s390x * Fixing comments FuzzDurationStrict and FuzzMicroTimeStrict * Dynamic SNI certificates * Remove Alpha feature Mount Containers * set config.BindAddress to IPv4 address "127.0.0.1" if not specified * Generated code for PodShareProcessNamespace GA * Promote feature PodShareProcessNamespace to GA * Fix deployment e2e test at scale * Run hack/update-generated-protobuf.sh for XMapType * Run hack/update-openapi-spec.sh for XMapType * Add validation for XMapType * Optionally run e2e pod as privileged for SELinux * rename scheduler fake listers * Enable cAdvisor ProcessMetrics collecting * Fix incorrect whitespaces plural * feat: remove suspendedDaemonPods from daemon controller * Add note on the applicability of --grace-period * Move PokeUDP() to e2e service subpkg * Feature-gate CSINode and CSIDriver informer starts * default back to original summary behavior due to prom version bump * Pin dependencies and update vendors * Resolve uncompatibility from update: etcd CAFile -> TrustedCAFIle * Replace github.com/coreos/etcd by go.etcd.io/etcd * Adding FQDN address type for EndpointSlice * kubeadm: remove commented test * drop CRD spec.scope default value in doc (#84271) * Autogenerated code * Cleanup explicitly registered functions * refactored completed metric test refactor for assert * Add strict deserialization for kubelet component config * Add event for pvc in case node expansion fails * Remove wrappers around storage-related listers in the predicate * modify detach timeout to be csiTimeout * tests: Adds guestbook app subcommand in agnhost * change kubelte nodeInfo to nodeLister * Improve iptables logging * Clarify startupProbe e2e tests * Fix service sanity check after jig.ChangeServiceType * Require exact match when calling Get method within fake clientset * Remove obsolete CSI RBAC roles * Avoid registering manual conversion twice * kubeadm: remove ObjectMeta from output.BootstrapTooken * Add XMapType to the extensions API * remove the extra space added * Fix base image discrepancy when building kubemark. * Add integration test for serving cert rotation * Dynamic serving certificate * Do not list apiextensions.k8s.io/v1beta1 in discovery when disabled * Prefer CRD v1 for internal clients * Feature-gate RuntimeClass informer starts * Feature-gate PDB informer starts * feat: remove WaitForCacheSync from scheduler factory * refactored counter_test to use assert statements and renamed variables for consistency * remove reference to promhttp in etcd-version-monitor * interpod affinity prioritize * Adding initial EndpointSlice metrics. * Move CheckLimitsForResolvConf to Kubelet#syncLoop * Update bazel * Use strict unmarshaling for metav1 fuzz targets * Move funcs of networking_utils to e2e network * Forbid label updates by nodes through pod/status * Move TranslateIPv4ToIPv6() to e2e scheduling test * Fix failing service test * Move CreatePodOrFail() * Add Scheduler validation check for redeclared plugin configs * Fix shellcheck failures SC2251 * Fix shellcheck failures SC2128 * Fix shellcheck failures SC2034 * move nodeinfo/snapshot.go into its own package * Bump shellcheck to v0.7.0 * Add an authn cache benchmark * add option to skip verifying kubelet certificates for logs * add cache read type prefix for const * switch system priority class to versioned (v1) api * Fix golint errors in pkg/apis/apps * wire up a means to dynamically reload ca bundles for kube-apiserver * Pod GC controller - use node lister * Allow pod-garbage-collector to get nodes * Make e2eservice.CheckAffinity wait longer, to avoid flakes * pkg/util/workqueue/delaying_queue: export contructor with custom clock * add dynamic cabundle from file * feat: graduate ScheduleDaemonSetPods to GA * Use v1 CRD deletion endpoints in e2e tests * Add permit_wait_duration_seconds metric for scheduler. * Fix timeouts for networking tests in large clusters * fixed node search starting point * support local volume block mode reconstruction * Addon Manager: Fix bug in generate_prune_whitelist_flags * Drop job from scale description * address some comments * Ignore staticcheck again for tableprinter.go * Updates module dependencies due to moving tabwriter.go * Updates file to reference cli-runtime printer package * Removes duplicate TabWriter. Several updates to reference the one remaining TabWriter in cli-runtime. * Moves tableprinter.go and tabwriter.go to cli-runtime/pkg/printers. Copies PrintOptions to cli-runtime/pkg/printers. * Register new explicit conversions * Autogenerated files * Explicit conversion generator * Create Slice string to bool pointer conversion * Create tags for explicit conversion * Increase ClaimProvisionTimeout to 7 minutes * Revert "move hostPID tests to common" * Adds test TestTemplateSuccess (from TestPrinters) * in pkg/controller/service rename service_controller.go to controller.go * fix golint errors in pkg/controller/service * separate listers into their own package * update getmetadata to use unsafe read * Use sigyaml for the metav1 fuzz targets * Move template printer error test to correct location template_test.go * Moves TestTemplatePanic to correct location of template_test.go * Moves TestTemplateStrings to correct location of template_test.go * add allowunsafe read * Update CHANGELOG-1.17.md for v1.17.0-alpha.3. * remove ipallocator in favor of k/utils net package * Comment out an e2eservice sanity check for now * Plumb dynamic SNI certificates * Add mtls support to add/remove-replica * BoundedFrequencyRunner: fix tests * Few improvements to cloud nat * Improve selector * Lower AWS DescribeVolume frequency * Fix volumeMode retrieval when BlockVolume feature is off * Fix startup probe test by checking updated values * feat: remove CheckNodeMemoryPressure/DiskPressure/PIDPressure/Condition predicates * Revert "Disable local block volume reconstruction test" * Upgrade all node pools for gke upgrade test. * set default value of KUBE_MASTER_URL to empty * etcd health check key should have proper prefix * Log the error even if closeFn crashes * Add fuzz targets for Duration, MicroTime, and Time * Extract PodPhase map outside Less func * rename metric for apiserver request terminations and reword corresponding documentation * Ensure script saves results even when tests fail * Add timeout info to kubectl drain logging * Issue 83458:Changed the return check for GetNodeInfo * filter plugin for cloud provider storage predicate * Fix sanity-checking of LoadBalancer services in e2eservice.TestJig * fix windows performance counter father information failed on Non-English environment * Add a metric to track number of scheduler prioritizing goroutines * Add a metric to track number of scheduler binding goroutines * Return an error when zone info is not found. * Fix typo in k8s.io/client-go/tools/cache/index.go * Add an event to pvc when node expand successfully * Stop register to prom registry from legacyregistry * deployment: Ignore namespace termination errors when creating replicasets * job: Ignore namespace termination errors when creating pods or jobs * daemonset: Ignore namespace termination errors when creating pods * replicaset: Ignore namespace termination errors when creating pods * serviceaccount: If namespace is terminating, ignore create errors * endpoints: If namespace is terminating, drop item immediately * namespace: Provide a special status cause when a namespace is terminating * Push context up to cloud node controller. * rename FilterPlugin NodeResources * storage: Deleting a namespace while spec.finalizers pending should not error * Traverse OwnerReference maps more efficiently * kubelet: Record preemptions similarly to evictions * Close the file after reading in verifydependencies#main * remove unused meta and rename lablance_allocated * LeastRequestedPriority/MostRequestedPriority/BalancedResourceAllocation as Score plugins * feat: remove FakePDBLister * feat: implement node unschedulable as a filter plugin * feat(scheduler): replace several algorithm listers with client listers * Refactor scheduler's framework permit API * Remove CSINode from scheduler cache. * feat: update taint nodes by condition to GA * remove hostnetwork from hostpath csi manifest * Clarify the role for SupportedSizeRange * migrate EvenPodsSpread Predicate to Filter plugin * Use --stamp flag in bazel builds * Add note about addon-manager image location * Update to use go1.12.12 * Move LaunchHostExecPod() to e2e network * create an ordered list of nodes instead of iterating over the tree * Use frameworkHandle to get listers * Added go-fuzz target for json serializer Encode/Decode. * Update glbc.manifest to v1.6.1 * Add Namespace to e2eservice.TestJig, make all methods use jig namespace and name * Make e2eservice.TestJig methods return errors rather than failing * Call jig.SanityCheckService automatically after changes * Create benchmarks for ToUnstructured/FromUnstructured. * [migration phase 1] MatchInterPodAffinity as filter plugin * Bugfix kube-proxy README file to list ipvs modules * Convert error messages to use event recorder remove mix protocol validation remove check nil * Clean-up and additional test cases for socket-mask unit test. * feat: several cleanups in the scheduling package * Remove an unneccessary e2eservice.TestJig method * kubectl drain: avoid leaking goroutines * remove usage of the test/test_owners.* files * Use single kms-plugin mock in unit and integration tests. * Relocate tableprinter tests (#84027) * Prefer to delete doubled-up pods of a ReplicaSet * TestGetPodsToDelete: Use field names in test cases * Fix indent in cherry_pick_pull script * GeneralPredicate as plugin config * cleanup unnecessary func parameters in genericScheduler methods * [migration phase 1] CSIMaxVolumeLimitChecker as filter plugin * Plumb dynamic serving certificates * Check PV volumeMode in kubelet even when block feature is off * Tweak use of caching objects * Do not bind block PV/PVCs when block feature gate is off * Prune inactive owners from cmd/kube-controller-manager/OWNERS. * Update Cluster Autoscaler version to 1.16.2 * feat(scheduler): implement node affinity as score plugin * Ensure TaintBasedEviction int test not rely on TaintNodeByConditions * optimize comments on exported constants (#83875) * Add kubectlPath flag to e2e_node.test * make sure filters are executed when no predicates configured * feat(scheduler): use context in the scheduler package * Move CreateNginxPod() to specific e2e * add myself to typecheck / go-srcimporter owners, move rmmh to emeritus * Update release notes for 1.14.8 to reflect AWS bugfix * Fix AWS block volume reconstruction to be like file * Add incoming pod metrics to scheduler queue. * Revert "kubeadm: enable kubelet certificate rotation on primary CP nodes" * wire dynamic tlsconfig up to apiserver * set backup value to ensure connections against kubelets eventually close * choose a more unique request timeout default * Flush data cache during unmount device for GCE-PD in Windows * add insecurebackendproxy * stop removing cni directories as they aren't installed by kubeadm * kubeadm: enhance certs check-expiration to show the expiration info of related CAs * Change node name to env value of HOSTNAME_OVERRIDE * Bump default NodeStatusReportFrequency to 5m * fix errors * Traverse resources before giving no name error * move service helpers to k8s.io/cloud-provider * e2e: remove duplicatd test suites * tests: Extends agnhost netexec udp buffers * Swtich nodelifecyclecontroller to coordination/v1 * Autogenerated * Promote WatchBookmarks feature to GA * Cleanup printer test package. * Removes unnecessary/irrelevant tests * Adds missing tests. * Updates tests to expect metav1.TableRows instead of string, since this is what the "print" functions return. * Moves tangential tests into another file. * add fuzzing targets for sig-yaml and yaml.v2 * Amend CHANGELOG-1.16.md for v1.16.2 * Reworking kube-proxy to only compute endpointChanges on apply. * Updated COS version to M77 * Fix proto.Merge of IntOrString type * Update CHANGELOG-1.16.md for v1.16.2. * Bump bbolt to v1.3.3 * Remove update-storage-objects.sh * framework: Fix a goroutine leak bug in resource_usage_gatherer.go * Update CHANGELOG-1.15.md for v1.15.5. * Update CHANGELOG-1.13.md for v1.13.12. * Update CHANGELOG-1.14.md for v1.14.8. * fix string trim func isBackendPoolOnSameLB in azure * add tombstoones handle for pdb * fix account key getting logic in azure * kubeadm: use strings in TestTokenOutput * Fix memory and timer leak in work queue * Add crictl windows binaries to workspace * Disable local block volume reconstruction test * Rename dashboard-controller.yaml to dashboard-deployment.yaml * Update CHANGELOG-1.17.md for v1.17.0-alpha.2. * fix: scheduler perf test with pod informer * This adds context from for cloud calls for Kubelet. * fix kubectl delete semantic error * remove duplicate function * Add metrics for scheduler framework. * release: lib: revert docker_registry to constant k8s.gcr.io * Hash keys used in cached token authenticator * move scheduler cache ListNodes interface to snapshot * Remove check causing informers to miss notifications * Update Calico to v3.8.3 * Removes pkg/registry/core/secret/storage from golint failures * Support dynamically set log level for kube-scheduler * bump metrics server version o v0.3.6 * Adds --prefix flag to the kubectl log command * feat(scheduler): implement NodePreferAvoidPods as score plugin * enabling fluentd on kubemark * modify error output in cniNetworkPlugin * Deal with auto-generated files. - Update bazel by hack/update-bazel.sh - Update vendor by hack/update-vendor.sh * Remove direct reference to prometheus from apiserver/pkg/storage/value. * Add information from Lease to kubectl describe node * using pod pointers in node lifecycle controller * fix bug of kubelet flag * Upgrade to etcd server 3.3.17 * [migration phase 1] VolumeZoneChecker as filter plugin * Check error return from snapshot Restore * Add warning when --certificate-key is set and --control-plane is not. * Prune inactive owners from cloud-provider related OWNERS files. * Prune inactive owners from api-approver owned OWNERS files. * Prune inactive owners from autoscaling related OWNERS files. * Prune inactive owners from pkg/credentialprovider/* OWNERS files. * Prune inactive owners from pkg/kubelet/* network related OWNERS files. * Prune inactive owners from pkg/controller/* network related OWNERS files. * Prune inactive owners from pkg/* misc api-machinery related OWNERS files. * Prune inactive owners from pkg/volume/* OWNERS files. * Prune inactive owners from staging/src/k8s.io/apiserver/* OWNERS files. * Prune inactive owners from staging/src/k8s.io/client-go/* OWNERS files. * Prune inactive owners from staging/src/k8s.io/sample-controller/OWNERS. * Prune inactive owners from test/e2e/framework/providers/vsphere/OWNERS. * Remove direct references to prometheus from transformation_testcase.go * feat: implement imagelocality as a score plugin * [migration phase 1] PodFitsHostPorts as filter plugin * [migration phase 1] PodFitsResources as framework plugin * move factory package to scheduler * Prune inactive members from cluster/* OWNERS files. * update staticcheck_failures * test/e2e: move GKE/GCE tests from /lifecycle to /cloud/gcp * test/test_owners.csv: remove sig-cluster-lifecycle ownership * Replaced sortable list with native golang slice. * Prune inactive members from OWNERS_ALIASES. * Add CHANGELOG-1.17.md to CHANGELOG.md * clean up for component-base/metrics * [migration phase 1] PodMatchNodeSelector/NodAffinity as filter plugin * fix inconsistent comment in device plugin api * fix staticcheck in test/e2e/common directory * Rename e2e framework functions used locally * Remove test_verify from e2e framework package * [migration phase 1] NoDiskConflict as filter plugin * Move Initialized() to e2e framework util * Rename Generate[Read|Write]FileCmd()s * Move jbeda to emeritus status. * Amending the GMSA e2e test to allow it to run against Windows-only clusters * move PodPreemptor to scheduler * generated * Upgrade to etcd 3.3.17 * Fix crash in kubectl drain * Isolate the logic related to the configuration of kube-apiserver into a separate script. * Fix package name of psp on e2e framework * Mark 'wait until preStop hook completes the process' flaky * apiextensions: npe panic in structural schema unfold * add the ability for dynamic header names in delegated authentication * feat(scheduler): expand node score range to [0, 100] * bump k8s.io/utils to pickup bug fix for rangesize * Address staticcheck failures for test/e2e/lifecycle/bootstrap * Add RainbowMango to sig instrumentation reviewers * [migration phase 1] Implement CheckVolumeBinding as a filter plugin * Improve IPVS Module loader logic * adding support for kubemark --node-labels flag * [migration phase 1] PodFitsHost as filter plugin * fixing sed separator * Revert #83735: Update etcd client to 3.3.16 * chore(*): update election example (#82821) * Fixed bug in TopologyManager with SingleNUMANode Policy * Deal with auto-generated files. Update bazel by hack/update-bazel.sh * Introduce promhttp.HandlerFor to metrics stability framework * Add more tracing steps in generic_scheduler * feat(scheduler): expose SharedInformerFactory to the framework handle * Deal with auto-generated files. Update bazel by hack/update-bazel.sh * Refactor UT with testutil from k/k. * kubelet e2e: run resource monitor only if the actual number of nodes is * e2e test for dualstack phase2 * Implemented taints and tolerations priority function as a Score plugin * Improve 'No resource limits' message * kubeadm: add warning about 'upgrade apply/plan --config' * Add per-pod metrics for scheduler. * Audit of test/* OWNERS files * made scheduler cache and volume binder available when instantiating factories for default plugins * Gofmt. * Topology manager aligns pods of all QoS classes. * Add sig-node-approvers alias * Improve efficiency of csiMountMgr.GetAttributes * Validation: len is measured in bytes * fix static check failures * Update etcd client to 3.3.16 * feat(apiserver): add user-agent and remote info into trace log for endpoints handlers. * Validate AgnhostPod readyness status in e2e tests * Introduce sig-instrumentation aliases in OWNERS_ALISES and simplify OWNERS files * Optimize NegotiateMediaTypeOptions * Update munnerz/goautoneg dependency * kubeadm: remove OutputFlagSpecified from PrintFlags * Promote VolumeSubpathEnvExpansion feature gate to GA * Remove e2e/common package usage in volumemode testsuite * Use latest node-cache version with stubdomain fix. * remove direct references to prometheus/testutil from kubelet/metrics * eliminate direct references to prometheus * Introduce CollectAndCompare to testutils * fix unsafe JSON construction * Fixed bug in TopologyManager with SingleNUMANode Policy * Use log functions of core framework on test/e2e/storage/testsuites/topology.go * feat: feat: change the `pod_preemption_victims` to Histogram * Drop framework.GetReadySchedulableNodesOrDie * Switch admission webhook config manager to v1 * remove the no-op plugin that we used as an example plugin in default registry * Address `staticcheck` failures for `test/e2e/node/...` * Update test/e2e/storage for new GetReadySchedulableNodes stuff * feat: add pod initial/max backoff duration to config API * More work on shuffle sharding utils * Add shuffle sharding utils and tests * Deal with auto-generated files. - Update bazel by hack/update-bazel.sh * Refactor TestRunningPodAndContainerCount with metrics testutil * tag test that taints a node as disruptive * pluralize error metric name * Add RepairVolumeHandle to the csi translation struct * increase auth cache size * Don't log about deleting non-existent affinity entries in userspace OnEndpointsAdd * Addressed comments * CHANGELOG-1.16.md: add note about etcd client bug with IPv6 addresses * pkg/apis/policy: Fix "informatio" -> "information" comment typo * Remove unused method reciever for CSITranslator * Add podCgroup to process kill events to allow for correlation * Use consistent short name for receivers * Added alejandrox1 as test/* reviewer * move util/metrics to component-base * Deal with auto-generated files. Update bazel by hack/update-bazel.sh; Update vendor by hack/update-vendor.sh; * Refactor metrics test from kube-schedule queue. * cmd: fix spelling mistake * Added PredicateMetadata and PriorityMetadata as CycleState to the framework * feat(scheduler): create metadata and addPod/removePod for migration * Making iptables probability more granular in kube-proxy. * Log error from AddIndexers in NewAttachDetachController * Replace deprecated methods in the logic involved in the construction of gRPC connection to kms-plugin. * Up minimum go version to 1.12.4 * Remove the assumption of pod cidr of /24 in the gce window node start up script. * Add unit test for function getSizeRangesIntersection * feat(e2e): refactor hard-coded provision size * Add a new --sort-by flag to kubectl api-resources command * Add known issue to release notes for 1.14.7 * Expose Shutdown func for EventBroadcaster * kubeadm: delete boostrap-kubelet.conf after TLS bootstrap on init * kubeadm: add means to create Node objects via the API client * Mark startupProbe test as NodeAlphaFeature and fix podClient instanciation * Fix attachment of just detached AWS volumes * kubeadm: write boostrap-kubelet.conf during init * Complete output of docker info * typos in old changelogs releases * fix generated-kubelet-plugin-registration * Initial deprecation of kubeadm v1beta1 apis * fix gofmt and golint failures * run hack/update-vendor.sh * Verify metadata schema when decoding unstructured objects in resource builder * update bazel BUILD files * Move pkg/kubelet/pluginregistration and deviceplugin * Show the complete docker info command * Overriding CA file should override skip TLS and CA data * remove the repeat word in documents * Remove stale comment about resyncPeriod * tests: Simplifies image pulling tests * update internal error message * Log the error return from store.Delete * feat(scheduler): expose kubernetes client in framework handle * cleanup v1 event expansion. * Refactored e2e-test-framework util.go * kubeadm: renew certificates on "upgrade node" by default * kubeadm: use CertificateRenewal constant for "upgrade apply" * fix golint errors for pkg/master, together with cheftako * Added the first predicate as a filter plugin: PodToleratesNodeTaints. * Bump dependency github.com/godbus/dbus@v19 (2ff6f7ffd60f) * Bump dependency github.com/coreos/go-systemd@v19 (95778df) * Rename cgroupsystemd.Manager to LegacyManager * Bump dependency syndtr/gocapability@v0.0.0-20180916011248-d98352740cb2 * Bump dependency opencontainers/selinux@v1.3.1-0.20190929122143-5215b1806f52 * Bump dependency github.com/mrunalp/fileutils@7d4729fb36185a7c1719923406c9d40e54fb93c7 * Bump dependency opencontainers/runc@v1.0.0-rc9 * add mtaufen to cluster/gce owners * Requesting Review/Approve privileges for cluster/OWNERS * Move heap into its own internal package * Modified the name of the Extensions method in the scheduler's framework. * vendor: update gomega to v1.7.0 * Fix kube-proxy healthz server for proxier sync loop changes * Add jpbetz as reviewer of api-machinery code * Move privilege e2e test to common * Cleanup reflection usage in framework creation * Fix `test/integration/kubelet` staticcheck failures * remove Get/Set node condition dependency for the ccm controllers * Better distinguish the two kinds of proxy health check servers * refactor tlsConfig creation for secure serving * Reconstruct block PV name in all volume plugins * Fix volume map path during reconstruction * eliminate direct references to prometheus * Test global block directory in reconstruction tests * Return proper error message when BindPodVolumes fails * don't add extra variable for searches * improve explanatory comment about trailing dots in searches * feat(scheduler): scale the extender output in generic scheduler * feat(scheduler): rename PluginContext to CycleState * Allow users to use custom tags * nodeipam-controller:fix static check failures * 127.0.0.1-as-advertise-address * pkg/util/iptables: add Dan Winship to OWNERS * Cap the number of managedFields entries for updates at 10 * Refactor fieldmanager to be more modular * Add klueska as reviewer for CPUManager and devicemanager * Dedupe logging for PD SetUpAt and added a slow SetVolumeOwnership warning * check that N job pods succceeded instead of exactly N pods existing and succeeding * Remove hyperkube from release artifacts * Refactor scheduler.New so that all framework-related parameters are passed as options * Avoid unnecessary identifier computations * Cache encoder for auditlog backend * Clean up TODOs * Remove Prometheus addon and it's tests * Test token output * kubeadm token list: implement structured output * Add internal kubeadm output API * Ability to set up additional, bigger nodes during tests * create new api group output.kubeadm.k8s.io * Reset default namespace deletion timeout to 5 minutes * feat(scheduler): use reflect to reduce the similar pattern * Limit YAML/JSON decode size * Add CHANGELOG-1.17.md for v1.17.0-alpha.1. * Fix double counting issue for request metrics on timeout. * move PodConditionUpdater to scheduler * Update CHANGELOG-1.16.md for v1.16.1. * move hostPID tests to common * Check the return value from store.Update * bump gopkg.in/yaml.v2 v2.2.4 * Remove block volume capability from GCE PD CSI Driver because not supported in v0.5.2 * iptables.Monitor: don't be fooled by "could not get lock" errors * fix metrics-server rbac * Bump version of event-exporter and prometheus-to-sd. * adding pods to MarkPodsNotReady parameters * adding pods to DeletePods parameters * make test pass * Revert "Revert "Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers.""" * feat(scheduler): remove MaxPriority in the scheduler api * kubectl: remove usage info from bad flag error msg * IP validates if a string is a valid IP address * Fix typo in docstring of DeepEqual * Bump nfs provisioner version to v2.2.2 * Use same 'minimum resource version' semantics both when watch cache is enabled and disabled * Run block tests for gce-pd csi driver. Improve skip block test function name * Revert "Bugfix: remove PV dir when umount raw block device" * Fix sig-node test by adding back the numNodes * bazel update * e2e log: move back to framework, part II * .github: add guineveresaenger and mrbobbytables as reviewers * e2e log: Ginkgo 1.10.1 fixes stack skip * e2e log: consistent logging of stack backtrace and failure, part II * e2e log: skip log.Failf in stack information * e2e log: fix full stacktrace with Ginkgo 1.10.0 * kubeadm: add test to detect panics when given certain feature gates * Add link to release notes documentation to PR template * Clean up sig-auth OWNERS_ALIASES * Check whether mirror pod is ciritical in managerImpl#evictPod * remove redundant quota.V1Equals * bazel and codegen files * refactor scheduler extender related API * Don't leak a go routine on panic * Switch from admission-control flag to enable-admission-plugins * A consistent interface for plugin extended functionality * add ability to authenticators for dynamic update of certs * Fix staticcheck failures in `test/utils/...` * add ability to pre-configure poststarthooks for apiservers * fix wrong test in generic-resources.sh * generated * explain lack of finalizer ordering in godoc * Update symlink warning * Use pod + nsenter instead of SSH in mount propagation tests * 1.18 entry in etcd map * Fix shellcheck failures in cluster/validate-cluster.sh * Creating function for preflight check. * Allow ipv6 urls in GetPortURL() * Change XPN firewall change message, should be required by security admin. * Convert predicates/priorities configurations to a framework plugin configs. * custom retry strategy in GenericWebhook * Remove deprecated scalability tests * Merge attach and detach common func * bump versions for v1.17 cycle * adding fakeGetPodsAssignedToNode * Cache serializations * CachingObject * scheduler: make getVolumeLimits a function instead of a method * Implement support for CacheableObject * Fix transformObject to work with CacheableObject. * CacheableObject test * Implement Encoder.Identifier() method * Add Identifier method to GroupVersioner interface * Extend interfaces to support CacheableObject * e2e: on aws, tag volumes we want the cluster to mount * Add bazel by hack/update-bazel.sh * Introduce testutil package to support metrics testing. * complete pkg/scheduler/util unit tests * Only kill process where killing failed during previous iterations * Fix host reuse for e2e tests * Update bazel by hack/update-bazel.sh * Migrate etcd version monitor to metrics stability framework * Update bazel by hack/update-bazel.sh * Remove direct reference to Prometheus * Update bazel and vendor by hack/update-bazel.sh and hack/update-vendor.sh * scheduler: code clean up for predicates/metadata * Remove direct reference to Prometheus. * Removal of kubernetes error dependancies * Update bazel by hack/update-bazel.sh * Remove direct reference to Prometheus from openstack * Fix dynamic kubelet config init order * Delegate topology hint gen to CPU manager policy * Update e2e testing nodePort service listening on same port but different protocols * Add nil checks for Azure CSI translation * Use imageutils instead of hardcoded image paths * Refactor CSI Translation Library into a struct that is injected into various components to simplify unit testing in future * test/e2e: Delete test namespaces asynchronously * Upgrade Calico to 3.8.2 * E2E: Add missing Bootstrap() call * Deflake TestWatchBasedManager * Fix golint issues in pkg/util/env * Fix help text in kubectl top -h * scheduler: handle error of podSpreadCache.removePod method * Update bazel by hack/update-bazel.sh * Remove direct reference to Prometheus.Label for vsphere * Update bazel by hack/update-bazel.sh * Remove direct reference to prometheus.Label for scheduler * replace bytes.Compare() with bytes.Equal() * Cleaned up skip* functions from framework/util.go * Fix aggressive VM calls for Azure VMSS * Address PR comment * Update service controller to prevent orphaned public IP addresses * Use log functions of core framework on [r-u] * using STACKDRIVER_ENDPOINT to set exporter sd endpoint according to cluster env * add a known issue in 1.16 for kube-scheduler * Enable strict serializer with codec factory * using online instead to fix kubelet service failed with wrong number of possible NUMA nodes * Improve error message for projected tokens when API is not enabled * add test to show generic pod count counts all pods * Bugfix: remove PV dir when umount raw block device * migrate leader election to lease API * add comment explaining why we remove trailing dots in searches * Bump addon-resizer to 1.8.6 * Remove direct reference to prometheus.Label from metrics API. * use log functions of core framework * feat(scheduler): consolidate ScoreWithNormalizePlugin into ScorePlugin * A mapping from predicates/priorities to pluing configuration. * Only detecting stale connections for UDP ports in kube-proxy. * Update to use go1.12.10 * Prune should respect namespace * Update crictl to v1.16.1. * Apply current parses the yaml object 3 times * Add tests and benchmarks for endpoints and node * Fix golint errors in pkg/apis/core (#82919) * Properly close the file in makeFile * Fix typo * using short flags instead with validate * kubeadm: update OWNERS for 1.16 * bump k8s.io/utils to pickup ipallocator changes * Optimize GetControllerOf method * Use pod + nsenter instead of SSH in block volume tests * Adding lifecycle to RC, RCSet, Deployment, and Job testutils * Modify test so that +genclient:nonNamespaced tag is exercised * Corrected the pod reporting and messages * fix cpumanager reconcileState without sourceready * Plumb context to webhook calls * Propagate context to ExponentialBackoff * Fix a new staticcheck issue. vendor/k8s.io/apiextensions-apiserver/pkg/controller/finalizer/crd_finalizer.go:167:2: this value of crd is never used (SA4006) * Fix staticcheck issues: Dealing with unused functions/variables/types. (staticcheck U1000) Dealing with value never used issue. (staticcheck SA4006) Dealing with concurrency issue. (staticcheck SA2002 SA4010) Remove packages from staticcheck failure files: apiextensions-apiserver * fix default daemonset update strategy * Remove unnecessary sorting for highestSupportedVersion * Fixing EndpointSlice kubectl output * Allow disruptive conformance tests and marks 2 * Adding owners for EndpointSlice controller * Remove unnecessary traversal of pod.Status.Conditions * Stop building the kubernetes-test mondo tarball * Add e2enode.GetRandomReadySchedulableNode, replace some uses of framework.GetReadySchedulableNodesOrDie * Add e2enode.GetBoundedReadySchedulableNodes, replace some uses of framework.GetReadySchedulableNodesOrDie * Fix up e2enode.GetReadySchedulableNodes, replace many uses of framework.GetReadySchedulableNodesOrDie * An interface that allows pre-filter plugins to update their pre-calculated. * Move GetPodPriority from /scheduler/util to /api/pod * Propagate context to Authorize() calls * Add context-propagating CreateContext methods to *Review clients * Run hack/update-bazel.sh * Add support for type checking Unstructured via GVK in reflector * remove trailing dots from the parsed searches from host resolv.conf * Fix bug The statefulset have duplicate revision after resource was updated * fix Security Context should run with an image specified user ID * to use existing validating function * Update bazel by hack/update-bazel.sh Update vendor by hack/update-vendor.sh * Migrate prometheus bucket functionality to metrics stability framework. * Migrate stability level handle functionality overall metrics package * Handle metrics.StabilityLevel default value better. Provide a method setDefault() to StabilityLevel type. Update bazel by hack/update-bazel.sh * Updating EndpointSliceCache sort function to be significantly faster. * Use ipv4 in wincat port forward * Rename package socketmask to bitmask. * auth/cloud-platform is a superset of devstorage. * Fix staticcheck failures for scheduler packages * Fix staticcheck failures for pkg/scheduler/... * Fix the cluster role for typha horizontal scaler. * Updated ContextData and PluginContext with Clone methods. * Copy PrettyPrintJSON to core framework * Add strict serializer to codec factory in kube-proxy * Add KUBE_COVER_REPORT_DIR to specify coverage output dir. * make namespace-lifecycle controller more responsive * Update go mod hcsshim version to fix the kube-proxy issue cannot access service by self nodeip:port on windows * Add known issue for informer-gen for packages with dots * use vmss instance view expansion and azure-sdk v33.1.0 * Update codegen violation rules * Update generated code * Add example3.io:v1 to update-codegen.sh * Add example3.io * Revert "Updated COS version to M77" * Wrap promethues.Labels to stability framework. * fix: remove reportingInstance field in eventKey. * informer-gen: allow package names containing dots * fix docker_build_opts bound variable * Bump metrics-server version to v0.3.5 * Bump k8s.io/klog to v1.0.0 * Use log functions of core framework on test/e2e/upgrades This makes sub packages of e2e test upgrades to use log functions of core framework instead for avoiding circular dependencies. * Use log functions of core framework on test/e2e/autoscaling This makes sub packages of e2e test autoscaling to use log functions of core framework instead for avoiding circular dependencies. * hack/local-up-cluster.sh: ability to configure auth webhooks * using echo to print args * clean up code for scheduler * cleanup unused function * Fix EndpointSliceController service deletion processing * Remove unused func GetPersistentVolumeClaimVolumeMode * Minor cleanup of jsonFallbackEncoder * feat: bump github.com/prometheus/procfs to v0.0.2 * feat: bump github.com/prometheus/client_model to v0.0.0-20190129233127-fd36f4220a90 * feat: bump github.com/beorn7/perks to v1.0.0 * feat: bump github.com/prometheus/client_golang to v0.9.4 * feat: bump github.com/prometheus/common to v0.4.1 * Remove unreachable error check in RBDUtil#cleanOldRBDFile * Offical kubernetes dashboard should schedule to linux node * Come out of loop when RPC_STAGE_UNSTAGE_VOLUME is found * Fix golint failures of pkg/kubelet/status/... * Check error return from WaitForCacheSync * Bind kube-proxy containers to linux nodes to avoid Windows scheduling * fix(pkg): delete unused var or const * Remove some unused codes in stateful_set_utils.go * storage E2E: test drivers must have DNS-1123 names * use scheduler.Option in initTestSchedulerWithOptions * use scheduler.New in createConfiguratorArgsWithPodInformer * change compatibility_test struct, remove ExpectedPolicy * validate scheduler policy instead of the decoded policy in compatibility_test * remove factory.NewConfigFactory in compatibility test * Rename testCleanup to driverCleanup * add topology e2es to storage testsuite * Fix kubectl panic when handling invalid error. * Replace hyperkube with apiserver for binary path guess * docs: add comments for action. * fix map assignment to entry in nil map,when use --feature-gates in kubeadm * Register DeleteOptions conversion functions * Minor apis/meta cleanup * simplify regexp with raw string * Use framework.ExpectNotEqual() * fix(test): delete unused unused var or const * Use framework.ExpectEqual() * Use framework.ExpectEqual() * Use framework.ExpectEqual() * Use framework.ExpectEqual() * Move PodPriorityResolution e2e to integration * WithAuthentication should wrap WithMaxInFlightLimit * Improve fieldmanager tests and benchmarks * Allow relaxing deleted pods checking in RC runner * Refactor the scheduler's configuration logic. * Defer the removal of labelAlphaNodeRoleExcludeBalancer to 1.18 * Fixed a scheduler panic on PodAffinity * Benchmark test for PodAffinity * TokenCleaner#evalSecret should enqueue the key * Update 1.16 CHANGELOG with introduction of feature EvenPodsSpread * eviction processing refactor * fix cni timeout * Clean up redundant post-finalizer deletions * Add a couple simple conversions * replaced logs in validators to be warnings * Fix pre pull of images in DiskPressure tests * delete unused var * Fix closing of dirs in doSafeMakeDir * Remove redundant setting. * Fix wrong comments and inaccurate logs in endpointslice_controller * Add .bazelversion file * Fix typo in v1.16 CHANGELOG * cleanup test code in upgrades and autoscaling pkg * Break out of loop when NodeHostName is found * Modified the Filter interface to pass in nodeinfo instead of node name. * exclude kms provider from health check * Convert tbe e2e to integration test * Drop v1.14.0 API test data * Add v1.16.0 API compatibility data * Update CHANGELOG-1.14.md for v1.14.7. * Update CHANGELOG-1.15.md for v1.15.4. * fix shellcheck in cluster/gce/config-common.sh * Update CHANGELOG-1.13.md for v1.13.11. * Update CHANGELOG-1.16.md for v1.16.0. * Do not query the cloud if PV has all the labels * Refactor and clean up e2e framework utils. This patch handles test/e2e/framework/pv_util.go file * fix rbd info when return warning information * Add version logging to kubemark * Return error when failed to get storage class * uses the API instead to fixemptyDir volumes pod should support shared volumes between containers * fix kubectl run --generator=xxx bug * Add metrics of authentication overall latency. Add alpha tags to authentication_attempts explicitly. * Fix static failure for package: staging/src/k8s.io/code-generator * Fix reinvokation test flake by isolating webhooks and markers * Bump github.com/heketi/heketi to c2e2a4ab7ab9 * Fix Errorf arguments in tests * dump namespace object in e2e when it doesn't get deleted * Support kube-dns stubDomains in nodelocaldns * Consolidate UID and GID * Only set ipv4/ipv6 routes when there is corresponding CIDR. * Correct the error variable for releasing CIDR * Compact memory before requesting huge pages * Add iptables.Monitor, use it from kubelet and kube-proxy * remove unused variables in scheduler api types * Move flag parse to main func from init() * autogenerated * IntOrString conversions * Remove unneded/bad conversion * fix compiling failure: execvp: /bin/bash: Argument list too long * update process name to fix pod infra containers oom-score-adj should be -998 and best effort container's should be 1000 * feat(scheduler): use api server to watch scheduled pods * fix error package name and rename struct * remove pkg/version and some of redundant copies of it * Updated COS version to M77 * Allow upgrade test to run on all cloudproviders * Metrics for ratelimited count * fix auth import statement * validations: for negative PVC storage size don't report "must be >= 0" * reference cherry pick process in hack script * kubeadm --service-cluster-ip-range supports a comma seperated list of service subnets. * Adjust nginx lb timeout in tests * fix static check failures in staging pkg * rm unnecessary return * Update bazel by hack/update-bazel.sh * optimize gc_controller.gcTerminated * del unuse var in pkg/controller * Migrate prometheus bucket functionality to metrics stability framework. * Migrate prometheus bucket functionality to metrics stability framework. * Update bazel by hack/update-bazel.sh * Migrate prometheus bucket functionality to metrics stability framework. * local-up-cluster kube-proxy terminated error * Update bazel by hack/update-bazel.sh * Migrate prometheus bucket functionality to metrics stability framework. * Check the length of recorder.invocations * Drop iptables firewalld monitoring support * e2e: test that both kube-proxy and kubelet recover after iptables flush * use log funcs of core framework in the auth, kubectl and windows pkg * replace with * add-err-handling-in-images/etcd/migrate * use log func in test/e2e/apimachinery * add or fix some errors return statements and ineffassign * expose and use an AddHealthChecks method directly on config * skip e2e tests that run on multi node cluster and require node independent volume for the drivers that does not support node independent volumes, like hostpath * Fixes static check failures in test/e2e_node/* * Updates to resolve shellcheck issues Removed hack/lib/test.sh from /hack/shellcheck_failures Removed and }s to satisfy shellcheck SC2004 Added double quotes to satisfy shellcheck SC2086 Converted array reference to access all elements to satisfy shellcheck SC2128 Updates to satisfy shellcheck SC2143 Updates to satisfy shellcheck SC2178 & SC2124 Updates to satisfy shellcheck SC2128 Updates to satisfy shellcheck SC2207 * Allow v1 review versions in 1.17+ * Added a noop plugin to make sure we have the dependencies worked out for the default registry of the scheduler framework. * Update CHANGELOG-1.16.md for v1.16.0-rc.2. * Verify the response audience matches one of apiAuds * Fixed an issue where duplicate containerPorts where not allowed across different address families * use log func in test/e2e/network * apiextensions: add integration test for not publishing non-structural CRDs * Fix TestBlockMapperMapDeviceNotSupportAttach informer sync race * Update golang scientific notation using hack/update-gofmt.sh * fix kubelet status http calls with truncation * Split fieldmanager with interface * Support running custom nodelocaldns yaml in gce. * Only publish openapi for structural schemas * Promote lease API test to Conformance * Omit openapi properties if spec.preserveUnknownFields=true * Ensure conversions are registered for metainternalversion codecs * migrate scheduler api types to sized integers * replace 200 with http.StatusOK * fix: azure disk detach failure if node not exists * kubeadm: preserve order of user specified apiserver authorization-mode * adding lock to node data map * Update bazel by hack/update-bazel.sh * Migrate prometheus bucket functionality to kube-metrics. * Upgrade stackdriver-logging-agent image to 1.6.17 to fix CVEs. * Fix iptables version detection code to handle RHEL 7 correctly * Always set content-type & nosniff * Add note on the role of BenchmarkSimpleCache * Refactor FieldManager tests to make them simpler * Replacing deprecated seccomp. * Adding recommendations from tallclair. * Fix identation issue. * Update .in and .sed files. * Harden kube-dns to run with less privileges. * Add johnbelamaric as conformance approver * Fix ipv6 ip allocation method for standard lb * Make API constants constant * Scheduler PreBind plugins are currently allowed to return Unschedulable status, which should not according to the KEP and comments. * Check the error return from AddPlugin * Propagate and honor http.ErrAbortHandler * Break out of the loop when active endpoint is found * Add wrapper to metrics stability framework for prometheus buckets functionality * Add unit test for RS to correctly handle expectations on recreate * Exec probes should not be unbounded * Add 16MB limit to dockershim ExecSync * Add LimitWriter util * Fix EvaluatedNodes in ScheduleResult * Expose etcd metric port in tests * MOD:fix spelling errors * MOD:fix spelling errors * need to use local variable so that pluginNameToConfig map can keep correct contents * Remove duplicate logging * test: add cases to test that no images present on node or kubelet's NodeStatusMaxImages flag is set to 0. * Added OWNERS file for Topology Manager * Modify the log of kube-proxy * change envelope transformer to return status error for better monitoring * Regenerate specs * Remove alpha status from ManagedFields * dockershim/network: fix panic for cni plugins in IPv4/IPv6 dual-stack mode * Update CHANGELOG-1.16.md for v1.16.0-rc.1. * adding yastij as a reviewer for the runtimeclass admission controller * add apigroup to the data source when using kubectl describe pvc * 'imagetag' -> 'image' in edit set command examples * Log all executed iscsiadm commands * test: fix liveness pod * fix: handling unpadded base64 encoded docker auth field * add line break in kubeadm upgrade logging message * remove packages in hack/.staticcheck_failures which are passing staticcheck * Fix typos in KeyUsage constant names * Continue with remaining volumeAttached's in VerifyVolumesAreAttached * Remove me from OWNERS for GCI * Avoid encoding from competing goroutines * Nominate alculquicondor to scheduler reviewers * Generated files * Export UserInfo conversion, use authnv1.UserInfo in audit * log-dump: make logging clearer * remove packages in hack/.staticcheck_failures which are passing staticcheck * fix some ineffassigns * e2e_kubeadm: fix command flags description * tests: Replaces Redis image with Agnhost * endpoints: fix admission test types * fix some missing errors return statements * fix ineffassign * kubelet: refactor server containerLogs test to table driven test * feat: remove EnableAggregatedDiscoveryTimeout feature gate * feat: remove GCERegionalPersistentDisk feature gate * feat: remove PersistentLocalVolumes feature gates * Return proper Kind in error for Cacher * Update comment for syncHandler * Fix licenses * Match label and fields selectors in ComponentStatus List API * init check for cloud node controller * Check cache is synced first before sleeping * Handle pod addition / removal errors * fix indentation with 'kubectl describe node' * Encryption config: correctly handle overlapping providers * Added alejandrox1 as test/e2e/framework reviewer * squash: reaction to comments * add conditions for remaining object totals during ns termination * Create LoadBalancer in nginx ingress tests * kubeadm: code clean up * Clarify retry.RetryOnConflict docs * Restore retry.RetryOnConflict docs, fix up retry.OnError docs/naming * Fix reviewer typo. * use log functions of core framework in the 'test/e2e/storage/*' * fix a typo in cmd/kube-apiserver. * Promote PQDN for services DNS e2e to Conformance * Move from regexp to csv string * clean up test code * inline e2eservice.CreatePausePodDeployment into tests * Move a bunch of totally non-jiggy code out of e2eservice.TestJig * Enable block tests for Cinder * update spelling mistakes * Add e2e test for kubectl describe cronjob * Remove dead code used only in tests * fix(scheduler): remove the defer function cost * refactor: replace all calls to os.Exit() / CheckErr(). * Avoid conflicting log message when AddPodToVolume encounters error * Add comment for testing 100+ CPU usage * Bump gonvml module and remove CGO dependency. * test: fix azure disk test failure * Cleanup staticcheck from staging/src/k8s.io/client-go/tools/cache. * test: fix azure disk e2e test failure * Repaire incorrect ip version event * Remove unused func IsProxyLocked * Add unit test for DisruptionController retry logic * pkg/kubelet: fix uint64 overflow when elapsed UsageCoreNanoSeconds exceeds 18446744073 * add identification for particular certificate controllers * fix regex for go file, make it more accurate * replace time.Now().Sub with time.Since * openstack: do not delete LB in case of security group reconciliation errors * Update security contacts for kubectl * fix shellcheck failure in gci/flexvolume_node_setup.sh * volume scheduling: move metrics code into a separate pkg * Don't require any resources in race test * Mark Ceph tests as serial * hack/boilerplate/bolierplate.py: format python file according to PEP8 guidelines * fix shellcheck failures of cluster/addons/addon-manager/kube-addons.sh * fix golint failures of pkg/kubelet * e2e test: Label all nodes in pod anti-affinity test. * Fix description of diff flags. * Add debug info to kubectl e2e * Use Key() in Path composition * Fix a static check failure in controller-manager * Fix retry logic in DisruptionController * Move Update Apply conflict test to field manager test * Early return after sending to errCh in Options#eventHandler * clean-up shared metrics code and remaining references (component-base's copy is a drop in replacement) * Add new flag for whitelisting node taints * Adding termination grace period to Deployment, RC, RCSet, and Job * Add LinuxOnly tag to e2e testing session affinity * Kubenet can't fail fast on teardown * delete extra comma * Add IPv6 support to kubenet hostport * Fix broken link. * Use log functions of core framework on test/e2e/scheduling * Reword the comment for ServiceIPRange * Remove default service cidr * Updated stripFieldsTest to be run with update instead of apply * Made some spelling & grammar edits to the README * Remove Client#ClusterAvailable from interface * replace iteration with hashmap in *state_of_world * Typo fix: binded -> bound * Take the context as the first argument of Schedule * Fix sync pod log format and a func typo. * Rewrite tests for tableprinter.go * Reduce redundant Nodes().List() call * Reduce indents of DumpAllNamespaceInfo() * Explicitly handle returned error values in admission metrics_test * fix wrong typo stoageMap to storageMap * Cleanup UT test data after test done. * fix shellcheck failure in test/image/image-util.sh * Moved managed fields validation to server-side apply * Remove recursion in waitForVolumeDetachmentInternal * Break out of loop when finalizer is found * add myself to util metrics owners * replace factory.NewConfigFactory with scheduler.New in volumescheduling * Update ConfigMap test * add logicalhan to reviewers for api-machinery directories * remove blank lines * Add a method to TestContext to check if is IPv6 * use log functions of core framework * use log funcs of core framework in the test/e2e/scalability and test/e2e/cloud package * cleanup test code in lifecycle, servicecatalog and ui package * Fix typo in kubectl describe docs * Typo fix: EptyDir -> EmptyDir * fix typo in pkg * Remove unnecessary factory layer * Fix typo in EnableInf*l*ightQuotaHandler flag * Remove duplicated log. * feat: remove factory.Config from mustSetupScheduler * feat: use scheduler.New instead in createSchedulerConfigurator * Fix static failure from package: vendor/k8s.io/kube-aggregator * added override for sd testing env in event-exporter yaml * aws: sort addresses of multiple interfaces correctly * Add support for preemptible instances in node-e2e * fixed typos in kubectl book * Apply will fail with managed fields + tests * fixed a typo in kubectl book * Apply zero TerminationGracePeriodSeconds to preemption victims * remove runtime.VersionedObject from universal apimachinery * Fix Container exit message lost due to FallbackToLogsOnError is not compatible with ContainerCannotRun * Drop hyperkube use from local-up-cluster.sh * Add -s to du commands to not traverse other file systems * Fix golint failures of pkg/kubelet/qos * feat: remove deprecated include uninitialized flag * remove apiserver loopback client QPS limit * Fix informer-gen to honor nonNamespaced tag * Fix link to moved Docker image * very minor grammar fix in 10-kubeadm.conf ('generate' instead of 'generates') * removed duplicated kubectl get * removed extra hyphen in kubectl book * Fix log level for runtime error in kubelet.go * Add benchmarks for yaml marshaling and unmarshaling * Delete the redundant define test * Revert "Revert "[Re-Apply][Distroless] Convert the GCE manifests for master containers."" * correct the return information in scheduler.go * fix typos in if statememnt in /test/e2e_node * spelling error 'doen't' * fix syntactic error in kuberuntime_manager.go-2 ------------------------------------------------------------------- Sat Nov 30 15:03:42 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org> - Convert changes file to proper UTF-8 format: new version of RPM are getting strict in interpreting files. ------------------------------------------------------------------- Wed Nov 27 11:10:35 UTC 2019 - rbrown@suse.com - Update to version 1.16.3: * kubeadm: fix skipped etcd upgrade on secondary cp nodes * Add testcases covering large valid patches * json unmarshal coded error at function applyJSPatch() * Stop Watching when there is encoding error * Remove HostPathV0 tests in preparation for removal in 1.17. This is so that upgrade tests dont fail when support for v0 drivers are removed in k8s 1.17 * add cache read type prefix for const * update getmetadata to use unsafe read * add allowunsafe read * Flush data cache during unmount device for GCE-PD in Windows * add a fallback for kube-scheduler when events.k8s.io is disabled * modify detach timeout to be csiTimeout * fix windows performance counter father information failed on Non-English environment * bump metrics server version o v0.3.6 * Bump metrics-server version to v0.3.5 * rename metric for apiserver request terminations and reword corresponding documentation * pluralize error metric name * Fix double counting issue for request metrics on timeout. * Do not bind block PV/PVCs when block feature gate is off * Return an error when zone info is not found. * Use --stamp flag in bazel builds * Update to use go1.12.12 * Update Cluster Autoscaler version to 1.16.2 * add tombstoones handle for pdb * Amend CHANGELOG-1.16.md for v1.16.2 * Fix proto.Merge of IntOrString type * Bump to etcd 3.3.17 and bbolt v1.3.3 * Add/Update CHANGELOG-1.16.md for v1.16.2. * Kubernetes version v1.16.3-beta.0 openapi-spec file updates * release: lib: revert docker_registry to constant k8s.gcr.io * Remove check causing informers to miss notifications * auth/cloud-platform is a superset of devstorage. * Remove e2e/common package usage in volumemode testsuite * Mark startupProbe test as NodeAlphaFeature and fix podClient instanciation ------------------------------------------------------------------- Wed Oct 16 10:08:39 UTC 2019 - rbrown@suse.com - Update to version 1.16.2: * apiextensions: npe panic in structural schema unfold * Fix dynamic kubelet config init order * Fixed bug in TopologyManager with SingleNUMANode Policy * Merge pull request #83102 from feiskyer/fix-too-many-calls * Address PR comment * Update service controller to prevent orphaned public IP addresses * Limit YAML/JSON decode size * bump gopkg.in/yaml.v2 v2.2.4 * Add/Update CHANGELOG-1.16.md for v1.16.1. * Kubernetes version v1.16.2-beta.0 openapi-spec file updates * Don't leak a go routine on panic * using online instead to fix kubelet service failed with wrong number of possible NUMA nodes * Update go mod hcsshim version to fix the kube-proxy issue cannot access service by self nodeip:port on windows ------------------------------------------------------------------- Fri Oct 04 14:16:51 UTC 2019 - rbrown@suse.com - Update to version 1.16.1: * Deflake TestWatchBasedManager * Update to use go1.12.10 * remove apiserver loopback client QPS limit * Use ipv4 in wincat port forward * Update codegen violation rules * Update generated code * Add example3.io:v1 to update-codegen.sh * Add example3.io * informer-gen: allow package names containing dots * Update cluster autoscaler version to 1.16.1 * Fix ipv6 ip allocation method for standard lb * fix map assignment to entry in nil map,when use --feature-gates in kubeadm * Fix closing of dirs in doSafeMakeDir * Fixed a scheduler panic on PodAffinity * TokenCleaner#evalSecret should enqueue the key * Only set ipv4/ipv6 routes when there is corresponding CIDR. * Add/Update CHANGELOG-1.16.md for v1.16.0. * Kubernetes version v1.16.1-beta.0 openapi-spec file updates * expose and use an AddHealthChecks method directly on config * fix: azure disk detach failure if node not exists * Exec probes should not be unbounded * Add 16MB limit to dockershim ExecSync * Add LimitWriter util * Encryption config: correctly handle overlapping providers * Check cache is synced first before sleeping ------------------------------------------------------------------- Tue Oct 01 13:41:59 UTC 2019 - rbrown@suse.com - Update to version 1.16.0: * Add/Update CHANGELOG-1.16.md for v1.16.0-rc.2. * fix kubelet status http calls with truncation * Expose etcd metric port in tests * Only publish openapi for structural schemas * Omit openapi properties if spec.preserveUnknownFields=true * Fix iptables version detection code to handle RHEL 7 correctly * Propagate and honor http.ErrAbortHandler * Updated stripFieldsTest to be run with update instead of apply * Moved managed fields validation to server-side apply * Apply will fail with managed fields + tests * Regenerate specs * Remove alpha status from ManagedFields * Add/Update CHANGELOG-1.16.md for v1.16.0-rc.1. * Update Cluster Autoscaler version to 1.16.0 * Fallback to schemaless apply behavior for custom resources with unhandled schemas * Improving GCE cluster up logic for EndpointSlice Controller * Add read-only rbac for csinodes to cluster-autoscaler * Update cluster-autoscaler image to v1.16.0-beta.1 * Update kubernetes dev setup instructions * Update client-go install instructions * Fix wrong command in e2e agnhost utility function * Fix filter plugins are not been called during preemption * Adding a nil check in endpointslicecache * Simplify etcd image version usage in kubeadm * Add etcd image version to kubeadm * Ensuring endpointslice controller starts up as part of cluster up when all alpha feature gates are enabled * kubeadm: Fetching kube-proxy's config map is now optional * Prevent resultPod.Status.ContainerStatuses from being empty. * Add dns capability to GCE window cluster * rebase * Add comment * Adding ENABLE_STACKDRIVER_WINDOWS * Install and start logging based on kube env * Add/Update CHANGELOG-1.16.md for v1.16.0-beta.2. * Update CHANGELOG-1.16.md for v1.16.0-beta.2. * Fixing bugs related to Endpoint Slices * kubelet e2e: defer the close to after the error check * skip recording inputs & outputs in fake script plugin when CNI_COMMAND=VERSION * bump metrics-server version to v0.3.4 * in GuaranteedUpdate, retry on precondition check failure if we are working with cached data * test * Make sure loadbalancer service is deleted before exiting the test * fix namespace termination conditions to be consistent and correct * Ensure the KUBE-MARK-DROP chain in kube-proxy mode=ipvs * Add integration test for webhook client auth * Plumb service port, URL port to webhook client auth resolution * Search client auth with and without port * Update NodeSSHHosts to support clusters with some public nodes * add ready plugin to dns tests * kubeadm: Form correct URL for IPv6 in HTTPProxy check * Remove symlink support from kubectl cp * Register all volume plugins in kubemark * persistentvolume-controller: fix data race of non-deepcopied objects in fake client * Allow typha-cpa to get apps/deployments * e2e log: fix time stamp normalization in unit test * Made IPVS and iptables modes of kube-proxy fully randomize masquerading if possible * using const instead * test(runtimeclass): add e2e tests for runtimeclass scheduling * Ensure backend is ready in listing webhook e2es * Honour "nbf" claim if present in ID token * Make CRD conversion e2e tests robust in non-aggregator-routing clusters * Make admission webhook e2e tests robust in non-aggregator-routing clusters * Make CRD admission webhook e2e work in parallel test environments * Add readiness probes to CRD/Admission webhook pods * Fix failure running `make build test` in cluster/images/etcd * Update default etcd server to 3.3.15 for kubernetes 1.16 * promote crd discovery e2e to conformance * Adding kubectl support for EndpointSlice * Add support for konnectivity service to the etcd3 client. * update cAdvisor godeps to v0.34.0 release * Add /readyz endpoints to converter/webhook test image * Move HostUtil to pkg/volume/util/hostutil * Add discovery docs crd e2e test * use the existing request info * use the same context for aggregated and proxy requests * add temporary feature gate to allow disabling aggregated discovery timeout * add env var to allow disabling the aggregated discovery timeout * add a timeout for proxying discovery requests * Single-numa-node Topology Manager bug fix * Added Single NUMA Node Policy which ensure resource are aligned on a single NUMA node * Update CanAdmitPodResult() in TopologyManager to take a TopologyHint * fix nit * run hack/update-vendor.sh * Remove defaulting for x-k8s-list-type * Update generated * Fix validation and add many tests * Use CRD validation field in server-side apply * Update kube-openapi version * fixed golint error * Adding EndpointSlice RBAC for node-proxier/kube-proxy * ipvs dualstack: generated items * create meta-proxy for proxy-mode=ipvs (dualstack) * Adding EndpointsAdapter for apiserver EndpointSlice support * Added support for ILB Global Access * startupProbe: make update * startupProbe: Test changes * startupProbe: Kubelet changes * startupProbe: API changes * Fix Windows disk usage metric measurement * wire up the webhook rejection metrics in webhook handlers * test * add webhook rejection metrics * add /livez as a liveness endpoint for kube-apiserver * Promote admission webhook e2e tests to conformance * webhook-e2e: add denying CR update test case, check CR patch and * Fixed comment to refer to the right int accessor for Quantity * Update semantics to set Preferred field in TopologyHint generation * Write the Stackdriver config separately from the installation. * bazel update * e2e logging: disable brittle output test * Promote CRD e2e tests to conformance * Update NPD addon to use v0.7.1 * Update CPUManager topology helpers to accept multiple ids * Update RuntimeClass E2E expectations * cmd/kubeadm: remove "rpc/status" from import-restrictions * vendor: update with "update-vendor.sh" script * k8s/apiextensions-apiserver/test/integration: block etcd client creation until connection is up * test/integration: block etcd client creation until connection is up * kubeadm/app/util/etcd: : block etcd client creation until connection is up * cluster/.../etcd/migrate: block etcd client creation until connection is up * Update running_pod_count and running_container_count metric * Add !providerless tag * Adding an e2e test on GMSA support * Fix out of bounds error in timeout tests * bump coredns version in kubeadm to 1.6.2 * Remove kubectl log * update dependencies file * hardcoded check sha of corefile tool * Add pre pull of e2e images after DiskPressure test * Fix static check errors * Use k8s.io/utils package * Update modules for openstack staging. * Fix linting errors on provider staging * Move Openstack provider to staging * Add devicemanager tests for TopologyHint consumption * Consume TopologyHints in the devicemanager * Add devicemanager tests for TopologyHint generation * Generate TopologyHints from the devicemanager * Added stub support for Topology Manager to Device Manager * Change Topology.NUMANode in device plugin interface to a repeated field * Update generated files * generated * apiextensions: merge openapi spec ignore path conflict * add a test to make sure the CRD OpenAPI path and defintion are protected * Add tests for namespace status conditions * Add status conditions to namespaces * fix(kubectl): all-namespaces flag being ignored by ToBuilder() in builder_flags.go * use directly DeletionHandlingMetaNamespaceKeyFunc from client-go * Adds visitor test for traversal errors * Adding EndpointSlice support for kube-proxy ipvs and iptables proxiers * Migrate the e2e provisioner container image to a different location. * Move kubectl cp back to k/k * azure support for ipv6 and dual stack services(excluding ILB) * Adding EndpointSlice controller * Graduating Windows GMSA support to beta * crd-e2e: check watch observes CR modified events; use WatchUnsafe * fix semantics of the rejected label in webhook metrics * Fix broken link to api-conventions doc. * kubeadm: fix a bug where the kubelet cert rotation was turned off * Regenerate openapi-spec * Fix bug in CPUManager with setting topology for policies * Make ServerSideApply beta, and enable by default (on the server) * Rename --experimental-* flags to --* for server-side apply * serviceaccounts: Add JWT KeyIDs to tokens * Use http/1.1 in apiserver->webhook clients * Plumb NextProtos to TLS client config, honor http/2 client preference * Enable the RuntimeClass admission controller on GCE & CI * api: Loosens RunAsUserName validation * add checksum * group imports properly * migrate kube-proxy metrics to stability framework * migrate controller-manager metrics to stability framework * Make webhook benchmarks parallel * add some documentation around the metrics stability migration changes for clarity * migrate kubelet's metrics/probes & metrics endpoint to metrics stability framework * Add authentication metrics: overall failure and error count * Use log functions of core framework on sub [p-s] * phase 2: generated items * Fail fast with TopologyManager on machines with more than 8 NUMA Nodes * Add NUMA Node awareness to the TopologyManager * phase 2: ipam filter secondary service cidr * Phase 2: service and endpoint processing * phase 2: api types + defaulting + validation + disabled fields handling * Tombstone the former Fields field by commenting the old entry * Move the IsMasterNode function to tests and mark it Deprecated * Cleanup staticcheck issues for package in client-go. * Node lifecycle controller should use a label for excluding nodes * Service controller should begin moving away from node-role labels * Add a feature gate for legacy node-role behavior * [Framework] Add UnschedulableAndUnresolvable status code * fix: prevent overriding of certain kubelet security configuration parameters if the user wished to modify them. * migrate scheduler metrics endpoint to metrics stability framework * e2e storage: read/write + read-only ephemeral inline volume test, data sharing * e2e storage: wait for pod deletion * e2e storage: multi-volume and multi-pod tests for inline ephemeral volumes * e2e storage: check NodeUnpublishVolume in csi-mock tests * e2e storage: enable testing of ephemeral inline volumes with hostpath CSI driver * e2e storage: synchronize .yaml files with latest upstream releases * Add e2e test for volume limits * Bump NPD version to v0.7 for GCI * generated * storage: make CSIInlineVolume a beta feature * storage: make tests independent of CSIInlineVolume default * Update CRD docs * Support PluginWatcher in Windows * Remove myself from reviewers across the repo so that PRs are no longer assigned to me by blunderbuss. * gce staticcheck fixes * Update vendor k8s-cloud-provider and google API * Disable tracking manged fields on scale sub-resource * Add issue to TODO * Update round-trip compatibility test * Regenerate all * Add new FieldsType to clarify the format of Fields * Rename TopologyHint.SocketAffinity to TopologyHint.NUMANodeAffinity * Update CPUManager to include NUMANodeID in CPUTopology * Updated the godoc on the CRD API types to follow conventions * Cache the discovered topology in the CPUManager instead of MachineInfo * Skip deleting custom resource instances that overlap with storage for built-in types * add comment about explicitly registering grpcprom client metrics * add some documentation around the metrics stability migration changes for clarity * add stability level to aggregator metrics and drop blank line in cmd file * migrate kube-apiserver metrics to stability framework * Re-implement AWS test driver interfaces * extending RequestedToCapacityRatio priority function to support resource bin packing of extended resources * Rename mount.IsBind to mount.MakeBindOpts * remove dependency to pkg/features on service controller package * derive node CSR hashes from public keys * Refactoring pod related functions from pv_util to pod pkg * Generated docs for ephemeral containers API * Improve API documentation for ephemeral containers * Enable CSI e2e tests for volume expansion * Graduate volume expansion to beta * Factor PassiveClock out of clock.Clock * Add discovery docs webhook e2e test * aggregator: add metric for openapi regeneration * kubeadm Json6902 Patches * storage: fix CSIInlineVolume round-trip test * apiextension: add metric for openapi regeneration * aggregator/apiextensions: v(2) log why OpenAPI spec is regenerated * delete lo network when TearDownPod to avoid CNI cache leak * DNS e2e tests differentiate between IP family * Make TestContext.IPFamily global for parallel testing * apiextensions: always set lastTransitionTime when CRD condition changes * remove slice dependency * run hack/update-bazel.sh * Update kubectl polymorphic logs helper for ephemeral containers * Change the seven blanks to ` {7}` in the regex, so it will be more readable ^P. * apiextensions: set 'metadata.generation: 1' during read from etcd if not set * use log functions of core framework * fix test/e2e/gke_node_pools.go * Add a helper function to decode scheduler plugin args * Correct func name WithBuildMetadata * revert wrongly replaced log function ginkgo.Fail * kubectl: take pod overhead into account * generated * remove test cases disabling the gates * bump the CRD feature gates to GA and lock the defaults * Add types to StatefulSetUpdateStrategyType constants * Remove conflict logic from PodTolerationRestriction * Fix toleration comparison & merging logic * Updating log after framework code refactor * Remove ndots check as it doesn't apply to windows * Run hack/update-bazel * Change custom DNS test to use ipconfig instead of resolv.conf * Add e2e DNS tests to windows tests * Adding discovery/v1alpha1 API for EndpointSlices * Bump cluster proportional autoscaler to 1.7.1 * e2e/network: add service hairpin test * Split defaultPrintHandler from handlerEntry in table printing * Improve error message on server-side apply conflicts * add cache-control headers to kube-apiserver * Move MakeFile/Dir from HostUtil to host_path vol * schedule code clean: using string prefix instead of MarkDeprecated * Internalize mount.Interface.IsMountPointMatch * apiextension: fixup defaulting tests * Utilize reflectorMutex in LastSyncResourceVersion * apiextension: promote defaulting to beta * Cleanup ginkgo.Fail calls from the e2e test framework * Add support for vSphere volume mount/attach on Windows * Use preferred import packages for test/e2e * e2e logger test: handle paths in Kubernetes CI * bazel update * e2e: consistent failure logging * e2e: unit test for logger.go and ginkgowrapper.go * Use log functions of core framework on test/e2e/apps * Clean up staticcheck issues. * apiextension: ratcheting validation of unpruned defaults * publishing: add missing deps for 1.16 branch * e2e_kubeadm: use log functions of core framework * v1beta1: bugfix in Event struct definition * fix typo in build/platforms.bzl * Correct comment in CertOrKeyExist * Remove watching Endpoints of Headless Services * Tolerate ending slash when running staticcheck * Updated comments in wait.go * generated * Mark v1beta1 admissionwebhook and crd types as deprecated * Use cached selectors/client for webhooks * Add admission benchmarks * Let webhook accessors construct client/selectors once * apiextensions: remove preliminary committed openapi packages * kube-aggregator: remove preliminary committed openapi packages * Clean up staticcheck issues for gce. Dealing with deprecated issues. (staticcheck SA1019) Dealing with error discard issue. (staticcheck SA4006) Dealing with context overwritten issue. (staticcheck SA4009) Dealing with unused functions. (staticcheck U1000) Remove gce from staticcheck failure list * Enable the RuntimeClass admission controller for scheduling * apiextension: prune default values in storage * apiextension: complete validation of meta data defaults * apiextension: reject x-kubernetes-embedded-resource with empty properties * apiextension: fix go-openapi validation error path at the root * apiextension: fix structural additionalProperties in ToOpenAPI() * Fix failing test * Use log functions of core framework on sub p* * allow an apiserver to only serve http1 * Add tests * Only update managedFields on update if it already exists * Move PrintPerfData to the test * generated * tests * mutating webhook: audit log mutation existence and actual patch * Add --include-test-files flag to verify-import-boss * Add test for HTTPExtender.IsInterested * tests: Adds RunAsUserName tests * Update PrintOptions to more appropriate GenerateOptions in some cases * hack/pin-dependency.sh k8s.io/gengo 26a664648505d962332bda642b27306bc10d1082 * Remove nsenter impl from pkg/vol/util * feat(scheduler): move node info snapshot out of internal package * moving podInformer to node controller scope * kube-proxy: improve logging around network programming latency SLI. * Add ephemeral container to GetPodVolumeNames test * fix upgrade checks * update scale client to support non-namespaced resources * Add dropDisbledFields() to service * kubeadm: fix static check failures * Fix devicePath for raw block expansion * Replace time.Sleep with poll.wait in admission e2e tests * test(scale): fix tests * fix: patch the Scale subresource if no precondition was given * fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go * Make container removal fail if platform-specific containers fail * Use log functions of core framework on sub [j-l] * Don't overwrite PVC with nil/empty object returned by failed Update * Adding TooMany error type * Switch to v1 for admission and CRDs for all api-machinery e2e tests * s/nolegacyproviders/providerless/ * Use log functions of core framework on [d-i] * hack/update-bazel.sh * make it possible to start kube-api-server and kube-controller-manager without legacy cloud provider flags * make it possible to build kubelet without legacy cloud providers * add build tags to legacy provider code and make it possible to build kube-controller-manager without any legacyproviders or without particular legacy providers * Drop Azure/go-autorest from pkg/controller * Use log functions of core framework on p* * Included resizing for CSI-based block volumes. * Fix golint issues in pkg/apis/apps and pkg/apis/apps/validation * feat: use PreBind instead of Prebind in the scheduling framework * feat: use PostBind instead of Postbind in the scheduling framework * feat: use PreFilter instead of Prefilter in the scheduling framework * Split HostUtil functionality into its own files * Change GenerateTable parameter PrintOptions to GenerateOptions * Remove decorateTable() from TableGenerator * kubeadm: print the stack trace of an error for klog level v>=5 * move testfiles back * copy testfiles to hostutil dir * move files back to mount * copy mount files to hostutils * Promote VolumePVCDataSource to beta for 1.16 * remove the ipvs checks from the preflight checks * move WaitForCacheSync to the sharedInformer package * Cleanup: fix typo in flag help message * check that the recorded event is not nil on refreshExistingEventSeries * apimachinery: hide 'suppressing panic for copyResponse' error' in ReverseProxy * removed equivalence cache tests * apiextensions: builder for OpenAPI v3 * apiextensions: move openapi schema builder and merge code into package * Add e2e test for Lease API * Remove all skips from admission and CRD e2e tests that will be promoted to conformance * Add fast path to podFitsOnNode * Remove dead code * Renaming strict policy to restricted policy Restricted policy will fail admission of guaranteed pods where all requested resources are not available on a single NUMA Node * bazel update * Do not cleanup node lease namespace in e2e setup suite * Omit nil or empty field when calculating hash value * drop unused check * add legacyBinding for non-Named Binding Creater * check pod name with that in pod eviction object * check pod name with that in binding object * populate object name for admission attributes when CREATE * fix cluster/images/conformance/go-runner/tar_test.go * Fix cloud reported hostname being overridden if nodeIP set * Add hex108 as a scheduler reviewer * add SataQiu to hack/ approvers * feat: update runtime class admission plugin * Skip spec.volumes mount/map test if no SSH * GCE/Windows: use "return" as "continue" for ForEach-Object * Fix windows kubectl log -f. * Check service finalizer on upgrade test and fix-up test cases * Finish implementation of stable metrics static analysis * promote the remainingItemCount field to beta * mv HasMountRefs from mount pkg to vol/util * Remove watching Endpoints of Headless Services * move ShuffleStrings to pkg/proxy * Dump the stacktrace while an error occurs * Un-blacklist pkg/kubelet for staticcheck * add client-go as a dep of component-base * duplicate migrated variants of shared metrics into component-base * Cleanup more static check issues (S1*,ST*) * Clean up error messages (ST1005) * Clean up deprecated references * Fix misc static check issues * Remove dead code from pkg/kubelet/... * Make sure no op updates don't affect the resource version * move version logic directly into the component-base, to simplify legacyregistry logic * Fix flaky hugepages tests by decreasing page count * removing redundant code * Close leaking files in `conformance/walk.go` * fix: azure disk name matching issue * disable staticcheck on a few more packages * Update google.golang.org/genproto to c66870c02cf8 * Update github.com/coreos/etcd to v3.3.15 * Update google.golang.org/grpc to v1.23.0 * fix static check for test/e2e/framework * Fix verb reporting in metrics * controller:volume fix static check failures * Update existing node lease with retry. * Check error return from Scheme.Convert * Use lesser of context or webhook-specific timeout in webhooks * Remove check for addIPv6Checks which evaluates to true * Use framework functions under test/e2e/node/ * Add tests for newly exposed drain code * Use log functions of core framework on [c-n] * Promote service load balancer finalizer to beta and enable by default * kubeadm: support any kernel version newer than 3.10 * generated * mark CRD .status.conditions as optional * tests: Skips Windows-unrelated tests on Windows * test images: Updates image building process README * Use non-default container port and scoped port vars in webhook e2e tests * staticcheck follow-up to address late feedback * bump coredns to 1.5.0 * add coredns migration support to upgrade.sh * fixes a bug that connection refused error cannot be recognized correctly * Use VisitContainers instead of directly accessing pod container fields * update dependencies * Fix returning logs from ephemeral containers * update build dep * move the corefile backup into a single configmap with a corefile-backup data key * Move RunNormalizeScorePlugins and ApplyScoreWeights into RunScorePlugins; Also add unit tests for RunScorePlugins. * Optimize internal data structure of EvenPodsSpread * Add Benchmark test for EvenPodsSpread predicate * removed awk from kubeadm reset * Fix CRD v1 release note * Plumb context to admission Admit/Validate * plumb client-specified request timeout to context * chore: add reviewer of csi-translation-lib * Add/Update CHANGELOG-1.16.md for v1.16.0-beta.1. * Update CHANGELOG-1.16.md for v1.16.0-beta.1. * kubeadm: do not use github.com/blang/semver in app/preflight * don't delete KUBE-MARK-MASQ chain in iptables/ipvs proxier * test images: Adds README containing image building process * fix: add kind parameter in CSI migration * Log the error return from dir removal * fix: trim new line for azure storage account name * Refactor NewXXXPlugin in framework_test to avoid package variable and do some other refactor * Bump agnhost image version to 2.5 * Update e2e tests to use CRD v1 API * pod-overhead: utilize pod overhead for cgroup sizing, eviction handling * Add static analysis verify script * Delete duplicate resource.Quantity.Copy() * Bump golang.org/x/tools version for staticcheck compat * Vendor staticcheck * Leave Windows Defender enabled for clusters on GCE * accept dial timeout in webhook e2e * Update structured-merge-diff to latest version * Fix e2e for block volume expansion * Group update managedFieldsEntries by manager name * inject transformer prefix into metric * Split printer tests into table generation then table printing * Split HumanReadablePrinter struct into generator and printer structs * add delete to gaugeVec, histogramVec, summaryVec since kubelet requires it * provider/azure: Fix load balancer distribution constants * Update vendor for Azure API bumps * Update Azure imports to latest API versions * Add messages for framework.Expect* in volumeMode tests * Speed up block volume e2e test by checking events * Check the error return from listener close * Rename WaitTimeoutForPodEvent to WaitTimeoutForEvent and move it to common/events.go * Fix Test for kubeadm/app/util/net.GetHostname * Update CHANGELOG-1.14.md for v1.14.6. * Update CHANGELOG-1.15.md for v1.15.3. * Update CHANGELOG-1.13.md for v1.13.10. * Update the PR template for latest 'additional documentation' enhancements * change GetVolumeName log level * Add/delete load balancer backendPoodID in VMSS. * add delete to counterVec wrapper, since we require it in the kubelet * lock the mutation of the create boolean for safety * fix typo * fix: disk not found issue in detaching azure disk * fix: detach azure disk issue using dangling error * convert EndpointNamespace showing string rather than pointer * Remove boolean waitForComponentRestart which is always true in upgradeComponent * Use v1 admissionregistration APIs in e2e * Fix in kube-proxy for sctp ipset entries * Upgrade ConversionReview e2e test image to also support v1 * ConversionReview v1 * Fix GCE typo in test output * swap BenTheElder for rmmh in typecheck / go-srcimporter reviewers * remove unnecessary ignore * FlattenListVisitor now continues traversal on errors and returns an aggregate error * remove unused jenkins scripts * update hack/jenkins/README.md * check clusterCIDR after occupy serviceCIDR * Don't track syncProxyRules runtime if not running * Bump nfs-provisioner to include GetReference fix * Demote HPA tests from release-blocking * Demote regular resource tracking tests from release-blocking * Add benchmark for updates and get with/without server-side apply * Drop GetPods from ActualStateOfWorld * implement request cancellation in token transport * generated * CRD v1: require structural schema for v1 * CRD v1: switch integration tests with defaulting to v1 * CRD v1: require valid openapiv3 types * CRD v1: limit 'default' use to v1 * CRD v1: require schema * Move HandleFlags to e2e package * Modify dns e2e to individualise GCE specific dns checks into seperate e2e * Only advertise supported patch types * ignore agnhost binary * Fix handling empty result when invoking kubectl get * Delete agnhost binary * use factory.Config fields directly in scheduler struct * Removes conflicting Quobyte tenant test error from API validation * Get location and subscriptionID from IMDS when useInstanceMetadata is true * Results of running update scripts: update-openapi-spec * Update GetTopologyHints() API to return a map * Initialize flags to support extra flags * replace ping with connect in msg * use agnhost image * update go to 1.12.9 * Add log.go back to core of e2e test framework * Disable kubelet restart tests for file volmode * Skip preprovisioned and inline volume tests if driver supports dynamic provisioning. * kubeadm: use etcd's /health endpoint for it's liveness probe * Lint Azure imports * Update vendor for Azure dependencies * Update Azure/azure-sdk-for-go and Azure/go-autorest modules * updated kubeadm reset wording to be more clear * Add e2e tests for CSI PVCDataSources * buildPortsToEndpointsMap should use flattened value type * aggregator: add myself to approvers * Move ConfirmStatefulPodCount to e2e test * CRD v1: disallow spec.preserveUnknownFields=true * CRD v1: combine webhookClientConfig and conversionReviewVersions under webhook struct * CRD v1: drop spec.scope default * CRD v1: drop top-level version, validation, subresources, additionalPrinterColumns fields * CRD v1: change JSONPath to jsonPath * CRD v1: install/register types * CRD v1: copy v1beta1 types to v1 * Taints and tolerations e2e test re-work * cleanup: fix typos in rbd_util.go * cleanup: fix typos in error message in e2e test * error config attachable plugin * add the ability to migrate coredns configmap * error config attachable plugin * remove defaultedInternalConfig fromr kubeadm * fix error set csiplugin attachable * Fix panic when errors are nil * Add test for unused volumes * Skip unused volumes in VolumeManager * Refactor makeMountsMap into GetPodVolumeNames * Add http response code 503 to check. * kubeadm-kustomize-ux * [kubernetes/kubeadm] fix minor nil issues in kudeadm code * fix some typos in recycle_test.go * Make drain library more reusable * Propagate error from NewEtcd * Lowercase first letter of chainable errors in PVC protection controller * Add live list of pods to PVC protection controller * Upgrade AdmissionReview e2e test image to also support v1 * Bump vertical autoscaler to v0.8.1 * Add instruction for "Application Default Credentials" * fix shellcheck failures in hack/test-integration.sh and hack/verify-test-featuregates.sh * Add admission e2e tests for untested stable operations * fix some typos in testing.go * kube-proxy: do not export network programming latency for deleted enpoints. * feat: use schedulerapi.MaxPriority instead of hard-coded int * feat(scheduler): return error when score is out of range * Promote e2e verifying service type updates * do not publish openapi for a schema containing bad types * Add CRD e2e tests for list, delete collection, and status sub-resource operations * Handle error correctly in kubee-proxy command * Fix malformed port in vsphere cloud provider test * Add CPUManager tests for TopologyHint consumption * Consume TopologyHints in the CPUManager * Add CPUManager tests for TopologyHint generation * Generate TopologyHints from the CPUManager * Add IterateSocketMasks() function to socketmask abstraction * Fix up failing boilerplate test * Update to go 1.12.8 * fix azure load balancer update dns label issue * Fix default scheduler crash if scheduler extender filter returns a not found node * change deprecatedVersion type to string for static analysis parsing ease * Add service reachability polling to avoid flakiness * Update vendor * Pin golang.org/x/net to cdfb69a * Remove fail argument from ReadOrDie() * Move GetGPUDevicePluginImage to the test * Move ProxyRequest to kubelet e2e fw * resource: cleanup helpers_test.go * kube-eviction: use common resource summation functions * resource: modify resource helpers for better reuse * bump go-grpc-prometheus since 1.2.0 actually exposes the metrics * kubeadm: add v1.17 to the list versions that map to etcd version * Re-Generate k8s.io/apimachinery/pkg/util/sets * Update k8s.io/gengo to 955ffa8fcfc983717cd9de5d2a1e9f5c465f4376 * storage: add test for ValidateCSIDriverUpdate * storage: check CSIDriver.Spec.VolumeLifecycleModes * storage: validate CSIDriver.Spec.VolumeLifecycleModes * storage: generated files for CSIDriver.Spec.VolumeLifecycleModes * storage: introduce CSIDriver.Spec.VolumeLifecycleModes * kubelet: add eviction counter to metrics * rename healthz methodNames to be more consistent w/ present day usages * Fix event when Cinder volume can not be expanded when in-use * use image in statefulset too * Hide bearer token in logs * Address review comments * proxy/ipvs: test cleanLegacyService with real servers * run ./hack/update-vendor.sh * Kubernetes version v1.17.0-alpha.0 openapi-spec file updates * kubectl: eliminate unnecessary blank ending line (#81229) * Delete extraneous CHANGELOG-*.md files on branch. * add missing import required by build scripts * Use RWMutex in watchBasedManager * [k8s.io/client-go]fix typo in eventseries_test.go method * Fix flaky test TestPreemptWithPermitPlugin * Introduce cache for APIServices * Replace self defined const StatusTooManyRequests with http.StatusTooManyRequests. * Remove algorithm.NodeLister from scheduler interface * Update csi-provisioner and snapshotter to get selflink fix * remove alias until we can get the proper alias in place * Update docs for service/endpoints port names * Propagate error from NewREST * proxy/ipvs: remove unused constant rsGracefulDeletePeriod * add logicalhan as approver on component-base/metrics * Error code incorrectly hidden in recordEvent * Update CSI hostpathplugin to include cloning fix * Return 503 for custom resource requests during server start * Revert "Toleration priority function score computation" * kubeadm: cleanup unnecessary slice initialization statements * cleanup: proxier.go error message fix * Inline/simplify two used-only-once service test helper functions * Replace self defined const StatusTooManyRequests with http.StatusTooManyRequests. * adds an integration test for double deletion with a custom finalizer * placeholders for follow-up PR on kustomize UX * kubeadm-kustomize-core * publishing: remove rules for release-1.12 branch * publishing: add rules for release-1.16 branch * Implement stable metric validation and verification * Modify the logic to discover corresponding errors. * Fix conflicted cache when the requests are canceled by other Azure operations * changes the way `gc` detect that an object needs to be deleted * Fix Azure client requests stuck issues on http.StatusTooManyRequests * Add service annotation for specifying load balancer's pip with name. * Fix logging message during unmounting * tests: Fixes DNS tests for Windows * Add missed status code description in comment. * Add DataSource to PVC describe * doc: add Draven as a reviewer to test package * Set runtimeState when RuntimeReady is not set or false * Remove runDeployment() from e2e test * Fix a bug in the IPVS proxier where virtual servers are not cleaned up even though the corresponding Service object was deleted. * Remove unused BusyBoxImage * Remove core dependency from endpoints e2e fw * Remove core dependency from deployment e2e fw * Return CR validation errors as field errors * Autogenerated files * Scheduler should terminate when it looses leader lock * Rename HostUtils.GetFSGroup to HostUtils.GetOwner * Deprecate the hyperkube support for cloud-controller-manager * Rename HostUtils.ExistsPath to PathExists * Rename mount.NewOsExec to mount.NewOSExec * Update generated files * Introduce topology into the runtimeClass API * Add iptables restore failure metrics * kubeadm --pod-network-cidr supports a comma separated list of pod CIDRs. This is a necesary change for dual-stack. * Update kubeproxy config validation to support list of comma separated pod CIDRs. Dual-stack feature must be enabled for the validation to be done. * add validation for CNI config before loading and fix some typo * reduce kubelet getting node lease * Experimental ILB support * kubeadm: the permissions of generated CSR files are changed from 0644 to 0600 * remove iSCSI volume storage cleartext secrets in logs * Fix node port service reachability test for nodes running on localhost * Add load balancer cross resource group settings to config. * fix: use Create for attach/detach disk * make hostpath configurable for test * feat(scale): add Patch method to ScaleInterface * feat: cleanup pod critical pod annotations feature * Fix two race issues in scheduling_queue_test * Use the escalate verb for clusterroleaggregator rather than cluster-admin permissions * expose ability to register native prometheus collectors * Fix most linting issues in pkg/util/mount * remove redundant reviewers in test/OWNERS * promote andrewsykim to approver in test/OWNERS * Changed comment on ScaledValue (#79738) * Remove unnecessary serializer override for CRD status, test proto requests on CRD status * fix: update provisional delay seconds to 10s * fix: reduce the number of pods and volumes * fix: use workqueue to speed up of volume binding tests * feat: add logs to volume binding test * Add `gen_openapi` target to top-level Makefile. * kubeadm: Fix some documnetation errors * Adjust test case for a new command line parameter * Update to latest klog 0.4.0 * pinned cadvisor to a latest commit * Use events to speed up the test * Add test for mismatched usage of filesystem/block volumes * publish path parameter * kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes * fix kubeadm version def.bzl * Remove printOnce() on e2e tests * Constant time password comparison * Rename MetricsForE2E for golint failure * Added info requested in review of #77636, and more * Refactor validation options * Move CRD approval validation into validation package * feat: use named array instead of score array in normalizing score * remove dead code: pkg/api/resources * changed IsCriticalPod to return true in case of static pods * Lower verbosity level for some useful scheduler logs; Also add node resource info when pod is scheduled on node. * generated * update github.com/json-iterator/go to v1.1.7 * Update the Windows node image 1809 version to 0709 * also deprecate --cloud-provider-gce-lb-src-cidrs flag from kube-apiserver * add scheduling utils * move volume scheduling tests * audit & admission: associate annotation with audit level * Fix a racing issue in FakeFilterPlugin * Update CHANGELOG-1.16.md for v1.16.0-alpha.3. * update dependencies to include k8s.io/utils/inotify * fix linting issues * use k8s.io/utils/inotify instead of github.com/go-sigma/inotify * Ensure tests which rely on SSH behavior are skipped if unavailable * [TOB-K8S-027] Fix Incorrect isKernelPid check * [TOB-K8S-025] Incorrect docker daemon process name in container manager * Update WORKSPACE to fix symlink permissions * Fix symlinks in bazel-release * autogenerated files * Deprecate SelfLink + featuregate for setting it * Fix GetReference function * Add stub support for TopologyManager to CPUManager * Make nodeList schedulable * Add IPv6 support to e2e GlusterDynamicProvisioner * Get network-proxy working with GCE. * Test webhooks with and without watch cache enabled * Update configMap data checking * modify the spelling errors * Support cross resource group load balancer. * Reduce indents of resource_usage_gatherer * generated * Limit v1 webhooks to None and NoneOnDryRun side effects classes * kubeadm e2e networking test for dual-stack podSubnet check. * Promote NodePort service creation e2e test to conformance * [e2e] Add verbose to reachability test commands * Implement CodecFactoryOptions allowing clients to opt-in to Pretty encoders and Strict Decoders (#76805) * Scope e2e webhooks to avoid cross-test interference * Add security notices to changelogs * Fix golint failures of pkg/registry/core/event * Fixed a racing issue in scheduler UT * Drop cloud-controller-manager artifacts from k/k release * Validate CSI Inline Migration unconditionally * Setup directories for Metrics validation and verification KEP * Test more replicas than spec. * fix typos in create_namespace.go * Refine TestFilterPlugin * Fix error collides with imported package name * kubeadm: fix name of CA spell error * Update function for data inequality verification * Return error returned by CSINode Get if initialization failed * cleanup: fix log message error in test case * Bumped log level of CSI driver de-registration to match registration handler * cleanup: fix typo "contstruct" -> "construct" * Add davidz627 to testing manfiests csi owners * Bump GCE PD CSI Driver testing manifests to v0.5.2-gke.0 for volume limits fix * Moved e2e boilerplate to framework * Upgrade to latest k8s.io/utils * Replace string concatination with trace fields * Add trace to webhook invocations * Added import restrictions file to e2e framework * Simplify checking in getMinTolerationTime * fix: use %q instead of %v in scheduling framework * Add CHANGELOG-1.16.md to CHANGELOG.md * fixup: correct file name in log message * cleanup: remove package csi duplicated error log * Update CHANGELOG-1.15.md for v1.15.2. * Update CHANGELOG-1.14.md for v1.14.5. * Update CHANGELOG-1.13.md for v1.13.9. * Add limit of stored errors * fix shellcheck failure in cluster/test-e2e.sh * Fix example urls * Move docker specific const to dockershim. * kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery * Re-import api/core/install for init function * Fixed pull-kubernetes-verify issues * Fix suggestions, track removed library in bazel * Fix golint failures in some pkg/kubelet packages * kubeadm: enable secure serving for the kube-scheduler * Fix comment on dropPodStatusDisabledFields method * Simplify VisitContainers pattern in volumemanager populator * migrate scheduler options to resourceName & resourceNamespace * Fix verify-generated-files to error on untracked files * Make Overhead validation unconditional * Preserve existing ephemeral containers on update, validate unconditionally * update generated files * Allow kubectl to attach to an ephemeral container * add unit tests for attacher DisksAreAttached and BulkDisksAreAttached * Toleration priority function score computation I think, if a pod doesn't have any tolerations, we don't prefer node without taints to the one which has taints in https://github.com/kubernetes/kubernetes/blob/master/pkg/scheduler/algorithm/priorities/taint_toleration.go#L29, so there is no point in testing that particular functionality. The side effect of the above is, since we're going round-robin in every scheduling cycle sometimes we're choosing first node and in the next cycle we'd move onto next node(where taints are not being applied), so it's causing problem unnecessarily * Omit namespace when kubectl get is for the cluster * Remove NormalizeScore plugin set from config API. * increase timeout for maximum-startup-sequence-duration to decrease probability of a flake * Reduce GCE PD Attach Limits by 1 because Node Boot Disk counts as 1 attached disk * Disable gzip compression in core control plane components * Allow gzip compression to be disabled from rest.Config * Change order kubelet starts containers * Unexport kubectl cmd profiling * Added comment after invoking ensureLoadBalancer * Wait for pods to be running before eviction starts * Moved nil check inside AlphaFeatureGate.Enabled * Updated comment about ImplementedElsewhere * Setting log level to 4 since default is 2 or 3. * Added comment on how to use ImplementedElsewhere * Fixed review comments, lint. * fixed error message * addressed review comments * Add a new error type in cloud.go * skip ilb creation if subsetting is enabled. * Handle ImplementedElsewhere error in service_controller * unit test * Add a defer to kubelet boostrap token deletion * Update copyright years * added latest tag * fixed whitespaces * updated fluentd to 1.6.3 * Fix registry for prometheus-to-sd * Rename cacheWatcher#stop * kubeadm: simplified returns * publishing: remove redundant rules for kubectl * handle joinControPlaneDoneTemp.Execute errors * feat: update multiple files in e2e node with framework helpers * Fix shellcheck failures in hack/verify-test-featuregates.sh * fix: update run filter plugin for consistency * feat: implement "post-filter" extension point for scheduling framework * Fix admissionreview doc typos * Don't supress the node update error while logging * Update .golint_failures to reflect code move to staging * Update generated * RawExtension.Raw json:"-" * Update vendor modules to reflect code move to staging * Update test data to reflect code move to staging * Add IPv6 support to preserve source pod IP test * Generated * Clarify accepted versions skew requirements, update field documentation * AdmissionReview: Allow webhook admission to dispatch v1 or v1beta1 * AdmissionReview: Install/register * Move nil check for mapperPlugin earlier in reconstructVolume * Update gofmt * Update BUILD files reflecting code move to staging * Refactor e2e tests * Add in-line filesystem volumes to MakeSecPod * Don't create mounter when reconstructing block volume * Move disruptive tests to testsuites and add ones for block volume * Add ConfigMap patch e2e test with validation step * test images: Adds version and bind-tools to agnhost * Adde 9.0.2 to CHANGELOG.md * Update import statements to reflect code move * Move pkg/kubectl/cmd/{command} to staging * EvenPodsSpread: integration test * iptables: simplify version handling * kube-proxy: drop iptables version check * fix-certs-generation-for-external-etcd * iptables: don't do feature detection on the iptables-restore binary * prune owners * Only output json format from tests when building junit reports * kubeadm reset: replace Errorf with Warningf * Update kube-addon-manager to v9.0.2. * Typo fix: DaemonsSet->DaemonSet * Fix selflinks in tests * Fix selflinks in events tests * csi: Fix socket extension comment * Remove Configurator interface * Return early in ApplyScoreWeights if there are no scores * Make discovery wait for a finite time * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/kubelet_stats.go file * Update predicates to use cached CSINode in scheduler * Add independent cache for CSINode in scheduler * Fix some unreasonable places int csi ut * Fix host path test clean up * Print ephemeral containers in kubectl describe * add flag concurrent-statefulset-syncs to kube-controller-manager (#79169) * cleanup: log message typo fix * fixed golint issues. * update codedellemc/goscaleio * Fix failing service e2e due to execPod IP unavailability * kubeadm: update the supported version for 1.16 * kubeadm: apply a number of _test fixes * doc: fix couple of issues for the doc of agnhost * add secret back to the workqueue with delay time, avoid expired bootstrap tokens not being deleted * Adding support for Azure Stack ADFS case. * fix some log typos in csi_mounter.go cleanup: remove logging duplicated error message fix error msg, include err in new returned errors. Signed-off-by: ethan <guangming.wang@daocloud.io> * Use default skuname shared Azure Disk * do not return error, when the ds is not found * Nominate Abdullah Gharaibeh to scheduler maintainers. * Use ExpectEqual in test/e2e_node/[a-d] * Unit test endpoints controller service deletion * Update compatibility fixture data: * Update generated * Use raw bytes in metav1.Fields instead of map * Don't delete service endpoints when a generic error occurs * vendor gotest.tools/gotestsum * Switch to json test output * `kubectl get` does not count binaryData keys on ConfigMap * Fix license script to handle single-segment packages * Add GetKernelVersion to ipvs.KernelHandler interface * Add code check for framework.ExpectEqual() * Remove duplicate scheduler anti-affinity preemption e2e * Refactor pkg/kubectl/conditions.go to remove file * clean GeneralPredicates code * Fix registry for PrometheusDummyExporter * apiextensions: 404 if request scope does not match crd scope * When PVC is invalid, don't count volumes in scheduler predicate * Don't count unrelated volumes in scheduler predicate * update RSA keys to 2048 bits * Fix unexpected line end in override flags * Run ginkgo in foreground, elminiate wait & pgrep * Move pkg/kubect/explain to staging * Use framework.ExpectEqual() under test/e2e_kubeadm * Refactor pkg/kubectl/{scale.go|rollingupdater.go} for move to staging * Refine watcher count calculation * Move pod related functions file in test/e2e/framework/util.go to its sub direcotry * Move pkg/kubectl/proxy to staging * proxy/ipvs: refactor TestNodePort to use test tables * Removed unsed return values of createResourceQuota * Fix tag for github.com/gogo/protobuf * proxy/ipvs: refactor TestClusterIP to use test tables * Fix hanging webhook error checking * Add NormalizeScore extension point for scheduler framework. * Upgrade Calico to 3.7.4 * Move pkg/kubectl/generate to staging * Convert e2e webhook tests to use v1 API * Determine system model for windows nodes * Move pkg/kubectl/cmd/util/openapi/OWNERS to staging * Refactor kubectl retrieve logs test to use agnhost * scheduler: make ApplyFeatureGates() stateless * upgrade repo infra to f85734f673056977d8ba04b0386394b684ca2acb * Move pkg/kubectl/interfaces.go to testing * Move pkg/kubectl/polymorphichelpers staging * Kubeadm FG for dual-stack was introduced in #80145. This PR progagates the kubeadm FG to the individual k8scomponents on the control-plane node. * apiextensions: add scope tests * split coredns dependency to decouple kubeadm and kube-up * Pop expired watchers in case there is no update * Update CHANGELOG-1.16.md for v1.16.0-alpha.2. * report error message when reset scheduler metrics in e2e test * Log an error when kube-scheduler fails to update the condition of the pod. * add options for name and namespace of leaderelection object * Use ErrorChannel to communicate errors during parallel execution in interpod_afiinity. * Use bigger keys for RSA-PSS, default for TLS 1.3 * Move pkg/kubectl/metricsutil to staging * Update vendor * Update structured merge-diff version * Debug values when test fail * Store key in TimestampedEntry * fix: do not allow nil Callbacks functions * Move pkg/kubectl/cmd/util and subdirs to staging * Update github.com/docker/distribution to v2.7.1 * Fix/Add comments on cadvisor implementations * Update logexporter version. * feedback 1 * Fix the public IP getting issues for VMSS nodes * change node-lease-renew-interval to 0.25 of renew-duration * Provision vSphere volume as per selectedNode * Move pkg/kubectl/apply and subdirectories to staging * TopologyManager: Fix rename best-effort policy files * support args for newrc funcs * kube-proxy in ipvs mode use ipvs to redirect traffic * update guide to make the command works as expected * e2e_node: clean up non-recommended import * delete the pods from unschedulable queue only when Add succeeds * Remove final file from pkg/kubectl/util * Move pkg/kubectl/cmd/util/openapi to staging * AdmissionReview: copy v1beta1 to v1 * fix-file-discovery * kubeadm networking related tests. * podSubnet check: if a podSubnet is specified in kubeadm-config then the e2e test will check that pod-cidrs of individual nodes fall within this range. * serviceSubnet check: if a serviceSubnet is specified in kubeadm-config then the e2e test will check that the kubernetes service created in the default namespace got a service IP from the configured range. * delete-bootstrap-kubelet.conf * autogenerated * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/psp_util.go file * Update misleading comemnts for HandleCrash * 1. Fix lint errors for the whole directory staging/src/k8s.io/client-go/tools/cache; 2. Remove staging/src/k8s.io/client-go/tools/cache from .golint_failures; 3. Fix some typo from comments. * fix snapshotter rbac rules * [eps-priority] auto-gen files * EvenPodsSpread: optimize Priority logic * EvenPodsSpread: Benchmarking Priority function * EvenPodsSpread: weigh constraints individually * EvenPodsSpread: minor enhancement on printing out priority score * EvenPodsSpread: Make some funcs in predicates pkg as public * EvenPodsSpread: Core Priority logic * EvenPodsSpread: Define a new Priority * Add message which shows how much CPU used * Remove duplicated check in ObserveEventAfterAction * Move pkg/kubectl/version to staging * Add a field 'RequiredAccessModes' to the driver info object that is propagated to pvc creation * fix building test/e2e_node/ with bazel 0.28.1 * Fix error message of ListTargetHTTPSProxies * kubelet: add UID to kubelet_container_log_filesystem_used_bytes metric * Allow aggregate-to-view roles to get jobs status (#77866) * Check error return from GetPodKey * Promote taint-based eviction e2e tests to Conformance * Move pkg/kubectl/describe to staging * Fix error handling issue in kubeadm upgrade * Un-[Slow] a bunch of networking tests * Assign OWNERS for pod integration tests * Avoid echoing request URL in proxy error * build: Add Release Engineering OWNERS * second iteration * Add tests for proactive init Container removal in the CPUManager static policy * Add tests for new containertMap type in the CPUManager * Proactively remove init Containers in CPUManager static policy * Retry metadata requests in get-credentials and valid-storage-scope * Don´t translate to IPv6 empty addresses * Bump kube-addon-manager's version to v9.0.2 * PVC protection controller: get rid of PVC leaks * fix pv controller not find pv for pvc provisioning * Moves pkg/kubectl/util/i18n to staging * Add annotation to disable tcp reset on SLB service * Bug fix: Set enableTcpReset of lb rules to true for Azure Standard Load Balancer * Change Socket to Node Change Node from int in TopologyInfo to type NUMANode which is an int * use correct format verb * Device Plugin API change to include Topology Info in Devices * e2e_kubeadm: clean up non-recommended import * fix typos in csi_attacher.go * Allow customize registry name of base and release images * Kubectl user exec should accept zero-length environment values #652 (#78875) * Add ipv6 support to the e2e kubectl tests * document API guarentees and deprecation policies for cloud config files * Update pkg/volume/portworx OWNERs * vendor: update for libopenstorage/openstorage to v1.0.0 * OWNERS: api-approvers should be approvers on cri-api * Regenerate * Fix pkg-names script that doesn't select files properly * Update gogo/protobuf to latest version * Update custom-serialization code to go backward * Fix some golint failures * Move some pkg/kubectl into polymorphichelpers * Unify secret and configmap triggers * Document and improve defaulting for MakePersistentVolume, dedupe some manual PV creations * hostport: Don't masquerade localhost-to-localhost traffic * Move pkg/kubectl/drain to staging * updated Bazel files * e2e storage: csi-mock tests for ephemeral inline volumes * CSI: allow drivers that can handle persistent and ephemeral volumes * e2e: remove unused ShortName from external driver definition * Promote resourceQuota e2e verifying 'object count quota' and 'quota scope' to Conformance * Refactor nested loop in getTPMapMatchingSpreadConstraints * Clarify IP family meaning * Update TODO * kubeadm: handle ResetClusterStatusForNode errors * Remove unused package //pkg/util/normalizer * Optimize Schedule by querying nodes only when needed. * Fix leader election in kube-addon manager * Revert "e2e: Skip multi-node PV test when pods scheduled on the same node" * Rename 'preferred' TopologyManager policy to 'best-effort' * Report error when iscsiadm fails during detach * add reciprocal note about keeping manifests in sync * fix kube-proxy manifest * Fix review comments, will squash later. * Move pkg/kubectl/apply.go to staging * fix typos in pv_controller.go * Move pkg/kubectl/apps to staging * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/perf_util.go * doc: nominate Draven to scheduler reviewers. * Promote job completion after failure e2e test to Conformance * Promote job pod orphaning/adotion e2e test to Conformance * Add benchmarks for serializing PodList * EvenPodsSpread: update addPod() logic to match individual constraint * fixup: address comments * EvenPodsSpread: Preemption UT on generic_scheduler * EvenPodsSpread: Supports Preemption (addPod) * EvenPodsSpread: Supports Preemption (removePod) * Store config args instead of config factory in test context * Remove NodeLister from Scheduler Configurator * Move pkg/kubectl/util to staging * Check whether metricObj can be converted to *v1beta2.MetricValueList * Corrected Cinder typos. * Add service reachability test util function and e2e fixes * EvenPodsSpread: update 'selfMatch' logic * fixup: address comments * EvenPodsSpread: UT on genericScheduler.Schedule() * EvenPodsSpread: Core Predicate logic * EvenPodsSpread: Define a new Predicate * Generated code for Ephemeral Containers in kubelet * Add support for ephemeral containers to the kubelet * Fix es 7.x.x initial cluster formation * kubeadm: add forgotten error check * cleanup: log message typo fix * Regenerate _example informers packages * fix wrong spells in events.go * fix typos in kubelet.go * fix: return empty string when status is nil * Add 'apiserver_watch_events_sizes'. * Add unit test for iSCSI refcounter * add protection for reserved API groups * Add new refcounter for iSCSI volumes * Add _example & test for a hyphenated API group * informer-gen: use correct PackageName computed from input parameters * Autogenerated files * Add simple batching to endpoints controller * Fix detachment of deleted volumes * Updates to container manager and internal container lifecycle to accommodate Topology Manager * Fix error overrided when saveVolumeData occurs error * Use scheduler cache in affinity priority functions * bugfix: panic log params in the construct method when maxInterval is less than minInterval * Update the CleanupAndExit field for the Options and the OnServiceSynced for the ServiceHandler comment * Use v1helper.GetPersistentVolumeClaimClass for compatibility * Optimize logic in EvenPodsSpread API validation * fix lint * Changed to use cmd for getting system uuid * Remove recursion in csiAttacher#waitForVolumeAttachmentInternal * add ipv6 support to the hostport/HostIP e2e test * e2e: add a function to map IPv4 in IPv6 * Move to getMachineInfo() * Dedupe all Make PVC API object functions into the one MakePersistentVolumeClaim to rule them all * Add migration shim for VerifyVolumesAreAttached and BulkVolumeVerify * Enable windows ntfs e2e storage tests for aws driver * Add support for windows to AWS EBS * Add unit test * e2e: Autodetect the IP family of the cluster * Set the systemUUID for windows nodes * proxy/ipvs: Compute all node ips only once when a zero cidr is used * proxy/ipvs: Only compute node ip addresses once per sync * Add doc that plugins in binding cycle should not use NodeInfoSnapshot() * Remove ExecutionHook API changelog entry * fix grammar err * use correct format verb * Fix potential panic in nodeGetVolumeStatsV1 * Send a reject message to permit plugin when preempting a WaitingPod * fix kubemark e2e test script * EvenPodsSpread: match selector of each constraint independently * [eps-pred-meta] auto-gen files * fixup: fix comments and use a channel to pass err * EvenPodsSpread: refactor "chained" utils * EvenPodsSpread: refactor topologyPairsPodSpreadMap * EvenPodsSpread: PredicateMetadata initilization * GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook * refactors to kubernetes cp command * gofmt * address comments * refactors to kubernetes CP command * Add CSIDriver creation factory to e2e framework * add link of kubeadm config doc * Generated code for ephemeral containers integration tests * Add integration tests for ephemeral containers * Fix retry issues when the nodes are under deleting on Azure * Generated code for ephemeral containers API * Add Ephemeral Containers to the Kubernetes core API * Rename DebugContainers feature to EphemeralContainers * Fix some error messages * Report NodeNotInitialized error when providerId is empty string * Fix csi attacher unit tests using t.Run() * use ExpectEqual in density_test.go * Record metrics when framework returns unschedulable error * make util/retry more generic * Pod e2e for reading last line can flake if pod runs to completion * cleanup: fix some log and error capitalizations * Use HTTPS as etcd-apiserver protocol when mTLS is enabled * bump smd * fix breaking change * Change default PVC AccessModes to RWO in test framework * add ability for gce to bulk verify attached disks * Drop "pod_name" and "container_name" metric labels * kubeadm: remove dependency on pkg/util/procfs * Add events to dswp * Cleanup versioning serializer * Remove unneded directory * kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes * Fix golint failure in pkg/util/netsh/testing/ * kubeadm should always fall back to client version when there is any internet issue * Remove unwanted string converstion in metrics errors * Calling Unreserve plugin before recordSchedulingFailure in case of binding failure * Cleanup comments in TopologyManager socketmask abstraction * EvenPodsSpread: regenerated API compatibility data * EvenPodsSpread: auto-gen files * EvenPodsSpread: api changes * feat: move service_util to separated package * Surface error returned by LoadConfig * fix gofmt * Updated dependencies: BUILD/modules.txt * Update all imports to scheme in staging * Moved files from pkg/kubectl/scheme to staging * fix parameterization of test error message * Make kubelet report usageNanoCores for node on Windows * Register Kubelet server metrics * Cleanup kubelet authz tests & make explicit * Update csi hostpath driver in e2e * implement functionality to return all found instances * Add package level And/Or calls to TopologyManager socketmask abstraction * Add NewEmtpySocketMask() call to TopologyManager socketmask abstraction * gce: configure: use 'amd64' in kube core images manifest * Set score plugin's weight to 1 if it is not set * Improve readability for image manager tests * Rename TriggerPublisherFunc as IndexerFunc * Precheck score plugins' weight when initializing * Update the topologymanager to error out if an invalid policy is given * Update the cpumanager to error out if an invalid policy is given * Update CHANGELOG-1.15.md for v1.15.1. * Fix error log issue, remove OrDie suffix in methods naming * Refactor and Move node related methods to framework/node package * Revert "feat: cleanup pod critical pod annotations feature" * Fix code block for kubectl book. * Fix of review comments. Will squash later. * Don't expect pod to stay up during node upgrade * Update generated * Make changes to integrate new version * Update smd and kube-openapi version * Skip unnecessary operations if diff is less than 0 * build: bazel: release tars should use arch in the name * fix panic in ResourceLocation in case of empty pod ip list * Handle error return from MetaNamespaceKeyFunc * Revert "Promote pod autoscaling" * correct testname for existing E2E for testing backoff limit for jobs * correct testname for E2E related to active deadline in jobs * kubeadm: get rid of dependency on pkg/util/node * Windows: Sets the effective SecurityContext's RunAsUserName * Run code generation for new field * Windows: Adds RunAsUserName field in WindowsOptions * Fixes TestScorePlugin flakiness. * make node lease renew interval more heuristic * Update deprecated diff.ObjectGoPrintDiff method * Fix shellcheck failures in test/cmd/l.*.sh * Fix shellcheck failures in test/cmd/d.*.sh * Add OWNERS for generated openapi spec package * The implementation of Filter extension for the new framework * Add CHANGELOG-1.16.md for v1.16.0-alpha.1. * Topology Manager Implementation based on Interfaces * fix pkg/controller/volume/expand/pvc_populator.go * Update unit test with expected query parameters * Add supportedMountOptions for GCE PD CSI Driver tests * Add passthrough for MountOptions for NodeStageVolume for CSI * Remove unnecessary string() from policy_none * Fix placement of test in conformance.txt * remove function apply-encryption-config in configure-helper * Skip unnecessary copy of Selector * pod-overhead: autogenerated code for scheduling changes * scheduler: add pod Overhead support for requests * remove sudo from storage tests * Remove duplicate requestInfoResolver * Log warning if config labels deletion returns false * release: generate release docker tag with default values * remove kube-aggregator/pkg/client/* * Nominate Huang-Wei to scheduler reviewers. * kube-proxy: change buckets used by NetworkProgrammingLatency * Fixed build files. * Use error channel to capture first error. * Update generated files update generated protobufs * HPA scale-to-zero for custom object/external metrics * Fix iSCSI storage plugin cleanup in block volumes * Score plugin for the scheduling framework. * make taint.ToString() consistent with the reverse parsing logic * Tolerate the case if `related` event is nil * Avoid RbdDiskManager's DetachDisk never execute again * Check return value of LabelSelectorAsSelector in describe * Simplify trigger functions in cacher * kubeadm: use local copy of kubectl's version package * Fix no audit policy by default in hack/local-up-cluster.sh * Fix error shadowing error for createPDWithRetry so failures return actual error * move getInstancesByName logic to helper function * Create C:\tmp if DNE * release: accept empty KUBE_DOCKER_IMAGE_TAG * Promote API metadata return value * remove github.com/kardianos/osext * Propagate error from creating cacher and storage decorators up * Add patch method for container images * Run gofmt * Add test for ContainerStats * Add tracing to GetContainerStats * Fix compile on non windows linux systems * Removed duplicate code * Fix flaky test TestBindPlugin * Revert "Revert "Add Bind extension point of the scheduling framework"" * Rename unused variable * Run gofmt * [kubeadm] Adds json struct tags to exposed API types * kubectl/docs/book: bump lodash from 4.17.5 to 4.17.13 * Fix kubelet watches to propagate all options * cleanup: remove useless code * Remove manual conversions for ListOptions * Fix imports, Formatting of text * delivery event non blocking firstly * Bump Go version for release-1.14 to 1.12.5 * Bump Go version for release-1.13 to 1.11.5 * Adds kubeadm feature-gate for dual-stack (IPv6DualStack). Issue: #1612 * Bugfix: csi raw block that does not need attach mounted failed * Promote StatefulSet Replica scaling * fix: rename RegisterPriorityFunction2 to RegisterPriorityMapReduceFunction * Drop -r for variable within loop * openapi: add list_type_missing violations after bump * apiserver: make changes to integrate new structured-merge-patch * Run update-vendor.sh * Don't print non-error (blank lines in this case) to stdout, and don't print blank lines for empty resources * Adjust redis matching strings * Remove GBRedisSlave image * Use docker official redis images * bazel: add openapi generation for non-main spec and fix main spec * Bump(k8s.io/kube-openapi): aggregator: merge x-kubernetes-group-version-kind slices * feat: use scheduler.New in daemonset integration test * feat: use channel instead of mutex in scheduling predicates * cluster: configure: load images and add tags with no arch * proxy/ipvs: increase log level for graceful termination * Update vendor * openapi: commit low-change code-gen+sample-apiserver specs * apiextensions: update OpenAPI spec with v1beta1 meta types * Makefile.generated_files: build code-generator+sample-apiserver OpenAPI schemas * sample-apiserver: add openapi spec * apiextensions: exclude newly added openapi from hack/update-codegen.sh * code-generator: call openapi-gen from generate-internal-groups.sh * kubeadm/*/phases/init/certs,kubeconfig: add "kubernetes-version" flag * Break out of inner loop when newQuantity is negative * Update pd csi driver images to most recent stable * kubeadm: cleanup unnecessary k8sVer parameter for GetStaticPodSpecs * kubeadm: support fetching configuration from the original cluster for 'upgrade diff' * Add ImageFSInfo, ContainerStats, and ListContainerStats impl for linux to dockershim * Add explicit warning for deprecation of Cinder and ScaleIO volume providers * Fix golint failure in pkg/quota/v1/evaluator/core * Register WatchEvents metric * Make service "no endpoints" test use agnhost connect * move scheduler to use v1beta1.events * Add josephburnett to podautoscaler OWNERS. * Added code for e2e tests for network policy. * Autogenerated files * Migrate WatchBookmarks to Beta * Enable watch bookmarks in reflector * Add `docs` section to pull request template * sample-controller: add note about fetching deps in README * Fix scripts to not rely on codegen scripts being executable * Update testname to match requested case * Fix case and update to follow RFC2119 * Update revision number for the image * Remove support for etcd2 from cluster/images/etcd image * Wait for StackdriverLogging service to stop before restarting it. * Update to go 1.12.7 * add myself and lbernail as IPVS approvers * Remove deprecated --containerized flag in kubelet * improve error messages for verifydependency * Limit the read length of ioutil.ReadAll in `pkg/kubelet` and `pkg/probe` * Add davidz627 (David Zhu) to Approvers for OperationExecutor and GCE PD * use klog.Error instead of klog.Errorf when had no format * Fixes mount/unmount paths for migrated inline volumes. Some minor fixes for GCE specific inline migrated volumes * Move volume_expand tests to storage e2e testsuites * release lib: docker save remove special name for amd64 * Avoid truncating long log messages * mark dashboard tests [Feature:Dashboard] * Use metadata informers instead of dynamic informers in controller manager * Rename metadata.NewConfigOrDie to be consistent * Switch the garbage collector to use metadata client and protobuf * add rbac for events.k8s.io apiGroup to system:kube-scheduler * execute hack/update-codegen.sh, sync updates * add check when qps > 0 but burst <=0 * Add support for HA kubemark * Rename PluginOption to Option * keep processing other nodes for the nil node error * Add check to reduce orphaned volume * removed make-symlink flag and corresponding code in hyperkube * Remove support for KUBEMARK_MASTER_COMPONENTS_QPS_LIMITS * Update testname and fix typo * Update Conformance test Metadata * chore: make some func as public in azure provider * Added custom error message when wrong file is provided with KUBECONFIG (#78185) * Populate API version in synthetic authorization requests * feat: cleanup pod critical pod annotations feature * Return the error from validateOverhead in RuntimeClass#Validate * Return 400 on invalid patch requests * clean up and fix nits * tests: Fixes jessie-dnsutils image build * Generated * Add defaulting tests * Add mutatingwebhook validation tests * Require webhook names to be unique in v1 * Remove default admissionReviewVersions in v1, make required in validation * Remove default sideEffects in v1, make required in validation * Change default timeout to 10 seconds * Change default matchPolicy to Equivalent in v1 * Add EntryType * move jbeda to emeritus * add wojtek-t and yastij as approvers/reviewers for events package * move zmerlynn to emeritus * Switch the namespace controller to use the metadata client * Add fake client, informer factory, and lister to metadata client * Fake ObjectReaction should handle PartialObjectMetadata special * reference paths to update to bump dependencies * Changed to use select-object to filter the log properties * feat: use framework.ExpectNotEqual in e2e test * Remove redundant provisioning tests * Remove redundant tests * Add block volume support to InjectContent / TestVolumeClient * Refactor TestVolumeClient and InjectContent into common function * kubeadm: cleanup the code about cobra * Ignore pending pods. * Migrate kubemark to e2e-up/e2e/down scripts. * Hollow-node should use separate client for heartbeats. * Deployment Controller - don't copy pods in getPodMapForDeployment * flush current namespace when resources are not found * Avoid conflicts with other cobra auto completion * Remove incorrect ampersand in front of AverageValue in describeHorizontalPodAutoscalerV2beta2 * cancel process node if error occurs * Fix projected volume test clean up * Fix 'concurrency' logs typo * Promote pod autoscaling * Add timestamp to the docker test logs * add failedJobsHistoryLimit to successfulJobsHistoryLimit test * add e2e test for cronjob failedJobsHistoryLimit * Add benchmarks for FieldManager handling * promote bentheelder to build/ approver * enable token review when openapi is generated * Add comments as to why we force python2 * apiserver: add --shutdown-delay-duration to keep serving until LBs stop serving traffic * More consistent env var handling in vsphere e2e test * removed flaky watch code and added NewIndexerInformerWatcher * Allow hack/lint-dependencies.sh to skip golang.org/x/... deps, verify in verify-vendor.sh * Use O_CLOEXEC in util packages * Use O_CLOEXEC for volume subpath util * Use EPOLL/O_CLOEXEC in evicition notifier * If volume in delete request does not exist, return success. * make kubectl --raw consistent for create, update, get, delete * Add micro-benchmark for DeploymentController.getPodMapForDeployment method * kubectl book: added a leading slash to apis path * Remove unnecessary return value check * update caddy vendor dependency to v1.0.1 * kubeadm: move klog.InitFlags into app/kubeadm.go * kube-cross makefile add REGISTRY * Handle error return from http.NewRequest() * Remove unused aggregator ca key * Refactored metrics-related functions from framework/metrics_util.go * Revert Provide resource version in error if available * update code documentation to reflect change in status * Add e2e test for downward API with host network * Fix golint failures in pkg/proxy * apiaggregation available controller should only hit required endpoint * Remove unintended ampersand in front of in.Current.AverageValue * For windows, use exec.Command instead of syscall.Execve. * Remove the TODO for container name matching * Remove dead code from csi_client * Remove use of HugePages feature flag in test * update code docs around old todo that is not going to happen * fixed a typo in kubectl book * Change default failurePolicy to Fail in v1 * Install/register v1 admission registration types * Copy v1beta1 to v1 admission registration types * aggregator: wire OpenAPI correctly into PrepareRun flow * Cleanup: Audit log and error capitalization * use ExpectEqual under e2e/autoscaling * apiserver: chain delegated PrepareRun * Update CHANGELOG-1.14.md for v1.14.4. * Update CHANGELOG-1.13.md for v1.13.8. * Replace KubeDescribe with ginkgo.Describe in e2e/kubectl * Trace step should be at the end of calls rather than the begin. * Add node status report frequency to kubemark config * fix incorrect hpa status * use framework.ExpectEqual for tests * fix: use schedulerCache instead of podlister in config factory * Update CHANGELOG-1.12.md for v1.12.10. * feat: use framework.ExpectEqual instead of should * e2e: use framework.ExpectEqual() for test/e2e/lifecycle * Return MetricsError with ErrCodeNotSupported code * Remove panic in storage and add log * Provide resource version in error if available * correct kubectl cp argument order * add fakes for events package, add startEventWatcher to event interface * Use ExpectEqual in e2e/scalability * apiextensions: remove hacks around nullable * update CHANGELOG * Fix wrong indentation in shell * Use framework.ExpectEqual() for e2e/cloud tests * staging file fix lint error: receiver name should not be an underscore and rename * fix: golint error of clientgo * e2e: use framework.ExpectEqual() for test/e2e/network * Populate DisruptedPods field for non-dry run * Add go-runner to the list of e2e test targets * build_defs/pkg/make_deb.py needs python2 * e2e: Skip multi-node PV test when pods scheduled on the same node * update Bazel * e2e: avoid mandatory command line flags * Extender bind should respect IsInterested * feat: use framework.ExpectEqual in storage e2e test * e2e: fix full path support when reading viper config file * e2e: use framework.ExpectEqual() for test/e2e/node * Remove duplicate error messages * Fix descriptions of kubeadm * Closing stopCh when pod_store is not created * correct the CHANGELOG-1.11.md-fix-2 * etcd: Add comment re: SELinux * etcd: Change perms in Makefile, not Dockerfile * etcd: Ensure etcd binaries are world executable * Use framework.ExpectEqual() under e2e/scheduling * Get the pdb when conflict instead of relisting * Use ExpectEqual in e2e/common * Use ExpectEqual in e2e/auth * feat: use framework.ExpectEqual in upgrades and windows e2e test * feat: use framework.ExpectEqual in servicecatalog e2e test * Making sure we handle error on http.NewRequest(). * Use ExpectEqual under apps * cleanup bespoke ipv6 checking in kubeadm * etcd: Allow Makefile to be used on SELinux systems * Remove lazy provide from credential provider and kubelet (#79674) * clean up: node dropDisabledFields * Audit policy test * Allow kube-apiserver to test the status of kms-plugin. * consolidate etcd version * Test kubectl with x-kubernetes-preserve-unknown-fields * Output boolean for AllowPrivilegeEscalation * client-go: update installation instructions to reflect v12.0.0 release * etcd: Ensure etcd binaries are world executable * correct the CHANGELOG-1.12.md * edit google dns hostname * consolidate coreDNS version to ease dependency bump * updated fluentd to 1.5.1, es & kibana to 7.1.1 * Fix HA setup logic * Address couple of issue on image build for ARM arch * Add MASTER_NODE_LABELS * correct flag order in make-help * clean up redundant conditiontype OutOfDisk * add e2e for dualstack * kubelet: fix ip reporting for downward api * Fix golint failure in pkg/kubelet/dockershim/network/cni * Use ExpectEqual in e2e/kubectl * Updated github.com/gogo/protobuf from SHA to nearest-pinnable tag (v1.0.0), as part of dependency management cleanup: #79234 * call unreserve plugin before record event * Use ExpectEqual under e2e/apimachinery * Pass desiredPods to CleanupPods * Update gophercloud vendor dependency to v0.1.0 * kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry * Create a service account Getter when TokenRequest is enabled * Hack PatchNodeStatus() to override the patch type on Status.Addresses * Document the problem with Node.Status.Addresses and strategic merge patch * generated items * vendor updates * updated publishing rules * kubenet for ipv6 dualstack * Add a metadata client to client-go that can read PartialObjectMetadata * release lib: save release docker tag in tarfile * RuntimeClass-admission: fixup comment, simplify nested ifs * kubelet: add allowed sysctl to KubeletConfiguration * correct the CHANGELOG-1.15.md * cri types changes * route controller + azure v6 routes * node ipam controller for ipv6 dualstack * api: dropDisabledFields * types modifications + conversion + conversion testing * IPv6DualStack ALPHA feature * Omit obtaining the lock when adding Nodes in newNodeTree * There are various reasons that the HPA will decide not the change the current scale. Two important ones are when missing metrics might change the direction of scaling, and when the recommended scale is within tolerance of the current scale. * Removed diplicated info row in v1.12.7 * Add public functions to define CSI external tests * Move etcd/util to etcd3/ * Utilize RWMutex for efficient backoff operations * Enable feature gate and kubelet flags for Topology Manager * Make AuthorizeClientBearerToken actually return if authn or authz is nil * Fix publishing x-kubernetes-preserve-unknown-fields working with kubectl * Remove unnecessary ETCD_CA_KEY check * quote container name in container already use error matching * Adds an optional golang runner to the conformance test image * Fix ordering settings in verify bazel * kubelet: add CNI cache dir option and plumb through to CNI and kubenet * move to libcni 0.7.0 * vendor: update containernetworking/cni to v0.7.1 * Cloud provider AWS library should query instance by ID when possible * kubelet: ensure stable order for images in node status * Modify kube-up to support cluster without nodes. * Move population of expectedUIDs outside lock * kubeadm: prevent PSP blocking of upgrade image prepull * Update autogenerated files * Move etcd/testing to etcd3/testing * kubeadm: don't use the Docker SDK in util/system/docker_validator* * Clear valueWatchers instead of removing every entry using a loop * Use Join instead of concat it manually in cephfs. * Add 'apiserver_watch_events_total' metric. * refactor: use controller.FilterActivePods in framework e2e test * Simplify the check of presence of labels in createPods * Deprecate scalability tests * Drop unnecessary claim parameter from PersistentVolumeController#updateBindVolumeToClaim * Update vendor * Update azure-sdk-for-go/services/network to 2018-08-01 * Update vendor * Update azure-sdk-for-go/services/containerregistry to 2018-09-01 * Check the correct value of Quantity in GetResourceRequest * Fix TestUnreservePlugin * Fix a bug that StatefulSet applies the revision incorrectly * improve error msg for predicate meta data * Add mattjmcnaughton as sig-node-reviewer * Autogenerate code * fixed a typo in kubectl book * agnhost: add connect subcommand * Add ability to output watch events from kubectl get * Allow YAML printer to separate multiple printed objects * followup of 79262 to cleanup PodPriority leftover * v1.15.0 API compatibility data * fix hack/update-vendor.sh array expansion * iptables proxier: fix comments for LB IP traffic from local address * Fix cgroup hugetlb size prefix for kB * Update dependency sirupsen/logrus * Update dependency opencontainer/runc * Move APIObjectVersioner * Move etcdtest to testing * Cleanup util file * Move metrics to etcd3 and clean up * Update dependencies BUILD/go.mod/go.sum * Add client-side status object handling * Fix AWS DHCP option set domain names causing garbled InternalDNS or Hostname addresses on Node * fix: predicates read nodes from scheduler cache * Remove internal object printing from kubectl * Updated import statements to reflect move to staging * Move pkg/kubectl/validation to staging * Fix closing of dirs in doSafeMakeDir * Remove unnecessary variable declaration * fix: change timeout value in csi plugin * Adding an if statement to check the number of worker nodes available before running a test that needs 2 nodes. * update openapi-spec * remove finailzers * Remove tests/e2e/scalability from the list of golint failures * Add missing CSINodeInformer when creating ConfigFactoryArgs * Fix golint failures related to docs * Fix golint failures for test/e2e/scalability * Remove dead metrics in etcd code * Default resourceGroup should be used when value of annotation azure-load-balancer-resource-group is empty string * automatically tag tests in test/integration/* as integration * Remove unnecessay call to findNewReplicaSet * supress libseccomp pkg-config errors * fix shellcheck failures in test/e2e_node/conformance/run_test.sh * kubeadm: fix bug for --cri-socket flag processing logic * add unit tests for azure_loadbalancer_test.go * Replace buzybox and pause pod image with agnhost * runtimeclass-admissioN: add owners file * update import-restrictions * Only create one pod per gpu node in E2E test * Add tests for podspec and podtemplatespec default changes * Remove duplicate error messages from cli commands * update vendor * Move pkg/util/logs to staging and update ref * update vendor * Move pkg/util/slice and update refs * Re-add kubectl docs to kubectl staging * Removes test-cmd inappropriate dependency on kubectl * Update BUILD files * Update imports for the files moved to staging * Move pkg/kubectl/util/fieldpath to staging * Use coordination v1 API * Fixed clock.fakeTimer.Stop and Reset * Fix client-go request benchmark * 🔗 fix the KEP-kube-scheduler link * handling OptimisticLockError in kubelet * Run sidecars for csi-mock as privileged * Don't leak ssh connections * Short-circuit the evaluation of `cpuFraction` and `memoryFraction` * tests: Clarifies agnhost's entrypoint-tester's usage * Centralizes images into agnhost (part 3) * Bump gopkg.in/check to v1.0.0-20180628173108-788fd7840127 * Bump objx to v0.2.0 * Bump easyjson to v0.0.0-20190614124828-94de47d64c63 * Bump pty to v1.1.5 * Bump govalidator to v0.0.0-20190424111038-f61b66f89f4a * Bump purell to v1.1.1 * Bump go-openapi dependencies to preferred version * kubelet: retry pod sandbox creation when containers were never created * Fix service controller not release loadBalancer issue in corner case. * hack/boilerplate: added regex to strip Python shebang * Remove monopole from root OWNERS * block not allowed node labels on kubelet * Updated BUILD dependency to use staging * Removes unused BUILD file * Move pkg/kubectl/util/certificate to staging * kubeadm: update OWNERS for 1.16 * tests: Replaces images used with agnhost (part 3) * Updates to dependencies including go.mod, go.sum, and BUILD files * Move pkg/kubectl/util/resource to staging * add defaul latest tag as well * tests: Fixes agnhost logs-generator usage * Add generated proto files * Fix typo in network policy ingress rule * apiserver: store httplog in context * apiserver: don't log stack trace on /healthz error * fix hack/lib/version.sh shellcheck failures * remove dead KUBE_TEST_API_VERSIONS from test-integration * refactor: add reset method to all test plugins * Updates to dependencies including go.mod, go.sum, and BUILD files * Removes unused BUILD file * Move pkg/kubectl/util/qos to staging * Add benchmark for scheduling of pods with PVs * Migrate TaintManager to use watch for listing pods instead of expensive listing pods call. * Fix CRD validation error for 'items' field * fix KubeletConfiguration apiVersion * fix shellcheck failures in cluster/restore-from-backup.sh * Restore early return for podSpecHasContainer * clarify elastisearch script as bash * fix hack/lib/init.sh shellcheck failures * fix hack/lib/swagger.sh shellcheck failures * Conformance walker should handle nested/adjacent Describes * Moving pkg/kubectl/util/storage to staging * Fixed and clarified comments and parameter names in index.go (#77633) * Update link in pull request template * crd-handler: level-trigger storage recreation and fix a race * Dependency changes * Update imports after moving util/event to staging * Move pkg/kubectl/util/event into staging * Add ipv6 support to the DNS e2e tests * move images from gcr.io to quay.io * Add ipv6 support to the e2e guestbook test * Increase Network Policy tests coverage * update vendor * Move pkg/util/rbac to staging and update refs * Update go.mod, go.sum, and BUILD dependencies * Update import statements to reference code moved to staging * Move pkg/kubectl/util/hash to staging * Generated build file for alwayspullimages * Return all errors in alwayspullimages.Validate() * flowcontrol context aware and fix request may hang issue * fix hack/make-rules/make-help.sh shellcheck failures * Replace HTTP compression with an inline handler * Set API compression feature gate to Beta * Add unit tests for CSI predicate * Update scheduler to use volume limits from CSINode * Update nodeinfomanager to store volume limits in CSINode * Auto-generated code for volume limits API * Add volume limits API changes * Update doc.go in staging/src/k8s.io/ * Remove the OutputFormatType and OutputFormatArgument fields as they are no longer used. * move jws to k8s.io/cluster-bootstrap * add IPv6 support to the e2e PreStop test * Use WithOption to implment scheduler register * Refactor statefulset e2e tests * kubeadm: add --control-plane-endpoint flag * Add Policy None for Topology Manager * hack: fixed issues from previous refactor PR * feat: cleanup feature gates for CSIPersistentVolume * Revert "Skip ILB creation on GCE if neg annotation is present" * remove misterikkit from scheduler maintainers * printer: fix a nil pointer dereference * Updated publishing dependencies rules * Updates to dependencies including go.mod, go.sum, and BUILD files * Updated imports for util/deployment * Moved pkg/kubectl/util/deployment to staging * Fix max port value to 65535 * Add env var(CNI_STORAGE_PATH) for cni storage path. * document KUBE_ROOT in util.sh * fix hack/verify-no-vendor-cycles.sh shellcheck failures * fix hack/pin-dependency.sh shellcheck failures * fix hack/update-vendor.sh shellcheck failures * add kube::util::list_staging_repos * automatically set clinkopts * update libssecomp-golang to v0.9.1 * add sleep 5 before exponential backoff in waitUntilVolumeAvailable * Fix --watch-only of a single item with table output * Add kubectl get/list/watch tests for table output * Test humanreadable table output * Fix short buffer error in get test * Update CHANGELOG.md * Updated publishing dependencies rules, import-restrictions * Update go.mod, go.sum, and BUILD file dependencies * Removes unused BUILD file * Move pkg/kubectl/util/podutils to staging * kubeadm: Retire MarshalClusterConfigurationToBytes * kubeadm: Stop using //pkg/util/normalizer * publishing: use deps in replace directive in rules * kubeadm: cleanup ExperimentalControlPlane and ExperimentalUploadCerts * fix: Use correct function to remove etcd member * Pass registry parameter to scheduler instead of global singleton * Add support for writing out of tree custom scheduler plugins * change from milli bytes to bytes in ephemeral-storage resource limits * Drop unused dependencies * github.com/kr/text v0.1.0 * gopkg.in/natefinch/lumberjack.v2 v2.0.0 * github.com/hashicorp/hcl v1.0.0 * github.com/gorilla/websocket v1.4.0 * github.com/google/uuid v1.1.1 * github.com/BurntSushi/toml v0.3.1 * fix test/e2e_node/gubernator.sh shellcheck failures * use kube::util::md5 for update-vendor-licenses.sh * copy kube::release:md5 to kube::util::md5 * Add ipv6 support to [sig-apps] StatefulSet e2e test * feat: cleanup feature gates for KubeletPluginsWatcher * feat: remove several GA features flag * feat: cleanup PodPriority features gate * Respect Allocation IDs * ipvs proxy: add unit test for udp graceful termination * Switch test manifests to apps/v1, remove beta workloads calls * Stop serving apps/v1beta1, apps/v1beta2, and deprecated extensions/v1beta1 resources by default * kubectl attach test: wait for input before proceeding * Move KubeletPodResources to the Beta section * Revert "Add Bind extension point of the scheduling framework" * Use RWMutex to improve locking for serviceCache * e2e: remove framework.Failf * fix typo heathcheck * publishing: fix rules for kubectl * Adds kubectl logo images * added comment * updates based off reviews * update to remove unused test * updated tests to prevent false positive * seperation of network calls when getting version * Update heketi vendor dependency to v9.0.0 * Update BUILD files for container helper * Create helpers for iterating containers in a pod * kubeadm: cleanup command output * service controller: if targetPort has changed will process by cloud-provider * feat: remove several types in runtime serializer * Add stub device plugin for e2e tests * Remove redundant initilization for service controller * Do not delete an incorrect pod when replacing a mirror pod * Refactored runtime.Object helper functions into subpkg * enable ability to show hidden metrics * hack/update-vendor.sh * Move pkg/util/printers to staging and update refs * kunsupported cgroup setup causes kubelet to emit a warning rather than exiting * Moved pkg/kubectl/util/term, pkg/kubectl/util/templates, pkg/kubectl/util/interrupt, and pkg/kubectl/util/interrupt to staging * add myself to sig-network-reviewers * add import-alias for k8s.io/kubernetes/pkg/scheduler/apis/config/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/proxy/apis/config/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/stats/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/resourcemetrics/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/podresources/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/deviceplugin/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/deviceplugin/v1alpha * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/config/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/controller/apis/config/v1alpha1 * add import-alias for k8s.io/api/storage/v1beta1 * add import-alias for k8s.io/api/storage/v1alpha1 * add import-alias for k8s.io/api/storage/v1 * add import-alias for k8s.io/api/settings/v1alpha1 * add import-alias for k8s.io/api/scheduling/v1beta1 * add import-alias for k8s.io/api/scheduling/v1alpha1 * add import-alias for k8s.io/api/scheduling/v1 * add import-alias for k8s.io/api/rbac/v1beta1 * add import-alias for k8s.io/api/rbac/v1alpha1 * add import-alias for k8s.io/api/rbac/v1 * add import-alias for k8s.io/api/policy/v1beta1 * add import-alias for k8s.io/api/node/v1beta1 * add import-alias for k8s.io/api/node/v1alpha1 * add import-alias for k8s.io/api/networking/v1beta1 * add import-alias for k8s.io/api/networking/v1 * add import-alias for k8s.io/api/imagepolicy/v1alpha1 * add import-alias for k8s.io/api/extensions/v1beta1 * add import-alias for k8s.io/api/events/v1beta1 * add import-alias for k8s.io/api/core/v1 * add import-alias for k8s.io/api/coordination/v1beta1 * add import-alias for k8s.io/api/coordination/v1 * add import-alias for k8s.io/api/certificates/v1beta1 * add import-alias for k8s.io/api/batch/v1beta1 * add import-alias for k8s.io/api/batch/v1 * add import-alias for k8s.io/api/autoscaling/v1 * add import-alias for k8s.io/api/authorization/v1beta1 * add import-alias for k8s.io/api/authorization/v1 * add import-alias for k8s.io/api/authentication/v1beta1 * add import-alias for k8s.io/api/authentication/v1 * add import-alias for k8s.io/api/auditregistration/v1alpha1 * add import-alias for k8s.io/api/apps/v1beta2 * add import-alias for k8s.io/api/apps/v1beta1 * add import-alias for k8s.io/api/apps/v1 * add import-alias for k8s.io/api/admission/v1beta1 * add import-alias for k8s.io/api/admissionregistration/v1beta1 * Fix the creation of load balancer policy for the NodeIp when NodePort specified is same as service Port * Fix golint issues in pkg/kubelet/secret * Fix golint issues in pkg/kubelet/prober/results * Fix golint issues in pkg/kubelet/prober * updating github.com/go-bindata/go-bindata to v3.1.1 * Sample controller: Init flags * compiled in a package level var * allow importing k8s.io/klog * auto-generated * Add Bind extension point of the scheduling framework * refactor bootstrap token utils * Clean up selft-set node labels * Fix review comments to use ${} * change sed to ${SED} in local-up-cluster.sh * Obtain readyzLock once in installReadyz * Replace mapfile with kube::util::read-array * autogenerated code update based in new plugin * add RuntimeClass admission controller plugin * introduce RuntimeClass admission controller * Fix mutating webhook test image 'addlabel' to update existing labels instead of clobbering * Close auditStopCh if SecureServing encounters error * Update CHANGELOG-1.15.md for v1.15.0. * Move soltysh back to approvers * Update Sig-Apps OWNERS in places that were missed in #76669 * kubeadm: improve the kubeconfig file validation phase * Dropping unused dependencies * updating github.com/miekg/dns to v1.1.4 * updating github.com/spf13/cast to v1.3.0 * updating gopkg.in/yaml.v2 to v2.2.2 * updating gopkg.in/square/go-jose.v2 to v2.2.2 * updating github.com/stretchr/testify to v1.3.0 * updating github.com/spf13/viper to v1.3.2 * updating github.com/spf13/pflag to v1.0.3 * updating github.com/spf13/jwalterweatherman to v1.1.0 * updating github.com/spf13/cobra to v0.0.4 * updating github.com/spf13/afero to v1.2.2 * refactor: replace framework.Failf with e2elog.Failf * Pass updated deployment for comparison of replica count * Output the nvidia gpu information in the E2E test. * Make the check strict to use ExpectNoError() * pod-overhead: autogenerated code updates * pod overhead: drop from RuntimeClass base on feature-gate * pod-overhead: add Overhead to RuntimeClass internal type * pod-overhead: add Overhead to RuntimeClass * pod-overhead: drop from PodSpec based on feature-gate * pod-overhead: add Overhead to PodSpec internal type * pod-overhead: add Overhead to PodSpec * pod-overhead: Introduce PodOverhead feature gate * Minor change: delete unused constant from service controller * e2e: fix return value of WaitForPodsWithLabelRunningReady * Redundant call to WithAll in NewWaitFlags * Fix golint failures of test/e2e/storage/testsuites * kubeadm: cleanup deps on pkg/version * Move node related methods to framework/node package * Close watcher early for volume detachment * The default-http-backend for handling 404 pages will now point to 404 handler with prometheus integration and provides metrics related to requests per second and the duration of responding to the requests for various percentile groupings. Please check https://github.com/kubernetes/ingress-gce/blob/master/cmd/404-server-with-metrics/README.md for details about the 404-server-with-metrics. * add readyz endpoint for kube-apiserver readiness checks * Refactor online volume resize unit tests * kubelet_stats: fix potential e2e crash dereferencing CPU * kubeadm: cleanup deps on pkg/master/ports * tests: Replaces images used with agnhost (part 2) * move initsystem to kubeadm * Update the comments on how to check disk conflict * re-named conformance test name for pod creating with CPU and memory resources * Add unit tests for azure_controller_common.go and azure_controller_standard.go * tests: Fixes Windows image pulling tests * Remove selected IP from backup-volfile-servers list to avoid warning in mount logs. * rundir attribute was missing for some new integration test cases * fix kubelet can not delete orphaned pod directory when the kubelet's root directory symbolically links to another device's directory * Fix shellcheck faulures in test/cmd * test images: Removes linux/ prefix from agnhost BASEIMAGE * Add interface for registerable metrics which does not have any private methods * fix golint failure in e2e/common/util.go * remove duplicate comment in e2e/common/sysctl.go * Remove unused ServiceController.loadBalancerName method * use reflect.deepEqual for noop object comparison * use noopRegistry for default global legacy prom registry and expose an http handler * Create SECURITY.md for GitHub security policy page * Removed deprecated --resource-container flag from kube-proxy. * Add kubeletstatsv1alpha1 as the preferred alias for k8s.io/kubernetes/pkg/kubelet/apis/stats/v1alpha1 * verify import aliases * correct the CHANGELOG-1.13.md * correct the CHANGELOG-1.14.md * Ignore cgroup pid support if related feature gates are disabled * Code cleanup for for probe/http * Remove unnecessary loop for lowering expectations * Fix CHANGELOG-1.15.md bad format * fix golint failures for pkg/volume/scaleio and pkg/volume/storageos * add m00nf1sh as approver/reviewer in aws provider * Add ExpectEqual() to e2e framework * updating github.com/russross/blackfriday to v1.5.2 * updating github.com/robfig/cron to v1.1.0 * updating github.com/opencontainers/selinux to v1.2.2 * updating github.com/opencontainers/image-spec to v1.0.1 * updating github.com/opencontainers/go-digest to v1.0.0-rc1 * updating github.com/onsi/gomega to v1.5.0 * updating github.com/onsi/ginkgo to v1.8.0 * updating github.com/mvdan/xurls to v1.1.0 * updating github.com/mitchellh/go-wordwrap to v1.0.0 * updating github.com/mistifyio/go-zfs to v2.1.1+incompatible * updating github.com/mholt/caddy to v1.0.0 * updating github.com/mattn/go-shellwords to v1.0.5 * updating github.com/magiconair/properties to v1.8.1 * updating github.com/kr/pretty to v0.1.0 * updating github.com/json-iterator/go to v1.1.6 * updating github.com/jonboulle/clockwork to v0.1.0 * updating github.com/google/gofuzz to v1.0.0 * updating github.com/golang/mock to v1.2.0 * updating github.com/godbus/dbus to v4.1.0+incompatible * updating github.com/go-bindata/go-bindata to v3.1.1+incompatible * updating github.com/fatih/camelcase to v1.0.0 * updating github.com/evanphx/json-patch to v4.2.0+incompatible * updating github.com/emicklei/go-restful to v2.9.5+incompatible * updating github.com/cyphar/filepath-securejoin to v0.2.2 * updating github.com/cpuguy83/go-md2man to v1.0.10 * updating github.com/coreos/go-semver to v0.3.0 * updating github.com/client9/misspell to v0.3.4 * Fix for build failure - viper now uses ConfigFileNotFoundError * Remove dot import from e2e test and replace with framework.ExpectNoError * Fix file permissions for non executable files * Run verify-test-code on all e2e tests * Cleanup e2e_node test style * Increase load balancer timeout in test cases * Refactor pkg/util/mount to be more reusable * Add HEAD fixtures * Add v1.14.0 fixtures * Add missing API groups to compatibility test * kubeadm: Don't use "//pkg/apis/core".Resource helper * Fix nil pointer * link scripts in build/README.md * kubeadm: Replace ValidateDNS1123Subdomain * kubeadm: Don't use RBAC helpers * fix: make azure disk URI case insensitive * Modify klog Warning 'The resourceVersion for the provided watch is too old' to Info. * Remove returned value of func handleCreateEvent * Clean up node-problem-detector configuration for GCI * Updated code with gofmt * kubectl config set hangs on some invalid property names #415 * Enable cadvisor ProcessMetrics collecting. * ipvs: fix string check for IPVS protocol during graceful termination * tests: Combine Linux / Windows image pulling tests * tests: Replaces images used with agnhost (part 1) * tests: Sets MaximumNArgs for agnhost subcommands to 0 * Updates agnhost README and Dockerfile files * Updates agnhost image version in documentation * test images: Centralizes images into agnhost (part 1) * Don't dereference nil pointer in conflicts * test images: Refactors agnhost image * Adding metrics to nfs driver * Fix spurious .sock files running envelope unit tests * Correct a typo * hack/make-rules/test.sh: run all staging unit tests * do not delete pods whose deletiontimestamp != nil * Replaced klog with an error wrapper * homogenize min-request-timeout for cr handler * Centralizes images into agnhost (part 2) * update to go 1.12.6 * get-kube-binaries: use GCE token to fetch artifacts from GCS * [e2e] move Failf from e2e/framework to e2e/framework/log * add more tests on clearing managedFields * Do not add non-PersistentVolume to return value for pvAssumeCache#ListPVs * unit tests for the volume plugin name that's used inside GeneratedUnmapVolumeFunc for csi migration on/off scenarios * Return early when mount ref is determined * Inverted error handling to ensure server-side apply does not fall back on client-side apply when there is an error * Add more backward compatible access mode logic to remove ReadOnlyMany access mode when ReadWriteOnce,ReadOnlyMany specified * prefilter extension point implementation. * cache mutation detector: use correct diff function * fix stability level annotation for counter vec * Update gpu device plugin to better support Vulkan workloads * Fix typos. * apiextensions: simplify default value pruning test * apiextensions: only clone on !s.XEmbeddedResource * apiextensions: add unit test for x-kubernetes-preserve-unknown-fields with additionalProperties * Suppress irrelevant jq error message when propagating pinned dependencies * remove vendored code * Remove ovirt/cloudstack/photon cloud providers * apiextensions: fix variable name * apiextensions: add items+additionalProperties test coverage for objectmeta.Validate * Check correct error for cleanup * added defer keyword to wg.Done() in logs.go * Remove return value of mergeHealthChecks. Simplified HC equivalence check. * Fix typo in node lifecycle controller * fix volumecreate comments * rename and change aws backoff vars * tag some release-blocking tests taking over 5min as [Slow] * kubeadm: fix minor typo in a comment * use klog.Info instead of klog.Infof when had no format * Force using Go Modules in README.md * Fix reserved cgroup systemd * Remove experimental note for ipvs in kube-proxy arguments * Fix keep the watcher open for too long * Use no-priority best-effort pod as the preemptor in BenchmarkGetPodsToPreempt * preload metrics for legacyregistry for backwards compatibility * Allow master nodes to be accessed from private ips * Remove unwanted newlines in glusterfs driver * Promote existing E2Es for hostport/HostIP resolution to conformance * New E2E to verify pods are deleted after Job deletion * fix typo in probe.go * Calling PatchAction on typed objects should work correctly * update CHANGELOG-1.14.md * Fix spelling of test name * enforce the interface relationship between ServicePort and BaseServiceInfo * Fix kubeadm service-cidr mapping to service-cluster-ip-rage for kube-controller-manager. * Modify firewall rules names to make them shorter. * fix some golint failures of pkg/registry * Add integration test for propagationPolicy=Orphan GC * Bug fix: remove etcd related issues in bazel-test-integration * Simplify func ConstructVolumeSpec * remove todo in pkg/ssh * [e2e] Make meaningful service name in test * Add more approvers/reviewers to cluster/gce/windows * Support image status by ID. * Create-update-delete-deployment example using dynamic package * Sort kubeadm CLI default params for component config API objects * merge common funcs * Change quoting format * Fix shellchecks in test/cmd/{b,c}.*.sh * Fix return value for ExtractFieldPathAsString * Remove inner loop for finding MinReclaim in ParseThresholdConfig * Fixed some minor errors in openapi * Enable resize in default gce storageclass * Fix verify-shellcheck comments * Enable API operation log on conformance job * Iterate through thresholds in managerImpl#synchronize * Move test/e2e use to v1 APIs * Remove redundant assignment to volumeAttachment * Add readme for API compatibility data * Add helper script to regenerate API compatibility data * Remove dead codes * kubelet: add sjenning to kubelet subdirectory owners files * 74900, kubectl logs selector supports tail=-1 * Use Mutex for synchronization in imageCache * Use go standard library for common bit operations * kubeadm:fix typo in controlplane.go * change aws encryptedCheck to exponential backoff * Remove pod UID from volumeMount, we can get it elsewhere * Rename pkg/volume/util/quota -> pkg/volume/util/fsquota * Adding test cases to make sure objectSelector works for CRD * fix typo in /pkg/kubelet/container * kubeadm: improve kubelet-config-x.y ConfigMap logic * fix golint failures of pkg/kubelet/prober pkg/kubelet/secret * Add references of registry and image from imageutils * Remove unnecessary string() * kubeadm: apply deterministic order on certificate phases * Check limits for resolve conf outside the loop * Skip tests is fstype is xfs and node distro is gci, cos, or windows * Continue admitting the pod regardless of return value from killPodFunc * Unstructed helpers: document lack of slice syntax * remove unused events in event.go * Refactored pod-related functions from framework/util.go * Avoid unnecessary concatenation of errors * fix typo in /test/integration * fix: assign default value for pod.Status.StartTime in TestSelectNodesForPreemption * delete TODO: remove when we stop supporting the legacy group version * Update SECURITY_CONTACTS with current PSC * hack: refactored code in update_owners.py * fix a mistake in CHANGELOG-1.14.md * fix some mistakes in changelog * Change to EnableHTTPS in kube-apiserver options * Fix golint issues in pkg/kubelet/stats/log_metrics_provider.go * Fix golint issues in pkg/kubelet/client * Use reservoir sampling to select one host from priority list * Fix nil pointer dereference in metrics value calculator. * Call getKubeletSandboxes first in containerGC#evictSandboxes * Break out of loop when currentRevision is found in defaultStatefulSetControl#getStatefulSetRevisions * Fix typo * Updated node.go using update-gofmt.sh * change BeTrue to Equal or BeNumerically in cronjob e2e test * get rid of the redundancy field in kube-proxy option * Add missing TestMain() functions * Cleanup math/rand package usage * Add documentation about "non-zero requests" * fix flexvol stuck issue due to corrupted mnt point * enrich oom event message info * ignore failed pods to not stuck rolling update daemonset * fix golint errors in test/e2e/storage/utils * Narrow down the lock * fix golint failures of pkg/kubelet/configmap pkg/kubelet/custommetrics * kubelet: include init containers when determining pod QoS * kubelet: lookup node address for external provider if none is set * Fix shellcheck failures in test/cmd/g.*sh * fix golint failures of pkg/util/parsers pkg/util/sysctl pkg/util/system * pkg/util/workqueue: delete deprecated metrics * Promote e2e verifying DNS resolution for o pod's fqdn, hostname and subdomain * Clean up pkg/cloudprovider/providers/openstack. * pkg/util/workqueue/prometheus: fix double registration * fix shellcheck failures in /hack/make-rules/test.sh * Add readiness probe for Kibana * fix shellcheck failures in /hack/make-rules/clean.sh,test.sh,vet.sh * Allow version field in the title to be changeable * mark deprecated kubelet-read-only-port * add warning log for csr controllers * Check error return from Update * creating instance groups in parallel * Fix message of failed sync * Updated pkg node BUILD for new lib inclusion * Fix for kube-proxy to wait for some duration for the node to be defined * Update CHANGELOG-1.14.md * Promote security context NodeConformance tests to Conformance suite * tests: creates HostPath pods as unprivileged * fix error 'coresponding' * fix typo: "inidvidual"-> "individual" * Remove unnecessary map in cleanupHistory * Remove unwanted `else` block from statefulset controller. * enable multipod e2es for intree volumes * Bug fix 72757.Removed deprecated label kubernetes.io/cluster-service * apiserver: Update a comment * Fix shellchecks follow the `${var:?}` pattern * Stop testing containerized kubelet in e2e-node * Improve windows home directory selection * rm unused judgement * remove redundant words 'the' in comment * fix cp time stamp is in the future error * Set ProviderID when running kubemark node * add a test case for HostnameOverride * when SessionAffinityConfig is different, enqueueService in update Service handler * Adjust node_exporter CPU params ------------------------------------------------------------------- Mon Sep 23 15:37:01 UTC 2019 - rbrown@suse.com - Update to version 1.15.4: * Omit openapi properties if spec.preserveUnknownFields=true * Ensure all conditions for publishing openapi are satisfied in kubectl e2e tests * [kubectl cp] Reorder symlinks to prevent path escapes * in GuaranteedUpdate, retry on precondition check failure if we are working with cached data * test * Remove usage of kubectl log in tests * Fix windows kubectl log -f. * Fix kubectl e2e test * fix: azure disk name matching issue * Add/delete load balancer backendPoodID in VMSS. * fix: disk not found issue in detaching azure disk * fix: detach azure disk issue using dangling error * Removes conflicting Quobyte tenant test error from API validation * Fix panic when errors are nil * Add/Update CHANGELOG-1.15.md for v1.15.3. * Kubernetes version v1.15.4-beta.0 openapi-spec file updates * Only advertise supported patch types * Update generated protobufs * Update golang/x/net dependency * update go to 1.12.9 * Fix malformed port in vsphere cloud provider test * Fix up failing boilerplate test * Update to go 1.12.8 * Fix a bug in the IPVS proxier where virtual servers are not cleaned up even though the corresponding Service object was deleted. * remove iSCSI volume storage cleartext secrets in logs * fix: use Create for attach/detach disk * Fix events test * Fix GetReference function * Fix Azure client requests stuck issues on http.StatusTooManyRequests * Fix conflicted cache when the requests are canceled by other Azure operations * Continue admitting the pod regardless of return value from killPodFunc * gofmt * address comments * fix gofmt * Make kubelet report usageNanoCores for node on Windows * Update the Windows node image 1809 version to 0709 * Skip tests is fstype is xfs and node distro is gci, cos, or windows * Do not delete an incorrect pod when replacing a mirror pod * Fix the public IP getting issues for VMSS nodes * Validate CSI Inline Migration unconditionally * add unit tests for attacher DisksAreAttached and BulkDisksAreAttached * implement functionality to return all found instances * move getInstancesByName logic to helper function * add ability for gce to bulk verify attached disks * Don't expect pod to stay up during node upgrade * Add/Update CHANGELOG-1.15.md for v1.15.2. * Kubernetes version v1.15.3-beta.0 openapi-spec file updates * Reduce GCE PD Attach Limits by 1 because Node Boot Disk counts as 1 attached disk * Update kube-addon-manager to v9.0.2. * kubeadm: update the supported version for 1.15 * kubeadm: apply a number of _test fixes * Register Kubelet server metrics * Return MetricsError with ErrCodeNotSupported code * quote container name in container already use error matching * feedback 1 * fix-file-discovery * autogenerated * Fix nil pointer dereference in metrics value calculator. * make node lease renew interval more heuristic * Add supportedMountOptions for GCE PD CSI Driver tests * Add passthrough for MountOptions for NodeStageVolume for CSI * Update unit test with expected query parameters * Remove manual conversions for ListOptions * Bugfix: csi raw block that does not need attach mounted failed * Update publishing/rules to go 1.12.7 * Update to go 1.12.7 * kunsupported cgroup setup causes kubelet to emit a warning rather than exiting * Fix the creation of load balancer policy for the NodeIp when NodePort specified is same as service Port * Fix cgroup hugetlb size prefix for kB * Fix a bug that StatefulSet applies the revision incorrectly * printer: fix a nil pointer dereference ------------------------------------------------------------------- Mon Aug 05 12:37:38 UTC 2019 - rbrown@suse.com - Update to version 1.15.2: * refactors to kubernetes cp command * refactors to kubernetes CP command * apiextensions: 404 if request scope does not match crd scope * apiextensions: add scope tests * Add/Update CHANGELOG-1.15.md for v1.15.1. * Kubernetes version v1.15.2-beta.0 openapi-spec file updates ------------------------------------------------------------------- Mon Aug 05 11:48:03 UTC 2019 - rbrown@suse.com - Update to version 1.15.1: * apiaggregation available controller should only hit required endpoint * kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry * skip test if the server does not serve extensions/v1beta1 since this is deprecated * use apps/v1 instead apps/v1beta1 since that is deprecated - issue 79533 * fix: change timeout value in csi plugin * edit google dns hostname * Test kubectl with x-kubernetes-preserve-unknown-fields * There are various reasons that the HPA will decide not the change the current scale. Two important ones are when missing metrics might change the direction of scaling, and when the recommended scale is within tolerance of the current scale. * Fix closing of dirs in doSafeMakeDir * Fix publishing x-kubernetes-preserve-unknown-fields working with kubectl * Fix AWS DHCP option set domain names causing garbled InternalDNS or Hostname addresses on Node * kubeadm: fix bug for --cri-socket flag processing logic * fix kubelet can not delete orphaned pod directory when the kubelet's root directory symbolically links to another device's directory * Add HEAD fixtures * Add v1.14.0 fixtures * Add missing API groups to compatibility test * Move KubeletPodResources to the Beta section * Default resourceGroup should be used when value of annotation azure-load-balancer-resource-group is empty string * kubelet: retry pod sandbox creation when containers were never created * fix flexvol stuck issue due to corrupted mnt point * crd-handler: level-trigger storage recreation and fix a race * fix KubeletConfiguration apiVersion * kubeadm: improve kubeadm command output * Ignore cgroup pid support if related feature gates are disabled * fix: Use correct function to remove etcd member * Add/Update CHANGELOG-1.15.md for v1.15.0. * Kubernetes version v1.15.1-beta.0 openapi-spec file updates ------------------------------------------------------------------- Mon Jun 24 09:02:23 UTC 2019 - rbrown@suse.com - Update to version 1.15.0: * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.15.md#v1150 * Drop git-upstream.patch * The default Go version was updated to 1.12.5 * Fixed kubectl exec usage string to correctly reflect flag placement. * Fixed kubectl describe cronjobs error of Successful Job History Limit. * In the kubectl describe output, the fields with names containing special characters are now displayed as-is without any pretty formatting, avoiding awkward outputs. * Fixed incorrect handling by kubectl of custom resources whose Kind is "Status". * Report cp errors consistently, providing full message whether copying to or from a pod. * Preserved existing namespace information in manifests when running set ... --local commands. * Support for parsing more v1.Taint forms has been added. For example, key:effect, key=:effect- are now accepted. ------------------------------------------------------------------- Tue Apr 23 21:59:41 UTC 2019 - dorf@suse.com - Update to version 1.14.1: * Minor bugfixes with no user facing changes * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#v1141 ------------------------------------------------------------------- Fri Apr 12 09:34:23 UTC 2019 - Richard Brown <rbrown@suse.com> - Fix go 1.12.1 BuildRequires ------------------------------------------------------------------- Thu Apr 11 21:16:45 UTC 2019 - Daniel Orf <dorf@suse.com> - Reformat spec file with spec-cleaner ------------------------------------------------------------------- Tue Mar 26 10:11:00 UTC 2019 - rbrown@suse.com - Update to version 1.14.0: * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md * bump required minimum go version to 1.12.1 (strings package compatibility) ------------------------------------------------------------------- Fri Mar 01 10:14:20 UTC 2019 - Richard Brown <rbrown@suse.com> - Update to version 1.13.4: * version bump to keep in sync with kubernetes 1.13.4 ------------------------------------------------------------------- Thu Feb 7 11:02:04 UTC 2019 - Richard Brown <rbrown@suse.com> - Update to version v1.13.3 * Update to go1.11.5 * fixed "too old resource version" errors continuously appearing when calling kubectl delete * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#changelog-since-v1132 ------------------------------------------------------------------- Fri Jan 11 10:00:00 UTC 2019 - Jordi Massaguer Pla <jmassaguerpla@suse.com> - Previous update to v1.13.2 fixed CVE-2018-18264 and CVE-2018-16875 ------------------------------------------------------------------- Fri Jan 11 09:35:29 UTC 2019 - Richard Brown <rbrown@suse.com> - Update to version v1.13.2 * Fixes kubectl create secret docker-registry compatibility * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#v1132 ------------------------------------------------------------------- Tue Jan 8 11:26:32 UTC 2019 - Richard Brown <rbrown@suse.com> - Update to version v1.13.1 ------------------------------------------------------------------- Fri Dec 7 11:04:38 UTC 2018 - Richard Brown <rbrown@suse.com> - Update to version v1.13.0 - Drop obsolete do-not-gc-sle-kubic-images.patch (container-feeder no longer used) ------------------------------------------------------------------- Thu Dec 6 10:50:26 UTC 2018 - Richard Brown <rbrown@suse.com> - Update to version v1.12.3 - CVE-2018-1002105: Fix critical security issue in kube-apiserver upgrade request proxy handler -------------------------------------------------------------------- Fri Sep 28 12:19:40 UTC 2018 - Richard Brown <rbrown@suse.com> - Update to version v1.12.0 - Remove obsolete build-with-debug-info.patch ------------------------------------------------------------------- Thu Aug 2 08:15:00 UTC 2018 - mmeister@suse.com - Switch to go 1.10 Kubernetes requires go1.10.2 or greater ------------------------------------------------------------------- Wed Aug 1 14:00:52 UTC 2018 - jmassaguerpla@suse.com - Add a conflict with kubernetes-client. Both packages provide kubectl but in kubernetes-client kubectl is a link to hyperkube, from kubernetes-common. ------------------------------------------------------------------- Wed Aug 01 12:19:36 UTC 2018 - opensuse-packaging@opensuse.org - Update to version 1.11.1: * Revert "Automated cherry pick of #65313: Adds cri-tools as a dependency to kubeadm deb/rpms" * Always mark gke-exec-auth-plugin executable * Don't delete pkg/generated/bindata.go in make clean * fix bug for garbage collection * Adding generated files * Removes defaulting of CSI fsType to ext4 * kubeadm: run kube-proxy on non-master tainted nodes * ensure rs pod cleanup happens * ensureInternalBackendServiceGroups inserts InstanceGroup links, not nodes * move t.Parallel() out of for loop * switch delete strategy to background deletion * Generate pkg/generated/bindata.go for release-1.11 * Don't gitignore pkg/generated/bindata.go * verify-generated-files: ensure git tree is clean * Add script to verify generated files * Fix pod worker deadlock. * Remove unnecessary spaces ahead of custom yaml. * Add a helper function to customize K8s addon yamls and use it to customize Calico addons on GKE. * A few cleanups (remove duplicated env vars & unnecessary comments) on yaml files. * Update Calico addon yamls to make it work for both 2.x and 3.x. versions. * Update to go1.10.3 * Update to rules_go 0.10.5 * re-make print flags composeable for sophisticated callers * fix go-template defaulting for commands w default output format Fixes defaulting done for commands that default to a specific output format (such as yaml, json) when a --template flag is provided and no explicit --output value is given. * make template printers a recommended printer * Fix truncating and buffering backends integration. * set EnableHTTPSTrafficOnly in storageAccount creation * update priority admission for interoperability * Build file generated * Add priority to defaultOn plugins list * Fix RunAsGroup. * pause image should be arch agnostic * adds post install step to kubeadm deb built by bazel * Adds cri-tools as a dependency to kubeadm deb/rpms * GC: remove CRD and APIService from ignored resources * fix azure storage account creation failure * Always create kubeClusterIPSet * fix 'kubectl cp' with no arguments causes a panic * Update output format so that it matches actual accepted values * fix ipset creation fails on centos. issue 65461 * Reload systemd config files before starting kubelet. * azure: Add validation of resourceGroup option * Remove scheduler config deprecated warning as the new component config is still in alpha * Change our tests to ensure that critical system pods are created in the system namespace * Autogenerated files * Limit usage of system critical priority classes to the system namespace * Allow custom manifests in GCP master setup * fix azure disk issue for external resource group * azure: Move configuration of resource group in storage class. * fix comments * specify external resource group in ResizeDisk * add external resource group support for azure disk * skip nic that are in failing state * Bug fix: Should allow alias range size equals to max number of pods * 2 * apiserver: do not print feature gates for glog v=0 * add scrape port to service * Set pod priority on kube-proxy by default * Fix comments about default mount propagation * Fix out of bounds error on non-64-bit machines * Fix bug printing openapi columns * BUGFIX: must use ID, not name, of the node security group when adding rules to it * Insert human curated 1.11 release notes and set current version * Add/Update CHANGELOG-1.11.md for v1.11.0. * Kubernetes version v1.11.1-beta.0 openapi-spec file updates * Update Rescheduler's manifest * Fix cleanup of volume metadata json file. * Fix UnmountDevice with deleted pod. * Fix some log issues in flexvolume * fix scheduler client construction from configuration files * etcd: reuse leases for keys in a time window * update NPD version to v0.5.0 for gci * Add a GPUClusterDowngrade test. * Add/Update CHANGELOG-1.11.md for v1.11.0-rc.3. * Add /home/kubernetes/bin into sudoers path, so that `sudo crictl` works. * Fix scheduler config decoding * Pass cluster_location argument to Heapster * Add/Update CHANGELOG-1.11.md for v1.11.0-rc.2. * Remove optimization from getWork in resourcequota/controller.go * special-case template printing in get.go * Change prometheus versions from latest to tag * Have the /rootfs rw for containerized node e2e * make sure delete waiting doesn't re-evaluate the resource lists * Remove item from taint manager workqueue on completion * Revert "Automated cherry pick of #65189: fix paths w shortcuts when copying from pods" * update cadvisor godeps to v0.30.2 * Split scheduler latency metric to fine-grained steps * Add/Update CHANGELOG-1.11.md for v1.11.0-rc.1. * stop returning invalid json fields in CRD OpenAPI schemas * bump(k8s.io/kube-openapi): 91cfa479c814065e420cee7ed227db0f63a5854e * fix paths w shortcuts when copying from pods * fix scheduler port boundary to match detection * Update crictl to v1.11.0. * Fix a changelog entry in v1.11 * Fix kubeadm unit tests relying on internet access * use the release-1.11 branch by default * Update CHANGELOG-1.8.md for v1.8.14. * Cluster Autoscaler 1.3.0 * kubeadm: Fix a small config upgrading issue with .CloudProvider * cri-tools deb: Rename cri_tools to the correct cri-tools * kubeadm: Fix a bug where skipping all preflight checks wouldn't activate the kubelet * Move service account key file arg to the service-account controller options * kubeadm: Make the environment file writing happen on upgrade as well * Use kubernetes image repo for coredns * Fix kubeadm init/upgrade --dry-run mode * Update Cluster Autoscaler to v1.3.0-beta.2 * decode crd objectmeta properly * apiextensions: fix concurrent map access copying items' ObjectMeta in Unstructured * Fix check for CRD watch priming * fix schema for kubeproxyconfig/v1alph1 * make json serializer case sensitive * vendor the latest json-iterator * Use context with timeout instead of context.Background * Wait a minimum amount of time for polling operations * Update tests to reflect that kubeadm taints should not override node taints * vendor: update hcsshim to v0.6.11 * Readding summary metrics * Revert "Fixing scheduling latency metrics" * Start plugin watcher after initialization of all kubelet components * Added PV GET api rule to external-provisioner * Fix kubeadm taints to not override existing node taints * Re-use private key after failed CSR * fix iptables_test typo * Replace manifest-tool with docker manifest command * Add kms-plugin-container.manifest to release manifest tarball. * mark kubectl wait as experimental * Compute avg and quantiles of scheduler throughput in density test * autogenerated * kubeadm: Fix a couple of small-ish bugs for v1.11 * kubeadm - fix local etcd grpc gateway * Increase logexporter timeout and add debug logs * Adding scale error retries * daemon: add custom node indexer * kubeadm - local etcd configuration bugfixes * Issue 63622 - Flaky e2e/aggr test. * Limit the mounted directory to cluster-autoscaler/ * fix eviction event formatting * fix memcg fd leak * update cadvisor godeps to v0.30.1 to revert cadvisor#1916 * fix-kubeadm-pull-log * Cluster Autoscaler 1.3.0-beta.1 * volume: decrease memory allocations for debugging messages * fix field removal in mutating admission webhooks * Disambiguate a comment * improve memory footprint of daemonset simulate * Limit access to configmaps * dockershim/network: add dcbw to OWNERS as an approver * Create system:cluster-autoscaler account & role and introduce it to CA start-up script * fix a bug of wrong parameters which could cause token projection failure * Don't specify a description for Calico CRDs * re-enable memcg for testing on gce * Ensure directory is created for kubelet configuration * Fix output of `kubeadm migrate config` * Revert "Add validation code for the Vertical Pod Autoscaler API." * Revert "Auto-generated code for the Vertical Pod Autoscaler API." * Revert "Add Vertical Pod Autoscaling API to the autoscaling group." * Add/Update CHANGELOG-1.11.md for v1.11.0-beta.2. * Update CHANGELOG-1.11.md for v1.11.0-beta.2. * Use repo prefix when generating image names * Adds a crictl package for kubeadm installs * Fix setup of configmap/secret/projected/downwardapi * Add clarification for Windows DNS setup flow * Revert "Fix Windows CNI for the sandbox case" * autogenerated * Add a 'kubeadm upgrade node config' command and finish up the kubelet integration work * Add TODO for removing kubectl DaemonSet deletion hack * Revert "Remove hack in kubectl delete that handles DaemonSet deletion" * Remove myself from sig-cli OWNER alias * Add validation code for the Vertical Pod Autoscaler API. * Auto-generated code for the Vertical Pod Autoscaler API. * Add Vertical Pod Autoscaling API to the autoscaling group. * Update CHANGELOG-1.10.md for v1.10.4. * kubeadm: Don't match DNS versions to K8s versions * kubeadm: When etcd is listening on all interfaces, set the etcd probe to use loopback * auth: standalone kubelets shouldn't start a token manager * disable process scheduler metrics * update cadvisor godeps to v0.30.0 * Remove hack in kubectl delete that handles DaemonSet deletion * Skip updating status for DaemonSet being deleted * Generated code for gce_disks refactor * Refactored disk cloudprovider methods to use generated client; Refactored gce_disks unit tests; Removed unused gce_op.go and associated unit tests. * autogenerated * Switch to Beta * sysctls: create feature gate to track promotion * Run make update * kubeadm: Upload CRISocket information and hence make kubeadm join blocking * Fix standalone dockershim. * Reconcile extended resource capacity after kubelet restart. * Promote sysctl annotations to API fields * CSI implementation of raw block volume support * Rate limit only when an actual error happens, not on update conflicts * Set GCE PD attachable volume limit based on machineType * Inject ContainersReady * Generate ContainersReady condition * add ContainersReady condition * kubeadm: Update the dropin for the kubelet in v1.11 * document per-field advice for dynamic Kubelet config * coredns to use gcr.io repo * kubeadm lowercases all domain names passed as additional SANs * Fix kubeadm for v1alpha1 configs * apiextensions: allow Description in the root schema for subresources * fix kubectl -o * housekeeping: improved language used in ISSUE_TEMPLATE.md * Fix quota sync * Create new variable for each iteration step * Provision interface change * kubectl cp support colons-in-filename * Dynamic provisioning allowed topologies scheduler work * Run CoreDNS container only with CAP_NET_BIND_SERVICE, drop all other (root) privileges. Run filesystem of container and config in read-only mode. * Fix panic while provisioning Azure security group rules * remove deprecated option '--enable-custom-metrics' * generated files * Setup docker options according to windows security context * Setup windows security context in CRI * Add security context for Windows containers * API changes for Topology aware dynamic provisioning * implement service account token projection * Add support for enforcing read only host paths in PSPs. * staging godep update * Test job backoffLimit correctly * Add mbohlool to apiextensions-apiserver reviewer list * Update dependency * Update GCE cloud provider to use Cloud TPU v1 API * Bazel BUILD fixes * Modify security profile for proxy * Fix the handling of untagged images * Update generated bazel * New labelmanager package * update golang/protobuf to v1.1.0 to satisfy CSI v0.3.0 hard requirement * Adding CSI driver registration * coredns to gcr.io repo * Update container-storage-interface/spec vendor to v0.3.0 (and related dependencies) * Introduce priority class in the resource quota * Add gpu cluster upgrade test. * trigger kubelet sync pod on reconciliation * Generate pod ready status with readiness gates * Only mount subpath as readonly if specified in volumeMount * Fix panic caused by no cloudprovider in test * Kubeadm-initialised kubelet uses provided hostname if present * Bazel artefacts * Fix test tag on dynamic config tests * Never clean backoff in job controller * Remove event handler to satisfy alpha tests * apimachinery: do not fuzz ObjectMeta.{Labels/Annotation} with empty keys * kubeadm: use nodeselector instead of affinity in kube-dns * kubeadm: use nodeSelector to only run kube-proxy on architecture consistent nodes * Replace glog.Info{f,ln} with fmt.Print{f,ln} * Log policy name from pod security policy * add WithAudit admission decorator * support AddAnnotation in admission attributes * Allow parametrization of RequestedToCapacityRatio priority function via policy config * Register RequestedToCapacityRatioPriority priority function * add NON_MASTER_NODE_LABELS to config-test.sh * Code clean up * Refactor of GenerateMapDeviceFunc to delegate Map call to volume plugin. * azuredisk size grow feature * support netd on k8s * kubeadm: Set the kubelet `--resolv-conf` flag conditionally on init * Updated generated files * API updates for Cinder Volumes to support for user specified Secrets in the future * Clarify --hostname-override and --cloud-provider interaction * printers: add deepcopy tests to generated tables * conversions: don't mutate in.ObjectMeta.Annotations * printers: fix json types – int64 is only allowed integer * apply global flag "context" for kubectl config view * Avoid deadlock in gc resync if available resources change during sync * Updated integration test. * Eanbled schedule DaemonSet Pods by default scheduler. * Updated helper funcs to use nodename. * Address comments in #64006. * Set deployment security profile to docker/default * Update istio addon manifest to 0.8 * GC fallback to jsonmerge patch when SMP is not supported * validation and feature gate * make update * add ReadinessGates in pod spec * Implement kubelet side changes for writing volume limit to node * Implement volume plugin changes for volume limits * Implement scheduler changes for volume limits * Implement API changes needed for dynamic volume limits * Add metrics for envelop transformer: transformation_operation_count transformation_failures_count envelope_transformation_cache_misses_count data_key_generation_latencies_microseconds data_key_generation_failures_count * Add wait.PollImmediateUntil * apimachinery: adapt ObjectConvertor invariant * client-go: make exec auth and auth provider mutually exclusive * generated: * client-go: promote exec plugin support to beta * clientauthentication: add v1beta1 API version * GitRepo command hardening * Validate git args are not flags prior to mounting * apiextensions: add ObjectMeta schema validation and pruning * Replace openapi Fake with kube-openapi version * fix the verify job * Increase timeout * Add feature gate for kubelet plugin watcher * Update pod phase documentation * CSI fix for gRPC conn leak, test updates * Add netd as an addon for GKE. * Revert "Remove rescheduler and corresponding tests from master" * fix bug excludeCIDRs was not assign in func NewProxier * add debugging for aggregator flake * Update CHANGELOG-1.11.md for v1.11.0-beta.1. * Add/Update CHANGELOG-1.11.md for v1.11.0-beta.1. * Quote shell variable expansion * Update bazel. * Update unit test. * Proxy container streaming in kubelet. * disable memcg for testing prior to 1.11 release * Rename online resizine feature gate * openapi: Remove FakeClient from testing library * Kubeadm/k8s version mismatch is now a skippable error * cloud node controller: improve error handling for node registration * remove extra "../" when copying from pod to local * Add tallclair to milestone maintainers * autogenerated * Add unit tests for the new Bootstrap Token objects and functions * kubeadm: Initial refactor of the Bootstrap Tokens. Add the new API objects, add/move helpers and start using the new flow in the code * Move helper funcs and constants to the client-go Bootstrap Token package from kubeadm * code-gen: support running from anywhere * Save kubeadm manifest backup directories * Use default seccomp profile for GCE manifests * Add ipvs module loading logic to gce scripts * Move pkg/scheduler/schedulercache -> pkg/scheduler/cache * Mount the kubeletConfigPath rw when running containerized node e2e tests * implement kubelet side online file system resize for volume * kubeadm uses its own scheme instead of kubectl scheme * remove unused code in kubeadm error.go * use subtest for table units (pkg/master) * Support dynamicly set logging verbosity * svcacct: validate min and max expiration seconds on TokenRequest * generated: update generated API files * core v1: deprecate the gitRepo volume type * Add TLS support to exec authenticator plugin * add a flag to control the cap on images reported in node status * [gce provider] More wrappers for alpha/beta backend service * add utils for pod condition * make update * fix unit tests using Patch in fake client * add Patch support in fake kubeClient * change kubelet status manager to use patch instead of put to update pod status * include patch permission for kubelets * add utils to patch pod status * autogenerated * dns record scale test * apiserver: update tests to use sub-benchmarks (aes_test.go) * kubeadm: conditionally set the kubelet cgroup driver for Docker * Fix error message to be consistent with others * Parallelize taint manager * e2e test for block volume provisioning * apiserver: update tests to use sub-benchmarks (secretbox_test.go) * Fixing scheduling latency metrics * remove unused parameter in func buildFakeProxier * Promote watch e2e test to conformance * autogenerated * kubeadm: Add a 'kubeadm config migrate' command * Possible cipher suites values and tls versions in help for apiserver and kubelet * add api for service account token volume projection * remove ipvs feature gateway * remove unused status per TODO * Build files generated * Phase out rescheduler in favor of priority and preemption * Modified regional PD test to fetch template name from GCE * Remove direct and indirect streaming runtime interface. * Add dry-run to auth reconcile * Deprecate the in-tree keystone plugin * e2e node: mark pod cgroup test as [NodeConformance] * update set selector to use resource builder flags * cleanup some dead kubectl code and narrow scope of helpers * fix dynamic kubelet config tests * node e2e: fix the missing square brackets * Correctly apply request transforms with flattened resource builder * Add dynamic environment variable substitution to subpaths * Add probe based mechanism for kubelet plugin discovery * Auto-generated files * create coredns and kube-dns folders * autogenerated * Update unit tests to use the new NodeRegistration object * kubeadm: Move .NodeName and .CRISocket to a common sub-struct * add resource builder flags * client-go: start fresh with owner file * fix the delete result being used * services must listen on port 443 * apiextensions-apiserver: add establishing controller to avoid race between established and CRs actually served * include rollout object name in cli message * Add block volume support to internal provisioners. * client-go: document README exception in .github/PULL_REQUEST_TEMPLATE.md * Declare wait flag in way consistent with other deletion flags * DaemonSet internals are still in extensions * Add daemonset when to getReplicasFromRuntimeObject when cleaning objects in e2e * Allow AWS EBS volumes to be attached as ReadOnly. * Increase the timeout when waiting for the job to be gone * remove unnecessary factory delegation for RESTClientGetter method * Fix GKE Regional Clusters upgrade tests * kubeadm: Use loadPodSpecFromFile instead of LoadPodFromFile * UX improvement for preflight check for external etcd client certificates * Fix bug with scheduler throughput variable pass-by-value * e2e/storage: central argument handling * move filename flags to genericclioptions * move resource builder flags to genericclioptions * Update generated files * apiextensions-apiserver: add columns to CRD spec * fix azure file size grow issue * Remove Generators from Factory * move scaleClient from factory * ccm: recognize InstanceNotFound from InstanceID * Restore InstanceNotFound comment & logic * collapse into one factory * kubeadm: do not use --admission-control for the API server * Improve the help of kubeadm completion * Wait for PODs ready after scale up * Run cluster-autoscaler+GPU e2e tests for all gpu types * bump(github.com/evanphx/json-patch): 94e38aa1586e8a6c8a75770bddf5ff84c48a106b * Remove unused limit writer. * [gce provider] Update auto-generated codes * [gce provider] Add more wrapper for securiti policy * Adding a shutdown script that would enable handling preemptible VM terminations gracefully in GCP environment * Fix nodeport repair for ESIPP services * Fix DsFromManifest() after we switch from extensions/v1beta1 to apps/v1 in cluster/addons/device-plugins/nvidia-gpu/daemonset.yaml. * remove gce_address_fakes.go from BUILD file * Remove some unnecessarily gendered pronouns in comments * mocks must return true in order to trigger err * use fakeGCECloud instead of gce address fakes * Remove initializer test Initializers are alpha, broken and a subject for removal. They don't work well with finalizers and the previous hack present in deployment and replicaset reapers was just hiding this problem. * Handle DaemonSet removal the old way * Remove kubectl reapers * Remove feature tags from e2e test for resize * Fix breaking volume resize e2e tests * Move volume resizing to beta * Prepulls images by default * fix parsing 'crictl pods -q' output * disable PersistentVolumeLabel admission controller by default * remove CrictlChecker from preflight checks * Should use `hostProcMountinfoPath` constant in nsenter_mount.go. * Ensure that only IPs are used as node addresses in OpenStack LBs * Revert "Change default min-startup-pods value" * Measure scheduler throughput in density test * Move Ceph server secret creation to common code. * fix toleration validation invalid error * Update feature warning for log rotation flags. * simplify else * Rename and add unit test for ImageSizes * HandleError include the type of the error object * Move SuggestedPodTemplateResources from factory to set_resources * Fix hasClusterTag to actually get behavior we want * Update nvidia-gpu-device-plugin to apps/v1 and use RollingUpdate updateStrategy. * fix space-vs-tab indent on comment line * Pull gke-exec-auth-plugin binary on Nodes * Resurrect lost log line * Remove signal handler registration from pkg/kubelet * kubeadm: rename the `kube-dns` phases addon * MapString* should return empty string for String() when null * Use default seccomp profile for flutend-elasticsearch addon * Use default seccomp profile for DNS addons. * graduate DynamicKubeletConfig feature to beta * Run hack/update-all.sh * Expose openapi schema to handlers * Update version of k8s.io/kube-openapi * add PST to main SECURITY_CONTACTS as formality * fix describer tests * move Describer from factory * Trigger function for secrets * update manifest * apiextensions: cleanup test/integration helpers * apiextensions: unify multi- and mono-versioned test helpers * pv_controller change for provisioning * Add dynamic provisioning process * cache update for dynamic provisioning * Add reason message logs for non-exist resources * apimachinery: remove unused UnstructuredObjectConverter * replace `__internal` with runtime.APIVersionInternal * resourcequota return StatusError when timeout * Always masquerade node-originating traffic with a service VIP source ip * Fix Windows CNI for the sandbox case * Add unit tests for findRule() * Add verbose logs for azure cloud provider * Check LoadBalancingRulePropertiesFormat for azure load balancers * Move unrelated methods from the factory to helper * Optimize the lock which in the RunPredicate * fix bugs that break processing when printing errors occur in kubectl * fix kubectl set subject --all option invalid bug * add metadata to kubelet eviction event annotations * Update function hasClusterTag to fix issue #64230 * kubeadm: Improve the kubelet default configuration security-wise * conformance: normalize the test names * Moving Regional PD e2e tests to regular test suites * apiextensions: reduce verbose logs in removeDeadStorage * apiextensions: make CreateNewCustomResourceDefinition return created CRD * Explictly enable cgo when building kubectl for darwin from darwin * Add KUBE_CGO_OVERRIDES env var to force enabling CGO * prevent zero for leader election timeouts * Do not use DeepEqual to compare slices in test. * autogenerated * kubeadm: Refactor the .Etcd substruct in the v1alpha2 API * Update generated files * Add clarification for GA in Version Priority sorting * add test: verify kubelet.config.Restore only happen once * apiextensions: extract orthortogonal behaviour from nopConverter * move rollbacker from the factory * move Pauser and Resumer from the factory * move more CanBeExposed from factory_client_access * do some code clean for cloud-controller manager * Nsenter unit tests * Pass Nsenter to NsenterMounter and NsenterWriter * Created directories in /var/lib/kubelet directly. * Split NsEnterMounter and Mounter implementation of doBindSubpath * Refactor doBindSubPath into smaller functions: * Change SafeMakeDir to resolve symlinks in mounter implementation * Enhance ExistsPath check * Allow EvalSymlinks target not to exist. * Add GetMode to mounter interface. * add missing flag for kubeadm config images pull command * Use DeleteOptions.PropagationPolicy instead of OrphanDependents (deprecated) in kubectl * Fix incorrectly set resource version in List * should not ignore err when convert controllermanagerconfiguration api * Validate cgroups-per-qos for windows * Fixes fsGroup check in local volume in containerized kubelet. Except this, it also fixes fsGroup check when volume source is a normal directory whether kubelet is running on the host or in a container. * Correctly identify types served in the kube-apiserver openapi doc * add colon separators to improve readability of test names * fix the e2e node helpers that let tests reconfigure Kubelet * re-reorder authorizers (RBAC before Webhook). * Add warnings about cache invalidation. * autogenerated * kubelet: Move RotateCertificates to the KubeletConfiguration struct * extend configmap tests to include CoreDNS * add dynamic config metrics * Generated files * CRD versioning with no-op converter * Do not bypass same version unstructed conversion if it is a list * CRD versioning validation and defaulting * CRD versioning - types change * e2e/auth: Expect apps/v1 Deployment calls in audit test. * Set explicit labels/selector for apps/v1 Deployment/RS. * test/integration: Use apps/v1 Deployment/ReplicaSet. * test/e2e: Use apps/v1 Deployment/ReplicaSet. * kubectl: Use apps/v1 Deployment/ReplicaSet. * Use apps/v1 in Deployment controller. * Stub out BackendService check in Ingress upgrade test. * Add Logf message for skipped succeeded pods * Remove some completed TODOs * move f.Command out of the factory * log bad format git version * remove portsforobject from factory * add a discarding printer for testing and delegation * generated * add wait * generated * switch rbac to external * ipvs lb local session affinity * Added unit tests to sample-controller * Simplify the volume util by v1helper. * Allow env from resource with keys & updated tests * add volumeName in getVolumeSpecFromGlobalMapPath * e2e: Remove flaky from CSI E2E test * autogenerated * kubeadm: Write kubelet config file to disk and persist in-cluster. Also write runtime environment file and fixup the kubelet phases command * test/e2e/common: Add NodeFeature or NodeConformance tags * kubectl use its own logs * auto generated file * load kernel modules required by IPVS in kubeadm * Rename Du() to DiskUsage() for more expressive * convert Duration into seconds by go library function * fix kubectl get --show-kind * test/e2e/common: add NodeConformance tag to all Conformance tests * generated * test/e2e_node: Add NodeFeature tags to non-conformance tests * Re-tag benchmark tests * test/e2e_node: mark more tests with [NodeConformance] * test/e2e_node: Add Node-exclusive feature tags to existing tests * test/e2e_node: Add [NodeConformance] to tests tagged [Conformance] * mark ServerAddressByClientCIDRs as optional * move updatepodspecforobject out of factory * kubeadm-upgrade: add unit tests for the diff command * kubelet: fix checkpoint manager logic bug on restore * kubeadm-upgrade: small improvements to diff * remove LabelsForObject and ResolveImage from factory * Update CHANGELOG-1.9.md for v1.9.8. * correct test logging package stackdrvier -> stackdriver * move PrintOptions to genericclioptions * remove API dependency on printers * When creating ext3/ext4 volume, pass -m0 to mkfs in order to disable the super-user-reserved blocks, which otherwise defaults to 5% of the entire disk. * dynamic Kubelet config reconciles ConfigMap updates * Fix running e2e tests with completed kube-system pods * remove unused gc code * Update CHANGELOG-1.10.md for v1.10.3. * Add optional flag of node port range * add block device support for azure disk * kubeadm: Remove .ImagePullPolicy * autogenerated * kubeadm: Remove .AuthorizationModes in the v1alpha2 API * add formatAndMount unit test on Windows * Don't support marshalling using the v1alpha1 version in kubeadm v1.11 * Update bazel * Fix cyclic dependency of apiserver test for OpenAPI test * Dump Stack when docker fails on healthcheck * remove one duplicated unit test * Kubelet config: Validate new config against future feature gates * Generated files * Sort API Services by Kube-Version order * Fix error message in Equalities.DeepEqual * kubeadm: APIServerExtraArgs should override defaultArguments * Bump grpc max message size for docker service * autogenerated bazel * Add testdata that supports the unit tests testing the kubeadm API types * Add roundtrip, defaulting, upgrading and validation unit tests for the kubeadm API types * generated * Add GET PATCH support for two /status: * Raise error on duplicate name in kubeconfig * remove knob of equiv class in perf test * Fixing wrong unit test naming * Use Dial with context * Refactor test utils that deal with Kubelet metrics for clarity * sort on non-tabular output * Fix TestSchedulerWithVolumeBinding to avoid setting predicate ordering. It is causing data race condition as predicate ordering is changing global variable predicatesOrdering. Infact this test does not require any special predicate order and should work on default predicate ordering as far as VolumeScheduling feature is enabled. * Graduate CRIContainerLogRotation to beta * move additional methods from factory * remove unused code of (pkg/scheduler) * fix event ref determination for apigroups * Add environment variable to control truncating backend. * Tolarate negative values when calculating job scale progress * uses a more resilient way to get branch name from version * kubeadm: crictl reset commands fixes * Add SELinux support to CSI * kubectl: add aggregation rule support to clusterrole * Allow for system metrics discovery in Custom Metrics - Stackdriver Adapter test * kubeadm: Restrict imports from pkg/client/clientset_generated/internalclientset * kubeadm: Add local copy of LeaseEndpointReconcilerType * Handle TERM signal to reduce pod terminating time. * new event exporter config with support for new stackdriver resource types * fix formatAndMount func issue on Windows * [e2e ingress-gce] Implement Skip() for ingress upgrade test * auto generated file * modify kube-controller manager config struct to adapt option change * modify cloud-controller manager config struct to adapt option change * [kube-controller manager]get rid of GenericControllerManagerOptions sub-struct * [cloud-controller manager]get rid of GenericControllerManagerOptions sub-struct * remove kube-proxy and kube-scheduler from pkg_kubectl_cmd_util_CONSUMES_BAD group * Update ipvs docs --- check the prerequisite * kube-proxy should not depend on kubectl * construct a new CloudControllerManagerConfiguration struct for cloud-controller manager * gce provider: point to hack/update-cloudprovider-gce.sh in doc * gce provider: add wrapper for security policy * autogenerated * Only override objects from informer when version has increased. Add more logging and tests to volume scheduler. * move type setting into an optional layer above normal printing * add protection for missing apiversion so we never serialize a bad object * remove versioned printer * Results of running update scripts: update-openapi-spec update-federation-openapi-spec * Add kubernetes license to credential manager * Add unit test for secrets flag in config file * Add secrets flag in vcp config and modify vcp to use nodemanger connect method * Modify nodemanager to use credentials from secret * Add credentials manager unit test in vSphere Cloud Provider * Add credentials manager in vSphere Cloud Provider * Add update credentials function in vclib * add myself as an approver in various auth related directories * Wait for pod deletion instead of termination * kubeadm - fix upgrades with static pod etcd * pkg: kubelet: remote: increase grpc client default size * Add a 'kubeadm config print-default' command * Move all logic for NodeConfiguration unmarshal to the dedicated package * autogenerated files * Cluster Autoscaler 1.2.2 * increase timeout in TestCancelAndReadd * autogenerated * kubeadm: Remove the never-used .Etcd.SelfHosted field * kubeadm: Avoid unneeded dependencies by not using GetFlagString * start splitting polymorphic functions out of the factory * fix error tests due to version bumping of etcd and supported k8s * Bump etcd version based on k8s version to 1.10.X => 3.1.12, 1.11.X => 3.2.18, 1.12.X => 3.2.18 * Remove v190alpha3 * Rename v180AndAboveKubeDNSDeployment to KubeDNSDeployment * remove v190 from kubeadm in v1.11 cycle * Update kubeadm's minimum supported kubernetes in v1.11.x to 1.10 * update factory interface to overlap with lower RESTClientGetter * kubectl: fix Flatten() when used without Latest() * Add GetSELinuxSupport to mounter. * WatchingSecretManager * Refactor ConfigMapManager * fix little bug in kube-scheduler options * Add a way to pass extra arguments to etcd. * Fix SkippedPaths * Add Pod stats for Windows containers * Init ipvsInterface only when ipvs modules are present * Add fs status for Windows containers * Add log stats for Windows containers * update bazel * remove request context.WithUID * Delete extraneous CHANGELOG-*.md files on branch. * Kubernetes version v1.12.0-alpha.0 openapi-spec file updates * Add strategy description for 'kubectl describe sts' command * Fix PDB preemption tests. * test clusterip * check for NEG healthcheck with correct name * Generated docs * Add a `kubeadm upgrade diff` command * Extract connection rotating dialer into a package * diff: Fix broken `Local()` logic * bzl: cleanup some no longer need visibilities * Bazel artifacts * Adds a kubeadm config images pull command * Additional test coverage for kubectl/cmd/cp * move ConfigFlags to pkg/kubectl/genericclioptions * autogenerated * kubeadm: Remove the .PrivilegedPods configuration option * kubeadm: Remove the .CloudProvider configuration option * storageclass can be in annotation and spec * Ignore golint failure for v1alpha2, as the failing code is autogenerated * Remove e2e test for cAdvisor running in the kubelet, as it's deprecated and gonna be removed * Add initContainers into completion suggestions for kubectl logs/attach * autogenerated * autogenerated move to reference the v1alpha2 API inside of kubeadm * Refactor cache based manager * Change default min-startup-pods value * kubeadm: Register and support loading the v1alpha2 API types * kubeadm: Add duplicated v1alpha2 API types * Auto-calculate allowed-not-ready-nodes in test framework * Enable checking whether ipvs modules are built-in or not * Setup dns servers and search domains for Windows Pods * abstract duplicated code in ipvs proxier * Revert enable PodPreset admission and also enable settings.k8s.io/v1alpha1 api resource * Revert "Openstack: register metadata.hostname as node name" * Revert "Split out the hostname when default dhcp_domain is used in nova.conf" * Revert "Specify DHCP domain for hostname" * gce: Prefer MASTER_ADVERTISE_ADDRESS in apiserver setup * Remove unnecessary roundtripping in get.go * Autogenerated code * Fix fakeclient List * Update CHANGELOG-1.8.md for v1.8.13. * remove single use, non-polymorphic helpers from factory * Move to a structured status for dynamic Kubelet config * kubeadm - set CoreDNS FeatureGate to true by default * bump coredns to GA in kubeadm * Prevent nodes from updating taints * apiextensions: only create patch reference object for smp path * Disable the public cadvisor port by default * update bazel * vSphere Cloud Provider: update vmware/gomvomi godeps * vSphere Cloud Provider: add SAML token authentication support * NFS support for default storage * make TestGetServerGroupsWithTimeout more reliable * Use runtime/default as default seccomp profile for unprivileged PodSecurityPolicy * kubeadm preflight check for IPv4 and IPv6 forwarding * autogenerated bazel * generated * stop generating service deletecollection * Minor fixes for kubeadm reset * Decrease default node schedulable timeout in e2e framework * kubeadm: Handle config loading only in one place, and only use the internal version of the API internally. Fix bugs * restore old cached client behavior * move cached_discovery to client-go/discovery * Fix bootstrap roles to allow list/watch secrets/configmaps from nodes * Requires single name for list and watch * scheduler: remove nested retry loops * Revert "Revert "scheduler: align with ctrl-managers and apiservers, add https+auth in options"" * Clean stackdriver sinks when reached limit * Add comments for ipset entries in kube-proxy - fix * fix ut * pass stop channel to node-controller * Still use `docker ps` for docker health monitoring. * Enable CUSTOM_INGRESS_YAML to replace the glbc manifest * Adding details to Conformance Tests using RFC 2119 standards. * cleanup kubectl apiresources * kubeadm - fix external etcd upgrades * Support kubeadm upgrade with remote etcd cluster * Build files generated * Switch to beta * Update e2e to use priorityClass beta * Actually support service `publishNotReadyAddresses` * Refactor kubeadm config list-images * remove decoder from name printing * kubeadm: Contact the kubelet on its healthz port 10248 instead of its readonly port * Sort arguments before joining them, for reproducible return string * print result object from kubectl taint correctly * apiserver: Fail if dry-run query param is specified * Remove layer:status per review * Update status handling and retry network status poking, per review * autogenerated bazel * Stop installing kubeadm types in the generic, legacy scheme * check for new backend naming scheme * kubeadm: Use the API machinery for marshalling * client-go: remove dep on pflag * Retry certificate approval on conflict errors * Add e2e test to verify that GPU pool is not scaled up if GPUs are not requested by pods * kubeadm - do not generate etcd ca/certs for external etcd * switch to versioned objects only for set * Track number of registered watchers in apiserver * remove unused PrintFlags.Scheme * [prometheus addon] Add filter on image in tests to remove pod timeseries * Rename kubeadmapiext to the more explicit kubeadmapiv1alpha1 * e2e/storage: parameterize container images * apiextensions: normalize CR validation to return multiple errors * fix review comments * use subtest for table units (pkg/printers) * fix missing flag value bindings in kubectl * Avoid copying aggregated admin/edit/view roles during bootstrap * Control exactly what we use in kubeadm * Generated * Move scheduling api to beta * register client-go auth plugins for e2e * Adds initial Korean translations for kubectl * Removed unused namespace in UT helper func. * kubeadm-init: update note about failing containers * validation: improve ProjectedVolume validation errors * validation: allow multiple errors in Volume validation test * Fix bad sleep - int as duration * Added documentation of how client-go interfaces with custom controller code * Tests for kubeadm marshal utilities * Generated artefacts * Deprecate photon cloud provider * fail printing on internal obj * Use apimachinery for serialising kubeadm MasterConfiguration * Update generated artefacts * log error for os.NewComputeV2 * Revisit the OWNERS file for kubeadm * fix dynamic client name * Move uncordon to after the node is ready * generated * Add GET PATCH support for crd status * Add InstallPathHandler which allows for more then one path to be associated with health checking. * Add support for GCP charm * Fix kubectl auth can-i exit errcode * Revert "authz: nodes should not be able to delete themselves" * move old dynamic client to deprecated-client * add subresource support for the dynamic client * update describer to use dynamic client * fix typo * Add comments for ipset entries in kube-proxy * [fluentd-gcp addon] Pass region in seperate field * fix typo: peirodically->periodically * Update generated bazel * Use simple cache instead of LRU * sample-apiserver admission wait for informer sync before serving * Reuse existing CA cert path for kubelet certs * kubeadm - add preflight warning when using systemd-resolved * Update comments and UT to remove /66 restriction * Add Patch method to GA Backend Services * Add 'system-cluster-critical" to kubeadm control plane pods. * remove legacyscheme dep from printFlags * Add cluster autoscaler tests for pods requiring GPU * Add framework.GetReadyNodesIncludingTaintedOrDie * Add way to request GPUs in tests via RCConfig * move resource builder to generic options * cleanup TODO comments from PrintFlags wiring * Basic E2E tests for kubeadm * fix message output for import verifier * remove kube/kube deps from resourcebuilder * Adds kubeadm images command * Bump down to cos-stable-65 in config-test * wrap restclientgetter with match version option * construct resource.Builder from kubeconfig flags * update generated files * Promote CustomResourcesSubresources to beta * Make node restriction admission pod lookups use an informer * Make discovery refresh period less aggressive * use subtest for table units * Remove 20x factor in garbage-collector qps * 6capiextensions: handle CRD conflict errs in integration tests * Cleanup DaemonSet after each integration test. * remove unused variables on pkg/controller/serviceaccount/serviceaccounts_controller_test.go pkg/controller/endpoint/endpoints_controller_test.go * kubeadm-init: add details about --token * Use absolute path for KUBECTL default in local up cluster * Make aggregator e2e test resilient to unrelated API group changes * kubeadm: add test coverage to completion.go * kubeadm: add GetSupportedShells() to completion.go * category expansion can only come from the server * move category expansion types to restmapper package * Uncordon the node after upgrade * Remove ExtraArgs kubeadm preflight check * Improve coredns upgrade path * Rename Add/Delete to *Reference * Improve where we load builds from for kubeadm upgrade jobs * Refactor cachingSecretManager * push ToRESTMapper down a layer * don't block e2e namespace cleanup checks on metrics.k8s.io API group * e2e: add a tooling argument to differentiate tooling * Fix typo in envelope transform error message * clean unused code in restmapper_test.go * Run FSGroup tests by default. * apiextensions: allow "required" at root with status subresource * Fix issue #63183 that pods on different nodes mount Ceph RBD PVC stuck on ContainerCreating. * Fix iSCSI and RBD UnmountDevice with mount containers. * add SetMaxResource for Resource * Fix unit tests for new interfaces * Do not check vmSetName when getting node IP * Run resource discovery in parallel * fix a small mistake in function getFieldMeta * Add test about host path type * add IsLikelyNotMountPoint test on Windows * generated * Bump kube-openapi dependency * Fix cgroup names in node_container_manager_test. * eviction test ensures failed pods are evicted * explicit kubelet config key in Node.Spec.ConfigSource.ConfigMap * simplify api registration * generated * Build image size map upon node info updates * Push fat manifest for multi-arch images * should return error when has no RequestInfo * use IOStreams for cli commands * generated * move client based restmappers to client-go * stop pretending that we have statically known shortcuts * adding support for VM name with extra Separator String * [CustomResourceSubresources] fix status subresource * cleaning up load balancer resources * Bump Heapster to v1.5.3 * Refactor hard code in rest_test.go * fix IsLikelyNotMountPoint func on Windows * Deprecate in-tree OpenStack cloud provider * [e2e ingress-gce] Change ingress-upgrade test to not check for number of instances * add memcg notifications for allocatable cgroup * workspace mirror: add trailing newline to urls list * run buildifier on build/workspace_mirror.bzl * rm GetStandardPrinter * remove printer helpers * Close all kubelet->API connections on heartbeat failure * Always track kubelet -> API connections * Apply pod name and namespace labels for pod cgroup for cadvisor metrics * Improve test coverage of Kubelet file utils * Enable GCE/GKE e2e tests for GlusterFS Dynamic Provisioner. * default the ignorenotfound for delete when selecting objects * vsphere: update bazel * vsphere: fallback to vcsim for testing authentication * Rename VSphereConnection.GoVmomiClient -> Client * vsphere: use vim25.Client directly to support token authentication * Add support for arm64 to the registry action of the kuberntes-worker juju charm. * update garbage collection to use the new dynamic client * when get CRD resources with --server-print=true the output looks like: * remove redudant runtime.GOMAXPROCS * Cleanup Pods in TestNominatedNodeCleanUp. * fix ipvs fw * Check nodeInfo before ecache * fix annotation of APIGroupInfo * Don't panic is admission options is nil * remove repeated code * Use IP_ALIAS_SIZE to calculate and update IP_ALIAS_SIZE. Error added when ip-alias is not enabled when IP_ALIAS_SIZE is not empty. * wire config flags through factory * Add conversion to properly parse query parameter propagationPolicy * begin building a config flags struct * Add MAX_PODS_PER_NODE env allowing kubelet to be max-pods aware. * cleanup eviction events * Add host path type in kubeadm config * udpate some examples to use external types * simplify resource builder usage * change deprecated Kubelet --allow-privileged flag default to true * Update autogenerated files. * Replace UserIDRange/GroupIDRange by IDRange in internal type to reduce difference with external type. * compute configmap/secret key correctly cross-platform * slim down printer interface * Fix bash completion with --all-namespaces * Switch kubectl resource completion to discovery * Fix typo in volume_stats.go * use new dynamic client * Fix CSI volume detach when the volume is already detached. * fixed golint error on redundant if * fix fake clients and unit tests * use new azure clients * cleanup unnecessary channels in azure clients * Allow api-resources to return cached data * Make ServerPreferred[Namespaced]Resources logic and caches consistent * Collect logs for health monitor services. * Install and use crictl in gce kube-up.sh * Update to go1.10.2 * Update to latest Gophercloud * Pass certificate URLs instead of the certificate structs * Revert "scheduler: align with ctrl-managers and apiservers, add https+auth in options" * Allow fetching bootstrap-kubeconfig from VM metadata * Fix e2e "When checkpoint file is corrupted should complete pod sandbox clean up" * [Device-Plugin]: Extend e2e test to cover node allocatables * don't block creation on lack of delete powers * dep: run godep save again * use TempDir func in mount_windows_test.go * stop using Info.Mappings when they may not be present * remove unnessary kubectl conversions * PR #62903 changed error string GetMountRefs() returned, which broke test `should fail due to non-existent path`. Remove error string check to fix test. * Use default seccomp profile for addons * Make openapi spec generation wait for the apiserver on shutdown * Let the kubernetes service reconciler timeout on shutdown * Update error assertation * apiserver: change default reconciler to LeaseEndpoint * run ./hack/update-bazel.sh * modify outdate link * Revert "apiserver: change default reconciler to LeaseEndpoint" * juju: Make kubernetes-master status handling more robust * don't reuse resource builder in describe * ensure diff output includes the portion that differs * Maintain index of high-cardinality edges in node authorizer graph * clean up vertex/edge deletion * Decorator for Create should be called on out, not obj * Update CHANGELOG-1.11.md for v1.11.0-alpha.2. * Add metric for throttled requests in AWS * add some comment message * iptables: add timeout when checking rules * dep: upgrade k8s.io/utils * Use the logging agent's node name as the metadata agent URL. * Add necessary explanation for container log rotation. * add UT test to PolicyRuleBuilder in file ./pkg/apis/rbac/helpers_test.go * 1.fix kubectl get * --all-namespaces namespace miss error 2.also add a test case modified: pkg/kubectl/cmd/get/get.go modified: hack/make-rules/test-cmd-util.sh * not expose object detail when creating TokenRequest * Add more volume types in e2e and fix part of them. * Bump kube-openapi dependency * Implements distributed OIDC claims. * WIP: Correct kill logic for cgroup processes * Ratchet to bazel 0.13.0+ * update restmapping to indicate fully qualified resource * adds support for arm64 to microbot example of the kubernetes-worker charm * Expand ability of ResourceID * kubelet: volume: do not create event on mount success * gcp: allow non-bootstrap kubeconfig * update tests to be specific about the versions they are testing instead of floating * remove rootscopedkinds from groupmeta * Use a []string for CgroupName, which is a more accurate internal representation * add test for sparse version encoding/decoding * get the resource.Info out of the conversion business * update etcd to skip kinds, not resources so we can use a live mapping * acknowledge that creation of a restmapper can fail and that we cannot have a default * remove incorrect static restmapper * gce: plumb --kubelet-certificate-authority flag to apiserver * kubelet: fix warning message to not print pointer addrs * kubelet: force filterContainerID to empty string when removeAll is true * GCE PD plugin now prevents attaching a regional PD PV with pdName of a regular PD * Fix pkg_rpm rules for bazel 0.13+ * Remove unused code * remove unnecessary encoder * Remove Factory from more Run commands * Remove event recorder TODO * Add set image test for sparse API group resource * Revert "fixtodo:validate events on PVCs in integration volume binding test" * Return attach error to A/D controller. * Add version/group usage and example to kubectl get * apiserver: change default reconciler to LeaseEndpoint * fix commands running crictl * Generated artefacts * Capitalize acronyms in AWS metrics-related code * add fake dynamic client * make dynamic client slightly easier to use * [prometheus addon] Fix missing storage class in alertmanager PVC * clean unused variables * Update bazel * scheduler: add https+authn+authz to options, set to nil for now * scheduler: align plumbing with controller-manager and apiservers * controller-manager: unify address flag description to listen on all interfaces * controller-manager: make InsecureServingOptions/Config re-usable * run make update * Fix fake clients and unit tests * Use new Azure SDK APIs for load balancer and public IP operations * Fix panic for attaching AzureDisk to vmss nodes * Rename func to ensureNodeExistsByProviderID * Supported matchField for NodeAffinity. * move pkg/scheduler/util/testutil.go to pkg/scheduler/testing * remove format operation in WaitForAttach * Add RESTMapper to ControllerContext and make it generic for controllers * fixup! Make scheduler cache generation number monotonic to avoid collision * Make kubelet `ReadLogs` backward compatible. * Hide EquivalenceCache mutex from users. * Rename exported methods on EquivalenceCache. * Simplify logic in podFitsOnNode. * Remove predicateResults map from podFitsOnNode. * Add RunPredicate to EquivalenceCache. * Deprecate repair-malformed-updates flag, move object meta mutation into BeforeCreate * Make scheduler cache generation number monotonic to avoid collision * Use cloudprovider.NotImplemented in AddSSHKeyToAllInstances * Report node DNS info with --node-ip * finish wiring PrintFlags * master count and lease endpoint tests * remove self linker from group info * Add name output and verb filtering to api-resources * replace filepath with path due to pre-formatted volumeName * divide statically known typer from dynamically derive restmapper * Move path management from e2e_node to common test/utils directory * Generated artefacts * Bump QPS on namespace controller * remove unnecessarily flexibiliy to simplify the resource builder * apiserver: document how to run sample-apiserver standalone outside the cluster * stop anonymously including types in resource struct so we can track usage * remove versioning interface * Update CHANGELOG-1.10.md for v1.10.2. * fix curl header * add accept for ipvs * Fix ensure by provider id * Update pvc_protection_controller.go * fix bug in dynamicResourceClient.UpdateStatus should encode * clean duplicate test function * make use of simple dynamic client in test * This bring up a heketi server pod and the server will be running in mock mode, the PVC creation should work, however the volume attachment to a pod and read/write is not part of this test. Due to the same reason the tests are marked as [fast]. * Also update CRI to indicate runtimes should not update empty CIDR * Check CIDR before updating node status * Simplify vmset acquirement logic * Collapse onto request scope convertor * Fix govet error * kubelet: logs: do not wait on following terminated container * Fixes fake client generation for non-namespaced subresources * passthrough readOnly to subpath * Add myself to sig-scheduling maintainers/approvers list. * remove unnecessary else clauses * kubeadm-token: search for existing kubeconfig files * tighten .Info for kubectl to avoid unpredictable conversion * rest mappings cannot logically be object converters * Add other prometheus monitoring components * Enable bypassing online checks in kubeadm upgrade plan * generated * stop duplicating preferred version order * update describe command opts struct * remove hardcoded list of resources * remove KUBE_API_VERSIONS * Correctly override args with APIServerExtraArgs * Add level to remote client glog. * add checks validation MinRequestTimeout of ServerRunOptions * Improve Azure disk operations for vmas and vmss * Remove incomplete uint64 support from JSON unmarshaling * kubectl should not have a direct code dependency on controllers * Add tests for resourceVersion precondition failures on patch * Do not schedule pod to the node under PID pressure. * collapse patch conflict retry onto GuaranteedUpdate * Update vendors for client-go * Use new clients in Azure Disk volume * Use new clients in Azure credential provider * Use new clients in azure cloud provider * Upgrade virtualmachin/disk/storageaccount client to use new SDK * Upgrade Azure Go SDK to v14.6.0 * Revert "Revert "Revert revert of equivalence class hash calculation in scheduler"" * Limit access to core/api/v1 inside of client-go * restclient should not depend on api/core/v1 * client-go should not take a dependency on the v1 api lightly * report outputFormat in PrintFlags err * kubeadm: accept 'Y' and 'y' as reset confirmation * wire printflags through additional cmds * wire PrintFlags through get cmd * move "get" cmd pieces to cmd/get * support simultaneous kubadm --v and --config * Check for old NodeInfo when updating equiv. cache. * Add IsUpTodate() to Cache interface. * Test race condition in equivalence cache. * Add pointer comments * Create a go_bindata bazel macro * Remove pkg/generated/bindata.go from the repo * bazel: generate pkg/generated/bindata.go at build time * Update provisioner to v0.2.1 container * also fix the quick-release * runhack/update-staging-godeps.sh * Refactor the patch handler for readability * Revert "Revert "gce: move etcd dir cleanup to manifests"" * upgrade dep json-iterator/go to fix #62742 * [prometheus addon] Add readme * generated * core v1 API requires autoscaling/v1 to serve the Scale endpoint * update code generator * eliminate indirection from type registration * add easy to use dynamic client * update more commands for iostreams * kubeadm: add test coverage to join.go * kubeadm: use the helper NewValidJoin() in join.go * kubeadm: prompt for confirmation when resetting a master * Generated changes * Revert "gce: move etcd dir cleanup to manifests" * version typo fix * refactor device plugin grpc dial with dialcontext * Hack for testing until test-infra/pull/7846 merges * remove useless alwaysAdmit in apiserver test * Register Prometheus etcdmetrics only for apiserver * Clean up and remove unused deps * add warnings for docker-only flags * mark APIServiceSpec.CABundle optional * Added more UT for invalid case. * -Remove TODO comment of GetNonzeroRequests function * Fix race between stopping old and starting new endpoint * avoid duplicate status in audit events * Tag pkg_rpm rules as manual * Fix discovery default timeout test * Update libcontainer to include PRs with fixes to systemd cgroup driver * Add field selector support to delete, label, annotate * Remove examples directory * Fix hpa-use-rest-clients help text * Set names for OpenStack loadbalancer members and monitors * dockershim/sandbox: clean up pod network even if SetUpPod() failed * Fix qosReserved json tag (lowercase qos, instead of uppercase QOS) * replace request.Context with context.Context * [kubeadm] Fix Etcd Rollback * [kubeadm] Add etcd L7 check on upgrade * [kubeadm] Modify the kubeadm upgrade DAG for the TLS Upgrade * [kubeadm] Update test-case, fix nil-pointer bug, and improve error message * [kubeadm] Implement etcdutils with Cluster.HasTLS() * gce: move etcd dir cleanup to manifests * Support containerized kubelet in CI * replace path with filepath * Prepull etcd before an upgrade * Fix IP_ALIAS_SUBNETWORK env var assignment in GCE setup * Removed e2e test on empty NodeAffinity. * bind externalIP and lb IP * fix a error in serviceaccount validate. This error is a human-writing error. Small as it is, it could cause recreate Object validate through bug. This patch fix it. * clean up unused code fakeRL in requestinfo_test.go * Update CHANGELOG-1.8.md for v1.8.12. * fixtodo:validate events on PVCs in integration volume binding test * renable nodeipam in kube-controller-manager * Bump minimum required go version to 1.10.1 * generated codes. * Added MatchFields to NodeSelectorTerm. * [e2e ingress-gce] Fix race condition for appending services and ingresses * e2e: save raw profiles too * Fix bash command for liveness probes in the metadata agents. * Remove unnecessary typer from create/update handlers * Add unit test for configure-helper. * Fix scheduler Pod informers to receive events when pods are scheduled by other schedulers. * Added test for scheduler informers * remove confusing flexibility for metadata interpretation * Make integration test etcd store unique * Use BootID instead of ExternalID to check for new instance * Bump kube-dns version for kubeadm upgrade * Update upgrade/downgrade images for ingress-gce * remove repeated resourceversion * When bootstrapping a client cert, store it with other client certs * juju: Use k8s.gcr.io url for arm64 ingress image * Timeout on instances.NodeAddresses cloud provider request * Remove METADATA_AGENT_VERSION config option * Whitelist CronJob for kubectl apply --prune * add warnings on using pod-infra-container-image for remote container runtime * avoid dobule RLock() in cpumanager * Support nsenter in non-systemd environments * autogenerated files * make API.ControlPlaneEndpoint accept IP * PR #59323, fix bug and remove one api call, add node util dependency to cloud controller * Fix dockershim e2e * avoid calling Handles twice * fix typo: mutating validating admission should be distinguished * kubelet: fixup QOSReserved json tag * [kubeadm] Implement ReadStaticPodFromDisk * [kubeadm] fix mirror-pod hash race condition * Add unit tests for gce loadbalancer internal. * Fix upgrade to Kubernetes v1.9.3+ * Add a GCS mirror to WORKSPACE URLs. //hack:update-mirror updates it. * Always Start pvc-protection-controller and pv-protection-controller * authz: nodes should not be able to delete themselves * provide standard iostream struct for commands * kubelet: fix flake in TestUpdateExistingNodeStatusTimeout * loopback webhook integration test * Honor existing CA bundle and TLS server name in webhook client * ensure tls server name is used in transport * distinguish custom dialers in transport cache * Ensure service routing resolves kubernetes.default.svc correctly * Filter unavailable commands in help * Deprecate kubectl rolling-update * Set a default request timeout for discovery client * Manage Metadata Agent Config with Addon Manager * Change Capacity log verbosity in node status update * remove uneeded discovery flexibility * -Fix the name could cause a conflict if an object with the same name is created in a different namespace * Add node authorizer contention benchmark * Check all backends for vmss and standard instances * e2e test forwarding externalname dns lookup to upstream nameservers. * aggregate objs before printing in apply cmd * Only count mounts that are from other pods * Fix ILB issue updating load balancers * fix formatting for memcg threshold * make describers more generic from the CLI * Add CHANGELOG-1.11.md for v1.11.0-alpha.1. * Add support to resize Portworx volume * build/rpms: fix kubeadm rpm * final record flag cleanup * Change docker/default to runtime/default * gcp: add env var to configure enabled controllers in controller-manager * simplify the client cache * wire print flags through apply cmd * Exclude keys containing empty patches in the final patch * Update CHANGELOG-1.9.md for v1.9.7. * unpack dynamic kubelet config payloads to files * Bring StorageObjectInUseProtection feature to GA * Export RBAC validation functions * reset resultRun to 0 on pod restart * Remove InfluxDB from default cluster monitoring * [Prometheus addon] Use StatefulSet * Update github.com/stretchr/testify to v1.2.1 * kubectl stops rendering List as suffix kind name for CRD resources * use recordFlags * remove flags deprecated in 1.5 * Update all script to use /usr/bin/env bash in shebang * read openstack auth config from client config * fix ipvs delay on sync rules * Add support of zero nodes in vmss * [prometheus addon] Use secure kubelet port * Add standard LB support to Azure vmss * Move vmset checking back to vmsets * Make pod status to "Running" if there is at least one container still reporting as "Running" status * fix csi data race in csi_attacher_test.go * Use shorter timeout if possible. * check error when parse field failed * regenerate fakes * generate code that passes go vet * Update upgrade message Fixes: https://github.com/kubernetes/kubeadm/issues/672 * Remove request context mapper * Add awly as reviewer in several subtrees * CSI test refactor to be more easily extensible for more plugins when there are more tests * use record flags * fix up record flags * apiserver: move patch tests to their own file * Add integration test for disable preemption * autogenerated * rename ExternaID to something that is obviously deprecated * boring * remove last usage of external ID * wire pritnflags through run cmd * kubeadm: Mount additional paths inside apiserver/controller-manager for working CA root * Add volumenameprefix tests for glusterfs dynamic provisioner. * we should use Infof when we are using format string * Add k8s.io/apiserver/CONTRIBUTING.md * [prometheus addon] Add OWNERS file * ensure we delete orphaned routes with matching next-hops only * fix error message of TokenRequest * This patch add a new parameter called `snapfactor` to glusterfs storageclass. This is an optional parameter and value should fall into the range of 1-100. When set the thin pool calculation respect this snapfactor and create a thinpool accordingly. * add metrics to cinder * self sign certs when ServerTLSBootstrap is disabled * clean up *.properties files * Report events to apiserver in local volume plugin. * Auto generated BUILD files. * Refactor kubeadm api validation. * Lower UsageNanoCores boundary in summary api test. * Fix extra-log flag for node e2e. * Bump GLBC manifest to v1.1.1 * add @andrewsykim to OWNERS for cmd/cloud-controller-manager,pkg/controller/cloud,pkg/cloudprovider * encapsulate IP counter in X, parallelize lb tests * generated changes * Add default generation tags * Add contribex to github template owners * Fix kubectl describe cronjob * Fix NPD preload. * Update kazel to include openapi tag detection fix * Update generated bazel * Add write-config-to to scheduler * Link to vulnerabilitiy disclosure process from the issue template * Remove unneeded deps from vendor * Log webhook request error * bzl: build --config unit should build with race enabled * Use a dynamic RESTMapper for admission plugins * Adding kube dns to kubemark * fix route deletion * Update addon manifests to use policy/v1beta1 and grant permissions in policy API group. * Generated files * sample-apiserver: add v1beta1 with advanced conversion example from v1alpha1 * wording * Not validating front proxy CA Key when using External CA. * Fix anti-affinity issue that caused a pod to be considered a match if any of the terms matched (as opposed to all terms matched) * add CaoShuFeng as a reviewer of kube-apiserver * fix "kubectl create --raw" * remove PodPreset and enable scheduling.k8s.io/v1alpha1 for Priority * Use filepath.Clean() instead of path.Clean() * add generate file * update comments for local volume * allow user to scale default backends * Addressed reviewer comments * begin adding record flags struct * add delete flags * update delete, replace, run cmds * Fix kubelet flags. * Add binding error message for volumeMode:Block unsupported case * Increase max requests inflight limits in gce for very large clusters * Instrument transformer.go with latency metrics. * kubelet: move QOSReserved from experimental to alpha feature gate * Update kube-dns to Version 1.14.10. Major changes: - Fix a bug in DNS resolution for externalName services and PTR records that need to query from upstream nameserver. * remove parallel * kubelet: add configuration to optionally enable server tls bootstrap * Move podsecuritypolicy registry to policy package. * Set kubemark default verbosity to 4 * Show deprecated kube-apiserver flags * Capture API call logs from kubemark apiserver * Autocalculate ALLOWED_NOTREADY_NODES based on NUM_NODES * Add ConnectionReset, InternalError, etc also as retryable API errors * Support groups (organizations) to be specified in client cert. * Fix garbled code in kubeadm output * add andyzhangx as Reviewer * fix devicePath update issue in Azure WaitForAttach func * Fix machineID getting for vmss nodes when using instance metadata * Make 'pod' package to use unified checkpointManager * Node-level Checkpointing manager * Fix use visible files creation for windows * Allow a test suite reusing framework to register namespaces to delete * Clean unused error type variable The function which invoked this variable was removed by https://github.com/kubernetes/kubernetes/pull/58725/ * Fix an issue in inter-pod affinity predicate that cause affinity to self being processed incorrectly * fix some bugs inside csi unit test TestAttacherMountDevice * Add test to ensure anti-affinity matches against all terms * kubeadm preflight: check socket path if defined otherwise check docker * Make x-kubernetes-print-column print handling opt-in * 1.10 CHANGELOG: Fix supported etcd version comparison with K8s v1.9 * Prevent virtual infinite loop in volume controller * Fix docker run flags and kubelet flags for containized kubelet: * Removed no-empty validation of nodeSelectorTerm.matchExpressions. * unhide deprecated Kubelet flags * update godeps to use latest pflag * Enforce not using newer kubeadm to upgrade older kubeadm * Adds migrations to the kubeadm upgrade phase config * update-bazel * Add comments, t.Parallel() * have fakeLoadbalancerService take lb type as argument * tests for EnsureLoadBalancer, EnsureLoadBalancerDeleted * refactor - create new apiService per test. encapsulate resource create/delete checks. * Add GCE-PD CSI Driver test to E2E test suite * Remove podpreset in local up cluster * Add ability to specify port for kubeadm `API.ControlPlaneEndpoint` * provision Kubelet config file for GCE * sarapprover: remove self node cert * Fix volume node affinity to OR node selector terms * root OWNERS: escape backslashes * Run hack/update-all.sh * Add --ipvs-exclude-cidrs flag to kube-proxy. * Update webhook client config docs regarding service ports * kubeadm: Make kube-proxy tolerate all taints * begin wiring printopts through complete commands * Fixing FULL_REGISTRY assignment * CSI - Apply fsGroup volume ownership when pv not readOnly * Volunteer for local-up-cluster related files * Include API calls in apiserver logs for tests * Test e2e prometheus addon * Add prometheus addon * Disable pod preemption by config * auto generated file * Fix ingress util handling of TLS * split up the component config into smaller config * split KubeControllerManagerConfiguration into fewer options struct * Node E2E: Remove the simple mount test * Addressed reviewer comments * Fix bug for headless services without ports * Fix failed e2e tests for dns configmap. * Move all create subcommands to its own subdirectory * use standard interface functions for printers * Use OWNERS filters to give approval to ixdy for Bazel build changes * Add msau42 to approvers for volume scheduling * cleanup resources created by run --rm * Update CHANGELOG-1.10.md for v1.10.1. * Remove clusterName flag, just use config file * enable token auth for kubelets in GCE * Fix duplicate comment in iptables rule for non-local public-port rule * Remove unnecessary code in ingress upgrade logic * Bump image in ingress downgrade test * avoid race condition in device manager and plugin startup/shutdown * local-up-cluster: fix kube-proxy featureGates configuration * local-up-cluster: warn about failing processes * local-up-cluster: avoid "No such process" messages when cleaning up * make mikedanese owner of CertRotation features * Update e2e test with private mount propagation * Fix PodStore to wait for being initialized * fix nsenter GetFileType issue * Fix parsing timestamp in test * Fix wrong usage of kubelet options * Add private mount propagation to API. * allow higher burst * Cluster Autoscaler 1.2.1 * fix nodeport FORWARD chain * fix kubeadm-731 * fixes failing job back off test * Ensure expected load balancer is selected for Azure * Improve performance of affinity/anti-affinity predicate * Bump etcd default server version to 3.2.18 * Moved sync pod on Node logic to func. * Add approver for pkg/controller/endpoint * Explicitly set etcd --snapshot-count to 10000 to match etcd 3.2 default * kazel: skip third_party/etcd.* * Increase CPU limit to 1000 millicores to support 100kb/s throughput. * Bump GLBC version and remove Unreleased tag from tests * godeps: remove github.com/kr/pty after #62360 * update bindata after #61817 * Refactor subpath reconstruction tests to use util test * Fix flaky crd e2e tests * Revert "Bugfix for erroneous upgrade needed messaging in kubernetes worker charm." * Remove hostNetwork and hostPID from nvidia-gpu-device-plugin manifest. * Add e2e test for forwarding PTR records to upstream nameserver. * optional field removed in test * kuberuntime: logs: reduce logging level on waitLogs msg * Set slave mount propagation for local provisioner * add keys to unkeyed literals * Remove the default clustername, and make it optional in api * Add --cluster-name to kubeadm * Update generated files. * PSP: move internal types from extensions to policy. * Update bazel BUILD files * Move the kubelet network package down to dockershim * Move hairpin mode logic to dockershim * Remove outdated network plugin code * autoscaler support for CoreDNS * hack/test-update-storage-objects.sh: don't build a binary that the script doesn't use. * kubeadm: surface external etcd preflight validation errors * Fix subnet cleanup logic when using IP-aliases with custom subnets * Revert "git: Use VolumeHost.GetExec() to execute stuff in volume plugins" * fix custom resource definition validation * Disable some newly added loadbalancer tests for large clusters * Updated Readme for Azure (OIDC) auth provider * add myself to apiserver owners * Generate bindata through make * Reorder makefile sections * Don't support `go build` any more. * Remove 'teststale' * Simplify static build, rely on go's cache * Set GOCACHE (1.10) as a subdir of GOPATH * kubelet: remove unused code * Generated build files * Add support for AWS charm * Add basic generator for apps/v1 deployment * pkg/kubeapiserver/options: update Bazel files * oidc authentication: Required claims support * gce: enable all apis when AllAlpha=true * export unstructured helper function nestedFieldNoCopy and add unit tests * Implemented truncating audit backend * Enable CloudKMS Plugin deployment. * Reimplement migrate-if-needed.sh in go * A test we always skip should not be a conformance test * CustomResources: in OpenAPI spec allow additionalProperties without properties * add statefulset scaling permission to admins, editors, and viewers * add UT test for rollout_pause.go file modified: pkg/kubectl/cmd/rollout/BUILD new file: pkg/kubectl/cmd/rollout/rollout_pause_test.go modified: build/visible_to/BUILD * Move check and import * local-up-cluster.sh: support preserving etcd optionally * Auto generated BUILD files. * Remove the use of storage class beta annotations in e2e tests. * should use time.Since instead of time.Now().Sub * add tests for GetFileType * fix incompatible file type checking on Windows * clean unused function modified: pkg/controller/volume/persistentvolume/scheduler_binder_test.go * Remove isNotDir error check * Create StorageClass for each volume binding test case * Fix umask to actually intended behavior. * Added CSI External Components ClusterRole to bootstrapped roles and removed creation from failing e2e test * Update ingress.go * Patch ingress upgrade test logic to take note of SNI support in next release. * Fixes kubeadm upgrade plan output * Addresses review comments * Updating kubemci remove-clusters e2e test to check for error in output string * Adding a release note in 1.10.0 for kubemci failure * Add ingress e2e test for multiple TLS (SNI) support * add myself for sig-cli related stuff as reviewer * remove deprecated ObjectMeta ListOptions DeleteOptions * Add note on upgrading cluster by kubeadm. * update network policy describe * Fix resize test for Regional Clusters * Fix restart nodes tests for Regional Clusters * Fix dns autoscaling test for Regional Clusters * not return 500 status code for insufficient quota * Re-generate clientsets * Let the caller handle the error * Fix some shadow declaration in cmd package * Extract validateNodeIP test to node status test file. * Remove the workaround of heapster panic * Added test to check object size * Create container name after dropped ":" and "@" both separately * fix wrong error type when formatting * fix grammar mistake * remove default fsypte in azure disk * add one placeholder for err in scheduelr.go * fix comments * update build and s/where/which * add ut * remove unnecessary TODO in test/e2e/network/service.go * spec.SchedulerName should be spec.schedulerName in kube-scheduler help * Handle partial group and resource responses consistently * fix graph test sorting * Add wildcard toleration to nvidia-gpu-device-plugin. * Add documentation around SOURCE_DATE_EPOCH * Fully resolve tmpdir in verify scripts, since it might be a symlink on macOS * Update memory required to build kubernetes on osx to 4.5G * Fix create job usage * Get namespace and selectors for attach and logs in a common function * use memory.force_empty before and after eviction tests * update PrintFlags#Complete to receive string template * add unreleased tag to http2 test * Remove rkt references in the codebase * Make priority rest mapper handle partial discovery results * Pass 2: k8s GCR vanity URL * wire printflags through set cmds * Remove need for server connections for dry-run create * remove IsAbs validation on local volume * Correct the returned message * Add support to ingest log entries to Stackdriver against new "k8s_container" and "k8s_node" resources. * Fix getting logs from daemonset * Fix IP-alias subnet creation logic * Make the test TestCRIListPodStats pass for Darwin and Windows * apiserver: cancel context on timeout in WithTimeoutForNonLongRunningRequests * Update bazel * kubectl: add JSON fallback codec to cope with more strict stock versioning codec * apimachinery duct tape: handle empty unstructured GV in versioning codec gracefully * apimachinery duct tape: in versioning codec avoid conversion roundtrip for same GVK * apimachinery: normal conversion code path for Unstructured in ConvertToVersion * Update generated files * admission/webhook: fix panic from empty response in mutating webhooks * admission/webhook: refactor to webhook = generic-webhook + source + dispatcher * Fix resize nodes tests for Regional Clusters * Capture kernel logs in example fluentd.conf * Use pause manifest image * accelerators: remove Accelerators from feature gates * Don't require release tars on kube-down * Use provided node object in volume binding predicate * Run hack/update-codegen.sh * code-gen: allow specifying custom resync periods for certain informer types and switch to functional option pattern for SharedInformerFactory * Update OWNERS labels for cluster-lifecycle and scheduling * begin wiring printflags through set cmds * move http2 test into ingress context. use helper method * Add http2 <-> https conversion test * use echoserver 1.10 * Change 'Mac OS X' to 'macOS' in build/README.md * Update CHANGELOG-1.8.md for v1.8.11. * Updating kubemci remove-clusters e2e test to use --force to remove from all clusters * When using custom network with IP-alias, use the former's subnet for the latter too * segregate job scaling from everything else * Update the stackdriver agents yaml to include a deployment for cluster level resources * fix typo that redefines variable and breaks code * fluentd-elasticsearc addon: allow graceful shutdown in fluentd-es image. * apiserver: enforce shared RequestContextMapper in delegation chain * Fix disruptive tests for GKE regional clusters * Fix kubectl bindata * Put nil back into switch * Wait longer in pod cleanup * Fix a bug in Deployment controller when comparing templates * fix generated bindata * Add test to verify preempt ignore * Moving test images under volumes-tester/ceph and volumes-tester/nfs * Fix daemon-set-controller bootstrap RBAC policy * juju: Set apiserver advertise-address to kube-control ingress address * Fixes restartKubelet in test/e2e_node failure. Looks like there is some recent change on how we start kubelet service in test_e2e_node. Fixes restartKubelet() to get right kubelet service name to cope with the change. * Fixing ip address leak in kubemci e2e tests by always cleaning up cloud resources * Adding a kubemci e2e test to verify that single and multicluster ingresses can exist together * Migrating test images to gcr.io/kubernetes-e2e-test-images * support merging multiple SMP into one patch * Update COS version in Kubernetes GCE default and test * Remove crassirostris from owners and reviewers * Fix when privileged is set. * Retry node pool deletion in autoscaling tests. * Configure the default channel to 1.10/stable * Update CHANGELOG-1.7.md for v1.7.16. * Remove GPU label during upgrade if needed * Support typed nils; test empty Unstructured is not mutated * removes job scaler * Add subnet-id annotation for openstack cloud provider * Remove check for items * Make UnstructuredContent return contents without mutating the source * remove unused function getEncodedPod in etcd_helper_test.go * check for commands in kubelet command line * fix typo * use common clientretry.RetryOnConflict * run update bazel * add test case for request context mapper * optimize requestcontext: use RWMutex and atomic.Value * deduplicate server startup code in tls integration test * make kube-apiserver ServerRunOptions setdefault and Validate before use * fixtodo:generate an event for a missed starting window * Adding a test for kubemci remove-clusters * Make FAIL_SWAP_ON warning message clear * Fixes incorrect atomic usage * Added downgrade notice * Cleanup CRD/CR confusion in webhook e2e tests * Adding an e2e test for verifying https-only annotation with kubemci * Update image for ingress downgrade test * Detach bug fix * Update GLBC manifest to v1.0.1 * Narrow interface consumed by scale client * oidc authentication: email_verified claim is not required for JWT validation * wire through humanreadable flags * Add support for arm64 to juju charms. * Don't quit without printing API latencies in density test if it failed * Introduce multimaster clusters support to e2e framework for GKE * add e2e case for crd webhook * apiserver's webhook admission use its own scheme * Ensure /etc/hosts has a header always - Fix conformance test * kubeadm: Introduce controllable timeout on join * Setup default cni dir correctly * add TestGeneration in customresource/etcd_test.go * check error when create failed and fix the conditional judgment * Add support for multiple certificates to targetproxy * Delete in-tree support for NVIDIA GPUs. * remove pvc node affinity update check since beta NodeAffinity is immutable * Fix go vet errors * Update gofmt for go1.10 * *: godep generated code * Update godep in vendor * Work on master and worker to accomodate the new kind of gpu support * Getting error from GetFirewallRule and checking it to fix multicluster ingress test * Update tests. * Update code for new SDK. * Support custom test configurations * Rev the Azure Go SDK. * Cleanup the use of ExternalID as it is deprecated * remove kube-apiserver option that is always force to true * Seperate timer durations for expectEvent and expectNoEvent * Add e2e test for CRD Watch * CRI: update documentation for container logpath * fix local volume issue on windows * default use kube-system namespace as policyConfigmapNamespace * fix localport open - ipvs part changes * fix localport open - iptables part changes * remove rktnetes related code * add unit test for new function AnnotationsNeedUpdate * fixtodo:rsDeepCopy only when sizeNeedsUpdate or annotationsNeedUpdate * Updated README for ipvs. * Use typed events client directly * Restore show-kind function when printing multiple kinds * init annotations if it is nil to fix kubemci e2e test failures * fix flag message about TokenRequest * update bazel * Stop() for Ticker to enable leak-free code * Update bazel * Use initTest for integration to start scheduler * Use feature gate in integration * remove usless arguments of startControllers * Make certificate approve/deny no-op if CSR is already approved * controller/endpoint: explict log msg when syncing error * fix ipvs esipp * Tolerate 406 mime-type errors attempting to load new openapi schema * Fix dockershim CreateContainer error handling. * Build files generated * Include volume count while doing balanced resource allocation * Bump godep version to v80 * Update to use go1.10.1 * Add Ignorable flag to extender * Avoid data races in unit tests * Updating multicluster test to ensure that controller only creates instance groups * Add volume spec to mountedPod in actual state of world * Add unit testcases for ensureExternalLoadBalancer to make sure it doesn't panic when errors raised. * Expose kubelet health checks using new prometheus endpoint * Move istio-injection label to default namespace * certs: only append locally discovered addresses when we got none from the cloudprovider * [e2e ingress-gce] Run preshared-cert and backside-reencryption tests with kubemci * Set leader-elect for kube-scheduler to true * Use old resource model in External Metrics API e2e tests * Add kawych to OWNERS of instrumentation e2e tests * some updates * Add support of Azure standard load balancer and public IP * Fix comment in CRI run_as_group. * remove unused code in securitycontext * automatic plugin discovery should trigger plugin init only for the relevant plugin * use handle DeletedFinalStateUnknown objects in function deleteNode * fix patch conflict detection in apiserver * Specify DHCP domain for hostname * In summary_test, make Docker cpu/memory checks optional if unavailable. * In summary_test, create a file outside the test volume too. * Add namespace name into e2e event verify * tools/clientcmd: Remove gopass import * Don't change GOPATH or PATH in a script lib * Remove kube::util::go_install_from_commit * Vendor kazel * Vendor gazelle * [kubeadm] Bump kube-dns to 1.14.9 * Return error in mount_unsupported for unsupported platforms * Update Istio addon to 0.6.0 and mirror images in gcr * Remove ActiveDeadlineSeconds from watch e2e test * Make systemd service name for kubelet use a timestamp in e2e-node tests. * Add e2e test for external metrics with Stackdriver * Update kube-dns to Version 1.14.9. Major changes: - Fix for kube-dns returns NXDOMAIN when not yet synced with apiserver. - Don't generate empty record for externalName service. - Add validation for upstreamNameserver port. - Update go version to 1.9.3. * fix flaky integration tests * Use range in loops; misc fixes * fix pr No. from 517326 to 57326 * Revert "Enable partial success in fluentd-gcp" * Add support for CNI on Windows Server 2016 RTM * set right Content-Type for configz * Ensure ControllerManagerExtraArgs take precedence over generated args * Support overriding the --node-cidr-mask-size arg passed to kube-controller-manager * correct CHANGELOG-1.10.md * Fix spurious whitespace in messages from sh2ju. * Deduplicate identical typecheck errors between platforms. * certs: exclude more nonsensical addresses from SANs * remove AlphaStorageNodeAffinityAnnotation const * Resources prefixed with *kubernetes.io/ should remain unscheduled if they are not exposed on the node. * Adding integration tests for statefulset * Fix 61854, skip for short tests * Fixing ingress controller daemonset on k8s < 1.9 * Add retry to AssertCleanup * Add e2e test for service session affinity. * Add ixdy, luxas, and mikedanese as OWNERS of hyperkube image * add udev to hyperkube and bump versions * Use relative path for creating socket files * Fixing whitespace issue in kubernetes-master * Allow curl --max-time to be configurable * make reapers tolerate 404s on scaling down * fix comment error * fix format and typo of NodeAllocatableCgroups * update bazel and gofmt * use filed NodeAffinity instead of annotation for scheduler * add test for some function * fix chinese syntax * Remove alpha annotation for volume node affinity * LoadBalancerStatus make use of generated deep copy method * Update CHANGELOG-1.10.md * avoid resource leak when both `--rm` and `--expose` are specified * Ensure -o yaml populates kind/apiVersion * kubectl: fix a panic when createGeneratedObject failed * when copy file from host to pod like this: 1.kubectl copy /tmp/test-file test-pod:/ 2.kubectl copy /tmp/test-file test-pod: example 1 will fail, example 2 will cause a panic. This patch fix bugs above. * Display extended resources in node allocated resources * Add CRI container log format support back. * fix cephfs fuse mount bug when use is not admin * Add pod deletion to subpath tests, and subpath as file with container restart * wire through template PrintFlags * remove beta annoucement for out-of-tree cloud provider feature * apiexstension-apiserver: test cr finalization and deletion * Update generated files. * Critical pods shouldn't be restricted to kube-system * Fix incorrect changelog - dynamic kubelet config is not beta * Use curl instead of wget to fetch the CNI tarball in e2e-node test * Remove references to rkt from shell scripts in cluster/ and hack/. * Update Godeps after removing rkt. * Remove rktnetes code * Split out the hostname when default dhcp_domain is used in nova.conf * node authorizer sets up access rules for dynamic config * Deprecate PSP-related types in extensions/v1beta1 in favor of policy/v1beta1. * Update bazel rules * pkg/util/pointer: Update `int` pointer functions * autogenerate files * fix RC to RS * Enable partial success in fluentd-gcp * Include original error in the error message. * pv controller clean code * check error when json.Unmarshal failed * fix changelog * Support multi-container pod for "kubectl logs" * add lb source test * ipvs loadbalance * delete some unused code * Marks 1.10 as the current release * Only check hash labels of non-adopted resources in integration tests * Stop checking hash labels of adopted resources in e2e tests * Remove unused Deployment util functions * Add in human curated release notes for 1.10 * Update CHANGELOG-1.10.md for v1.10.0. * Deployment to stop adding pod-template-hash labels/selector on adoption * Add support for setting a custom rate limiter in gce cloud provider * Skip volume unit tests that don't work on osx. * Unit tests for external load balancer. * removes custom scalers from kubectl * Update event-exporter image * Pod deletion can be contended, causing test failure * Increase service endpoint test timeout * Double container probe timeout * wire through custom-column print flags * wire through name/success print flags * Increase cpu/mem thresholds for c-m in density test * Revert "Increase fluentd rolling-upgrade maxUnavailable to large value" * validate authorization flags in BuiltInAuthorizationOptions.Validate * use status.Errorf instead of Deprecated func grpc.Errorf * Turn server-print on by default in kubectl * fix hostport checking for initContainers since they run in sequential order * clean up output-version * remove deprecated -a * Use inclien func to ensure unlock is executed * Implement verbosity feature for kubeadm init * Patch for #61632, add `/etc/sysconfig/kublet` and supporting wiring. * Added e2e test for local-volume provisioner that does not create PV for discovered non-bind-mounted filesystem. * Support completion for kubectl apply view/edit-last-applied * Add a sceneo UT test to TestMustRunAsOptions * Revert "Revert revert of equivalence class hash calculation in scheduler" * Adds e2e test for the VMware vpxd restart scenario * run hack/godep-restore.sh && hack/godep-save.sh * Update to gazelle 0.10.1 * Remove all upstream BUILD, BUILD.bazel, and WORKSPACE files from vendor/ * Fix #61363, Bounded retries for cloud allocator. * remove knownAlphaFeatures, only store input features. * Removing the always pull policy on this image. * update-godep-licenses.sh: various fixes and cleanups. * verify-cli-conventions.sh: use $(..) instead of `..`. * verify-godeps: change redirection order. * cluster/gce: fix checks for empty strings. * cluster/gce: fix shell return value comparison. * pkg/util/verify-util-pkg.sh: fix shell return value comparison. * Updated e2e lv-provisioner image to v2.1.0 * Add conflict detection feature to apply strategy * include node internal ip as additional information for kubectl * Clarify runtime behavior for symlinked and non-exist hostPath * escape literal percent sign when formatting * add kubectl config view --raw example help user use * Ensure cloudprovider.InstanceNotFound is reported when the VM is not found on Azure * Use RaceFreeFakeWatcher in ObjectTracker * Added chmod a+x for local SSD when disk is created with NODE_LOCAL_SSDS * Use O_PATH to avoid errors on Openat * Enable AESGCM encryption of secrets in etcd by default. * Cluster Autoscaler 1.2.0 * test: Disable ui dashboard test for gke * Performance tests and fix for IPAM controller. * e2e:Enable CSI tests * Update GCP fluentd configmap for GKE node journal logging * Remove validation of Alpha Feature Gates * meta/v1: check error from json.Unmarshal() * Do not consider pods being deleted in the same namespace for spreading purposes for service anti-affinity priority similar to selectorspread priority. * Fix minor error in the 1.10 release note. * wire through json/yaml print flags * update metrics to true like it is for kube-apiserver * Add @x13n to fluentd-gcp OWNERS * Replace "golang.org/x/net/context" with "context" * Increase fluentd rolling-upgrade maxUnavailable to large value * Fix ha_master test: ignore stderr from 'gcloud' (warnings etc) * Fix master replication util for gce clusters - populate cluster-location.txt * Remove max-pods param from config-test.sh * Add verification of supported service tags * move the const to the place it should be * cluster/update-storage-objects.sh: Fix to ignore deleted objects * Revert "add rolling update daemonset existing pod adoption integration test" * Fix `PodScheduled` bug for static pod. * Use inner volume name instead of outer volume name for subpath directory * Bump image for ingress downgrade test * Remove wildcard matching of no-op test webhooks * Increase API watch test timeout to avoid flakes. * Fix help text for cpu manager * Adding rramkumar1 and MrHohn as reviewer & approver to pkg/test * Support --dry-run in kubectl patch command. * Fix condition for using network unavailable taint in cloud_cidr_allocator * Fixing kubemci conformance test * Make advanced audit output version configurable. * Update CHANGELOG-1.9.md for v1.9.6. * Update staging godeps * Get rid of duplicate VerifyPodStartupLatency util in node density tests * Capture different parts of pod-startup latency as metrics * Use a random unused port for these e2e tests. Do not use port 80 to avoid conflict with other important pods that might be listening on 0.0.0.0:80. * add --from-file flag to docker-registry secret * Add a configuration step to make the test work on GKE * Clearing out the client-ca-file option in case it exists on the snap from long ago. * Autogenerated changes. * PSP: godoc fixes and improvements. * Use consistent bash variable syntax * Add support of specifying service tags for Azure cloud provider * Bump cfssl to be compatible with Go 1.10 * `--force` only takes effect when `--grace-period=0` * remove invalid resource replicationControllers * add myself for sig-cli reviewer * Print object should be updated which may cause potential bug. This patch fix this. modified: pkg/kubectl/cmd/create_clusterrole.go modified: pkg/kubectl/cmd/create_role.go * fix a error in return value modified: pkg/registry/rbac/validation/rule.go * etcd client add dial timeout * switch to scale subresource when describe hpa replicas * remove kube-apiserver unused storage-version flag * this patch do tow things: 1.add dry-run flag for create job subcommand 2.add cmd-util test for create job subcommand modified: pkg/kubectl/cmd/create_job.go modified: hack/make-rules/test-cmd-util.sh * Add UT Test to TestAttacherUnmountDevice * --show-all is inert in v1.11 * Change pods memory boundary. * Fix comments and some small fixes * Grammar and spelling update * Changing admission controller settings to match https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use * Add COPYING file name as valid license file * hack/update-bazel.sh * ReplicaSet: Use apps/v1 RS in integration test. * ReplicaSet: Use apps/v1 RS in e2e test. * Add e2e test for Custom Metrics API with new Stackdriver resource model and External Metrics API. * disable DaemonSet scheduling feature for 1.10 * Generated changes * RoundTrip tests in the k8s/api repository * remove unused code * check etcd servers by a random order * Make `test-cmd` work with OS-X tooling * the err has checked in TearDownAt func/kind bug * Use function aws.Int64Value replace of deprecated function orZero * catch err when Watch testResource failed in func TestWatchCallNonNamespace * remove unused rls-ca-file flag * fix isnotfound * return error if get NodeStageSecret and NodePublishSecret failed * fix failed verify misspell err * Fix broken link * fix sorting taints in case the sorting keys are equal * Update CHANGELOG-1.10.md for v1.10.0-rc.1. * prevent conformance test failure in DIND scenario * Check apps/v1 StatefulSet available before starting its controller * ReplicaSet: Use apps/v1 RS in kube-controller-manager. * ReplicationController: Use apps/v1 ReplicaSet in conversion layer. * ReplicaSet: Use apps/v1 for RS controller. * remove todo suggesting to add the cronjob start time * remove todo to consider adding the cronjob name as a label * Fix job's backoff limit for restart policy OnFailure * Update Cluster Autoscaler version to 1.2.0-beta1 * Remove 'system' prefix from Metadata Agent rbac configuration * Stabilize openstack_test when running against real cloud * vendor: Update github.com/evanphx/json-patch * Add test for FailedGetExternalMetric * bump spf13/cobra(c439c4): Terminate the stripping of flags when -- is found * apiserver: add warning about not trusting authz of aggregator * Bump Heapster to v1.5.2 * add e2e test * Log rbac info into advanced audit event * add unit test for PVC conditions describer * fix kubectl apply error message * Suppress error message from grep by removing in the end as it is wrongly interpreted as a file. * cluster/gce/list-resources.sh: also list stackdriver logging sinks * provide easy methods for direct kubeconfig loading from bytes * Refactor disruptive tests to use more volume types * Add myself for sig-cli related stuff as approver * Use charm env in actions to get have charmhelpers available * Fix the 404 error * respect fstype in Windows for azure disk * update-translations.sh: use kube::util::ensure-temp-dir instead of static path. * build-ui.sh: use kube::util::ensure-temp-dir instead of static path. * remove outdated comments * fix sorting tolerations in case the keys are equal * remove DNS service from kubectl comformance test * add unit test for func parsePorts and validate * Instrument transformer.go with latency metrics. * Support new NODE_OS_DISTRIBUTION 'custom' on GCE * remove unused code authenticator/password/allow * fix a small error in description modified: pkg/kubectl/cmd/create_job.go * Add volumemetrics for ISCSI Plugin. * remove unnecessary TODOs in meta.go * Remove deprecated paramter "authorization-rbac-super-user" * return NodeStageVolume/NodePublishVolume error if operation failed * fix todo:add function getFailContainer to report which containers failed the pod * Document that endpoints is only plural in resource aliases * add rolling update daemonset existing pod adoption integration test * Pod comparer should count pods in scheduling queue * Fix error handling in gc e2e test * Node status be more verbose * Correct spelling * `GetExternalMetricReplicas` ignores unready pods * Add missing binaryData field to the ConfigMap Hash * pkg/printers: Support base64 decode in kubectl go-template * add Get/Set methods, mutex on instanceGroupAttrs. * move shared test cluster vars into method + type * test ensureInternalBackendService, ensureInternalBackendServiceGroups * expect no error when correct resources already exist. DeleteWrongResources -> ClearPreviousResources * test that deleting twice does not throw error * rename to _test.go, update-bazel, comments * Fix Issue #61123, call syncer.Update on add event. * test updateInternalLoadBalancer * hooks for updating healthchecks, firewalls, regional backendservices * test ensureInternalLoadBalancer and ensureInternalLoadBalancerDeleted * add hooks to add, remove, insert instances from instancegroups * isolate logic to be shared with internal lb tests into separate file * Fix strategy name in the error messages. * kubectl get psp: modify header to show PRIV instead of DATA for column with privileged flag. * Add Troubleshooting sections to Heapster and Metrics Server addons documentation * remove the outdated TODO * stop using AlwaysAdmit admission * remove unused func NewNamespacedNameFromString * remove hack/test-cmd.sh: make is the main build tool * pkg/api/unversioned related cleanup * fix little * remove check d >= 0 since go 1.8 is no longer supported on master branch * remove unused pkg unversioned * fix bug in apiserver.k8s.io install * don't do attach and deatch when volume status is error * remove dead code in kubelet * Simplify authenticator configuration initialization * fix validation for dev gcloud * Grant sig leads feature approval powers * Add e2e test for watch * distinguish which labels belong to resource * Roundtrip test helper for external types * resource-name not present in the URL for list,watch,deletecollection * add UT for validatePSPRunAsUser * build: fix building with spaces in directory names. * Added e2e test for local volume provisioner discovery of new mountpoints while running. * Disabled CheckNodeMemoryPressure and CheckNodeDiskPressure predicates if TaintNodesByCondition enabled. * cronjob_remove_getNextStartTimeAfter * Ensure reasons end up as comments in kubectl edit. * log enabled admission controller in order * Remove invalid comments in unit tests * IsNotFound should check ErrDefault404 and ErrUnexpectedResponseCode * `exec` away the shell for node-problem-detector * Add cache comparison for pods and pdbs * Scheduler cache comparer * Use inline func to fix deadlock * Improve PodSecurityPolicy group validate error message on out-of-range group IDs * fix for openstack member cleanup for multiple port cases * [advanced audit]fix comment about throttle burst * add kubectl api-resources command * move enum into function local * include file name in the error when visiting files * update bazel * userspace: move udp echo server to proxier_test.go * fix TODO: test more SetType * Improve debug curl command * add unit test for function FeatureGateSetFromMap and FeatureGateString * remove unused htpasswd * fix boilerplate checker of kubernetes/kubernetes * regenerated all files and remove all YEAR fields * add boilerplate.generatego.txt and let all code-generators use it * [PATCH] Use nodename as key * move openHostPorts and closeHostPorts into a common struct * Add an alias `update` for subcommand `enable` * Add test case for kubelet phase command * Auto generated docs. * Auto generated BUILD files. * Add phase command for dynamic kubelet configuration in kubeadm. * flag value bindings for kubectl apply commands * Admit BestEffort if it tolerates memory pressure. * add unit test for function ParseKindArg and ParseGroupKind * Support snapshotting a scheduler cache * client-go/util/cert go_library shouldn't depend on testdata * translate hack/e2e.go -v to --verbose-commands * Bugfix for erroneous upgrade needed messaging in kubernetes worker charm. * kubeadm: add better test coverage to token.go * `GetObjectMetricReplicas` ignores unready pods * kubeadm: add better test coverage to reset.go * Typo in IT translation * remove some not used imports from python codes * remove unused hack/lookup_pull.py * remove --service-account-private-key-file in v1.11 * kubeadm: Add writable parameter to *ExtraVolumes init config * pwittrock requested removal; add pwittrock team members to sig-cli-maintainers * refresh eviction interval periodically * Fix local cluster leaking memory. * Allow system critical priority classes in API validation * autogenerated files * subtract inactive_file from usage when setting memcg threshold * modified * move EtcdServersOverrides to EtcdOptions flags validate * Update Gluster image * Add grace period to volume_io tests * Add pod cleanup timeout * Fix Ceph RBD image * Fix data race in node lifecycle controller * apiserver clean code * Refactor controller-manager: turn Serve func into handlerchain builder * Do not create dangling legacy symlink if the new symlink to container logs does not exist. These dangling legacy symlink are removed by kube runtime gc, so it's better if we do not create them in the first place to avoid unnecessary work from kube runtime gc. * Suppress error message from grep when checking whether a subnet has a secondary range or not. * Remove potential sources of flakes for kms_transformation_test.go. * Change to fix logging * align cpu/mem for fluentd-gcp to fluentd-es plus cpu cap * pkg/volume/nfs/nfs.go: correct error messages. * add some uts in helpers for CRD * Fixe golints of equiv class * Update generated files * Use const in equiv class * [PATCH] Fix equiv. cache invalidation of Node condition. * ignore the loopbackdevice error, or the rbd volume will not get detached * fix non-nil ptr struct convert * fix references and golint failures * Update bootstrap policy fixture data * Remove example change to seperate repo * Update generated types * Fix golints in extender * Add preemption in scheduler extender * Auto-create system critical prioity classes at API server startup * kubeadm: add better test coverage to version.go * deep copy fake client actions to avoid accidental mutation * Instrument transformer.go with latency metrics. * Fix iSCSI image * fix some ineffectual assignments and misspellings for the package of 'pkg/kubelet/volumemanager' * Make sh2ju use awk instead of bc. * Indicate clusterrolebinding, rolebinding subjects are optional fields * fix the bad err * fix todo: use a better way to keep this label unique in the tests * Adding details to Conformance Tests using RFC 2119 standards. * kubelet: make --cni-bin-dir accept a comma-separated list of CNI plugin directories * kubenet: accept a list of CNI binary plugin paths * cni: convert "vendor" option to multiple plugin binary search paths * cni: clarify bin/conf directory variable names * delete unused variable * move persistentvolume to storage package * supplement for the fix of issue: https://github.com/kubernetes/kubernetes/issues/60366 * Update IPVS doc * log an error message when imageToRuntimeAPIImage failed * Add UT test to TestMax if equal scenario * remove docker-email from required args for "create secret docker-registry" * remove filtering by instance state * Fix: remove keyword defer in the loop * Regenerate files * fix persist typo * fix visible typo * clean up unused const in node_lifecycle_controller.go * flag value bindings for kubectl attach/convert/delete/drain/edit/exec commands * implement begin-port+offset port range parsing * fix glog.Info in volumn_host * remove redundant fake discovery code * Remove invalid TODOs in kubeadm constants. * flag value bindings for kubectl create/get/set commands * Remove val and ok in Storageos * Do not log unchanged message if a format other than 'name' is specified * make read from channel other than stdout non-fatal * Allow including both podSelector and namespaceSelector in a NetworkPolicyPeer * Factor out duplicated NetworkPolicy validation code * Add UT test in qos if pod has one container * remove deprecated initresource admission plugin * Upgraded to apps/v1 and removed rollback example * fix the typo error due to the comments * Support completion for kubectl cp * clean testprinter after commit: https://github.com/kubernetes/kubernetes/pull/60117 * Add validation of apiserver-advertise-address * kubectl: delete dead package * kubeadm/phases: small grammar improvements * sample-controller: generate UpdateStatus for Foo resource * sample-controller: add status subresource support * update bazel: adds new vclib test * vSphere: Minimize property collection via Finder * podtolerationrestriction: fix informer race in test * Log warning message when failed to remove rbd lock * Add jingax10 as both reviewer and approver in cluster/gce. * Add test for scheduler:VolumeCountConflicts * Adding metrics server * Change HAIRPIN_MODE back to hairpin-veth * fixes #54017, remove deprecated --mode flag * fixes document grammar * Disable image GC when high threshold is set to 100 * Disable ImageGC when high threshold is set to 0 * Include more information when multiple security groups are tagged * fix help message of kubeconfig * fix #40123: add a periodical polling to update pod config * optimize DefaultTolerationSeconds admission controller * Respond to reviewer comments * Add instructions on how to debug a crashed pod * more concise to merge the array * add description of pvc condition for kubectl describe command * fix incorrect logic in glusterfs.go#canSupport * remove method NewCronJobControllerFromClient * fix assert.Equal argument order * fix todo: use the ServiceTestJig replace of service * check taints when allocating CIDR for the cloud * fix spelling error in comment and log * clean one redundant comment of rbd.go * add-ut-for-legacyLogSymlink * add ut for kuberuntime-gc * sync code from copy destination * kubectl: make error with resource list prettier * Update glusterfs-storageclass.yaml * Replace error string with const * fix error message about DeleteOptions * code refactor * small nit in the annotations * new testcase helpers_linux.go * remove duplicated validation from podsecuritypolicy * Disable session affinity for internal kuberntes service * Fix bad column alignment when using custom columns from OpenAPI schema * reduce garbage_collector test cases running time * prevent the same path load multiple times * remove punctuation from the end of an error string * Fix typo, grammar, punctuations and formatting * Fix to avoid REST API calls at log level 2. * add validation in kubectl create if no file in directory ------------------------------------------------------------------- Thu Jul 19 11:42:17 UTC 2018 - jmassaguerpla@suse.com - Get the commit id from the obsinfo file. This way this is automatic and we don't have a regression of bsc#1065972 ------------------------------------------------------------------- Mon Jul 16 18:16:49 UTC 2018 - jmassaguerpla@suse.com - initial commit in order to split kubectl package (fix bsc#1097473 and bsc#1101010 and fate#325820) add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
