------------------------------------------------------------------- Sat Nov 30 15:03:42 UTC 2019 - Dominique Leuenberger - Convert changes file to proper UTF-8 format: new version of RPM are getting strict in interpreting files. ------------------------------------------------------------------- Wed Oct 16 10:08:39 UTC 2019 - rbrown@suse.com - Update to version 1.16.2: * apiextensions: npe panic in structural schema unfold * Fix dynamic kubelet config init order * Fixed bug in TopologyManager with SingleNUMANode Policy * Merge pull request #83102 from feiskyer/fix-too-many-calls * Address PR comment * Update service controller to prevent orphaned public IP addresses * Limit YAML/JSON decode size * bump gopkg.in/yaml.v2 v2.2.4 * Add/Update CHANGELOG-1.16.md for v1.16.1. * Kubernetes version v1.16.2-beta.0 openapi-spec file updates * Don't leak a go routine on panic * using online instead to fix kubelet service failed with wrong number of possible NUMA nodes * Update go mod hcsshim version to fix the kube-proxy issue cannot access service by self nodeip:port on windows ------------------------------------------------------------------- Fri Oct 04 14:16:51 UTC 2019 - rbrown@suse.com - Update to version 1.16.1: * Deflake TestWatchBasedManager * Update to use go1.12.10 * remove apiserver loopback client QPS limit * Use ipv4 in wincat port forward * Update codegen violation rules * Update generated code * Add example3.io:v1 to update-codegen.sh * Add example3.io * informer-gen: allow package names containing dots * Update cluster autoscaler version to 1.16.1 * Fix ipv6 ip allocation method for standard lb * fix map assignment to entry in nil map,when use --feature-gates in kubeadm * Fix closing of dirs in doSafeMakeDir * Fixed a scheduler panic on PodAffinity * TokenCleaner#evalSecret should enqueue the key * Only set ipv4/ipv6 routes when there is corresponding CIDR. * Add/Update CHANGELOG-1.16.md for v1.16.0. * Kubernetes version v1.16.1-beta.0 openapi-spec file updates * expose and use an AddHealthChecks method directly on config * fix: azure disk detach failure if node not exists * Exec probes should not be unbounded * Add 16MB limit to dockershim ExecSync * Add LimitWriter util * Encryption config: correctly handle overlapping providers * Check cache is synced first before sleeping ------------------------------------------------------------------- Tue Oct 01 13:41:59 UTC 2019 - rbrown@suse.com - Update to version 1.16.0: * Add/Update CHANGELOG-1.16.md for v1.16.0-rc.2. * fix kubelet status http calls with truncation * Expose etcd metric port in tests * Only publish openapi for structural schemas * Omit openapi properties if spec.preserveUnknownFields=true * Fix iptables version detection code to handle RHEL 7 correctly * Propagate and honor http.ErrAbortHandler * Updated stripFieldsTest to be run with update instead of apply * Moved managed fields validation to server-side apply * Apply will fail with managed fields + tests * Regenerate specs * Remove alpha status from ManagedFields * Add/Update CHANGELOG-1.16.md for v1.16.0-rc.1. * Update Cluster Autoscaler version to 1.16.0 * Fallback to schemaless apply behavior for custom resources with unhandled schemas * Improving GCE cluster up logic for EndpointSlice Controller * Add read-only rbac for csinodes to cluster-autoscaler * Update cluster-autoscaler image to v1.16.0-beta.1 * Update kubernetes dev setup instructions * Update client-go install instructions * Fix wrong command in e2e agnhost utility function * Fix filter plugins are not been called during preemption * Adding a nil check in endpointslicecache * Simplify etcd image version usage in kubeadm * Add etcd image version to kubeadm * Ensuring endpointslice controller starts up as part of cluster up when all alpha feature gates are enabled * kubeadm: Fetching kube-proxy's config map is now optional * Prevent resultPod.Status.ContainerStatuses from being empty. * Add dns capability to GCE window cluster * rebase * Add comment * Adding ENABLE_STACKDRIVER_WINDOWS * Install and start logging based on kube env * Add/Update CHANGELOG-1.16.md for v1.16.0-beta.2. * Update CHANGELOG-1.16.md for v1.16.0-beta.2. * Fixing bugs related to Endpoint Slices * kubelet e2e: defer the close to after the error check * skip recording inputs & outputs in fake script plugin when CNI_COMMAND=VERSION * bump metrics-server version to v0.3.4 * in GuaranteedUpdate, retry on precondition check failure if we are working with cached data * test * Make sure loadbalancer service is deleted before exiting the test * fix namespace termination conditions to be consistent and correct * Ensure the KUBE-MARK-DROP chain in kube-proxy mode=ipvs * Add integration test for webhook client auth * Plumb service port, URL port to webhook client auth resolution * Search client auth with and without port * Update NodeSSHHosts to support clusters with some public nodes * add ready plugin to dns tests * kubeadm: Form correct URL for IPv6 in HTTPProxy check * Remove symlink support from kubectl cp * Register all volume plugins in kubemark * persistentvolume-controller: fix data race of non-deepcopied objects in fake client * Allow typha-cpa to get apps/deployments * e2e log: fix time stamp normalization in unit test * Made IPVS and iptables modes of kube-proxy fully randomize masquerading if possible * using const instead * test(runtimeclass): add e2e tests for runtimeclass scheduling * Ensure backend is ready in listing webhook e2es * Honour "nbf" claim if present in ID token * Make CRD conversion e2e tests robust in non-aggregator-routing clusters * Make admission webhook e2e tests robust in non-aggregator-routing clusters * Make CRD admission webhook e2e work in parallel test environments * Add readiness probes to CRD/Admission webhook pods * Fix failure running `make build test` in cluster/images/etcd * Update default etcd server to 3.3.15 for kubernetes 1.16 * promote crd discovery e2e to conformance * Adding kubectl support for EndpointSlice * Add support for konnectivity service to the etcd3 client. * update cAdvisor godeps to v0.34.0 release * Add /readyz endpoints to converter/webhook test image * Move HostUtil to pkg/volume/util/hostutil * Add discovery docs crd e2e test * use the existing request info * use the same context for aggregated and proxy requests * add temporary feature gate to allow disabling aggregated discovery timeout * add env var to allow disabling the aggregated discovery timeout * add a timeout for proxying discovery requests * Single-numa-node Topology Manager bug fix * Added Single NUMA Node Policy which ensure resource are aligned on a single NUMA node * Update CanAdmitPodResult() in TopologyManager to take a TopologyHint * fix nit * run hack/update-vendor.sh * Remove defaulting for x-k8s-list-type * Update generated * Fix validation and add many tests * Use CRD validation field in server-side apply * Update kube-openapi version * fixed golint error * Adding EndpointSlice RBAC for node-proxier/kube-proxy * ipvs dualstack: generated items * create meta-proxy for proxy-mode=ipvs (dualstack) * Adding EndpointsAdapter for apiserver EndpointSlice support * Added support for ILB Global Access * startupProbe: make update * startupProbe: Test changes * startupProbe: Kubelet changes * startupProbe: API changes * Fix Windows disk usage metric measurement * wire up the webhook rejection metrics in webhook handlers * test * add webhook rejection metrics * add /livez as a liveness endpoint for kube-apiserver * Promote admission webhook e2e tests to conformance * webhook-e2e: add denying CR update test case, check CR patch and * Fixed comment to refer to the right int accessor for Quantity * Update semantics to set Preferred field in TopologyHint generation * Write the Stackdriver config separately from the installation. * bazel update * e2e logging: disable brittle output test * Promote CRD e2e tests to conformance * Update NPD addon to use v0.7.1 * Update CPUManager topology helpers to accept multiple ids * Update RuntimeClass E2E expectations * cmd/kubeadm: remove "rpc/status" from import-restrictions * vendor: update with "update-vendor.sh" script * k8s/apiextensions-apiserver/test/integration: block etcd client creation until connection is up * test/integration: block etcd client creation until connection is up * kubeadm/app/util/etcd: : block etcd client creation until connection is up * cluster/.../etcd/migrate: block etcd client creation until connection is up * Update running_pod_count and running_container_count metric * Add !providerless tag * Adding an e2e test on GMSA support * Fix out of bounds error in timeout tests * bump coredns version in kubeadm to 1.6.2 * Remove kubectl log * update dependencies file * hardcoded check sha of corefile tool * Add pre pull of e2e images after DiskPressure test * Fix static check errors * Use k8s.io/utils package * Update modules for openstack staging. * Fix linting errors on provider staging * Move Openstack provider to staging * Add devicemanager tests for TopologyHint consumption * Consume TopologyHints in the devicemanager * Add devicemanager tests for TopologyHint generation * Generate TopologyHints from the devicemanager * Added stub support for Topology Manager to Device Manager * Change Topology.NUMANode in device plugin interface to a repeated field * Update generated files * generated * apiextensions: merge openapi spec ignore path conflict * add a test to make sure the CRD OpenAPI path and defintion are protected * Add tests for namespace status conditions * Add status conditions to namespaces * fix(kubectl): all-namespaces flag being ignored by ToBuilder() in builder_flags.go * use directly DeletionHandlingMetaNamespaceKeyFunc from client-go * Adds visitor test for traversal errors * Adding EndpointSlice support for kube-proxy ipvs and iptables proxiers * Migrate the e2e provisioner container image to a different location. * Move kubectl cp back to k/k * azure support for ipv6 and dual stack services(excluding ILB) * Adding EndpointSlice controller * Graduating Windows GMSA support to beta * crd-e2e: check watch observes CR modified events; use WatchUnsafe * fix semantics of the rejected label in webhook metrics * Fix broken link to api-conventions doc. * kubeadm: fix a bug where the kubelet cert rotation was turned off * Regenerate openapi-spec * Fix bug in CPUManager with setting topology for policies * Make ServerSideApply beta, and enable by default (on the server) * Rename --experimental-* flags to --* for server-side apply * serviceaccounts: Add JWT KeyIDs to tokens * Use http/1.1 in apiserver->webhook clients * Plumb NextProtos to TLS client config, honor http/2 client preference * Enable the RuntimeClass admission controller on GCE & CI * api: Loosens RunAsUserName validation * add checksum * group imports properly * migrate kube-proxy metrics to stability framework * migrate controller-manager metrics to stability framework * Make webhook benchmarks parallel * add some documentation around the metrics stability migration changes for clarity * migrate kubelet's metrics/probes & metrics endpoint to metrics stability framework * Add authentication metrics: overall failure and error count * Use log functions of core framework on sub [p-s] * phase 2: generated items * Fail fast with TopologyManager on machines with more than 8 NUMA Nodes * Add NUMA Node awareness to the TopologyManager * phase 2: ipam filter secondary service cidr * Phase 2: service and endpoint processing * phase 2: api types + defaulting + validation + disabled fields handling * Tombstone the former Fields field by commenting the old entry * Move the IsMasterNode function to tests and mark it Deprecated * Cleanup staticcheck issues for package in client-go. * Node lifecycle controller should use a label for excluding nodes * Service controller should begin moving away from node-role labels * Add a feature gate for legacy node-role behavior * [Framework] Add UnschedulableAndUnresolvable status code * fix: prevent overriding of certain kubelet security configuration parameters if the user wished to modify them. * migrate scheduler metrics endpoint to metrics stability framework * e2e storage: read/write + read-only ephemeral inline volume test, data sharing * e2e storage: wait for pod deletion * e2e storage: multi-volume and multi-pod tests for inline ephemeral volumes * e2e storage: check NodeUnpublishVolume in csi-mock tests * e2e storage: enable testing of ephemeral inline volumes with hostpath CSI driver * e2e storage: synchronize .yaml files with latest upstream releases * Add e2e test for volume limits * Bump NPD version to v0.7 for GCI * generated * storage: make CSIInlineVolume a beta feature * storage: make tests independent of CSIInlineVolume default * Update CRD docs * Support PluginWatcher in Windows * Remove myself from reviewers across the repo so that PRs are no longer assigned to me by blunderbuss. * gce staticcheck fixes * Update vendor k8s-cloud-provider and google API * Disable tracking manged fields on scale sub-resource * Add issue to TODO * Update round-trip compatibility test * Regenerate all * Add new FieldsType to clarify the format of Fields * Rename TopologyHint.SocketAffinity to TopologyHint.NUMANodeAffinity * Update CPUManager to include NUMANodeID in CPUTopology * Updated the godoc on the CRD API types to follow conventions * Cache the discovered topology in the CPUManager instead of MachineInfo * Skip deleting custom resource instances that overlap with storage for built-in types * add comment about explicitly registering grpcprom client metrics * add some documentation around the metrics stability migration changes for clarity * add stability level to aggregator metrics and drop blank line in cmd file * migrate kube-apiserver metrics to stability framework * Re-implement AWS test driver interfaces * extending RequestedToCapacityRatio priority function to support resource bin packing of extended resources * Rename mount.IsBind to mount.MakeBindOpts * remove dependency to pkg/features on service controller package * derive node CSR hashes from public keys * Refactoring pod related functions from pv_util to pod pkg * Generated docs for ephemeral containers API * Improve API documentation for ephemeral containers * Enable CSI e2e tests for volume expansion * Graduate volume expansion to beta * Factor PassiveClock out of clock.Clock * Add discovery docs webhook e2e test * aggregator: add metric for openapi regeneration * kubeadm Json6902 Patches * storage: fix CSIInlineVolume round-trip test * apiextension: add metric for openapi regeneration * aggregator/apiextensions: v(2) log why OpenAPI spec is regenerated * delete lo network when TearDownPod to avoid CNI cache leak * DNS e2e tests differentiate between IP family * Make TestContext.IPFamily global for parallel testing * apiextensions: always set lastTransitionTime when CRD condition changes * remove slice dependency * run hack/update-bazel.sh * Update kubectl polymorphic logs helper for ephemeral containers * Change the seven blanks to ` {7}` in the regex, so it will be more readable ^P. * apiextensions: set 'metadata.generation: 1' during read from etcd if not set * use log functions of core framework * fix test/e2e/gke_node_pools.go * Add a helper function to decode scheduler plugin args * Correct func name WithBuildMetadata * revert wrongly replaced log function ginkgo.Fail * kubectl: take pod overhead into account * generated * remove test cases disabling the gates * bump the CRD feature gates to GA and lock the defaults * Add types to StatefulSetUpdateStrategyType constants * Remove conflict logic from PodTolerationRestriction * Fix toleration comparison & merging logic * Updating log after framework code refactor * Remove ndots check as it doesn't apply to windows * Run hack/update-bazel * Change custom DNS test to use ipconfig instead of resolv.conf * Add e2e DNS tests to windows tests * Adding discovery/v1alpha1 API for EndpointSlices * Bump cluster proportional autoscaler to 1.7.1 * e2e/network: add service hairpin test * Split defaultPrintHandler from handlerEntry in table printing * Improve error message on server-side apply conflicts * add cache-control headers to kube-apiserver * Move MakeFile/Dir from HostUtil to host_path vol * schedule code clean: using string prefix instead of MarkDeprecated * Internalize mount.Interface.IsMountPointMatch * apiextension: fixup defaulting tests * Utilize reflectorMutex in LastSyncResourceVersion * apiextension: promote defaulting to beta * Cleanup ginkgo.Fail calls from the e2e test framework * Add support for vSphere volume mount/attach on Windows * Use preferred import packages for test/e2e * e2e logger test: handle paths in Kubernetes CI * bazel update * e2e: consistent failure logging * e2e: unit test for logger.go and ginkgowrapper.go * Use log functions of core framework on test/e2e/apps * Clean up staticcheck issues. * apiextension: ratcheting validation of unpruned defaults * publishing: add missing deps for 1.16 branch * e2e_kubeadm: use log functions of core framework * v1beta1: bugfix in Event struct definition * fix typo in build/platforms.bzl * Correct comment in CertOrKeyExist * Remove watching Endpoints of Headless Services * Tolerate ending slash when running staticcheck * Updated comments in wait.go * generated * Mark v1beta1 admissionwebhook and crd types as deprecated * Use cached selectors/client for webhooks * Add admission benchmarks * Let webhook accessors construct client/selectors once * apiextensions: remove preliminary committed openapi packages * kube-aggregator: remove preliminary committed openapi packages * Clean up staticcheck issues for gce. Dealing with deprecated issues. (staticcheck SA1019) Dealing with error discard issue. (staticcheck SA4006) Dealing with context overwritten issue. (staticcheck SA4009) Dealing with unused functions. (staticcheck U1000) Remove gce from staticcheck failure list * Enable the RuntimeClass admission controller for scheduling * apiextension: prune default values in storage * apiextension: complete validation of meta data defaults * apiextension: reject x-kubernetes-embedded-resource with empty properties * apiextension: fix go-openapi validation error path at the root * apiextension: fix structural additionalProperties in ToOpenAPI() * Fix failing test * Use log functions of core framework on sub p* * allow an apiserver to only serve http1 * Add tests * Only update managedFields on update if it already exists * Move PrintPerfData to the test * generated * tests * mutating webhook: audit log mutation existence and actual patch * Add --include-test-files flag to verify-import-boss * Add test for HTTPExtender.IsInterested * tests: Adds RunAsUserName tests * Update PrintOptions to more appropriate GenerateOptions in some cases * hack/pin-dependency.sh k8s.io/gengo 26a664648505d962332bda642b27306bc10d1082 * Remove nsenter impl from pkg/vol/util * feat(scheduler): move node info snapshot out of internal package * moving podInformer to node controller scope * kube-proxy: improve logging around network programming latency SLI. * Add ephemeral container to GetPodVolumeNames test * fix upgrade checks * update scale client to support non-namespaced resources * Add dropDisbledFields() to service * kubeadm: fix static check failures * Fix devicePath for raw block expansion * Replace time.Sleep with poll.wait in admission e2e tests * test(scale): fix tests * fix: patch the Scale subresource if no precondition was given * fix-typo-cmd/kubeadm/app/util/config/initconfiguration.go * Make container removal fail if platform-specific containers fail * Use log functions of core framework on sub [j-l] * Don't overwrite PVC with nil/empty object returned by failed Update * Adding TooMany error type * Switch to v1 for admission and CRDs for all api-machinery e2e tests * s/nolegacyproviders/providerless/ * Use log functions of core framework on [d-i] * hack/update-bazel.sh * make it possible to start kube-api-server and kube-controller-manager without legacy cloud provider flags * make it possible to build kubelet without legacy cloud providers * add build tags to legacy provider code and make it possible to build kube-controller-manager without any legacyproviders or without particular legacy providers * Drop Azure/go-autorest from pkg/controller * Use log functions of core framework on p* * Included resizing for CSI-based block volumes. * Fix golint issues in pkg/apis/apps and pkg/apis/apps/validation * feat: use PreBind instead of Prebind in the scheduling framework * feat: use PostBind instead of Postbind in the scheduling framework * feat: use PreFilter instead of Prefilter in the scheduling framework * Split HostUtil functionality into its own files * Change GenerateTable parameter PrintOptions to GenerateOptions * Remove decorateTable() from TableGenerator * kubeadm: print the stack trace of an error for klog level v>=5 * move testfiles back * copy testfiles to hostutil dir * move files back to mount * copy mount files to hostutils * Promote VolumePVCDataSource to beta for 1.16 * remove the ipvs checks from the preflight checks * move WaitForCacheSync to the sharedInformer package * Cleanup: fix typo in flag help message * check that the recorded event is not nil on refreshExistingEventSeries * apimachinery: hide 'suppressing panic for copyResponse' error' in ReverseProxy * removed equivalence cache tests * apiextensions: builder for OpenAPI v3 * apiextensions: move openapi schema builder and merge code into package * Add e2e test for Lease API * Remove all skips from admission and CRD e2e tests that will be promoted to conformance * Add fast path to podFitsOnNode * Remove dead code * Renaming strict policy to restricted policy Restricted policy will fail admission of guaranteed pods where all requested resources are not available on a single NUMA Node * bazel update * Do not cleanup node lease namespace in e2e setup suite * Omit nil or empty field when calculating hash value * drop unused check * add legacyBinding for non-Named Binding Creater * check pod name with that in pod eviction object * check pod name with that in binding object * populate object name for admission attributes when CREATE * fix cluster/images/conformance/go-runner/tar_test.go * Fix cloud reported hostname being overridden if nodeIP set * Add hex108 as a scheduler reviewer * add SataQiu to hack/ approvers * feat: update runtime class admission plugin * Skip spec.volumes mount/map test if no SSH * GCE/Windows: use "return" as "continue" for ForEach-Object * Fix windows kubectl log -f. * Check service finalizer on upgrade test and fix-up test cases * Finish implementation of stable metrics static analysis * promote the remainingItemCount field to beta * mv HasMountRefs from mount pkg to vol/util * Remove watching Endpoints of Headless Services * move ShuffleStrings to pkg/proxy * Dump the stacktrace while an error occurs * Un-blacklist pkg/kubelet for staticcheck * add client-go as a dep of component-base * duplicate migrated variants of shared metrics into component-base * Cleanup more static check issues (S1*,ST*) * Clean up error messages (ST1005) * Clean up deprecated references * Fix misc static check issues * Remove dead code from pkg/kubelet/... * Make sure no op updates don't affect the resource version * move version logic directly into the component-base, to simplify legacyregistry logic * Fix flaky hugepages tests by decreasing page count * removing redundant code * Close leaking files in `conformance/walk.go` * fix: azure disk name matching issue * disable staticcheck on a few more packages * Update google.golang.org/genproto to c66870c02cf8 * Update github.com/coreos/etcd to v3.3.15 * Update google.golang.org/grpc to v1.23.0 * fix static check for test/e2e/framework * Fix verb reporting in metrics * controller:volume fix static check failures * Update existing node lease with retry. * Check error return from Scheme.Convert * Use lesser of context or webhook-specific timeout in webhooks * Remove check for addIPv6Checks which evaluates to true * Use framework functions under test/e2e/node/ * Add tests for newly exposed drain code * Use log functions of core framework on [c-n] * Promote service load balancer finalizer to beta and enable by default * kubeadm: support any kernel version newer than 3.10 * generated * mark CRD .status.conditions as optional * tests: Skips Windows-unrelated tests on Windows * test images: Updates image building process README * Use non-default container port and scoped port vars in webhook e2e tests * staticcheck follow-up to address late feedback * bump coredns to 1.5.0 * add coredns migration support to upgrade.sh * fixes a bug that connection refused error cannot be recognized correctly * Use VisitContainers instead of directly accessing pod container fields * update dependencies * Fix returning logs from ephemeral containers * update build dep * move the corefile backup into a single configmap with a corefile-backup data key * Move RunNormalizeScorePlugins and ApplyScoreWeights into RunScorePlugins; Also add unit tests for RunScorePlugins. * Optimize internal data structure of EvenPodsSpread * Add Benchmark test for EvenPodsSpread predicate * removed awk from kubeadm reset * Fix CRD v1 release note * Plumb context to admission Admit/Validate * plumb client-specified request timeout to context * chore: add reviewer of csi-translation-lib * Add/Update CHANGELOG-1.16.md for v1.16.0-beta.1. * Update CHANGELOG-1.16.md for v1.16.0-beta.1. * kubeadm: do not use github.com/blang/semver in app/preflight * don't delete KUBE-MARK-MASQ chain in iptables/ipvs proxier * test images: Adds README containing image building process * fix: add kind parameter in CSI migration * Log the error return from dir removal * fix: trim new line for azure storage account name * Refactor NewXXXPlugin in framework_test to avoid package variable and do some other refactor * Bump agnhost image version to 2.5 * Update e2e tests to use CRD v1 API * pod-overhead: utilize pod overhead for cgroup sizing, eviction handling * Add static analysis verify script * Delete duplicate resource.Quantity.Copy() * Bump golang.org/x/tools version for staticcheck compat * Vendor staticcheck * Leave Windows Defender enabled for clusters on GCE * accept dial timeout in webhook e2e * Update structured-merge-diff to latest version * Fix e2e for block volume expansion * Group update managedFieldsEntries by manager name * inject transformer prefix into metric * Split printer tests into table generation then table printing * Split HumanReadablePrinter struct into generator and printer structs * add delete to gaugeVec, histogramVec, summaryVec since kubelet requires it * provider/azure: Fix load balancer distribution constants * Update vendor for Azure API bumps * Update Azure imports to latest API versions * Add messages for framework.Expect* in volumeMode tests * Speed up block volume e2e test by checking events * Check the error return from listener close * Rename WaitTimeoutForPodEvent to WaitTimeoutForEvent and move it to common/events.go * Fix Test for kubeadm/app/util/net.GetHostname * Update CHANGELOG-1.14.md for v1.14.6. * Update CHANGELOG-1.15.md for v1.15.3. * Update CHANGELOG-1.13.md for v1.13.10. * Update the PR template for latest 'additional documentation' enhancements * change GetVolumeName log level * Add/delete load balancer backendPoodID in VMSS. * add delete to counterVec wrapper, since we require it in the kubelet * lock the mutation of the create boolean for safety * fix typo * fix: disk not found issue in detaching azure disk * fix: detach azure disk issue using dangling error * convert EndpointNamespace showing string rather than pointer * Remove boolean waitForComponentRestart which is always true in upgradeComponent * Use v1 admissionregistration APIs in e2e * Fix in kube-proxy for sctp ipset entries * Upgrade ConversionReview e2e test image to also support v1 * ConversionReview v1 * Fix GCE typo in test output * swap BenTheElder for rmmh in typecheck / go-srcimporter reviewers * remove unnecessary ignore * FlattenListVisitor now continues traversal on errors and returns an aggregate error * remove unused jenkins scripts * update hack/jenkins/README.md * check clusterCIDR after occupy serviceCIDR * Don't track syncProxyRules runtime if not running * Bump nfs-provisioner to include GetReference fix * Demote HPA tests from release-blocking * Demote regular resource tracking tests from release-blocking * Add benchmark for updates and get with/without server-side apply * Drop GetPods from ActualStateOfWorld * implement request cancellation in token transport * generated * CRD v1: require structural schema for v1 * CRD v1: switch integration tests with defaulting to v1 * CRD v1: require valid openapiv3 types * CRD v1: limit 'default' use to v1 * CRD v1: require schema * Move HandleFlags to e2e package * Modify dns e2e to individualise GCE specific dns checks into seperate e2e * Only advertise supported patch types * ignore agnhost binary * Fix handling empty result when invoking kubectl get * Delete agnhost binary * use factory.Config fields directly in scheduler struct * Removes conflicting Quobyte tenant test error from API validation * Get location and subscriptionID from IMDS when useInstanceMetadata is true * Results of running update scripts: update-openapi-spec * Update GetTopologyHints() API to return a map * Initialize flags to support extra flags * replace ping with connect in msg * use agnhost image * update go to 1.12.9 * Add log.go back to core of e2e test framework * Disable kubelet restart tests for file volmode * Skip preprovisioned and inline volume tests if driver supports dynamic provisioning. * kubeadm: use etcd's /health endpoint for it's liveness probe * Lint Azure imports * Update vendor for Azure dependencies * Update Azure/azure-sdk-for-go and Azure/go-autorest modules * updated kubeadm reset wording to be more clear * Add e2e tests for CSI PVCDataSources * buildPortsToEndpointsMap should use flattened value type * aggregator: add myself to approvers * Move ConfirmStatefulPodCount to e2e test * CRD v1: disallow spec.preserveUnknownFields=true * CRD v1: combine webhookClientConfig and conversionReviewVersions under webhook struct * CRD v1: drop spec.scope default * CRD v1: drop top-level version, validation, subresources, additionalPrinterColumns fields * CRD v1: change JSONPath to jsonPath * CRD v1: install/register types * CRD v1: copy v1beta1 types to v1 * Taints and tolerations e2e test re-work * cleanup: fix typos in rbd_util.go * cleanup: fix typos in error message in e2e test * error config attachable plugin * add the ability to migrate coredns configmap * error config attachable plugin * remove defaultedInternalConfig fromr kubeadm * fix error set csiplugin attachable * Fix panic when errors are nil * Add test for unused volumes * Skip unused volumes in VolumeManager * Refactor makeMountsMap into GetPodVolumeNames * Add http response code 503 to check. * kubeadm-kustomize-ux * [kubernetes/kubeadm] fix minor nil issues in kudeadm code * fix some typos in recycle_test.go * Make drain library more reusable * Propagate error from NewEtcd * Lowercase first letter of chainable errors in PVC protection controller * Add live list of pods to PVC protection controller * Upgrade AdmissionReview e2e test image to also support v1 * Bump vertical autoscaler to v0.8.1 * Add instruction for "Application Default Credentials" * fix shellcheck failures in hack/test-integration.sh and hack/verify-test-featuregates.sh * Add admission e2e tests for untested stable operations * fix some typos in testing.go * kube-proxy: do not export network programming latency for deleted enpoints. * feat: use schedulerapi.MaxPriority instead of hard-coded int * feat(scheduler): return error when score is out of range * Promote e2e verifying service type updates * do not publish openapi for a schema containing bad types * Add CRD e2e tests for list, delete collection, and status sub-resource operations * Handle error correctly in kubee-proxy command * Fix malformed port in vsphere cloud provider test * Add CPUManager tests for TopologyHint consumption * Consume TopologyHints in the CPUManager * Add CPUManager tests for TopologyHint generation * Generate TopologyHints from the CPUManager * Add IterateSocketMasks() function to socketmask abstraction * Fix up failing boilerplate test * Update to go 1.12.8 * fix azure load balancer update dns label issue * Fix default scheduler crash if scheduler extender filter returns a not found node * change deprecatedVersion type to string for static analysis parsing ease * Add service reachability polling to avoid flakiness * Update vendor * Pin golang.org/x/net to cdfb69a * Remove fail argument from ReadOrDie() * Move GetGPUDevicePluginImage to the test * Move ProxyRequest to kubelet e2e fw * resource: cleanup helpers_test.go * kube-eviction: use common resource summation functions * resource: modify resource helpers for better reuse * bump go-grpc-prometheus since 1.2.0 actually exposes the metrics * kubeadm: add v1.17 to the list versions that map to etcd version * Re-Generate k8s.io/apimachinery/pkg/util/sets * Update k8s.io/gengo to 955ffa8fcfc983717cd9de5d2a1e9f5c465f4376 * storage: add test for ValidateCSIDriverUpdate * storage: check CSIDriver.Spec.VolumeLifecycleModes * storage: validate CSIDriver.Spec.VolumeLifecycleModes * storage: generated files for CSIDriver.Spec.VolumeLifecycleModes * storage: introduce CSIDriver.Spec.VolumeLifecycleModes * kubelet: add eviction counter to metrics * rename healthz methodNames to be more consistent w/ present day usages * Fix event when Cinder volume can not be expanded when in-use * use image in statefulset too * Hide bearer token in logs * Address review comments * proxy/ipvs: test cleanLegacyService with real servers * run ./hack/update-vendor.sh * Kubernetes version v1.17.0-alpha.0 openapi-spec file updates * kubectl: eliminate unnecessary blank ending line (#81229) * Delete extraneous CHANGELOG-*.md files on branch. * add missing import required by build scripts * Use RWMutex in watchBasedManager * [k8s.io/client-go]fix typo in eventseries_test.go method * Fix flaky test TestPreemptWithPermitPlugin * Introduce cache for APIServices * Replace self defined const StatusTooManyRequests with http.StatusTooManyRequests. * Remove algorithm.NodeLister from scheduler interface * Update csi-provisioner and snapshotter to get selflink fix * remove alias until we can get the proper alias in place * Update docs for service/endpoints port names * Propagate error from NewREST * proxy/ipvs: remove unused constant rsGracefulDeletePeriod * add logicalhan as approver on component-base/metrics * Error code incorrectly hidden in recordEvent * Update CSI hostpathplugin to include cloning fix * Return 503 for custom resource requests during server start * Revert "Toleration priority function score computation" * kubeadm: cleanup unnecessary slice initialization statements * cleanup: proxier.go error message fix * Inline/simplify two used-only-once service test helper functions * Replace self defined const StatusTooManyRequests with http.StatusTooManyRequests. * adds an integration test for double deletion with a custom finalizer * placeholders for follow-up PR on kustomize UX * kubeadm-kustomize-core * publishing: remove rules for release-1.12 branch * publishing: add rules for release-1.16 branch * Implement stable metric validation and verification * Modify the logic to discover corresponding errors. * Fix conflicted cache when the requests are canceled by other Azure operations * changes the way `gc` detect that an object needs to be deleted * Fix Azure client requests stuck issues on http.StatusTooManyRequests * Add service annotation for specifying load balancer's pip with name. * Fix logging message during unmounting * tests: Fixes DNS tests for Windows * Add missed status code description in comment. * Add DataSource to PVC describe * doc: add Draven as a reviewer to test package * Set runtimeState when RuntimeReady is not set or false * Remove runDeployment() from e2e test * Fix a bug in the IPVS proxier where virtual servers are not cleaned up even though the corresponding Service object was deleted. * Remove unused BusyBoxImage * Remove core dependency from endpoints e2e fw * Remove core dependency from deployment e2e fw * Return CR validation errors as field errors * Autogenerated files * Scheduler should terminate when it looses leader lock * Rename HostUtils.GetFSGroup to HostUtils.GetOwner * Deprecate the hyperkube support for cloud-controller-manager * Rename HostUtils.ExistsPath to PathExists * Rename mount.NewOsExec to mount.NewOSExec * Update generated files * Introduce topology into the runtimeClass API * Add iptables restore failure metrics * kubeadm --pod-network-cidr supports a comma separated list of pod CIDRs. This is a necesary change for dual-stack. * Update kubeproxy config validation to support list of comma separated pod CIDRs. Dual-stack feature must be enabled for the validation to be done. * add validation for CNI config before loading and fix some typo * reduce kubelet getting node lease * Experimental ILB support * kubeadm: the permissions of generated CSR files are changed from 0644 to 0600 * remove iSCSI volume storage cleartext secrets in logs * Fix node port service reachability test for nodes running on localhost * Add load balancer cross resource group settings to config. * fix: use Create for attach/detach disk * make hostpath configurable for test * feat(scale): add Patch method to ScaleInterface * feat: cleanup pod critical pod annotations feature * Fix two race issues in scheduling_queue_test * Use the escalate verb for clusterroleaggregator rather than cluster-admin permissions * expose ability to register native prometheus collectors * Fix most linting issues in pkg/util/mount * remove redundant reviewers in test/OWNERS * promote andrewsykim to approver in test/OWNERS * Changed comment on ScaledValue (#79738) * Remove unnecessary serializer override for CRD status, test proto requests on CRD status * fix: update provisional delay seconds to 10s * fix: reduce the number of pods and volumes * fix: use workqueue to speed up of volume binding tests * feat: add logs to volume binding test * Add `gen_openapi` target to top-level Makefile. * kubeadm: Fix some documnetation errors * Adjust test case for a new command line parameter * Update to latest klog 0.4.0 * pinned cadvisor to a latest commit * Use events to speed up the test * Add test for mismatched usage of filesystem/block volumes * publish path parameter * kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes * fix kubeadm version def.bzl * Remove printOnce() on e2e tests * Constant time password comparison * Rename MetricsForE2E for golint failure * Added info requested in review of #77636, and more * Refactor validation options * Move CRD approval validation into validation package * feat: use named array instead of score array in normalizing score * remove dead code: pkg/api/resources * changed IsCriticalPod to return true in case of static pods * Lower verbosity level for some useful scheduler logs; Also add node resource info when pod is scheduled on node. * generated * update github.com/json-iterator/go to v1.1.7 * Update the Windows node image 1809 version to 0709 * also deprecate --cloud-provider-gce-lb-src-cidrs flag from kube-apiserver * add scheduling utils * move volume scheduling tests * audit & admission: associate annotation with audit level * Fix a racing issue in FakeFilterPlugin * Update CHANGELOG-1.16.md for v1.16.0-alpha.3. * update dependencies to include k8s.io/utils/inotify * fix linting issues * use k8s.io/utils/inotify instead of github.com/go-sigma/inotify * Ensure tests which rely on SSH behavior are skipped if unavailable * [TOB-K8S-027] Fix Incorrect isKernelPid check * [TOB-K8S-025] Incorrect docker daemon process name in container manager * Update WORKSPACE to fix symlink permissions * Fix symlinks in bazel-release * autogenerated files * Deprecate SelfLink + featuregate for setting it * Fix GetReference function * Add stub support for TopologyManager to CPUManager * Make nodeList schedulable * Add IPv6 support to e2e GlusterDynamicProvisioner * Get network-proxy working with GCE. * Test webhooks with and without watch cache enabled * Update configMap data checking * modify the spelling errors * Support cross resource group load balancer. * Reduce indents of resource_usage_gatherer * generated * Limit v1 webhooks to None and NoneOnDryRun side effects classes * kubeadm e2e networking test for dual-stack podSubnet check. * Promote NodePort service creation e2e test to conformance * [e2e] Add verbose to reachability test commands * Implement CodecFactoryOptions allowing clients to opt-in to Pretty encoders and Strict Decoders (#76805) * Scope e2e webhooks to avoid cross-test interference * Add security notices to changelogs * Fix golint failures of pkg/registry/core/event * Fixed a racing issue in scheduler UT * Drop cloud-controller-manager artifacts from k/k release * Validate CSI Inline Migration unconditionally * Setup directories for Metrics validation and verification KEP * Test more replicas than spec. * fix typos in create_namespace.go * Refine TestFilterPlugin * Fix error collides with imported package name * kubeadm: fix name of CA spell error * Update function for data inequality verification * Return error returned by CSINode Get if initialization failed * cleanup: fix log message error in test case * Bumped log level of CSI driver de-registration to match registration handler * cleanup: fix typo "contstruct" -> "construct" * Add davidz627 to testing manfiests csi owners * Bump GCE PD CSI Driver testing manifests to v0.5.2-gke.0 for volume limits fix * Moved e2e boilerplate to framework * Upgrade to latest k8s.io/utils * Replace string concatination with trace fields * Add trace to webhook invocations * Added import restrictions file to e2e framework * Simplify checking in getMinTolerationTime * fix: use %q instead of %v in scheduling framework * Add CHANGELOG-1.16.md to CHANGELOG.md * fixup: correct file name in log message * cleanup: remove package csi duplicated error log * Update CHANGELOG-1.15.md for v1.15.2. * Update CHANGELOG-1.14.md for v1.14.5. * Update CHANGELOG-1.13.md for v1.13.9. * Add limit of stored errors * fix shellcheck failure in cluster/test-e2e.sh * Fix example urls * Move docker specific const to dockershim. * kubeadm: use EnsureCertificateAuthorityIsEmbedded() for file discovery * Re-import api/core/install for init function * Fixed pull-kubernetes-verify issues * Fix suggestions, track removed library in bazel * Fix golint failures in some pkg/kubelet packages * kubeadm: enable secure serving for the kube-scheduler * Fix comment on dropPodStatusDisabledFields method * Simplify VisitContainers pattern in volumemanager populator * migrate scheduler options to resourceName & resourceNamespace * Fix verify-generated-files to error on untracked files * Make Overhead validation unconditional * Preserve existing ephemeral containers on update, validate unconditionally * update generated files * Allow kubectl to attach to an ephemeral container * add unit tests for attacher DisksAreAttached and BulkDisksAreAttached * Toleration priority function score computation I think, if a pod doesn't have any tolerations, we don't prefer node without taints to the one which has taints in https://github.com/kubernetes/kubernetes/blob/master/pkg/scheduler/algorithm/priorities/taint_toleration.go#L29, so there is no point in testing that particular functionality. The side effect of the above is, since we're going round-robin in every scheduling cycle sometimes we're choosing first node and in the next cycle we'd move onto next node(where taints are not being applied), so it's causing problem unnecessarily * Omit namespace when kubectl get is for the cluster * Remove NormalizeScore plugin set from config API. * increase timeout for maximum-startup-sequence-duration to decrease probability of a flake * Reduce GCE PD Attach Limits by 1 because Node Boot Disk counts as 1 attached disk * Disable gzip compression in core control plane components * Allow gzip compression to be disabled from rest.Config * Change order kubelet starts containers * Unexport kubectl cmd profiling * Added comment after invoking ensureLoadBalancer * Wait for pods to be running before eviction starts * Moved nil check inside AlphaFeatureGate.Enabled * Updated comment about ImplementedElsewhere * Setting log level to 4 since default is 2 or 3. * Added comment on how to use ImplementedElsewhere * Fixed review comments, lint. * fixed error message * addressed review comments * Add a new error type in cloud.go * skip ilb creation if subsetting is enabled. * Handle ImplementedElsewhere error in service_controller * unit test * Add a defer to kubelet boostrap token deletion * Update copyright years * added latest tag * fixed whitespaces * updated fluentd to 1.6.3 * Fix registry for prometheus-to-sd * Rename cacheWatcher#stop * kubeadm: simplified returns * publishing: remove redundant rules for kubectl * handle joinControPlaneDoneTemp.Execute errors * feat: update multiple files in e2e node with framework helpers * Fix shellcheck failures in hack/verify-test-featuregates.sh * fix: update run filter plugin for consistency * feat: implement "post-filter" extension point for scheduling framework * Fix admissionreview doc typos * Don't supress the node update error while logging * Update .golint_failures to reflect code move to staging * Update generated * RawExtension.Raw json:"-" * Update vendor modules to reflect code move to staging * Update test data to reflect code move to staging * Add IPv6 support to preserve source pod IP test * Generated * Clarify accepted versions skew requirements, update field documentation * AdmissionReview: Allow webhook admission to dispatch v1 or v1beta1 * AdmissionReview: Install/register * Move nil check for mapperPlugin earlier in reconstructVolume * Update gofmt * Update BUILD files reflecting code move to staging * Refactor e2e tests * Add in-line filesystem volumes to MakeSecPod * Don't create mounter when reconstructing block volume * Move disruptive tests to testsuites and add ones for block volume * Add ConfigMap patch e2e test with validation step * test images: Adds version and bind-tools to agnhost * Adde 9.0.2 to CHANGELOG.md * Update import statements to reflect code move * Move pkg/kubectl/cmd/{command} to staging * EvenPodsSpread: integration test * iptables: simplify version handling * kube-proxy: drop iptables version check * fix-certs-generation-for-external-etcd * iptables: don't do feature detection on the iptables-restore binary * prune owners * Only output json format from tests when building junit reports * kubeadm reset: replace Errorf with Warningf * Update kube-addon-manager to v9.0.2. * Typo fix: DaemonsSet->DaemonSet * Fix selflinks in tests * Fix selflinks in events tests * csi: Fix socket extension comment * Remove Configurator interface * Return early in ApplyScoreWeights if there are no scores * Make discovery wait for a finite time * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/kubelet_stats.go file * Update predicates to use cached CSINode in scheduler * Add independent cache for CSINode in scheduler * Fix some unreasonable places int csi ut * Fix host path test clean up * Print ephemeral containers in kubectl describe * add flag concurrent-statefulset-syncs to kube-controller-manager (#79169) * cleanup: log message typo fix * fixed golint issues. * update codedellemc/goscaleio * Fix failing service e2e due to execPod IP unavailability * kubeadm: update the supported version for 1.16 * kubeadm: apply a number of _test fixes * doc: fix couple of issues for the doc of agnhost * add secret back to the workqueue with delay time, avoid expired bootstrap tokens not being deleted * Adding support for Azure Stack ADFS case. * fix some log typos in csi_mounter.go cleanup: remove logging duplicated error message fix error msg, include err in new returned errors. Signed-off-by: ethan * Use default skuname shared Azure Disk * do not return error, when the ds is not found * Nominate Abdullah Gharaibeh to scheduler maintainers. * Use ExpectEqual in test/e2e_node/[a-d] * Unit test endpoints controller service deletion * Update compatibility fixture data: * Update generated * Use raw bytes in metav1.Fields instead of map * Don't delete service endpoints when a generic error occurs * vendor gotest.tools/gotestsum * Switch to json test output * `kubectl get` does not count binaryData keys on ConfigMap * Fix license script to handle single-segment packages * Add GetKernelVersion to ipvs.KernelHandler interface * Add code check for framework.ExpectEqual() * Remove duplicate scheduler anti-affinity preemption e2e * Refactor pkg/kubectl/conditions.go to remove file * clean GeneralPredicates code * Fix registry for PrometheusDummyExporter * apiextensions: 404 if request scope does not match crd scope * When PVC is invalid, don't count volumes in scheduler predicate * Don't count unrelated volumes in scheduler predicate * update RSA keys to 2048 bits * Fix unexpected line end in override flags * Run ginkgo in foreground, elminiate wait & pgrep * Move pkg/kubect/explain to staging * Use framework.ExpectEqual() under test/e2e_kubeadm * Refactor pkg/kubectl/{scale.go|rollingupdater.go} for move to staging * Refine watcher count calculation * Move pod related functions file in test/e2e/framework/util.go to its sub direcotry * Move pkg/kubectl/proxy to staging * proxy/ipvs: refactor TestNodePort to use test tables * Removed unsed return values of createResourceQuota * Fix tag for github.com/gogo/protobuf * proxy/ipvs: refactor TestClusterIP to use test tables * Fix hanging webhook error checking * Add NormalizeScore extension point for scheduler framework. * Upgrade Calico to 3.7.4 * Move pkg/kubectl/generate to staging * Convert e2e webhook tests to use v1 API * Determine system model for windows nodes * Move pkg/kubectl/cmd/util/openapi/OWNERS to staging * Refactor kubectl retrieve logs test to use agnhost * scheduler: make ApplyFeatureGates() stateless * upgrade repo infra to f85734f673056977d8ba04b0386394b684ca2acb * Move pkg/kubectl/interfaces.go to testing * Move pkg/kubectl/polymorphichelpers staging * Kubeadm FG for dual-stack was introduced in #80145. This PR progagates the kubeadm FG to the individual k8scomponents on the control-plane node. * apiextensions: add scope tests * split coredns dependency to decouple kubeadm and kube-up * Pop expired watchers in case there is no update * Update CHANGELOG-1.16.md for v1.16.0-alpha.2. * report error message when reset scheduler metrics in e2e test * Log an error when kube-scheduler fails to update the condition of the pod. * add options for name and namespace of leaderelection object * Use ErrorChannel to communicate errors during parallel execution in interpod_afiinity. * Use bigger keys for RSA-PSS, default for TLS 1.3 * Move pkg/kubectl/metricsutil to staging * Update vendor * Update structured merge-diff version * Debug values when test fail * Store key in TimestampedEntry * fix: do not allow nil Callbacks functions * Move pkg/kubectl/cmd/util and subdirs to staging * Update github.com/docker/distribution to v2.7.1 * Fix/Add comments on cadvisor implementations * Update logexporter version. * feedback 1 * Fix the public IP getting issues for VMSS nodes * change node-lease-renew-interval to 0.25 of renew-duration * Provision vSphere volume as per selectedNode * Move pkg/kubectl/apply and subdirectories to staging * TopologyManager: Fix rename best-effort policy files * support args for newrc funcs * kube-proxy in ipvs mode use ipvs to redirect traffic * update guide to make the command works as expected * e2e_node: clean up non-recommended import * delete the pods from unschedulable queue only when Add succeeds * Remove final file from pkg/kubectl/util * Move pkg/kubectl/cmd/util/openapi to staging * AdmissionReview: copy v1beta1 to v1 * fix-file-discovery * kubeadm networking related tests. * podSubnet check: if a podSubnet is specified in kubeadm-config then the e2e test will check that pod-cidrs of individual nodes fall within this range. * serviceSubnet check: if a serviceSubnet is specified in kubeadm-config then the e2e test will check that the kubernetes service created in the default namespace got a service IP from the configured range. * delete-bootstrap-kubelet.conf * autogenerated * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/psp_util.go file * Update misleading comemnts for HandleCrash * 1. Fix lint errors for the whole directory staging/src/k8s.io/client-go/tools/cache; 2. Remove staging/src/k8s.io/client-go/tools/cache from .golint_failures; 3. Fix some typo from comments. * fix snapshotter rbac rules * [eps-priority] auto-gen files * EvenPodsSpread: optimize Priority logic * EvenPodsSpread: Benchmarking Priority function * EvenPodsSpread: weigh constraints individually * EvenPodsSpread: minor enhancement on printing out priority score * EvenPodsSpread: Make some funcs in predicates pkg as public * EvenPodsSpread: Core Priority logic * EvenPodsSpread: Define a new Priority * Add message which shows how much CPU used * Remove duplicated check in ObserveEventAfterAction * Move pkg/kubectl/version to staging * Add a field 'RequiredAccessModes' to the driver info object that is propagated to pvc creation * fix building test/e2e_node/ with bazel 0.28.1 * Fix error message of ListTargetHTTPSProxies * kubelet: add UID to kubelet_container_log_filesystem_used_bytes metric * Allow aggregate-to-view roles to get jobs status (#77866) * Check error return from GetPodKey * Promote taint-based eviction e2e tests to Conformance * Move pkg/kubectl/describe to staging * Fix error handling issue in kubeadm upgrade * Un-[Slow] a bunch of networking tests * Assign OWNERS for pod integration tests * Avoid echoing request URL in proxy error * build: Add Release Engineering OWNERS * second iteration * Add tests for proactive init Container removal in the CPUManager static policy * Add tests for new containertMap type in the CPUManager * Proactively remove init Containers in CPUManager static policy * Retry metadata requests in get-credentials and valid-storage-scope * DonĀ“t translate to IPv6 empty addresses * Bump kube-addon-manager's version to v9.0.2 * PVC protection controller: get rid of PVC leaks * fix pv controller not find pv for pvc provisioning * Moves pkg/kubectl/util/i18n to staging * Add annotation to disable tcp reset on SLB service * Bug fix: Set enableTcpReset of lb rules to true for Azure Standard Load Balancer * Change Socket to Node Change Node from int in TopologyInfo to type NUMANode which is an int * use correct format verb * Device Plugin API change to include Topology Info in Devices * e2e_kubeadm: clean up non-recommended import * fix typos in csi_attacher.go * Allow customize registry name of base and release images * Kubectl user exec should accept zero-length environment values #652 (#78875) * Add ipv6 support to the e2e kubectl tests * document API guarentees and deprecation policies for cloud config files * Update pkg/volume/portworx OWNERs * vendor: update for libopenstorage/openstorage to v1.0.0 * OWNERS: api-approvers should be approvers on cri-api * Regenerate * Fix pkg-names script that doesn't select files properly * Update gogo/protobuf to latest version * Update custom-serialization code to go backward * Fix some golint failures * Move some pkg/kubectl into polymorphichelpers * Unify secret and configmap triggers * Document and improve defaulting for MakePersistentVolume, dedupe some manual PV creations * hostport: Don't masquerade localhost-to-localhost traffic * Move pkg/kubectl/drain to staging * updated Bazel files * e2e storage: csi-mock tests for ephemeral inline volumes * CSI: allow drivers that can handle persistent and ephemeral volumes * e2e: remove unused ShortName from external driver definition * Promote resourceQuota e2e verifying 'object count quota' and 'quota scope' to Conformance * Refactor nested loop in getTPMapMatchingSpreadConstraints * Clarify IP family meaning * Update TODO * kubeadm: handle ResetClusterStatusForNode errors * Remove unused package //pkg/util/normalizer * Optimize Schedule by querying nodes only when needed. * Fix leader election in kube-addon manager * Revert "e2e: Skip multi-node PV test when pods scheduled on the same node" * Rename 'preferred' TopologyManager policy to 'best-effort' * Report error when iscsiadm fails during detach * add reciprocal note about keeping manifests in sync * fix kube-proxy manifest * Fix review comments, will squash later. * Move pkg/kubectl/apply.go to staging * fix typos in pv_controller.go * Move pkg/kubectl/apps to staging * Refactor and clean up e2e framework utils, this patch handles test/e2e/framework/perf_util.go * doc: nominate Draven to scheduler reviewers. * Promote job completion after failure e2e test to Conformance * Promote job pod orphaning/adotion e2e test to Conformance * Add benchmarks for serializing PodList * EvenPodsSpread: update addPod() logic to match individual constraint * fixup: address comments * EvenPodsSpread: Preemption UT on generic_scheduler * EvenPodsSpread: Supports Preemption (addPod) * EvenPodsSpread: Supports Preemption (removePod) * Store config args instead of config factory in test context * Remove NodeLister from Scheduler Configurator * Move pkg/kubectl/util to staging * Check whether metricObj can be converted to *v1beta2.MetricValueList * Corrected Cinder typos. * Add service reachability test util function and e2e fixes * EvenPodsSpread: update 'selfMatch' logic * fixup: address comments * EvenPodsSpread: UT on genericScheduler.Schedule() * EvenPodsSpread: Core Predicate logic * EvenPodsSpread: Define a new Predicate * Generated code for Ephemeral Containers in kubelet * Add support for ephemeral containers to the kubelet * Fix es 7.x.x initial cluster formation * kubeadm: add forgotten error check * cleanup: log message typo fix * Regenerate _example informers packages * fix wrong spells in events.go * fix typos in kubelet.go * fix: return empty string when status is nil * Add 'apiserver_watch_events_sizes'. * Add unit test for iSCSI refcounter * add protection for reserved API groups * Add new refcounter for iSCSI volumes * Add _example & test for a hyphenated API group * informer-gen: use correct PackageName computed from input parameters * Autogenerated files * Add simple batching to endpoints controller * Fix detachment of deleted volumes * Updates to container manager and internal container lifecycle to accommodate Topology Manager * Fix error overrided when saveVolumeData occurs error * Use scheduler cache in affinity priority functions * bugfix: panic log params in the construct method when maxInterval is less than minInterval * Update the CleanupAndExit field for the Options and the OnServiceSynced for the ServiceHandler comment * Use v1helper.GetPersistentVolumeClaimClass for compatibility * Optimize logic in EvenPodsSpread API validation * fix lint * Changed to use cmd for getting system uuid * Remove recursion in csiAttacher#waitForVolumeAttachmentInternal * add ipv6 support to the hostport/HostIP e2e test * e2e: add a function to map IPv4 in IPv6 * Move to getMachineInfo() * Dedupe all Make PVC API object functions into the one MakePersistentVolumeClaim to rule them all * Add migration shim for VerifyVolumesAreAttached and BulkVolumeVerify * Enable windows ntfs e2e storage tests for aws driver * Add support for windows to AWS EBS * Add unit test * e2e: Autodetect the IP family of the cluster * Set the systemUUID for windows nodes * proxy/ipvs: Compute all node ips only once when a zero cidr is used * proxy/ipvs: Only compute node ip addresses once per sync * Add doc that plugins in binding cycle should not use NodeInfoSnapshot() * Remove ExecutionHook API changelog entry * fix grammar err * use correct format verb * Fix potential panic in nodeGetVolumeStatsV1 * Send a reject message to permit plugin when preempting a WaitingPod * fix kubemark e2e test script * EvenPodsSpread: match selector of each constraint independently * [eps-pred-meta] auto-gen files * fixup: fix comments and use a channel to pass err * EvenPodsSpread: refactor "chained" utils * EvenPodsSpread: refactor topologyPairsPodSpreadMap * EvenPodsSpread: PredicateMetadata initilization * GCP config: gke-exec-auth-plugin for ValidatingAdmissionWebhook * refactors to kubernetes cp command * gofmt * address comments * refactors to kubernetes CP command * Add CSIDriver creation factory to e2e framework * add link of kubeadm config doc * Generated code for ephemeral containers integration tests * Add integration tests for ephemeral containers * Fix retry issues when the nodes are under deleting on Azure * Generated code for ephemeral containers API * Add Ephemeral Containers to the Kubernetes core API * Rename DebugContainers feature to EphemeralContainers * Fix some error messages * Report NodeNotInitialized error when providerId is empty string * Fix csi attacher unit tests using t.Run() * use ExpectEqual in density_test.go * Record metrics when framework returns unschedulable error * make util/retry more generic * Pod e2e for reading last line can flake if pod runs to completion * cleanup: fix some log and error capitalizations * Use HTTPS as etcd-apiserver protocol when mTLS is enabled * bump smd * fix breaking change * Change default PVC AccessModes to RWO in test framework * add ability for gce to bulk verify attached disks * Drop "pod_name" and "container_name" metric labels * kubeadm: remove dependency on pkg/util/procfs * Add events to dswp * Cleanup versioning serializer * Remove unneded directory * kubeadm: remove dependency on pkg/kubeapiserver/authorizer/modes * Fix golint failure in pkg/util/netsh/testing/ * kubeadm should always fall back to client version when there is any internet issue * Remove unwanted string converstion in metrics errors * Calling Unreserve plugin before recordSchedulingFailure in case of binding failure * Cleanup comments in TopologyManager socketmask abstraction * EvenPodsSpread: regenerated API compatibility data * EvenPodsSpread: auto-gen files * EvenPodsSpread: api changes * feat: move service_util to separated package * Surface error returned by LoadConfig * fix gofmt * Updated dependencies: BUILD/modules.txt * Update all imports to scheme in staging * Moved files from pkg/kubectl/scheme to staging * fix parameterization of test error message * Make kubelet report usageNanoCores for node on Windows * Register Kubelet server metrics * Cleanup kubelet authz tests & make explicit * Update csi hostpath driver in e2e * implement functionality to return all found instances * Add package level And/Or calls to TopologyManager socketmask abstraction * Add NewEmtpySocketMask() call to TopologyManager socketmask abstraction * gce: configure: use 'amd64' in kube core images manifest * Set score plugin's weight to 1 if it is not set * Improve readability for image manager tests * Rename TriggerPublisherFunc as IndexerFunc * Precheck score plugins' weight when initializing * Update the topologymanager to error out if an invalid policy is given * Update the cpumanager to error out if an invalid policy is given * Update CHANGELOG-1.15.md for v1.15.1. * Fix error log issue, remove OrDie suffix in methods naming * Refactor and Move node related methods to framework/node package * Revert "feat: cleanup pod critical pod annotations feature" * Fix code block for kubectl book. * Fix of review comments. Will squash later. * Don't expect pod to stay up during node upgrade * Update generated * Make changes to integrate new version * Update smd and kube-openapi version * Skip unnecessary operations if diff is less than 0 * build: bazel: release tars should use arch in the name * fix panic in ResourceLocation in case of empty pod ip list * Handle error return from MetaNamespaceKeyFunc * Revert "Promote pod autoscaling" * correct testname for existing E2E for testing backoff limit for jobs * correct testname for E2E related to active deadline in jobs * kubeadm: get rid of dependency on pkg/util/node * Windows: Sets the effective SecurityContext's RunAsUserName * Run code generation for new field * Windows: Adds RunAsUserName field in WindowsOptions * Fixes TestScorePlugin flakiness. * make node lease renew interval more heuristic * Update deprecated diff.ObjectGoPrintDiff method * Fix shellcheck failures in test/cmd/l.*.sh * Fix shellcheck failures in test/cmd/d.*.sh * Add OWNERS for generated openapi spec package * The implementation of Filter extension for the new framework * Add CHANGELOG-1.16.md for v1.16.0-alpha.1. * Topology Manager Implementation based on Interfaces * fix pkg/controller/volume/expand/pvc_populator.go * Update unit test with expected query parameters * Add supportedMountOptions for GCE PD CSI Driver tests * Add passthrough for MountOptions for NodeStageVolume for CSI * Remove unnecessary string() from policy_none * Fix placement of test in conformance.txt * remove function apply-encryption-config in configure-helper * Skip unnecessary copy of Selector * pod-overhead: autogenerated code for scheduling changes * scheduler: add pod Overhead support for requests * remove sudo from storage tests * Remove duplicate requestInfoResolver * Log warning if config labels deletion returns false * release: generate release docker tag with default values * remove kube-aggregator/pkg/client/* * Nominate Huang-Wei to scheduler reviewers. * kube-proxy: change buckets used by NetworkProgrammingLatency * Fixed build files. * Use error channel to capture first error. * Update generated files update generated protobufs * HPA scale-to-zero for custom object/external metrics * Fix iSCSI storage plugin cleanup in block volumes * Score plugin for the scheduling framework. * make taint.ToString() consistent with the reverse parsing logic * Tolerate the case if `related` event is nil * Avoid RbdDiskManager's DetachDisk never execute again * Check return value of LabelSelectorAsSelector in describe * Simplify trigger functions in cacher * kubeadm: use local copy of kubectl's version package * Fix no audit policy by default in hack/local-up-cluster.sh * Fix error shadowing error for createPDWithRetry so failures return actual error * move getInstancesByName logic to helper function * Create C:\tmp if DNE * release: accept empty KUBE_DOCKER_IMAGE_TAG * Promote API metadata return value * remove github.com/kardianos/osext * Propagate error from creating cacher and storage decorators up * Add patch method for container images * Run gofmt * Add test for ContainerStats * Add tracing to GetContainerStats * Fix compile on non windows linux systems * Removed duplicate code * Fix flaky test TestBindPlugin * Revert "Revert "Add Bind extension point of the scheduling framework"" * Rename unused variable * Run gofmt * [kubeadm] Adds json struct tags to exposed API types * kubectl/docs/book: bump lodash from 4.17.5 to 4.17.13 * Fix kubelet watches to propagate all options * cleanup: remove useless code * Remove manual conversions for ListOptions * Fix imports, Formatting of text * delivery event non blocking firstly * Bump Go version for release-1.14 to 1.12.5 * Bump Go version for release-1.13 to 1.11.5 * Adds kubeadm feature-gate for dual-stack (IPv6DualStack). Issue: #1612 * Bugfix: csi raw block that does not need attach mounted failed * Promote StatefulSet Replica scaling * fix: rename RegisterPriorityFunction2 to RegisterPriorityMapReduceFunction * Drop -r for variable within loop * openapi: add list_type_missing violations after bump * apiserver: make changes to integrate new structured-merge-patch * Run update-vendor.sh * Don't print non-error (blank lines in this case) to stdout, and don't print blank lines for empty resources * Adjust redis matching strings * Remove GBRedisSlave image * Use docker official redis images * bazel: add openapi generation for non-main spec and fix main spec * Bump(k8s.io/kube-openapi): aggregator: merge x-kubernetes-group-version-kind slices * feat: use scheduler.New in daemonset integration test * feat: use channel instead of mutex in scheduling predicates * cluster: configure: load images and add tags with no arch * proxy/ipvs: increase log level for graceful termination * Update vendor * openapi: commit low-change code-gen+sample-apiserver specs * apiextensions: update OpenAPI spec with v1beta1 meta types * Makefile.generated_files: build code-generator+sample-apiserver OpenAPI schemas * sample-apiserver: add openapi spec * apiextensions: exclude newly added openapi from hack/update-codegen.sh * code-generator: call openapi-gen from generate-internal-groups.sh * kubeadm/*/phases/init/certs,kubeconfig: add "kubernetes-version" flag * Break out of inner loop when newQuantity is negative * Update pd csi driver images to most recent stable * kubeadm: cleanup unnecessary k8sVer parameter for GetStaticPodSpecs * kubeadm: support fetching configuration from the original cluster for 'upgrade diff' * Add ImageFSInfo, ContainerStats, and ListContainerStats impl for linux to dockershim * Add explicit warning for deprecation of Cinder and ScaleIO volume providers * Fix golint failure in pkg/quota/v1/evaluator/core * Register WatchEvents metric * Make service "no endpoints" test use agnhost connect * move scheduler to use v1beta1.events * Add josephburnett to podautoscaler OWNERS. * Added code for e2e tests for network policy. * Autogenerated files * Migrate WatchBookmarks to Beta * Enable watch bookmarks in reflector * Add `docs` section to pull request template * sample-controller: add note about fetching deps in README * Fix scripts to not rely on codegen scripts being executable * Update testname to match requested case * Fix case and update to follow RFC2119 * Update revision number for the image * Remove support for etcd2 from cluster/images/etcd image * Wait for StackdriverLogging service to stop before restarting it. * Update to go 1.12.7 * add myself and lbernail as IPVS approvers * Remove deprecated --containerized flag in kubelet * improve error messages for verifydependency * Limit the read length of ioutil.ReadAll in `pkg/kubelet` and `pkg/probe` * Add davidz627 (David Zhu) to Approvers for OperationExecutor and GCE PD * use klog.Error instead of klog.Errorf when had no format * Fixes mount/unmount paths for migrated inline volumes. Some minor fixes for GCE specific inline migrated volumes * Move volume_expand tests to storage e2e testsuites * release lib: docker save remove special name for amd64 * Avoid truncating long log messages * mark dashboard tests [Feature:Dashboard] * Use metadata informers instead of dynamic informers in controller manager * Rename metadata.NewConfigOrDie to be consistent * Switch the garbage collector to use metadata client and protobuf * add rbac for events.k8s.io apiGroup to system:kube-scheduler * execute hack/update-codegen.sh, sync updates * add check when qps > 0 but burst <=0 * Add support for HA kubemark * Rename PluginOption to Option * keep processing other nodes for the nil node error * Add check to reduce orphaned volume * removed make-symlink flag and corresponding code in hyperkube * Remove support for KUBEMARK_MASTER_COMPONENTS_QPS_LIMITS * Update testname and fix typo * Update Conformance test Metadata * chore: make some func as public in azure provider * Added custom error message when wrong file is provided with KUBECONFIG (#78185) * Populate API version in synthetic authorization requests * feat: cleanup pod critical pod annotations feature * Return the error from validateOverhead in RuntimeClass#Validate * Return 400 on invalid patch requests * clean up and fix nits * tests: Fixes jessie-dnsutils image build * Generated * Add defaulting tests * Add mutatingwebhook validation tests * Require webhook names to be unique in v1 * Remove default admissionReviewVersions in v1, make required in validation * Remove default sideEffects in v1, make required in validation * Change default timeout to 10 seconds * Change default matchPolicy to Equivalent in v1 * Add EntryType * move jbeda to emeritus * add wojtek-t and yastij as approvers/reviewers for events package * move zmerlynn to emeritus * Switch the namespace controller to use the metadata client * Add fake client, informer factory, and lister to metadata client * Fake ObjectReaction should handle PartialObjectMetadata special * reference paths to update to bump dependencies * Changed to use select-object to filter the log properties * feat: use framework.ExpectNotEqual in e2e test * Remove redundant provisioning tests * Remove redundant tests * Add block volume support to InjectContent / TestVolumeClient * Refactor TestVolumeClient and InjectContent into common function * kubeadm: cleanup the code about cobra * Ignore pending pods. * Migrate kubemark to e2e-up/e2e/down scripts. * Hollow-node should use separate client for heartbeats. * Deployment Controller - don't copy pods in getPodMapForDeployment * flush current namespace when resources are not found * Avoid conflicts with other cobra auto completion * Remove incorrect ampersand in front of AverageValue in describeHorizontalPodAutoscalerV2beta2 * cancel process node if error occurs * Fix projected volume test clean up * Fix 'concurrency' logs typo * Promote pod autoscaling * Add timestamp to the docker test logs * add failedJobsHistoryLimit to successfulJobsHistoryLimit test * add e2e test for cronjob failedJobsHistoryLimit * Add benchmarks for FieldManager handling * promote bentheelder to build/ approver * enable token review when openapi is generated * Add comments as to why we force python2 * apiserver: add --shutdown-delay-duration to keep serving until LBs stop serving traffic * More consistent env var handling in vsphere e2e test * removed flaky watch code and added NewIndexerInformerWatcher * Allow hack/lint-dependencies.sh to skip golang.org/x/... deps, verify in verify-vendor.sh * Use O_CLOEXEC in util packages * Use O_CLOEXEC for volume subpath util * Use EPOLL/O_CLOEXEC in evicition notifier * If volume in delete request does not exist, return success. * make kubectl --raw consistent for create, update, get, delete * Add micro-benchmark for DeploymentController.getPodMapForDeployment method * kubectl book: added a leading slash to apis path * Remove unnecessary return value check * update caddy vendor dependency to v1.0.1 * kubeadm: move klog.InitFlags into app/kubeadm.go * kube-cross makefile add REGISTRY * Handle error return from http.NewRequest() * Remove unused aggregator ca key * Refactored metrics-related functions from framework/metrics_util.go * Revert Provide resource version in error if available * update code documentation to reflect change in status * Add e2e test for downward API with host network * Fix golint failures in pkg/proxy * apiaggregation available controller should only hit required endpoint * Remove unintended ampersand in front of in.Current.AverageValue * For windows, use exec.Command instead of syscall.Execve. * Remove the TODO for container name matching * Remove dead code from csi_client * Remove use of HugePages feature flag in test * update code docs around old todo that is not going to happen * fixed a typo in kubectl book * Change default failurePolicy to Fail in v1 * Install/register v1 admission registration types * Copy v1beta1 to v1 admission registration types * aggregator: wire OpenAPI correctly into PrepareRun flow * Cleanup: Audit log and error capitalization * use ExpectEqual under e2e/autoscaling * apiserver: chain delegated PrepareRun * Update CHANGELOG-1.14.md for v1.14.4. * Update CHANGELOG-1.13.md for v1.13.8. * Replace KubeDescribe with ginkgo.Describe in e2e/kubectl * Trace step should be at the end of calls rather than the begin. * Add node status report frequency to kubemark config * fix incorrect hpa status * use framework.ExpectEqual for tests * fix: use schedulerCache instead of podlister in config factory * Update CHANGELOG-1.12.md for v1.12.10. * feat: use framework.ExpectEqual instead of should * e2e: use framework.ExpectEqual() for test/e2e/lifecycle * Return MetricsError with ErrCodeNotSupported code * Remove panic in storage and add log * Provide resource version in error if available * correct kubectl cp argument order * add fakes for events package, add startEventWatcher to event interface * Use ExpectEqual in e2e/scalability * apiextensions: remove hacks around nullable * update CHANGELOG * Fix wrong indentation in shell * Use framework.ExpectEqual() for e2e/cloud tests * staging file fix lint error: receiver name should not be an underscore and rename * fix: golint error of clientgo * e2e: use framework.ExpectEqual() for test/e2e/network * Populate DisruptedPods field for non-dry run * Add go-runner to the list of e2e test targets * build_defs/pkg/make_deb.py needs python2 * e2e: Skip multi-node PV test when pods scheduled on the same node * update Bazel * e2e: avoid mandatory command line flags * Extender bind should respect IsInterested * feat: use framework.ExpectEqual in storage e2e test * e2e: fix full path support when reading viper config file * e2e: use framework.ExpectEqual() for test/e2e/node * Remove duplicate error messages * Fix descriptions of kubeadm * Closing stopCh when pod_store is not created * correct the CHANGELOG-1.11.md-fix-2 * etcd: Add comment re: SELinux * etcd: Change perms in Makefile, not Dockerfile * etcd: Ensure etcd binaries are world executable * Use framework.ExpectEqual() under e2e/scheduling * Get the pdb when conflict instead of relisting * Use ExpectEqual in e2e/common * Use ExpectEqual in e2e/auth * feat: use framework.ExpectEqual in upgrades and windows e2e test * feat: use framework.ExpectEqual in servicecatalog e2e test * Making sure we handle error on http.NewRequest(). * Use ExpectEqual under apps * cleanup bespoke ipv6 checking in kubeadm * etcd: Allow Makefile to be used on SELinux systems * Remove lazy provide from credential provider and kubelet (#79674) * clean up: node dropDisabledFields * Audit policy test * Allow kube-apiserver to test the status of kms-plugin. * consolidate etcd version * Test kubectl with x-kubernetes-preserve-unknown-fields * Output boolean for AllowPrivilegeEscalation * client-go: update installation instructions to reflect v12.0.0 release * etcd: Ensure etcd binaries are world executable * correct the CHANGELOG-1.12.md * edit google dns hostname * consolidate coreDNS version to ease dependency bump * updated fluentd to 1.5.1, es & kibana to 7.1.1 * Fix HA setup logic * Address couple of issue on image build for ARM arch * Add MASTER_NODE_LABELS * correct flag order in make-help * clean up redundant conditiontype OutOfDisk * add e2e for dualstack * kubelet: fix ip reporting for downward api * Fix golint failure in pkg/kubelet/dockershim/network/cni * Use ExpectEqual in e2e/kubectl * Updated github.com/gogo/protobuf from SHA to nearest-pinnable tag (v1.0.0), as part of dependency management cleanup: #79234 * call unreserve plugin before record event * Use ExpectEqual under e2e/apimachinery * Pass desiredPods to CleanupPods * Update gophercloud vendor dependency to v0.1.0 * kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry * Create a service account Getter when TokenRequest is enabled * Hack PatchNodeStatus() to override the patch type on Status.Addresses * Document the problem with Node.Status.Addresses and strategic merge patch * generated items * vendor updates * updated publishing rules * kubenet for ipv6 dualstack * Add a metadata client to client-go that can read PartialObjectMetadata * release lib: save release docker tag in tarfile * RuntimeClass-admission: fixup comment, simplify nested ifs * kubelet: add allowed sysctl to KubeletConfiguration * correct the CHANGELOG-1.15.md * cri types changes * route controller + azure v6 routes * node ipam controller for ipv6 dualstack * api: dropDisabledFields * types modifications + conversion + conversion testing * IPv6DualStack ALPHA feature * Omit obtaining the lock when adding Nodes in newNodeTree * There are various reasons that the HPA will decide not the change the current scale. Two important ones are when missing metrics might change the direction of scaling, and when the recommended scale is within tolerance of the current scale. * Removed diplicated info row in v1.12.7 * Add public functions to define CSI external tests * Move etcd/util to etcd3/ * Utilize RWMutex for efficient backoff operations * Enable feature gate and kubelet flags for Topology Manager * Make AuthorizeClientBearerToken actually return if authn or authz is nil * Fix publishing x-kubernetes-preserve-unknown-fields working with kubectl * Remove unnecessary ETCD_CA_KEY check * quote container name in container already use error matching * Adds an optional golang runner to the conformance test image * Fix ordering settings in verify bazel * kubelet: add CNI cache dir option and plumb through to CNI and kubenet * move to libcni 0.7.0 * vendor: update containernetworking/cni to v0.7.1 * Cloud provider AWS library should query instance by ID when possible * kubelet: ensure stable order for images in node status * Modify kube-up to support cluster without nodes. * Move population of expectedUIDs outside lock * kubeadm: prevent PSP blocking of upgrade image prepull * Update autogenerated files * Move etcd/testing to etcd3/testing * kubeadm: don't use the Docker SDK in util/system/docker_validator* * Clear valueWatchers instead of removing every entry using a loop * Use Join instead of concat it manually in cephfs. * Add 'apiserver_watch_events_total' metric. * refactor: use controller.FilterActivePods in framework e2e test * Simplify the check of presence of labels in createPods * Deprecate scalability tests * Drop unnecessary claim parameter from PersistentVolumeController#updateBindVolumeToClaim * Update vendor * Update azure-sdk-for-go/services/network to 2018-08-01 * Update vendor * Update azure-sdk-for-go/services/containerregistry to 2018-09-01 * Check the correct value of Quantity in GetResourceRequest * Fix TestUnreservePlugin * Fix a bug that StatefulSet applies the revision incorrectly * improve error msg for predicate meta data * Add mattjmcnaughton as sig-node-reviewer * Autogenerate code * fixed a typo in kubectl book * agnhost: add connect subcommand * Add ability to output watch events from kubectl get * Allow YAML printer to separate multiple printed objects * followup of 79262 to cleanup PodPriority leftover * v1.15.0 API compatibility data * fix hack/update-vendor.sh array expansion * iptables proxier: fix comments for LB IP traffic from local address * Fix cgroup hugetlb size prefix for kB * Update dependency sirupsen/logrus * Update dependency opencontainer/runc * Move APIObjectVersioner * Move etcdtest to testing * Cleanup util file * Move metrics to etcd3 and clean up * Update dependencies BUILD/go.mod/go.sum * Add client-side status object handling * Fix AWS DHCP option set domain names causing garbled InternalDNS or Hostname addresses on Node * fix: predicates read nodes from scheduler cache * Remove internal object printing from kubectl * Updated import statements to reflect move to staging * Move pkg/kubectl/validation to staging * Fix closing of dirs in doSafeMakeDir * Remove unnecessary variable declaration * fix: change timeout value in csi plugin * Adding an if statement to check the number of worker nodes available before running a test that needs 2 nodes. * update openapi-spec * remove finailzers * Remove tests/e2e/scalability from the list of golint failures * Add missing CSINodeInformer when creating ConfigFactoryArgs * Fix golint failures related to docs * Fix golint failures for test/e2e/scalability * Remove dead metrics in etcd code * Default resourceGroup should be used when value of annotation azure-load-balancer-resource-group is empty string * automatically tag tests in test/integration/* as integration * Remove unnecessay call to findNewReplicaSet * supress libseccomp pkg-config errors * fix shellcheck failures in test/e2e_node/conformance/run_test.sh * kubeadm: fix bug for --cri-socket flag processing logic * add unit tests for azure_loadbalancer_test.go * Replace buzybox and pause pod image with agnhost * runtimeclass-admissioN: add owners file * update import-restrictions * Only create one pod per gpu node in E2E test * Add tests for podspec and podtemplatespec default changes * Remove duplicate error messages from cli commands * update vendor * Move pkg/util/logs to staging and update ref * update vendor * Move pkg/util/slice and update refs * Re-add kubectl docs to kubectl staging * Removes test-cmd inappropriate dependency on kubectl * Update BUILD files * Update imports for the files moved to staging * Move pkg/kubectl/util/fieldpath to staging * Use coordination v1 API * Fixed clock.fakeTimer.Stop and Reset * Fix client-go request benchmark * šŸ”— fix the KEP-kube-scheduler link * handling OptimisticLockError in kubelet * Run sidecars for csi-mock as privileged * Don't leak ssh connections * Short-circuit the evaluation of `cpuFraction` and `memoryFraction` * tests: Clarifies agnhost's entrypoint-tester's usage * Centralizes images into agnhost (part 3) * Bump gopkg.in/check to v1.0.0-20180628173108-788fd7840127 * Bump objx to v0.2.0 * Bump easyjson to v0.0.0-20190614124828-94de47d64c63 * Bump pty to v1.1.5 * Bump govalidator to v0.0.0-20190424111038-f61b66f89f4a * Bump purell to v1.1.1 * Bump go-openapi dependencies to preferred version * kubelet: retry pod sandbox creation when containers were never created * Fix service controller not release loadBalancer issue in corner case. * hack/boilerplate: added regex to strip Python shebang * Remove monopole from root OWNERS * block not allowed node labels on kubelet * Updated BUILD dependency to use staging * Removes unused BUILD file * Move pkg/kubectl/util/certificate to staging * kubeadm: update OWNERS for 1.16 * tests: Replaces images used with agnhost (part 3) * Updates to dependencies including go.mod, go.sum, and BUILD files * Move pkg/kubectl/util/resource to staging * add defaul latest tag as well * tests: Fixes agnhost logs-generator usage * Add generated proto files * Fix typo in network policy ingress rule * apiserver: store httplog in context * apiserver: don't log stack trace on /healthz error * fix hack/lib/version.sh shellcheck failures * remove dead KUBE_TEST_API_VERSIONS from test-integration * refactor: add reset method to all test plugins * Updates to dependencies including go.mod, go.sum, and BUILD files * Removes unused BUILD file * Move pkg/kubectl/util/qos to staging * Add benchmark for scheduling of pods with PVs * Migrate TaintManager to use watch for listing pods instead of expensive listing pods call. * Fix CRD validation error for 'items' field * fix KubeletConfiguration apiVersion * fix shellcheck failures in cluster/restore-from-backup.sh * Restore early return for podSpecHasContainer * clarify elastisearch script as bash * fix hack/lib/init.sh shellcheck failures * fix hack/lib/swagger.sh shellcheck failures * Conformance walker should handle nested/adjacent Describes * Moving pkg/kubectl/util/storage to staging * Fixed and clarified comments and parameter names in index.go (#77633) * Update link in pull request template * crd-handler: level-trigger storage recreation and fix a race * Dependency changes * Update imports after moving util/event to staging * Move pkg/kubectl/util/event into staging * Add ipv6 support to the DNS e2e tests * move images from gcr.io to quay.io * Add ipv6 support to the e2e guestbook test * Increase Network Policy tests coverage * update vendor * Move pkg/util/rbac to staging and update refs * Update go.mod, go.sum, and BUILD dependencies * Update import statements to reference code moved to staging * Move pkg/kubectl/util/hash to staging * Generated build file for alwayspullimages * Return all errors in alwayspullimages.Validate() * flowcontrol context aware and fix request may hang issue * fix hack/make-rules/make-help.sh shellcheck failures * Replace HTTP compression with an inline handler * Set API compression feature gate to Beta * Add unit tests for CSI predicate * Update scheduler to use volume limits from CSINode * Update nodeinfomanager to store volume limits in CSINode * Auto-generated code for volume limits API * Add volume limits API changes * Update doc.go in staging/src/k8s.io/ * Remove the OutputFormatType and OutputFormatArgument fields as they are no longer used. * move jws to k8s.io/cluster-bootstrap * add IPv6 support to the e2e PreStop test * Use WithOption to implment scheduler register * Refactor statefulset e2e tests * kubeadm: add --control-plane-endpoint flag * Add Policy None for Topology Manager * hack: fixed issues from previous refactor PR * feat: cleanup feature gates for CSIPersistentVolume * Revert "Skip ILB creation on GCE if neg annotation is present" * remove misterikkit from scheduler maintainers * printer: fix a nil pointer dereference * Updated publishing dependencies rules * Updates to dependencies including go.mod, go.sum, and BUILD files * Updated imports for util/deployment * Moved pkg/kubectl/util/deployment to staging * Fix max port value to 65535 * Add env var(CNI_STORAGE_PATH) for cni storage path. * document KUBE_ROOT in util.sh * fix hack/verify-no-vendor-cycles.sh shellcheck failures * fix hack/pin-dependency.sh shellcheck failures * fix hack/update-vendor.sh shellcheck failures * add kube::util::list_staging_repos * automatically set clinkopts * update libssecomp-golang to v0.9.1 * add sleep 5 before exponential backoff in waitUntilVolumeAvailable * Fix --watch-only of a single item with table output * Add kubectl get/list/watch tests for table output * Test humanreadable table output * Fix short buffer error in get test * Update CHANGELOG.md * Updated publishing dependencies rules, import-restrictions * Update go.mod, go.sum, and BUILD file dependencies * Removes unused BUILD file * Move pkg/kubectl/util/podutils to staging * kubeadm: Retire MarshalClusterConfigurationToBytes * kubeadm: Stop using //pkg/util/normalizer * publishing: use deps in replace directive in rules * kubeadm: cleanup ExperimentalControlPlane and ExperimentalUploadCerts * fix: Use correct function to remove etcd member * Pass registry parameter to scheduler instead of global singleton * Add support for writing out of tree custom scheduler plugins * change from milli bytes to bytes in ephemeral-storage resource limits * Drop unused dependencies * github.com/kr/text v0.1.0 * gopkg.in/natefinch/lumberjack.v2 v2.0.0 * github.com/hashicorp/hcl v1.0.0 * github.com/gorilla/websocket v1.4.0 * github.com/google/uuid v1.1.1 * github.com/BurntSushi/toml v0.3.1 * fix test/e2e_node/gubernator.sh shellcheck failures * use kube::util::md5 for update-vendor-licenses.sh * copy kube::release:md5 to kube::util::md5 * Add ipv6 support to [sig-apps] StatefulSet e2e test * feat: cleanup feature gates for KubeletPluginsWatcher * feat: remove several GA features flag * feat: cleanup PodPriority features gate * Respect Allocation IDs * ipvs proxy: add unit test for udp graceful termination * Switch test manifests to apps/v1, remove beta workloads calls * Stop serving apps/v1beta1, apps/v1beta2, and deprecated extensions/v1beta1 resources by default * kubectl attach test: wait for input before proceeding * Move KubeletPodResources to the Beta section * Revert "Add Bind extension point of the scheduling framework" * Use RWMutex to improve locking for serviceCache * e2e: remove framework.Failf * fix typo heathcheck * publishing: fix rules for kubectl * Adds kubectl logo images * added comment * updates based off reviews * update to remove unused test * updated tests to prevent false positive * seperation of network calls when getting version * Update heketi vendor dependency to v9.0.0 * Update BUILD files for container helper * Create helpers for iterating containers in a pod * kubeadm: cleanup command output * service controller: if targetPort has changed will process by cloud-provider * feat: remove several types in runtime serializer * Add stub device plugin for e2e tests * Remove redundant initilization for service controller * Do not delete an incorrect pod when replacing a mirror pod * Refactored runtime.Object helper functions into subpkg * enable ability to show hidden metrics * hack/update-vendor.sh * Move pkg/util/printers to staging and update refs * kunsupported cgroup setup causes kubelet to emit a warning rather than exiting * Moved pkg/kubectl/util/term, pkg/kubectl/util/templates, pkg/kubectl/util/interrupt, and pkg/kubectl/util/interrupt to staging * add myself to sig-network-reviewers * add import-alias for k8s.io/kubernetes/pkg/scheduler/apis/config/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/proxy/apis/config/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/stats/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/resourcemetrics/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/podresources/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1alpha1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/pluginregistration/v1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/deviceplugin/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/deviceplugin/v1alpha * add import-alias for k8s.io/kubernetes/pkg/kubelet/apis/config/v1beta1 * add import-alias for k8s.io/kubernetes/pkg/controller/apis/config/v1alpha1 * add import-alias for k8s.io/api/storage/v1beta1 * add import-alias for k8s.io/api/storage/v1alpha1 * add import-alias for k8s.io/api/storage/v1 * add import-alias for k8s.io/api/settings/v1alpha1 * add import-alias for k8s.io/api/scheduling/v1beta1 * add import-alias for k8s.io/api/scheduling/v1alpha1 * add import-alias for k8s.io/api/scheduling/v1 * add import-alias for k8s.io/api/rbac/v1beta1 * add import-alias for k8s.io/api/rbac/v1alpha1 * add import-alias for k8s.io/api/rbac/v1 * add import-alias for k8s.io/api/policy/v1beta1 * add import-alias for k8s.io/api/node/v1beta1 * add import-alias for k8s.io/api/node/v1alpha1 * add import-alias for k8s.io/api/networking/v1beta1 * add import-alias for k8s.io/api/networking/v1 * add import-alias for k8s.io/api/imagepolicy/v1alpha1 * add import-alias for k8s.io/api/extensions/v1beta1 * add import-alias for k8s.io/api/events/v1beta1 * add import-alias for k8s.io/api/core/v1 * add import-alias for k8s.io/api/coordination/v1beta1 * add import-alias for k8s.io/api/coordination/v1 * add import-alias for k8s.io/api/certificates/v1beta1 * add import-alias for k8s.io/api/batch/v1beta1 * add import-alias for k8s.io/api/batch/v1 * add import-alias for k8s.io/api/autoscaling/v1 * add import-alias for k8s.io/api/authorization/v1beta1 * add import-alias for k8s.io/api/authorization/v1 * add import-alias for k8s.io/api/authentication/v1beta1 * add import-alias for k8s.io/api/authentication/v1 * add import-alias for k8s.io/api/auditregistration/v1alpha1 * add import-alias for k8s.io/api/apps/v1beta2 * add import-alias for k8s.io/api/apps/v1beta1 * add import-alias for k8s.io/api/apps/v1 * add import-alias for k8s.io/api/admission/v1beta1 * add import-alias for k8s.io/api/admissionregistration/v1beta1 * Fix the creation of load balancer policy for the NodeIp when NodePort specified is same as service Port * Fix golint issues in pkg/kubelet/secret * Fix golint issues in pkg/kubelet/prober/results * Fix golint issues in pkg/kubelet/prober * updating github.com/go-bindata/go-bindata to v3.1.1 * Sample controller: Init flags * compiled in a package level var * allow importing k8s.io/klog * auto-generated * Add Bind extension point of the scheduling framework * refactor bootstrap token utils * Clean up selft-set node labels * Fix review comments to use ${} * change sed to ${SED} in local-up-cluster.sh * Obtain readyzLock once in installReadyz * Replace mapfile with kube::util::read-array * autogenerated code update based in new plugin * add RuntimeClass admission controller plugin * introduce RuntimeClass admission controller * Fix mutating webhook test image 'addlabel' to update existing labels instead of clobbering * Close auditStopCh if SecureServing encounters error * Update CHANGELOG-1.15.md for v1.15.0. * Move soltysh back to approvers * Update Sig-Apps OWNERS in places that were missed in #76669 * kubeadm: improve the kubeconfig file validation phase * Dropping unused dependencies * updating github.com/miekg/dns to v1.1.4 * updating github.com/spf13/cast to v1.3.0 * updating gopkg.in/yaml.v2 to v2.2.2 * updating gopkg.in/square/go-jose.v2 to v2.2.2 * updating github.com/stretchr/testify to v1.3.0 * updating github.com/spf13/viper to v1.3.2 * updating github.com/spf13/pflag to v1.0.3 * updating github.com/spf13/jwalterweatherman to v1.1.0 * updating github.com/spf13/cobra to v0.0.4 * updating github.com/spf13/afero to v1.2.2 * refactor: replace framework.Failf with e2elog.Failf * Pass updated deployment for comparison of replica count * Output the nvidia gpu information in the E2E test. * Make the check strict to use ExpectNoError() * pod-overhead: autogenerated code updates * pod overhead: drop from RuntimeClass base on feature-gate * pod-overhead: add Overhead to RuntimeClass internal type * pod-overhead: add Overhead to RuntimeClass * pod-overhead: drop from PodSpec based on feature-gate * pod-overhead: add Overhead to PodSpec internal type * pod-overhead: add Overhead to PodSpec * pod-overhead: Introduce PodOverhead feature gate * Minor change: delete unused constant from service controller * e2e: fix return value of WaitForPodsWithLabelRunningReady * Redundant call to WithAll in NewWaitFlags * Fix golint failures of test/e2e/storage/testsuites * kubeadm: cleanup deps on pkg/version * Move node related methods to framework/node package * Close watcher early for volume detachment * The default-http-backend for handling 404 pages will now point to 404 handler with prometheus integration and provides metrics related to requests per second and the duration of responding to the requests for various percentile groupings. Please check https://github.com/kubernetes/ingress-gce/blob/master/cmd/404-server-with-metrics/README.md for details about the 404-server-with-metrics. * add readyz endpoint for kube-apiserver readiness checks * Refactor online volume resize unit tests * kubelet_stats: fix potential e2e crash dereferencing CPU * kubeadm: cleanup deps on pkg/master/ports * tests: Replaces images used with agnhost (part 2) * move initsystem to kubeadm * Update the comments on how to check disk conflict * re-named conformance test name for pod creating with CPU and memory resources * Add unit tests for azure_controller_common.go and azure_controller_standard.go * tests: Fixes Windows image pulling tests * Remove selected IP from backup-volfile-servers list to avoid warning in mount logs. * rundir attribute was missing for some new integration test cases * fix kubelet can not delete orphaned pod directory when the kubelet's root directory symbolically links to another device's directory * Fix shellcheck faulures in test/cmd * test images: Removes linux/ prefix from agnhost BASEIMAGE * Add interface for registerable metrics which does not have any private methods * fix golint failure in e2e/common/util.go * remove duplicate comment in e2e/common/sysctl.go * Remove unused ServiceController.loadBalancerName method * use reflect.deepEqual for noop object comparison * use noopRegistry for default global legacy prom registry and expose an http handler * Create SECURITY.md for GitHub security policy page * Removed deprecated --resource-container flag from kube-proxy. * Add kubeletstatsv1alpha1 as the preferred alias for k8s.io/kubernetes/pkg/kubelet/apis/stats/v1alpha1 * verify import aliases * correct the CHANGELOG-1.13.md * correct the CHANGELOG-1.14.md * Ignore cgroup pid support if related feature gates are disabled * Code cleanup for for probe/http * Remove unnecessary loop for lowering expectations * Fix CHANGELOG-1.15.md bad format * fix golint failures for pkg/volume/scaleio and pkg/volume/storageos * add m00nf1sh as approver/reviewer in aws provider * Add ExpectEqual() to e2e framework * updating github.com/russross/blackfriday to v1.5.2 * updating github.com/robfig/cron to v1.1.0 * updating github.com/opencontainers/selinux to v1.2.2 * updating github.com/opencontainers/image-spec to v1.0.1 * updating github.com/opencontainers/go-digest to v1.0.0-rc1 * updating github.com/onsi/gomega to v1.5.0 * updating github.com/onsi/ginkgo to v1.8.0 * updating github.com/mvdan/xurls to v1.1.0 * updating github.com/mitchellh/go-wordwrap to v1.0.0 * updating github.com/mistifyio/go-zfs to v2.1.1+incompatible * updating github.com/mholt/caddy to v1.0.0 * updating github.com/mattn/go-shellwords to v1.0.5 * updating github.com/magiconair/properties to v1.8.1 * updating github.com/kr/pretty to v0.1.0 * updating github.com/json-iterator/go to v1.1.6 * updating github.com/jonboulle/clockwork to v0.1.0 * updating github.com/google/gofuzz to v1.0.0 * updating github.com/golang/mock to v1.2.0 * updating github.com/godbus/dbus to v4.1.0+incompatible * updating github.com/go-bindata/go-bindata to v3.1.1+incompatible * updating github.com/fatih/camelcase to v1.0.0 * updating github.com/evanphx/json-patch to v4.2.0+incompatible * updating github.com/emicklei/go-restful to v2.9.5+incompatible * updating github.com/cyphar/filepath-securejoin to v0.2.2 * updating github.com/cpuguy83/go-md2man to v1.0.10 * updating github.com/coreos/go-semver to v0.3.0 * updating github.com/client9/misspell to v0.3.4 * Fix for build failure - viper now uses ConfigFileNotFoundError * Remove dot import from e2e test and replace with framework.ExpectNoError * Fix file permissions for non executable files * Run verify-test-code on all e2e tests * Cleanup e2e_node test style * Increase load balancer timeout in test cases * Refactor pkg/util/mount to be more reusable * Add HEAD fixtures * Add v1.14.0 fixtures * Add missing API groups to compatibility test * kubeadm: Don't use "//pkg/apis/core".Resource helper * Fix nil pointer * link scripts in build/README.md * kubeadm: Replace ValidateDNS1123Subdomain * kubeadm: Don't use RBAC helpers * fix: make azure disk URI case insensitive * Modify klog Warning 'The resourceVersion for the provided watch is too old' to Info. * Remove returned value of func handleCreateEvent * Clean up node-problem-detector configuration for GCI * Updated code with gofmt * kubectl config set hangs on some invalid property names #415 * Enable cadvisor ProcessMetrics collecting. * ipvs: fix string check for IPVS protocol during graceful termination * tests: Combine Linux / Windows image pulling tests * tests: Replaces images used with agnhost (part 1) * tests: Sets MaximumNArgs for agnhost subcommands to 0 * Updates agnhost README and Dockerfile files * Updates agnhost image version in documentation * test images: Centralizes images into agnhost (part 1) * Don't dereference nil pointer in conflicts * test images: Refactors agnhost image * Adding metrics to nfs driver * Fix spurious .sock files running envelope unit tests * Correct a typo * hack/make-rules/test.sh: run all staging unit tests * do not delete pods whose deletiontimestamp != nil * Replaced klog with an error wrapper * homogenize min-request-timeout for cr handler * Centralizes images into agnhost (part 2) * update to go 1.12.6 * get-kube-binaries: use GCE token to fetch artifacts from GCS * [e2e] move Failf from e2e/framework to e2e/framework/log * add more tests on clearing managedFields * Do not add non-PersistentVolume to return value for pvAssumeCache#ListPVs * unit tests for the volume plugin name that's used inside GeneratedUnmapVolumeFunc for csi migration on/off scenarios * Return early when mount ref is determined * Inverted error handling to ensure server-side apply does not fall back on client-side apply when there is an error * Add more backward compatible access mode logic to remove ReadOnlyMany access mode when ReadWriteOnce,ReadOnlyMany specified * prefilter extension point implementation. * cache mutation detector: use correct diff function * fix stability level annotation for counter vec * Update gpu device plugin to better support Vulkan workloads * Fix typos. * apiextensions: simplify default value pruning test * apiextensions: only clone on !s.XEmbeddedResource * apiextensions: add unit test for x-kubernetes-preserve-unknown-fields with additionalProperties * Suppress irrelevant jq error message when propagating pinned dependencies * remove vendored code * Remove ovirt/cloudstack/photon cloud providers * apiextensions: fix variable name * apiextensions: add items+additionalProperties test coverage for objectmeta.Validate * Check correct error for cleanup * added defer keyword to wg.Done() in logs.go * Remove return value of mergeHealthChecks. Simplified HC equivalence check. * Fix typo in node lifecycle controller * fix volumecreate comments * rename and change aws backoff vars * tag some release-blocking tests taking over 5min as [Slow] * kubeadm: fix minor typo in a comment * use klog.Info instead of klog.Infof when had no format * Force using Go Modules in README.md * Fix reserved cgroup systemd * Remove experimental note for ipvs in kube-proxy arguments * Fix keep the watcher open for too long * Use no-priority best-effort pod as the preemptor in BenchmarkGetPodsToPreempt * preload metrics for legacyregistry for backwards compatibility * Allow master nodes to be accessed from private ips * Remove unwanted newlines in glusterfs driver * Promote existing E2Es for hostport/HostIP resolution to conformance * New E2E to verify pods are deleted after Job deletion * fix typo in probe.go * Calling PatchAction on typed objects should work correctly * update CHANGELOG-1.14.md * Fix spelling of test name * enforce the interface relationship between ServicePort and BaseServiceInfo * Fix kubeadm service-cidr mapping to service-cluster-ip-rage for kube-controller-manager. * Modify firewall rules names to make them shorter. * fix some golint failures of pkg/registry * Add integration test for propagationPolicy=Orphan GC * Bug fix: remove etcd related issues in bazel-test-integration * Simplify func ConstructVolumeSpec * remove todo in pkg/ssh * [e2e] Make meaningful service name in test * Add more approvers/reviewers to cluster/gce/windows * Support image status by ID. * Create-update-delete-deployment example using dynamic package * Sort kubeadm CLI default params for component config API objects * merge common funcs * Change quoting format * Fix shellchecks in test/cmd/{b,c}.*.sh * Fix return value for ExtractFieldPathAsString * Remove inner loop for finding MinReclaim in ParseThresholdConfig * Fixed some minor errors in openapi * Enable resize in default gce storageclass * Fix verify-shellcheck comments * Enable API operation log on conformance job * Iterate through thresholds in managerImpl#synchronize * Move test/e2e use to v1 APIs * Remove redundant assignment to volumeAttachment * Add readme for API compatibility data * Add helper script to regenerate API compatibility data * Remove dead codes * kubelet: add sjenning to kubelet subdirectory owners files * 74900, kubectl logs selector supports tail=-1 * Use Mutex for synchronization in imageCache * Use go standard library for common bit operations * kubeadm:fix typo in controlplane.go * change aws encryptedCheck to exponential backoff * Remove pod UID from volumeMount, we can get it elsewhere * Rename pkg/volume/util/quota -> pkg/volume/util/fsquota * Adding test cases to make sure objectSelector works for CRD * fix typo in /pkg/kubelet/container * kubeadm: improve kubelet-config-x.y ConfigMap logic * fix golint failures of pkg/kubelet/prober pkg/kubelet/secret * Add references of registry and image from imageutils * Remove unnecessary string() * kubeadm: apply deterministic order on certificate phases * Check limits for resolve conf outside the loop * Skip tests is fstype is xfs and node distro is gci, cos, or windows * Continue admitting the pod regardless of return value from killPodFunc * Unstructed helpers: document lack of slice syntax * remove unused events in event.go * Refactored pod-related functions from framework/util.go * Avoid unnecessary concatenation of errors * fix typo in /test/integration * fix: assign default value for pod.Status.StartTime in TestSelectNodesForPreemption * delete TODO: remove when we stop supporting the legacy group version * Update SECURITY_CONTACTS with current PSC * hack: refactored code in update_owners.py * fix a mistake in CHANGELOG-1.14.md * fix some mistakes in changelog * Change to EnableHTTPS in kube-apiserver options * Fix golint issues in pkg/kubelet/stats/log_metrics_provider.go * Fix golint issues in pkg/kubelet/client * Use reservoir sampling to select one host from priority list * Fix nil pointer dereference in metrics value calculator. * Call getKubeletSandboxes first in containerGC#evictSandboxes * Break out of loop when currentRevision is found in defaultStatefulSetControl#getStatefulSetRevisions * Fix typo * Updated node.go using update-gofmt.sh * change BeTrue to Equal or BeNumerically in cronjob e2e test * get rid of the redundancy field in kube-proxy option * Add missing TestMain() functions * Cleanup math/rand package usage * Add documentation about "non-zero requests" * fix flexvol stuck issue due to corrupted mnt point * enrich oom event message info * ignore failed pods to not stuck rolling update daemonset * fix golint errors in test/e2e/storage/utils * Narrow down the lock * fix golint failures of pkg/kubelet/configmap pkg/kubelet/custommetrics * kubelet: include init containers when determining pod QoS * kubelet: lookup node address for external provider if none is set * Fix shellcheck failures in test/cmd/g.*sh * fix golint failures of pkg/util/parsers pkg/util/sysctl pkg/util/system * pkg/util/workqueue: delete deprecated metrics * Promote e2e verifying DNS resolution for o pod's fqdn, hostname and subdomain * Clean up pkg/cloudprovider/providers/openstack. * pkg/util/workqueue/prometheus: fix double registration * fix shellcheck failures in /hack/make-rules/test.sh * Add readiness probe for Kibana * fix shellcheck failures in /hack/make-rules/clean.sh,test.sh,vet.sh * Allow version field in the title to be changeable * mark deprecated kubelet-read-only-port * add warning log for csr controllers * Check error return from Update * creating instance groups in parallel * Fix message of failed sync * Updated pkg node BUILD for new lib inclusion * Fix for kube-proxy to wait for some duration for the node to be defined * Update CHANGELOG-1.14.md * Promote security context NodeConformance tests to Conformance suite * tests: creates HostPath pods as unprivileged * fix error 'coresponding' * fix typo: "inidvidual"-> "individual" * Remove unnecessary map in cleanupHistory * Remove unwanted `else` block from statefulset controller. * enable multipod e2es for intree volumes * Bug fix 72757.Removed deprecated label kubernetes.io/cluster-service * apiserver: Update a comment * Fix shellchecks follow the `${var:?}` pattern * Stop testing containerized kubelet in e2e-node * Improve windows home directory selection * rm unused judgement * remove redundant words 'the' in comment * fix cp time stamp is in the future error * Set ProviderID when running kubemark node * add a test case for HostnameOverride * when SessionAffinityConfig is different, enqueueService in update Service handler * Adjust node_exporter CPU params ------------------------------------------------------------------- Mon Sep 23 15:37:01 UTC 2019 - rbrown@suse.com - Update to version 1.15.4: * Omit openapi properties if spec.preserveUnknownFields=true * Ensure all conditions for publishing openapi are satisfied in kubectl e2e tests * [kubectl cp] Reorder symlinks to prevent path escapes * in GuaranteedUpdate, retry on precondition check failure if we are working with cached data * test * Remove usage of kubectl log in tests * Fix windows kubectl log -f. * Fix kubectl e2e test * fix: azure disk name matching issue * Add/delete load balancer backendPoodID in VMSS. * fix: disk not found issue in detaching azure disk * fix: detach azure disk issue using dangling error * Removes conflicting Quobyte tenant test error from API validation * Fix panic when errors are nil * Add/Update CHANGELOG-1.15.md for v1.15.3. * Kubernetes version v1.15.4-beta.0 openapi-spec file updates * Only advertise supported patch types * Update generated protobufs * Update golang/x/net dependency * update go to 1.12.9 * Fix malformed port in vsphere cloud provider test * Fix up failing boilerplate test * Update to go 1.12.8 * Fix a bug in the IPVS proxier where virtual servers are not cleaned up even though the corresponding Service object was deleted. * remove iSCSI volume storage cleartext secrets in logs * fix: use Create for attach/detach disk * Fix events test * Fix GetReference function * Fix Azure client requests stuck issues on http.StatusTooManyRequests * Fix conflicted cache when the requests are canceled by other Azure operations * Continue admitting the pod regardless of return value from killPodFunc * gofmt * address comments * fix gofmt * Make kubelet report usageNanoCores for node on Windows * Update the Windows node image 1809 version to 0709 * Skip tests is fstype is xfs and node distro is gci, cos, or windows * Do not delete an incorrect pod when replacing a mirror pod * Fix the public IP getting issues for VMSS nodes * Validate CSI Inline Migration unconditionally * add unit tests for attacher DisksAreAttached and BulkDisksAreAttached * implement functionality to return all found instances * move getInstancesByName logic to helper function * add ability for gce to bulk verify attached disks * Don't expect pod to stay up during node upgrade * Add/Update CHANGELOG-1.15.md for v1.15.2. * Kubernetes version v1.15.3-beta.0 openapi-spec file updates * Reduce GCE PD Attach Limits by 1 because Node Boot Disk counts as 1 attached disk * Update kube-addon-manager to v9.0.2. * kubeadm: update the supported version for 1.15 * kubeadm: apply a number of _test fixes * Register Kubelet server metrics * Return MetricsError with ErrCodeNotSupported code * quote container name in container already use error matching * feedback 1 * fix-file-discovery * autogenerated * Fix nil pointer dereference in metrics value calculator. * make node lease renew interval more heuristic * Add supportedMountOptions for GCE PD CSI Driver tests * Add passthrough for MountOptions for NodeStageVolume for CSI * Update unit test with expected query parameters * Remove manual conversions for ListOptions * Bugfix: csi raw block that does not need attach mounted failed * Update publishing/rules to go 1.12.7 * Update to go 1.12.7 * kunsupported cgroup setup causes kubelet to emit a warning rather than exiting * Fix the creation of load balancer policy for the NodeIp when NodePort specified is same as service Port * Fix cgroup hugetlb size prefix for kB * Fix a bug that StatefulSet applies the revision incorrectly * printer: fix a nil pointer dereference ------------------------------------------------------------------- Mon Aug 05 12:37:38 UTC 2019 - rbrown@suse.com - Update to version 1.15.2: * refactors to kubernetes cp command * refactors to kubernetes CP command * apiextensions: 404 if request scope does not match crd scope * apiextensions: add scope tests * Add/Update CHANGELOG-1.15.md for v1.15.1. * Kubernetes version v1.15.2-beta.0 openapi-spec file updates ------------------------------------------------------------------- Mon Aug 05 11:48:03 UTC 2019 - rbrown@suse.com - Update to version 1.15.1: * apiaggregation available controller should only hit required endpoint * kubeadm: run MemberAdd/Remove for etcd clients with exp-backoff retry * skip test if the server does not serve extensions/v1beta1 since this is deprecated * use apps/v1 instead apps/v1beta1 since that is deprecated - issue 79533 * fix: change timeout value in csi plugin * edit google dns hostname * Test kubectl with x-kubernetes-preserve-unknown-fields * There are various reasons that the HPA will decide not the change the current scale. Two important ones are when missing metrics might change the direction of scaling, and when the recommended scale is within tolerance of the current scale. * Fix closing of dirs in doSafeMakeDir * Fix publishing x-kubernetes-preserve-unknown-fields working with kubectl * Fix AWS DHCP option set domain names causing garbled InternalDNS or Hostname addresses on Node * kubeadm: fix bug for --cri-socket flag processing logic * fix kubelet can not delete orphaned pod directory when the kubelet's root directory symbolically links to another device's directory * Add HEAD fixtures * Add v1.14.0 fixtures * Add missing API groups to compatibility test * Move KubeletPodResources to the Beta section * Default resourceGroup should be used when value of annotation azure-load-balancer-resource-group is empty string * kubelet: retry pod sandbox creation when containers were never created * fix flexvol stuck issue due to corrupted mnt point * crd-handler: level-trigger storage recreation and fix a race * fix KubeletConfiguration apiVersion * kubeadm: improve kubeadm command output * Ignore cgroup pid support if related feature gates are disabled * fix: Use correct function to remove etcd member * Add/Update CHANGELOG-1.15.md for v1.15.0. * Kubernetes version v1.15.1-beta.0 openapi-spec file updates ------------------------------------------------------------------- Mon Jun 24 09:02:23 UTC 2019 - rbrown@suse.com - Update to version 1.15.0: * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.15.md#v1150 * Drop git-upstream.patch * The default Go version was updated to 1.12.5 * Fixed kubectl exec usage string to correctly reflect flag placement. * Fixed kubectl describe cronjobs error of Successful Job History Limit. * In the kubectl describe output, the fields with names containing special characters are now displayed as-is without any pretty formatting, avoiding awkward outputs. * Fixed incorrect handling by kubectl of custom resources whose Kind is "Status". * Report cp errors consistently, providing full message whether copying to or from a pod. * Preserved existing namespace information in manifests when running set ... --local commands. * Support for parsing more v1.Taint forms has been added. For example, key:effect, key=:effect- are now accepted. ------------------------------------------------------------------- Tue Apr 23 21:59:41 UTC 2019 - dorf@suse.com - Update to version 1.14.1: * Minor bugfixes with no user facing changes * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md#v1141 ------------------------------------------------------------------- Fri Apr 12 09:34:23 UTC 2019 - Richard Brown - Fix go 1.12.1 BuildRequires ------------------------------------------------------------------- Thu Apr 11 21:16:45 UTC 2019 - Daniel Orf - Reformat spec file with spec-cleaner ------------------------------------------------------------------- Tue Mar 26 10:11:00 UTC 2019 - rbrown@suse.com - Update to version 1.14.0: * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.14.md * bump required minimum go version to 1.12.1 (strings package compatibility) ------------------------------------------------------------------- Fri Mar 01 10:14:20 UTC 2019 - Richard Brown - Update to version 1.13.4: * version bump to keep in sync with kubernetes 1.13.4 ------------------------------------------------------------------- Thu Feb 7 11:02:04 UTC 2019 - Richard Brown - Update to version v1.13.3 * Update to go1.11.5 * fixed "too old resource version" errors continuously appearing when calling kubectl delete * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#changelog-since-v1132 ------------------------------------------------------------------- Fri Jan 11 10:00:00 UTC 2019 - Jordi Massaguer Pla - Previous update to v1.13.2 fixed CVE-2018-18264 and CVE-2018-16875 ------------------------------------------------------------------- Fri Jan 11 09:35:29 UTC 2019 - Richard Brown - Update to version v1.13.2 * Fixes kubectl create secret docker-registry compatibility * Full Changelog: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG-1.13.md#v1132 ------------------------------------------------------------------- Tue Jan 8 11:26:32 UTC 2019 - Richard Brown - Update to version v1.13.1 ------------------------------------------------------------------- Fri Dec 7 11:04:38 UTC 2018 - Richard Brown - Update to version v1.13.0 - Drop obsolete do-not-gc-sle-kubic-images.patch (container-feeder no longer used) ------------------------------------------------------------------- Thu Dec 6 10:50:26 UTC 2018 - Richard Brown - Update to version v1.12.3 - CVE-2018-1002105: Fix critical security issue in kube-apiserver upgrade request proxy handler -------------------------------------------------------------------- Fri Sep 28 12:19:40 UTC 2018 - Richard Brown - Update to version v1.12.0 - Remove obsolete build-with-debug-info.patch ------------------------------------------------------------------- Thu Aug 2 08:15:00 UTC 2018 - mmeister@suse.com - Switch to go 1.10 Kubernetes requires go1.10.2 or greater ------------------------------------------------------------------- Wed Aug 1 14:00:52 UTC 2018 - jmassaguerpla@suse.com - Add a conflict with kubernetes-client. Both packages provide kubectl but in kubernetes-client kubectl is a link to hyperkube, from kubernetes-common. ------------------------------------------------------------------- Wed Aug 01 12:19:36 UTC 2018 - opensuse-packaging@opensuse.org - Update to version 1.11.1: * Revert "Automated cherry pick of #65313: Adds cri-tools as a dependency to kubeadm deb/rpms" * Always mark gke-exec-auth-plugin executable * Don't delete pkg/generated/bindata.go in make clean * fix bug for garbage collection * Adding generated files * Removes defaulting of CSI fsType to ext4 * kubeadm: run kube-proxy on non-master tainted nodes * ensure rs pod cleanup happens * ensureInternalBackendServiceGroups inserts InstanceGroup links, not nodes * move t.Parallel() out of for loop * switch delete strategy to background deletion * Generate pkg/generated/bindata.go for release-1.11 * Don't gitignore pkg/generated/bindata.go * verify-generated-files: ensure git tree is clean * Add script to verify generated files * Fix pod worker deadlock. * Remove unnecessary spaces ahead of custom yaml. * Add a helper function to customize K8s addon yamls and use it to customize Calico addons on GKE. * A few cleanups (remove duplicated env vars & unnecessary comments) on yaml files. * Update Calico addon yamls to make it work for both 2.x and 3.x. versions. * Update to go1.10.3 * Update to rules_go 0.10.5 * re-make print flags composeable for sophisticated callers * fix go-template defaulting for commands w default output format Fixes defaulting done for commands that default to a specific output format (such as yaml, json) when a --template flag is provided and no explicit --output value is given. * make template printers a recommended printer * Fix truncating and buffering backends integration. * set EnableHTTPSTrafficOnly in storageAccount creation * update priority admission for interoperability * Build file generated * Add priority to defaultOn plugins list * Fix RunAsGroup. * pause image should be arch agnostic * adds post install step to kubeadm deb built by bazel * Adds cri-tools as a dependency to kubeadm deb/rpms * GC: remove CRD and APIService from ignored resources * fix azure storage account creation failure * Always create kubeClusterIPSet * fix 'kubectl cp' with no arguments causes a panic * Update output format so that it matches actual accepted values * fix ipset creation fails on centos. issue 65461 * Reload systemd config files before starting kubelet. * azure: Add validation of resourceGroup option * Remove scheduler config deprecated warning as the new component config is still in alpha * Change our tests to ensure that critical system pods are created in the system namespace * Autogenerated files * Limit usage of system critical priority classes to the system namespace * Allow custom manifests in GCP master setup * fix azure disk issue for external resource group * azure: Move configuration of resource group in storage class. * fix comments * specify external resource group in ResizeDisk * add external resource group support for azure disk * skip nic that are in failing state * Bug fix: Should allow alias range size equals to max number of pods * 2 * apiserver: do not print feature gates for glog v=0 * add scrape port to service * Set pod priority on kube-proxy by default * Fix comments about default mount propagation * Fix out of bounds error on non-64-bit machines * Fix bug printing openapi columns * BUGFIX: must use ID, not name, of the node security group when adding rules to it * Insert human curated 1.11 release notes and set current version * Add/Update CHANGELOG-1.11.md for v1.11.0. * Kubernetes version v1.11.1-beta.0 openapi-spec file updates * Update Rescheduler's manifest * Fix cleanup of volume metadata json file. * Fix UnmountDevice with deleted pod. * Fix some log issues in flexvolume * fix scheduler client construction from configuration files * etcd: reuse leases for keys in a time window * update NPD version to v0.5.0 for gci * Add a GPUClusterDowngrade test. * Add/Update CHANGELOG-1.11.md for v1.11.0-rc.3. * Add /home/kubernetes/bin into sudoers path, so that `sudo crictl` works. * Fix scheduler config decoding * Pass cluster_location argument to Heapster * Add/Update CHANGELOG-1.11.md for v1.11.0-rc.2. * Remove optimization from getWork in resourcequota/controller.go * special-case template printing in get.go * Change prometheus versions from latest to tag * Have the /rootfs rw for containerized node e2e * make sure delete waiting doesn't re-evaluate the resource lists * Remove item from taint manager workqueue on completion * Revert "Automated cherry pick of #65189: fix paths w shortcuts when copying from pods" * update cadvisor godeps to v0.30.2 * Split scheduler latency metric to fine-grained steps * Add/Update CHANGELOG-1.11.md for v1.11.0-rc.1. * stop returning invalid json fields in CRD OpenAPI schemas * bump(k8s.io/kube-openapi): 91cfa479c814065e420cee7ed227db0f63a5854e * fix paths w shortcuts when copying from pods * fix scheduler port boundary to match detection * Update crictl to v1.11.0. * Fix a changelog entry in v1.11 * Fix kubeadm unit tests relying on internet access * use the release-1.11 branch by default * Update CHANGELOG-1.8.md for v1.8.14. * Cluster Autoscaler 1.3.0 * kubeadm: Fix a small config upgrading issue with .CloudProvider * cri-tools deb: Rename cri_tools to the correct cri-tools * kubeadm: Fix a bug where skipping all preflight checks wouldn't activate the kubelet * Move service account key file arg to the service-account controller options * kubeadm: Make the environment file writing happen on upgrade as well * Use kubernetes image repo for coredns * Fix kubeadm init/upgrade --dry-run mode * Update Cluster Autoscaler to v1.3.0-beta.2 * decode crd objectmeta properly * apiextensions: fix concurrent map access copying items' ObjectMeta in Unstructured * Fix check for CRD watch priming * fix schema for kubeproxyconfig/v1alph1 * make json serializer case sensitive * vendor the latest json-iterator * Use context with timeout instead of context.Background * Wait a minimum amount of time for polling operations * Update tests to reflect that kubeadm taints should not override node taints * vendor: update hcsshim to v0.6.11 * Readding summary metrics * Revert "Fixing scheduling latency metrics" * Start plugin watcher after initialization of all kubelet components * Added PV GET api rule to external-provisioner * Fix kubeadm taints to not override existing node taints * Re-use private key after failed CSR * fix iptables_test typo * Replace manifest-tool with docker manifest command * Add kms-plugin-container.manifest to release manifest tarball. * mark kubectl wait as experimental * Compute avg and quantiles of scheduler throughput in density test * autogenerated * kubeadm: Fix a couple of small-ish bugs for v1.11 * kubeadm - fix local etcd grpc gateway * Increase logexporter timeout and add debug logs * Adding scale error retries * daemon: add custom node indexer * kubeadm - local etcd configuration bugfixes * Issue 63622 - Flaky e2e/aggr test. * Limit the mounted directory to cluster-autoscaler/ * fix eviction event formatting * fix memcg fd leak * update cadvisor godeps to v0.30.1 to revert cadvisor#1916 * fix-kubeadm-pull-log * Cluster Autoscaler 1.3.0-beta.1 * volume: decrease memory allocations for debugging messages * fix field removal in mutating admission webhooks * Disambiguate a comment * improve memory footprint of daemonset simulate * Limit access to configmaps * dockershim/network: add dcbw to OWNERS as an approver * Create system:cluster-autoscaler account & role and introduce it to CA start-up script * fix a bug of wrong parameters which could cause token projection failure * Don't specify a description for Calico CRDs * re-enable memcg for testing on gce * Ensure directory is created for kubelet configuration * Fix output of `kubeadm migrate config` * Revert "Add validation code for the Vertical Pod Autoscaler API." * Revert "Auto-generated code for the Vertical Pod Autoscaler API." * Revert "Add Vertical Pod Autoscaling API to the autoscaling group." * Add/Update CHANGELOG-1.11.md for v1.11.0-beta.2. * Update CHANGELOG-1.11.md for v1.11.0-beta.2. * Use repo prefix when generating image names * Adds a crictl package for kubeadm installs * Fix setup of configmap/secret/projected/downwardapi * Add clarification for Windows DNS setup flow * Revert "Fix Windows CNI for the sandbox case" * autogenerated * Add a 'kubeadm upgrade node config' command and finish up the kubelet integration work * Add TODO for removing kubectl DaemonSet deletion hack * Revert "Remove hack in kubectl delete that handles DaemonSet deletion" * Remove myself from sig-cli OWNER alias * Add validation code for the Vertical Pod Autoscaler API. * Auto-generated code for the Vertical Pod Autoscaler API. * Add Vertical Pod Autoscaling API to the autoscaling group. * Update CHANGELOG-1.10.md for v1.10.4. * kubeadm: Don't match DNS versions to K8s versions * kubeadm: When etcd is listening on all interfaces, set the etcd probe to use loopback * auth: standalone kubelets shouldn't start a token manager * disable process scheduler metrics * update cadvisor godeps to v0.30.0 * Remove hack in kubectl delete that handles DaemonSet deletion * Skip updating status for DaemonSet being deleted * Generated code for gce_disks refactor * Refactored disk cloudprovider methods to use generated client; Refactored gce_disks unit tests; Removed unused gce_op.go and associated unit tests. * autogenerated * Switch to Beta * sysctls: create feature gate to track promotion * Run make update * kubeadm: Upload CRISocket information and hence make kubeadm join blocking * Fix standalone dockershim. * Reconcile extended resource capacity after kubelet restart. * Promote sysctl annotations to API fields * CSI implementation of raw block volume support * Rate limit only when an actual error happens, not on update conflicts * Set GCE PD attachable volume limit based on machineType * Inject ContainersReady * Generate ContainersReady condition * add ContainersReady condition * kubeadm: Update the dropin for the kubelet in v1.11 * document per-field advice for dynamic Kubelet config * coredns to use gcr.io repo * kubeadm lowercases all domain names passed as additional SANs * Fix kubeadm for v1alpha1 configs * apiextensions: allow Description in the root schema for subresources * fix kubectl -o * housekeeping: improved language used in ISSUE_TEMPLATE.md * Fix quota sync * Create new variable for each iteration step * Provision interface change * kubectl cp support colons-in-filename * Dynamic provisioning allowed topologies scheduler work * Run CoreDNS container only with CAP_NET_BIND_SERVICE, drop all other (root) privileges. Run filesystem of container and config in read-only mode. * Fix panic while provisioning Azure security group rules * remove deprecated option '--enable-custom-metrics' * generated files * Setup docker options according to windows security context * Setup windows security context in CRI * Add security context for Windows containers * API changes for Topology aware dynamic provisioning * implement service account token projection * Add support for enforcing read only host paths in PSPs. * staging godep update * Test job backoffLimit correctly * Add mbohlool to apiextensions-apiserver reviewer list * Update dependency * Update GCE cloud provider to use Cloud TPU v1 API * Bazel BUILD fixes * Modify security profile for proxy * Fix the handling of untagged images * Update generated bazel * New labelmanager package * update golang/protobuf to v1.1.0 to satisfy CSI v0.3.0 hard requirement * Adding CSI driver registration * coredns to gcr.io repo * Update container-storage-interface/spec vendor to v0.3.0 (and related dependencies) * Introduce priority class in the resource quota * Add gpu cluster upgrade test. * trigger kubelet sync pod on reconciliation * Generate pod ready status with readiness gates * Only mount subpath as readonly if specified in volumeMount * Fix panic caused by no cloudprovider in test * Kubeadm-initialised kubelet uses provided hostname if present * Bazel artefacts * Fix test tag on dynamic config tests * Never clean backoff in job controller * Remove event handler to satisfy alpha tests * apimachinery: do not fuzz ObjectMeta.{Labels/Annotation} with empty keys * kubeadm: use nodeselector instead of affinity in kube-dns * kubeadm: use nodeSelector to only run kube-proxy on architecture consistent nodes * Replace glog.Info{f,ln} with fmt.Print{f,ln} * Log policy name from pod security policy * add WithAudit admission decorator * support AddAnnotation in admission attributes * Allow parametrization of RequestedToCapacityRatio priority function via policy config * Register RequestedToCapacityRatioPriority priority function * add NON_MASTER_NODE_LABELS to config-test.sh * Code clean up * Refactor of GenerateMapDeviceFunc to delegate Map call to volume plugin. * azuredisk size grow feature * support netd on k8s * kubeadm: Set the kubelet `--resolv-conf` flag conditionally on init * Updated generated files * API updates for Cinder Volumes to support for user specified Secrets in the future * Clarify --hostname-override and --cloud-provider interaction * printers: add deepcopy tests to generated tables * conversions: don't mutate in.ObjectMeta.Annotations * printers: fix json types ā€“ int64 is only allowed integer * apply global flag "context" for kubectl config view * Avoid deadlock in gc resync if available resources change during sync * Updated integration test. * Eanbled schedule DaemonSet Pods by default scheduler. * Updated helper funcs to use nodename. * Address comments in #64006. * Set deployment security profile to docker/default * Update istio addon manifest to 0.8 * GC fallback to jsonmerge patch when SMP is not supported * validation and feature gate * make update * add ReadinessGates in pod spec * Implement kubelet side changes for writing volume limit to node * Implement volume plugin changes for volume limits * Implement scheduler changes for volume limits * Implement API changes needed for dynamic volume limits * Add metrics for envelop transformer: transformation_operation_count transformation_failures_count envelope_transformation_cache_misses_count data_key_generation_latencies_microseconds data_key_generation_failures_count * Add wait.PollImmediateUntil * apimachinery: adapt ObjectConvertor invariant * client-go: make exec auth and auth provider mutually exclusive * generated: * client-go: promote exec plugin support to beta * clientauthentication: add v1beta1 API version * GitRepo command hardening * Validate git args are not flags prior to mounting * apiextensions: add ObjectMeta schema validation and pruning * Replace openapi Fake with kube-openapi version * fix the verify job * Increase timeout * Add feature gate for kubelet plugin watcher * Update pod phase documentation * CSI fix for gRPC conn leak, test updates * Add netd as an addon for GKE. * Revert "Remove rescheduler and corresponding tests from master" * fix bug excludeCIDRs was not assign in func NewProxier * add debugging for aggregator flake * Update CHANGELOG-1.11.md for v1.11.0-beta.1. * Add/Update CHANGELOG-1.11.md for v1.11.0-beta.1. * Quote shell variable expansion * Update bazel. * Update unit test. * Proxy container streaming in kubelet. * disable memcg for testing prior to 1.11 release * Rename online resizine feature gate * openapi: Remove FakeClient from testing library * Kubeadm/k8s version mismatch is now a skippable error * cloud node controller: improve error handling for node registration * remove extra "../" when copying from pod to local * Add tallclair to milestone maintainers * autogenerated * Add unit tests for the new Bootstrap Token objects and functions * kubeadm: Initial refactor of the Bootstrap Tokens. Add the new API objects, add/move helpers and start using the new flow in the code * Move helper funcs and constants to the client-go Bootstrap Token package from kubeadm * code-gen: support running from anywhere * Save kubeadm manifest backup directories * Use default seccomp profile for GCE manifests * Add ipvs module loading logic to gce scripts * Move pkg/scheduler/schedulercache -> pkg/scheduler/cache * Mount the kubeletConfigPath rw when running containerized node e2e tests * implement kubelet side online file system resize for volume * kubeadm uses its own scheme instead of kubectl scheme * remove unused code in kubeadm error.go * use subtest for table units (pkg/master) * Support dynamicly set logging verbosity * svcacct: validate min and max expiration seconds on TokenRequest * generated: update generated API files * core v1: deprecate the gitRepo volume type * Add TLS support to exec authenticator plugin * add a flag to control the cap on images reported in node status * [gce provider] More wrappers for alpha/beta backend service * add utils for pod condition * make update * fix unit tests using Patch in fake client * add Patch support in fake kubeClient * change kubelet status manager to use patch instead of put to update pod status * include patch permission for kubelets * add utils to patch pod status * autogenerated * dns record scale test * apiserver: update tests to use sub-benchmarks (aes_test.go) * kubeadm: conditionally set the kubelet cgroup driver for Docker * Fix error message to be consistent with others * Parallelize taint manager * e2e test for block volume provisioning * apiserver: update tests to use sub-benchmarks (secretbox_test.go) * Fixing scheduling latency metrics * remove unused parameter in func buildFakeProxier * Promote watch e2e test to conformance * autogenerated * kubeadm: Add a 'kubeadm config migrate' command * Possible cipher suites values and tls versions in help for apiserver and kubelet * add api for service account token volume projection * remove ipvs feature gateway * remove unused status per TODO * Build files generated * Phase out rescheduler in favor of priority and preemption * Modified regional PD test to fetch template name from GCE * Remove direct and indirect streaming runtime interface. * Add dry-run to auth reconcile * Deprecate the in-tree keystone plugin * e2e node: mark pod cgroup test as [NodeConformance] * update set selector to use resource builder flags * cleanup some dead kubectl code and narrow scope of helpers * fix dynamic kubelet config tests * node e2e: fix the missing square brackets * Correctly apply request transforms with flattened resource builder * Add dynamic environment variable substitution to subpaths * Add probe based mechanism for kubelet plugin discovery * Auto-generated files * create coredns and kube-dns folders * autogenerated * Update unit tests to use the new NodeRegistration object * kubeadm: Move .NodeName and .CRISocket to a common sub-struct * add resource builder flags * client-go: start fresh with owner file * fix the delete result being used * services must listen on port 443 * apiextensions-apiserver: add establishing controller to avoid race between established and CRs actually served * include rollout object name in cli message * Add block volume support to internal provisioners. * client-go: document README exception in .github/PULL_REQUEST_TEMPLATE.md * Declare wait flag in way consistent with other deletion flags * DaemonSet internals are still in extensions * Add daemonset when to getReplicasFromRuntimeObject when cleaning objects in e2e * Allow AWS EBS volumes to be attached as ReadOnly. * Increase the timeout when waiting for the job to be gone * remove unnecessary factory delegation for RESTClientGetter method * Fix GKE Regional Clusters upgrade tests * kubeadm: Use loadPodSpecFromFile instead of LoadPodFromFile * UX improvement for preflight check for external etcd client certificates * Fix bug with scheduler throughput variable pass-by-value * e2e/storage: central argument handling * move filename flags to genericclioptions * move resource builder flags to genericclioptions * Update generated files * apiextensions-apiserver: add columns to CRD spec * fix azure file size grow issue * Remove Generators from Factory * move scaleClient from factory * ccm: recognize InstanceNotFound from InstanceID * Restore InstanceNotFound comment & logic * collapse into one factory * kubeadm: do not use --admission-control for the API server * Improve the help of kubeadm completion * Wait for PODs ready after scale up * Run cluster-autoscaler+GPU e2e tests for all gpu types * bump(github.com/evanphx/json-patch): 94e38aa1586e8a6c8a75770bddf5ff84c48a106b * Remove unused limit writer. * [gce provider] Update auto-generated codes * [gce provider] Add more wrapper for securiti policy * Adding a shutdown script that would enable handling preemptible VM terminations gracefully in GCP environment * Fix nodeport repair for ESIPP services * Fix DsFromManifest() after we switch from extensions/v1beta1 to apps/v1 in cluster/addons/device-plugins/nvidia-gpu/daemonset.yaml. * remove gce_address_fakes.go from BUILD file * Remove some unnecessarily gendered pronouns in comments * mocks must return true in order to trigger err * use fakeGCECloud instead of gce address fakes * Remove initializer test Initializers are alpha, broken and a subject for removal. They don't work well with finalizers and the previous hack present in deployment and replicaset reapers was just hiding this problem. * Handle DaemonSet removal the old way * Remove kubectl reapers * Remove feature tags from e2e test for resize * Fix breaking volume resize e2e tests * Move volume resizing to beta * Prepulls images by default * fix parsing 'crictl pods -q' output * disable PersistentVolumeLabel admission controller by default * remove CrictlChecker from preflight checks * Should use `hostProcMountinfoPath` constant in nsenter_mount.go. * Ensure that only IPs are used as node addresses in OpenStack LBs * Revert "Change default min-startup-pods value" * Measure scheduler throughput in density test * Move Ceph server secret creation to common code. * fix toleration validation invalid error * Update feature warning for log rotation flags. * simplify else * Rename and add unit test for ImageSizes * HandleError include the type of the error object * Move SuggestedPodTemplateResources from factory to set_resources * Fix hasClusterTag to actually get behavior we want * Update nvidia-gpu-device-plugin to apps/v1 and use RollingUpdate updateStrategy. * fix space-vs-tab indent on comment line * Pull gke-exec-auth-plugin binary on Nodes * Resurrect lost log line * Remove signal handler registration from pkg/kubelet * kubeadm: rename the `kube-dns` phases addon * MapString* should return empty string for String() when null * Use default seccomp profile for flutend-elasticsearch addon * Use default seccomp profile for DNS addons. * graduate DynamicKubeletConfig feature to beta * Run hack/update-all.sh * Expose openapi schema to handlers * Update version of k8s.io/kube-openapi * add PST to main SECURITY_CONTACTS as formality * fix describer tests * move Describer from factory * Trigger function for secrets * update manifest * apiextensions: cleanup test/integration helpers * apiextensions: unify multi- and mono-versioned test helpers * pv_controller change for provisioning * Add dynamic provisioning process * cache update for dynamic provisioning * Add reason message logs for non-exist resources * apimachinery: remove unused UnstructuredObjectConverter * replace `__internal` with runtime.APIVersionInternal * resourcequota return StatusError when timeout * Always masquerade node-originating traffic with a service VIP source ip * Fix Windows CNI for the sandbox case * Add unit tests for findRule() * Add verbose logs for azure cloud provider * Check LoadBalancingRulePropertiesFormat for azure load balancers * Move unrelated methods from the factory to helper * Optimize the lock which in the RunPredicate * fix bugs that break processing when printing errors occur in kubectl * fix kubectl set subject --all option invalid bug * add metadata to kubelet eviction event annotations * Update function hasClusterTag to fix issue #64230 * kubeadm: Improve the kubelet default configuration security-wise * conformance: normalize the test names * Moving Regional PD e2e tests to regular test suites * apiextensions: reduce verbose logs in removeDeadStorage * apiextensions: make CreateNewCustomResourceDefinition return created CRD * Explictly enable cgo when building kubectl for darwin from darwin * Add KUBE_CGO_OVERRIDES env var to force enabling CGO * prevent zero for leader election timeouts * Do not use DeepEqual to compare slices in test. * autogenerated * kubeadm: Refactor the .Etcd substruct in the v1alpha2 API * Update generated files * Add clarification for GA in Version Priority sorting * add test: verify kubelet.config.Restore only happen once * apiextensions: extract orthortogonal behaviour from nopConverter * move rollbacker from the factory * move Pauser and Resumer from the factory * move more CanBeExposed from factory_client_access * do some code clean for cloud-controller manager * Nsenter unit tests * Pass Nsenter to NsenterMounter and NsenterWriter * Created directories in /var/lib/kubelet directly. * Split NsEnterMounter and Mounter implementation of doBindSubpath * Refactor doBindSubPath into smaller functions: * Change SafeMakeDir to resolve symlinks in mounter implementation * Enhance ExistsPath check * Allow EvalSymlinks target not to exist. * Add GetMode to mounter interface. * add missing flag for kubeadm config images pull command * Use DeleteOptions.PropagationPolicy instead of OrphanDependents (deprecated) in kubectl * Fix incorrectly set resource version in List * should not ignore err when convert controllermanagerconfiguration api * Validate cgroups-per-qos for windows * Fixes fsGroup check in local volume in containerized kubelet. Except this, it also fixes fsGroup check when volume source is a normal directory whether kubelet is running on the host or in a container. * Correctly identify types served in the kube-apiserver openapi doc * add colon separators to improve readability of test names * fix the e2e node helpers that let tests reconfigure Kubelet * re-reorder authorizers (RBAC before Webhook). * Add warnings about cache invalidation. * autogenerated * kubelet: Move RotateCertificates to the KubeletConfiguration struct * extend configmap tests to include CoreDNS * add dynamic config metrics * Generated files * CRD versioning with no-op converter * Do not bypass same version unstructed conversion if it is a list * CRD versioning validation and defaulting * CRD versioning - types change * e2e/auth: Expect apps/v1 Deployment calls in audit test. * Set explicit labels/selector for apps/v1 Deployment/RS. * test/integration: Use apps/v1 Deployment/ReplicaSet. * test/e2e: Use apps/v1 Deployment/ReplicaSet. * kubectl: Use apps/v1 Deployment/ReplicaSet. * Use apps/v1 in Deployment controller. * Stub out BackendService check in Ingress upgrade test. * Add Logf message for skipped succeeded pods * Remove some completed TODOs * move f.Command out of the factory * log bad format git version * remove portsforobject from factory * add a discarding printer for testing and delegation * generated * add wait * generated * switch rbac to external * ipvs lb local session affinity * Added unit tests to sample-controller * Simplify the volume util by v1helper. * Allow env from resource with keys & updated tests * add volumeName in getVolumeSpecFromGlobalMapPath * e2e: Remove flaky from CSI E2E test * autogenerated * kubeadm: Write kubelet config file to disk and persist in-cluster. Also write runtime environment file and fixup the kubelet phases command * test/e2e/common: Add NodeFeature or NodeConformance tags * kubectl use its own logs * auto generated file * load kernel modules required by IPVS in kubeadm * Rename Du() to DiskUsage() for more expressive * convert Duration into seconds by go library function * fix kubectl get --show-kind * test/e2e/common: add NodeConformance tag to all Conformance tests * generated * test/e2e_node: Add NodeFeature tags to non-conformance tests * Re-tag benchmark tests * test/e2e_node: mark more tests with [NodeConformance] * test/e2e_node: Add Node-exclusive feature tags to existing tests * test/e2e_node: Add [NodeConformance] to tests tagged [Conformance] * mark ServerAddressByClientCIDRs as optional * move updatepodspecforobject out of factory * kubeadm-upgrade: add unit tests for the diff command * kubelet: fix checkpoint manager logic bug on restore * kubeadm-upgrade: small improvements to diff * remove LabelsForObject and ResolveImage from factory * Update CHANGELOG-1.9.md for v1.9.8. * correct test logging package stackdrvier -> stackdriver * move PrintOptions to genericclioptions * remove API dependency on printers * When creating ext3/ext4 volume, pass -m0 to mkfs in order to disable the super-user-reserved blocks, which otherwise defaults to 5% of the entire disk. * dynamic Kubelet config reconciles ConfigMap updates * Fix running e2e tests with completed kube-system pods * remove unused gc code * Update CHANGELOG-1.10.md for v1.10.3. * Add optional flag of node port range * add block device support for azure disk * kubeadm: Remove .ImagePullPolicy * autogenerated * kubeadm: Remove .AuthorizationModes in the v1alpha2 API * add formatAndMount unit test on Windows * Don't support marshalling using the v1alpha1 version in kubeadm v1.11 * Update bazel * Fix cyclic dependency of apiserver test for OpenAPI test * Dump Stack when docker fails on healthcheck * remove one duplicated unit test * Kubelet config: Validate new config against future feature gates * Generated files * Sort API Services by Kube-Version order * Fix error message in Equalities.DeepEqual * kubeadm: APIServerExtraArgs should override defaultArguments * Bump grpc max message size for docker service * autogenerated bazel * Add testdata that supports the unit tests testing the kubeadm API types * Add roundtrip, defaulting, upgrading and validation unit tests for the kubeadm API types * generated * Add GET PATCH support for two /status: * Raise error on duplicate name in kubeconfig * remove knob of equiv class in perf test * Fixing wrong unit test naming * Use Dial with context * Refactor test utils that deal with Kubelet metrics for clarity * sort on non-tabular output * Fix TestSchedulerWithVolumeBinding to avoid setting predicate ordering. It is causing data race condition as predicate ordering is changing global variable predicatesOrdering. Infact this test does not require any special predicate order and should work on default predicate ordering as far as VolumeScheduling feature is enabled. * Graduate CRIContainerLogRotation to beta * move additional methods from factory * remove unused code of (pkg/scheduler) * fix event ref determination for apigroups * Add environment variable to control truncating backend. * Tolarate negative values when calculating job scale progress * uses a more resilient way to get branch name from version * kubeadm: crictl reset commands fixes * Add SELinux support to CSI * kubectl: add aggregation rule support to clusterrole * Allow for system metrics discovery in Custom Metrics - Stackdriver Adapter test * kubeadm: Restrict imports from pkg/client/clientset_generated/internalclientset * kubeadm: Add local copy of LeaseEndpointReconcilerType * Handle TERM signal to reduce pod terminating time. * new event exporter config with support for new stackdriver resource types * fix formatAndMount func issue on Windows * [e2e ingress-gce] Implement Skip() for ingress upgrade test * auto generated file * modify kube-controller manager config struct to adapt option change * modify cloud-controller manager config struct to adapt option change * [kube-controller manager]get rid of GenericControllerManagerOptions sub-struct * [cloud-controller manager]get rid of GenericControllerManagerOptions sub-struct * remove kube-proxy and kube-scheduler from pkg_kubectl_cmd_util_CONSUMES_BAD group * Update ipvs docs --- check the prerequisite * kube-proxy should not depend on kubectl * construct a new CloudControllerManagerConfiguration struct for cloud-controller manager * gce provider: point to hack/update-cloudprovider-gce.sh in doc * gce provider: add wrapper for security policy * autogenerated * Only override objects from informer when version has increased. Add more logging and tests to volume scheduler. * move type setting into an optional layer above normal printing * add protection for missing apiversion so we never serialize a bad object * remove versioned printer * Results of running update scripts: update-openapi-spec update-federation-openapi-spec * Add kubernetes license to credential manager * Add unit test for secrets flag in config file * Add secrets flag in vcp config and modify vcp to use nodemanger connect method * Modify nodemanager to use credentials from secret * Add credentials manager unit test in vSphere Cloud Provider * Add credentials manager in vSphere Cloud Provider * Add update credentials function in vclib * add myself as an approver in various auth related directories * Wait for pod deletion instead of termination * kubeadm - fix upgrades with static pod etcd * pkg: kubelet: remote: increase grpc client default size * Add a 'kubeadm config print-default' command * Move all logic for NodeConfiguration unmarshal to the dedicated package * autogenerated files * Cluster Autoscaler 1.2.2 * increase timeout in TestCancelAndReadd * autogenerated * kubeadm: Remove the never-used .Etcd.SelfHosted field * kubeadm: Avoid unneeded dependencies by not using GetFlagString * start splitting polymorphic functions out of the factory * fix error tests due to version bumping of etcd and supported k8s * Bump etcd version based on k8s version to 1.10.X => 3.1.12, 1.11.X => 3.2.18, 1.12.X => 3.2.18 * Remove v190alpha3 * Rename v180AndAboveKubeDNSDeployment to KubeDNSDeployment * remove v190 from kubeadm in v1.11 cycle * Update kubeadm's minimum supported kubernetes in v1.11.x to 1.10 * update factory interface to overlap with lower RESTClientGetter * kubectl: fix Flatten() when used without Latest() * Add GetSELinuxSupport to mounter. * WatchingSecretManager * Refactor ConfigMapManager * fix little bug in kube-scheduler options * Add a way to pass extra arguments to etcd. * Fix SkippedPaths * Add Pod stats for Windows containers * Init ipvsInterface only when ipvs modules are present * Add fs status for Windows containers * Add log stats for Windows containers * update bazel * remove request context.WithUID * Delete extraneous CHANGELOG-*.md files on branch. * Kubernetes version v1.12.0-alpha.0 openapi-spec file updates * Add strategy description for 'kubectl describe sts' command * Fix PDB preemption tests. * test clusterip * check for NEG healthcheck with correct name * Generated docs * Add a `kubeadm upgrade diff` command * Extract connection rotating dialer into a package * diff: Fix broken `Local()` logic * bzl: cleanup some no longer need visibilities * Bazel artifacts * Adds a kubeadm config images pull command * Additional test coverage for kubectl/cmd/cp * move ConfigFlags to pkg/kubectl/genericclioptions * autogenerated * kubeadm: Remove the .PrivilegedPods configuration option * kubeadm: Remove the .CloudProvider configuration option * storageclass can be in annotation and spec * Ignore golint failure for v1alpha2, as the failing code is autogenerated * Remove e2e test for cAdvisor running in the kubelet, as it's deprecated and gonna be removed * Add initContainers into completion suggestions for kubectl logs/attach * autogenerated * autogenerated move to reference the v1alpha2 API inside of kubeadm * Refactor cache based manager * Change default min-startup-pods value * kubeadm: Register and support loading the v1alpha2 API types * kubeadm: Add duplicated v1alpha2 API types * Auto-calculate allowed-not-ready-nodes in test framework * Enable checking whether ipvs modules are built-in or not * Setup dns servers and search domains for Windows Pods * abstract duplicated code in ipvs proxier * Revert enable PodPreset admission and also enable settings.k8s.io/v1alpha1 api resource * Revert "Openstack: register metadata.hostname as node name" * Revert "Split out the hostname when default dhcp_domain is used in nova.conf" * Revert "Specify DHCP domain for hostname" * gce: Prefer MASTER_ADVERTISE_ADDRESS in apiserver setup * Remove unnecessary roundtripping in get.go * Autogenerated code * Fix fakeclient List * Update CHANGELOG-1.8.md for v1.8.13. * remove single use, non-polymorphic helpers from factory * Move to a structured status for dynamic Kubelet config * kubeadm - set CoreDNS FeatureGate to true by default * bump coredns to GA in kubeadm * Prevent nodes from updating taints * apiextensions: only create patch reference object for smp path * Disable the public cadvisor port by default * update bazel * vSphere Cloud Provider: update vmware/gomvomi godeps * vSphere Cloud Provider: add SAML token authentication support * NFS support for default storage * make TestGetServerGroupsWithTimeout more reliable * Use runtime/default as default seccomp profile for unprivileged PodSecurityPolicy * kubeadm preflight check for IPv4 and IPv6 forwarding * autogenerated bazel * generated * stop generating service deletecollection * Minor fixes for kubeadm reset * Decrease default node schedulable timeout in e2e framework * kubeadm: Handle config loading only in one place, and only use the internal version of the API internally. Fix bugs * restore old cached client behavior * move cached_discovery to client-go/discovery * Fix bootstrap roles to allow list/watch secrets/configmaps from nodes * Requires single name for list and watch * scheduler: remove nested retry loops * Revert "Revert "scheduler: align with ctrl-managers and apiservers, add https+auth in options"" * Clean stackdriver sinks when reached limit * Add comments for ipset entries in kube-proxy - fix * fix ut * pass stop channel to node-controller * Still use `docker ps` for docker health monitoring. * Enable CUSTOM_INGRESS_YAML to replace the glbc manifest * Adding details to Conformance Tests using RFC 2119 standards. * cleanup kubectl apiresources * kubeadm - fix external etcd upgrades * Support kubeadm upgrade with remote etcd cluster * Build files generated * Switch to beta * Update e2e to use priorityClass beta * Actually support service `publishNotReadyAddresses` * Refactor kubeadm config list-images * remove decoder from name printing * kubeadm: Contact the kubelet on its healthz port 10248 instead of its readonly port * Sort arguments before joining them, for reproducible return string * print result object from kubectl taint correctly * apiserver: Fail if dry-run query param is specified * Remove layer:status per review * Update status handling and retry network status poking, per review * autogenerated bazel * Stop installing kubeadm types in the generic, legacy scheme * check for new backend naming scheme * kubeadm: Use the API machinery for marshalling * client-go: remove dep on pflag * Retry certificate approval on conflict errors * Add e2e test to verify that GPU pool is not scaled up if GPUs are not requested by pods * kubeadm - do not generate etcd ca/certs for external etcd * switch to versioned objects only for set * Track number of registered watchers in apiserver * remove unused PrintFlags.Scheme * [prometheus addon] Add filter on image in tests to remove pod timeseries * Rename kubeadmapiext to the more explicit kubeadmapiv1alpha1 * e2e/storage: parameterize container images * apiextensions: normalize CR validation to return multiple errors * fix review comments * use subtest for table units (pkg/printers) * fix missing flag value bindings in kubectl * Avoid copying aggregated admin/edit/view roles during bootstrap * Control exactly what we use in kubeadm * Generated * Move scheduling api to beta * register client-go auth plugins for e2e * Adds initial Korean translations for kubectl * Removed unused namespace in UT helper func. * kubeadm-init: update note about failing containers * validation: improve ProjectedVolume validation errors * validation: allow multiple errors in Volume validation test * Fix bad sleep - int as duration * Added documentation of how client-go interfaces with custom controller code * Tests for kubeadm marshal utilities * Generated artefacts * Deprecate photon cloud provider * fail printing on internal obj * Use apimachinery for serialising kubeadm MasterConfiguration * Update generated artefacts * log error for os.NewComputeV2 * Revisit the OWNERS file for kubeadm * fix dynamic client name * Move uncordon to after the node is ready * generated * Add GET PATCH support for crd status * Add InstallPathHandler which allows for more then one path to be associated with health checking. * Add support for GCP charm * Fix kubectl auth can-i exit errcode * Revert "authz: nodes should not be able to delete themselves" * move old dynamic client to deprecated-client * add subresource support for the dynamic client * update describer to use dynamic client * fix typo * Add comments for ipset entries in kube-proxy * [fluentd-gcp addon] Pass region in seperate field * fix typo: peirodically->periodically * Update generated bazel * Use simple cache instead of LRU * sample-apiserver admission wait for informer sync before serving * Reuse existing CA cert path for kubelet certs * kubeadm - add preflight warning when using systemd-resolved * Update comments and UT to remove /66 restriction * Add Patch method to GA Backend Services * Add 'system-cluster-critical" to kubeadm control plane pods. * remove legacyscheme dep from printFlags * Add cluster autoscaler tests for pods requiring GPU * Add framework.GetReadyNodesIncludingTaintedOrDie * Add way to request GPUs in tests via RCConfig * move resource builder to generic options * cleanup TODO comments from PrintFlags wiring * Basic E2E tests for kubeadm * fix message output for import verifier * remove kube/kube deps from resourcebuilder * Adds kubeadm images command * Bump down to cos-stable-65 in config-test * wrap restclientgetter with match version option * construct resource.Builder from kubeconfig flags * update generated files * Promote CustomResourcesSubresources to beta * Make node restriction admission pod lookups use an informer * Make discovery refresh period less aggressive * use subtest for table units * Remove 20x factor in garbage-collector qps * 6capiextensions: handle CRD conflict errs in integration tests * Cleanup DaemonSet after each integration test. * remove unused variables on pkg/controller/serviceaccount/serviceaccounts_controller_test.go pkg/controller/endpoint/endpoints_controller_test.go * kubeadm-init: add details about --token * Use absolute path for KUBECTL default in local up cluster * Make aggregator e2e test resilient to unrelated API group changes * kubeadm: add test coverage to completion.go * kubeadm: add GetSupportedShells() to completion.go * category expansion can only come from the server * move category expansion types to restmapper package * Uncordon the node after upgrade * Remove ExtraArgs kubeadm preflight check * Improve coredns upgrade path * Rename Add/Delete to *Reference * Improve where we load builds from for kubeadm upgrade jobs * Refactor cachingSecretManager * push ToRESTMapper down a layer * don't block e2e namespace cleanup checks on metrics.k8s.io API group * e2e: add a tooling argument to differentiate tooling * Fix typo in envelope transform error message * clean unused code in restmapper_test.go * Run FSGroup tests by default. * apiextensions: allow "required" at root with status subresource * Fix issue #63183 that pods on different nodes mount Ceph RBD PVC stuck on ContainerCreating. * Fix iSCSI and RBD UnmountDevice with mount containers. * add SetMaxResource for Resource * Fix unit tests for new interfaces * Do not check vmSetName when getting node IP * Run resource discovery in parallel * fix a small mistake in function getFieldMeta * Add test about host path type * add IsLikelyNotMountPoint test on Windows * generated * Bump kube-openapi dependency * Fix cgroup names in node_container_manager_test. * eviction test ensures failed pods are evicted * explicit kubelet config key in Node.Spec.ConfigSource.ConfigMap * simplify api registration * generated * Build image size map upon node info updates * Push fat manifest for multi-arch images * should return error when has no RequestInfo * use IOStreams for cli commands * generated * move client based restmappers to client-go * stop pretending that we have statically known shortcuts * adding support for VM name with extra Separator String * [CustomResourceSubresources] fix status subresource * cleaning up load balancer resources * Bump Heapster to v1.5.3 * Refactor hard code in rest_test.go * fix IsLikelyNotMountPoint func on Windows * Deprecate in-tree OpenStack cloud provider * [e2e ingress-gce] Change ingress-upgrade test to not check for number of instances * add memcg notifications for allocatable cgroup * workspace mirror: add trailing newline to urls list * run buildifier on build/workspace_mirror.bzl * rm GetStandardPrinter * remove printer helpers * Close all kubelet->API connections on heartbeat failure * Always track kubelet -> API connections * Apply pod name and namespace labels for pod cgroup for cadvisor metrics * Improve test coverage of Kubelet file utils * Enable GCE/GKE e2e tests for GlusterFS Dynamic Provisioner. * default the ignorenotfound for delete when selecting objects * vsphere: update bazel * vsphere: fallback to vcsim for testing authentication * Rename VSphereConnection.GoVmomiClient -> Client * vsphere: use vim25.Client directly to support token authentication * Add support for arm64 to the registry action of the kuberntes-worker juju charm. * update garbage collection to use the new dynamic client * when get CRD resources with --server-print=true the output looks like: * remove redudant runtime.GOMAXPROCS * Cleanup Pods in TestNominatedNodeCleanUp. * fix ipvs fw * Check nodeInfo before ecache * fix annotation of APIGroupInfo * Don't panic is admission options is nil * remove repeated code * Use IP_ALIAS_SIZE to calculate and update IP_ALIAS_SIZE. Error added when ip-alias is not enabled when IP_ALIAS_SIZE is not empty. * wire config flags through factory * Add conversion to properly parse query parameter propagationPolicy * begin building a config flags struct * Add MAX_PODS_PER_NODE env allowing kubelet to be max-pods aware. * cleanup eviction events * Add host path type in kubeadm config * udpate some examples to use external types * simplify resource builder usage * change deprecated Kubelet --allow-privileged flag default to true * Update autogenerated files. * Replace UserIDRange/GroupIDRange by IDRange in internal type to reduce difference with external type. * compute configmap/secret key correctly cross-platform * slim down printer interface * Fix bash completion with --all-namespaces * Switch kubectl resource completion to discovery * Fix typo in volume_stats.go * use new dynamic client * Fix CSI volume detach when the volume is already detached. * fixed golint error on redundant if * fix fake clients and unit tests * use new azure clients * cleanup unnecessary channels in azure clients * Allow api-resources to return cached data * Make ServerPreferred[Namespaced]Resources logic and caches consistent * Collect logs for health monitor services. * Install and use crictl in gce kube-up.sh * Update to go1.10.2 * Update to latest Gophercloud * Pass certificate URLs instead of the certificate structs * Revert "scheduler: align with ctrl-managers and apiservers, add https+auth in options" * Allow fetching bootstrap-kubeconfig from VM metadata * Fix e2e "When checkpoint file is corrupted should complete pod sandbox clean up" * [Device-Plugin]: Extend e2e test to cover node allocatables * don't block creation on lack of delete powers * dep: run godep save again * use TempDir func in mount_windows_test.go * stop using Info.Mappings when they may not be present * remove unnessary kubectl conversions * PR #62903 changed error string GetMountRefs() returned, which broke test `should fail due to non-existent path`. Remove error string check to fix test. * Use default seccomp profile for addons * Make openapi spec generation wait for the apiserver on shutdown * Let the kubernetes service reconciler timeout on shutdown * Update error assertation * apiserver: change default reconciler to LeaseEndpoint * run ./hack/update-bazel.sh * modify outdate link * Revert "apiserver: change default reconciler to LeaseEndpoint" * juju: Make kubernetes-master status handling more robust * don't reuse resource builder in describe * ensure diff output includes the portion that differs * Maintain index of high-cardinality edges in node authorizer graph * clean up vertex/edge deletion * Decorator for Create should be called on out, not obj * Update CHANGELOG-1.11.md for v1.11.0-alpha.2. * Add metric for throttled requests in AWS * add some comment message * iptables: add timeout when checking rules * dep: upgrade k8s.io/utils * Use the logging agent's node name as the metadata agent URL. * Add necessary explanation for container log rotation. * add UT test to PolicyRuleBuilder in file ./pkg/apis/rbac/helpers_test.go * 1.fix kubectl get * --all-namespaces namespace miss error 2.also add a test case modified: pkg/kubectl/cmd/get/get.go modified: hack/make-rules/test-cmd-util.sh * not expose object detail when creating TokenRequest * Add more volume types in e2e and fix part of them. * Bump kube-openapi dependency * Implements distributed OIDC claims. * WIP: Correct kill logic for cgroup processes * Ratchet to bazel 0.13.0+ * update restmapping to indicate fully qualified resource * adds support for arm64 to microbot example of the kubernetes-worker charm * Expand ability of ResourceID * kubelet: volume: do not create event on mount success * gcp: allow non-bootstrap kubeconfig * update tests to be specific about the versions they are testing instead of floating * remove rootscopedkinds from groupmeta * Use a []string for CgroupName, which is a more accurate internal representation * add test for sparse version encoding/decoding * get the resource.Info out of the conversion business * update etcd to skip kinds, not resources so we can use a live mapping * acknowledge that creation of a restmapper can fail and that we cannot have a default * remove incorrect static restmapper * gce: plumb --kubelet-certificate-authority flag to apiserver * kubelet: fix warning message to not print pointer addrs * kubelet: force filterContainerID to empty string when removeAll is true * GCE PD plugin now prevents attaching a regional PD PV with pdName of a regular PD * Fix pkg_rpm rules for bazel 0.13+ * Remove unused code * remove unnecessary encoder * Remove Factory from more Run commands * Remove event recorder TODO * Add set image test for sparse API group resource * Revert "fixtodo:validate events on PVCs in integration volume binding test" * Return attach error to A/D controller. * Add version/group usage and example to kubectl get * apiserver: change default reconciler to LeaseEndpoint * fix commands running crictl * Generated artefacts * Capitalize acronyms in AWS metrics-related code * add fake dynamic client * make dynamic client slightly easier to use * [prometheus addon] Fix missing storage class in alertmanager PVC * clean unused variables * Update bazel * scheduler: add https+authn+authz to options, set to nil for now * scheduler: align plumbing with controller-manager and apiservers * controller-manager: unify address flag description to listen on all interfaces * controller-manager: make InsecureServingOptions/Config re-usable * run make update * Fix fake clients and unit tests * Use new Azure SDK APIs for load balancer and public IP operations * Fix panic for attaching AzureDisk to vmss nodes * Rename func to ensureNodeExistsByProviderID * Supported matchField for NodeAffinity. * move pkg/scheduler/util/testutil.go to pkg/scheduler/testing * remove format operation in WaitForAttach * Add RESTMapper to ControllerContext and make it generic for controllers * fixup! Make scheduler cache generation number monotonic to avoid collision * Make kubelet `ReadLogs` backward compatible. * Hide EquivalenceCache mutex from users. * Rename exported methods on EquivalenceCache. * Simplify logic in podFitsOnNode. * Remove predicateResults map from podFitsOnNode. * Add RunPredicate to EquivalenceCache. * Deprecate repair-malformed-updates flag, move object meta mutation into BeforeCreate * Make scheduler cache generation number monotonic to avoid collision * Use cloudprovider.NotImplemented in AddSSHKeyToAllInstances * Report node DNS info with --node-ip * finish wiring PrintFlags * master count and lease endpoint tests * remove self linker from group info * Add name output and verb filtering to api-resources * replace filepath with path due to pre-formatted volumeName * divide statically known typer from dynamically derive restmapper * Move path management from e2e_node to common test/utils directory * Generated artefacts * Bump QPS on namespace controller * remove unnecessarily flexibiliy to simplify the resource builder * apiserver: document how to run sample-apiserver standalone outside the cluster * stop anonymously including types in resource struct so we can track usage * remove versioning interface * Update CHANGELOG-1.10.md for v1.10.2. * fix curl header * add accept for ipvs * Fix ensure by provider id * Update pvc_protection_controller.go * fix bug in dynamicResourceClient.UpdateStatus should encode * clean duplicate test function * make use of simple dynamic client in test * This bring up a heketi server pod and the server will be running in mock mode, the PVC creation should work, however the volume attachment to a pod and read/write is not part of this test. Due to the same reason the tests are marked as [fast]. * Also update CRI to indicate runtimes should not update empty CIDR * Check CIDR before updating node status * Simplify vmset acquirement logic * Collapse onto request scope convertor * Fix govet error * kubelet: logs: do not wait on following terminated container * Fixes fake client generation for non-namespaced subresources * passthrough readOnly to subpath * Add myself to sig-scheduling maintainers/approvers list. * remove unnecessary else clauses * kubeadm-token: search for existing kubeconfig files * tighten .Info for kubectl to avoid unpredictable conversion * rest mappings cannot logically be object converters * Add other prometheus monitoring components * Enable bypassing online checks in kubeadm upgrade plan * generated * stop duplicating preferred version order * update describe command opts struct * remove hardcoded list of resources * remove KUBE_API_VERSIONS * Correctly override args with APIServerExtraArgs * Add level to remote client glog. * add checks validation MinRequestTimeout of ServerRunOptions * Improve Azure disk operations for vmas and vmss * Remove incomplete uint64 support from JSON unmarshaling * kubectl should not have a direct code dependency on controllers * Add tests for resourceVersion precondition failures on patch * Do not schedule pod to the node under PID pressure. * collapse patch conflict retry onto GuaranteedUpdate * Update vendors for client-go * Use new clients in Azure Disk volume * Use new clients in Azure credential provider * Use new clients in azure cloud provider * Upgrade virtualmachin/disk/storageaccount client to use new SDK * Upgrade Azure Go SDK to v14.6.0 * Revert "Revert "Revert revert of equivalence class hash calculation in scheduler"" * Limit access to core/api/v1 inside of client-go * restclient should not depend on api/core/v1 * client-go should not take a dependency on the v1 api lightly * report outputFormat in PrintFlags err * kubeadm: accept 'Y' and 'y' as reset confirmation * wire printflags through additional cmds * wire PrintFlags through get cmd * move "get" cmd pieces to cmd/get * support simultaneous kubadm --v and --config * Check for old NodeInfo when updating equiv. cache. * Add IsUpTodate() to Cache interface. * Test race condition in equivalence cache. * Add pointer comments * Create a go_bindata bazel macro * Remove pkg/generated/bindata.go from the repo * bazel: generate pkg/generated/bindata.go at build time * Update provisioner to v0.2.1 container * also fix the quick-release * runhack/update-staging-godeps.sh * Refactor the patch handler for readability * Revert "Revert "gce: move etcd dir cleanup to manifests"" * upgrade dep json-iterator/go to fix #62742 * [prometheus addon] Add readme * generated * core v1 API requires autoscaling/v1 to serve the Scale endpoint * update code generator * eliminate indirection from type registration * add easy to use dynamic client * update more commands for iostreams * kubeadm: add test coverage to join.go * kubeadm: use the helper NewValidJoin() in join.go * kubeadm: prompt for confirmation when resetting a master * Generated changes * Revert "gce: move etcd dir cleanup to manifests" * version typo fix * refactor device plugin grpc dial with dialcontext * Hack for testing until test-infra/pull/7846 merges * remove useless alwaysAdmit in apiserver test * Register Prometheus etcdmetrics only for apiserver * Clean up and remove unused deps * add warnings for docker-only flags * mark APIServiceSpec.CABundle optional * Added more UT for invalid case. * -Remove TODO comment of GetNonzeroRequests function * Fix race between stopping old and starting new endpoint * avoid duplicate status in audit events * Tag pkg_rpm rules as manual * Fix discovery default timeout test * Update libcontainer to include PRs with fixes to systemd cgroup driver * Add field selector support to delete, label, annotate * Remove examples directory * Fix hpa-use-rest-clients help text * Set names for OpenStack loadbalancer members and monitors * dockershim/sandbox: clean up pod network even if SetUpPod() failed * Fix qosReserved json tag (lowercase qos, instead of uppercase QOS) * replace request.Context with context.Context * [kubeadm] Fix Etcd Rollback * [kubeadm] Add etcd L7 check on upgrade * [kubeadm] Modify the kubeadm upgrade DAG for the TLS Upgrade * [kubeadm] Update test-case, fix nil-pointer bug, and improve error message * [kubeadm] Implement etcdutils with Cluster.HasTLS() * gce: move etcd dir cleanup to manifests * Support containerized kubelet in CI * replace path with filepath * Prepull etcd before an upgrade * Fix IP_ALIAS_SUBNETWORK env var assignment in GCE setup * Removed e2e test on empty NodeAffinity. * bind externalIP and lb IP * fix a error in serviceaccount validate. This error is a human-writing error. Small as it is, it could cause recreate Object validate through bug. This patch fix it. * clean up unused code fakeRL in requestinfo_test.go * Update CHANGELOG-1.8.md for v1.8.12. * fixtodo:validate events on PVCs in integration volume binding test * renable nodeipam in kube-controller-manager * Bump minimum required go version to 1.10.1 * generated codes. * Added MatchFields to NodeSelectorTerm. * [e2e ingress-gce] Fix race condition for appending services and ingresses * e2e: save raw profiles too * Fix bash command for liveness probes in the metadata agents. * Remove unnecessary typer from create/update handlers * Add unit test for configure-helper. * Fix scheduler Pod informers to receive events when pods are scheduled by other schedulers. * Added test for scheduler informers * remove confusing flexibility for metadata interpretation * Make integration test etcd store unique * Use BootID instead of ExternalID to check for new instance * Bump kube-dns version for kubeadm upgrade * Update upgrade/downgrade images for ingress-gce * remove repeated resourceversion * When bootstrapping a client cert, store it with other client certs * juju: Use k8s.gcr.io url for arm64 ingress image * Timeout on instances.NodeAddresses cloud provider request * Remove METADATA_AGENT_VERSION config option * Whitelist CronJob for kubectl apply --prune * add warnings on using pod-infra-container-image for remote container runtime * avoid dobule RLock() in cpumanager * Support nsenter in non-systemd environments * autogenerated files * make API.ControlPlaneEndpoint accept IP * PR #59323, fix bug and remove one api call, add node util dependency to cloud controller * Fix dockershim e2e * avoid calling Handles twice * fix typo: mutating validating admission should be distinguished * kubelet: fixup QOSReserved json tag * [kubeadm] Implement ReadStaticPodFromDisk * [kubeadm] fix mirror-pod hash race condition * Add unit tests for gce loadbalancer internal. * Fix upgrade to Kubernetes v1.9.3+ * Add a GCS mirror to WORKSPACE URLs. //hack:update-mirror updates it. * Always Start pvc-protection-controller and pv-protection-controller * authz: nodes should not be able to delete themselves * provide standard iostream struct for commands * kubelet: fix flake in TestUpdateExistingNodeStatusTimeout * loopback webhook integration test * Honor existing CA bundle and TLS server name in webhook client * ensure tls server name is used in transport * distinguish custom dialers in transport cache * Ensure service routing resolves kubernetes.default.svc correctly * Filter unavailable commands in help * Deprecate kubectl rolling-update * Set a default request timeout for discovery client * Manage Metadata Agent Config with Addon Manager * Change Capacity log verbosity in node status update * remove uneeded discovery flexibility * -Fix the name could cause a conflict if an object with the same name is created in a different namespace * Add node authorizer contention benchmark * Check all backends for vmss and standard instances * e2e test forwarding externalname dns lookup to upstream nameservers. * aggregate objs before printing in apply cmd * Only count mounts that are from other pods * Fix ILB issue updating load balancers * fix formatting for memcg threshold * make describers more generic from the CLI * Add CHANGELOG-1.11.md for v1.11.0-alpha.1. * Add support to resize Portworx volume * build/rpms: fix kubeadm rpm * final record flag cleanup * Change docker/default to runtime/default * gcp: add env var to configure enabled controllers in controller-manager * simplify the client cache * wire print flags through apply cmd * Exclude keys containing empty patches in the final patch * Update CHANGELOG-1.9.md for v1.9.7. * unpack dynamic kubelet config payloads to files * Bring StorageObjectInUseProtection feature to GA * Export RBAC validation functions * reset resultRun to 0 on pod restart * Remove InfluxDB from default cluster monitoring * [Prometheus addon] Use StatefulSet * Update github.com/stretchr/testify to v1.2.1 * kubectl stops rendering List as suffix kind name for CRD resources * use recordFlags * remove flags deprecated in 1.5 * Update all script to use /usr/bin/env bash in shebang * read openstack auth config from client config * fix ipvs delay on sync rules * Add support of zero nodes in vmss * [prometheus addon] Use secure kubelet port * Add standard LB support to Azure vmss * Move vmset checking back to vmsets * Make pod status to "Running" if there is at least one container still reporting as "Running" status * fix csi data race in csi_attacher_test.go * Use shorter timeout if possible. * check error when parse field failed * regenerate fakes * generate code that passes go vet * Update upgrade message Fixes: https://github.com/kubernetes/kubeadm/issues/672 * Remove request context mapper * Add awly as reviewer in several subtrees * CSI test refactor to be more easily extensible for more plugins when there are more tests * use record flags * fix up record flags * apiserver: move patch tests to their own file * Add integration test for disable preemption * autogenerated * rename ExternaID to something that is obviously deprecated * boring * remove last usage of external ID * wire pritnflags through run cmd * kubeadm: Mount additional paths inside apiserver/controller-manager for working CA root * Add volumenameprefix tests for glusterfs dynamic provisioner. * we should use Infof when we are using format string * Add k8s.io/apiserver/CONTRIBUTING.md * [prometheus addon] Add OWNERS file * ensure we delete orphaned routes with matching next-hops only * fix error message of TokenRequest * This patch add a new parameter called `snapfactor` to glusterfs storageclass. This is an optional parameter and value should fall into the range of 1-100. When set the thin pool calculation respect this snapfactor and create a thinpool accordingly. * add metrics to cinder * self sign certs when ServerTLSBootstrap is disabled * clean up *.properties files * Report events to apiserver in local volume plugin. * Auto generated BUILD files. * Refactor kubeadm api validation. * Lower UsageNanoCores boundary in summary api test. * Fix extra-log flag for node e2e. * Bump GLBC manifest to v1.1.1 * add @andrewsykim to OWNERS for cmd/cloud-controller-manager,pkg/controller/cloud,pkg/cloudprovider * encapsulate IP counter in X, parallelize lb tests * generated changes * Add default generation tags * Add contribex to github template owners * Fix kubectl describe cronjob * Fix NPD preload. * Update kazel to include openapi tag detection fix * Update generated bazel * Add write-config-to to scheduler * Link to vulnerabilitiy disclosure process from the issue template * Remove unneeded deps from vendor * Log webhook request error * bzl: build --config unit should build with race enabled * Use a dynamic RESTMapper for admission plugins * Adding kube dns to kubemark * fix route deletion * Update addon manifests to use policy/v1beta1 and grant permissions in policy API group. * Generated files * sample-apiserver: add v1beta1 with advanced conversion example from v1alpha1 * wording * Not validating front proxy CA Key when using External CA. * Fix anti-affinity issue that caused a pod to be considered a match if any of the terms matched (as opposed to all terms matched) * add CaoShuFeng as a reviewer of kube-apiserver * fix "kubectl create --raw" * remove PodPreset and enable scheduling.k8s.io/v1alpha1 for Priority * Use filepath.Clean() instead of path.Clean() * add generate file * update comments for local volume * allow user to scale default backends * Addressed reviewer comments * begin adding record flags struct * add delete flags * update delete, replace, run cmds * Fix kubelet flags. * Add binding error message for volumeMode:Block unsupported case * Increase max requests inflight limits in gce for very large clusters * Instrument transformer.go with latency metrics. * kubelet: move QOSReserved from experimental to alpha feature gate * Update kube-dns to Version 1.14.10. Major changes: - Fix a bug in DNS resolution for externalName services and PTR records that need to query from upstream nameserver. * remove parallel * kubelet: add configuration to optionally enable server tls bootstrap * Move podsecuritypolicy registry to policy package. * Set kubemark default verbosity to 4 * Show deprecated kube-apiserver flags * Capture API call logs from kubemark apiserver * Autocalculate ALLOWED_NOTREADY_NODES based on NUM_NODES * Add ConnectionReset, InternalError, etc also as retryable API errors * Support groups (organizations) to be specified in client cert. * Fix garbled code in kubeadm output * add andyzhangx as Reviewer * fix devicePath update issue in Azure WaitForAttach func * Fix machineID getting for vmss nodes when using instance metadata * Make 'pod' package to use unified checkpointManager * Node-level Checkpointing manager * Fix use visible files creation for windows * Allow a test suite reusing framework to register namespaces to delete * Clean unused error type variable The function which invoked this variable was removed by https://github.com/kubernetes/kubernetes/pull/58725/ * Fix an issue in inter-pod affinity predicate that cause affinity to self being processed incorrectly * fix some bugs inside csi unit test TestAttacherMountDevice * Add test to ensure anti-affinity matches against all terms * kubeadm preflight: check socket path if defined otherwise check docker * Make x-kubernetes-print-column print handling opt-in * 1.10 CHANGELOG: Fix supported etcd version comparison with K8s v1.9 * Prevent virtual infinite loop in volume controller * Fix docker run flags and kubelet flags for containized kubelet: * Removed no-empty validation of nodeSelectorTerm.matchExpressions. * unhide deprecated Kubelet flags * update godeps to use latest pflag * Enforce not using newer kubeadm to upgrade older kubeadm * Adds migrations to the kubeadm upgrade phase config * update-bazel * Add comments, t.Parallel() * have fakeLoadbalancerService take lb type as argument * tests for EnsureLoadBalancer, EnsureLoadBalancerDeleted * refactor - create new apiService per test. encapsulate resource create/delete checks. * Add GCE-PD CSI Driver test to E2E test suite * Remove podpreset in local up cluster * Add ability to specify port for kubeadm `API.ControlPlaneEndpoint` * provision Kubelet config file for GCE * sarapprover: remove self node cert * Fix volume node affinity to OR node selector terms * root OWNERS: escape backslashes * Run hack/update-all.sh * Add --ipvs-exclude-cidrs flag to kube-proxy. * Update webhook client config docs regarding service ports * kubeadm: Make kube-proxy tolerate all taints * begin wiring printopts through complete commands * Fixing FULL_REGISTRY assignment * CSI - Apply fsGroup volume ownership when pv not readOnly * Volunteer for local-up-cluster related files * Include API calls in apiserver logs for tests * Test e2e prometheus addon * Add prometheus addon * Disable pod preemption by config * auto generated file * Fix ingress util handling of TLS * split up the component config into smaller config * split KubeControllerManagerConfiguration into fewer options struct * Node E2E: Remove the simple mount test * Addressed reviewer comments * Fix bug for headless services without ports * Fix failed e2e tests for dns configmap. * Move all create subcommands to its own subdirectory * use standard interface functions for printers * Use OWNERS filters to give approval to ixdy for Bazel build changes * Add msau42 to approvers for volume scheduling * cleanup resources created by run --rm * Update CHANGELOG-1.10.md for v1.10.1. * Remove clusterName flag, just use config file * enable token auth for kubelets in GCE * Fix duplicate comment in iptables rule for non-local public-port rule * Remove unnecessary code in ingress upgrade logic * Bump image in ingress downgrade test * avoid race condition in device manager and plugin startup/shutdown * local-up-cluster: fix kube-proxy featureGates configuration * local-up-cluster: warn about failing processes * local-up-cluster: avoid "No such process" messages when cleaning up * make mikedanese owner of CertRotation features * Update e2e test with private mount propagation * Fix PodStore to wait for being initialized * fix nsenter GetFileType issue * Fix parsing timestamp in test * Fix wrong usage of kubelet options * Add private mount propagation to API. * allow higher burst * Cluster Autoscaler 1.2.1 * fix nodeport FORWARD chain * fix kubeadm-731 * fixes failing job back off test * Ensure expected load balancer is selected for Azure * Improve performance of affinity/anti-affinity predicate * Bump etcd default server version to 3.2.18 * Moved sync pod on Node logic to func. * Add approver for pkg/controller/endpoint * Explicitly set etcd --snapshot-count to 10000 to match etcd 3.2 default * kazel: skip third_party/etcd.* * Increase CPU limit to 1000 millicores to support 100kb/s throughput. * Bump GLBC version and remove Unreleased tag from tests * godeps: remove github.com/kr/pty after #62360 * update bindata after #61817 * Refactor subpath reconstruction tests to use util test * Fix flaky crd e2e tests * Revert "Bugfix for erroneous upgrade needed messaging in kubernetes worker charm." * Remove hostNetwork and hostPID from nvidia-gpu-device-plugin manifest. * Add e2e test for forwarding PTR records to upstream nameserver. * optional field removed in test * kuberuntime: logs: reduce logging level on waitLogs msg * Set slave mount propagation for local provisioner * add keys to unkeyed literals * Remove the default clustername, and make it optional in api * Add --cluster-name to kubeadm * Update generated files. * PSP: move internal types from extensions to policy. * Update bazel BUILD files * Move the kubelet network package down to dockershim * Move hairpin mode logic to dockershim * Remove outdated network plugin code * autoscaler support for CoreDNS * hack/test-update-storage-objects.sh: don't build a binary that the script doesn't use. * kubeadm: surface external etcd preflight validation errors * Fix subnet cleanup logic when using IP-aliases with custom subnets * Revert "git: Use VolumeHost.GetExec() to execute stuff in volume plugins" * fix custom resource definition validation * Disable some newly added loadbalancer tests for large clusters * Updated Readme for Azure (OIDC) auth provider * add myself to apiserver owners * Generate bindata through make * Reorder makefile sections * Don't support `go build` any more. * Remove 'teststale' * Simplify static build, rely on go's cache * Set GOCACHE (1.10) as a subdir of GOPATH * kubelet: remove unused code * Generated build files * Add support for AWS charm * Add basic generator for apps/v1 deployment * pkg/kubeapiserver/options: update Bazel files * oidc authentication: Required claims support * gce: enable all apis when AllAlpha=true * export unstructured helper function nestedFieldNoCopy and add unit tests * Implemented truncating audit backend * Enable CloudKMS Plugin deployment. * Reimplement migrate-if-needed.sh in go * A test we always skip should not be a conformance test * CustomResources: in OpenAPI spec allow additionalProperties without properties * add statefulset scaling permission to admins, editors, and viewers * add UT test for rollout_pause.go file modified: pkg/kubectl/cmd/rollout/BUILD new file: pkg/kubectl/cmd/rollout/rollout_pause_test.go modified: build/visible_to/BUILD * Move check and import * local-up-cluster.sh: support preserving etcd optionally * Auto generated BUILD files. * Remove the use of storage class beta annotations in e2e tests. * should use time.Since instead of time.Now().Sub * add tests for GetFileType * fix incompatible file type checking on Windows * clean unused function modified: pkg/controller/volume/persistentvolume/scheduler_binder_test.go * Remove isNotDir error check * Create StorageClass for each volume binding test case * Fix umask to actually intended behavior. * Added CSI External Components ClusterRole to bootstrapped roles and removed creation from failing e2e test * Update ingress.go * Patch ingress upgrade test logic to take note of SNI support in next release. * Fixes kubeadm upgrade plan output * Addresses review comments * Updating kubemci remove-clusters e2e test to check for error in output string * Adding a release note in 1.10.0 for kubemci failure * Add ingress e2e test for multiple TLS (SNI) support * add myself for sig-cli related stuff as reviewer * remove deprecated ObjectMeta ListOptions DeleteOptions * Add note on upgrading cluster by kubeadm. * update network policy describe * Fix resize test for Regional Clusters * Fix restart nodes tests for Regional Clusters * Fix dns autoscaling test for Regional Clusters * not return 500 status code for insufficient quota * Re-generate clientsets * Let the caller handle the error * Fix some shadow declaration in cmd package * Extract validateNodeIP test to node status test file. * Remove the workaround of heapster panic * Added test to check object size * Create container name after dropped ":" and "@" both separately * fix wrong error type when formatting * fix grammar mistake * remove default fsypte in azure disk * add one placeholder for err in scheduelr.go * fix comments * update build and s/where/which * add ut * remove unnecessary TODO in test/e2e/network/service.go * spec.SchedulerName should be spec.schedulerName in kube-scheduler help * Handle partial group and resource responses consistently * fix graph test sorting * Add wildcard toleration to nvidia-gpu-device-plugin. * Add documentation around SOURCE_DATE_EPOCH * Fully resolve tmpdir in verify scripts, since it might be a symlink on macOS * Update memory required to build kubernetes on osx to 4.5G * Fix create job usage * Get namespace and selectors for attach and logs in a common function * use memory.force_empty before and after eviction tests * update PrintFlags#Complete to receive string template * add unreleased tag to http2 test * Remove rkt references in the codebase * Make priority rest mapper handle partial discovery results * Pass 2: k8s GCR vanity URL * wire printflags through set cmds * Remove need for server connections for dry-run create * remove IsAbs validation on local volume * Correct the returned message * Add support to ingest log entries to Stackdriver against new "k8s_container" and "k8s_node" resources. * Fix getting logs from daemonset * Fix IP-alias subnet creation logic * Make the test TestCRIListPodStats pass for Darwin and Windows * apiserver: cancel context on timeout in WithTimeoutForNonLongRunningRequests * Update bazel * kubectl: add JSON fallback codec to cope with more strict stock versioning codec * apimachinery duct tape: handle empty unstructured GV in versioning codec gracefully * apimachinery duct tape: in versioning codec avoid conversion roundtrip for same GVK * apimachinery: normal conversion code path for Unstructured in ConvertToVersion * Update generated files * admission/webhook: fix panic from empty response in mutating webhooks * admission/webhook: refactor to webhook = generic-webhook + source + dispatcher * Fix resize nodes tests for Regional Clusters * Capture kernel logs in example fluentd.conf * Use pause manifest image * accelerators: remove Accelerators from feature gates * Don't require release tars on kube-down * Use provided node object in volume binding predicate * Run hack/update-codegen.sh * code-gen: allow specifying custom resync periods for certain informer types and switch to functional option pattern for SharedInformerFactory * Update OWNERS labels for cluster-lifecycle and scheduling * begin wiring printflags through set cmds * move http2 test into ingress context. use helper method * Add http2 <-> https conversion test * use echoserver 1.10 * Change 'Mac OS X' to 'macOS' in build/README.md * Update CHANGELOG-1.8.md for v1.8.11. * Updating kubemci remove-clusters e2e test to use --force to remove from all clusters * When using custom network with IP-alias, use the former's subnet for the latter too * segregate job scaling from everything else * Update the stackdriver agents yaml to include a deployment for cluster level resources * fix typo that redefines variable and breaks code * fluentd-elasticsearc addon: allow graceful shutdown in fluentd-es image. * apiserver: enforce shared RequestContextMapper in delegation chain * Fix disruptive tests for GKE regional clusters * Fix kubectl bindata * Put nil back into switch * Wait longer in pod cleanup * Fix a bug in Deployment controller when comparing templates * fix generated bindata * Add test to verify preempt ignore * Moving test images under volumes-tester/ceph and volumes-tester/nfs * Fix daemon-set-controller bootstrap RBAC policy * juju: Set apiserver advertise-address to kube-control ingress address * Fixes restartKubelet in test/e2e_node failure. Looks like there is some recent change on how we start kubelet service in test_e2e_node. Fixes restartKubelet() to get right kubelet service name to cope with the change. * Fixing ip address leak in kubemci e2e tests by always cleaning up cloud resources * Adding a kubemci e2e test to verify that single and multicluster ingresses can exist together * Migrating test images to gcr.io/kubernetes-e2e-test-images * support merging multiple SMP into one patch * Update COS version in Kubernetes GCE default and test * Remove crassirostris from owners and reviewers * Fix when privileged is set. * Retry node pool deletion in autoscaling tests. * Configure the default channel to 1.10/stable * Update CHANGELOG-1.7.md for v1.7.16. * Remove GPU label during upgrade if needed * Support typed nils; test empty Unstructured is not mutated * removes job scaler * Add subnet-id annotation for openstack cloud provider * Remove check for items * Make UnstructuredContent return contents without mutating the source * remove unused function getEncodedPod in etcd_helper_test.go * check for commands in kubelet command line * fix typo * use common clientretry.RetryOnConflict * run update bazel * add test case for request context mapper * optimize requestcontext: use RWMutex and atomic.Value * deduplicate server startup code in tls integration test * make kube-apiserver ServerRunOptions setdefault and Validate before use * fixtodo:generate an event for a missed starting window * Adding a test for kubemci remove-clusters * Make FAIL_SWAP_ON warning message clear * Fixes incorrect atomic usage * Added downgrade notice * Cleanup CRD/CR confusion in webhook e2e tests * Adding an e2e test for verifying https-only annotation with kubemci * Update image for ingress downgrade test * Detach bug fix * Update GLBC manifest to v1.0.1 * Narrow interface consumed by scale client * oidc authentication: email_verified claim is not required for JWT validation * wire through humanreadable flags * Add support for arm64 to juju charms. * Don't quit without printing API latencies in density test if it failed * Introduce multimaster clusters support to e2e framework for GKE * add e2e case for crd webhook * apiserver's webhook admission use its own scheme * Ensure /etc/hosts has a header always - Fix conformance test * kubeadm: Introduce controllable timeout on join * Setup default cni dir correctly * add TestGeneration in customresource/etcd_test.go * check error when create failed and fix the conditional judgment * Add support for multiple certificates to targetproxy * Delete in-tree support for NVIDIA GPUs. * remove pvc node affinity update check since beta NodeAffinity is immutable * Fix go vet errors * Update gofmt for go1.10 * *: godep generated code * Update godep in vendor * Work on master and worker to accomodate the new kind of gpu support * Getting error from GetFirewallRule and checking it to fix multicluster ingress test * Update tests. * Update code for new SDK. * Support custom test configurations * Rev the Azure Go SDK. * Cleanup the use of ExternalID as it is deprecated * remove kube-apiserver option that is always force to true * Seperate timer durations for expectEvent and expectNoEvent * Add e2e test for CRD Watch * CRI: update documentation for container logpath * fix local volume issue on windows * default use kube-system namespace as policyConfigmapNamespace * fix localport open - ipvs part changes * fix localport open - iptables part changes * remove rktnetes related code * add unit test for new function AnnotationsNeedUpdate * fixtodo:rsDeepCopy only when sizeNeedsUpdate or annotationsNeedUpdate * Updated README for ipvs. * Use typed events client directly * Restore show-kind function when printing multiple kinds * init annotations if it is nil to fix kubemci e2e test failures * fix flag message about TokenRequest * update bazel * Stop() for Ticker to enable leak-free code * Update bazel * Use initTest for integration to start scheduler * Use feature gate in integration * remove usless arguments of startControllers * Make certificate approve/deny no-op if CSR is already approved * controller/endpoint: explict log msg when syncing error * fix ipvs esipp * Tolerate 406 mime-type errors attempting to load new openapi schema * Fix dockershim CreateContainer error handling. * Build files generated * Include volume count while doing balanced resource allocation * Bump godep version to v80 * Update to use go1.10.1 * Add Ignorable flag to extender * Avoid data races in unit tests * Updating multicluster test to ensure that controller only creates instance groups * Add volume spec to mountedPod in actual state of world * Add unit testcases for ensureExternalLoadBalancer to make sure it doesn't panic when errors raised. * Expose kubelet health checks using new prometheus endpoint * Move istio-injection label to default namespace * certs: only append locally discovered addresses when we got none from the cloudprovider * [e2e ingress-gce] Run preshared-cert and backside-reencryption tests with kubemci * Set leader-elect for kube-scheduler to true * Use old resource model in External Metrics API e2e tests * Add kawych to OWNERS of instrumentation e2e tests * some updates * Add support of Azure standard load balancer and public IP * Fix comment in CRI run_as_group. * remove unused code in securitycontext * automatic plugin discovery should trigger plugin init only for the relevant plugin * use handle DeletedFinalStateUnknown objects in function deleteNode * fix patch conflict detection in apiserver * Specify DHCP domain for hostname * In summary_test, make Docker cpu/memory checks optional if unavailable. * In summary_test, create a file outside the test volume too. * Add namespace name into e2e event verify * tools/clientcmd: Remove gopass import * Don't change GOPATH or PATH in a script lib * Remove kube::util::go_install_from_commit * Vendor kazel * Vendor gazelle * [kubeadm] Bump kube-dns to 1.14.9 * Return error in mount_unsupported for unsupported platforms * Update Istio addon to 0.6.0 and mirror images in gcr * Remove ActiveDeadlineSeconds from watch e2e test * Make systemd service name for kubelet use a timestamp in e2e-node tests. * Add e2e test for external metrics with Stackdriver * Update kube-dns to Version 1.14.9. Major changes: - Fix for kube-dns returns NXDOMAIN when not yet synced with apiserver. - Don't generate empty record for externalName service. - Add validation for upstreamNameserver port. - Update go version to 1.9.3. * fix flaky integration tests * Use range in loops; misc fixes * fix pr No. from 517326 to 57326 * Revert "Enable partial success in fluentd-gcp" * Add support for CNI on Windows Server 2016 RTM * set right Content-Type for configz * Ensure ControllerManagerExtraArgs take precedence over generated args * Support overriding the --node-cidr-mask-size arg passed to kube-controller-manager * correct CHANGELOG-1.10.md * Fix spurious whitespace in messages from sh2ju. * Deduplicate identical typecheck errors between platforms. * certs: exclude more nonsensical addresses from SANs * remove AlphaStorageNodeAffinityAnnotation const * Resources prefixed with *kubernetes.io/ should remain unscheduled if they are not exposed on the node. * Adding integration tests for statefulset * Fix 61854, skip for short tests * Fixing ingress controller daemonset on k8s < 1.9 * Add retry to AssertCleanup * Add e2e test for service session affinity. * Add ixdy, luxas, and mikedanese as OWNERS of hyperkube image * add udev to hyperkube and bump versions * Use relative path for creating socket files * Fixing whitespace issue in kubernetes-master * Allow curl --max-time to be configurable * make reapers tolerate 404s on scaling down * fix comment error * fix format and typo of NodeAllocatableCgroups * update bazel and gofmt * use filed NodeAffinity instead of annotation for scheduler * add test for some function * fix chinese syntax * Remove alpha annotation for volume node affinity * LoadBalancerStatus make use of generated deep copy method * Update CHANGELOG-1.10.md * avoid resource leak when both `--rm` and `--expose` are specified * Ensure -o yaml populates kind/apiVersion * kubectl: fix a panic when createGeneratedObject failed * when copy file from host to pod like this: 1.kubectl copy /tmp/test-file test-pod:/ 2.kubectl copy /tmp/test-file test-pod: example 1 will fail, example 2 will cause a panic. This patch fix bugs above. * Display extended resources in node allocated resources * Add CRI container log format support back. * fix cephfs fuse mount bug when use is not admin * Add pod deletion to subpath tests, and subpath as file with container restart * wire through template PrintFlags * remove beta annoucement for out-of-tree cloud provider feature * apiexstension-apiserver: test cr finalization and deletion * Update generated files. * Critical pods shouldn't be restricted to kube-system * Fix incorrect changelog - dynamic kubelet config is not beta * Use curl instead of wget to fetch the CNI tarball in e2e-node test * Remove references to rkt from shell scripts in cluster/ and hack/. * Update Godeps after removing rkt. * Remove rktnetes code * Split out the hostname when default dhcp_domain is used in nova.conf * node authorizer sets up access rules for dynamic config * Deprecate PSP-related types in extensions/v1beta1 in favor of policy/v1beta1. * Update bazel rules * pkg/util/pointer: Update `int` pointer functions * autogenerate files * fix RC to RS * Enable partial success in fluentd-gcp * Include original error in the error message. * pv controller clean code * check error when json.Unmarshal failed * fix changelog * Support multi-container pod for "kubectl logs" * add lb source test * ipvs loadbalance * delete some unused code * Marks 1.10 as the current release * Only check hash labels of non-adopted resources in integration tests * Stop checking hash labels of adopted resources in e2e tests * Remove unused Deployment util functions * Add in human curated release notes for 1.10 * Update CHANGELOG-1.10.md for v1.10.0. * Deployment to stop adding pod-template-hash labels/selector on adoption * Add support for setting a custom rate limiter in gce cloud provider * Skip volume unit tests that don't work on osx. * Unit tests for external load balancer. * removes custom scalers from kubectl * Update event-exporter image * Pod deletion can be contended, causing test failure * Increase service endpoint test timeout * Double container probe timeout * wire through custom-column print flags * wire through name/success print flags * Increase cpu/mem thresholds for c-m in density test * Revert "Increase fluentd rolling-upgrade maxUnavailable to large value" * validate authorization flags in BuiltInAuthorizationOptions.Validate * use status.Errorf instead of Deprecated func grpc.Errorf * Turn server-print on by default in kubectl * fix hostport checking for initContainers since they run in sequential order * clean up output-version * remove deprecated -a * Use inclien func to ensure unlock is executed * Implement verbosity feature for kubeadm init * Patch for #61632, add `/etc/sysconfig/kublet` and supporting wiring. * Added e2e test for local-volume provisioner that does not create PV for discovered non-bind-mounted filesystem. * Support completion for kubectl apply view/edit-last-applied * Add a sceneo UT test to TestMustRunAsOptions * Revert "Revert revert of equivalence class hash calculation in scheduler" * Adds e2e test for the VMware vpxd restart scenario * run hack/godep-restore.sh && hack/godep-save.sh * Update to gazelle 0.10.1 * Remove all upstream BUILD, BUILD.bazel, and WORKSPACE files from vendor/ * Fix #61363, Bounded retries for cloud allocator. * remove knownAlphaFeatures, only store input features. * Removing the always pull policy on this image. * update-godep-licenses.sh: various fixes and cleanups. * verify-cli-conventions.sh: use $(..) instead of `..`. * verify-godeps: change redirection order. * cluster/gce: fix checks for empty strings. * cluster/gce: fix shell return value comparison. * pkg/util/verify-util-pkg.sh: fix shell return value comparison. * Updated e2e lv-provisioner image to v2.1.0 * Add conflict detection feature to apply strategy * include node internal ip as additional information for kubectl * Clarify runtime behavior for symlinked and non-exist hostPath * escape literal percent sign when formatting * add kubectl config view --raw example help user use * Ensure cloudprovider.InstanceNotFound is reported when the VM is not found on Azure * Use RaceFreeFakeWatcher in ObjectTracker * Added chmod a+x for local SSD when disk is created with NODE_LOCAL_SSDS * Use O_PATH to avoid errors on Openat * Enable AESGCM encryption of secrets in etcd by default. * Cluster Autoscaler 1.2.0 * test: Disable ui dashboard test for gke * Performance tests and fix for IPAM controller. * e2e:Enable CSI tests * Update GCP fluentd configmap for GKE node journal logging * Remove validation of Alpha Feature Gates * meta/v1: check error from json.Unmarshal() * Do not consider pods being deleted in the same namespace for spreading purposes for service anti-affinity priority similar to selectorspread priority. * Fix minor error in the 1.10 release note. * wire through json/yaml print flags * update metrics to true like it is for kube-apiserver * Add @x13n to fluentd-gcp OWNERS * Replace "golang.org/x/net/context" with "context" * Increase fluentd rolling-upgrade maxUnavailable to large value * Fix ha_master test: ignore stderr from 'gcloud' (warnings etc) * Fix master replication util for gce clusters - populate cluster-location.txt * Remove max-pods param from config-test.sh * Add verification of supported service tags * move the const to the place it should be * cluster/update-storage-objects.sh: Fix to ignore deleted objects * Revert "add rolling update daemonset existing pod adoption integration test" * Fix `PodScheduled` bug for static pod. * Use inner volume name instead of outer volume name for subpath directory * Bump image for ingress downgrade test * Remove wildcard matching of no-op test webhooks * Increase API watch test timeout to avoid flakes. * Fix help text for cpu manager * Adding rramkumar1 and MrHohn as reviewer & approver to pkg/test * Support --dry-run in kubectl patch command. * Fix condition for using network unavailable taint in cloud_cidr_allocator * Fixing kubemci conformance test * Make advanced audit output version configurable. * Update CHANGELOG-1.9.md for v1.9.6. * Update staging godeps * Get rid of duplicate VerifyPodStartupLatency util in node density tests * Capture different parts of pod-startup latency as metrics * Use a random unused port for these e2e tests. Do not use port 80 to avoid conflict with other important pods that might be listening on 0.0.0.0:80. * add --from-file flag to docker-registry secret * Add a configuration step to make the test work on GKE * Clearing out the client-ca-file option in case it exists on the snap from long ago. * Autogenerated changes. * PSP: godoc fixes and improvements. * Use consistent bash variable syntax * Add support of specifying service tags for Azure cloud provider * Bump cfssl to be compatible with Go 1.10 * `--force` only takes effect when `--grace-period=0` * remove invalid resource replicationControllers * add myself for sig-cli reviewer * Print object should be updated which may cause potential bug. This patch fix this. modified: pkg/kubectl/cmd/create_clusterrole.go modified: pkg/kubectl/cmd/create_role.go * fix a error in return value modified: pkg/registry/rbac/validation/rule.go * etcd client add dial timeout * switch to scale subresource when describe hpa replicas * remove kube-apiserver unused storage-version flag * this patch do tow things: 1.add dry-run flag for create job subcommand 2.add cmd-util test for create job subcommand modified: pkg/kubectl/cmd/create_job.go modified: hack/make-rules/test-cmd-util.sh * Add UT Test to TestAttacherUnmountDevice * --show-all is inert in v1.11 * Change pods memory boundary. * Fix comments and some small fixes * Grammar and spelling update * Changing admission controller settings to match https://kubernetes.io/docs/admin/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use * Add COPYING file name as valid license file * hack/update-bazel.sh * ReplicaSet: Use apps/v1 RS in integration test. * ReplicaSet: Use apps/v1 RS in e2e test. * Add e2e test for Custom Metrics API with new Stackdriver resource model and External Metrics API. * disable DaemonSet scheduling feature for 1.10 * Generated changes * RoundTrip tests in the k8s/api repository * remove unused code * check etcd servers by a random order * Make `test-cmd` work with OS-X tooling * the err has checked in TearDownAt func/kind bug * Use function aws.Int64Value replace of deprecated function orZero * catch err when Watch testResource failed in func TestWatchCallNonNamespace * remove unused rls-ca-file flag * fix isnotfound * return error if get NodeStageSecret and NodePublishSecret failed * fix failed verify misspell err * Fix broken link * fix sorting taints in case the sorting keys are equal * Update CHANGELOG-1.10.md for v1.10.0-rc.1. * prevent conformance test failure in DIND scenario * Check apps/v1 StatefulSet available before starting its controller * ReplicaSet: Use apps/v1 RS in kube-controller-manager. * ReplicationController: Use apps/v1 ReplicaSet in conversion layer. * ReplicaSet: Use apps/v1 for RS controller. * remove todo suggesting to add the cronjob start time * remove todo to consider adding the cronjob name as a label * Fix job's backoff limit for restart policy OnFailure * Update Cluster Autoscaler version to 1.2.0-beta1 * Remove 'system' prefix from Metadata Agent rbac configuration * Stabilize openstack_test when running against real cloud * vendor: Update github.com/evanphx/json-patch * Add test for FailedGetExternalMetric * bump spf13/cobra(c439c4): Terminate the stripping of flags when -- is found * apiserver: add warning about not trusting authz of aggregator * Bump Heapster to v1.5.2 * add e2e test * Log rbac info into advanced audit event * add unit test for PVC conditions describer * fix kubectl apply error message * Suppress error message from grep by removing in the end as it is wrongly interpreted as a file. * cluster/gce/list-resources.sh: also list stackdriver logging sinks * provide easy methods for direct kubeconfig loading from bytes * Refactor disruptive tests to use more volume types * Add myself for sig-cli related stuff as approver * Use charm env in actions to get have charmhelpers available * Fix the 404 error * respect fstype in Windows for azure disk * update-translations.sh: use kube::util::ensure-temp-dir instead of static path. * build-ui.sh: use kube::util::ensure-temp-dir instead of static path. * remove outdated comments * fix sorting tolerations in case the keys are equal * remove DNS service from kubectl comformance test * add unit test for func parsePorts and validate * Instrument transformer.go with latency metrics. * Support new NODE_OS_DISTRIBUTION 'custom' on GCE * remove unused code authenticator/password/allow * fix a small error in description modified: pkg/kubectl/cmd/create_job.go * Add volumemetrics for ISCSI Plugin. * remove unnecessary TODOs in meta.go * Remove deprecated paramter "authorization-rbac-super-user" * return NodeStageVolume/NodePublishVolume error if operation failed * fix todo:add function getFailContainer to report which containers failed the pod * Document that endpoints is only plural in resource aliases * add rolling update daemonset existing pod adoption integration test * Pod comparer should count pods in scheduling queue * Fix error handling in gc e2e test * Node status be more verbose * Correct spelling * `GetExternalMetricReplicas` ignores unready pods * Add missing binaryData field to the ConfigMap Hash * pkg/printers: Support base64 decode in kubectl go-template * add Get/Set methods, mutex on instanceGroupAttrs. * move shared test cluster vars into method + type * test ensureInternalBackendService, ensureInternalBackendServiceGroups * expect no error when correct resources already exist. DeleteWrongResources -> ClearPreviousResources * test that deleting twice does not throw error * rename to _test.go, update-bazel, comments * Fix Issue #61123, call syncer.Update on add event. * test updateInternalLoadBalancer * hooks for updating healthchecks, firewalls, regional backendservices * test ensureInternalLoadBalancer and ensureInternalLoadBalancerDeleted * add hooks to add, remove, insert instances from instancegroups * isolate logic to be shared with internal lb tests into separate file * Fix strategy name in the error messages. * kubectl get psp: modify header to show PRIV instead of DATA for column with privileged flag. * Add Troubleshooting sections to Heapster and Metrics Server addons documentation * remove the outdated TODO * stop using AlwaysAdmit admission * remove unused func NewNamespacedNameFromString * remove hack/test-cmd.sh: make is the main build tool * pkg/api/unversioned related cleanup * fix little * remove check d >= 0 since go 1.8 is no longer supported on master branch * remove unused pkg unversioned * fix bug in apiserver.k8s.io install * don't do attach and deatch when volume status is error * remove dead code in kubelet * Simplify authenticator configuration initialization * fix validation for dev gcloud * Grant sig leads feature approval powers * Add e2e test for watch * distinguish which labels belong to resource * Roundtrip test helper for external types * resource-name not present in the URL for list,watch,deletecollection * add UT for validatePSPRunAsUser * build: fix building with spaces in directory names. * Added e2e test for local volume provisioner discovery of new mountpoints while running. * Disabled CheckNodeMemoryPressure and CheckNodeDiskPressure predicates if TaintNodesByCondition enabled. * cronjob_remove_getNextStartTimeAfter * Ensure reasons end up as comments in kubectl edit. * log enabled admission controller in order * Remove invalid comments in unit tests * IsNotFound should check ErrDefault404 and ErrUnexpectedResponseCode * `exec` away the shell for node-problem-detector * Add cache comparison for pods and pdbs * Scheduler cache comparer * Use inline func to fix deadlock * Improve PodSecurityPolicy group validate error message on out-of-range group IDs * fix for openstack member cleanup for multiple port cases * [advanced audit]fix comment about throttle burst * add kubectl api-resources command * move enum into function local * include file name in the error when visiting files * update bazel * userspace: move udp echo server to proxier_test.go * fix TODO: test more SetType * Improve debug curl command * add unit test for function FeatureGateSetFromMap and FeatureGateString * remove unused htpasswd * fix boilerplate checker of kubernetes/kubernetes * regenerated all files and remove all YEAR fields * add boilerplate.generatego.txt and let all code-generators use it * [PATCH] Use nodename as key * move openHostPorts and closeHostPorts into a common struct * Add an alias `update` for subcommand `enable` * Add test case for kubelet phase command * Auto generated docs. * Auto generated BUILD files. * Add phase command for dynamic kubelet configuration in kubeadm. * flag value bindings for kubectl apply commands * Admit BestEffort if it tolerates memory pressure. * add unit test for function ParseKindArg and ParseGroupKind * Support snapshotting a scheduler cache * client-go/util/cert go_library shouldn't depend on testdata * translate hack/e2e.go -v to --verbose-commands * Bugfix for erroneous upgrade needed messaging in kubernetes worker charm. * kubeadm: add better test coverage to token.go * `GetObjectMetricReplicas` ignores unready pods * kubeadm: add better test coverage to reset.go * Typo in IT translation * remove some not used imports from python codes * remove unused hack/lookup_pull.py * remove --service-account-private-key-file in v1.11 * kubeadm: Add writable parameter to *ExtraVolumes init config * pwittrock requested removal; add pwittrock team members to sig-cli-maintainers * refresh eviction interval periodically * Fix local cluster leaking memory. * Allow system critical priority classes in API validation * autogenerated files * subtract inactive_file from usage when setting memcg threshold * modified * move EtcdServersOverrides to EtcdOptions flags validate * Update Gluster image * Add grace period to volume_io tests * Add pod cleanup timeout * Fix Ceph RBD image * Fix data race in node lifecycle controller * apiserver clean code * Refactor controller-manager: turn Serve func into handlerchain builder * Do not create dangling legacy symlink if the new symlink to container logs does not exist. These dangling legacy symlink are removed by kube runtime gc, so it's better if we do not create them in the first place to avoid unnecessary work from kube runtime gc. * Suppress error message from grep when checking whether a subnet has a secondary range or not. * Remove potential sources of flakes for kms_transformation_test.go. * Change to fix logging * align cpu/mem for fluentd-gcp to fluentd-es plus cpu cap * pkg/volume/nfs/nfs.go: correct error messages. * add some uts in helpers for CRD * Fixe golints of equiv class * Update generated files * Use const in equiv class * [PATCH] Fix equiv. cache invalidation of Node condition. * ignore the loopbackdevice error, or the rbd volume will not get detached * fix non-nil ptr struct convert * fix references and golint failures * Update bootstrap policy fixture data * Remove example change to seperate repo * Update generated types * Fix golints in extender * Add preemption in scheduler extender * Auto-create system critical prioity classes at API server startup * kubeadm: add better test coverage to version.go * deep copy fake client actions to avoid accidental mutation * Instrument transformer.go with latency metrics. * Fix iSCSI image * fix some ineffectual assignments and misspellings for the package of 'pkg/kubelet/volumemanager' * Make sh2ju use awk instead of bc. * Indicate clusterrolebinding, rolebinding subjects are optional fields * fix the bad err * fix todo: use a better way to keep this label unique in the tests * Adding details to Conformance Tests using RFC 2119 standards. * kubelet: make --cni-bin-dir accept a comma-separated list of CNI plugin directories * kubenet: accept a list of CNI binary plugin paths * cni: convert "vendor" option to multiple plugin binary search paths * cni: clarify bin/conf directory variable names * delete unused variable * move persistentvolume to storage package * supplement for the fix of issue: https://github.com/kubernetes/kubernetes/issues/60366 * Update IPVS doc * log an error message when imageToRuntimeAPIImage failed * Add UT test to TestMax if equal scenario * remove docker-email from required args for "create secret docker-registry" * remove filtering by instance state * Fix: remove keyword defer in the loop * Regenerate files * fix persist typo * fix visible typo * clean up unused const in node_lifecycle_controller.go * flag value bindings for kubectl attach/convert/delete/drain/edit/exec commands * implement begin-port+offset port range parsing * fix glog.Info in volumn_host * remove redundant fake discovery code * Remove invalid TODOs in kubeadm constants. * flag value bindings for kubectl create/get/set commands * Remove val and ok in Storageos * Do not log unchanged message if a format other than 'name' is specified * make read from channel other than stdout non-fatal * Allow including both podSelector and namespaceSelector in a NetworkPolicyPeer * Factor out duplicated NetworkPolicy validation code * Add UT test in qos if pod has one container * remove deprecated initresource admission plugin * Upgraded to apps/v1 and removed rollback example * fix the typo error due to the comments * Support completion for kubectl cp * clean testprinter after commit: https://github.com/kubernetes/kubernetes/pull/60117 * Add validation of apiserver-advertise-address * kubectl: delete dead package * kubeadm/phases: small grammar improvements * sample-controller: generate UpdateStatus for Foo resource * sample-controller: add status subresource support * update bazel: adds new vclib test * vSphere: Minimize property collection via Finder * podtolerationrestriction: fix informer race in test * Log warning message when failed to remove rbd lock * Add jingax10 as both reviewer and approver in cluster/gce. * Add test for scheduler:VolumeCountConflicts * Adding metrics server * Change HAIRPIN_MODE back to hairpin-veth * fixes #54017, remove deprecated --mode flag * fixes document grammar * Disable image GC when high threshold is set to 100 * Disable ImageGC when high threshold is set to 0 * Include more information when multiple security groups are tagged * fix help message of kubeconfig * fix #40123: add a periodical polling to update pod config * optimize DefaultTolerationSeconds admission controller * Respond to reviewer comments * Add instructions on how to debug a crashed pod * more concise to merge the array * add description of pvc condition for kubectl describe command * fix incorrect logic in glusterfs.go#canSupport * remove method NewCronJobControllerFromClient * fix assert.Equal argument order * fix todo: use the ServiceTestJig replace of service * check taints when allocating CIDR for the cloud * fix spelling error in comment and log * clean one redundant comment of rbd.go * add-ut-for-legacyLogSymlink * add ut for kuberuntime-gc * sync code from copy destination * kubectl: make error with resource list prettier * Update glusterfs-storageclass.yaml * Replace error string with const * fix error message about DeleteOptions * code refactor * small nit in the annotations * new testcase helpers_linux.go * remove duplicated validation from podsecuritypolicy * Disable session affinity for internal kuberntes service * Fix bad column alignment when using custom columns from OpenAPI schema * reduce garbage_collector test cases running time * prevent the same path load multiple times * remove punctuation from the end of an error string * Fix typo, grammar, punctuations and formatting * Fix to avoid REST API calls at log level 2. * add validation in kubectl create if no file in directory ------------------------------------------------------------------- Thu Jul 19 11:42:17 UTC 2018 - jmassaguerpla@suse.com - Get the commit id from the obsinfo file. This way this is automatic and we don't have a regression of bsc#1065972 ------------------------------------------------------------------- Mon Jul 16 18:16:49 UTC 2018 - jmassaguerpla@suse.com - initial commit in order to split kubectl package (fix bsc#1097473 and bsc#1101010 and fate#325820) add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12