1. 28 Apr, 2016 22 commits
  2. 27 Apr, 2016 18 commits
    • k8s-merge-robot's avatar
      Merge pull request #24210 from cjcullen/abacAuth · 7a09fbcf
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Switch to ABAC authorization from AllowAll
      
      Switch from AllowAll to ABAC. All existing identities (that are created by deployment scripts) are given full permissions through ABAC. Manually created identities will need policies added to the `policy.jsonl` file on the master.
      7a09fbcf
    • k8s-merge-robot's avatar
      Merge pull request #24108 from mikedanese/kube-addon-cleanup · 9fd05474
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      don't source the kube-env in addon-manager
      
      This was added in https://github.com/kubernetes/kubernetes/commit/2feb658ed7a6a9f9726b04ac4c890b5dee14c0a8 which became unused after #23603 but wasn't removed
      9fd05474
    • Andy Zheng's avatar
      Add support for running clusters on GCI · 93929c38
      Andy Zheng authored
      93929c38
    • k8s-merge-robot's avatar
      Merge pull request #24774 from XiaoningDing/federation-apiserver-version · d89b6bc6
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Move install of version handler to genericapiserver
      
      This is to satisfy kbuectl verification
      
      Please review only the last commit.
      
      #19313 #23653
      @nikhiljindal @quinton-hoole, @deepak-vij, @XiaoningDing, @alfred-huangjian @mfanjie @huangyuqi @colhom
      d89b6bc6
    • gmarek's avatar
    • gmarek's avatar
    • CJ Cullen's avatar
      Use ABAC authz instead of AllowAll. · 32537395
      CJ Cullen authored
      32537395
    • k8s-merge-robot's avatar
      Merge pull request #24567 from yifan-gu/post_start_hook · 4c7abddc
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      rkt: Add post-start hook support.
      
      This adds a poll-and-timeout procedure after the pod is
      started, to make sure the post-start hooks execute when the
      container is actually running.
      
      This is a temporal workaround for implementing post-hooks,
      a long term solution is to use lifecycle event to trigger
      those hooks, see https://github.com/kubernetes/kubernetes/issues/23084.
      
      Also this fixes a bug of getting container ID for a non-running
      container when running pre-stop hook.
      
      
      cc @sjpotter @euank @kubernetes/sig-node 
      4c7abddc
    • k8s-merge-robot's avatar
      Merge pull request #24609 from andyzheng0831/debug · 4d5f6872
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Trusty: Add debug supports for docker and kubelet
      
      This PR adds debug support in two aspects: (1) For a test cluster, docker command will have "--debug" flag. Recently we noticed that this is very helpful in debug e2e test failures; (2) The kubelet command line will be put in /etc/default/kubelet. If a developer wants to test kubelet flags without recreating a cluster, she/he only needs to revise this file and then run "initctl restart kubelet". In addition, this PR fixes a couple of small things like comments and alignment.
      
      Test result:
      (1) Manually verified changing /etc/default/kubelet and run "initctl restart kubelet";
      (2) Verified docker command line flag "--debug";
      (3) e2e on pure trusty cluster and hybrid cluster all passed.
      
      @roberthbailey @dchen1107 @zmerlynn please review it.
      
      cc/ @yujuhong @fabioy @wonderfly FYI.
      4d5f6872
    • k8s-merge-robot's avatar
      Merge pull request #24559 from derekwaynecarr/eviction_flags · 3a19ad79
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Add kubelet flags for eviction threshold configuration
      
      This PR just adds the flags for kubelet eviction and the associated generated code.
      
      I am happy to tweak text, but we can also do that later at this point in the release.
      
      Since this causes codegen, I wanted to stage this first.
      
      /cc @vishh @kubernetes/sig-node 
      3a19ad79
    • jianhuiz's avatar
      fdfe42ea
    • k8s-merge-robot's avatar
      Merge pull request #24545 from swagiaal/rename-cleaner-tuple · 7e430f54
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Rename cleanerTuple to cleaner
      
      Rename cleanerTuple to cleaner.
      This is a follow up to address: https://github.com/kubernetes/kubernetes/pull/19503#discussion_r49538769
      
      @saad-ali 
      7e430f54
    • k8s-merge-robot's avatar
      Merge pull request #24541 from marun/net-e2e-remove-flaky · 759f11bd
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Remove flaky tag from e2e net granular
      
      The tests are running reliably on every origin merge and can be verified
      similarly reliable on kube.
      
      As per @jayunit100 on slack/sig-testing:
      
          ./cluster/kubectl.sh 2>&1 | grep Passed | grep Failed ; done
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
          SUCCESS! -- 2 Passed | 0 Failed | 0 Pending | 275 Skipped PASS
      759f11bd
    • k8s-merge-robot's avatar
      Merge pull request #24345 from gmarek/enable_gatherer · 9db40b6b
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Enable resource gatherer in Kubemark tests
      
      Depends on #24291
      
      Ref. #23820
      
      cc @jlowdermilk 
      9db40b6b
    • k8s-merge-robot's avatar
      Merge pull request #24532 from rsc/master · 28bc4b32
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      apiserver latency reductions
      
      Combined effect of these two commits on the latency observed by the 1000-node kubemark benchmark:
      
      ```
      name                               old ms/op  new ms/op   delta
      LIST_nodes_p50                      127 ±16%    121 ± 9%   -4.58%  (p=0.000 n=29+27)
      LIST_nodes_p90                      326 ±12%    266 ±12%  -18.48%  (p=0.000 n=29+27)
      LIST_nodes_p99                      453 ±11%    400 ±14%  -11.79%  (p=0.000 n=29+28)
      LIST_replicationcontrollers_p50    29.4 ±49%   26.2 ±54%     ~     (p=0.085 n=30+29)
      LIST_replicationcontrollers_p90    83.0 ±78%   68.6 ±59%  -17.33%  (p=0.013 n=30+28)
      LIST_replicationcontrollers_p99     216 ±43%    177 ±49%  -17.68%  (p=0.000 n=29+29)
      DELETE_pods_p50                    24.5 ±14%   24.3 ±13%     ~     (p=0.562 n=30+29)
      DELETE_pods_p90                    30.7 ± 1%   30.7 ± 1%   -0.30%  (p=0.011 n=29+29)
      DELETE_pods_p99                    77.2 ±34%   54.2 ±23%  -29.76%  (p=0.000 n=30+27)
      PUT_replicationcontrollers_p50     5.86 ±26%   5.94 ±32%     ~     (p=0.734 n=29+29)
      PUT_replicationcontrollers_p90     15.8 ± 7%   15.5 ± 6%   -2.06%  (p=0.010 n=29+29)
      PUT_replicationcontrollers_p99     57.8 ±35%   39.5 ±55%  -31.60%  (p=0.000 n=29+29)
      PUT_nodes_p50                      14.9 ± 2%   14.8 ± 2%   -0.68%  (p=0.012 n=30+27)
      PUT_nodes_p90                      16.5 ± 1%   16.3 ± 2%   -0.90%  (p=0.000 n=27+28)
      PUT_nodes_p99                      57.9 ±47%   41.3 ±35%  -28.61%  (p=0.000 n=30+28)
      POST_replicationcontrollers_p50    6.35 ±29%   6.34 ±20%     ~     (p=0.944 n=30+28)
      POST_replicationcontrollers_p90    15.4 ± 5%   15.0 ± 5%   -2.18%  (p=0.001 n=29+29)
      POST_replicationcontrollers_p99    52.2 ±71%   32.9 ±46%  -36.99%  (p=0.000 n=29+27)
      POST_pods_p50                      8.99 ±13%   8.95 ±16%     ~     (p=0.903 n=30+29)
      POST_pods_p90                      16.2 ± 4%   16.1 ± 4%     ~     (p=0.287 n=29+29)
      POST_pods_p99                      30.9 ±21%   26.4 ±12%  -14.73%  (p=0.000 n=28+28)
      POST_bindings_p50                  9.34 ±12%   8.92 ±15%   -4.54%  (p=0.013 n=30+28)
      POST_bindings_p90                  16.6 ± 1%   16.5 ± 3%   -0.73%  (p=0.017 n=28+29)
      POST_bindings_p99                  23.5 ± 9%   21.1 ± 4%  -10.09%  (p=0.000 n=27+28)
      PUT_pods_p50                       10.8 ±11%   10.2 ± 5%   -5.47%  (p=0.000 n=30+27)
      PUT_pods_p90                       16.1 ± 1%   16.0 ± 1%   -0.64%  (p=0.000 n=29+28)
      PUT_pods_p99                       23.4 ± 9%   20.9 ± 9%  -10.93%  (p=0.000 n=28+27)
      DELETE_replicationcontrollers_p50  2.42 ±16%   2.50 ±13%     ~     (p=0.054 n=29+28)
      DELETE_replicationcontrollers_p90  11.5 ±12%   11.8 ±13%     ~     (p=0.141 n=30+28)
      DELETE_replicationcontrollers_p99  19.5 ±21%   19.1 ±21%     ~     (p=0.397 n=29+29)
      GET_nodes_p50                      0.77 ±10%   0.76 ±10%     ~     (p=0.317 n=28+28)
      GET_nodes_p90                      1.20 ±16%   1.14 ±24%   -4.66%  (p=0.036 n=28+29)
      GET_nodes_p99                      11.4 ±48%    7.5 ±46%  -34.28%  (p=0.000 n=28+29)
      GET_replicationcontrollers_p50     0.74 ±17%   0.73 ±17%     ~     (p=0.222 n=30+28)
      GET_replicationcontrollers_p90     1.04 ±25%   1.01 ±27%     ~     (p=0.231 n=30+29)
      GET_replicationcontrollers_p99     12.1 ±81%  10.0 ±145%     ~     (p=0.063 n=28+29)
      GET_pods_p50                       0.78 ±12%   0.77 ±10%     ~     (p=0.178 n=30+28)
      GET_pods_p90                       1.06 ±19%   1.02 ±19%     ~     (p=0.120 n=29+28)
      GET_pods_p99                       3.92 ±43%   2.45 ±38%  -37.55%  (p=0.000 n=27+25)
      LIST_services_p50                  0.20 ±13%   0.20 ±16%     ~     (p=0.854 n=28+29)
      LIST_services_p90                  0.28 ±15%   0.27 ±14%     ~     (p=0.219 n=29+28)
      LIST_services_p99                  0.49 ±20%   0.47 ±24%     ~     (p=0.140 n=29+29)
      LIST_endpoints_p50                 0.19 ±14%   0.19 ±15%     ~     (p=0.709 n=29+29)
      LIST_endpoints_p90                 0.26 ±16%   0.26 ±13%     ~     (p=0.274 n=29+28)
      LIST_endpoints_p99                 0.46 ±24%   0.44 ±21%     ~     (p=0.111 n=29+29)
      LIST_horizontalpodautoscalers_p50  0.16 ±15%   0.15 ±13%     ~     (p=0.253 n=30+27)
      LIST_horizontalpodautoscalers_p90  0.22 ±24%   0.21 ±16%     ~     (p=0.152 n=30+28)
      LIST_horizontalpodautoscalers_p99  0.31 ±33%   0.31 ±38%     ~     (p=0.817 n=28+29)
      LIST_daemonsets_p50                0.16 ±20%   0.15 ±11%     ~     (p=0.135 n=30+27)
      LIST_daemonsets_p90                0.22 ±18%   0.21 ±25%     ~     (p=0.135 n=29+28)
      LIST_daemonsets_p99                0.29 ±28%   0.29 ±32%     ~     (p=0.606 n=28+28)
      LIST_jobs_p50                      0.16 ±16%   0.15 ±12%     ~     (p=0.375 n=29+28)
      LIST_jobs_p90                      0.22 ±18%   0.21 ±16%     ~     (p=0.090 n=29+26)
      LIST_jobs_p99                      0.31 ±28%   0.28 ±35%  -10.29%  (p=0.005 n=29+27)
      LIST_deployments_p50               0.15 ±16%   0.15 ±13%     ~     (p=0.565 n=29+28)
      LIST_deployments_p90               0.22 ±22%   0.21 ±19%     ~     (p=0.107 n=30+28)
      LIST_deployments_p99               0.31 ±27%   0.29 ±34%     ~     (p=0.068 n=29+28)
      LIST_namespaces_p50                0.21 ±25%   0.21 ±26%     ~     (p=0.768 n=29+27)
      LIST_namespaces_p90                0.28 ±29%   0.26 ±25%     ~     (p=0.101 n=30+28)
      LIST_namespaces_p99                0.30 ±48%   0.29 ±42%     ~     (p=0.339 n=30+29)
      LIST_replicasets_p50               0.15 ±18%   0.15 ±16%     ~     (p=0.612 n=30+28)
      LIST_replicasets_p90               0.22 ±19%   0.21 ±18%   -5.13%  (p=0.011 n=28+27)
      LIST_replicasets_p99               0.31 ±39%   0.28 ±29%     ~     (p=0.066 n=29+28)
      LIST_persistentvolumes_p50         0.16 ±23%   0.15 ±21%     ~     (p=0.124 n=30+29)
      LIST_persistentvolumes_p90         0.21 ±23%   0.20 ±23%     ~     (p=0.092 n=30+25)
      LIST_persistentvolumes_p99         0.21 ±24%   0.20 ±23%     ~     (p=0.053 n=30+25)
      LIST_resourcequotas_p50            0.16 ±12%   0.16 ±13%     ~     (p=0.175 n=27+28)
      LIST_resourcequotas_p90            0.20 ±22%   0.20 ±24%     ~     (p=0.388 n=30+28)
      LIST_resourcequotas_p99            0.22 ±24%   0.22 ±23%     ~     (p=0.575 n=30+28)
      LIST_persistentvolumeclaims_p50    0.15 ±21%   0.15 ±29%     ~     (p=0.079 n=30+28)
      LIST_persistentvolumeclaims_p90    0.19 ±26%   0.18 ±34%     ~     (p=0.446 n=29+29)
      LIST_persistentvolumeclaims_p99    0.19 ±26%   0.18 ±34%     ~     (p=0.446 n=29+29)
      LIST_pods_p50                      68.0 ±16%   56.3 ± 9%  -17.19%  (p=0.000 n=29+28)
      LIST_pods_p90                       119 ±19%     93 ± 8%  -21.88%  (p=0.000 n=28+28)
      LIST_pods_p99                       230 ±18%    202 ±14%  -12.13%  (p=0.000 n=27+28)
      ```
      28bc4b32
    • k8s-merge-robot's avatar
      Merge pull request #24525 from wojtek-t/scheduler_traces · c7d1637a
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Add traces to scheduler
      
      This will simplify performance debugging of scheduler.
      
      @davidopp @hongchaodeng @xiang90 
      c7d1637a
    • k8s-merge-robot's avatar
      Merge pull request #24514 from derekwaynecarr/pod_quota_fix · 32121e34
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Quota ignores pod compute resources on updates
      
      Scenario:
      
      1. define a quota Q that tracks memory and cpu
      2. create pod P that uses memory=100Mi, cpu=100m
      3. update pod P to use memory=50Mi,cpu=10m
      
      Expected Results:
      Step 3 should fail with validation error.
      Quota Q should not have changed.
      
      Actual Results:
      Step 3 fails validation, but quota Q is decremented to have memory usage down 50Mi and cpu usage down 40m.  This is because the quota was getting updated even though the pod was going to fail validation.
      
      Fix:
      Quota should only support modifying pod compute resources when pods themselves support modifying their compute resources.
      
      This also fixes https://github.com/kubernetes/kubernetes/issues/24352
      
      /cc @smarterclayton - this is what we discussed.
      
      fyi: @kubernetes/rh-cluster-infra 
      32121e34
    • k8s-merge-robot's avatar
      Merge pull request #24851 from pmorie/master-test-loc · a8d9a8da
      k8s-merge-robot authored
      Automatic merge from submit-queue
      
      Reduce LOC in third party controller test
      
      Extract method refactor to make this test a little more readable
      
      @kubernetes/sig-api-machinery 
      a8d9a8da