bbbe4f3c8e
Merge pull request #99494 from enj/enj/i/not_after_ttl_hint
...
csr: add expirationSeconds field to control cert lifetime
Kubernetes-commit: 659c7e709f3b7f5f2a25e456525cd8747f2e68cc
2021-07-02 10:09:40 +00:00
13bb30b011
Merge pull request #103176 from CaoDonghui123/updatemod
...
Update golang.org/x/net
Kubernetes-commit: c14017b270d21e6a7e79c0b8872a580f43a67220
2021-07-01 06:11:58 +00:00
d1a492018b
Merge pull request #102508 from kolyshkin/runc-1.0
...
Update runc to 1.0.0
Kubernetes-commit: 4748bb04b61f8717641913a0ff3a183ad28e64c9
2021-07-01 06:11:56 +00:00
5b2f02f6dc
csr: add expirationSeconds field to control cert lifetime
...
This change updates the CSR API to add a new, optional field called
expirationSeconds. This field is a request to the signer for the
maximum duration the client wishes the cert to have. The signer is
free to ignore this request based on its own internal policy. The
signers built-in to KCM will honor this field if it is not set to a
value greater than --cluster-signing-duration. The minimum allowed
value for this field is 600 seconds (ten minutes).
This change will help enforce safer durations for certificates in
the Kube ecosystem and will help related projects such as
cert-manager with their migration to the Kube CSR API.
Future enhancements may update the Kubelet to take advantage of this
field when it is configured in a way that can tolerate shorter
certificate lifespans with regular rotation.
Signed-off-by: Monis Khan <mok@vmware.com>
Kubernetes-commit: cd91e59f7c351fce47c064a5162c2cb79075159c
2021-06-25 22:08:10 -04:00
bd554d8117
Update golang.org/x/net to v0.0.0-20210520170846-37e1c6afe023
...
Kubernetes-commit: c1d5a3a99e120281c618d6573d7b424138dfb5a9
2021-06-25 15:25:52 +08:00
686f142f9b
vendor: bump runc to 1.0.0 pre
...
This is to check if runc 1.0.0 (to be released shortly) works with k8s.
The commands used were (roughly):
hack/pin-dependency.sh github.com/opencontainers/runc v1.0.0
hack/lint-dependencies.sh
# Follow its recommendations.
hack/pin-dependency.sh github.com/cilium/ebpf v0.6.1
hack/pin-dependency.sh github.com/opencontainers/selinux v1.8.2
hack/pin-dependency.sh github.com/sirupsen/logrus v1.8.1
# Recheck.
hack/lint-dependencies.sh
GO111MODULE=on go mod edit -dropreplace github.com/willf/bitset
hack/update-vendor.sh
# Recheck.
hack/lint-dependencies.sh
hack/update-internal-modules.sh
# Recheck.
hack/lint-dependencies.sh
[v2: rebased, updated runc 3a0234e1fe2e82 -> 2f8e8e9d977500]
[v3: testing master + runc pr 3019]
[v4: updated to 93a01cd4d0b7a0f08a]
[v5: updated to f093cca13d3cf8a484]
[v6: rebased]
[v7: updated to runc v1.0.0]
[v8: rebased]
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
Kubernetes-commit: 4e7cf5413d5de4648bf923b34874d8e0d431e98a
2021-06-06 20:13:57 -07:00
f07f584e4c
Merge pull request #103318 from jpbetz/fix-102749
...
Bump SMD to v4.1.2 to pick up #102749 fix
Kubernetes-commit: 0dad7d1c47c41f232b21cdd5c21be6683e545e9d
2021-06-30 22:13:10 +00:00
c2ff241a75
Bump SMD to v4.1.2 to pick up #102749 fix
...
Kubernetes-commit: b790cf388ce1fce140c80bb0f7f9669288408b7a
2021-06-29 19:33:00 -07:00
d7458fb03f
Merge pull request #103126 from jdnurme/konn-21-update
...
Updated to use konnectivity client v0.0.21, and implemented placehold…
Kubernetes-commit: 2d1026c664f8612ede24cf654b8fe4fd074bcf84
2021-06-27 04:06:59 +00:00
20061d8246
Updated to use konnectivity client v0.0.21, and implemented placeholder context
...
Kubernetes-commit: 21fd224ebdb17fbaafbb73a36a18aafcab6e4efa
2021-06-23 19:29:14 +00:00
7656923914
Merge pull request #94942 from dashpole/apiserver_opentelemetry
...
Apiserver tracing
Kubernetes-commit: 12eb461acfb2279524d07f5ed95dd20e2e472939
2021-06-25 20:08:29 +00:00
052dd8c466
Add distributed tracing to the apiserver using OpenTelemetry
...
Kubernetes-commit: 79550ed40c67a70534c1cb697e1fb7e7dbf96335
2021-06-25 05:20:16 -07:00
4f68ff36e0
Merge pull request #102883 from liggitt/etcd-embed
...
Simplify embedded etcd server
Kubernetes-commit: 902e507824068fe1f6cb7044a6b599dc3c285b7a
2021-06-24 12:07:23 +00:00
b592a0a8d2
Drop etcd tests dependency
...
Kubernetes-commit: 730c21d386ac5a44f2e8a1d9c1d26a3d007bc007
2021-06-18 14:00:03 -04:00
dfcefaa427
Merge pull request #103010 from BenTheElder/ansi-386-overflow
...
update Azure/go-ansiterm to v0.0.0-20210617225240-d185dfc1b5a1
Kubernetes-commit: 2ff70c77c98fdd3230ade470b319309f34909215
2021-06-19 07:44:09 +00:00
cce3c0abea
update Azure/go-ansiterm to v0.0.0-20210617225240-d185dfc1b5a1
...
fixes constant overflow on windows/386
Kubernetes-commit: 35e9d97f3e02a8757e5cc698142037c5a95487d9
2021-06-18 15:11:48 -07:00
c1478bcdbe
Merge pull request #102783 from mcbenjemaa/update-dep-gnostic
...
Update gnostic to the latest version
Kubernetes-commit: e9c6ec639cc5ca93a3f6e01ff4215f6b68d6142d
2021-06-18 19:44:35 +00:00
603bd5aa68
update vendor
...
Kubernetes-commit: 9571b1f884480879de54d5ff993ca336d61874b2
2021-06-17 17:24:43 +01:00
b80f83b1a4
Update github.com/googleapis/gnostic to v0.5.5 and updating transitive dependencies go-cmp, protobuf,, to adapt the latest gnostic release which cosists of [Update protos for Go protoc plugin compatibility]
...
Kubernetes-commit: c691386fef727a5494e3ab02b99196d8f6418241
2021-06-13 17:25:55 +01:00
5c389da20e
Merge pull request #102441 from feiskyer/update-vendor
...
Update Azure Go SDK to v55.0.0
Kubernetes-commit: 122d6352452f3f4a2d52bdb8b114b6e0ec49358e
2021-06-17 02:29:02 +00:00
50b8c196a8
Update Azure Go SDK to v55.0.0
...
Kubernetes-commit: b98824c55d95b8b3a1cf79adac44154bd1702e46
2021-06-01 01:30:43 +00:00
d479bff6b1
Merge pull request #102897 from liggitt/etcd-ga
...
Update to etcd v3.5.0 client
Kubernetes-commit: f5cf74ddff818236b8435370afa41a51f23dd532
2021-06-16 06:28:06 +00:00
8d9e673025
Update to etcd v3.5.0 client
...
Kubernetes-commit: 6448181d95c8d6486ba8e9a2a92b4a8172ca1f8f
2021-06-15 19:01:32 -04:00
b3fe11e7b9
Merge pull request #100488 from liggitt/protobuf
...
update etcd, grpc, protobuf dependencies
Kubernetes-commit: 3a47ddccdfb09e73758cebb2690ad2a014f67e23
2021-06-15 22:27:32 +00:00
f6293b81cb
Update protobuf,grpc,etcd dependencies
...
1. Updated etcd/protobuf/grpc dependencies:
echo "
hack/pin-dependency.sh github.com/golang/protobuf latest
hack/pin-dependency.sh google.golang.org/protobuf latest
hack/pin-dependency.sh go.etcd.io/etcd/api/v3 v3.5.0-rc.0
hack/pin-dependency.sh go.etcd.io/etcd/client/v3 v3.5.0-rc.0
hack/pin-dependency.sh go.etcd.io/etcd/client/pkg/v3 v3.5.0-rc.0
hack/pin-dependency.sh go.etcd.io/etcd/pkg/v3 v3.5.0-rc.0
hack/pin-dependency.sh go.etcd.io/etcd/server/v3 v3.5.0-rc.0
hack/pin-dependency.sh go.etcd.io/etcd/tests/v3 v3.5.0-rc.0
hack/pin-dependency.sh google.golang.org/grpc latest
" | bash
2. Linted transitive dependencies until versions are clean:
hack/lint-dependencies.sh | grep " hack/pin-dependency.sh" | bash
3. Linted dependencies until dropped versions are clean:
hack/lint-dependencies.sh | grep "dropreplace" | bash
4. Updated vendor and internal modules:
hack/update-vendor.sh
hack/update-internal-modules.sh
Repeated steps 2-4 until clean
Kubernetes-commit: 5cfc39ef5e90002080ff1f2bc4b7ade674c225f1
2021-06-15 10:06:09 -04:00
059a2c2494
Merge pull request #102825 from n4j/bug/KubectlWindowsCrash
...
Fix - Winterm issue on Windows 8.1 in kubectl exec
Kubernetes-commit: 0665fb2e5a9a9fa449ef6acc16275b857da74087
2021-06-15 06:21:42 +00:00
4f71386b7a
Merge pull request #102814 from cheftako/master
...
Update K/K to use ANP v0.0.20
Kubernetes-commit: b766721332da82f8a3eaa7dd3f131713d291f288
2021-06-15 06:21:41 +00:00
bcd1ea6cfb
Fix - Winterm issue on Windows 8.1 in kubectl exec
...
Kubernetes-commit: 60ab908119fa3ae1492c6303dd68c01c5470aa5f
2021-06-12 08:26:47 +05:30
2beec4f3a1
Upgraded konnectivity-client to v0.0.20
...
./hack/pin-dependency.sh sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.0.20
./hack/update-vendor.sh
Kubernetes-commit: 106f416873c58f06b504ef7a05c79a3f493e4ead
2021-06-11 08:59:32 -07:00
f469b062ce
sync: remove Godeps/
2021-06-09 13:35:46 +00:00
f640366ce9
Merge pull request #102454 from wzshiming/clean/remove-godeps
...
Remove Godeps
Kubernetes-commit: 09a9e612947bb2d940224245890048d3e60d4c5d
2021-06-09 00:13:52 +00:00
2f802ddba9
Merge pull request #90368 from serathius/remove-legacy-metrics
...
Remove legacy metrics client from podautoscaler
Kubernetes-commit: e6a8bc9fbe9ce428f6b97630d931ba2b6aa70a91
2021-06-05 20:08:11 +00:00
a7375dac34
Merge pull request #102467 from pacoxu/json-patch-5.5.0
...
upgrade json-patch to v4.11.0
Kubernetes-commit: 81b9789eaa7bc067f417b5e74d5695dd6dd88a46
2021-06-04 12:14:20 +00:00
0fc4495b98
Merge pull request #102059 from jsafrane/fix-consistentread
...
Retry reading /proc/mounts when unable to get a consistent read
Kubernetes-commit: 38783bfeb70f5d25262d195a779fbcfb72c73633
2021-06-04 08:13:41 +00:00
5f733fed25
upgrade gopkg.in/evanphx/json-patch to v4.11.0
...
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Kubernetes-commit: 6e0650e3e132a5145a83b287fb90a30b5581bcac
2021-06-04 13:15:09 +08:00
f80d9a3b09
Merge pull request #102561 from dims/updating-to-prometheus/common-latest-version
...
Updating to prometheus/common v0.26.0
Kubernetes-commit: 96436fa0e7594aa22eafcd56fcbae759965c1df7
2021-06-03 16:09:59 +00:00
78a7be6bc3
make lint-dependencies happy!
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 08ad7114d3f6557d5a0f1f76b544560bc9174a93
2021-06-03 07:05:21 -04:00
60b2d54631
Updating to prometheus/common v0.26.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 29def9ff6abadc2456de956787adea21aabb3e98
2021-06-03 06:47:21 -04:00
e6a61ec109
Merge pull request #102409 from dims/bump-golang.org/x/text-to-v0.3.6
...
Bump golang.org/x/text to v0.3.6
Kubernetes-commit: e0cb30170415cc122226360f722126930b451f88
2021-06-01 20:15:33 +00:00
d6d8056af4
Remove Godeps
...
Kubernetes-commit: 1431eab36d3e0468482aa234651ab878022a49e1
2021-05-31 17:44:41 +08:00
afa931bdd2
Bump golang.org/x/text to v0.3.6
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: f924906173740342253bbae16fab695709d711ee
2021-05-28 11:07:25 -04:00
ef2c9760e9
Merge pull request #102332 from pacoxu/klog-2.9.0
...
Bump klog to 2.9.0, fixing byte array display
Kubernetes-commit: 3726309bf9d59bccf28b9e22e1573764a5dd3fb5
2021-05-26 15:53:24 +00:00
898fb342c8
upgrade klog to v2.9.0
...
Signed-off-by: pacoxu <paco.xu@daocloud.io>
Kubernetes-commit: 876174125bc0e0dda67fbe3d7ec7c4eb41ac5f69
2021-05-26 19:16:06 +08:00
a7790e0c38
Merge pull request #102213 from cheftako/grpc-client
...
Upgrade konnectivity-client for GRPC connection fixes
Kubernetes-commit: 646acf096e61dcda9cc20c9acbbe2969741e07c3
2021-05-25 07:17:01 +00:00
c4eb74b666
Upgrade konnectivity-client for GRPC connection fixes
...
The v0.0.19 Konnectivity client includes several
significant fixes to prevent the GRPC tunnel between
the KAS and the APIServer Network Proxy from becoming
blocked/wedged.
Importantly it picks up the fix for kubernetes-sigs/apiserver-network-proxy#167 .
We believe this will also fix many of the failures currently seen on
https://testgrid.k8s.io/sig-api-machinery-network-proxy#ci-kubernetes-e2e-gci-gce-network-proxy-grpc&width=5 .
Kubernetes-commit: 13ab65d3567ea6a0f2ab3ba0f2aea46aed6b9bcf
2021-05-24 14:53:30 -07:00
8e8e3a390c
Bump k8s.io/utils
...
To get io/ConsistentRead updates.
Kubernetes-commit: 1d16f934b9410496238b74b0664bd466f64277b3
2021-05-24 12:14:36 +02:00
32a360b561
Merge pull request #102147 from kolyshkin/update-runc-rc94-take-II
...
vendor: bump runc to rc95
Kubernetes-commit: 5de1a754c8f875cacfa49b9c5ed63c6c35b7e9e5
2021-05-21 07:45:08 +00:00
019ff976dd
vendor: bump runc to rc95
...
runc rc95 contains a fix for CVE-2021-30465.
runc rc94 provides fixes and improvements.
One notable change is cgroup manager's Set now accept Resources rather
than Cgroup (see https://github.com/opencontainers/runc/pull/2906 ).
Modify the code accordingly.
Also update runc dependencies (as hinted by hack/lint-depdendencies.sh):
github.com/cilium/ebpf v0.5.0
github.com/containerd/console v1.0.2
github.com/coreos/go-systemd/v22 v22.3.1
github.com/godbus/dbus/v5 v5.0.4
github.com/moby/sys/mountinfo v0.4.1
golang.org/x/sys v0.0.0-20210426230700-d19ff857e887
github.com/google/go-cmp v0.5.4
github.com/kr/pretty v0.2.1
github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
Kubernetes-commit: f3cdfc488e88714f2fe695e35ad0d3f8e45ddc25
2021-05-19 09:59:29 -07:00
33fe8d9791
Merge pull request #102111 from dims/update-testing-related-deps-for-1.22
...
Update testing related dependencies (ginkgo|gomega|testify)
Kubernetes-commit: bacab40a9f9380e968406e91483bdc81f1b41bb0
2021-05-19 19:41:36 +00:00
56eee95f53
update testing related dependencies
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Kubernetes-commit: 0803ea49b95579195fc55b4a64a6e859932dba7f
2021-05-18 19:31:47 -04:00
Kubernetes Publisher