dilim/kubernetes
1
0 Fork 0
mirror of https://github.com/kubernetes/kubernetes.git synced 2026-11-06 21:38:04 +00:00
Code Issues Packages Projects Releases Wiki Activity
133,071 Commits 62 Branches 1,257 Tags
db63a581ca301281a28fca757dcd37fd4c8cf8bf
Commit Graph
137 Commits
Author SHA1 Message Date
ArkaSaha30 621482d68b update pause version to 3.10.1 
This commit will update the pause version to 3.10.1 as per thread: https://kubernetes.slack.com/archives/CJH2GBF7Y/p1741674313893029

Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
 2025-07-09 16:38:14 +05:30
Keita Mochizuki 07a275437f kubectl debug: Display a warning message that the debug container's capabilities may not work with a non-root user (#127696) 
* Add warning message about capabilities of debug container

* fix1

* fix2

* fix3
 2025-03-19 00:50:30 -07:00
David Eads 55ba8b2cbb add --subresource to kubectl apply 2024-10-02 13:28:29 -04:00
HirazawaUi c29a19610a add tests 2024-06-26 01:07:24 +08:00
Lubomir I. Ivanov 5e290ebc90 switch k/k to pause version 3.10 2024-05-24 10:02:51 +03:00
mochizuki875 b63fa1300c Add keep options 2024-05-16 17:26:20 +00:00
Davanum Srinivas 2431a964af Drop hack/verify-govet-levee 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2024-01-04 21:06:52 -05:00
Sascha Grunert db9fcfeed2 Move cri/streaming to k8s.io/kubelet staging repository 
Container runtimes like CRI-O and containerd reuse the code by copying
it from Kubernetes. To have a single source of truth for the streaming
server we now move the already isolated implementation to the
k8s.io/kubelet staging repository. This way runtimes can re-use the code
without copying the parts.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-06-05 08:08:18 +02:00
Keita Mochizuki 0813904404 Fix: Restricted profile comply with PSS (#117543) 
* restricted profile comply with PSA v1.27

* add test case

* Reflect review comments

* Reflect review comments 2

* Reflect review comments 3
 2023-05-24 04:16:49 -07:00
Mark Rossetti 534f052a8d Updating pause image refernces to 3.9 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-11-14 10:24:54 -08:00
Sascha Grunert f9707064cf Remove CRI v1alpha2 
After the removal of dockershim we can finally also drop support for CRI
v1alpha2.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2022-11-03 09:13:43 +01:00
Mark Rossetti 40f3e624a6 Switching everything to use pause:3.8 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-07-21 14:53:15 -07:00
Davanum Srinivas 50bea1dad8 Move from k8s.gcr.io to registry.k8s.io 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-05-31 10:16:53 -04:00
Davanum Srinivas f7ad09c447 Switch to pause 3.7 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-03-29 15:36:38 -04:00
Kevin Delgado fe3772890f add server-side validation support to kubectl 2022-03-26 03:45:13 +00:00
Kubernetes Prow Robot 19935de5a9 Merge pull request #107410 from margocrawf/master 
Ensure static certs in kubeconfig override exec plugin
 2022-03-08 11:34:21 -08:00
Margo Crawford f015fd66ce Check whether static cert is already configured in UpdateTransportConfig 
- Also update test-cmd.sh to pass a signing ca to the kube controller
  manager, so CSRs work properly in integration tests.

Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-03-07 13:54:32 -08:00
Kubernetes Prow Robot a47c65929a Merge pull request #107810 from zlabjp/levee-v1-secret 
Add v1.Secret to go-flow-levee analysis targets
 2022-02-15 14:19:18 -08:00
Eddie Zaneski 040d575e9f Update sig-cli OWNERS 
Signed-off-by: Eddie Zaneski <eddiezane@gmail.com>
 2022-02-14 10:55:35 -07:00
Takashi Kusumi 3b9aeb0267 Add v1.Secret to go-flow-levee analysis targets 2022-01-27 11:59:35 +09:00
Arda Güçlü 43d8b3459b Add manually invalidate cache documentation into delete 
When CRDs are deleted, discovery local cache is not invalidated.
This brings about `resource not found` error when new CRD with same name is created
with different fields(ie. changing scope from cluster-wide to namespaced).
Because this already deleted CRD still stays in serverresources.json and kubectl tries to use it.

This local cached files have 10 minutes TTL. After deletion, if user waits 10 minutes,
files will be expired and deleted and there will be no errors. However, 10 minutes is a long time
and cache needs to be invalidated after deletion occurs.

This PR adds a document into delete command by noting that there might be a need to invalidate discovery
cache when CRD is deleted. In addition to that this PR adds a test to catch this behavior.
 2022-01-26 09:01:46 +03:00
Davanum Srinivas 9405e9b55e Check in OWNERS modified by update-yamlfmt.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-12-09 21:31:26 -05:00
Claudiu Belu 18936d4785 updates pause image references 
The pause:3.6 image has been published.

Also updates older / incorrect references.
 2021-08-29 21:50:05 -07:00
Caleb WoodbineandClaudiu Belu bbb368b701 Update e2e test images url 
Removes any reference from the registry gcr.io/kubernetes-e2e-test-images in
kubernetes/kubernetes, replacing it with k8s.gcr.io/kubernetes-e2e-test-images.
In some cases, the images had to be updated since a few things have changed since
their original implementation, most notably being the fact that some of the images
have been centralized into the agnhost image.

Co-Authored-By: Claudiu Belu <cbelu@cloudbasesolutions.com>
 2021-07-27 22:01:43 -07:00
Michaël Lévesque-Dion a94aa0ea9a Update version of go-flow-levee for verify-govet-levee check. 2021-06-08 12:02:46 -04:00
Chok Yip Lau e43e9696cc Fixed sort-by not sorting Resources as expected 2021-05-25 21:37:52 -04:00
Sascha Grunert b167fc24d7 Update pause image to v3.5 
Update dependencies and the test images to use pause 3.5. We also
provide a changelog entry for the new container image version.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2021-05-25 09:04:46 +02:00
David Eads ad0cff7b61 add --all-namespaces to kubectl annotate,label 2021-04-26 13:04:19 -04:00
David Eads 2fb8420756 update test-cmd to avoid removed beta APIs 2021-04-19 10:06:37 -04:00
Kubernetes Prow Robot e9115a041c Merge pull request #97168 from PurelyApplied/levee-config-owned-by-sig-security 
Transfer ownership of logging analysis configuration to sig-security.
 2021-03-09 16:07:17 -08:00
pacoxu 0c152cbbbe update pause to 3.4.1 for tests(e2e) 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-02-05 21:32:53 +08:00
pacoxu 8811275ea4 update pause image 3.4.1 for hack testdatas only 
Signed-off-by: pacoxu <paco.xu@daocloud.io>
 2021-02-01 15:09:25 +08:00
Patrick Rhomberg 42fb39f116 Use full aliases. Add sig/security label. 2020-12-09 23:43:48 +00:00
Patrick Rhomberg 3559d752e3 Transfer ownership of logging analysis configuration to sig-security. 2020-12-09 19:15:46 +00:00
Patrick Rhomberg a3d483e965 Update cross-referencing for PRs. 2020-12-04 22:42:18 +00:00
Patrick Rhomberg 66c54ffc43 Refer to KEP rather than directly to documentation link. 2020-12-04 22:39:36 +00:00
Patrick Rhomberg 6488e89f96 Update config for go-flow-levee analysis 
* Remove \b boundary for sinks; Unicode backspace \b != regexp boundary \b.
* Specify those source type fields that have not yet been tagged.
* Add exclusions for current false-positive set.
 2020-12-01 23:35:32 +00:00
Patrick Rhomberg 90b85bf3fa KEP-1933: add static analysis target to hack/ 
* Add static analysis to hack/verify-govet-levee.sh for defense against
accidental logging of credentials.
* Add binary dependency to hack/tools/tools.go and associated go.mod, go.sum.
* Add analysis configuration to hack/testdata/levee/
 2020-11-03 20:03:26 +00:00
Anders Eknert b423216a3b Presence of bearer token should cancel exec action 
If a bearer token is present in a request, the exec credential plugin should accept that as the chosen method of authentication. Judging by an [earlier comment in exec.go](https://github.com/kubernetes/kubernetes/blob/c18bc7e9f7a27d7d197053d98c52896e1dc3bb3e/staging/src/k8s.io/client-go/plugin/pkg/client/auth/exec/exec.go#L217), this was already intended. This would however not work since UpdateTransportConfig would set the GetCert callback which would then get called by the transport, triggering the exec plugin action even with a token present in the request. See linked issue for further details.

See #87369 for further details.

Signed-off-by: Anders Eknert <anders.eknert@bisnode.com>
 2020-07-02 12:12:32 +02:00
zhouya0 bbf41448f6 Fix kubectl create secret docker-registry 2020-05-15 12:14:03 +08:00
Sean R. Sullivan 748ad74245 Even with build error, kubectl apply should apply all valid resources 2020-04-04 15:48:31 -07:00
Sean R. Sullivan 1083c0fe05 Adds integration test for apply failures when applying multiple resources 2020-03-26 22:33:04 -07:00
Benjamin Elder 53da837872 bump pause to 3.2 in hack/ 2020-02-14 14:03:19 -08:00
Tim Allclair 9d3670f358 Ensure testing credentials are labeled as such 2020-02-04 10:36:05 -08:00
Antoine Pelisse 38c5f318c9 kubectl-diff: Test return code on failure and changes 2020-01-21 15:34:22 -08:00
Ted Yu 88e2f8e04f Prune should respect namespace 2019-09-25 16:43:08 -07:00
Jordan Liggitt 6ca80760fd Switch test manifests to apps/v1, remove beta workloads calls 2019-06-22 13:58:07 -07:00
Kubernetes Prow Robot 81e6407393 Merge pull request #74140 from Liujingfang1/kflag 
add -k flag in cli-runtime and kubectl to process kustomization directories
 2019-02-26 19:40:16 -08:00
Jingfang Liu beacc87ebf add cmdline tests for -k 2019-02-25 16:31:03 -08:00
Xiang Dai 36065c6dd7 delete all duplicate empty blanks 
Signed-off-by: Xiang Dai <764524258@qq.com>
 2019-02-23 10:28:04 +08:00