-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[release-1.23] Backports for 2022-10 #6228
[release-1.23] Backports for 2022-10 #6228
Conversation
Signed-off-by: Derek Nola <[email protected]>
Signed-off-by: Brad Davidson <[email protected]>
... and drop legacy ClusterID support. Signed-off-by: Brad Davidson <[email protected]>
Signed-off-by: Brad Davidson <[email protected]>
225e296
to
987e3d6
Compare
Signed-off-by: Brad Davidson <[email protected]>
If CCM and ServiceLB are both disabled, don't run the cloud-controller-manager at all; this should provide the same CLI flag behavior as previous releases, and not create problems when users disable the CCM but still want ServiceLB. Signed-off-by: Brad Davidson <[email protected]>
Signed-off-by: Brad Davidson <[email protected]>
Signed-off-by: Brad Davidson <[email protected]>
Signed-off-by: Brad Davidson <[email protected]>
We should be reading from the hijacked bufio.ReaderWriter instead of directly from the net.Conn. There is a race condition where the underlying http handler may consume bytes from the hijacked request stream, if it comes in the same packet as the CONNECT header. These bytes are left in the buffered reader, which we were not using. This was causing us to occasionally drop a few bytes from the start of the tunneled connection's client data stream. Signed-off-by: Brad Davidson <[email protected]>
The kubelet port can be overridden by users; we shouldn't assume its always 10250 Signed-off-by: Brad Davidson <[email protected]>
CA cert will never be equal to the serving-kube-apiserver cert so it seems like a copy-paste error. Signed-off-by: Vladimir Pouzanov <[email protected]>
Signed-off-by: Brad Davidson <[email protected]>
Replace ETCD-JOIN-STABLE-SECOND with ETCD-JOIN-LATEST-FIRST. We don't support joining down-level servers to existing clusters, as the new down-level server will try to deploy older versions of the packaged manifests. Signed-off-by: Brad Davidson <[email protected]>
987e3d6
to
31eb9a7
Compare
Codecov ReportBase: 9.77% // Head: 9.78% // Increases project coverage by
Additional details and impacted files@@ Coverage Diff @@
## release-1.23 #6228 +/- ##
===============================================
+ Coverage 9.77% 9.78% +0.01%
===============================================
Files 136 138 +2
Lines 10007 10073 +66
===============================================
+ Hits 978 986 +8
- Misses 8830 8885 +55
- Partials 199 202 +3
Flags with carried forward coverage won't be shown. Click here to find out more.
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. ☔ View full report at Codecov. |
Taint the first node so that the helm job doesn't run on it. In a real cluster the helm job would eventually succeed once all the servers were upgraded and had the new chart tarball. Signed-off-by: Brad Davidson <[email protected]>
84beabd
to
c157be3
Compare
Drone is not currently syncing PRs, but other tests are green and a local CI run succeeds. Merging. |
Proposed Changes
error dialing backend
errors in apiserver network proxy #6216Types of Changes
Backports
Verification
See linked issues
Testing
Linked Issues
User-Facing Change
Further Comments