dev to alpha

cluster/config-defaults.yaml

@@ -200,7 +200,7 @@ teapot_admission_controller_validate_application_label: "false"
 {{end}}
 
 {{if eq .Environment "e2e"}}
-teapot_admission_controller_ignore_namespaces: "^kube-system|(e2e-tests-(downward-api|kubectl|projected|statefulset|pod-network)-.*)$"
+teapot_admission_controller_ignore_namespaces: "^kube-system|((downward-api|kubectl|projected|statefulset|pod-network)-.*)$"
 {{else}}
 teapot_admission_controller_ignore_namespaces: "^kube-system$"
 {{end}}
@@ -219,8 +219,7 @@ cluster_dns: "coredns"
 coredns_log_svc_names: "true"
 
 coreos_image: "ami-0d1579b60bb706fb7" # Container Linux 2079.6.0 (HVM, eu-central-1)
-kuberuntu_image: {{ amiID "zalando-ubuntu-kubernetes-production-v1.13.7-master-51" "861068367966" }}
-
+kuberuntu_image: {{ amiID "zalando-ubuntu-kubernetes-production-v1.14.5-master-51" "861068367966" }}
 
 # Feature toggle to allow gradual decommissioning of ingress-template-controller
 enable_ingress_template_controller: "false"

cluster/manifests/01-visibility/priority-logging.yaml

@@ -1,4 +1,4 @@
-apiVersion: scheduling.k8s.io/v1alpha1
+apiVersion: scheduling.k8s.io/v1
 kind: PriorityClass
 metadata:
  name: visibility-logging

cluster/manifests/01-visibility/priority.yaml

@@ -1,4 +1,4 @@
-apiVersion: scheduling.k8s.io/v1alpha1
+apiVersion: scheduling.k8s.io/v1
 kind: PriorityClass
 metadata:
  name: visibility-zmon

cluster/manifests/emergency-access-service/ingress.yaml

@@ -1,5 +1,5 @@
 {{ if eq .Environment "production" }}
-apiVersion: extensions/v1beta1
+apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
  name: emergency-access-service

cluster/manifests/kube-cluster-autoscaler/autoscaling-priority-class.yaml

@@ -1,4 +1,4 @@
-apiVersion: scheduling.k8s.io/v1alpha1
+apiVersion: scheduling.k8s.io/v1
 kind: PriorityClass
 metadata:
  name: autoscaling-buffer

cluster/manifests/kube-proxy/daemonset.yaml

@@ -5,7 +5,7 @@ metadata:
  namespace: kube-system
  labels:
  application: kube-proxy
- version: v1.13.7
+ version: v1.14.4
 spec:
  selector:
  matchLabels:
@@ -17,7 +17,7 @@ spec:
  name: kube-proxy
  labels:
  application: kube-proxy
- version: v1.13.7
+ version: v1.14.4
  annotations:
  config/hash: {{"configmap.yaml" | manifestHash}}
  spec:
@@ -31,7 +31,7 @@ spec:
  hostNetwork: true
  containers:
  - name: kube-proxy
- image: registry.opensource.zalan.do/teapot/kube-proxy:v1.13.7
+ image: registry.opensource.zalan.do/teapot/kube-proxy:v1.14.4
  args:
  - --hostname-override=$(HOSTNAME_OVERRIDE)
  - --config=/config/kube-proxy.yaml

cluster/node-pools/master-default/userdata.clc.yaml

@@ -180,7 +180,7 @@ systemd:
  After=docker.service dockercfg.service meta-data-iptables.service private-ipv4.service
 
  [Service]
- Environment=KUBELET_IMAGE_TAG=v1.13.7
+ Environment=KUBELET_IMAGE_TAG=v1.14.4
  Environment=KUBELET_IMAGE_ARGS=--exec=/kubelet
  Environment=KUBELET_IMAGE_URL=docker://registry.opensource.zalan.do/teapot/kubelet
  Environment="RKT_RUN_ARGS=--insecure-options=image \
@@ -361,7 +361,7 @@ storage:
  namespace: kube-system
  labels:
  application: kube-apiserver
- version: v1.13.7
+ version: v1.14.4
  annotations:
  kubernetes-log-watcher/scalyr-parser: |
  [{"container": "webhook", "parser": "json-structured-log"}]
@@ -373,7 +373,7 @@ storage:
  hostNetwork: true
  containers:
  - name: kube-apiserver
- image: registry.opensource.zalan.do/teapot/kube-apiserver:v1.13.7
+ image: registry.opensource.zalan.do/teapot/kube-apiserver:v1.14.4
  args:
  - --apiserver-count={{ .Values.apiserver_count }}
  - --bind-address=0.0.0.0
@@ -711,15 +711,15 @@ storage:
  namespace: kube-system
  labels:
  application: kube-controller-manager
- version: v1.13.7
+ version: v1.14.4
  spec:
  priorityClassName: system-node-critical
  tolerations:
  - key: node-role.kubernetes.io/master
  effect: NoSchedule
  containers:
  - name: kube-controller-manager
- image: registry.opensource.zalan.do/teapot/kube-controller-manager:v1.13.7
+ image: registry.opensource.zalan.do/teapot/kube-controller-manager:v1.14.4
  args:
  - --kubeconfig=/etc/kubernetes/controller-kubeconfig
  - --leader-elect=true
@@ -780,7 +780,7 @@ storage:
  namespace: kube-system
  labels:
  application: kube-scheduler
- version: v1.13.7
+ version: v1.14.4
  spec:
  priorityClassName: system-node-critical
  tolerations:
@@ -789,7 +789,7 @@ storage:
  hostNetwork: true
  containers:
  - name: kube-scheduler
- image: registry.opensource.zalan.do/teapot/kube-scheduler:v1.13.7
+ image: registry.opensource.zalan.do/teapot/kube-scheduler:v1.14.4
  args:
  - --master=http://127.0.0.1:8080
  - --leader-elect=true
@@ -1248,7 +1248,7 @@ storage:
  --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
  --mount volume=dns,target=/etc/resolv.conf \
  --net=host \
- docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+ docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
  --exec=/kubectl -- \
  --kubeconfig=/etc/kubernetes/kubeconfig \
  label node "$(hostname)" \
@@ -1261,7 +1261,7 @@ storage:
  --net=host \
  --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
  --mount volume=dns,target=/etc/resolv.conf \
- docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+ docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
  --exec=/kubectl -- \
  --kubeconfig=/etc/kubernetes/kubeconfig \
  drain "$(hostname)" \

cluster/node-pools/worker-default/userdata.clc.yaml

@@ -179,7 +179,7 @@ systemd:
  After=docker.service dockercfg.service meta-data-iptables.service private-ipv4.service collect-instance-metadata.service
 
  [Service]
- Environment=KUBELET_IMAGE_TAG=v1.13.7
+ Environment=KUBELET_IMAGE_TAG=v1.14.4
  Environment=KUBELET_IMAGE_ARGS=--exec=/kubelet
  Environment=KUBELET_IMAGE_URL=docker://registry.opensource.zalan.do/teapot/kubelet
  Environment="RKT_RUN_ARGS=--insecure-options=image \
@@ -488,7 +488,7 @@ storage:
  --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
  --mount volume=dns,target=/etc/resolv.conf \
  --net=host \
- docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+ docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
  --exec=/kubectl -- \
  --kubeconfig=/etc/kubernetes/kubeconfig \
  label node "$(hostname)" \
@@ -501,7 +501,7 @@ storage:
  --net=host \
  --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
  --mount volume=dns,target=/etc/resolv.conf \
- docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+ docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
  --exec=/kubectl -- \
  --kubeconfig=/etc/kubernetes/kubeconfig \
  drain "$(hostname)" \

test/e2e/Makefile

@@ -2,7 +2,7 @@
 
 BINARY ?= kubernetes-on-aws-e2e
 VERSION ?= $(shell git describe --tags --always --dirty)
-KUBE_VERSION ?= v1.13.5
+KUBE_VERSION ?= v1.14.4
 IMAGE ?= registry-write.opensource.zalan.do/teapot/$(BINARY)
 TAG ?= $(VERSION)
 DOCKERFILE ?= Dockerfile

test/e2e/README.md

@@ -86,11 +86,11 @@ scratch and test the Kubernetes type Foo.
  defer func() {
  By("deleting the foo)
  defer GinkgoRecover()
- err2 := cs.Core().Foo(ns).Delete(foo.Name, metav1.NewDeleteOptions(0))
+ err2 := cs.CoreV1().Foo(ns).Delete(foo.Name, metav1.NewDeleteOptions(0))
  Expect(err2).NotTo(HaveOccurred())
  }()
  // creates the Ingress Object
- _, err := cs.Core().Foo(ns).Create(foo)
+ _, err := cs.CoreV1().Foo(ns).Create(foo)
  Expect(err).NotTo(HaveOccurred())
  })
  })
@@ -114,10 +114,10 @@ scratch and test the Kubernetes type Foo.
  defer func() {
  By("deleting the pod")
  defer GinkgoRecover()
- err2 := cs.Core().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
+ err2 := cs.CoreV1().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
  Expect(err2).NotTo(HaveOccurred())
  }()
- _, err = cs.Core().Pods(ns).Create(pod)
+ _, err = cs.CoreV1().Pods(ns).Create(pod)
  Expect(err).NotTo(HaveOccurred())
  framework.ExpectNoError(f.WaitForPodRunning(pod.Name))
 ```
@@ -138,10 +138,10 @@ scratch and test the Kubernetes type Foo.
  defer func() {
  By("deleting the service")
  defer GinkgoRecover()
- err2 := cs.Core().Services(ns).Delete(service.Name, metav1.NewDeleteOptions(0))
+ err2 := cs.CoreV1().Services(ns).Delete(service.Name, metav1.NewDeleteOptions(0))
  Expect(err2).NotTo(HaveOccurred())
  }()
- _, err := cs.Core().Services(ns).Create(service)
+ _, err := cs.CoreV1().Services(ns).Create(service)
  Expect(err).NotTo(HaveOccurred())
 ```
 
@@ -164,14 +164,14 @@ Create Kubernetes ingress object:
  defer func() {
  By("deleting the ingress")
  defer GinkgoRecover()
- err2 := cs.Extensions().Ingresses(ns).Delete(ing.Name, metav1.NewDeleteOptions(0))
+ err2 := cs.ExtensionsV1beta1().Ingresses(ns).Delete(ing.Name, metav1.NewDeleteOptions(0))
  Expect(err2).NotTo(HaveOccurred())
  }()
- ingressCreate, err := cs.Extensions().Ingresses(ns).Create(ing)
+ ingressCreate, err := cs.ExtensionsV1beta1().Ingresses(ns).Create(ing)
  Expect(err).NotTo(HaveOccurred())
  addr, err := jig.WaitForIngressAddress(cs, ns, ingressCreate.Name, 3*time.Minute)
  Expect(err).NotTo(HaveOccurred())
- ingress, err := cs.Extensions().Ingresses(ns).Get(ing.Name, metav1.GetOptions{ResourceVersion: "0"})
+ ingress, err := cs.ExtensionsV1beta1().Ingresses(ns).Get(ing.Name, metav1.GetOptions{ResourceVersion: "0"})
  Expect(err).NotTo(HaveOccurred())
  By(fmt.Sprintf("ALB endpoint from ingress status: %s", ingress.Status.LoadBalancer.Ingress[0].Hostname))
 ```

test/e2e/apiserver.go

@@ -23,7 +23,9 @@ import (
 
  . "github.com/onsi/ginkgo"
  . "github.com/onsi/gomega"
+
  appsv1 "k8s.io/api/apps/v1"
+ metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
  "k8s.io/apimachinery/pkg/labels"
  "k8s.io/client-go/kubernetes"
  "k8s.io/kubernetes/test/e2e/framework"
@@ -48,8 +50,13 @@ var _ = framework.KubeDescribe("API Server webhook tests", func() {
  By("Creating deployment " + nameprefix + " in namespace " + ns)
 
  deployment := createImagePolicyWebhookTestDeployment(nameprefix+"-", ns, tag, podname, replicas)
- _, err := cs.ExtensionsV1beta1().Deployments(ns).Create(deployment)
- defer deleteDeployment(cs, ns, deployment)
+ _, err := cs.AppsV1().Deployments(ns).Create(deployment)
+ defer func() {
+ By(fmt.Sprintf("Delete a compliant deployment: %s", deployment.Name))
+ defer GinkgoRecover()
+ err := cs.AppsV1().Deployments(ns).Delete(deployment.Name, metav1.NewDeleteOptions(0))
+ Expect(err).NotTo(HaveOccurred())
+ }()
  Expect(err).NotTo(HaveOccurred())
  label := map[string]string{
  "app": podname,
@@ -72,9 +79,14 @@ var _ = framework.KubeDescribe("API Server webhook tests", func() {
  By("Creating deployment " + nameprefix + " in namespace " + ns)
 
  deployment := createImagePolicyWebhookTestDeployment(nameprefix+"-", ns, tag, podname, replicas)
- _, err := cs.ExtensionsV1beta1().Deployments(ns).Create(deployment)
+ _, err := cs.AppsV1().Deployments(ns).Create(deployment)
  Expect(err).NotTo(HaveOccurred())
- defer deleteDeployment(cs, ns, deployment)
+ defer func() {
+ By(fmt.Sprintf("Delete a compliant deployment: %s", deployment.Name))
+ defer GinkgoRecover()
+ err := cs.AppsV1().Deployments(ns).Delete(deployment.Name, metav1.NewDeleteOptions(0))
+ Expect(err).NotTo(HaveOccurred())
+ }()
  err = framework.WaitForDeploymentWithCondition(cs, ns, deployment.Name, "FailedCreate", appsv1.DeploymentReplicaFailure)
  Expect(err).NotTo(HaveOccurred())
  })

test/e2e/audit.go

@@ -118,10 +118,10 @@ func expectEvents(f *framework.Framework, expectedEvents []utils.AuditEvent) {
  missingReport, err := utils.CheckAuditLines(stream, expectedEvents, auditv1.SchemeGroupVersion)
  if err != nil {
  framework.Logf("Failed to observe audit events: %v", err)
- } else if len(missingReport) > 0 {
+ } else if len(missingReport.MissingEvents) > 0 {
  framework.Logf("Events %#v not found!", missingReport)
  }
- return len(missingReport) == 0, nil
+ return len(missingReport.MissingEvents) == 0, nil
  })
  framework.ExpectNoError(err, "after %v failed to observe audit events", pollingTimeout)
 }

test/e2e/external_dns.go

@@ -50,26 +50,26 @@ var _ = framework.KubeDescribe("External DNS creation", func() {
 
  By("Creating service " + serviceName + " in namespace " + ns)
  defer func() {
- err := cs.Core().Services(ns).Delete(serviceName, nil)
+ err := cs.CoreV1().Services(ns).Delete(serviceName, nil)
  Expect(err).NotTo(HaveOccurred())
  }()
 
  hostName := fmt.Sprintf("%s-%d.%s", serviceName, time.Now().UTC().Unix(), E2EHostedZone())
  service := createServiceTypeLoadbalancer(serviceName, hostName, labels, port)
 
- _, err := cs.Core().Services(ns).Create(service)
+ _, err := cs.CoreV1().Services(ns).Create(service)
  Expect(err).NotTo(HaveOccurred())
 
  By("Submitting the pod to kubernetes")
  pod := createNginxPod(nameprefix, ns, labels, port)
  defer func() {
  By("deleting the pod")
  defer GinkgoRecover()
- err2 := cs.Core().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
+ err2 := cs.CoreV1().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
  Expect(err2).NotTo(HaveOccurred())
  }()
 
- _, err = cs.Core().Pods(ns).Create(pod)
+ _, err = cs.CoreV1().Pods(ns).Create(pod)
  Expect(err).NotTo(HaveOccurred())
 
  framework.ExpectNoError(f.WaitForPodRunning(pod.Name))