Automatic merge from submit-queue

Events in federated namespace controller

@quinton-hoole @nikhiljindal @wojtek-t @kubernetes/sig-cluster-federation

Automatic merge from submit-queue

Fix running e2e against local cluster

required env vars were not being set.

/cc @pmorie

Automatic merge from submit-queue

add names for workqueues to gather controller latency/depth metrics

Adding names to the workqueues used by controllers allows the automatic collection of depth, rate, and latency metrics for those controllers.  These are useful for diagnosing various "slow controller" cases.

@kubernetes/rh-cluster-infra

Automatic merge from submit-queue

Remove unused argument to NodeController.Run

@pwittrock - can this go into 1.4? It's zero risk and reduces possible confusion.

Automatic merge from submit-queue

Marked HA master feature experimental.

Marked HA master feature experimental.

Automatic merge from submit-queue

e2e: log wget output on CheckConnectivityToHost error

Log output might help to diagnose e2e flakes, whether they are caused by dns issues or connection timeouts.

Might help with flake https://github.com/kubernetes/kubernetes/issues/28188.

Automatic merge from submit-queue

Add a multi-platform proposal

This is a proposal for the work I've done with multiarch Kubernetes. I've worked quite a lot on it and now I've written it down so others may easily use and learn from it, while at the same time pointing out issues that we should fix in the future.

I would like to get this in before `v1.3`.

Feel free to comment on it if it's something that's unclear.

@david-mcmahon @ixdy @mikedanese @Pensu @davidopp @bgrant0607 @dlorenc @eparis @vishh @thockin @dchen1107 @lavalamp

Automatic merge from submit-queue

keep docker0 with private cidr range

fixes: #31465

Keep docker0 when using kubenet on GCI. Assign 169.254.123.1/24 to docker0 to avoid cidr conflict.

Automatic merge from submit-queue

Update influxdb to 0.12

fix #27630 

```release-note
Update influxdb to 0.12
```

Automatic merge from submit-queue

OnError callback function for federated updater

The handler can be useful for precise logging and events recording. Update returns just a single, first received error.

cc: @quinton-hoole @wojtek-t @kubernetes/sig-cluster-federation

Automatic merge from submit-queue

Node E2E: Move the image and host related logic to be remote run specific.

This PR addresses #31597, and better fixes #31588.

With this PR:
1) All remote logic is moved into remote mode.
2) All gci related logic is only called when `HOSTS` and `IMAGES` are not specified.
3) Run node e2e against other node e2e images will work again - `make test-e2e-node REMOET=true IMAGES=e2e-node-containervm-v20160321-image`.
4) List images will work again - `make test-e2e-node REMOTE=true LIST_IMAGES=true`.

Mark 1.4, because https://github.com/kubernetes/kubernetes/pull/31588 is marked as 1.4. And this makes the node e2e work as is described in the [doc ](https://github.com/kubernetes/kubernetes/blob/master/docs/devel/e2e-node-tests.md#run-tests-using-different-images).

@yujuhong @vishh 
/cc @kubernetes/sig-node

Automatic merge from submit-queue

Fix make test-integration under OSX

Just throw in a doc.go so there's something compilable in the
test/integration/metrics directory.

Fixes #31587

Automatic merge from submit-queue

AppArmor was flipped to beta, update feature gate

/cc @dchen1107

---

1.4 Justification:

- Risk: Low. Change is small & contained.
- Rollback: Nothing else should touch this code path or depend on its functionality.
- Cost: AppArmor is beta, but the feature gate thinks it's alpha.

Marked HA master feautre experimental.

Automatic merge from submit-queue

Fix build on Mac

Use portable `ln -snf` instead of `-sTf` (introduced in https://github.com/kubernetes/kubernetes/pull/31525).

Automatic merge from submit-queue

Tune kubemark-5 resource constraints

Ref. #31105

Automatic merge from submit-queue

Include security options in the container created event

New container creation events look like:
```
Created container with docker id /k8s_bar2.a4; Security:[seccomp=sub/subtest(md5:07c9bcb4db631f7ca191d6e0bca49f76)]

Created container with docker id /k8s_bar2.a4; Security:[seccomp=unconfined apparmor=foo-profile]
```

The goal is to provide enough information to confirm that the requseted security constraints were honored.

For https://github.com/kubernetes/kubernetes/issues/31284

/cc @dchen1107 @thockin @jfrazelle @pweil- @pmorie

---

Justification for v1.4:

- Risk: low. This appends some additional information to a human readable message. A bug here would probably not break any functionality
- Roll-back: I don't anticipate any more changes to this area of the code. No functionality depends on this change.
- Cost of not including: Users don't get any (positive) confirmation that the AppArmor or Seccomp profile they requested were actually enabled.

Automatic merge from submit-queue

Cleanup node failure message

Fix missing newline

Automatic merge from submit-queue

Capitalize feature name in test for dynamic kubelet configuration

Automatic merge from submit-queue

AWS: Fix unbound SSH_CIDR

**What this PR does / why we need it**: Fixes "unbound `SSH_CIDR` errors in e2e

**Which issue this PR fixes** fixes code in #27061

**Special notes for your reviewer**: Not tested, I'm still OOO

Another e2e bug, this one injected by https://github.com/kubernetes/kubernetes/pull/27061

Automatic merge from submit-queue

test/node-e2e: Update CoreOS update disabling

Previously in this saga... #25004

This disables update-engine and locksmithd with ignition instead of
cloud-init so that they're really totally 100% disabled. Our ignition guy promises.

Pretty much every way of disabling them with cloud-init is mildly racy.

Fixes #31633 

I think @vishh can say "I told you so" after the comment on https://github.com/kubernetes/kubernetes/pull/30023#discussion-diff-73431324 .. he was right, but it turns out "stop" there doesn't really work either because of the mess that is cloud-init. Fortunately, converting our cloud-init to json and calling it "ignition" works quite well 😄 

Testing done: I ssh'd in and verified that yes, they're disabled. I didn't wait on the e2e tests to pass, so we'll let this PR check that.

Automatic merge from submit-queue

Add e2e tests for Federated Ingress

This is e2e code for federation ingress controller.
Based util functions, add federation ingress e2e cases(reuse current k8s ones) and add logic to validate the result.

Automatic merge from submit-queue

Fix feature name for ExternalTrafficLocalOnly alpha feature e2e

https://github.com/kubernetes/test-infra/pull/467 is the test-infra side PR

Automatic merge from submit-queue

Add log message in Kubelet when controller attach/detach is enabled

Adds a message to the Kubelet log indicating whether controller attach/detach is enabled for a node.

cc @kubernetes/sig-storage

Automatic merge from submit-queue

Fix pod get logs test

Helps debug #30567.

Another e2e bug, this one injected by https://github.com/kubernetes/kubernetes/pull/27061

Memory eviction test podName must be lowercase

Automatic merge from submit-queue

Add missing test owners

Ran `hack/update_owners.py`

Adding the v1.4 as this is not related to the release

Automatic merge from submit-queue

AWS: Hopefully fix e2e?

**What this PR does / why we need it**: Fix AWS e2e
**Which issue this PR fixes**: fixes build broken by #28499 
**Special notes for your reviewer**: This is a pump & dump, I probably won't be around to respond to comments after this. If it needs a cherry-pick or anything, please check?

Automatic merge from submit-queue

E2E tests for the Source IP Preservation for LoadBalancers

Breaking out E2E changes from the main PR - these tests require the Alpha feature gate turned on for this feature otherwise they will consistently fail.

This disables update-engine and locksmithd with ignition instead of
cloud-init so that they're really totally 100% disabled.

Pretty much every way of disabling them with cloud-init is mildly racy.

Fixes #31633