dev to alpha

cluster/config-defaults.yaml

@@ -200,7 +200,7 @@ teapot_admission_controller_validate_application_label: "false"
 {{end}}
 
 {{if eq .Environment "e2e"}}
-teapot_admission_controller_ignore_namespaces: "^kube-system|(e2e-tests-(downward-api|kubectl|projected|statefulset|pod-network)-.*)$"
+teapot_admission_controller_ignore_namespaces: "^kube-system|((downward-api|kubectl|projected|statefulset|pod-network)-.*)$"
 {{else}}
 teapot_admission_controller_ignore_namespaces: "^kube-system$"
 {{end}}
@@ -219,8 +219,7 @@ cluster_dns: "coredns"
 coredns_log_svc_names: "true"
 
 coreos_image: "ami-0d1579b60bb706fb7" # Container Linux 2079.6.0 (HVM, eu-central-1)
-kuberuntu_image: {{ amiID "zalando-ubuntu-kubernetes-production-v1.13.7-master-51" "861068367966" }}
-
+kuberuntu_image: {{ amiID "zalando-ubuntu-kubernetes-production-v1.14.5-master-51" "861068367966" }}
 
 # Feature toggle to allow gradual decommissioning of ingress-template-controller
 enable_ingress_template_controller: "false"

cluster/manifests/01-visibility/priority-logging.yaml

@@ -1,4 +1,4 @@
-apiVersion: scheduling.k8s.io/v1alpha1
+apiVersion: scheduling.k8s.io/v1
 kind: PriorityClass
 metadata:
   name: visibility-logging

cluster/manifests/01-visibility/priority.yaml

@@ -1,4 +1,4 @@
-apiVersion: scheduling.k8s.io/v1alpha1
+apiVersion: scheduling.k8s.io/v1
 kind: PriorityClass
 metadata:
   name: visibility-zmon

cluster/manifests/emergency-access-service/ingress.yaml

@@ -1,5 +1,5 @@
 {{ if eq .Environment "production" }}
-apiVersion: extensions/v1beta1
+apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
   name: emergency-access-service

cluster/manifests/kube-cluster-autoscaler/autoscaling-priority-class.yaml

@@ -1,4 +1,4 @@
-apiVersion: scheduling.k8s.io/v1alpha1
+apiVersion: scheduling.k8s.io/v1
 kind: PriorityClass
 metadata:
   name: autoscaling-buffer

cluster/manifests/kube-proxy/daemonset.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: kube-system
   labels:
     application: kube-proxy
-    version: v1.13.7
+    version: v1.14.4
 spec:
   selector:
     matchLabels:
@@ -17,7 +17,7 @@ spec:
       name: kube-proxy
       labels:
         application: kube-proxy
-        version: v1.13.7
+        version: v1.14.4
       annotations:
         config/hash: {{"configmap.yaml" | manifestHash}}
     spec:
@@ -31,7 +31,7 @@ spec:
       hostNetwork: true
       containers:
       - name: kube-proxy
-        image: registry.opensource.zalan.do/teapot/kube-proxy:v1.13.7
+        image: registry.opensource.zalan.do/teapot/kube-proxy:v1.14.4
         args:
         - --hostname-override=$(HOSTNAME_OVERRIDE)
         - --config=/config/kube-proxy.yaml

cluster/node-pools/master-default/userdata.clc.yaml

@@ -180,7 +180,7 @@ systemd:
       After=docker.service dockercfg.service meta-data-iptables.service private-ipv4.service
 
       [Service]
-      Environment=KUBELET_IMAGE_TAG=v1.13.7
+      Environment=KUBELET_IMAGE_TAG=v1.14.4
       Environment=KUBELET_IMAGE_ARGS=--exec=/kubelet
       Environment=KUBELET_IMAGE_URL=docker://registry.opensource.zalan.do/teapot/kubelet
       Environment="RKT_RUN_ARGS=--insecure-options=image \
@@ -361,7 +361,7 @@ storage:
           namespace: kube-system
           labels:
             application: kube-apiserver
-            version: v1.13.7
+            version: v1.14.4
           annotations:
             kubernetes-log-watcher/scalyr-parser: |
               [{"container": "webhook", "parser": "json-structured-log"}]
@@ -373,7 +373,7 @@ storage:
           hostNetwork: true
           containers:
           - name: kube-apiserver
-            image: registry.opensource.zalan.do/teapot/kube-apiserver:v1.13.7
+            image: registry.opensource.zalan.do/teapot/kube-apiserver:v1.14.4
             args:
             - --apiserver-count={{ .Values.apiserver_count }}
             - --bind-address=0.0.0.0
@@ -711,15 +711,15 @@ storage:
           namespace: kube-system
           labels:
             application: kube-controller-manager
-            version: v1.13.7
+            version: v1.14.4
         spec:
           priorityClassName: system-node-critical
           tolerations:
           - key: node-role.kubernetes.io/master
             effect: NoSchedule
           containers:
           - name: kube-controller-manager
-            image: registry.opensource.zalan.do/teapot/kube-controller-manager:v1.13.7
+            image: registry.opensource.zalan.do/teapot/kube-controller-manager:v1.14.4
             args:
             - --kubeconfig=/etc/kubernetes/controller-kubeconfig
             - --leader-elect=true
@@ -780,7 +780,7 @@ storage:
           namespace: kube-system
           labels:
             application: kube-scheduler
-            version: v1.13.7
+            version: v1.14.4
         spec:
           priorityClassName: system-node-critical
           tolerations:
@@ -789,7 +789,7 @@ storage:
           hostNetwork: true
           containers:
           - name: kube-scheduler
-            image: registry.opensource.zalan.do/teapot/kube-scheduler:v1.13.7
+            image: registry.opensource.zalan.do/teapot/kube-scheduler:v1.14.4
             args:
             - --master=http://127.0.0.1:8080
             - --leader-elect=true
@@ -1248,7 +1248,7 @@ storage:
           --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
           --mount volume=dns,target=/etc/resolv.conf \
           --net=host \
-          docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+          docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
           --exec=/kubectl -- \
           --kubeconfig=/etc/kubernetes/kubeconfig \
           label node "$(hostname)" \
@@ -1261,7 +1261,7 @@ storage:
           --net=host \
           --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
           --mount volume=dns,target=/etc/resolv.conf \
-          docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+          docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
           --exec=/kubectl -- \
           --kubeconfig=/etc/kubernetes/kubeconfig \
           drain "$(hostname)" \

cluster/node-pools/worker-default/userdata.clc.yaml

@@ -179,7 +179,7 @@ systemd:
       After=docker.service dockercfg.service meta-data-iptables.service private-ipv4.service collect-instance-metadata.service
 
       [Service]
-      Environment=KUBELET_IMAGE_TAG=v1.13.7
+      Environment=KUBELET_IMAGE_TAG=v1.14.4
       Environment=KUBELET_IMAGE_ARGS=--exec=/kubelet
       Environment=KUBELET_IMAGE_URL=docker://registry.opensource.zalan.do/teapot/kubelet
       Environment="RKT_RUN_ARGS=--insecure-options=image \
@@ -488,7 +488,7 @@ storage:
           --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
           --mount volume=dns,target=/etc/resolv.conf \
           --net=host \
-          docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+          docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
           --exec=/kubectl -- \
           --kubeconfig=/etc/kubernetes/kubeconfig \
           label node "$(hostname)" \
@@ -501,7 +501,7 @@ storage:
           --net=host \
           --volume dns,kind=host,source=/run/systemd/resolve/resolv.conf,readOnly=true \
           --mount volume=dns,target=/etc/resolv.conf \
-          docker://registry.opensource.zalan.do/teapot/kubectl:v1.13.7 \
+          docker://registry.opensource.zalan.do/teapot/kubectl:v1.14.4 \
           --exec=/kubectl -- \
           --kubeconfig=/etc/kubernetes/kubeconfig \
           drain "$(hostname)" \

test/e2e/Makefile

@@ -2,7 +2,7 @@
 
 BINARY       ?= kubernetes-on-aws-e2e
 VERSION      ?= $(shell git describe --tags --always --dirty)
-KUBE_VERSION ?= v1.13.5
+KUBE_VERSION ?= v1.14.4
 IMAGE        ?= registry-write.opensource.zalan.do/teapot/$(BINARY)
 TAG          ?= $(VERSION)
 DOCKERFILE   ?= Dockerfile

test/e2e/README.md

@@ -86,11 +86,11 @@ scratch and test the Kubernetes type Foo.
   		defer func() {
   			By("deleting the foo)
   			defer GinkgoRecover()
-  			err2 := cs.Core().Foo(ns).Delete(foo.Name, metav1.NewDeleteOptions(0))
+  			err2 := cs.CoreV1().Foo(ns).Delete(foo.Name, metav1.NewDeleteOptions(0))
   			Expect(err2).NotTo(HaveOccurred())
   		}()
               // creates the Ingress Object
-  		_, err := cs.Core().Foo(ns).Create(foo)
+  		_, err := cs.CoreV1().Foo(ns).Create(foo)
   		Expect(err).NotTo(HaveOccurred())
   	})
   })
@@ -114,10 +114,10 @@ scratch and test the Kubernetes type Foo.
   defer func() {
   	By("deleting the pod")
   	defer GinkgoRecover()
-  	err2 := cs.Core().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
+  	err2 := cs.CoreV1().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
   	Expect(err2).NotTo(HaveOccurred())
   }()
-  _, err = cs.Core().Pods(ns).Create(pod)
+  _, err = cs.CoreV1().Pods(ns).Create(pod)
   Expect(err).NotTo(HaveOccurred())
   framework.ExpectNoError(f.WaitForPodRunning(pod.Name))
 ```
@@ -138,10 +138,10 @@ scratch and test the Kubernetes type Foo.
   defer func() {
   	By("deleting the service")
   	defer GinkgoRecover()
-  	err2 := cs.Core().Services(ns).Delete(service.Name, metav1.NewDeleteOptions(0))
+  	err2 := cs.CoreV1().Services(ns).Delete(service.Name, metav1.NewDeleteOptions(0))
   	Expect(err2).NotTo(HaveOccurred())
   }()
-  _, err := cs.Core().Services(ns).Create(service)
+  _, err := cs.CoreV1().Services(ns).Create(service)
   Expect(err).NotTo(HaveOccurred())
 ```
 
@@ -164,14 +164,14 @@ Create Kubernetes ingress object:
   defer func() {
   	By("deleting the ingress")
   	defer GinkgoRecover()
-  	err2 := cs.Extensions().Ingresses(ns).Delete(ing.Name, metav1.NewDeleteOptions(0))
+  	err2 := cs.ExtensionsV1beta1().Ingresses(ns).Delete(ing.Name, metav1.NewDeleteOptions(0))
   	Expect(err2).NotTo(HaveOccurred())
   }()
-  ingressCreate, err := cs.Extensions().Ingresses(ns).Create(ing)
+  ingressCreate, err := cs.ExtensionsV1beta1().Ingresses(ns).Create(ing)
   Expect(err).NotTo(HaveOccurred())
   addr, err := jig.WaitForIngressAddress(cs, ns, ingressCreate.Name, 3*time.Minute)
   Expect(err).NotTo(HaveOccurred())
-  ingress, err := cs.Extensions().Ingresses(ns).Get(ing.Name, metav1.GetOptions{ResourceVersion: "0"})
+  ingress, err := cs.ExtensionsV1beta1().Ingresses(ns).Get(ing.Name, metav1.GetOptions{ResourceVersion: "0"})
   Expect(err).NotTo(HaveOccurred())
   By(fmt.Sprintf("ALB endpoint from ingress status: %s", ingress.Status.LoadBalancer.Ingress[0].Hostname))
 ```

test/e2e/apiserver.go

@@ -23,7 +23,9 @@ import (
 
 	. "github.com/onsi/ginkgo"
 	. "github.com/onsi/gomega"
+
 	appsv1 "k8s.io/api/apps/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/labels"
 	"k8s.io/client-go/kubernetes"
 	"k8s.io/kubernetes/test/e2e/framework"
@@ -48,8 +50,13 @@ var _ = framework.KubeDescribe("API Server webhook tests", func() {
 		By("Creating deployment " + nameprefix + " in namespace " + ns)
 
 		deployment := createImagePolicyWebhookTestDeployment(nameprefix+"-", ns, tag, podname, replicas)
-		_, err := cs.ExtensionsV1beta1().Deployments(ns).Create(deployment)
-		defer deleteDeployment(cs, ns, deployment)
+		_, err := cs.AppsV1().Deployments(ns).Create(deployment)
+		defer func() {
+			By(fmt.Sprintf("Delete a compliant deployment: %s", deployment.Name))
+			defer GinkgoRecover()
+			err := cs.AppsV1().Deployments(ns).Delete(deployment.Name, metav1.NewDeleteOptions(0))
+			Expect(err).NotTo(HaveOccurred())
+		}()
 		Expect(err).NotTo(HaveOccurred())
 		label := map[string]string{
 			"app": podname,
@@ -72,9 +79,14 @@ var _ = framework.KubeDescribe("API Server webhook tests", func() {
 		By("Creating deployment " + nameprefix + " in namespace " + ns)
 
 		deployment := createImagePolicyWebhookTestDeployment(nameprefix+"-", ns, tag, podname, replicas)
-		_, err := cs.ExtensionsV1beta1().Deployments(ns).Create(deployment)
+		_, err := cs.AppsV1().Deployments(ns).Create(deployment)
 		Expect(err).NotTo(HaveOccurred())
-		defer deleteDeployment(cs, ns, deployment)
+		defer func() {
+			By(fmt.Sprintf("Delete a compliant deployment: %s", deployment.Name))
+			defer GinkgoRecover()
+			err := cs.AppsV1().Deployments(ns).Delete(deployment.Name, metav1.NewDeleteOptions(0))
+			Expect(err).NotTo(HaveOccurred())
+		}()
 		err = framework.WaitForDeploymentWithCondition(cs, ns, deployment.Name, "FailedCreate", appsv1.DeploymentReplicaFailure)
 		Expect(err).NotTo(HaveOccurred())
 	})

test/e2e/audit.go

@@ -118,10 +118,10 @@ func expectEvents(f *framework.Framework, expectedEvents []utils.AuditEvent) {
 		missingReport, err := utils.CheckAuditLines(stream, expectedEvents, auditv1.SchemeGroupVersion)
 		if err != nil {
 			framework.Logf("Failed to observe audit events: %v", err)
-		} else if len(missingReport) > 0 {
+		} else if len(missingReport.MissingEvents) > 0 {
 			framework.Logf("Events %#v not found!", missingReport)
 		}
-		return len(missingReport) == 0, nil
+		return len(missingReport.MissingEvents) == 0, nil
 	})
 	framework.ExpectNoError(err, "after %v failed to observe audit events", pollingTimeout)
 }

test/e2e/external_dns.go

@@ -50,26 +50,26 @@ var _ = framework.KubeDescribe("External DNS creation", func() {
 
 		By("Creating service " + serviceName + " in namespace " + ns)
 		defer func() {
-			err := cs.Core().Services(ns).Delete(serviceName, nil)
+			err := cs.CoreV1().Services(ns).Delete(serviceName, nil)
 			Expect(err).NotTo(HaveOccurred())
 		}()
 
 		hostName := fmt.Sprintf("%s-%d.%s", serviceName, time.Now().UTC().Unix(), E2EHostedZone())
 		service := createServiceTypeLoadbalancer(serviceName, hostName, labels, port)
 
-		_, err := cs.Core().Services(ns).Create(service)
+		_, err := cs.CoreV1().Services(ns).Create(service)
 		Expect(err).NotTo(HaveOccurred())
 
 		By("Submitting the pod to kubernetes")
 		pod := createNginxPod(nameprefix, ns, labels, port)
 		defer func() {
 			By("deleting the pod")
 			defer GinkgoRecover()
-			err2 := cs.Core().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
+			err2 := cs.CoreV1().Pods(ns).Delete(pod.Name, metav1.NewDeleteOptions(0))
 			Expect(err2).NotTo(HaveOccurred())
 		}()
 
-		_, err = cs.Core().Pods(ns).Create(pod)
+		_, err = cs.CoreV1().Pods(ns).Create(pod)
 		Expect(err).NotTo(HaveOccurred())
 
 		framework.ExpectNoError(f.WaitForPodRunning(pod.Name))