Natasha Sarkar
1ee3eb7041
remove Pod Generation feature gate from field descriptions
...
Kubernetes-commit: d5dabfcd658def79f6b1e1c3c680d5c1711e24f7
2025-11-11 16:44:33 +00:00
Kubernetes Publisher
8fcd3c218f
Merge pull request #136826 from alvaroaleman/bumpv0.32
...
Bump structured merge diff to v6.3.2
Kubernetes-commit: 65f09e605cb206b2e5fcff4d69a4ae8acf62dbc3
2026-02-10 20:21:19 +00:00
Kubernetes Publisher
c6e2e47b31
Merge pull request #136455 from pohly/client-go-simpleclient-undeprecation
...
fake client-go: un-deprecate NewSimpleClientset
Kubernetes-commit: 09e1c9fe0ec3d3a61fa71c43610b42e1e3f53612
2026-02-10 00:00:21 +00:00
Alvaro Aleman
c02524f944
Bump structured merge diff to v6.3.2
...
Diff: https://github.com/kubernetes-sigs/structured-merge-diff/compare/v6.3.1...v6.3.2
It's just one change that prevents a NPD when an embedded pointer to a
struct is encountered.
Kubernetes-commit: f59cfe60ef2063e2383ebef416f9da05196903d6
2026-02-07 13:49:48 -05:00
Patrick Ohly
aac099e7c2
fake client-go: un-deprecate NewSimpleClientset
...
NewSimpleClientset was marked as deprecated when NewClientset was
introduced. This has caused some confusion:
- Not all packages have NewClientset (https://github.com/kubernetes/kubernetes/issues/135980 ).
- Tests that work with NewSimpleClientset fail when
switched to NewClientset (https://github.com/kubernetes/kubernetes/issues/136327 )
because of missing CRD support (https://github.com/kubernetes/kubernetes/issues/126850 ).
It doesn't seem burdensome to keep NewSimpleClientset around forever. Some unit
tests may even prefer to use it when they don't need server-side apply (less
overhead). Therefore there is no need to deprecate it.
This avoids churn in the eco system because contributors no longer create PRs
"because the linter complains about the usage of a deprecated function".
Kubernetes-commit: e80da21868059f789c90105a00481fa8cef169e1
2026-01-23 11:20:40 +01:00
Kubernetes Publisher
67ce519612
Merge pull request #135782 from richabanker/fifo-identity-metric
...
Add identifier-based queue depth metrics for RealFIFO
Kubernetes-commit: 8972957668a174bbb589f167817130e0f2d352a9
2026-02-06 03:52:42 +00:00
Richa Banker
12b64ed22e
Wire InformerName through SharedIndexInformer
...
Kubernetes-commit: 96386809339faee1169d163749cb4b7d354bec1e
2026-02-05 11:45:38 -08:00
Richa Banker
5fee0e4466
Generate informers with InformerName support
...
Kubernetes-commit: 1fec293a1d9fc53e0e3f1a6a3fe6f8970110c1a7
2026-02-05 11:42:54 -08:00
Richa Banker
117e93e87c
Add FIFO queue depth metrics
...
Kubernetes-commit: 864357774f24ee17b2bc7bde84eb5b87cc7ab95b
2026-02-05 11:42:20 -08:00
Kubernetes Publisher
c148db9511
Merge pull request #136747 from dims/use-k8s-utils-btree
...
Use btree from k8s.io/utils instead of github.com/google/btree
Kubernetes-commit: dc1ec1211e4f54064ba6dafd8aac46ac3d4379b4
2026-02-05 11:42:33 +00:00
Kubernetes Publisher
aa31c74d1f
Merge pull request #136694 from michaelasp/addEmulationToClientGo
...
Add the ability to update locked features in client-go testing
Kubernetes-commit: 365fd08d5898a099cdc40eaf2a53d5a40125b1f0
2026-02-05 02:04:32 +05:30
Davanum Srinivas
4ba33933bd
Use btree from k8s.io/utils instead of github.com/google/btree
...
The google/btree package is deprecated, so switch to the maintained
fork in k8s.io/utils/third_party/forked/golang/btree.
API differences:
- NewG -> New
- BTreeG[T] -> BTree[T]
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
Kubernetes-commit: a328ca88ad662119bbf129cd1107fabd8dd9f539
2026-02-04 09:19:58 -05:00
Michael Aspinwall
88493c6cb6
Lock InOrderInformers to true by default
...
Kubernetes-commit: 566a01682fe526812b5f12453908864827300b6f
2026-02-03 21:54:29 +00:00
Michael Aspinwall
c752307a85
Add SetForTesting for testing feature gates
...
Kubernetes-commit: 8099c570428806404b1a400143156c2ed0c67658
2026-02-03 21:49:09 +00:00
Kubernetes Publisher
65608ffa8e
Merge pull request #136601 from michaelasp/realFifoGA
...
Set RealFIFO to GA in 1.36
Kubernetes-commit: 1861c1a07244e8e9430aaf588722dd22287c471e
2026-02-04 03:42:25 +00:00
Kubernetes Publisher
f651faf894
Merge pull request #136509 from pohly/client-go-informer-deadlock
...
client-go informers: fix potential deadlock
Kubernetes-commit: cc0fdc1fe2cfada52875a0c5fa115f69b4dd477a
2026-01-29 21:44:57 +00:00
Kubernetes Publisher
ada74e06af
Merge pull request #136424 from JoelSpeed/podgroup-union
...
Mark PodGroupPolicy up with openapi union member tags
Kubernetes-commit: 8f4c197169bd4454bef3f7fc47ce02a324d51c76
2026-01-29 21:44:56 +00:00
Richa Banker
50ef81ad18
Add identity tracking for queue items
...
Kubernetes-commit: db27f4c1234a50e3157373c060ac8ba71c513500
2026-01-28 19:01:51 -08:00
Kubernetes Publisher
f3637bd93c
Merge pull request #136583 from michaelasp/watchListRVEnforcement
...
Ensure resource version callbacks aren't called preemptively in reflector
Kubernetes-commit: ebc5660fa5c37e5e2f4bc85aff7f181d03955a9c
2026-01-29 01:49:03 +00:00
Michael Aspinwall
072a1958db
Set RealFIFO to GA in 1.36
...
Kubernetes-commit: 7107e2f3500091155ac54a2d16a0eb0a9b557d1c
2026-01-28 22:37:37 +00:00
Kubernetes Publisher
2d68c1db51
Merge pull request #135106 from bkhadars/enable-commentstart1
...
enable commentstart check on admissionregistration API group
Kubernetes-commit: a41a5c35d38479df7bfa462ec24221a5198a0e5f
2026-01-28 17:44:36 +00:00
Kubernetes Publisher
a48da785a9
Merge pull request #129332 from pohly/log-client-go-clientcmd
...
client-go command: structured, contextual logging
Kubernetes-commit: 1c9da264ab83ac34efd0422711e1a222ffcb1b03
2026-01-28 13:44:55 +00:00
Kubernetes Publisher
67189d0e25
Merge pull request #136582 from yongruilin/master_kubeopenapi-format
...
Bump k8s.io/kube-openapi to latest and enable numeric format validation
Kubernetes-commit: b90909e4325d5375af7deb190585a5e9885c288d
2026-01-28 01:44:00 +00:00
Michael Aspinwall
ef73fc0205
Add enforcement for rv update in watchlist to preserve the rv ordering invariant
...
Kubernetes-commit: 35d29e4772261b283498e04148b89cef64fd6297
2026-01-27 23:09:17 +00:00
yongruilin
2d1d3a8458
Bump k8s.io/kube-openapi to latest
...
Kubernetes-commit: 65b579a036fa3b230f9c5e22d449fe9e4790078e
2026-01-27 21:39:39 +00:00
Kubernetes Publisher
146146cf95
Merge pull request #136574 from pohly/revert-129344-log-client-go-apimachinery-network-util
...
Revert "apimachinery: contextual logging in network util code"
Kubernetes-commit: 99a2c5c6346ad84976f9bda40034670a97950f24
2026-01-27 17:44:25 +00:00
Patrick Ohly
b0c7207279
Revert "apimachinery: contextual logging in network util code"
...
Kubernetes-commit: 9d65b9be20e5ee0a4ef34f0ba071d35987da4ab0
2026-01-27 17:21:02 +01:00
Kubernetes Publisher
5b20bd05fc
Merge pull request #136441 from kannon92/remove-alpha-api-dra
...
remove alpha comments for GA or beta resource fields
Kubernetes-commit: be658b44f32ee69146505094ac3a03418832f9b6
2026-01-27 17:44:24 +00:00
Patrick Ohly
3590eb7f48
client-go informers: replace time.Sleep with callback
...
While time.Sleep is what the test needs, maybe an arbitrary hook invocation is
more acceptable in the production code because it is more general.
Kubernetes-commit: 2ec0305d728bf5ce8f8df314a18e71aa120a00cf
2026-01-27 14:47:37 +01:00
Patrick Ohly
889b95a769
client-go informers: fix potential deadlock
...
In the unlikely situation that sharedProcessor.distribute was triggered by a
resync before sharedProcessor.run had a chance to start the listeners, the
sharedProcessor deadlocked: sharedProcessor.distribute held a read/write lock
on listenersLock while being blocked on the write to the listener's
channel. The listeners who would have read from those weren't get started
because sharedProcessor.run was blocked trying to get a read lock for
listenersLock.
This gets fixed by releasing the read/write lock in sharedProcessor.distribute
while waiting for all listeners to be started. Because either all or no
listeners are started, the existing global listenersStarted boolean is
sufficient.
The TestListenerResyncPeriods tests now runs twice, with and without the
artificial delay. It gets converted to a synctest, so it executes quickly
despite the time.Sleep calls and timing is deterministic. The enhanced log
output confirms that with the delay, the initial sync completes later:
=== RUN TestListenerResyncPeriods
shared_informer_test.go:236: 0s: listener3: handle: pod1
shared_informer_test.go:236: 0s: listener3: handle: pod2
shared_informer_test.go:236: 0s: listener1: handle: pod1
shared_informer_test.go:236: 0s: listener1: handle: pod2
shared_informer_test.go:236: 0s: listener2: handle: pod1
shared_informer_test.go:236: 0s: listener2: handle: pod2
shared_informer_test.go:236: 2s: listener2: handle: pod1
shared_informer_test.go:236: 2s: listener2: handle: pod2
shared_informer_test.go:236: 3s: listener3: handle: pod1
shared_informer_test.go:236: 3s: listener3: handle: pod2
--- PASS: TestListenerResyncPeriods (0.00s)
=== RUN TestListenerResyncPeriodsDelayed
shared_informer_test.go:236: 1s: listener1: handle: pod1
shared_informer_test.go:236: 1s: listener1: handle: pod2
shared_informer_test.go:236: 1s: listener2: handle: pod1
shared_informer_test.go:236: 1s: listener2: handle: pod2
shared_informer_test.go:236: 1s: listener3: handle: pod1
shared_informer_test.go:236: 1s: listener3: handle: pod2
shared_informer_test.go:236: 2s: listener2: handle: pod1
shared_informer_test.go:236: 2s: listener2: handle: pod2
shared_informer_test.go:236: 3s: listener3: handle: pod1
shared_informer_test.go:236: 3s: listener3: handle: pod2
--- PASS: TestListenerResyncPeriodsDelayed (0.00s)
Kubernetes-commit: e6ef79b2f6bb05205652e4fe48ffa523d9e3a1ec
2026-01-23 19:38:52 +01:00
Kevin Hannon
0c949f1da7
remove alpha comments for GA or beta DRA fields
...
Kubernetes-commit: 159eb4cd7719a1c5de2c332e811a2b598ee1a4d2
2026-01-22 17:03:40 -05:00
Joel Speed
cb71398117
Mark PodGroupPolicy up with openapi union member tags
...
Kubernetes-commit: a984ba0bd9a5d0b25026d8d56c191faacc7b52ec
2026-01-22 11:28:50 +00:00
Kubernetes Publisher
c5e14be254
Merge pull request #136410 from michaelasp/addToReviewer
...
Add michaelasp to client-go/tools/cache reviewers
Kubernetes-commit: 290b358acda398439f0fb6ad027b59b45777d6fa
2026-01-22 05:49:06 +00:00
Michael Aspinwall
36db2c5c73
Add michaelasp to client-go cache reviewers
...
Kubernetes-commit: 8418cf16d7d918804db1b040338ffc3c164cff8d
2026-01-21 21:46:59 +00:00
Kubernetes Publisher
511abf454d
Merge pull request #136362 from dims/update-opentelemetry-v1.39.0
...
Update OpenTelemetry dependencies to latest versions
Kubernetes-commit: 69eb15ee58c9cb20b90007e9b064dfb78b66a867
2026-01-21 21:43:59 +00:00
Kubernetes Publisher
98fd4cc5ca
Merge pull request #136264 from michaelasp/unlockWhileProcess
...
Ensure that processing does not block queue writers in RealFIFO
Kubernetes-commit: dff962ddbb0f5928086029e45a2fa63c28341c57
2026-01-21 21:43:57 +00:00
Davanum Srinivas
51d0341059
Update OpenTelemetry dependencies to latest versions
...
Core packages (opentelemetry-go):
- go.opentelemetry.io/otel: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/metric: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/trace: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/sdk: v1.38.0 → v1.39.0
Exporters:
- go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.39.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.39.0
Contrib instrumentation (opentelemetry-go-contrib):
- go.opentelemetry.io/contrib/.../otelhttp: v0.61.0 → v0.64.0
- go.opentelemetry.io/contrib/.../otelrestful: v0.44.0 → v0.64.0
Protocol definitions (opentelemetry-proto-go):
- go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0
Notable changes:
- Go 1.24 is now the minimum required version (Go 1.23 support dropped) for OTEL components
- Performance: ~4x improvement in histogram concurrent operations; xxhash
replaces fnv for attribute hashing
- Fixed goroutine leak in span processors when context is canceled
- otelrestful migrated semantic conventions from v1.20.0 to v1.34.0
(e.g., http.method → http.request.method)
- Partial OTLP export errors now surfaced instead of being silently dropped
- otelrestful no longer depends on json-iterator/go, modern-go/concurrent,
or modern-go/reflect2; unwanted-dependencies.json updated accordingly
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
Kubernetes-commit: c40ea60b9f193fbead586f9fd6cc26f7b77312ff
2026-01-20 17:20:21 -05:00
Kubernetes Publisher
ff70f47ee2
Merge pull request #135322 from carlory/rm-portworx
...
[1.36] Remove intree volume plugin portworx
Kubernetes-commit: d047572e817aafc3af859c191d79d954cf1855d9
2026-01-19 17:43:40 +00:00
Michael Aspinwall
914300b800
Add benchmarks for adding objects with slow handlers
...
Kubernetes-commit: 082f38d97bb68e77347b48dd5b29023b1a357373
2026-01-16 00:47:09 +00:00
Michael Aspinwall
f5283a4822
Ensure that processing does not block queue writers
...
Kubernetes-commit: 40c01b99a7bac05f6de438d67dd20a60333a0ac4
2026-01-16 00:46:52 +00:00
carlory
9cbf88a315
run hack/update-vendor.sh
...
Signed-off-by: carlory <baofa.fan@daocloud.io >
Kubernetes-commit: 299ec97e6fa2295ccc14d22f501280164377914a
2025-11-13 10:54:21 +08:00
Kubernetes Publisher
1a68af1383
Merge pull request #136212 from dims/update-security-deps-jan2026-v2
...
Update security and stability dependencies
Kubernetes-commit: a94970c0c5de0fa56b0ed82823850db7e0257685
2026-01-16 13:31:47 +00:00
Davanum Srinivas
95129d1f2f
Update security and stability dependencies
...
This PR updates several dependencies addressing security vulnerabilities,
stability fixes, and authentication improvements.
- golang.org/x/crypto: v0.46.0 -> v0.47.0
- Includes latest X509 root certificate bundle updates
- Security hardening for cryptographic operations
- Foundation dependency for TLS and authentication
- github.com/golang-jwt/jwt/v5: v5.2.2 -> v5.3.0
- IMPORTANT: v5.2.2 patched vulnerability GHSA-mh63-6h87-95cp (token
validation security issue) - this update ensures we have the fix
- Adds multiple audience validation support for JWT tokens
- Go 1.21 minimum requirement (code modernization)
- Replaced legacy interface{} with modern any keyword
- golang.org/x/net: v0.48.0 -> v0.49.0
- HTTP/2 priority scheduler improvements (RFC 9218)
- WebSocket security enhancements
- Network layer stability fixes
- go.uber.org/zap: v1.27.0 -> v1.27.1
- Fix: Prevent Object from panicking on nils (PR #1501 )
- Fix: Race condition in WithLazy (PR #1511 )
- Both fixes improve logging stability in concurrent scenarios
- github.com/godbus/dbus/v5: v5.2.0 -> v5.2.2
- Security: Disabled SHA1 authentication by default on non-Windows
platforms (v5.2.0 change now inherited)
- Performance: Multiple optimizations reducing memory allocations
- Fix: Alignment issues in decoder operations
- Fix: Allow more than 32 containers/struct fields in a signature
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
Kubernetes-commit: 5b478645cdb3be5ed92a21d2f7b417b6328cfa6e
2026-01-13 23:08:03 -05:00
Kubernetes Publisher
518241d079
Merge pull request #136008 from michaelasp/atomicResync
...
Add atomic resync operation for real fifo
Kubernetes-commit: b82b03b9240e13b72635a39304b352afdf6a1fde
2026-01-16 01:32:19 +00:00
Michael Aspinwall
2f59c18c8b
Add atomic resync and remove usage of store in FIFO
...
Kubernetes-commit: 6fbaebc054fc61f4775bb3a803beba7e924e266b
2026-01-15 20:22:36 +00:00
Kubernetes Publisher
24e4401379
Merge pull request #136143 from pohly/client-go-fake-list-and-watch-fix
...
client-go testing: fix List+Watch support
Kubernetes-commit: 8392659d3c90fea03be805968b53ec7a05dea183
2026-01-15 17:32:16 +00:00
Kubernetes Publisher
14e71d2850
Merge pull request #135462 from michaelasp/atomicReplace
...
Add atomic replace in client-go
Kubernetes-commit: 8322d26d1f0384f98baf6b640af58a471eb66f19
2026-01-15 01:32:08 +00:00
Michael Aspinwall
aad3a6de89
Add support for ReplacedAll delta handling
...
Kubernetes-commit: 3d585f1c500be795dfaf24e2c6a7b024986481c1
2026-01-14 13:46:37 -05:00
Michael Aspinwall
0a8284b969
Plumb AtomicFIFO options into controller/store construction
...
Kubernetes-commit: 022fec7ba8b0e2c71e1f38634a31f296d0090b31
2026-01-14 13:23:12 -05:00
Michael Aspinwall
06f647297d
Add AtomicFIFO feature gate
...
Kubernetes-commit: 9e25c19199ece559f91615cc70947da64e740fce
2026-01-14 12:39:28 -05:00