Commit Graph

121158 Commits

Author SHA1 Message Date
Jordan Liggitt
5f4cb8b09a
Move kube-apiserver authz validation functions 2024-02-14 10:00:11 -05:00
Kubernetes Prow Robot
eeefc299e5
Merge pull request #123290 from AxeZhan/122435
Revert "Scheduler first fit"
2024-02-14 06:51:14 -08:00
Monis Khan
b5e0068325
Support all key algs with structured authn config
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-14 09:40:25 -05:00
AxeZhan
630ff96f9d Revert "Scheduler first fit" 2024-02-14 20:43:59 +08:00
Kubernetes Prow Robot
ed84e7f6d3
Merge pull request #123222 from pohly/dra-resurceclaim-lookup-race
DRA: fix data race in resourceclaim.Lookup
2024-02-14 03:24:57 -08:00
Akihiro Suda
e8b08cd056
e2e_node: replace registry.k8s.io/stress:v1 with agnhost
agnhost now contains the stress functionality (PR 123258).

Fix issue 123146

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 19:37:13 +09:00
Akihiro Suda
5d861b6f12
promote agnhost to v2.47
Since v2.45, the `stress` subcommand was added and the CI issue was fixed:
- kubernetes/kubernetes PR 123258
- kubernetes/kubernetes PR 123284
- kubernetes/k8s.io     PR 6422

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 19:33:46 +09:00
Kubernetes Prow Robot
fe9414d86e
Merge pull request #123284 from AkihiroSuda/agnhost
agnhost: v2.47
2024-02-14 01:07:11 -08:00
Patrick Ohly
aa772d77fb e2e pod: dump pod in unexpected phase
When stopping polling, the provided messages becomes the complete failure
message. This means that the code which calls gomega.StopTrying must include
the pod in the message instead of just summarizing the phase. This makes the
failure more useful.
2024-02-14 09:01:32 +01:00
Kubernetes Prow Robot
0a162a9cd2
Merge pull request #123263 from pohly/lint-error-wrapping
golangci-lint: add hints for error wrapping
2024-02-13 23:40:42 -08:00
Patrick Ohly
008b075b46 DRA: fix data race in resourceclaim.Lookup
This gets uses concurrently as seen by a data race reported when running
integration tests with race detection enabled. All writes would have written
the same value, but it is a race nonetheless.
2024-02-14 08:14:47 +01:00
Akihiro Suda
9c726b015c
agnhost: v2.47
agnhost was updated to v2.46 in PR 123258, but the image was not
published due to the failue of `post-kubernetes-push-e2e-agnhost-test-images`
(issue 123266).

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 15:11:31 +09:00
Kubernetes Release Robot
2383fbe53a CHANGELOG: Update directory for v1.30.0-alpha.2 release 2024-02-14 05:11:17 +00:00
Kubernetes Prow Robot
14f8f5519d
Merge pull request #121719 from ruiwen-zhao/metric-size
Add image pull duration metric with bucketed image size
2024-02-13 16:23:50 -08:00
Monis Khan
b8a59346fe
test/oidc: extract key type to allow testing different algs
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-13 17:05:33 -05:00
Alexander Zielenski
b7e70f0e00 update-vendor after package rename 2024-02-13 13:06:39 -08:00
Alexander Zielenski
3094395fa7 bugfix: avoid NPE possibility by making composition environment global 2024-02-13 13:06:39 -08:00
Alexander Zielenski
18fbc48b01 refactor: implement VAP off of policy plugin fw 2024-02-13 13:06:39 -08:00
Alexander Zielenski
a6366573d5 refactor: create generic policy plugin type similar to webhook 2024-02-13 13:06:39 -08:00
Kubernetes Prow Robot
7ec1a89a50
Merge pull request #123270 from AkihiroSuda/fix-123266
image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list`
2024-02-13 10:41:45 -08:00
Anish Ramasekar
19da90d639
Add AudienceMatchPolicy to AuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-13 09:50:00 -08:00
Kubernetes Prow Robot
5031ae1159
Merge pull request #123249 from humblec/sidecar-snapshotter
make use of latest snapshot controller version v6.3.3 in the deployment
2024-02-13 09:33:26 -08:00
Kubernetes Prow Robot
79e11fe563
Merge pull request #122703 from TommyStarK/fix/dra-manager-should-timeout
dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake
2024-02-13 09:33:17 -08:00
Kubernetes Prow Robot
bd0e1e2d9e
Merge pull request #121554 from kaisoz/fix-job-controller-panics
Check if time is nil before logging
2024-02-13 09:33:04 -08:00
Akihiro Suda
6ff675310c
image-util.sh: fix gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list
Fix issue 123266

> CI: `post-kubernetes-push-e2e-agnhost-test-images` is failing
> (`gcr.io/k8s-staging-e2e-test-images/agnhost:2.46-linux-amd64 is a manifest list`)

To avoid creating a manifest list with the recent version of buildx,
`--provenance=false --sbom=false` has to be specified.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 01:37:05 +09:00
Patrick Ohly
39606af8c3 golangci-lint: optionally skip it during "make verify"
The pull-kubernetes-verify job is going to use this to run the base
verify-golangci.sh only in the pull-kubernetes-verify-lint job.
2024-02-13 17:35:15 +01:00
Kubernetes Prow Robot
498f02d18c
Merge pull request #123202 from kannon92/kevin-sig-node-reviewer
self nominate to be a sig-node reviewer
2024-02-13 08:28:56 -08:00
Kubernetes Prow Robot
7abb063b42
Merge pull request #123179 from aramase/aramase/f/encryption_config_reload_metric
Add `apiserver_encryption_config_controller_automatic_reloads_total` metric and deprecate success/failure counter
2024-02-13 08:28:47 -08:00
Kubernetes Prow Robot
c3b2295c3a
Merge pull request #123258 from AkihiroSuda/agnhost-stress
agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
2024-02-13 07:24:35 -08:00
Akihiro Suda
7ee89440c3
agnhost: v2.46
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:52 +09:00
Akihiro Suda
07c701fecb
agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
Merge vishh/stress@eab4e3384b into
agnhost.

Old usage: `stress -mem-alloc-size 12Mi -mem-alloc-sleep 10s -mem-total 4Gi`
New usage: `agnhost stress --mem-alloc-size 12Mi --mem-alloc-sleep 10s --mem-total 4Gi`

This is a part of the steps to migrate from legacy Schema 1 images
(issue 123146)

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:05 +09:00
Kubernetes Prow Robot
5bf23121cc
Merge pull request #123262 from cpanato/update-images
update images to have the full semver in the tag
2024-02-13 06:05:50 -08:00
Patrick Ohly
8876b68a60 golangci-lint: add hints for error wrapping
Wrapping errors may or may not be the right thing to do (see
https://go.dev/blog/go1.13-errors#whether-to-wrap and the discussion in
https://github.com/kubernetes/kubernetes/issues/123234). But developers should
at least think about it, so let's emit linter hints for it: the golangci-lint
config by default enables it for go-errorlint, just not the linter itself, so
we just need to add it for the "hints" config.

Direct error comparisons and assertions also get checked. Those are typically
something that should be replaced by errors.Is and errors.As, but as the
existing code often doesn't do that, let's also treat those as just hints.
2024-02-13 14:12:04 +01:00
cpanato
8e2c1b559a
update images to have the full semver in the tag
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-13 14:04:29 +01:00
Stephen Kitt
1b1b902f81
codegen: don't nuke files if only verifying
The code generation tools support verification only with the
--verify-only option, but this now fails because the files are nuked
ahead of time.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-02-13 13:38:05 +01:00
Patrick Ohly
e53ac42633 e2e labels: add placeholder docs for existing items
Adding a doc comment for all existing items makes it more obvious that new
items should be documented more carefully. It also has the welcome side effect
that each item gets indented independently from the others.
2024-02-13 11:57:36 +01:00
Patrick Ohly
445443bd8a e2e labels: ensure that the lists remain sorted
Adding new entries at the bottom is tempting, but increases the risk of merge
conflicts between unrelated PRs. Let's use alphabetic order instead.
2024-02-13 11:51:45 +01:00
Akihiro Suda
a834bd84b5
cri-api: KEP-3857: Recursive Read-only (RRO) mounts
This commit modifies the following files:

- `staging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.proto`
- `staging/src/k8s.io/cri-api/pkg/errors/errors.go`

Other changes were auto-generated by running `make update`.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 16:14:22 +09:00
Anish Ramasekar
77241d3125
Add apiserver_encryption_config_controller_automatic_reloads_total
metric

- Adds `apiserver_encryption_config_controller_automatic_reloads_total`
  metric with status label for encryption config reload success/failure.
- Deprecated `apiserver_encryption_config_controller_automatic_reload_failures_total` and `apiserver_encryption_config_controller_automatic_reload_success_total`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 21:47:46 -08:00
Kubernetes Prow Robot
5909bd2ddf
Merge pull request #123251 from aramase/aramase/ci/debug_kms_job
ci: bump kind to latest for kms jobs
2024-02-12 20:40:11 -08:00
Kubernetes Prow Robot
c93c53ce24
Merge pull request #123254 from liggitt/revert-copy-test
Revert "kubeadm: increase ut coverage for app/util"
2024-02-12 18:17:09 -08:00
Jordan Liggitt
4ae2b3f75f
Revert "kubeadm: increase ut coverage for app/util"
This reverts commit 36904475db.
2024-02-12 20:13:30 -05:00
Anish Ramasekar
0e6409873a
remove --v arg from kubetest2-tester-ginkgo test args
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-13 00:02:49 +00:00
Anish Ramasekar
7dd624d344
ci: bump kind to latest for kms jobs
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 23:01:50 +00:00
Kubernetes Prow Robot
3bf9477b52
Merge pull request #122472 from pacoxu/flowcontrolv1
flowcontrol: set the serialization version to v1
2024-02-12 13:17:48 -08:00
Humble Chirammal
5b899d9303 make use of latest snapshot controller version v6.3.3 in the deployment
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2024-02-13 01:53:50 +05:30
Alexander Zielenski
d697f43d73 refactor: move matching logic into parent policy folder 2024-02-12 10:58:25 -08:00
Alexander Zielenski
8b14116509 refactor: move vap into parent policy folder
also renames to remove stutter

comment
2024-02-12 10:58:24 -08:00
Alexander Zielenski
8b26b6eec1 refactor: move celmetrics close to its usage in vap
does not need to be accessed from anywhere else, and removed an excessive lonesome `cel` pkg with just the metrics
2024-02-12 10:58:24 -08:00
Kubernetes Prow Robot
015e76aa24
Merge pull request #122846 from marosset/cri-stats-windows-fix
[KEP-2371] Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly
2024-02-12 10:57:28 -08:00