Commit Graph

115280 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
5463fcd7dd
Merge pull request #116280 from thockin/codegen_no_internal_subprojects
Codegen: streamline code for subproject generation
2023-04-11 14:16:32 -07:00
Tim Hockin
af29cca6ce
Codegen: new tools will not become part of 'all' 2023-04-11 12:47:45 -07:00
Tim Hockin
5f7345deaa
Codegen subprojects: consolidate generate-*groups
They both still exist, with the same API as before, but now
generate-groups calls generate-internal-groups, which is a superset.
2023-04-11 12:46:53 -07:00
Tim Hockin
95e614b371
Codegen subprojects: deprecate "all" in scripts
Replace "all" with the historical meaning of it in the generate-groups
scripts.
2023-04-11 12:45:45 -07:00
Tim Hockin
a94ed5b8ac
Codegen metrics: include v1beta2
This is why these scripts are terrible - open-coded lists always drift.
We will have to tackle that later.
2023-04-11 12:45:45 -07:00
Tim Hockin
8b68e063e1
Codegen subprojects: regen defaulters when needed
If you manually remove generated defaults, they do not get regenerated
without this.
2023-04-11 12:45:44 -07:00
Tim Hockin
5200f4b0d3
Codegen subprojects: reify 'all' into explicit 2023-04-11 12:45:43 -07:00
Tim Hockin
201653aa87
Trivial change to reduce diffs
This just makes it easier to diff generate-groups and
generate-internal-groups
2023-04-11 12:45:42 -07:00
Kubernetes Release Robot
ed5dd38dcd CHANGELOG: Update directory for v1.27.0 release 2023-04-11 17:27:35 +00:00
sarab
8d18ae6fc2 Use the generic Set in scheduler 2023-04-09 11:34:17 +05:30
Kubernetes Release Robot
ad18954259 CHANGELOG: Update directory for v1.27.0-rc.1 release 2023-04-06 20:17:16 +00:00
Kubernetes Prow Robot
d152baf143
Merge pull request #117134 from xmudrii/pub-bot-go1198
Update publishing-bot rules for release branches to Go 1.19.8
2023-04-06 09:25:47 -07:00
Kubernetes Prow Robot
54348233b5
Merge pull request #115036 from harche/vol_attach_log
Do not log entire pod struct while attaching the volume
2023-04-06 03:07:47 -07:00
Marko Mudrinić
4e0bc2397d
Update publishing-bot rules for release branches to Go 1.19.8
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2023-04-06 10:31:33 +02:00
Kubernetes Prow Robot
f28e9f6f45
Merge pull request #117126 from xmudrii/iptables-go1203
Update distroless-iptables to v0.2.3
2023-04-05 21:41:47 -07:00
Harshal Patil
1972dd1005 Do not log entire pod struct while attaching the volume
Signed-off-by: Harshal Patil <harpatil@redhat.com>
2023-04-05 20:24:12 -04:00
Marko Mudrinić
b19c362bf5
Update distroless-iptables to v0.2.3
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2023-04-06 01:37:14 +02:00
Kubernetes Prow Robot
20fc8a939c
Merge pull request #117125 from xmudrii/go1203
[go] Bump images, dependencies and versions to go 1.20.3
2023-04-05 16:35:50 -07:00
Marko Mudrinić
2a69edb43d
[go] Bump images, dependencies and versions to go 1.20.3
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2023-04-05 23:46:34 +02:00
Pushkar Joglekar
e450ed9812 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 2023-04-04 21:41:29 -07:00
Kubernetes Prow Robot
330b5a2b8d
Merge pull request #117088 from nckturner/public-arg-webhook
Export WebhookHandler struct because some CCMs use Run directly
2023-04-04 18:07:39 -07:00
Kubernetes Prow Robot
e7e7532a05
Merge pull request #117073 from mimowo/fix-daemonset-pod-restarts
Fix: Recreate DaemonSet pods completed with Succeeded phase
2023-04-04 13:41:39 -07:00
Michal Wozniak
b5dd5f1f3a Investigate and fix the handling of Succeeded pods in DaemonSet 2023-04-04 19:21:15 +02:00
Craig Ingram
3d3686b9cf Return error for localhost seccomp type with no localhost profile defined 2023-04-04 14:53:46 +00:00
Nick Turner
873127e3b0 Export WebhookHandler struct because some CCMs use Run directly 2023-04-04 13:25:49 +00:00
Maxim Patlasov
0a37f09c32 Fix directory mismatch for volume.SetVolumeOwnership()
In most cases `dir` arg of `SetUpAt()` method of `volume.Mounter` interface is the same as `mounter.GetPath()` because we usually call `SetUpAt()` from `SetUp()` like this:"
```
func (ed *emptyDir) SetUp(mounterArgs volume.MounterArgs) error {
	return ed.SetUpAt(ed.GetPath(), mounterArgs)
}
```
(this example is from `volume/emptydir/empty_dir.go`, but there are plenty other examples like that in `volume/*`)

However, there is currently one exception. This is from `volume/projected/projected.go`:
```
	if err := wrapped.SetUpAt(dir, mounterArgs); err != nil {
		return err
	}
```
(see 96306f144a/pkg/volume/projected/projected.go (L203))

In this case `dir` is not equal to `wrapped.GetPath()` and `volume.SetVolumeOwnership()` fails when called from `SetUpAt()` of wrapped volume:
```
lstat /var/lib/kubelet/pods/a2f6e58f-7edf-4c48-a97c-ef1b8fd3caf6/volumes/kubernetes.io~empty-dir/wrapped_kube-api-access-knvkv: no such file or directory
```

To fix the issue let's pass `dir` arg to `volume.SetVolumeOwnership()` explicitly, and use it instead of `mounter.GetPath()`.
2023-04-03 12:34:37 -07:00
Davanum Srinivas
bda73bd112
Refactor remote runners
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-04-02 16:51:39 -04:00
Arda Güçlü
457bb58ebb kubectl events: Support fully qualified names for --for flag
Users can pass resources into `kubectl events` command via `--for` flag,
if they have desire to only get events for the resource they specify.

However, current `kubectl events` does not support passing fully qualified
names(e.g. `replicasets.apps`, `cronjobs.v1.batch`, etc.). This PR adds support
for this.
2023-03-31 12:34:00 +03:00
David Porter
1893f639d0 test: Fix flake in node e2e mirror pod tests
The newly added `MirrorPodWithGracePeriod when create a mirror pod and
the container runtime is temporarily down during pod termination` test
is currently flaking because in some cases when it is run there are
other pods from other tests that are still in progress of being
terminated. This results in the test failing because it asserts metrics
that assume that there is only one pod running on the node.

To fix the flake, prior to starting the test, verify that no pods exist
in the api server other then the newly created mirror pod.

Signed-off-by: David Porter <david@porter.me>
2023-03-31 02:10:39 -07:00
Kubernetes Prow Robot
d89d5ab268
Merge pull request #117023 from enj/enj/i/clean_boot
Clean up formatting
2023-03-30 19:53:48 -07:00
Davanum Srinivas
5662566e03
Set GOMAXPROCS explicitly
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-03-30 20:26:07 -04:00
Monis Khan
735bbc135c
Clean up formatting
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-03-30 16:38:15 -04:00
mouuii
56755b8ffd fix doc mismatch
Signed-off-by: mouuii <49775493+mouuii@users.noreply.github.com>
2023-03-30 17:08:59 +08:00
Paco Xu
8e36e948ce verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones 2023-03-30 10:44:45 +08:00
Clayton Coleman
ed48dcd2d7
kubelet: Ensure pods that have not started track a pendingUpdate
A pod that cannot be started yet (due to static pod fullname
exclusion when UIDs are reused) must be accounted for in the
pod worker since it is considered to have been admitted and will
eventually start.

Due to a bug we accidentally cleared pendingUpdate for pods that
cannot start yet which means we can't report the right metric to
users in kubelet_working_pods and in theory we might fail to start
the pod in the future (although we currently have not observed
that in tests that should catch such an error). Describe, implement,
and test the invariant that when startPodSync returns in every path
that either activeUpdate OR pendingUpdate is set on the status, but
never both, and is only nil when the pod can never start.

This bug was detected by a "programmer error" assertion we added
on metrics that were not being reported, suggesting that we should
be more aggressive on using log assertions and automating detection
in tests.
2023-03-29 15:29:59 -04:00
scott
db92cc1388 ftr(etcd): add benchmarks 2023-03-29 21:52:38 +08:00
Wojciech Tyczyński
05f4e497f1 Deflake TestGetListNonRecursive 2023-03-29 13:46:49 +02:00
Rita Zhang
906f0607ef
Clean up kms test
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-03-28 22:36:41 -07:00
HirazawaUi
397cc73dc9 delete unused functions in pkg/controller directory 2023-03-28 22:41:20 +08:00
Anish Ramasekar
449f847630
[KMSv2] update ci script and add readme
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-03-27 20:43:37 +00:00
Kubernetes Prow Robot
c3e7eca7fd
Merge pull request #116945 from soltysh/skip_vendor
Skip vendor directory when removing generated files
2023-03-27 11:00:29 -07:00
Maciej Szulik
27ad623b3d
Skip vendor directory when removing generated files 2023-03-27 19:07:43 +02:00
Kubernetes Prow Robot
3a46f26115
Merge pull request #116948 from MadhavJivrajani/fix-verify-vendor
.*: update vendor dir and cleanup
2023-03-27 08:56:28 -07:00
Antoni Zawodny
beb329f4bf Do not look at VPC-related resources outside the cluster's network 2023-03-27 17:44:25 +02:00
Mike Spreitzer
8d92cfb131 Added conversions to/from NamespacedName
Also renamed file to something more on-point.
2023-03-27 11:22:09 -04:00
Madhav Jivrajani
63b5ca69f1 .*: update vendor dir and cleanup
Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
2023-03-27 19:18:05 +05:30
Hao Ruan
f638e2849f replaced spew.Sprintf with a util pretty print function 2023-03-27 09:24:22 +08:00
Kubernetes Prow Robot
8f15859afc
Merge pull request #116919 from dims/publishing-bot-rules-for-new-release-1.27-branch
publishing-bot rules for the new release-1.27 branch
2023-03-24 18:59:53 -07:00
Kubernetes Prow Robot
f393e7da7f
Merge pull request #116877 from enj/enj/i/validate_encrypt_resp_early
kmsv2: validate encrypt response at DEK generation time
2023-03-24 15:18:03 -07:00
Davanum Srinivas
1ad7cacba5
publishing-bot rules for the new release-1.27 branch
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-03-24 18:08:53 -04:00