Commit Graph

126628 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
bc79d3ba87
Merge pull request #128396 from ritazh/deprecate-EnforceMountableSecretsAnnotation
deprecate EnforceMountableSecretsAnnotation in 1.32
2024-11-05 06:07:40 +00:00
lauralorenz
4965a7a8a0
KEP-4603: Refactor various hardcoded backoffs into separate constants (#128369)
* Refactor various hardcoded backoffs into separate constants

Signed-off-by: Laura Lorenz <lauralorenz@google.com>

* Fix comment formatting

Signed-off-by: Laura Lorenz <lauralorenz@google.com>

---------

Signed-off-by: Laura Lorenz <lauralorenz@google.com>
2024-11-05 06:07:28 +00:00
Kubernetes Prow Robot
e5a31e8bbc
Merge pull request #128552 from aojea/package_kubernete_test
fix package name
2024-11-05 04:45:28 +00:00
Joe Betz
0dc08eded9 Reorganize and expand unit test coverage
Also apply reviewer feedback
2024-11-04 21:41:33 -05:00
Joe Betz
0dfbc85cd9 Rename dispatcher Run to Start to match naming conventions 2024-11-04 21:40:54 -05:00
Joe Betz
0cb90973b0 Add authz test for deny when relevant fields are not changed 2024-11-04 21:40:54 -05:00
Joe Betz
1031e07e83 Fix comment in mutating webhook dispatcher 2024-11-04 21:40:54 -05:00
Joe Betz
1ad6fd7a0f Improve error messaging for validating admission policy authz 2024-11-04 21:40:54 -05:00
Joe Betz
c0f9c81338 Add MutatingAdmissionPolicy to samples 2024-11-04 21:40:54 -05:00
Joe Betz
700e3b5664 Update OpenAPI and fix openAPI tests to handle unexported jsonreferences
Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>
2024-11-04 21:40:54 -05:00
Joe Betz
a0f419fe56 Add integration tests
Co-authored-by: cici37 <cicih@google.com>
Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>
2024-11-04 21:40:54 -05:00
Joe Betz
712cc20996 Add jsonpatch.escapeKey CEL function 2024-11-04 21:40:54 -05:00
Joe Betz
25e11cd1c1 Add MutatingAdmissionPolicy plugin to admission chain
This expands the generic plugin support to both validating and mutating policies.  It also adds the
mutating policy admission plugin using the generics plugin support.

This also implements both ApplyConfiguration and JSONPatch support.

Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>
2024-11-04 21:40:54 -05:00
Joe Betz
081353bf8a Add mutation support into CompositedCompiler and reorganize for clarity 2024-11-04 21:40:54 -05:00
Joe Betz
fe3a7f5291 generate code 2024-11-04 21:40:47 -05:00
Joe Betz
3a1733f302 Add MutatingAdmissionPolicy API
This is closely aligned with ValidatingAdmissionPolicy
except that instead of validations that can fail with
messages, there are mutations, which can be defined
either with as an ApplyConfiguration or JSONPatch.

Co-authored-by: cici37 <cicih@google.com>
2024-11-04 21:40:38 -05:00
Kubernetes Prow Robot
ad9dad07a8
Merge pull request #127874 from AnishShah/image-gc-eviction
Cleanup unused images or containers first when eviction manager detects ContainerFsInodesFree signal
2024-11-05 02:39:28 +00:00
Kubernetes Prow Robot
f64eeb523d
Merge pull request #128096 from bart0sh/PR161-e2e_node-consolidate-NFSServer-APIs
e2e_node: consolidated NFSServer APIs.
2024-11-05 00:33:35 +00:00
Kubernetes Prow Robot
4932adf80d
Merge pull request #125296 from jsturtevant/windows-numa-support
Support CPU and Topology manager on Windows
2024-11-05 00:33:28 +00:00
Antonio Ojea
3424e7df46 fix package name 2024-11-04 23:58:59 +00:00
Kubernetes Prow Robot
19d56296aa
Merge pull request #128547 from aojea/rest_watch
rest client watch: use same name for package as folder
2024-11-04 23:15:51 +00:00
Kubernetes Prow Robot
74209418c4
Merge pull request #128514 from hoskeri/shop-local-proxy-local
e2e_node: Pass e2eCriProxy instead of updating global.
2024-11-04 23:15:43 +00:00
Kubernetes Prow Robot
5572688cef
Merge pull request #128342 from gnufied/recovery-expansion-beta
Move RecoverVolumeExpansionFailure feature to beta
2024-11-04 23:15:36 +00:00
Kubernetes Prow Robot
a2b19b3edb
Merge pull request #127910 from leonzz/leonzz-tmp
fix node start time inconsistency in kubelet
2024-11-04 23:15:29 +00:00
Kubernetes Prow Robot
9fe41b6198
Merge pull request #128046 from AxeZhan/ga3960
Graduate PodLifecycleSleepAction to GA
2024-11-04 22:09:35 +00:00
Kubernetes Prow Robot
97c79df18f
Merge pull request #127981 from jsafrane/selinux-changepolicy
1710: Implement SELinuxChangePolicy
2024-11-04 22:09:29 +00:00
Rita Zhang
e7cdc59555
deprecate EnforceMountableSecretsAnnotation in 1.32
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-11-04 13:13:32 -08:00
Kubernetes Prow Robot
b240c51a72
Merge pull request #128523 from carlory/cleanup-tmp-kubelet-dir
clean up tmp kubelet dir after run tests
2024-11-04 20:17:51 +00:00
Kubernetes Prow Robot
e7bcf57171
Merge pull request #128430 from richabanker/kubelet-metrics-slis-fix
do not install handler for '/metrics/slis' endpoint using sync.Once
2024-11-04 20:17:44 +00:00
Kubernetes Prow Robot
57438d0b8f
Merge pull request #128411 from macsko/split_scheduler_perf_tests
Split scheduler_perf config into subdirectories
2024-11-04 20:17:36 +00:00
Kubernetes Prow Robot
a8e1f41131
Merge pull request #124216 from iholder101/in-pod-vertical-scaling/update-cgroup-systemd-instead-of-cgroupfs
[FG:InPlacePodVerticalScaling] Handle systemd cgroup driver by using libcontainer for updating pod cgroup values
2024-11-04 20:17:29 +00:00
Antonio Ojea
8e1d0c664c rest client watch: use same name for package as folder 2024-11-04 19:56:55 +00:00
Filip Křepinský
05bc270870
add tests for getReplicaSetFraction in the deployment controller (#128535)
* better name variables in deployment_util

* add tests for getReplicaSetFraction in the deployment controller

- make validation more robust and make sure we do not divide by 0
2024-11-04 19:11:43 +00:00
Kubernetes Prow Robot
7a4d755644
Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
2024-11-04 19:11:35 +00:00
Alay Patel
3e3276e9fe
Promote PodIndexLabel for Statefulset and IndexedJob stable (#128387)
* lock feature gate for PodIndexLabel and mark it GA

Signed-off-by: Alay Patel <alayp@nvidia.com>

* add emulated version if testing disabling of PodIndexLabel FG

Signed-off-by: Alay Patel <alayp@nvidia.com>

---------

Signed-off-by: Alay Patel <alayp@nvidia.com>
2024-11-04 19:11:28 +00:00
leonzz
d5067208e4 fix boottime inconsistency with accurate uptime
`golang.org/x/sys/unix`.`Sysinfo` only provide uptime in whole second,
which leads to +-1s drifting in the boot time calculation. Reading from
/proc/stat is a better option as there's a reliable boot time directly
returned from linux kernel.
2024-11-04 19:09:27 +00:00
Kubernetes Prow Robot
b4d91d1b8a
Merge pull request #128517 from Tal-or/memorymanager-ga-features
node: kubelet: memmgr: Memory Manager to GA
2024-11-04 17:19:36 +00:00
Kubernetes Prow Robot
6a1a6fd85f
Merge pull request #126894 from carlory/ZeroLimitedNominalConcurrencyShares
remove generally available feature-gate ZeroLimitedNominalConcurrencyShares
2024-11-04 17:19:29 +00:00
Ben Luddy
0b7b42cc10
Reject custom marshalers from direct CBOR Marshal and Unmarshal.
Types that implement any of the stdlib text and JSON marshaler and unmarshaler interfaces without
implementing the corresponding CBOR interfaces are currently rejected by the CBOR serializer. This
is a temporary measure for the initial alpha; such types will ultimately be handled via automatic
transcoding. The "cbor/direct" subpackage exports Marshal and Unmarshal functions to support the
implementation of custom CBOR marshalling and unmarshalling behaviors, but did not include the
safeguard against handling non-CBOR custom marshalers.
2024-11-04 11:29:21 -05:00
Davanum Srinivas
2b0592ee77
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-11-04 10:51:13 -05:00
Kubernetes Prow Robot
cb31e42b85
Merge pull request #128533 from neolit123/1.32-update-system-validators-to-v1.9.0
vendor: update system-validators to v1.9.1
2024-11-04 14:49:28 +00:00
Kubernetes Prow Robot
cc319bf654
Merge pull request #128527 from atiratree/annotations-validation
improve validation for ReplicaSet annotations in the deployment controller
2024-11-04 13:07:28 +00:00
Kubernetes Prow Robot
6ae2d359ad
Merge pull request #128494 from dims/drop-go-colortext-and-its-usage
Drop go-colortext and its usage
2024-11-04 11:41:35 +00:00
Kubernetes Prow Robot
c6ea102f5f
Merge pull request #128298 from SergeyKanzhelev/convergePluginRegistrationForDRAAndDP
converge DRA and Device Plugin plugins registration
2024-11-04 11:41:28 +00:00
Lubomir I. Ivanov
6928007087 vendor: update system-validators to v1.9.1 2024-11-04 13:25:28 +02:00
Filip Křepinský
3ac0ac7a81 improve validation for ReplicaSet annotations in the deployment controller 2024-11-04 10:43:16 +01:00
Kubernetes Prow Robot
b845137026
Merge pull request #128526 from atiratree/deployment-improve-scaling
simplify ScalingReplicaSet event building in the deployment controller
2024-11-04 09:01:28 +00:00
Maciej Skoczeń
8371a35824 Split scheduler_perf config into subdirectories 2024-11-04 08:45:34 +00:00
Talor Itzhak
a56fde3694 lint: fix linter's complaints
Signed-off-by: Talor Itzhak <titzhak@redhat.com>
2024-11-04 09:59:39 +02:00
Talor Itzhak
37bcd38785 memorymanager: FG is locked to ON by default
We can remove the `if()` guards, since
the feature is always available.

Signed-off-by: Talor Itzhak <titzhak@redhat.com>
2024-11-04 09:57:21 +02:00