126407 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jan Safranek	09afd667d7	Remove useless comment ... seLinuxOptions are copied few lines below during `append()`	2024-11-01 12:46:39 +01:00
Jan Safranek	d7daa688c9	Collect SELinux options only when needed ... Remove feature gate check from GetPodVolumeNames and collect SELinux options only when it's really needed.	2024-11-01 12:46:39 +01:00
Jan Safranek	6e4504685f	Fix access mode evaluation ... Now that SELinuxMount can support volumes with any access modes, length of the access modes does not need to be 1. That was requirement for RWOP volumes only.	2024-11-01 12:46:39 +01:00
Jan Safranek	97b03e29b9	Document getSELinuxLabel function	2024-11-01 12:46:39 +01:00
Jan Safranek	53e5335d3c	Add SELinuxMount tests	2024-11-01 12:46:39 +01:00
Jan Safranek	89da53cdeb	Add SELinuxChangePolicy tests	2024-11-01 12:46:38 +01:00
Jan Safranek	db353e0485	Refactor AddPodToVolume unit tests with multiple pods ... Refactor existing tests that run AddPodToVolume with multiple pods to a table.	2024-11-01 12:46:38 +01:00
Jan Safranek	db3d995c2a	Refactor AddPodToVolume unit tests with a single pod ... Refactor existing tests that run AddPodToVolume with a single pod / volume to a table. And add few extra tests, covering existing ReadWriteOncePod functionality.	2024-11-01 12:46:38 +01:00
Jan Safranek	e4eedfe105	Refactor getSELinuxLabel ... Return early and reduce indentation	2024-11-01 12:46:38 +01:00
Jan Safranek	8a400124f9	Use SELinuxChangePolicy	2024-11-01 12:46:38 +01:00
Jan Safranek	6ca7b959e4	Add SELinuxChangePolicy validation	2024-11-01 12:46:34 +01:00
Jan Safranek	3867cb40ad	Regenerated API	2024-11-01 12:45:56 +01:00
Jan Safranek	c73308e90a	Introduce SELinuxChangePolicy ... Feature gate + the API	2024-11-01 12:45:56 +01:00
Kubernetes Prow Robot	d87bf75c29	Merge pull request #128439 from oxxenix/migrate-security-components-to-contextual-logging ... clustertrustbundle, token_manager: migrate to contextual logging	2024-11-01 11:17:25 +00:00
Kubernetes Prow Robot	c4eea34dcf	Merge pull request #128293 from sebastiaanspeck/fix/kubeamd-typo ... Fix typo for `kubeadm`	2024-11-01 09:15:26 +00:00
Kubernetes Prow Robot	b831df733e	Merge pull request #128416 from jpbetz/reset-filter ... Add optional ResetFieldsFilterStrategy interface for storage	2024-11-01 02:23:26 +00:00
Joe Betz	2bc17d1cf0	Add ResetFieldsFilterStrategy	2024-10-31 21:19:27 -04:00
Joe Betz	6fe5140366	hack/pin-dependency.sh sigs.k8s.io/structured-merge-diff/v4 v4.4.2	2024-10-31 21:19:27 -04:00
Kubernetes Prow Robot	223ac36b50	Merge pull request #128399 from JesseStutler/dra ... Refactor the dynamicResources struct to DynamicResources	2024-11-01 00:33:27 +00:00
Kubernetes Prow Robot	74b9204b6a	Merge pull request #128473 from dims/copy-ParseCgroupFileUnified-and-drop-rest-of-containerd-cgroups ... Copy ParseCgroupFileUnified and Drop rest of containerd/cgroups	2024-10-31 21:57:33 +00:00
Kubernetes Prow Robot	34ce75749e	Merge pull request #128463 from knrc/fix_vap_elapsed_time_tracking ... Fix elapsed time tracking for validating admission policies	2024-10-31 21:57:27 +00:00
Kubernetes Prow Robot	d76a8fae67	Merge pull request #128468 from wojtek-t/fix_miss_events_tests ... Fix TestCacherDontMissEventsOnReinitialization test	2024-10-31 20:25:40 +00:00
Kubernetes Prow Robot	f68a0371f1	Merge pull request #128433 from pohly/dra-admin-access-in-status ... DRA API: check "AdminAccess in use" only once	2024-10-31 20:25:33 +00:00
Kubernetes Prow Robot	b337f048db	Merge pull request #127094 from sreeram-venkitesh/4818-allow-zero-for-prestop-hook ... KEP-4818: Relaxed validation for allowing zero in PreStop hook sleep action	2024-10-31 20:25:26 +00:00
Kubernetes Prow Robot	d34c181465	Merge pull request #128444 from tosi3k/ds-syncs ... Add --concurrent-daemonset-syncs argument to kube-controller-manager	2024-10-31 19:21:34 +00:00
Kubernetes Prow Robot	151ca569f9	Merge pull request #128426 from yongruilin/reset-label-allow-list ... feat(metrics): Add util func to reset label allow lists	2024-10-31 19:21:27 +00:00
Davanum Srinivas	e86d02b60c	Copy ParseCgroupFileUnified and Drop rest of containerd/cgroups ... Signed-off-by: Davanum Srinivas <davanum@gmail.com>	2024-10-31 13:42:39 -04:00
Kubernetes Prow Robot	365b457e3e	Merge pull request #128455 from jsafrane/refactor-kcm-plugins ... Refactor KCM volume plugin probe	2024-10-31 17:17:34 +00:00
Kubernetes Prow Robot	7a43edefa1	Merge pull request #128454 from jpbetz/fix-emulated-storage-version-encoding-config ... Don't select versions that have a replacement as storage version for APIs	2024-10-31 17:17:26 +00:00
Wojciech Tyczyński	d35ea217fa	Fix TestCacherDontMissEventsOnReinitialization test	2024-10-31 17:08:42 +01:00
yongruilin	d2ef8a1808	feat(metrics): Add util func to reset label allow lists ... Adds a utility function `ResetLabelValueAllowLists` to reset the allow lists for label values. This facilitates testing by allowing tests to clear the global state between runs and avoid unintended side effects.	2024-10-31 09:08:00 -07:00
Kubernetes Prow Robot	50998de605	Merge pull request #128457 from neolit123/1.31-improve-dry-run-logic ... kubeadm: support dryrunning upgrade without a real cluster	2024-10-31 15:21:33 +00:00
Kubernetes Prow Robot	8233d1edc8	Merge pull request #127164 from cici37/correctGoDoc ... Correct go doc for admissionregistration resources	2024-10-31 15:21:26 +00:00
Kubernetes Prow Robot	69e30cd642	Merge pull request #128263 from ShazaAldawamneh/typecheck-retry-generation ... CRD type check test fix	2024-10-31 13:53:33 +00:00
Kubernetes Prow Robot	ff5cb3791a	Merge pull request #127903 from soltysh/test_daemonset ... Add unit tests verifying the update touches old, unhealthy pods first, and only after new pods	2024-10-31 13:53:26 +00:00
Joe Betz	d5517b7a51	Unit test for emulated storage version selection	2024-10-31 09:22:28 -04:00
Lubomir I. Ivanov	07918a59e8	kubeadm: support dryrunning upgrade wihout a real cluster ... Make the following changes: - When dryrunning if the given kubeconfig does not exist create a DryRun object without a real client. This means only a fake client will be used for all actions. - Skip the preflight check if manifests exist during dryrun. Print "would ..." instead. - Add new reactors that handle objects during upgrade. - Add unit tests for new reactors. - Print message on "upgrade node" that this is not a CP node if the apiserver manifest is missing. - Add a new function GetNodeName() that uses 3 different methods for fetching the node name. Solves a long standing issue where we only used the cert in kubelet.conf for determining node name. - Various other minor fixes.	2024-10-31 14:58:47 +02:00
Kubernetes Prow Robot	c19ffb7e72	Merge pull request #128464 from sanposhiho/flaky-sched-one ... fix: flake TestSchedulerScheduleOne	2024-10-31 12:13:33 +00:00
Kubernetes Prow Robot	ac25b64847	Merge pull request #128450 from liggitt/revert-127669 ... Revert "Merge pull request #127669 from olyazavr/fix-probe-race"	2024-10-31 12:13:26 +00:00
Kubernetes Prow Robot	ce6396175b	Merge pull request #127318 from aroradaman/conntrack-reconciler ... proxy/conntrack: reconciler	2024-10-31 10:21:33 +00:00
Kubernetes Prow Robot	f94f87795f	Merge pull request #126935 from aojea/proxy_conntrack_service_topology ... e2e conntrack test for UDP Service with internalTrafficPolicy local	2024-10-31 10:21:26 +00:00
Maciej Szulik	174288d751	Add unit tests verifying the update touches old, unhealthy pods first, and only after new pods. ... Signed-off-by: Maciej Szulik <soltysh@gmail.com>	2024-10-31 11:13:01 +01:00
Patrick Ohly	d1f0d24ef9	DRA API: check "AdminAccess in use" only once ... This is simpler and an opportunity to explain the concept.	2024-10-31 09:42:18 +01:00
Kensei Nakada	bd8e9dd021	fix: flake TestSchedulerScheduleOne	2024-10-31 17:13:50 +09:00
Jan Safranek	9e29f95618	Refactor controller-manager volume plugins ... Most of the volume plugins were removed from k/k. Refactor how KCM controllers initialize the few leftovers.	2024-10-31 09:08:30 +01:00
Jan Safranek	cba5a93468	Remove portworx from attachable volume plugins ... The volume plugin does not implement AttachableVolumePlugin interface.	2024-10-31 09:08:21 +01:00
Jan Safranek	0ecbdf3622	Remove fc from expandable plugins ... FibreChannel volume plugin does not implement ExpandableVolumePlugin.	2024-10-31 09:08:21 +01:00
Jan Safranek	1fa8877c33	Add unit tests for KCM volume plugin probers	2024-10-31 09:08:19 +01:00
Kubernetes Prow Robot	453efd7a4b	Merge pull request #121604 from pacoxu/image-pull-e2e ... [node-e2e] add test cases for serialize and parallel image pulling	2024-10-31 08:01:26 +00:00
Paco Xu	82df7a7d82	use cri proxy injector for parallel pulling image tests	2024-10-31 14:50:50 +08:00