github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 20:00:07 +00:00
Code Issues Projects Releases Wiki Activity
136,636 Commits 42 Branches 9,765 Tags
0fc32838ffae4e8ee9ccc8a615c52d36157b1ecb
Commit Graph

25744 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
814c431a00 Merge pull request #136641 from troychiu/dra-devices-order 
DRA: Introduce index-based naming in resourceslice controller and sort slices and pools lexicographically
 2026-03-17 22:55:43 +05:30
Troy Chiu
761fc9d474 Introduce index-based naming in resourceslice controller and sort slices and pools lexicographically 
fix test
 2026-03-17 16:32:10 +00:00
Maciej Skoczeń
38f536c713 Use CycleState.IsPodGroupSchedulingCycle instead of NeedsPodGroupScheduling for pods 2026-03-17 09:10:52 +00:00
Kubernetes Prow Robot
9cf54337e4 Merge pull request #137689 from jpbetz/fix-reset-fields-and-test 
Test that field wiping and field resetting is applied consistently across API
 2026-03-17 07:27:43 +05:30
Kubernetes Prow Robot
5edaecfa53 Merge pull request #137609 from enj/enj/f/constrained_impersonation_beta 
KEP-5284: promote constrained impersonation to beta
 2026-03-17 06:35:36 +05:30
Kubernetes Prow Robot
fe37c66436 Merge pull request #137773 from lalitc375/graduate-forbidden 
Graduate +k8s:forbidden to beta.
 2026-03-17 00:35:37 +05:30
Kubernetes Prow Robot
d763ae8f6f Merge pull request #137073 from iomarsayed/snapshot-podgroup-state-before-scheduling-cycle 
Snapshot PodGroup state before initiating scheduling cycle
 2026-03-16 23:37:48 +05:30
Kubernetes Prow Robot
6c300757e8 Merge pull request #136314 from petern48/etcd_metrics_beta 
Graduate etcd metric 'apiserver_storage_events_received_total' to BETA
 2026-03-16 22:23:39 +05:30
Kubernetes Prow Robot
9c7e57bb7c Merge pull request #137330 from tico88612/cleanup/test-node-pod-dep-prometheus 
Remove dep. Prometheus from test/e2e/node/pods.go
 2026-03-16 20:43:49 +05:30
Kubernetes Prow Robot
23e0d392ce Merge pull request #137742 from dims/dsrinivas/issue-137739-drain-timeout 
kubectl/drain: widen namespace termination retry timeout
 2026-03-16 18:53:39 +05:30
Lalit Chauhan
f9c3cd9db4 Graduate +k8s:forbidden to beta. 2026-03-16 10:59:43 +00:00
Jian Qiu
6c8e5e2d41 Add more unit tests for constrained impersonation (#136737) 
* Add more unit tests for constrained impersonation

test cases for large number of groups/extra
test cases for system:masters constrained impersonation is not allowed

Signed-off-by: Jian Qiu <jqiu@redhat.com>

* Validate each authz request in the constrained impersonation unit test

Signed-off-by: Jian Qiu <jqiu@redhat.com>

---------

Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2026-03-16 11:03:37 +05:30
Kubernetes Prow Robot
8cfc85428a Merge pull request #137678 from aaron-prindle/flowcontrol-discriminator-and-member-dv-migration 
feat: flowcontrol LimitResponse and PriorityLevelConfigurationSpec discriminator and member dv migration
 2026-03-16 09:15:37 +05:30
Kubernetes Prow Robot
040ca59611 Merge pull request #137454 from haircommander/proc-mount-ga 
KEP-4265: feature: promote ProcMountType to GA
 2026-03-15 07:57:34 +05:30
Davanum Srinivas
77f8d7c2a9 kubectl/drain: widen namespace termination retry timeout 
TestEvictDuringNamespaceTerminating intentionally exercises the retry path
but only allows 10ms of total time. The production loop sleeps, refreshes
state, and retries under that same deadline, so a single retry plus
scheduler jitter is enough to exhaust the budget under -race or on busy
CI workers.

Keep the retry interval small so the test still covers the retry behavior,
but widen the overall timeout so the assertion measures semantics instead
of machine speed.

Tested:
go test -race ./staging/src/k8s.io/kubectl/pkg/drain -run TestEvictDuringNamespaceTerminating -count=100
 2026-03-14 11:58:32 -04:00
Akhil Mohan
e0ec980b4d remove streaming as a dependency of kms repo 
kms does not depend on streaming hence the entry is not needed
in the dependencies in publishing/rules file

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2026-03-14 18:11:57 +05:30
Kubernetes Prow Robot
1817e10998 Merge pull request #136185 from tallclair/ndf-bitmap 
Optimize NodeDeclaredFeatures with a bitmap FeatureSet implementation
 2026-03-14 06:37:34 +05:30
Omar Sayed
e1b18e34ff snapshot pod group state before scheduling cycle and embed pod group manager into cache 2026-03-13 21:44:17 +00:00
Aaron Prindle
ccaab0cfd1 feat: add LimitResponse declarative validation discriminator tags 2026-03-13 13:41:03 -07:00
Aaron Prindle
595da7826c feat: add PriorityLevelConfigurationSpec declarative validation discriminator tags 2026-03-13 13:41:03 -07:00
Kubernetes Prow Robot
4db90ce84e Merge pull request #137682 from aaron-prindle/discriminator-and-member-stability-level-support 
fix: stability level to discriminator member validations
 2026-03-14 02:09:35 +05:30
Aaron Prindle
c0cf5d1838 address-feedback: pr review round 2 2026-03-13 12:22:15 -07:00
Peter Hunt
389825754c proc mount: drop featuregate note on API 
Signed-off-by: Peter Hunt <pehunt@redhat.com>
 2026-03-13 15:20:49 -04:00
Kubernetes Prow Robot
733703ee6e Merge pull request #137339 from qiujian16/parallel-requests 
Tests parallel requests in constrained impersonation
 2026-03-14 00:41:43 +05:30
Kubernetes Prow Robot
b5661be4ff Merge pull request #137248 from SergeyKanzhelev/propagate-context-cri-client 
add context to CRI API client and contextual logging per-call
 2026-03-14 00:41:36 +05:30
Aaron Prindle
c8a857b72f address-feedback: pr review round 1 2026-03-13 11:45:44 -07:00
Kubernetes Prow Robot
cf291323c2 Merge pull request #137683 from ndixita/ippr-kubectl 
Bug fix - consider status resources when computing total resources
 2026-03-13 23:11:42 +05:30
Kubernetes Prow Robot
b869833664 Merge pull request #137115 from damdo/add-tls-curve-preferences 
Add --tls-curve-preferences flag for configuring TLS key exchange mechanism (curves)
 2026-03-13 23:11:35 +05:30
Peter Hunt
539352eddd feature: promote ProcMountType to GA 
Signed-off-by: Peter Hunt <pehunt@redhat.com>
 2026-03-13 12:27:16 -04:00
Kubernetes Prow Robot
2fd6c47656 Merge pull request #137706 from scaliby/extract-resource-under-describe 
Extract resource under describe to a separate variable
 2026-03-13 21:09:43 +05:30
Kubernetes Prow Robot
7f3a5ab96f Merge pull request #136579 from romanbaron/reuse-scheduling-signature 
Reuse pod scheduling signature for opportunistic batching
 2026-03-13 20:15:39 +05:30
Damiano Donati
53b163298d Add --tls-curve-preferences flag for configuring TLS key exchange mechanisms 
Introduce support for specifying allowed TLS key exchange mechanisms
(IANA TLS Supported Groups) via a new --tls-curve-preferences flag,
following the same pattern as --tls-cipher-suites.

Curve preferences are specified as numeric IANA TLS Supported Group IDs
(e.g. 23,29,4588) rather than string names. This avoids maintaining a
hardcoded name-to-ID map that would become stale with each Go release,
and ensures new curves (such as Go 1.26's SecP256r1MLKEM768 and
SecP384r1MLKEM1024) work automatically when rebuilding with a newer Go
version -- no code changes required.

Changes:
- Add curves_flag.go in component-base/cli/flag with a simple
  int-to-tls.CurveID cast function
- Add CurvePreferences field ([]int32) to SecureServingOptions, registered
  via IntSliceVar, and wire it through to tls.Config

The order of the list is ignored; Go selects from the set using an
internal preference order. If omitted, Go defaults are used. The set of
accepted values depends on the Go version used to build the binary; see
https://pkg.go.dev/crypto/tls#CurveID for reference.
 2026-03-13 14:26:05 +01:00
Kubernetes Prow Robot
2bd6c7fe3c Merge pull request #137298 from dims/dsri/cri-streaming-option-a-hardcut 
cri streaming option a hardcut - add new staging repositories `streaming` and `cri-streaming`
 2026-03-13 17:23:36 +05:30
Aaron Prindle
bea6f92226 fix: stability level to discriminator member validations 2026-03-13 03:34:05 -07:00
Konrad Kaim
93755d411b feat: extract resource under describe to a separate variable 2026-03-13 09:03:33 +00:00
Patrick Ohly
85bca3b684 DRA device taints: fix beta-enabled, alpha-disable configurations 
DeviceTaintRule is off by default because the corresponding v1beta2 API group
is off. When enabled, the potentially still disabled v1alpha3 API version was
used instead of the new v1beta2, causing the scheduler to fail while setting up
informers and then not scheduling pods.
 2026-03-13 09:20:57 +01:00
Jian Qiu
bb664ec43c Tests parallel requests in contrained impersonation 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
 2026-03-13 13:35:37 +08:00
Tim Allclair
39a4f7654a Optimize NDF FeatureMapper.Unmap for sparse feature sets 2026-03-13 04:28:16 +00:00
Tim Allclair
b1b75f93d7 Make size explicit; switch to binary string format 2026-03-13 04:28:16 +00:00
Tim Allclair
1c2b07fa22 Avoid computing feature diff when not necessary 2026-03-13 04:28:16 +00:00
Tim Allclair
f91f641a65 Switch to bitmapped FeatureSet implementation. 2026-03-13 04:28:16 +00:00
Tim Allclair
e4521526b4 NodeDeclaredFeatures: Add global default NDF registry 2026-03-13 04:28:16 +00:00
Tim Allclair
52b8fa1d05 NodeDeclaredFeatures: Extract ndf types to subpackage to avoid circular dependencies 2026-03-13 04:28:16 +00:00
ndixita
97f00d18ee Setting UseStatusResources when fetching total pod requests and limits 2026-03-13 02:09:50 +00:00
Joe Betz
67a23785ee Update reset fields to match current field wiping behavior 2026-03-12 20:49:15 -04:00
Kubernetes Prow Robot
4221620945 Merge pull request #137470 from brianpursley/fix-wait-panic 
Check condition cast to avoid potential panic in kubectl wait
 2026-03-13 06:15:48 +05:30
Kubernetes Prow Robot
21305568b0 Merge pull request #137083 from brejman/generate-plugin 
Add placement generator plugin interfaces and logic for running them
 2026-03-13 06:15:33 +05:30
Kubernetes Prow Robot
8ebee69b15 Merge pull request #137398 from Rajneesh180/fix-client-go-nil-event-key-v4 
client-go: fix goroutine hot-loop in StartEventWatcher on broadcaster shutdown
 2026-03-13 02:03:36 +05:30
Kubernetes Prow Robot
4e2bbc78bf Merge pull request #137170 from pohly/dra-device-taints-beta 
DRA device taints: graduate to beta
 2026-03-13 00:13:38 +05:30
Patrick Ohly
7d2781a0c3 DRA device taints: generated files 2026-03-12 18:26:03 +01:00