Commit Graph

134228 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
1078cf59b9 Merge pull request #133964 from K-Diger/fix/dra-plugin-unreachable-code
kubelet: refactor DRA plugin health client initialization
2025-12-17 16:26:03 -08:00
Kubernetes Prow Robot
6d0b48092e Merge pull request #133895 from Narita-1095305/fix/peerproxy-rand-shadowing
apiserver/peerproxy: avoid shadowing math/rand with local variable\n\…
2025-12-17 16:25:55 -08:00
Kubernetes Prow Robot
09e71afb4b Merge pull request #133828 from dims/drop-unnecessary-usegocmp-build-tag
Drop unnecessary `usegocmp` build tag
2025-12-17 16:25:47 -08:00
Kubernetes Prow Robot
1187749524 Merge pull request #133719 from carlory/removeMaxAttachLimit
clean up removeMaxAttachLimit
2025-12-17 16:25:40 -08:00
Kubernetes Prow Robot
97e95711c5 Merge pull request #133654 from kwohlfahrt/kubelet-cert
Fix kubelet certificate reload when connecting by IP address
2025-12-17 16:25:32 -08:00
Kubernetes Prow Robot
eb7e43ba44 Merge pull request #133466 from bart0sh/PR193-refactor-api-enablement
Refactor API group validation and error reporting
2025-12-17 16:25:25 -08:00
Kubernetes Prow Robot
e14cdadc5a Merge pull request #132807 from iholder101/feature/ImageVolumeWithDigest
[KEP-5365] Implement Image Volume with Digest
2025-12-17 16:25:17 -08:00
Kubernetes Release Robot
92d5eb1175 CHANGELOG: Update directory for v1.35.0 release 2025-12-17 13:01:55 +00:00
Kubernetes Release Robot
ea0dce1df1 CHANGELOG: Update directory for v1.32.11 release 2025-12-16 18:27:41 +00:00
Kubernetes Prow Robot
c180d6762d Merge pull request #135692 from pohly/local-up-containerd-config-fix
local-up-cluster.sh: support more recent containerd like 2.2
2025-12-12 20:33:45 -08:00
Patrick Ohly
f58f81d917 local-up-cluster.sh: support more recent containerd like 2.2
The kubekins image got updated from containerd 1.7 to 2.2, which broke
local-up-cluster.sh in the CI because more recent containerd uses single
quotation marks around strings instead of double quotation marks as before. The
search/replaced with sed no longer matched, causing containerd to fail mounting
overlayfs on the default /var/lib/containerd. We have to use the emptyDir host
mount under /docker-graph.

The fix is to relax the search term slightly so that it accepts both kinds of
quotation marks.
2025-12-10 09:17:03 +01:00
Kubernetes Release Robot
04d87a4b6e CHANGELOG: Update directory for v1.33.7 release 2025-12-10 01:15:24 +00:00
Kubernetes Release Robot
f887a29fe2 CHANGELOG: Update directory for v1.34.3 release 2025-12-10 01:13:50 +00:00
Kubernetes Release Robot
612122f1d7 CHANGELOG: Update directory for v1.35.0-rc.1 release 2025-12-09 13:56:23 +00:00
Kubernetes Prow Robot
b4980b8d6e Merge pull request #135635 from ahmedtd/fix-pcr-logging-nil-panic
kubelet: Fix nil panic in podcertificatemanager
2025-12-08 17:07:33 -08:00
Taahir Ahmed
8d4237fde8 kubelet: Fix nil panic in podcertificatemanager
If the the PCR that kubelet created gets deleted before it is issued, a
nil panic will be thrown while composing the error message.
2025-12-08 11:43:07 -08:00
Kubernetes Prow Robot
03e14cc943 Merge pull request #135271 from bzsuni/bz/etcd/update/v3.6.6
etcd: Update etcd to v3.6.6
2025-12-07 23:39:29 -08:00
bzsuni
2c811fdd3a etcd: Update etcd to v3.6.6
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2025-12-08 05:37:15 +00:00
Kubernetes Prow Robot
c70011cf10 Merge pull request #135620 from cpanato/update-rules
update publishing rules
2025-12-05 12:06:55 -08:00
Kubernetes Prow Robot
ff9971ec7f Merge pull request #135586 from pohly/dra-upgrade-downgrade-skew-range
DRA upgrade/downgrade: roll over only after -alpha.0
2025-12-05 09:22:56 -08:00
Carlos Panato
dede2886a8 update publishing rules
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-05 13:59:29 +01:00
Kubernetes Prow Robot
4e94e70dca Merge pull request #135609 from cpanato/update-go-125
Bump images and versions to go 1.25.5 and distroless iptables
2025-12-05 04:42:59 -08:00
Carlos Panato
eae2a1bd5f Bump images and versions to go 1.25.5 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-05 10:40:45 +01:00
Kubernetes Prow Robot
9293f9326d Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-fallback
downgrade reflector watchlist fallback log to V(4)
2025-12-04 14:42:56 -08:00
Kubernetes Prow Robot
04e8064bcc Merge pull request #135580 from serathius/client-go-transformer
Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
2025-12-04 12:55:04 -08:00
Kubernetes Prow Robot
de61f59895 Merge pull request #135536 from dims/bump-x/crypto-to-v0.45.0
Bump golang.org/x/crypto to v0.45.0
2025-12-04 12:54:56 -08:00
Kubernetes Prow Robot
2711e8cb53 Merge pull request #135499 from aojea/crazy_ipallocator
ipallocator: handle errors correctly
2025-12-04 10:21:02 -08:00
Lukasz Szaszkiewicz
3f42ca1401 downgrade reflector watchlist fallback log to V(4) 2025-12-04 19:05:46 +01:00
k-diger
b255410b4f Remove duplicate connection management in DRA plugin Fixes 2025-12-05 01:34:44 +09:00
Patrick Ohly
91e221b047 DRA upgrade/downgrade: roll over only after -alpha.0
All version up to and including x.y.z-alpha.0 are treated as if we were
still the previous minor version x.(y-1). There are two reason for this:

- During code freeze around (at?) -rc.0, the master branch already
  identfies itself as the next release with -alpha.0. Without this
  special case, we would change the version skew testing from what
  has been tested and been known to work to something else, which
  can and at least once did break.

- Early in the next cycle the differences compared to the previous
  release are small, so it's more interesting to go back further.
2025-12-04 14:25:12 +01:00
Jordan Liggitt
91368adbb5 Use transformer in consistency checker 2025-12-04 14:17:22 +01:00
Valerian Roche
76da8d6de0 Add unit tests for Data Consistency Detector 2025-12-04 14:17:19 +01:00
Valerian Roche
88c20d46a4 [client-go #1415] Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
Signed-off-by: Valerian Roche <valerian.roche@datadoghq.com>
2025-12-04 13:46:08 +01:00
Kubernetes Prow Robot
615ac0d299 Merge pull request #135560 from lalitc375/map-debug
Fix MAP failure on objects with duplicate list items
2025-12-03 16:14:20 -08:00
Kubernetes Prow Robot
3025b0a7b4 Merge pull request #135553 from neoaggelos/neo/publishing-bot-rules-v1.35
add release-1.35 publishing bot rules
2025-12-03 05:40:21 -08:00
Angelos Kolaitis
c6fa10dbb7 add release-1.35 publishing bot rules 2025-12-03 14:33:16 +02:00
Kubernetes Prow Robot
579d4c6d06 Merge pull request #135568 from neoaggelos/neo/etcd-supported-versions
add skew -2 version in SupportedEtcdVersion
2025-12-03 04:10:26 -08:00
Angelos Kolaitis
03066850f6 remove TestEtcdSupportedVersionLength, no longer relevant
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:19:09 +02:00
Angelos Kolaitis
aa54ffa485 fix etcd versions after rotation
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:15:49 +02:00
Angelos Kolaitis
4a944d1a3f add skew -2 version in SupportedEtcdVersion
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:11:10 +02:00
Antonio Ojea
51f614a156 ipallocator: handle errors correctly
The ipallocator was blindly assuming that all errors are retryable, that
causes that the allocator tries to exhaust all the possibilities to
allocate an IP address.

If the error is not retryable this means the allocator will generate as
many API calls as existing available IPs are in the allocator, causing
CPU exhaustion since this requests are coming from inside the apiserver.

In addition to handle the error correctly, this patch also interpret the
error to return the right status code depending on the error type.

Co-authored-by: carlory <baofa.fan@daocloud.io>
2025-12-03 10:39:57 +00:00
Lalit Chauhan
de1b8e076a Fix MAP failure on objects with duplicate list items
When a Mutating Admission Policy (MAP) using ApplyConfiguration was applied to an existing object containing duplicate items in a list (e.g., duplicate environment variables), the operation would fail with a conversion error from Structured Merge Diff.

This change updates the `ApplyStructuredMergeDiff` function to use `typed.AllowDuplicates` when converting the `originalObject`. This allows MAP to process existing objects that may have technically invalid (duplicate) entries but are permitted by legacy validation.

New patches generated by the policy are still strictly validated and cannot introduce new duplicates.

Tests have been added to verify:
1. MAP can process an object with duplicate env vars.
2. MAP can modify an existing env var in an object with duplicates (which has the side effect of deduplicating the entry).
2025-12-02 23:27:55 +00:00
Davanum Srinivas
1f1d197701 Drop unnecessary usegocmp build tag
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-02 14:28:27 -05:00
Kubernetes Release Robot
76b76c2d52 CHANGELOG: Update directory for v1.35.0-rc.0 release 2025-12-02 17:16:33 +00:00
Kubernetes Prow Robot
ec1bf8a4f3 Merge pull request #135545 from cpanato/update-rules
update publishing rules
v1.36.0-alpha.0
2025-12-02 05:18:25 -08:00
Carlos Panato
f8be8d320f drop rules for release-1.31 as it is EOL
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-02 13:07:18 +01:00
Carlos Panato
7e3e9b6a64 update publishing rules
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-02 13:03:45 +01:00
Kubernetes Prow Robot
cb689abdfb Merge pull request #135492 from cpanato/update-go-125
[go] Bump images and versions to go 1.25.4 and distroless iptables
2025-12-02 02:18:24 -08:00
Kubernetes Prow Robot
d4d5fd8f9b Merge pull request #135535 from Rajalakshmi-Girish/remove-test-watch-stream-sep
Remove TestWatchStreamSeparation from storage/cacher related tests
2025-12-01 23:10:26 -08:00
Davanum Srinivas
5302b929ae Bump golang.org/x/crypto to v0.45.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-01 14:11:01 -05:00