Commit Graph

118292 Commits

Author SHA1 Message Date
Todd Neal
717c149a73 fix mirror pod nfs test failure due to differing NFS versions
/exports *(rw,fsid=0,insecure,no_root_squash)

can be mounted as `/exports` using NFSv3 and `/` using NFSv4

Mount as '/', since clients that support both can try both.
2023-08-11 07:27:05 -05:00
Arpit Agrawal
279a663f94
Update README.md
The Service Account Token link in the readme is broken and refers to a page that no longer exists.
In this PR I updated the correct link in the readme
2023-08-11 17:46:28 +05:30
Yuki Iwai
6f27733af8 Job: Replace deprecated workqueue library with supported one
Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>
2023-08-11 20:35:36 +09:00
Kubernetes Prow Robot
6e0cb243d5
Merge pull request #119899 from sanchita-07/sanchita-07/KEP-1860
Remove release-notes for the reverted PR#118895
2023-08-11 03:55:26 -07:00
SANCHITA MISHRA
b4fac632cd
Remove release-notes for the PR#118895 2023-08-11 15:24:27 +05:30
SANCHITA MISHRA
5f7b27f4ad
Remove release-notes for the PR#118895 2023-08-11 13:11:53 +05:30
Kubernetes Prow Robot
8a7df72782
Merge pull request #119888 from dgrisonnet/panic-storage-metric
Fix segfault during storage size metric collection
2023-08-10 20:53:26 -07:00
Kubernetes Release Robot
c5048f41fe CHANGELOG: Update directory for v1.28.0-rc.1 release 2023-08-10 20:57:36 +00:00
Wei Huang
765f3916c2
Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip 2023-08-10 13:43:00 -07:00
Damien Grisonnet
c6efaf16c1 apiserver/etcd3: fix segv during metric collection
Fix a segfault when collecting the storage size metrics when the getters
used to collect the data on etcd haven't been initialized properly. This
happens when the EtcdOptions are not applied which is the case for
aggregated apiservers that don't care about storage.

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
2023-08-10 17:31:18 +02:00
Kubernetes Prow Robot
18c3c7efb3
Merge pull request #119867 from pohly/kube-proxy-verbosity
kube-proxy: fix combination of --config and logging command line flags
2023-08-10 05:25:27 -07:00
acejilam
9646ae5a9e Fix: null jsonpath serialization
Signed-off-by: acejilam <acejilam@gmail.com>
2023-08-10 19:32:47 +08:00
Patrick Ohly
6ddcdef29a kube-proxy: fix combination of --config and logging command line flags
When parsing a config file, all settings derived from command line flags are
discarded because only the config settings are used. That has been the
traditional behavior for non-logging flags.

But `--config ... -v=4` used to work until
71ef0dafa7 added logging to the configuration.
To restore the original behavior, kube-proxy now:
- parses flags
- reads the config file
- applies logging settings from the flags to the config loaded from file
- uses that merged config
2023-08-10 11:14:04 +02:00
Kubernetes Prow Robot
a287fd6aa6
Merge pull request #119869 from a-hilaly/e2e-tests/match-conditions/flake-fix
Remove `matchConditions` flaky test
2023-08-10 01:01:28 -07:00
Sascha Grunert
8ab6bee676
Make seccomp status checks in e2e tests more robust
The tests have been introduced in
ca7be7dc6d
and checked for `ecc` in `/proc/self/status` since its creation.

We got a new field `Seccomp_filters:` with the Linux commit
c818c03b66,
means that `ecc` would now match both and interfere with possible test
results depending on the host.

The field `Seccomp:` got introduced in
2f4b3bf6b2
and has never changed since then, means we can use it directly to make
the tests more strict.

Refers to https://github.com/kubernetes-sigs/cri-tools/pull/1236

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-08-10 09:51:03 +02:00
Junhao Zou
509ffe2938
Fix receiver names in legacyProvider 2023-08-10 14:59:46 +08:00
Kubernetes Prow Robot
e6218f3d3b
Merge pull request #119876 from marosset/revert-118895
Revert "Merge pull request #118895 from RyanAoh/kep-1860"
2023-08-09 19:27:31 -07:00
Mark Rossetti
0d90d1ffa5
Revert "Merge pull request #118895 from RyanAoh/kep-1860"
This reverts commit 890a6c8f70, reversing
changes made to 4f60a8d493.
2023-08-09 15:51:20 -07:00
Kubernetes Prow Robot
3d941afece
Merge pull request #119835 from liggitt/mitigate-aggregated-discovery-npe
Avoid returning nil responseKind in v1beta1 aggregated discovery
2023-08-09 15:37:30 -07:00
Jeremy Rickard
80710976cf
[releng] Update publishing-bot rules for release-1.24 to Go 1.20.7
Signed-off-by: Jeremy Rickard <jeremyrrickard@gmail.com>
2023-08-09 16:07:23 -06:00
kannon92
f73c253acc fix typos for pod replacement policy 2023-08-09 20:34:48 +00:00
Kubernetes Prow Robot
201f807036
Merge pull request #119784 from sanposhiho/bug-fix
fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent
2023-08-09 13:05:31 -07:00
Jordan Liggitt
1876ddf714
Avoid returning nil responseKind in v1beta1 aggregated discovery 2023-08-09 14:45:33 -04:00
Amine Hilaly
55ca1a6ee1 Remove leases test case from AdmissionWebhookMatchConditions suit
Signed-off-by: Amine Hilaly <hilalyamine@gmail.com>
2023-08-09 18:39:01 +02:00
Kubernetes Prow Robot
cb56c4c627
Merge pull request #119847 from jeremyrickard/go1207-publishing-bot-rules
[releng] Update publishing-bot rules for release branches to Go 1.20.7
2023-08-09 08:25:51 -07:00
SataQiu
5fb543a411 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate 2023-08-09 19:23:06 +08:00
Kensei Nakada
050c0437e6 fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent 2023-08-09 03:32:14 +00:00
Jeremy Rickard
9bc857d6d9
[releng] Update publishing-bot rules for release branches to Go 1.20.7
Signed-off-by: Jeremy Rickard <jeremyrrickard@gmail.com>
2023-08-08 18:03:49 -06:00
Monis Khan
62b063b74b
wsstream: use a single approach to detect connection upgrade
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-08-08 17:43:39 -04:00
Stephen Heywood
74053e2151 Create e2e test for PV/PVC endpoints
e2e test validates the following 15 endpoints
- createCoreV1NamespacedPersistentVolumeClaim
- createCoreV1PersistentVolume
- deleteCoreV1CollectionNamespacedPersistentVolumeClaim
- deleteCoreV1CollectionPersistentVolume
- deleteCoreV1NamespacedPersistentVolumeClaim
- deleteCoreV1PersistentVolume
- listCoreV1NamespacedPersistentVolumeClaim
- listCoreV1PersistentVolume
- listCoreV1PersistentVolumeClaimForAllNamespaces
- patchCoreV1NamespacedPersistentVolumeClaim
- patchCoreV1PersistentVolume
- readCoreV1NamespacedPersistentVolumeClaim
- readCoreV1PersistentVolume
- replaceCoreV1NamespacedPersistentVolumeClaim
- replaceCoreV1PersistentVolume
2023-08-09 09:12:42 +12:00
Kubernetes Prow Robot
f0dcf06140
Merge pull request #119818 from jeremyrickard/go1207-iptables
Bump distroless-iptables to 0.2.7
2023-08-08 08:10:16 -07:00
Jefftree
49e00e8bde Move adding GroupVersion log until after an update is confirmed 2023-08-08 14:28:54 +00:00
Antonio Ojea
77b3bb0f69 fix race on etcd client constructor for healthchecks
Change-Id: Id29b5b377989dcb5377316cfcdea367071a47365
2023-08-08 13:55:14 +00:00
Jeremy Rickard
38a81ca04f
Bump distroless-iptables to 0.2.7
Signed-off-by: Jeremy Rickard <jeremyrrickard@gmail.com>
2023-08-08 07:14:14 -06:00
Sai Ramesh Vanka
a6329ac453 Fix to honor PDB with an empty selector {}
PDB with an empty selector `{}` is selecting all the pods in a namespace.
But, during the `drain`, all the pods are getting evicted which is not expected.
This change should fix the issue and honor the pdb before evicting the pods.

Signed-off-by: Sai Ramesh Vanka <svanka@redhat.com>
2023-08-08 17:28:48 +05:30
Kubernetes Prow Robot
68d79b0d69
Merge pull request #119798 from aojea/endpoints_and_slices
Fix flaky test depending on EndpointSlices to be ready
2023-08-08 04:52:14 -07:00
Patrick Ohly
0e23840929 dra test: enhance performance of test driver controller
Analyzing the CPU profile of

    go test -timeout=0 -count=5 -cpuprofile profile.out -bench=BenchmarkPerfScheduling/.*Claim.* -benchtime=1ns -run=xxx ./test/integration/scheduler_perf

showed that a significant amount of time was spent iterating over allocated
claims to determine how many were allocated per node. That "naive" approach was
taken to avoid maintaining a redundant data structure, but now that performance
measurements show that this comes at a cost, it's not "premature optimization"
anymore to introduce such a second field.

The average scheduling throughput in
SchedulingWithResourceClaimTemplate/2000pods_100nodes increases from 16.4
pods/s to 19.2 pods/s.
2023-08-08 13:36:35 +02:00
Kubernetes Prow Robot
815b18a461
Merge pull request #119804 from jeremyrickard/go1207
[go] Bump images, versions and deps to use Go 1.20.7
2023-08-07 17:44:12 -07:00
Jeremy Rickard
ae86051ec5
Bump protoc
Signed-off-by: Jeremy Rickard <jeremyrrickard@gmail.com>
2023-08-07 17:26:05 -06:00
Antonio Ojea
f355b22f5f implement Stringer for podActions
klog prints an internal error when trying to log the podActions struct.

> I0505 14:12:12.827065  190662 kuberuntime_manager.go:1014] "computePodActions got for pod" podActions="<internal error: json: unsupported type: map[container.ContainerID]kuberuntime.containerToKillInfo>" pod="kube-system/coredns-8f5847b64-mzw46"

Implement the stringer interface on the struct to avoid the json error.

Change-Id: I22444524a78a0ecec9490b9240def371a4129434
2023-08-07 22:48:28 +00:00
Joe Betz
e4d16f34c1 Add test coverage of result size of string operations 2023-08-07 18:12:17 -04:00
Monis Khan
10fe3da87d
Delete PSP API types and generated clients
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-08-07 16:44:13 -04:00
Joe Betz
69a5a52896 Bump cel-go to v0.16.1 2023-08-07 15:51:36 -04:00
Jeremy Rickard
72c8cf9fce
[go] Bump images, versions and deps to use Go 1.20.7
Signed-off-by: Jeremy Rickard <jeremyrrickard@gmail.com>
2023-08-07 13:25:59 -06:00
Antonio Ojea
2ceca1c78d e2e WaitForServiceEndpointsNum should watch EndpointSlices
EndpointSlices is the evolution of the Endpoint object and most of the
components are using it for implementing Services, this menas that
despite the Endpoint object is up to date, the EndpointSlices may
lag behind, so test must ensure that both objects are in sync to
avoid race conditions.

Change-Id: I5d9bc7774c68f321537379d1f20b2a1fe0b39e6e
2023-08-07 18:34:06 +00:00
Kubernetes Prow Robot
1620473a9a
Merge pull request #119725 from MadhavJivrajani/bump-net-dep
[CVE-2023-3978] .*: bump golang.org/x/net to v0.13.0
2023-08-07 09:14:32 -07:00
Maciej Szulik
ef51dbfa0c
Drop [Feature: tag to make sure this tests runs on pre-submits
In v1.27 StatefulSetStartOrdinal became beta, which makes it on by
default, but we forgot to turn these tests on along with it. This makes
these tests run always.
2023-08-07 13:38:43 +02:00
Dr. Stefan Schimanski
a1809ffae3
client-go: log proper 'caches populated' message, with type and source and only once
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2023-08-07 12:56:37 +02:00
Dr. Stefan Schimanski
37730c07dd
apiserver/httplog: pretty up impersonation output
```
I0807 09:09:16.419239       1 httplog.go:132] "HTTP" verb="GET" URI="/apis/batch/v1?timeout=32s" latency="214.666µs" userAgent="kubernetes-provider/v0.0.0 (linux/arm64) kubernetes/$Format" audit-ID="948ef6b2-474d-45a7-ad5f-894ce93d05f7" srcIP="192.168.139.202:35542" apf_pl="exempt" apf_fs="exempt" apf_execution_time="129.5µs" resp=200 addedInfo=<

      &{kubernetes-admin  [system:masters system:authenticated] map[]} is acting as &{foo  [system:authenticated] map[]}
       >
```

to

```
I0807 09:09:16.419239       1 httplog.go:132] "HTTP" verb="GET" URI="/apis/batch/v1?timeout=32s" latency="214.666µs" userAgent="kubernetes-provider/v0.0.0 (linux/arm64) kubernetes/$Format" audit-ID="948ef6b2-474d-45a7-ad5f-894ce93d05f7" srcIP="192.168.139.202:35542" apf_pl="exempt" apf_fs="exempt" apf_execution_time="129.5µs" resp=200 addedInfo="kubernetes-admin[system:masters system:authenticated] is impersonating foo[system:authenticated]"
```

Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2023-08-07 12:10:35 +02:00
carlory
3e908c5bde e2e_common: stop using deprecated framework.ExpectEqual 2023-08-07 01:15:33 +08:00