Giuseppe Scrivano
01ce36dd9e
KEP-127: add RuntimeHandler message to cri-api
...
so the CRI runtime can report what features are supported by each
handler.
It is currently used to report support for the user namespace.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-02-17 17:36:48 -03:00
Kubernetes Prow Robot
1dce896e2c
Merge pull request #123261 from skitt/allow-codegen-verification
...
codegen: don't nuke files if only verifying
2024-02-16 19:03:36 -08:00
Kubernetes Prow Robot
99a15e0480
Merge pull request #122877 from kinvolk/rata/userns
...
kubelet/userns: Wrap error message
2024-02-16 19:03:30 -08:00
Maksym Pavlenko
ae0a813be1
Fix tests after rebase
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-16 16:02:10 -08:00
Peter Hunt
c8b4d8ebed
kubelet: add reason field to image gc metric
...
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-02-16 16:02:41 -05:00
Abhijit Hoskeri
d3a0e296de
Update x/crypto to 0.19.
...
Main reason is to pick up updated CA roots.
Full diff: https://github.com/golang/crypto/compare/v0.16.0...v0.19.0
2024-02-16 20:27:57 +00:00
Kubernetes Prow Robot
e43003195d
Merge pull request #123272 from AkihiroSuda/rro-cri
...
cri-api: KEP-3857: Recursive Read-only (RRO) mounts [Split from #123180 for ease of review]
2024-02-16 11:09:46 -08:00
Han Kang
f38852768e
bump the stability level of apiserver_storage_size_bytes to STABLE
2024-02-16 10:03:39 -08:00
Maksym Pavlenko
5fcbc9d2fc
Fix permission denied error
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-16 09:57:18 -08:00
Maksym Pavlenko
ff4f2907c5
Use non-default directory for pod logs and limit path to ASCII characters
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-16 09:57:17 -08:00
Maksym Pavlenko
19d9405a1c
Update comments and error messages
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-16 09:56:01 -08:00
Maksym Pavlenko
d9e2487d0c
Add PodLogsPath to kubelet config
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2024-02-16 09:55:59 -08:00
Matt Merkes
3e431adb03
Add AdditionalLabels to cloudprovider.InstanceMetadata
...
Signed-off-by: Matt Merkes <merkes@amazon.com>
Emits event when overriding labels in node controller
Signed-off-by: Matt Merkes <merkes@amazon.com>
Discard kubernetes.io additional labels in node controller
Signed-off-by: Matt Merkes <merkes@amazon.com>
Exclude kubernetes reserved label namespaces
2024-02-16 17:00:17 +00:00
Lubomir I. Ivanov
7db7222592
kubeadm: introduce the WaitForAllControlPlaneComponents feature gate
...
WaitForAllControlPlaneComponents is a new feature gate
that can be used to tell kubeadm to wait for all control plane
components and not only kube-apiserver.
- Add the Waiter function WaitForControlPlaneComponents
that waits for all CP components in parallel. Uses the regular
healthz endpoint for checks of status 200.
- Add a new experimental phase to kubeadm join called "wait-control-plane".
A similar phase exists for kubeadm init.
2024-02-16 17:33:38 +02:00
Kubernetes Prow Robot
0e8ef9c353
Merge pull request #123334 from pohly/lint-skip-in-verify
...
golangci-lint: optionally skip it during "make verify", II
2024-02-16 07:15:42 -08:00
Jordan Liggitt
d5d3eddb95
Add allowed/denied metrics for authorizers
2024-02-16 08:20:59 -05:00
Kubernetes Prow Robot
6c04679617
Merge pull request #120902 from linxiulei/watch_stack
...
Add handler to run execution in separate goroutine
2024-02-16 03:21:33 -08:00
HyunSu1768
59bf8b02e6
Refactoring to encourage use of switch case
2024-02-16 19:50:13 +09:00
Eric Lin
7b2698a5e5
Add handler to run watch serving in separate goroutine
...
This handler allows running execution prior to actual serving in a separate
goroutine when serving requests. Doing so benefits cases in serving long running
requests because it allows freeing memory used by the separate goroutine
and keeps the serving routines slim.
Signed-off-by: Eric Lin <exlin@google.com>
2024-02-16 10:22:16 +00:00
Patrick Ohly
c1f2fe7bcb
golangci-lint: optionally skip it during "make verify", II
...
The pull-kubernetes-verify job is using this to run the base
verify-golangci.sh only in the pull-kubernetes-verify-lint job.
Because the file name was not quite right, it still ran.
2024-02-16 10:07:51 +01:00
Arda Güçlü
7faa8bbac3
Add e2e test for kubectl interactive delete
2024-02-16 11:24:56 +03:00
Kubernetes Prow Robot
91ee30074b
Merge pull request #123174 from danwinship/cidr-validation-cleanup
...
Make CIDR validation consistent
2024-02-15 18:37:20 -08:00
Kubernetes Prow Robot
66d038d84d
Merge pull request #121946 from liggitt/reload-authz
...
KEP-3221: Implement authorization configuration file reloading
2024-02-15 18:37:13 -08:00
Alexander Zielenski
6d5133f3ec
add functions to policy accessors for getting match information and params
2024-02-15 17:01:57 -08:00
Kubernetes Prow Robot
1f40d5c095
Merge pull request #123285 from pohly/e2e-pod-phase
...
e2e pod: dump pod in unexpected phase
2024-02-15 16:34:54 -08:00
Alexander Zielenski
def05a20e2
flake: avoid flake by ensuring params appear in the initial list
...
sometimes they would not appear in the initial list if they were added while the informer was starting up due to ObjectTracker race
2024-02-15 13:58:29 -08:00
Kubernetes Prow Robot
ad6477e342
Merge pull request #123322 from bjhaid/bjhaid-topology-verbosity
...
[kube-proxy] add log verbosity to endpoint topology hint loop.
2024-02-15 12:50:54 -08:00
Ben Luddy
57fc5d2401
Add decode and roundtrip tests for CBOR marshaling.
...
Co-authored-by: Suriyan Subbarayan <suriyansub710@gmail.com>
2024-02-15 13:59:47 -05:00
Ben Luddy
871279978f
Add roundtrip tests for all CBOR examples in RFC 8949 Appendix A.
...
The examples of encoded data items in Appendix A cover all major types and various alternative
representations, including different ways of encoding a data item's "argument" (Section 3), fixed
and indefinite-length containers (Section 3.2), and tags from the extended generic data
model (Section 2.1).
2024-02-15 13:59:36 -05:00
Kubernetes Prow Robot
50b4cfc414
Merge pull request #123321 from mimowo/job-reset-metrics
...
Reset metrics in the Job integration test before testing
2024-02-15 10:57:58 -08:00
Kubernetes Prow Robot
8a57e3cc2b
Merge pull request #123306 from alexzielenski/apiserver/policy/move-owners
...
move OWNERS from validating to all new parent policy folder
2024-02-15 10:57:49 -08:00
Kubernetes Prow Robot
542fe51046
Merge pull request #122881 from benluddy/cbor-serializer-only
...
KEP-4222: Add CBOR Serializer implementation.
2024-02-15 10:57:39 -08:00
Ayodele Abejide
71479b5577
[kube-proxy] add log verbosity to endpoint topology hint loop.
...
We enabled topology hint on one of our services and this log line was
emitted ~92 million times in one day from one cluster tripping our log
quota for that cluster, as it is the log line cannot be disabled via the
`-v` flag because it does not specify verbosity.
I think more log locations need to set verbosity at which they are
logged, but this one is currently hurting the most.
2024-02-15 18:26:19 +00:00
Kubernetes Prow Robot
47f92ce231
Merge pull request #123242 from mimowo/fast-backoff-for-replacment-policy-tests
...
Improve accuracy of the PodsCreationTotal metric and use fast pod failure backoff for ReplacementPolicy integration tests
2024-02-15 09:54:53 -08:00
Michal Wozniak
f84d643c20
Use the Defer for pod replacement policy
2024-02-15 17:37:31 +01:00
Kubernetes Prow Robot
50bf3a2060
Merge pull request #123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up
...
Add integration test for multiple audience in structured authn
2024-02-15 08:16:27 -08:00
Kubernetes Prow Robot
b65508b477
Merge pull request #123158 from AkihiroSuda/nodeconditiontype-godoc
...
core/v1: remove comment about non-existing constants
2024-02-15 08:16:20 -08:00
Ben Luddy
066421f108
Add CBOR Serializer implementation.
2024-02-15 10:31:10 -05:00
Kubernetes Prow Robot
0265f5a8de
Merge pull request #123314 from soltysh/run_service_pdb
...
Always test PDB's during service upgrade test
2024-02-15 07:07:15 -08:00
Michal Wozniak
ab8cdae3b1
Reset metrics in the Job integration test before testing
2024-02-15 14:50:24 +01:00
Maciej Szulik
ec7e051bc0
Always test PDB's during service upgrade test
...
OpenShift has been running this tests on various platform for several
years now without any problems.
2024-02-15 14:22:46 +01:00
Michal Wozniak
115dc90633
Increase accuracy of the pods_creation_total metric and improve test exec time
2024-02-15 10:59:01 +01:00
bzsuni
b5b62d4f0e
Update kubedns and nodelocaldns to v1.23.0
...
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-02-15 16:08:11 +08:00
Kubernetes Prow Robot
109491f3cb
Merge pull request #123299 from liggitt/guard-accepted-names
...
Guard empty status.acceptedNames
2024-02-14 22:19:02 -08:00
Kubernetes Prow Robot
58c77d7b63
Merge pull request #122887 from jpbetz/retry-generate-name-create
...
Implement KEP-4420: Retry Generate Name
2024-02-14 21:07:24 -08:00
Anish Ramasekar
0feb1d5173
Add integration test for multiple audience in structured authn
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot
d76d7a1e7a
Merge pull request #123288 from AkihiroSuda/agnhost
...
e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
2024-02-14 18:08:41 -08:00
Kubernetes Prow Robot
72c3c7c924
Merge pull request #123282 from enj/enj/i/authn_config_algs
...
Support all key algs with structured authn config
2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot
0b24b55e7f
Merge pull request #123269 from pohly/lint-skip-in-verify
...
golangci-lint: optionally skip it during "make verify"
2024-02-14 18:08:18 -08:00
Kubernetes Prow Robot
68bbbd0359
Merge pull request #123300 from antoninbas/nodeipam-controller-remove-unused-field
...
Remove unused lookupIP field in NodeIPAM Controller struct
2024-02-14 17:00:13 -08:00