Commit Graph

121913 Commits

Author SHA1 Message Date
carlory
2bd7f4f8e0 storage e2e: update hostpath and mock images 2024-03-05 10:18:54 +08:00
bzsuni
9ac9fdac8f Bump npd from v0.8.13 to v0.8.16
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-03-05 09:30:28 +08:00
Kubernetes Prow Robot
6929a11f69
Merge pull request #123481 from sanposhiho/mindomain-stable
graduate MinDomainsInPodTopologySpread to stable
2024-03-04 17:18:53 -08:00
Kubernetes Prow Robot
f745503112
Merge pull request #123413 from seans3/tunneling-spdy-websockets
PortForward: Tunnel SPDY through WebSockets
2024-03-04 17:18:44 -08:00
Harish Kuna
4a5fe2deca Addd negative case for the fix in #123570 2024-03-05 01:00:50 +00:00
Kubernetes Prow Robot
e4ee7b005c
Merge pull request #123323 from gjkim42/add-ValidateInitContainerStateTransition
Validate restartable init container state transition
2024-03-04 16:21:30 -08:00
Kubernetes Prow Robot
1c789a9d46
Merge pull request #122422 from neolit123/1.30-update-hostaliases-note
core/v1: remove note about hostAliases not working with hostNetwork
2024-03-04 16:21:21 -08:00
Gaurav Ghildiyal
ec6fd2befa Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field 2024-03-04 15:40:22 -08:00
Kubernetes Prow Robot
46a2137c1b
Merge pull request #123639 from liggitt/authz-metrics
Add authorization webhook duration/count/failopen metrics
2024-03-04 14:09:30 -08:00
Sean Sullivan
b04d1177ef extend deadlines to one minute 2024-03-04 11:31:56 -08:00
Kubernetes Prow Robot
320e288b5e
Merge pull request #123628 from Jefftree/agg-conformance
promote aggregated discovery conformance tests
2024-03-04 11:23:59 -08:00
Kubernetes Prow Robot
6c8dc1d1ed
Merge pull request #123609 from veshij/fix
[kubernetes/scheduler] use lockless diagnosis collection in findNodes…
2024-03-04 11:23:50 -08:00
Kubernetes Prow Robot
4ed7f6b4c4
Merge pull request #123583 from saschagrunert/image-id-container-status
Add `image_id` to CRI `ContainerStatus` message
2024-03-04 11:23:41 -08:00
Kubernetes Prow Robot
599d92f1fb
Merge pull request #123190 from padlar/add-apiserver-wait-cache-metric
Add apiserver_watch_cache_read_wait metric to cache refresh time
2024-03-04 11:23:32 -08:00
Sean Sullivan
3d56ff21fd adds comments to tunnelingResponseWriter 2024-03-04 11:10:30 -08:00
Sean Sullivan
33af937b4a re-write fallback dialer unit test 2024-03-04 11:10:30 -08:00
Sean Sullivan
e8bbb221d3 removes extra upgrade aware proxy logging; returns tunneling connection close error 2024-03-04 11:10:30 -08:00
Jordan Liggitt
2443b3fa69 Fix headerInterceptingConn handling 2024-03-04 11:10:30 -08:00
Sean Sullivan
9e15462843 adds return context in RunPortForward() 2024-03-04 11:10:30 -08:00
Sean Sullivan
8b447d8c97 portforward: tunnel spdy through websockets 2024-03-04 11:10:30 -08:00
Jordan Liggitt
79b344d85e
Add authorization webhook duration/count/failopen metrics 2024-03-04 14:01:15 -05:00
Kubernetes Prow Robot
89cbd94e68
Merge pull request #123593 from giuseppe/userns-use-kubelet-user-mappings
KEP-127: kubelet: honor kubelet user mappings
2024-03-04 10:24:52 -08:00
Kubernetes Prow Robot
d34fbeb0a3
Merge pull request #123446 from linxiulei/hit_cache
Hit APIServer cache when testing healthiness
2024-03-04 10:24:45 -08:00
Marek Siarkowicz
1cf4cec449 Test that separation of streams work by using progress notifies 2024-03-04 19:02:04 +01:00
Monis Khan
8345ad0bac
jwt: fail on empty username via CEL expression
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 12:51:19 -05:00
Gaurav Ghildiyal
606cae9b47 Add new metric servicesCountByTrafficDistribution 2024-03-04 09:33:40 -08:00
Monis Khan
05e1eff793
Prevent conflicts between service account and jwt issuers
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 11:40:02 -05:00
Kubernetes Prow Robot
9043ce05c1
Merge pull request #123667 from jsafrane/selinux-metrics-access-mode
Add label with access mode to SELinux metrics
2024-03-04 08:25:39 -08:00
Jan Safranek
57d1b68dc2 Remove deprecated sets.String 2024-03-04 14:33:04 +01:00
Kubernetes Prow Robot
55d1518126
Merge pull request #123588 from pohly/scheduler-perf-any-cleanup
scheduler_perf: automatically delete created objects
2024-03-04 04:49:12 -08:00
Jan Safranek
c4163a9cb8 Add label with access mode to SELinux metrics
In the KEP 1710 we promised to have all SELinux metrics with access mode
label, so cluster admin is able to distinguish when RWOP volumes are
failing to mount (-> SELinuxMountReadWriteOncePod feature gate must be
disabled) or volumes with any other access modes are failing (->
SELinuxMount feature gate must be disabled).

Adding the label to kubelet is quite straightforward, there were some
changes needed in the e2e test. Now grabMetrics() collects values of all
SELinux related metrics with all labels. It only skips unrelated volume
plugins. And waitForMetricIncrease gets metric with all labels on input, so
it can check that say RWOP metric increased and RWX one did not.
2024-03-04 13:16:56 +01:00
Marek Siarkowicz
31d404b182 Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior 2024-03-04 12:51:06 +01:00
Kubernetes Prow Robot
a4eaf6e120
Merge pull request #123660 from xigang/cacher/watch
cleanup: if triggerValue has a value fast break
2024-03-04 01:17:02 -08:00
Kubernetes Prow Robot
9d39ce04fd
Merge pull request #123595 from neolit123/1.30-add-timeouts-upgradeconfig
kubeadm: add timeouts to v1beta4.UpgradeConfiguration
2024-03-04 01:16:44 -08:00
Patrick Ohly
eb6abf0462 scheduler_perf: automatically delete created objects
This is not relevant for namespaced objects, but matters for the cluster-scoped
ResourceClass during unit testing. This works right now because there is only
one such unit test, but will fail when adding a second one.

Instead of passing a boolean flag down into all functions where it might be
needed, it's now a context value.
2024-03-04 09:54:38 +01:00
Kubernetes Prow Robot
d440ab18ce
Merge pull request #123656 from huww98/e2e-pod-fail-fast
e2e pod: fail fast on failed pod
2024-03-04 00:00:14 -08:00
Gaurav Ghildiyal
51f86b9124 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
51a3fa2e6f Start reconciling on the new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
9513f75089 Add trafficdist package for handling reconciliation of new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
646fd200b8 Run 'make update' 2024-03-03 22:46:00 -08:00
Gaurav Ghildiyal
996d11d4e8 Add new field trafficDistribution to Service spec 2024-03-03 22:34:17 -08:00
Kubernetes Prow Robot
8c80c07e85
Merge pull request #123655 from huww98/mt-n
agnhost/mounttest: add new line to output
2024-03-03 22:29:44 -08:00
Kubernetes Prow Robot
e4a14fe0f5
Merge pull request #123575 from Huang-Wei/pod-scheduling-readiness-stable
Graduate PodSchedulingReadiness to stable
2024-03-03 22:29:38 -08:00
Kubernetes Prow Robot
d756b0a1c0
Merge pull request #123659 from dims/check-length-of-instance-name-before-truncating
Check length of instance name before truncating
2024-03-03 20:41:11 -08:00
Kubernetes Prow Robot
ee5eca2a49
Merge pull request #123527 from aramase/aramase/f/kep_3331_discovery_url
Add `DiscoveryURL` to Authentication Configuration
2024-03-03 18:51:54 -08:00
xigang
d72448a41c cleanup: if triggerValue has a value, fast break
Signed-off-by: xigang <wangxigang2014@gmail.com>
2024-03-04 10:29:31 +08:00
Anish Ramasekar
78fb0bae22
wire up discovery url in authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 17:34:51 -08:00
Anish Ramasekar
84852ff56f
Add DiscoveryURL to AuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 16:57:24 -08:00
Kubernetes Prow Robot
6d2ee131eb
Merge pull request #123225 from aramase/aramase/f/kep_3331_latency_metrics
Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
2024-03-03 16:27:50 -08:00
Davanum Srinivas
c61b2a3975
Check length of instance name before truncating
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 18:49:57 -05:00