Commit Graph

119460 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
1c8f88d4b6
Merge pull request #118760 from saschagrunert/user-namespaces-pss
KEP-127: Update PSS based on feature gate
2023-10-28 09:48:54 +02:00
Kubernetes Prow Robot
57c7b666c4
Merge pull request #118705 from pacoxu/hostnet-sysctl-rejects
forbid sysctls for pod sharing the respective namespaces with the host
2023-10-28 09:48:44 +02:00
Kubernetes Prow Robot
b8693aafdf
Merge pull request #120104 from togettoyou/cleanup_endpoints
cleanup: Refactor BaseEndpointInfo to cache IP and Port values
2023-10-28 06:18:26 +02:00
Paco Xu
36d6917ae1 valid error for creation and update from valid to invalid only
- using an option AllowNamespacedSysctlsForHostNetAndHostIPC

Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-10-28 06:58:54 +08:00
Paco Xu
9a8ccdebc5 use sysctl utils to do pod spec validation
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-10-28 06:58:51 +08:00
Paco Xu
11de9543ee move sysctl namespace and some funcs to component helpers util
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-10-28 06:58:28 +08:00
Paco Xu
4321652d13 reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-10-28 06:58:28 +08:00
Kubernetes Prow Robot
1aef58b72a
Merge pull request #121462 from alexzielenski/apiserver/apiextensions/ratcheting-metrics-actually
KEP-4008: CRDValidationRatcheting Metrics
2023-10-28 00:54:00 +02:00
Kubernetes Prow Robot
7310ea0628
Merge pull request #121405 from alexzielenski/apiserver/apiextensions/ratcheting-benchmarks
KEP-4008: CRDValidationRatcheting: Add Benchmarks
2023-10-28 00:53:46 +02:00
Kubernetes Prow Robot
956b5adc64
Merge pull request #121567 from mzaian/etcd-3510-image
etcd: Build image 3.5.10
2023-10-27 23:41:55 +02:00
Kubernetes Prow Robot
6a4f08e7e6
Merge pull request #120627 from RomanBednar/pv-phase-transition-time-beta
graduate PersistentVolumeLastPhaseTransitionTime to beta in v1.29
2023-10-27 23:41:46 +02:00
Kubernetes Prow Robot
848de697d8
Merge pull request #115711 from sourcelliu/improve
Improve lock performance
2023-10-27 23:41:32 +02:00
Kubernetes Prow Robot
095786913d
Merge pull request #121571 from sanposhiho/default-etr
narrow down the scope of EnqueueExtensions to subscribe less cluster events
2023-10-27 21:18:28 +02:00
Kubernetes Prow Robot
ee474e6ec5
Merge pull request #120371 from atiratree/encapsulate-kcm-controllers
Encapsulate KCM controllers with their metadata
2023-10-27 21:18:17 +02:00
Alexander Zielenski
4bb7dc224c metrics: publish metrics from ratcheting across a request 2023-10-27 10:57:34 -07:00
Alexander Zielenski
8c72be3b74 ratcheting: add benchmark 2023-10-27 10:15:18 -07:00
Kubernetes Prow Robot
f3c13d8d8a
Merge pull request #121366 from bzsuni/cleanup/test/PollImmediateUntilWithContext
use PollUntilContextCancel to replace PollImmediateUntilWithContext in test
2023-10-27 19:08:14 +02:00
Kubernetes Prow Robot
fe21e4d749
Merge pull request #120682 from yt2985/cleanSA
LegacyServiceAccountTokenCleanUp beta
2023-10-27 19:08:05 +02:00
Junhao Zou
7a91051caa cleanup: Refactor BaseEndpointInfo to cache IP and Port values 2023-10-28 00:09:44 +08:00
Kubernetes Prow Robot
de4aa52171
Merge pull request #121476 from pohly/golangci-lint-update
golangci-lint v1.55.1
2023-10-27 17:43:21 +02:00
Kubernetes Prow Robot
0a36bcd11d
Merge pull request #121346 from carlory/fix-120840
fix volume conformance e2e test break other test
2023-10-27 17:43:07 +02:00
Kensei Nakada
c7842d9c63 narrow down the scope of EnqueueExtensions to subscribe less cluster events 2023-10-27 14:14:37 +00:00
Kubernetes Prow Robot
a5ac4be4d0
Merge pull request #121549 from pohly/verify-file-sizes
verify-file-sizes.sh: ensure that no large binary files get added
2023-10-27 16:05:41 +02:00
Kubernetes Prow Robot
ec297aa13a
Merge pull request #121524 from carlory/gomega
bump gomega to 1.29.0
2023-10-27 16:05:28 +02:00
Kubernetes Prow Robot
6f4ad7a413
Merge pull request #121491 from dejanzele/pod-replacement-policy-e2e
Switch feature flag to beta for pod replacement policy and add e2e test
2023-10-27 14:49:16 +02:00
Mohamed Omar Zaian
3f8e6d6f77 etcd: Build image 3.5.10 2023-10-27 14:02:18 +02:00
Kubernetes Prow Robot
f4f5d07f4b
Merge pull request #121557 from bart0sh/PR126-e2e-mark-CDI-test-as-NodeSpecialFeature
e2e_node: mark CDI test as NodeSpecialFeature
2023-10-27 13:41:01 +02:00
Kubernetes Prow Robot
1c0dbe2eef
Merge pull request #121551 from pohly/fix-klog-calls
sample device plugin: fix incorrect Errorf invocation
2023-10-27 13:40:47 +02:00
Filip Křepinský
1591a0e132 add unit tests for NewControllerDescriptors
- controller descriptors should not be feature gated
- aliases should not be defined for new controllers and have only a
  canonical name
2023-10-27 13:28:02 +02:00
Filip Křepinský
44cac26667 move start controller pre- and post- checks/actions out of StartControllers
into StartController function

the function is reused by ServiceAccountTokenController
2023-10-27 13:28:02 +02:00
Filip Křepinský
b768967280 move aliases into each registrable controller 2023-10-27 13:28:02 +02:00
Filip Křepinský
a85779b4df include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic
- pass a map of controllerDescriptors instead of a function
2023-10-27 13:28:02 +02:00
Filip Křepinský
27a77e0ef3 Encapsulate KCM controllers with their metadata
- These metadata can be used to handle controllers in a generic way.
- This enables showing feature gated controllers in kube-controller-manager's help.
- It is possible to obtain a controllerName in the InitFunc so it can be passed down to and used by the controller.

metadata about a controller:
- name
- requiredFeatureGates
- isDisabledByDefault
- isCloudProviderController
2023-10-27 13:28:01 +02:00
carlory
77dfd63d1d fix volume conformance e2e test break other test 2023-10-27 17:05:52 +08:00
Sascha Grunert
77e0adeb31
KEP-127: Update PSS based on feature gate
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2023-10-27 10:49:11 +02:00
Kubernetes Prow Robot
fd5c406112
Merge pull request #120933 from mengjiao-liu/contextual-logging-scheduler-remaining-part
kube-scheduler: convert the remaining part to use contextual logging
2023-10-27 10:30:58 +02:00
Kubernetes Prow Robot
c8125c4029
Merge pull request #121305 from neolit123/1.29-super-admin-conf
kubeadm: add support for separate super-admin.conf kubeconfig file
2023-10-27 08:51:31 +02:00
Kubernetes Prow Robot
036091645d
Merge pull request #120615 from mkowalski/OCPBUGS-18641
cloud-node-lifecycle controller: add fallback for empty providerID in shutdown
2023-10-27 08:51:17 +02:00
carlory
760abc2a82 bump gomega to 1.29.0 2023-10-27 12:51:56 +08:00
tinatingyu
5925dc0775 LegacyServiceAccountTokenCleanUp beta 2023-10-27 03:52:06 +00:00
Kubernetes Prow Robot
ebf46ce1b4
Merge pull request #121485 from ritazh/kmsv2-ga
[KMSv2] promote KMSv2 and KMSv2KDF to GA
2023-10-27 02:23:50 +02:00
Ed Bartosh
69b9d50f9d e2e_node: mark CDI test as NodeSpecialFeature
This test depends on CDI support in a runtime and doesn't work
with the out-of-the box Containerd. Marking it as a NodeSpecialFeature
should fix Containerd CI job failures.
2023-10-27 02:06:43 +03:00
Kubernetes Prow Robot
0712728ee9
Merge pull request #121555 from borg-land/skip-gcp-tests-aws
Don't run `cloud-provider-gcp` tests against aws clusters
2023-10-27 01:05:14 +02:00
Rita Zhang
a9b1adbafc
[KMSv2] promote KMSv2 and KMSv2KDF to GA
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-10-26 15:05:31 -07:00
upodroid
9f06eb4ca2 don't run these tests on aws 2023-10-26 22:47:39 +01:00
Kubernetes Prow Robot
3c34118d39
Merge pull request #121332 from Riaankl/remove-pv-pvc-status-endpoints
Remove PersistentVolumeStatus & PersistentVolumeClaimStatus Endpoints from pending_eligible_endpoints.yaml
2023-10-26 22:51:17 +02:00
Kubernetes Prow Robot
a2436453da
Merge pull request #121331 from ii/promote-pv-pvc-status-test
Promote e2e test for PersistentVolumeStatus & PersistentVolumeClaimStatus Endpoints +6 Endpoints
2023-10-26 22:51:04 +02:00
Dejan Pejchev
e98c33bfaf
switch feature flag to beta for pod replacement policy and add e2e test
update pod replacement policy feature flag comment and refactor the e2e test for pod replacement policy

minor fixes for pod replacement policy and e2e test

fix wrong assertions for pod replacement policy e2e test

more fixes to pod replacement policy e2e test

refactor PodReplacementPolicy e2e test to use finalizers

fix unit tests when pod replacement policy feature flag is promoted to beta

fix podgc controller unit tests when pod replacement feature is enabled

fix lint issue in pod replacement policy e2e test

assert no error in defer function for removing finalizer in pod replacement policy e2e test

implement test using a sh trap for pod replacement policy

reduce sleep after SIGTERM in pod replacement policy e2e test to 5s
2023-10-26 21:50:37 +02:00
Patrick Ohly
af14f97cba sample device plugin: fix incorrect Errorf invocation
Linting together with an upcoming klog update finds this problem:

    test/images/sample-device-plugin/sampledeviceplugin.go:165:4: printf: k8s.io/klog/v2.Errorf does not support error-wrapping directive %w (govet)
    			klog.Errorf("Failed to add watch to %q: %w", triggerPath, err)
     			^
2023-10-26 21:22:36 +02:00
Dan Winship
fcc55280b0
Use k8s.io/utils/ptr in pkg/proxy (#121154)
* Use k8s.io/utils/ptr in pkg/proxy

* Replace pointer.String(), pointer.StringPtr(), and pointer.Bool() with ptr.To()

* Replace pointer.Int32(constexpr) with ptr.To[int32](constexpr)

* Replace pointer.Int32(int32(var)) with ptr.To(int32(var))

* Replace remaining pointer.Int32() cases with ptr.To

* Replace 'tcpProtocol := v1.ProtocolTCP; ... &tcpProtocol', etc with ptr.To(v1.ProtocolTCP)

* Replace 'nodeName = testHostname; ... &nodeName' with ptr.To(testHostname)

* Use ptr.To for SessionAffinityConfig.ClientIP.TimeoutSeconds

* Use ptr.To for InternalTrafficPolicy

* Use ptr.To for LoadBalancer.Ingress.IPMode
2023-10-26 20:56:39 +02:00