Jordan Liggitt
c6673d2346
Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
2024-03-06 09:47:28 -05:00
Michal Wozniak
1395c80109
Update Job conformance test to do a legal update
2024-03-06 14:00:21 +01:00
Tim Hockin
2e465cd6fa
Remove _tmp from test/images/image-util.sh
2024-03-05 21:44:46 -08:00
Tim Hockin
be7ee821b9
Make verify-vendor use verify::generated
2024-03-05 21:44:45 -08:00
Tim Hockin
778644154f
Remove _tmp from verify-openapi-docs-urls
2024-03-05 21:44:44 -08:00
Tim Hockin
4d6f56d398
Make vendor-licenses use verify::generated
2024-03-05 21:44:43 -08:00
Tim Hockin
8a3a299c65
Remove _tmp from pin-dependency
2024-03-05 21:44:43 -08:00
Tim Hockin
813787489b
Make verify-openapi-spec use verify::generated
...
Tested by injecting an API change, generating openapi, then watching
this fail.
2024-03-05 21:44:41 -08:00
Kubernetes Prow Robot
546f7c3086
Merge pull request #123738 from kannon92/fail-limited-swap-cgroup-v1
...
[KEP-2400]: Fail limited swap cgroup v1
2024-03-05 19:30:34 -08:00
Kubernetes Prow Robot
2b521e5f8e
Merge pull request #123405 from cici37/vapGA
...
[KEP-3488]Promote ValidatingAdmissionPolicy to GA
2024-03-05 18:29:53 -08:00
Kubernetes Prow Robot
39b085d936
Merge pull request #121725 from cubxxw/patch-1
...
fix: code style untidy and update version.sh
2024-03-05 18:29:44 -08:00
Kubernetes Prow Robot
695072027d
Merge pull request #123730 from pohly/dra-status-update-fix
...
dra api: fix status updates
2024-03-05 17:31:15 -08:00
Kubernetes Prow Robot
87f9b3891e
Merge pull request #123385 from HirazawaUi/allow-special-characters
...
Allow almost all printable ASCII characters in environment variables
2024-03-05 17:31:06 -08:00
Kubernetes Prow Robot
5b4d97dc5a
Merge pull request #122541 from aojea/headless_selector
...
Implement a field selector for ClusterIP on Services
2024-03-05 17:30:57 -08:00
Kevin Hannon
e90782bec8
fail LimitedSwap with cgroupv1
2024-03-05 20:19:27 -05:00
Kubernetes Prow Robot
3686ceb5b8
Merge pull request #122745 from kannon92/swap-no-swap-default
...
[KEP-2400] add no swap as the default option for swap
2024-03-05 16:32:40 -08:00
cici37
5d83282823
Auto updates
2024-03-05 16:00:21 -08:00
cici37
de506ce7ac
Promote ValidatingAdmissionPolicy to GA.
2024-03-05 16:00:21 -08:00
Kubernetes Prow Robot
262399065d
Merge pull request #123729 from seans3/streaming-owners
...
Adds OWNERS files to client-go streaming dirs
2024-03-05 14:46:02 -08:00
Kubernetes Prow Robot
751e3e9745
Merge pull request #123713 from aojea/missing_providerid
...
node-controller require providerID to initialize a node
2024-03-05 14:45:53 -08:00
Kubernetes Prow Robot
5fd38a8c78
Merge pull request #122907 from sohankunkerkar/prepare-kep-3983-for-beta
...
[KEP-4419]: promote KubeletConfigDropInDir feature to beta
2024-03-05 14:45:39 -08:00
Kubernetes Prow Robot
1e4124b081
Merge pull request #123726 from haircommander/kubelet_t
...
e2e_node: use kubelet_exec_t instead of bin_t for kubelet
2024-03-05 13:45:14 -08:00
Kubernetes Prow Robot
2bed0087c3
Merge pull request #123722 from atiratree/e2e-kubectl-delete-fix
...
fix e2e test for kubectl interactive delete
2024-03-05 13:45:07 -08:00
Kubernetes Prow Robot
df1eccae38
Merge pull request #123543 from jiahuif-forks/feature/validating-admission-policy/excluded-resources
...
ValidatingAdmissionPolicy: exclude brink-able resources.
2024-03-05 13:45:01 -08:00
Kubernetes Prow Robot
5f4a20e65d
Merge pull request #120718 from gjkim42/add-restartable-init-containers-to-pod-resources-api
...
Make PodResources API include restartable init containers
2024-03-05 13:44:54 -08:00
Kevin Hannon
6a4e19a4ec
add no swap as the default option for swap
2024-03-05 16:10:42 -05:00
Kubernetes Prow Robot
7a20def5ba
Merge pull request #123721 from enj/enj/i/authn_config_doc_nesting
...
Fix AuthenticationConfiguration docs around nested claims via CEL
2024-03-05 12:41:51 -08:00
Kubernetes Prow Robot
6efef796f6
Merge pull request #122998 from MikeSpreitzer/add-deletion-handling
...
Add DeletionHandlingObjectToName
2024-03-05 12:41:45 -08:00
Patrick Ohly
27df75c577
dra api: fix status updates
...
Changing object meta is not supposed to be possible via status updates. For
example, it circumvents RBAC permission checks.
2024-03-05 21:39:24 +01:00
Tim Allclair
ec325b328d
Match annotations against pod AppArmor field
2024-03-05 12:22:50 -08:00
Tim Allclair
d25b1ded76
PodSecurity check for AppArmor fields
2024-03-05 12:22:50 -08:00
Tim Allclair
24537a9131
Stop appending AppArmor status to node ready condition
2024-03-05 12:22:50 -08:00
Tim Allclair
207a965b3f
Update AppArmor e2e tests
2024-03-05 12:22:50 -08:00
Tim Allclair
bf3c8464ba
Implement Kubelet AppArmor field handling
2024-03-05 12:22:50 -08:00
Tim Allclair
289ec02e8b
Implement version skew strategy
2024-03-05 12:22:50 -08:00
Tim Allclair
b7f620c12b
Generated code
2024-03-05 12:22:50 -08:00
Sean Sullivan
855bc74023
Adds OWNERS files to client-go streaming dirs
2024-03-05 20:21:48 +00:00
Tim Allclair
94927afb50
AppArmor API changes
2024-03-05 12:02:43 -08:00
Jiahui Feng
6b03166bed
update to inject only the list of excluded resources.
2024-03-05 11:11:10 -08:00
Filip Křepinský
7a57bcea6c
fix e2e test for kubectl interactive delete
2024-03-05 19:57:28 +01:00
Kubernetes Prow Robot
b0ee334374
Merge pull request #123708 from p0lyn0mial/upstream-const-watchlist-bookmark-event
...
apimachinery/meta/types.go: define InitialEventsAnnotationKey const
2024-03-05 10:40:51 -08:00
Kubernetes Prow Robot
180c6bdc25
Merge pull request #122056 from dhenkel92/keep-pdb-condition
...
keep existing PDB conditions when updating status
2024-03-05 10:40:42 -08:00
Peter Hunt
646d464203
e2e_node: use kubelet_exec_t instead of bin_t for kubelet
...
as bin_t isn't powerful enough, and we run into a wack-a-mole situation making bin_t powerful
enough for the tests
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-03-05 13:39:52 -05:00
Michał Woźniak
e568a77a93
Support for the Job managedBy field (alpha) ( #123273 )
...
* support for the managed-by label in Job
* Use managedBy field instead of managed-by label
* Additional review remarks
* Review remarks 2
* review remarks 3
* Skip cleanup of finalizers for job with custom managedBy
* Drop the performance optimization
* imrpove logs
2024-03-05 09:25:15 -08:00
Kubernetes Prow Robot
a81411594a
Merge pull request #123226 from ivanvc/add-suspend-to-jobs-table
...
printers: Add Job status to jobs table
2024-03-05 09:25:06 -08:00
Antonio Ojea
5122fe0732
don't watch headless services on kubelet
...
The kubelet watches services only to generate the environment variables
inside a pod, but headless services are not needed for this.
Change-Id: I22ee2b3352f8fe71cddfafa6f09b768c0a0e26b4
2024-03-05 17:16:48 +00:00
Antonio Ojea
0595ec7942
implement field selector for clusterIP on services
...
This will allow components that don't need to watch headless services
(heavily used on ai/ml workloads) to filter them server side.
Specially useful for kubelet and kube-proxy
Co-authored-by: Jianbo Ma <sakuranlbj@gmail.com>
Change-Id: I6434d2c8c77aaf725ec5c07acbcda14311f24bfa
Change-Id: Iba9e25afb90712facfb3dee25c500bbe08ef38fc
2024-03-05 17:16:42 +00:00
Anish Ramasekar
b502aa6f31
Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-05 09:10:34 -08:00
Monis Khan
290f2a7e1b
Fix AuthenticationConfiguration docs around nested claims via CEL
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-05 12:01:11 -05:00
Monis Khan
bc7aa13bf7
Mark StructuredAuthenticationConfiguration feature gate as beta
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-05 11:34:30 -05:00
