github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-18 04:54:54 +00:00
Code Issues Projects Releases Wiki Activity
133,800 Commits 42 Branches 9,765 Tags
22d41b544337e1ebd6c80f36e1c8cf05be3797bf
Commit Graph

133800 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
22d41b5443 Merge pull request #135059 from macsko/reenable_async_api_calls 
Re-enable SchedulerAsyncAPICalls feature in v1.35
 2025-11-04 20:56:04 -08:00
Kubernetes Prow Robot
5fd9cefd95 Merge pull request #134995 from yongruilin/flagz-kk-structure 
[KEP-4828] Flagz versioned structured response
 2025-11-04 19:02:04 -08:00
Kubernetes Prow Robot
e4d7a2475d Merge pull request #135119 from lalitc375/revert 
revert of 8f0a6583ca
 2025-11-04 17:54:05 -08:00
Lalit Chauhan
0aea256ef9 revert of 8f0a6583ca 2025-11-05 00:13:26 +00:00
Kubernetes Prow Robot
3d595e3691 Merge pull request #134803 from enj/enj/f/constrained_impersonation 
KEP-5284: Implement Constrained Impersonation
 2025-11-04 15:32:23 -08:00
Kubernetes Prow Robot
4b2e387b8b Merge pull request #134734 from kannon92/kal-linter-enable 
Enable duplicatemarkers for Kubernetes API Linter
 2025-11-04 15:32:14 -08:00
Kubernetes Prow Robot
c1a6a3ca71 Merge pull request #134152 from pohly/dra-device-taints-1.35 
DRA: device taints: new ResourceSlice API, new features
 2025-11-04 15:32:07 -08:00
Kubernetes Prow Robot
dec78c833d Merge pull request #135094 from stlaz/fix-node-conformance-failures 
Fix failures in node-e2e image pull tests
 2025-11-04 14:32:11 -08:00
Kubernetes Prow Robot
459bea5adf Merge pull request #135084 from tallclair/resize-validation 
Fix pod resize validation when adding non-resizable resources
 2025-11-04 14:32:04 -08:00
Kubernetes Prow Robot
97cb47a913 Merge pull request #135080 from dejanzele/feat/promote-job-managedby-to-ga 
KEP-4368: Job Managed By; Promote to GA
 2025-11-04 13:42:12 -08:00
Kubernetes Prow Robot
1ed34af815 Merge pull request #133724 from bart0sh/PR195-device-plugins-fix-out-of-sync 
devicemanager: fix cleanup of unhealthy devices
 2025-11-04 13:42:04 -08:00
Monis Khan
2a3f66d3f6 KEP-5284: Implement Constrained Impersonation 
Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Monis Khan <mok@microsoft.com>

Co-authored-by: Jian Qiu <jqiu@redhat.com>
Co-authored-by: Monis Khan <mok@microsoft.com>
 2025-11-04 16:30:49 -05:00
Patrick Ohly
3f45a675fc DRA integration: test eviction through DeviceTaintRule 
This covers permissions and correct usage of SSA.
 2025-11-04 21:57:24 +01:00
Patrick Ohly
bbf8bc766e DRA device taints: DeviceTaintRule status 
To update the right statuses, the controller must collect more information
about why a pod is being evicted. Updating the DeviceTaintRule statuses then is
handled by the same work queue as evicting pods.

Both operations already share the same client instance and thus QPS+server-side
throttling, so they might as well share the same work queue. Deleting pods is
not necessarily more important than informing users or vice-versa, so there is
no strong argument for having different queues.

While at it, switching the unit tests to usage of the same mock work queue as
in staging/src/k8s.io/dynamic-resource-allocation/internal/workqueue. Because
there is no time to add it properly to a staging repo, the implementation gets
copied.
 2025-11-04 21:57:24 +01:00
Patrick Ohly
0689b628c7 generated files 2025-11-04 21:57:24 +01:00
Patrick Ohly
f4a453389d DRA device taint eviction: configurable number of workers 
It might never be necessary to change the default, but it is hard to be sure.
It's better to have the option, just in case.
 2025-11-04 21:57:24 +01:00
Kubernetes Prow Robot
22151d719b Merge pull request #135079 from aaron-prindle/dra-shortcircuit-maxitems 
feat: update DRA to short-circuit on maxSize checks, add a declarative validation test related to this case
 2025-11-04 12:52:18 -08:00
Kubernetes Prow Robot
934c34435a Merge pull request #134875 from Jpsassine/jpsassine-dra-health-fix 
Fix bug in reporting health for templated and renamed DRA claims
 2025-11-04 12:52:11 -08:00
Kubernetes Prow Robot
c5ef945f37 Merge pull request #134445 from natasha41575/kubelet_node_cache 
kubelet: synchronously fetch node and retry on NodeAffinity admission errors
 2025-11-04 12:52:04 -08:00
yongruilin
256591520a feat: add OWNERS files for flagz server and api with approvers and reviewers 2025-11-04 19:45:32 +00:00
yongruilin
09dfeeb988 test: add integration test for /flagz endpoint in scheduler 2025-11-04 19:45:32 +00:00
yongruilin
ba059168c3 test: add integration test for /flagz endpoint in KCM 2025-11-04 19:45:32 +00:00
yongruilin
16db8e2375 feat: add integration test for /flagz kube-apiserver endpoint 2025-11-04 19:45:32 +00:00
yongruilin
2422bc0bb8 feat: Implement structured /flagz endpoint 2025-11-04 19:45:30 +00:00
Kubernetes Prow Robot
08a9e4fca7 Merge pull request #135067 from natasha41575/ippr-conformance 
[InPlacePodVerticalScaling] Promote IPPR e2e tests to conformance
 2025-11-04 11:42:20 -08:00
Kubernetes Prow Robot
a058cf788a Merge pull request #134624 from yt2985/podcertificates-beta 
Promote Pod Certificates feature to beta
 2025-11-04 11:42:12 -08:00
Kubernetes Prow Robot
645073f978 Merge pull request #132240 from yue9944882/delta-fifo-batch 
Adding batch handling for popping items from RealFIFO
 2025-11-04 11:42:05 -08:00
Kubernetes Prow Robot
c30b578ee5 Merge pull request #134905 from fj-naji/scheduler-dra-binding-timeout 
scheduler: KEP-5007 Add BindingTimeout args to DynamicResources plugin
 2025-11-04 10:04:05 -08:00
Min Jin
611b4c1408 Adding batch handling for popping items from RealFIFO 
Signed-off-by: Min Jin <minkimzz@amazon.com>

Update staging/src/k8s.io/client-go/tools/cache/the_real_fifo.go

optimizing fifo loop

Co-authored-by: Marek Siarkowicz <marek.siarkowicz@protonmail.com>
Signed-off-by: Min Jin <minkimzz@amazon.com>

refactoring PopBatch to accept []Delta

Signed-off-by: Min Jin <minkimzz@amazon.com>
 2025-11-04 09:59:32 -08:00
fj-naji
c438f8a983 scheduler: Add BindingTimeout args to DynamicResources plugin 
Add a new `bindingTimeout` field to DynamicResources plugin args and wire it
into PreBind.

Changes:
- API: add `bindingTimeout` to DynamicResourcesArgs (staging + internal types).
- Defaults: default to 600 seconds when BOTH DRADeviceBindingConditions and
  DRAResourceClaimDeviceStatus are enabled.
- Validation: require >= 1s; forbid when either feature gate is disabled.
- Plugin: plumbs args into `pl.bindingTimeout` and uses it in
  `wait.PollUntilContextTimeout` for binding-condition wait logic.
- Plugin: remove legacy `BindingTimeoutDefaultSeconds`.

Tests:
- Add/adjust unit tests for validation and PreBind timeout path.
- Ensure <1s and negative values are rejected; forbids when gates disabled.
 2025-11-04 17:15:19 +00:00
Kubernetes Prow Robot
f620a04eb5 Merge pull request #135060 from pohly/dra-scheduler-perf-normal-tests-experimental-allocator 
DRA scheduler_perf: benchmark baseline test cases with different allocators
 2025-11-04 09:14:15 -08:00
Kubernetes Prow Robot
276c59af7c Merge pull request #134769 from dejanzele/fix-job-starttime-validation-on-resume 
fix: allow job startTime updates on resume from suspended state
 2025-11-04 09:14:08 -08:00
Stanislav Láznička
ed62db7acf e2e registry: run as pods even in seemingly in-cluster pull tests 
Signed-off-by: Stanislav Láznička <slznika@microsoft.com>
 2025-11-04 17:27:17 +01:00
Stanislav Láznička
a275785bd4 node conformance e2e: log fake registry creds on test failure 2025-11-04 17:26:40 +01:00
Stanislav Láznička
fba24a8e71 node-conformance-e2e: finite wait for pod status 
Signed-off-by: Stanislav Láznička <slznika@microsoft.com>
 2025-11-04 17:26:35 +01:00
Natasha Sarkar
5cdb983c2e fetch node synchronously on node affinity failure 2025-11-04 16:24:14 +00:00
Kubernetes Prow Robot
2a48a78fcb Merge pull request #135081 from gohilankit/portworx-ssrf 
Clean up event messages for errors in Portworx in-tree driver
 2025-11-04 08:20:23 -08:00
Penghao
27a81144b2 Add checkpoint for groupsnapshot data consistency (#134637) 
* Add checkpoint for groupsnapshot data consistency

Signed-off-by: Penghao <pewang@redhat.com>

* fix: using exist helpers check data consistency

Signed-off-by: Penghao <pewang@redhat.com>

---------

Signed-off-by: Penghao <pewang@redhat.com>
 2025-11-04 08:20:15 -08:00
Kubernetes Prow Robot
af70ebcbf5 Merge pull request #132157 from haircommander/drop-userns-psa 
drop UserNamespacesPodSecurityStandards feature gate
 2025-11-04 08:20:08 -08:00
Kubernetes Prow Robot
f09cd625bc Merge pull request #135007 from ania-borowiec/nnn_code_update 
KEP-5278 Bring back clearing NominatedNodeName after scheduling or binding failure
 2025-11-04 07:14:24 -08:00
Kubernetes Prow Robot
ac46677d2a Merge pull request #134967 from ttsuuubasa/dra-bc-allocator-test 
scheduler: KEP-5007 allocator test - devices w/wo BindingConditions
 2025-11-04 07:14:17 -08:00
Arda Güçlü
9113013eb8 Introduce --as-user-extra persistent flag in kubectl (#134378) 
* Introduce --as-user-extra as persistent flag

* Add integration test to verify the behavior

* Update flag type to string slice
 2025-11-04 07:14:09 -08:00
Kubernetes Prow Robot
c7b6dfb144 Merge pull request #134730 from ania-borowiec/verify_ongoing_preemption 
Verify if pod has ongoing async preemption before evicting pods
 2025-11-04 06:22:09 -08:00
Jordan Liggitt
0639f7f40e Allow PSA controller tests to handle failure cases as errors 2025-11-04 09:16:39 -05:00
Ania Borowiec
a92b987b3d comments 2025-11-04 12:55:16 +00:00
Kubernetes Prow Robot
4d0d412686 Merge pull request #135093 from pohly/dra-e2e-kind-jobs-config 
Revert "prepare DRA kind config for kubeadm v1beta4"
 2025-11-04 04:50:15 -08:00
Kubernetes Prow Robot
7e1a2b9c0b Merge pull request #135055 from p0lyn0mial/upstream-watchlist-unsupported-wl-fix-kubelet-cm-test 
kubelet/app/server_bootstrap_test: fix Test_buildClientCertificateManager
 2025-11-04 04:50:08 -08:00
Patrick Ohly
d132afc87e DRA scheduler_perf: benchmark baseline test cases with different allocators 
When adding new features to the "experimental" allocator we are not directly
breaking "normal" usage of DRA because that uses the "incubating"
allocator. But we still want to know about potential performance problems also
for those test cases. If there is one, we might not be able to implement an
experimental feature in a way that allows promoting it later.

This is achieved by running the benchmarks twice as sub-tests, with different
topic names. The topic names then can be used to select different thresholds,
using a new extension of the scheduler_pref JSON config format.
 2025-11-04 13:34:29 +01:00
Ania Borowiec
191ab8d78d Integration test verifying that in case a preemptor pod with higher priority arrives while preemption is ongoing, the lower priority preemptor does not get stuck in unschedulable 2025-11-04 11:57:39 +00:00
Ania Borowiec
9640da5452 Verify if pod has ongoing async preemption before evicting pods 2025-11-04 11:57:34 +00:00