Commit Graph

53211 Commits

Author SHA1 Message Date
Natasha Sarkar
23005281f7 record 'kubelet_pod_in_progress_resizes' metric 2025-07-18 22:27:39 +00:00
Natasha Sarkar
0595ddaafa record 'kubelet_container_requested_resizes_total' metric 2025-07-18 22:27:39 +00:00
Natasha Sarkar
468aa5e30c record 'kubelet_pod_resize_duration_milliseconds' metric 2025-07-18 22:27:39 +00:00
Natasha Sarkar
1296627633 define and register ippr metrics 2025-07-18 22:27:39 +00:00
Kubernetes Prow Robot
5c219a727a Merge pull request #130387 from shiya0705/Pod_Resize_complete_event
[FG:InPlacePodVerticalScaling] Add Pod resize complete event
2025-07-18 15:24:32 -07:00
Kubernetes Prow Robot
4b263baea1 Merge pull request #133027 from saschagrunert/podresources-proto
Convert `k8s.io/kubelet/pkg/apis/podresources` from gogo to protoc
2025-07-18 10:54:32 -07:00
Kubernetes Prow Robot
768407a30d Merge pull request #132800 from ritazh/dra-adminaccess-metrics
DRAAdminAccess: update resourceclaim_controller metrics
2025-07-18 10:54:25 -07:00
Kubernetes Prow Robot
f583305e31 Merge pull request #132651 from iholder101/swap/ga
GA the NodeSwap feature gate
2025-07-18 09:48:26 -07:00
shiya0705
2256f5747d Add resize completed event after Inprogress conditionCleared is cleared 2025-07-18 23:43:53 +08:00
Kubernetes Prow Robot
20b601c369 Merge pull request #132722 from imroc/fix-zero-mask
fix(kube-proxy) avoid add zero-masked loadBalancerSourceRanges to ipet
2025-07-18 07:16:26 -07:00
Rita Zhang
d42a1d58d0 DRAAdminAccess: add metrics
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2025-07-18 07:15:41 -07:00
Kubernetes Prow Robot
963a9acb6d Merge pull request #131989 from tallclair/apparmor-cleanup
Apparmor cleanup
2025-07-18 03:46:25 -07:00
roc
bfa33b18a0 fix(kube-proxy) avoid add zero-masked loadBalancerSourceRanges to ipset
Signed-off-by: roc <roc@imroc.cc>
2025-07-18 09:55:39 +08:00
Anish Ramasekar
d6e85b504d Add kubelet_credential_provider_config_info metric
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-07-17 20:30:06 -05:00
Kubernetes Prow Robot
033ffc73d6 Merge pull request #132299 from aramase/aramase/f/authn_config_hash_metric
Add `last_config_info` metric for authn, authz and encryption config
2025-07-17 18:24:24 -07:00
Kubernetes Prow Robot
4a80270b30 Merge pull request #133012 from tallclair/mem-lim-decrease
[FG:InPlacePodVerticalScaling] Support reducing memory limits
2025-07-17 17:10:39 -07:00
Kubernetes Prow Robot
843414555f Merge pull request #132983 from chengjoey/cleanup/allocation-manager
[FG:InPlacePodVerticalScaling] cleanup: fetch individual PodResourceInfo from allocated resource state
2025-07-17 17:10:32 -07:00
Kubernetes Prow Robot
99f55ae4ef Merge pull request #132662 from gnufied/bump-recovery-feature-ga
Bump recovery feature ga
2025-07-17 17:10:25 -07:00
Kubernetes Prow Robot
d7cce80685 Merge pull request #133040 from sunnylovestiramisu/fixDescription
Update VolumeAttributesClass API Description
2025-07-17 15:58:59 -07:00
Kubernetes Prow Robot
27ef1d4eed Merge pull request #132033 from pohly/dra-scheduler-filter-timeout
DRA scheduler: implement filter timeout
2025-07-17 15:58:24 -07:00
Anish Ramasekar
21e2fcea9e Add automatic_reload_last_config_info metric for auth configs
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-07-17 17:47:51 -05:00
Tim Allclair
5f829195e6 Only warn when AppArmor annotation doesn't match pod field 2025-07-17 14:46:47 -07:00
Kubernetes Prow Robot
3dd0e86190 Merge pull request #132821 from cici37/mapBeta
[KEP-3962]Promote MutatingAdmissionPolicy to Beta
2025-07-17 14:18:24 -07:00
Tim Allclair
e417232f92 Warn when using AppArmor annotations with a pod field 2025-07-17 14:07:35 -07:00
Tim Allclair
4fdf09fdc1 Stop syncing AppArmor fields to annotations 2025-07-17 14:07:35 -07:00
Tim Allclair
3ecb3d230f Remove unused appArmor*InUse functions 2025-07-17 14:07:35 -07:00
Tim Allclair
c7a78185c2 Remove the restriction on memory limit decrease 2025-07-17 13:17:35 -07:00
Tim Allclair
d9c91127d0 Check memory usage before decreasing limits 2025-07-17 13:17:35 -07:00
Patrick Ohly
5cea72d564 DRA integration: add test case for FilterTimeout
This covers disabling the feature via the configuration, failing to schedule
because of timeouts for all nodes, and retrying after ResourceSlice changes with
partial success (timeout for one node, success for the other).

While at it, some helper code gets improved.
2025-07-17 21:18:28 +02:00
Patrick Ohly
bc338e7505 DRA scheduler: implement filter timeout and cancellation
The intent is to catch abnormal runtimes with the generously large default
timeout of 10 seconds.

We have to set up a context with the configured timeout (optional!), then
ensure that both CEL evaluation and the allocation logic itself properly
returns the context error. The scheduler plugin then can convert that into
"unschedulable".

The allocator and thus Filter now also check for context cancellation by the
scheduler. This happens when enough nodes have been found.
2025-07-17 21:18:28 +02:00
Sunny Song
1745094c40 Update VolumeAttributesClass API Description 2025-07-17 18:40:01 +00:00
Patrick Ohly
025c606e39 DRA scheduler: add plugin configuration
The only option is the filter timeout.
The implementation of it follows in a separate commit.
2025-07-17 16:47:47 +02:00
Patrick Ohly
ee38a00131 DRA scheduler: add DRASchedulerFilterTimeout feature gate
Initializing the scheduler Features struct will be needed in different places,
therefore NewSchedulerFeaturesFromGates gets introduced. Besides, having it
next to the struct makes it easier to add new features.

The DRASchedulerFilterTimeout feature gate simplifies disabling the timeout
because setting a feature gate is often easier than modifying the scheduler
configuration with a zero timeout value.

The timeout and feature gate are new. The gate starts as beta and enabled by
default, which is consistent with the "smaller changes with low enough risk
that still may need to be disabled..." guideline.
2025-07-17 16:47:47 +02:00
Patrick Ohly
837ef29f5a scheduler: enhance and document Filter cancellation
When using context.CancelCause in the scheduler and context.Cause in plugins,
the status returned by plugins is more informative than just "context
canceled".

Context cancellation itself is not new, but many plugin authors probably
weren't aware of it because it wasn't documented.
2025-07-17 16:47:47 +02:00
Itamar Holder
070621bf77 Remove unit tests that rely on feature gate enablement check
Signed-off-by: Itamar Holder <iholder@redhat.com>
2025-07-17 16:44:41 +03:00
Itamar Holder
3f847d97c3 GA the NodeSwap feature gate
Signed-off-by: Itamar Holder <iholder@redhat.com>
2025-07-17 16:44:40 +03:00
Kubernetes Prow Robot
d33af7f7ef Merge pull request #133020 from pohly/apimachinery-list-map-keys
support optional listMapKeys in server-side apply
2025-07-17 06:34:24 -07:00
Sascha Grunert
532d48fe6a Convert k8s.io/kubelet/pkg/apis/podresources from gogo to protoc
Use standard protoc for the pod resources instead of gogo.

Part of kubernetes#96564

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2025-07-17 14:56:44 +02:00
Kubernetes Prow Robot
b2d7149090 Merge pull request #133011 from ylink-lfs/chore/residual_int64ptr_removal
chore: remove residual int64ptr usage with ptr.To
2025-07-17 02:58:24 -07:00
Kubernetes Prow Robot
71b8ad965e Merge pull request #132976 from yliaog/allocator
refactor allocator, removed claimsToAllocate from NewAllocator(), instead, passed it through Allocate()
2025-07-17 01:48:31 -07:00
Patrick Ohly
a1a85ddb16 SSA: test optional map keys
As of structured-merge-diff v6.3.0, list map keys may be optional, as long as
at least one key is provided.
2025-07-17 09:56:28 +02:00
Patrick Ohly
3357e8fc05 SSA: add integration tests
test/integration/apiserver/apply covers the behavior of server-side-apply (SSA)
for official APIs. But there seem to be no integration tests which cover the
semantic of SSA like adding/removing/updating entries in a list map. This adds
such a test.

It needs an API which is under control of the test and uses
k8s.io/apimachinery/pkg/apis/testapigroup for that purpose, with some issues
fixed (OpenAPI code generation complained) and a new list map added.

Registering that API group in the apiserver needs a REST storage and
strategy. The API group only gets added in the test. However, the production
code has to know about it. In particular,
pkg/generated/openapi/zz_generated.openapi.go has to describe it.
2025-07-17 09:56:28 +02:00
Kubernetes Prow Robot
729cf12002 Merge pull request #132973 from tallclair/mem-lim-decrease-stats
Add PodCPUAndMemoryStats to stats.Provider interface
2025-07-16 20:02:37 -07:00
Kubernetes Prow Robot
8f312e6fbf Merge pull request #132348 from iholder101/swap/add-container-swap-limit-metric
[KEP-2400] Add a container_swap_limit_bytes metric
2025-07-16 20:02:30 -07:00
Kubernetes Prow Robot
a08b85c9f6 Merge pull request #132847 from ylink-lfs/test/pod_update_ut
test: increase test coverage for pkg/kubelet/types
2025-07-16 18:56:37 -07:00
Kubernetes Prow Robot
6f29199af5 Merge pull request #131926 from esotsal/update_history_of_checkpointing_support
[doc] Update history of checkpoint support in Kubelet
2025-07-16 18:56:30 -07:00
Kubernetes Prow Robot
803ec16f56 Merge pull request #130430 from simonfogliato/kubelet-test-duplicate-line
Removed kubelet test duplicate line.
2025-07-16 18:56:23 -07:00
joey
1b5a08cbfb cleanup: fetch individual PodResourceInfo from allocated resource state
Signed-off-by: joey <zchengjoey@gmail.com>
2025-07-17 09:51:42 +08:00
ylink-lfs
ad220eb6c3 chore: remove residual int64ptr usage with ptr.To 2025-07-17 09:08:12 +08:00
Tim Allclair
a964468638 Add PodCPUAndMemoryStats to stats.Provider interface 2025-07-16 15:59:55 -07:00