Commit Graph

26469 Commits

Author SHA1 Message Date
Abu Kashem
25efc8f2d1 handle watch for unsafe delete 2024-11-07 17:37:59 -05:00
Abu Kashem
9932dbef57 add access control check for unsafe delete
add access control check to ensure that the user has permission to do
'unsafe-delete-ignore-read-error' on the resource being deleted
2024-11-07 17:37:59 -05:00
Abu Kashem
367a265c0e add an integration test that exercises the unsafe delete flow
- add an integration test that exercises the unsafe delete flow
- extend newTransformTest to enable RBAC
- add integration test to verify that LIST returns corrupt object keys
2024-11-07 17:37:59 -05:00
Abu Kashem
5d4b4a160d implement unsafe deletion, and wire it
- implement unsafe deletion, and wire it
- aggregate corrupt object error(s) from the storage LIST operation
- extend storage error:
a) add a new type ErrCodeCorruptObj to represent a corrupt object:
b) add a new member 'InnerErr error' to StorageError to hold
   the inner error
- add API status error
2024-11-07 17:37:59 -05:00
Kubernetes Prow Robot
fb033826a8 Merge pull request #128170 from sanposhiho/async-preemption
feature(KEP-4832): asynchronous preemption
2024-11-07 19:44:54 +00:00
Kubernetes Prow Robot
9660e5c4cd Merge pull request #127360 from knight42/feat/split-stdout-stderr-server-side
API: add a new `Stream` field to `PodLogOptions`
2024-11-07 19:44:45 +00:00
Kubernetes Prow Robot
7243fa60e1 Merge pull request #128641 from benluddy/e2e-cbor-client-compat
KEP-4222: Fix JSON fallback for clients using default content-type and add E2E client test.
2024-11-07 18:32:50 +00:00
Kubernetes Prow Robot
af41aa1d9f Merge pull request #128664 from carlory/fix-node
mark the status of fake node as NotReady
2024-11-07 16:10:52 +00:00
Kubernetes Prow Robot
a660b51201 Merge pull request #128498 from googs1025/flake/TestReconcilerAPIServerLeaseMultiCombined
flake(TestReconcilerAPIServerLeaseMultiCombined): fix TestReconcilerAPIServerLeaseMultiCombined flake
2024-11-07 16:10:43 +00:00
Kubernetes Prow Robot
e5f5975f96 Merge pull request #128472 from sanposhiho/qhint-beta
feat: graduate SchedulerQueueingHints to beta
2024-11-07 16:10:36 +00:00
Kubernetes Prow Robot
33c64b380a Merge pull request #128646 from pohly/dra-kubelet-separate-beta-api
DRA kubelet: separate beta and alpha gRPC APIs
2024-11-07 14:57:45 +00:00
Omer Aplatony
9d816f1587 Replace PollImmediate with PollUntilContextTimeout (#128147)
* Replace PollImmediate with PollUntilContextTimeout

Signed-off-by: Omer Aplatony <omerap12@gmail.com>

* Add context to RetryErrorCondition function

Signed-off-by: Omer Aplatony <omerap12@gmail.com>

* lint: fix error comparison in scale package

Signed-off-by: Omer Aplatony <omerap12@gmail.com>

* Fix RetryErrorCondition function signature

Signed-off-by: Omer Aplatony <omerap12@gmail.com>

* revert to if err statement

Signed-off-by: Omer Aplatony <omerap12@gmail.com>

---------

Signed-off-by: Omer Aplatony <omerap12@gmail.com>
2024-11-07 14:57:29 +00:00
Ben Luddy
42d3e9752c Add E2E test for CBOR client compatibility with older apiservers.
Clients must be able to use CBOR without a guarantee that all apiservers support it. The apiserver
aggregation layer avoids changing in any way that would require an aggregated apiservers to be
updated. This end-to-end test verifies that a client's content negotiation behaviors continue to
work over time when communicating with a 1.17 sample-apiserver.
2024-11-07 09:22:44 -05:00
Ben Luddy
a77f4c7ba2 Fix content type fallback when a client defaults to CBOR.
With the ClientsAllowCBOR client-go feature gate enabled, a 415 response to a CBOR-encoded REST
causes all subsequent requests from the client to fall back to a JSON request encoding. This
mechanism had only worked as intended when CBOR was explicitly configured in the
ClientContentConfig. When both ClientsAllowCBOR and ClientsPreferCBOR are enabled, an
unconfigured (empty) content type defaults to CBOR instead of JSON. Both ways of configuring a
client to use the CBOR request encoding are now subject to the same fallback mechanism.
2024-11-07 09:14:59 -05:00
Kubernetes Prow Robot
ef37cb503b Merge pull request #128634 from thockin/remove_PodHostIPs_gate_for_1.32
Remove PodHostIPs feature gates
2024-11-07 13:47:54 +00:00
Kubernetes Prow Robot
40498ce561 Merge pull request #127224 from utam0k/test-qhint-csi
Add integration test for NodeVolumeLimits in requeueing scenarios
2024-11-07 13:47:29 +00:00
carlory
ba70c764c0 mark the status of fake node as NotReady 2024-11-07 21:26:22 +08:00
Kensei Nakada
b96eee847e feat: graduate SchedulerQueueingHints to beta 2024-11-07 21:45:18 +09:00
Kubernetes Prow Robot
48ead4e622 Merge pull request #128648 from pohly/dra-scheduler-perf-flake
scheduler_perf: fix steady-state pod creation/deletion
2024-11-07 12:33:41 +00:00
utam0k
e828a4b40a Add integration test for NodeVolumeLimits in requeueing scenarios
Signed-off-by: utam0k <k0ma@utam0k.jp>
2024-11-07 19:51:50 +09:00
Patrick Ohly
0301b6b504 scheduler_perf: fix steady-state pod creation/deletion
This fixes an issue in
TestSchedulerPerf/SteadyStateClusterResourceClaimTemplate:

    scheduler_perf.go:1542: FATAL ERROR: op 7: delete scheduled pods: client rate limiter Wait returned an error: rate: Wait(n=1) would exceed context deadline

That occurs when the test is almost done, but hasn't observed all scheduled
pods yet. The previous attempt to address this error wasn't actually 100%
correct. It covered the case when the context has already been canceled, but
not this particular "will reach deadline soon".
2024-11-07 09:36:36 +01:00
Kubernetes Prow Robot
272bb954b3 Merge pull request #127946 from saku3/add-test-volumebinding-for-queueinghint
add integration test for volumebinding for queueinghint
2024-11-07 07:41:29 +00:00
Lan Liang
6e5a3cde50 Remove PodHostIPs feature gates.
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-11-06 23:10:36 -08:00
Patrick Ohly
9261a182bb DRA kubelet: separate beta and alpha gRPC APIs
Reusing types from the alpha in the beta made it possible to provide and use
both versions without conversion. The downside was that removal of the alpha
would have been harder, if not impossible. DRA drivers could continue to
use the alpha types and provided the beta interface automatically.

Now the two versions are completely separate gRPC APIs, although in practice
there are no differences besides the name. Support for the alpha API in kubelet
is provided via automatically generated conversion and manually written
interface wrappers.

Those are provided as part of the v1alpha4 package. The advantage of having all
of that in a central place is that it'll be easier to remove when no longer
needed.
2024-11-07 07:42:40 +01:00
Kubernetes Prow Robot
6cc3570466 Merge pull request #128190 from HarshalNeelkamal/external-jwt
Add plugin and key-cache for ExternalJWTSigner integration
2024-11-07 06:29:45 +00:00
Kubernetes Prow Robot
c462d4c8e5 Merge pull request #126096 from utam0k/support-disabling-oom-group-kill
kubelet: new kubelet config option for disabling group oom kill
2024-11-07 06:29:36 +00:00
Jian Zeng
1a2c557d44 test: add e2e test
Signed-off-by: Jian Zeng <anonymousknight96@gmail.com>
2024-11-07 13:52:16 +08:00
Kubernetes Prow Robot
154b756e2e Merge pull request #128166 from yongruilin/test-allow-label
test: add integration test for allow-metric-label
2024-11-07 05:19:29 +00:00
Yusuke Sakurai
992f1d9a08 add integration test for volumebinding for queueinghint 2024-11-07 14:10:26 +09:00
Kensei Nakada
4a084d54d2 feat: set the threashold on the scheduler-perf test case 2024-11-07 14:09:35 +09:00
Kensei Nakada
9756a648b0 fix: move to a new way updating an extended resource 2024-11-07 14:09:35 +09:00
Kensei Nakada
4b92f6d398 fix the broken part due to the merge 2024-11-07 14:09:35 +09:00
Kensei Nakada
ac5aacc5f6 fix: address reviews on e2e 2024-11-07 14:09:35 +09:00
Kensei Nakada
08e8403e2e feat: add the e2e test for the async preemption 2024-11-07 14:09:34 +09:00
Kensei Nakada
e40f3f40bd fix: address reviews 2024-11-07 14:09:34 +09:00
Kensei Nakada
69a8d0ec0b feature(KEP-4832): asynchronous preemption 2024-11-07 14:09:34 +09:00
Harshal Neelkamal
6fdacf0411 Add plugin and key-cache for ExternalJWTSigner integration 2024-11-07 03:16:23 +00:00
utam0k
4f909c14a0 kubelet: new kubelet config option for disabling group oom kill
Signed-off-by: utam0k <k0ma@utam0k.jp>
2024-11-07 12:03:04 +09:00
Kubernetes Prow Robot
4c487b00af Merge pull request #128627 from kannon92/revert-128046-ga3960
Revert "Graduate PodLifecycleSleepAction to GA"
2024-11-07 00:25:51 +00:00
Kubernetes Prow Robot
7faac2451e Merge pull request #128611 from neolit123/1.32-remove-myself-from-test-owners
remove myself from test/OWNERS
2024-11-07 00:25:36 +00:00
Kubernetes Prow Robot
6399c32669 Merge pull request #128503 from benluddy/cbor-codecs-featuregate
KEP-4222: Wire serving codecs to CBOR feature gate.
2024-11-06 23:17:35 +00:00
Kubernetes Prow Robot
28900b8069 Merge pull request #128077 from aramase/aramase/f/kep_4412_sa_node_aud_restriction
Enforce service account node audience restriction
2024-11-06 23:17:28 +00:00
Kubernetes Prow Robot
9ba42a54a6 Merge pull request #128521 from carlory/framework-job
improve the code in test/e2e/framework/job/wait.go
2024-11-06 22:07:36 +00:00
Kevin Hannon
350b0d2b93 Revert "Graduate PodLifecycleSleepAction to GA" 2024-11-06 16:29:19 -05:00
Ben Luddy
439d2f7b40 Wire serving codecs to CBOR feature gate.
Integration testing has to this point relied on patching serving codecs for built-in APIs. The
test-only patching is removed and replaced by feature gated checks at runtime.
2024-11-06 15:41:39 -05:00
Kubernetes Prow Robot
e2bf630940 Merge pull request #128598 from AnishShah/fix-ippr-test
[FG:InPlacePodVerticalScaling] fix InPlacePodVerticalScaling e2e tests
2024-11-06 20:10:48 +00:00
Kubernetes Prow Robot
48c65d1870 Merge pull request #128576 from bart0sh/PR166-refactor-kubelet-stop-and-restart
e2e_node: refactor Kubelet stopping and restarting
2024-11-06 20:10:40 +00:00
Anish Ramasekar
e93d5d5425 Enforce sa token node audience restriction when ServiceAccountNodeAudienceRestriction=true
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-11-06 09:51:40 -08:00
Anish Ramasekar
51f7475b6a Add ServiceAccountNodeAudienceRestriction feature gate
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-11-06 09:51:36 -08:00
Lubomir I. Ivanov
ae910f3621 remove myself from test/OWNERS 2024-11-06 17:16:40 +02:00