Commit Graph

111508 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
26c88ccee2
Merge pull request #113514 from oscr/update-shellcheck-version
Update shellcheck version (0.7.1 -> 0.7.2) and fix findings
2022-11-01 19:59:57 -07:00
Kubernetes Prow Robot
5899432f92
Merge pull request #113481 from rphillips/fixes/77063
kubelet: fix pod log line corruption when using timestamps and long lines
2022-11-01 19:59:50 -07:00
Kubernetes Prow Robot
9bbd0fbdb2
Merge pull request #113476 from marosset/hpc-to-stable
Promoting WindowsHostProcessContainers to stable
2022-11-01 19:59:43 -07:00
Kubernetes Prow Robot
d377a1fc7b
Merge pull request #113455 from ii/promote-resourcequota-status-test
Promote test for ResourceQuota status to Conformance +3 Endpoints
2022-11-01 19:59:37 -07:00
Kubernetes Prow Robot
9313a1f2a6
Merge pull request #113452 from brianpursley/DBG2
Allow DBG=1 to be used with make release-images and make quick-release-images
2022-11-01 19:59:30 -07:00
Kubernetes Prow Robot
114a54c098
Merge pull request #113450 from neogopher/pv-controller-fix-log-message
docs: Correct the log message for pv controller to make it more accurately descriptive
2022-11-01 19:59:19 -07:00
Kubernetes Prow Robot
7b84436168
Merge pull request #113408 from dashpole/kubelet_context
Plumb context to Kubelet CRI calls
2022-11-01 19:59:08 -07:00
Kubernetes Prow Robot
5c8e3a423f
Merge pull request #113296 from claudiubelu/retrigger-test-images
test images: Retrigger failing images
2022-11-01 19:58:56 -07:00
Kubernetes Prow Robot
4a0bb39d2a
Merge pull request #113282 from xmcqueen/master
Image Version Bump in Manifest for Node Perf Test tf-wide-deep
2022-11-01 19:58:45 -07:00
Kubernetes Prow Robot
3edbebe348
Merge pull request #110268 from danwinship/minimize-iptables-changes
minimize iptables-restore input
2022-11-01 18:06:46 -07:00
Kubernetes Prow Robot
b7f5de17ae
Merge pull request #113206 from marseel/fix/fix_estimator_for_serviceaccount_tokens
Fix APF width estimate for creating service account's token
2022-11-01 16:56:45 -07:00
Kubernetes Release Robot
303e7cbdb0 CHANGELOG: Update directory for v1.26.0-alpha.3 release 2022-11-01 22:49:09 +00:00
Oscar Utbult
421f142ffc Update shellcheck version (0.7.1 -> 0.7.2) and fix findings 2022-11-01 23:10:44 +01:00
Kubernetes Prow Robot
2452a95bd4
Merge pull request #112796 from SataQiu/clean-kubelet-20220930
kubelet: remove the unused constant AnnotationInvalidReason since sysctl annotations are deprecated and migrated to fields
2022-11-01 14:56:45 -07:00
Mark Rossetti
498d065cc5
Promoting WindowsHostProcessContainers to stable
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-11-01 14:06:25 -07:00
Kubernetes Prow Robot
9b72f20156
Merge pull request #112373 from loktev-d/k8s_109717
Add unit tests for active_deadline.go
2022-11-01 12:54:44 -07:00
Kubernetes Prow Robot
1a41cb8985
Merge pull request #113021 from rphillips/fixes/112936
kubelet: fix nil crash in allocateRemainingFrom
2022-11-01 10:46:45 -07:00
Brian Pursley
8a1b48046d Allow DBG=1 to be used with make release-images and make quick-release-images 2022-11-01 13:23:16 -04:00
Kubernetes Prow Robot
e6060f2780
Merge pull request #111220 from giuseppe/drop-superfluous-function
kubelet: remove superfluous function
2022-11-01 09:34:45 -07:00
Kubernetes Prow Robot
2ab2698e4c
Merge pull request #113490 from oscr/add-makefile-target-lint
Add Makefile target lint
2022-11-01 08:24:56 -07:00
Kubernetes Prow Robot
9b5fa57654
Merge pull request #113358 from mengjiao-liu/fix-StatefulSetAutoDeletePVC
StatefulSet: fix kube-controller-manager panic due to StatefulSetPersistentVolumeClaimRetentionPolicy being nil
2022-11-01 08:24:45 -07:00
Ryan Phillips
ddae396ce3 kubelet: fix pod log line corruption when using timestamps and long lines 2022-11-01 09:22:30 -05:00
Kubernetes Prow Robot
7a2984fddf
Merge pull request #113431 from SataQiu/kube-aggregator-20221028
kube-aggregator: remove redundant Scheme registration logic
2022-11-01 07:06:44 -07:00
Kubernetes Prow Robot
2d14d50b31
Merge pull request #113406 from jsafrane/fix-selinux-check-of-mounted
Fix SELinux check of mounted volumes
2022-11-01 04:14:45 -07:00
Kubernetes Prow Robot
22f3e64039
Merge pull request #113320 from chendave/test
kubeadm: simply struct of `joinOptions` by removing `joinControlPlane`
2022-11-01 02:48:45 -07:00
Kubernetes Prow Robot
76ccb69cc1
Merge pull request #113484 from logicalhan/docs
update documentation for stability framework
2022-10-31 21:14:44 -07:00
Kubernetes Prow Robot
7d9c0e0a78
Merge pull request #113411 from jsafrane/fix-selinux-context-mount
Fix SELinux context mount with unknown context
2022-10-31 17:00:44 -07:00
Oscar Utbult
0564fcce0f Add Makefile target lint 2022-10-31 23:57:01 +01:00
Kubernetes Prow Robot
4c657e5014
Merge pull request #110403 from claudiubelu/unittests-3
unittests: Fixes unit tests for Windows (part 3)
2022-10-31 15:52:44 -07:00
Han Kang
13e7fd8ed1 update documentation for stability framework
Change-Id: Id3fea91aac9c6faf2c920b1a0bec721e930a99ae
2022-10-31 15:17:24 -07:00
Kubernetes Prow Robot
f9bfa378ef
Merge pull request #113424 from liggitt/simplify-go.mod
Simplify go.mod
2022-10-31 14:20:57 -07:00
Kubernetes Prow Robot
4811569e52
Merge pull request #113280 from oscr/fix-makefile-help
Fix Makefile help target
2022-10-31 14:20:45 -07:00
Stephen Heywood
168fa73b60 Promote ResourceQuota e2e test to Conformance 2022-11-01 09:20:38 +13:00
Kubernetes Prow Robot
f892ab1bd7
Merge pull request #113405 from jsafrane/reduce-log-noise-on-selinux
Reduce log noise on SELinux mount mismatch
2022-10-31 13:14:56 -07:00
Kubernetes Prow Robot
373a78feab
Merge pull request #113321 from jsafrane/selinux-all-plugins
Add SELinux mount support to all volume plugins
2022-10-31 13:14:44 -07:00
Kubernetes Prow Robot
4a3bac5eae
Merge pull request #113281 from ialidzhikov/seccomp-default-fg
Update the doc string of the SeccompDefault feature gate
2022-10-31 11:50:56 -07:00
Kubernetes Prow Robot
62b21069d7
Merge pull request #113119 from marosset/hpc-local-account-e2e
Adding e2e test for running Windows hostprocess containers as members of a local usergroup
2022-10-31 11:50:45 -07:00
Jan Safranek
8dd3510032 Fix SELinux context mount with unknown context
Don't mount with SELinux mount option if kubelet does not know the SELinux
context, i.e. MounterArgs.SELinuxLabel is ""
2022-10-31 19:11:48 +01:00
Kubernetes Prow Robot
038da2bb13
Merge pull request #113472 from logicalhan/docs
update paths for documentation
2022-10-31 10:34:46 -07:00
Han Kang
fbdd02da40 update paths for documentation
Change-Id: I369b6972b2b6af2bab4561b1af824812ead95e0e
2022-10-31 09:20:39 -07:00
Michał Woźniak
3628532311
Extend metrics with the new labels (#113324)
* Extend job metrics

* Refactor TestMetrics to extract its checks into dedicated tests per feature
2022-10-31 08:50:45 -07:00
Kubernetes Prow Robot
4d2128b523
Merge pull request #113458 from CatherineF-dev/fix-tracing-wrapper-comment
Fix tracing wrapper comment
2022-10-31 06:14:44 -07:00
Jan Safranek
d37808faae Report error on a pod startup on SELinux mismatch
When a volume is already mounted with an unexpected SELinux label,
kubelet must unmount it first and then mount it back with the expected one.
Report an error to user, just in case the unmount takes too long.

In therory, this error should not happen too often, because two Pods with
different SELinux label will not enter Desired State of World, see
dsw.AddPodToVolume. It can happen when DSW and ASW SELinux labels only when
a volume has been deleted from DSW (= Pod was deleted) or a volume was
reconstructed after kubelet restart. In both cases, volume manager should
unmount the volume quickly.
2022-10-31 13:59:23 +01:00
Jan Safranek
805482413a Fix SELinux check of mounted volumes
In PodExistsInVolume with volumeObj.seLinuxMountContext != nil we know that
the volume has been previously mounted with a given SELinuxMountContext.

Either it has been mounted by this kubelet and we know it's correct or it
was by a previous instance of kubelet and the context has been
reconstructed from the filesystem. In both cases, the actual context is
correct, regardless if the volume plugin or PV access mode supports SELinux
mounts.
2022-10-31 13:39:48 +01:00
Jan Safranek
63ab1c86e7 Add SELinux mount support to all volume plugins
.. that are not migrated to CSI in 1.26 *and* are based on a block device.
NFS and CephFS may use the same volume as several PVs and then mounting
with -o context won't work.
2022-10-31 13:02:51 +01:00
Marcel Zięba
2f7b4ca685 Fix APF width estimate for creating service account's token 2022-10-31 11:06:07 +00:00
Kubernetes Prow Robot
d0e86111ef
Merge pull request #112855 from fromanirh/cpumanager-metrics
node: metrics: cpumanager: add metrics about pinning
2022-10-31 03:12:56 -07:00
Kubernetes Prow Robot
9702161caa
Merge pull request #112597 from mythi/grpc-authority
grpc: set localhost Authority to unix client calls
2022-10-31 03:12:45 -07:00
Kubernetes Prow Robot
ac59b03214
Merge pull request #113448 from pacoxu/remove-UnversionedKubeletConfigMap
remove  UnversionedKubeletConfigMap feature gate: GAed in v1.25
2022-10-31 01:18:43 -07:00
Kubernetes Prow Robot
a65d76a5b6
Merge pull request #113454 from ii/promote-namespace-finalizer-test
Promote replaceCoreV1NamespaceFinalize +1 Endpoints
2022-10-30 18:34:45 -07:00