Commit Graph

128632 Commits

Author SHA1 Message Date
carlory
27706a0b54 Add quota support for PVC with VolumeAttributesClass
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-13 13:50:44 +08:00
Kubernetes Prow Robot
82667879bb
Merge pull request #130599 from tallclair/acknowledged-resources
[FG:InPlacePodVerticalScaling] Track actuated resources to trigger resizes
2025-03-10 19:01:46 -07:00
Kubernetes Prow Robot
b90ff89ed6
Merge pull request #130699 from thockin/master_validation-gen_odd_cases
Prevent validation-gen usage patterns we don't want to support
2025-03-10 17:15:52 -07:00
Kubernetes Prow Robot
f5f9484286
Merge pull request #130695 from yongruilin/validation-gen_coveredbydeclarative
[Declarative Validation] Add CoveredByDeclarative to field error struct
2025-03-10 17:15:46 -07:00
Kubernetes Prow Robot
a38d4e53e1
Merge pull request #130697 from thockin/fix_replication_controller_validation_tests
Fix validation test for ReplicationController
2025-03-10 14:41:54 -07:00
Kubernetes Prow Robot
f510123183
Merge pull request #130559 from esotsal/fix-use-CamelCase-for-memory-manager-policy-name-check-for-InPlacePodVerticalScalingExclusiveCPUs-feature-gate
[FG:InPlacePodVerticalScaling] Fix use CamelCase for memory manager policy in InPlacePodVerticalScalingExclusiveCPUs
2025-03-10 14:41:47 -07:00
Kubernetes Prow Robot
cad46631a8
Merge pull request #130655 from BenTheElder/pr130580
Set [Feature:OffByDefault] when WithFeatureGate receives an off-by-default feature gate
2025-03-10 13:31:46 -07:00
Tim Hockin
3460b2238e
Disallow optional/required on non-pointer structs 2025-03-10 13:14:11 -07:00
Tim Hockin
dcbfe67b1c
Prevent usage patterns we don't want to support
* typedefs to pointers
* pointers to pointers
* pointers to lists
* pointers to maps
* fixed-size arrays
* lists of pointers
* lists of lists
* lists of maps
* maps with non-string keys
* maps of pointers
* maps of lists
* maps of maps
2025-03-10 13:09:19 -07:00
yongruilin
8eb90fe136 Add CoveredByDeclarative to field error struct
- Introduce CoveredByDeclarative field to Error struct
- Add MarkCoveredByDeclarative method for Error and ErrorList
- Implement ExtractDeclarative method to filter out declaratively covered errors
- Update error constructors to include the new field
- Add corresponding test cases for new declarative validation functionality
2025-03-10 19:07:51 +00:00
Jordan Liggitt
628d107b61 Switch cluster trust bundle e2e tests to generic alpha feature + feature gates
This relies on WithFeatureGate adding [Feature:OffByDefault]. Without that, the
test would start to run in jobs which don't enable the feature.
2025-03-10 12:04:04 -07:00
Benjamin Elder
9828ad64da e2e framework WithFeatureGate adds [Feature:OffByDefault]
(when passed a feature that is not Default)

This allows using the regex filter to skip tests that do not work on a cluster
without optional configuration, while moving tests to use WithFeatureGate
without also setting WithFeature unless they have some additional configuration
required.

Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
2025-03-10 12:04:04 -07:00
Kubernetes Prow Robot
9b57a960f8
Merge pull request #130675 from pacoxu/fix-ut-flake
fix a flake of TestRoundTripTypes: for FirstAvailable[].AllocationMode
2025-03-10 11:55:54 -07:00
Kubernetes Prow Robot
0791d6ef70
Merge pull request #130666 from thockin/yaml_json_ambiguous_decode
Better handling of YAML that tastes like JSON
2025-03-10 11:55:47 -07:00
Tim Hockin
46ac2af06a
Fix validation test for ReplicationController
I discovered this by changing the validation in a way that SHOULD fail
(by allowing something it should not).  But it didn't.  A different
error happens which totally masks the non-failure I expected.  New test
is much more explicit about what failures are expected.

This does not focus on adding test coverage, just making sure the test
is not terrible.
2025-03-10 11:51:53 -07:00
Kubernetes Prow Robot
133d5d612e
Merge pull request #130603 from AndrewSirenko/fix-vac-flake
Mark VAC recovery e2e test flaky
2025-03-10 10:27:46 -07:00
Tim Allclair
6d0b6278cd Rename some allocation.Manager methods 2025-03-10 10:03:35 -07:00
Tim Allclair
d4444dd598 Use actuated resources to determine resize status 2025-03-10 10:03:35 -07:00
Tim Allclair
660bd6b42d Track actuated resources in the allocation manager 2025-03-10 09:58:29 -07:00
Kubernetes Prow Robot
b82260f003
Merge pull request #130391 from bart0sh/PR174-e2e_node-fix-eviction-kubetest2
e2e_node: fix ImageGCNoEviction test for kubetest2
2025-03-10 08:57:53 -07:00
Kubernetes Prow Robot
ef47225466
Merge pull request #130004 from stlaz/remote-uid-config-fix
cluster authn trust configmap: increase write interval during apiserver dueling
2025-03-10 08:57:47 -07:00
Kubernetes Prow Robot
4806519423
Merge pull request #130622 from pohly/DRAPrioritizedList
DRA: Prioritized Alternatives in Device Requests, II
2025-03-10 06:51:51 -07:00
Kubernetes Prow Robot
9d2fc46556
Merge pull request #130637 from serathius/watchcache-unify-validation
Unify ListOptions validation between cache and etcd
2025-03-10 04:41:46 -07:00
Patrick Ohly
89440b1239 DRA: integration tests for prioritized list
This adds dedicated integration tests for the feature to the general
test/integration/dra for the API and some minimal testing with the scheduler.

It also adds non-performance test cases for scheduler_perf because that is a
better place for running through the complete flow (for example, can reuse
infrastructure for setting up nodes).
2025-03-10 11:38:06 +01:00
Marek Siarkowicz
ccb607f06b Unify ListOptions validation between cache and etcd 2025-03-10 11:36:24 +01:00
Stanislav Láznička
dbf780a48a
authn-trust: don't react to target CM updates
If kube-apiservers run at a different version (during upgrades) and
each has different opinion on what the `extension-apiserver-authentication`
config map should look like, they would start dueling with config map
writes.

This commit removes handling of the update events of the target CM
in order to reduce the amount of such dueling to once a minute, as
the controller is guaranteed to run at least once a minute anyway.

The idea is that a cluster state with two different versions of
kube-apiserver should never be permanent, and so a reduced amount of
dueling for that period is tolerable.
2025-03-10 11:28:02 +01:00
Kubernetes Prow Robot
5227bad0df
Merge pull request #130335 from carlory/fix-handle-terminating-pvc-when-kubelet-rebuild-dsw
Fix kubelet restart unmounts volumes of running pods if the referenced PVC is being deleted by the user
2025-03-10 03:09:47 -07:00
carlory
aab083972d fix handle terminating pvc when kubelet rebuild dsw
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-10 15:39:18 +08:00
Paco Xu
ce163947aa fix a flake of TestRoundTripTypes: for FirstAvailable[].AllocationMode 2025-03-10 14:03:55 +08:00
Drew Sirenko
085d23388a Mark VAC roll-forward test as flaky 2025-03-10 00:40:53 -04:00
Kubernetes Prow Robot
0f2bde7745
Merge pull request #130555 from thockin/k_k_randfill
Use randfill in k/k
2025-03-09 01:47:45 -08:00
Tim Hockin
770ce2d874
Better handling of YAML that tastes like JSON
For the most part, JSON is a subset of YAML.  This might lead one to
think that we should ALWAYS use YAML processing.  Unfortunately a JSON
"stream" (as defined by Go's encoding/json and many other places, though
not the JSON spec) is a series of JSON objects.  E.g. This:

```
{}{}{}
```

...is a valid JSON stream.

YAML does NOT accept that, insisting on `---` on a new line between YAML
documents.

Before this commit, YAMLOrJSONDecoder tries to detect if the input is
JSON by looking at the first few characters for "{".  Unfortunately,
some perfectly valid YAML also tastes like that.

After this commit, YAMLOrJSONDecoder will detect a failure to parse as
JSON and instead flip to YAML parsing.  This should handle the ambiguous
YAML.

Once we flip to YAML we never flip back, and once we detect a JSON
stream (as defined above) we lose the ability to flip to YAML.  A
multi-document is either all JSON or all YAML, even if we use the JSON
parser to decode the first object (because JSON is YAML for a single
object).
2025-03-08 15:38:10 -08:00
Tim Hockin
f08e640b9e
Lock down gofuzz in deps 2025-03-08 15:22:01 -08:00
Tim Hockin
0ce4268b1f
Vendor randfill 2025-03-08 15:21:58 -08:00
Kubernetes Prow Robot
6cb457bc66
Merge pull request #130664 from jpbetz/time-in-extra-pkgs
Add time to extra-pkgs for validation-gen
2025-03-08 15:21:44 -08:00
Tim Hockin
e54719bb66
Use randfill, do API renames 2025-03-08 15:18:00 -08:00
Joe Betz
6798e2d863 Add time to extra-pkgs for validation-gen 2025-03-08 14:21:49 -05:00
Kubernetes Prow Robot
0eaee48ecb
Merge pull request #130569 from dims/update-to-latest-cadvisor-v0.52.0
Update to latest cadvisor @ v0.52.1 and new opencontainer/cgroups and drops opencontainers/runc
2025-03-07 17:09:51 -08:00
Kubernetes Prow Robot
1d88598555
Merge pull request #130561 from danwinship/more-misc-proxy-cleanup
more misc proxy cleanup
2025-03-07 17:09:44 -08:00
Kubernetes Prow Robot
6216201e16
Merge pull request #130485 from aramase/aramase/f/using_sar_for_node_aud_restriction
Enable dynamic configuration of service account names and audiences for token requests in node audience restriction
2025-03-07 15:35:45 -08:00
Anish Ramasekar
3f5d30543d
Add integration tests for using SAR with node audience restriction
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-07 16:25:18 -06:00
Anish Ramasekar
b09ca8c2c8
Use SAR to allow dynamic audiences for node audience restriction
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-07 16:25:14 -06:00
Kubernetes Prow Robot
2effa5e3cf
Merge pull request #130352 from natasha41575/kubelet-pod-observedgen
[FG:PodObservedGenerationTracking] Kubelet sets pod `status.observedGeneration` when updating the pod status
2025-03-07 13:33:45 -08:00
Kubernetes Prow Robot
cd060979bf
Merge pull request #130651 from ahrtr/rc2_20250307
Build etcd v3.6.0-rc.2 image
2025-03-07 12:27:53 -08:00
Kubernetes Prow Robot
83b696c720
Merge pull request #130125 from marosset/windows-unit-tests-kubelet-eviction-fixes
fixing k8s.io/kubernetes/pkg/kubelet/eviction unit tests on Windows
2025-03-07 12:27:46 -08:00
Davanum Srinivas
97a54dc4b0
update to v1.22.0-rc.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-03-07 13:45:34 -05:00
Kubernetes Prow Robot
a6ad9aa8ad
Merge pull request #130623 from marosset/fix-pkg-volume-util-subpath-unit-tests-windows
Fixing unit tests in k8s.io/kubernetes/pkg/volume/util/subpath on Win…
2025-03-07 10:39:48 -08:00
Benjamin Wang
337f1c211d Build etcd v3.6.0-rc.2 image
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
2025-03-07 17:48:47 +00:00
Kubernetes Prow Robot
0e2a2afc4c
Merge pull request #130635 from zimnx/fix-websocket-read-error
Return correct error upon websocket message read failure
2025-03-07 08:45:53 -08:00
Kubernetes Prow Robot
ed99f7dec6
Merge pull request #130153 from wongchar/uncore-v1.33
node: cpumanager: prefer-align-cpus-by-uncorecache: add test cases and CPU topologies
2025-03-07 08:45:45 -08:00