github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 20:00:07 +00:00
Code Issues Projects Releases Wiki Activity
129,504 Commits 42 Branches 9,765 Tags
2b83f33f8adebbd5e53dd16b84344fba8de93e72
Commit Graph

129504 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
2b83f33f8a Merge pull request #134032 from princepereira/automated-cherry-pick-of-#133953-upstream-release-1.33 
Automated cherry pick of #133953: Fix ClusterIP load balancer disappearing when InternalTrafficPolicy: Local is set.
 2025-09-26 02:48:19 -07:00
Kubernetes Prow Robot
6c4310711b Merge pull request #133628 from nojnhuh/automated-cherry-pick-of-#133562-upstream-release-1.33 
Automated cherry pick of #133562: DRA: wait for stats to converge in "creates slices" e2e test
 2025-09-26 01:38:19 -07:00
Kubernetes Prow Robot
1675d53edd Merge pull request #134269 from neolit123/automated-cherry-pick-of-#134265-origin-release-1.33 
Automated cherry pick of #134265: kubeadm: ensure waiting for apiserver uses a local client
 2025-09-26 00:22:18 -07:00
Lubomir I. Ivanov
223dd0ab82 kubeadm: use JoinHostPort in WaitControlPlaneClient 
Using naive string concat with ":" does not work for IPv6.
Apply the fix to WaitForKubelet as well.
 2025-09-25 21:29:39 +02:00
Lubomir I. Ivanov
9f99111f42 kubeadm: ensure waiting for apiserver uses a local client 
When waiting for the kube-apiserver to report 'ok'
in the 'init' and 'join' phase 'wait-control-plane', a client
constructed from the 'admin.conf' is used. In the case of the
kube-apiserver, the discovery client is used so that
anonymous-auth works. But if 'admin.conf' is used as is,
it would point to the CPE and not the LAE.

Implement a new method WaitControlPlaneClient() for both
init.go and join.go that patches the 'Server' field in the
loaded v1.Config to point to the LAE, before constructing
a client set and using it in the kube-apiserver waiter.
 2025-09-25 15:57:36 +02:00
Kubernetes Prow Robot
fcaf057eb2 Merge pull request #134197 from cpanato/update-go-rel-133 
[release-1.33] [go] Bump images, dependencies and versions to go 1.24.7 and distroless iptables
 2025-09-24 08:16:18 -07:00
Carlos Panato
aa5fd440c5 Bump images, dependencies and versions to go 1.24.7 and distroless iptables 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-09-22 13:08:22 +02:00
Kubernetes Prow Robot
6ddeb36e26 Merge pull request #134117 from jack4it/automated-cherry-pick-of-#134024-upstream-release-1.33 
Automated cherry pick of #134024: fix: use iifname for input interface name matches
 2025-09-19 12:56:14 -07:00
Kubernetes Prow Robot
7010b6e06d Merge pull request #133992 from xigang/automated-cherry-pick-of-#132477-upstream-release-1.33 
Automated cherry pick of #132477: Fix DaemonSet misscheduled status not updating on node taint changes
 2025-09-18 00:25:45 -07:00
Jack Ma
54a33ecf45 fix: use iifname for input interface name matches 
add tests to cover nftables; also fix NewDetectLocalByBridgeInterface
 2025-09-17 09:58:31 -07:00
Prince Pereira
22e1fc1a7b Fix ClusterIP load balancer disappearing when InternalTrafficPolicy: Local is set. 2025-09-16 22:37:10 +05:30
xigang
ce801e5561 Fix DaemonSet misscheduled status not updating on node taint changes 
Signed-off-by: xigang <wangxigang2014@gmail.com>
 2025-09-10 20:58:34 +08:00
Kubernetes Release Robot
f534b7b0da Update CHANGELOG/CHANGELOG-1.33.md for v1.33.5 2025-09-09 20:12:40 +00:00
Kubernetes Release Robot
03e764d039 Release commit for Kubernetes v1.33.5 v1.33.5 2025-09-09 19:43:57 +00:00
Kubernetes Prow Robot
83101dfc66 Merge pull request #133746 from jsafrane/automated-cherry-pick-of-#133425-release-1.33 
Automated cherry pick of #133425: Fix SELinux label comparison
 2025-09-04 02:27:24 -07:00
Kubernetes Prow Robot
a197a68909 Merge pull request #133122 from vr4manta/automated-cherry-pick-of-#132891-upstream-release-1.33 
Automated cherry pick of #132891: Added NodeSelectors field to external DriverDefinition
 2025-09-04 02:27:16 -07:00
Kubernetes Prow Robot
1363698a95 Merge pull request #133642 from danwinship/automated-cherry-pick-of-#133625-origin-release-1.33 
Automated cherry pick of #133625: Remove patch/update from ServiceCIDR API conformance test
 2025-09-03 02:35:22 -07:00
Kubernetes Prow Robot
9b25105f02 Merge pull request #132985 from saschagrunert/automated-cherry-pick-of-#131018-base-release-1.33 
Automated cherry pick of #131018: Mask Linux thermal interrupt info in /proc and /sys.
 2025-09-03 02:35:15 -07:00
Kubernetes Prow Robot
4e7ec8531a Merge pull request #133754 from HirazawaUi/automated-cherry-pick-of-#133513-upstream-release-1.33 
Automated cherry pick of #133513: Add missing conversion for timeoutForControlPlane
 2025-09-02 23:33:15 -07:00
tom1299
b246955af5 Fix missing control plane health check timeout 2025-08-28 22:57:01 +08:00
Jan Safranek
c1a0f959af Add a note about Conflicts return value 2025-08-28 10:31:15 +02:00
Jan Safranek
2d6c21edd1 Fix SELinux label comparison 
The comparison of SELinux labels in KCM tolerates missing fields - the
operating system is going to default them from its defaults, but in KCM we
don't know what the defaults are.

But the OS won't default the last component, "level", which includes also
categories. Make sure that labels with a level set conflicts with level "",
that's what will conflict on the OS too.
 2025-08-28 10:31:15 +02:00
Jan Safranek
fe2d1b2687 Add missing cases to SELinuxMount tests 2025-08-28 10:31:15 +02:00
Dan Winship
9d09997311 Remove patch/update from ServiceCIDR API conformance test 
They were already listed in ineligible_endpoints.yaml, so we shouldn't
be testing them here anyway.
 2025-08-21 09:09:11 -04:00
Jon Huhn
1e3ff8d7ad DRA: wait for stats to converge in "creates slices" e2e test 2025-08-20 14:00:07 -05:00
Kubernetes Prow Robot
8fcf7ac3c7 Merge pull request #133522 from cpanato/update-go-rel-133 
[release-1.33][go] Bump images, dependencies and versions to go 1.24.6 and distroless iptables
 2025-08-14 09:59:09 -07:00
Carlos Panato
98b3daba8c Bump dependencies, images and versions used to Go 1.24.6 and distroless iptables 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-08-14 13:31:05 +02:00
Kubernetes Release Robot
0ae9d1d160 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.4 2025-08-13 14:40:41 +00:00
Kubernetes Release Robot
74cdb4273a Release commit for Kubernetes v1.33.4 v1.33.4 2025-08-13 14:16:42 +00:00
Kubernetes Prow Robot
99338a8f02 Merge pull request #133468 from natherz97/node-deletion-release-1.33 
Update NodeRestriction to prevent nodes from updating their OwnerReferences
 2025-08-11 16:05:11 -07:00
Sergey Kanzhelev
36b3f76032 do not allow the node to update it's owner reference 2025-08-10 14:53:04 -07:00
Kubernetes Prow Robot
be53c1eab0 Merge pull request #133285 from yue9944882/automated-cherry-pick-of-#132895-upstream-release-1.33 
Automated cherry pick of #132895: Fixes scheduler nil panic due to empty init container request&limit
 2025-07-30 00:16:27 -07:00
Min Jin
8c49e96120 fixes scheduler nil panic due to empty init container request&limit 
Signed-off-by: Min Jin <minkimzz@amazon.com>
 2025-07-29 12:49:43 -07:00
Kubernetes Prow Robot
48256728e9 Merge pull request #133264 from BenTheElder/cherrypick-133262-release-1.33 
Cherrypick 133262 remove broken test that depends on expired credential onto Release 1.33
 2025-07-29 10:34:26 -07:00
Benjamin Elder
a2ef871e58 remove failing test that depends on expired credential, remove credential, add TODOs 
see: https://github.com/kubernetes/kubernetes/issues/130271
 2025-07-28 16:31:06 -07:00
vr4manta
d8676a24cc Added NodeSelectors field to DriverDefinition 2025-07-22 08:21:08 -04:00
Kubernetes Prow Robot
64f7af48d7 Merge pull request #132897 from cpanato/update-go124-133 
[release-1.33][go] Bump dependencies, images and versions used to Go 1.24.5 and distroless iptables
 2025-07-16 15:28:23 -07:00
Sascha Grunert
b5fa540b21 Mask Linux thermal interrupt info in /proc and /sys. 
On Linux, mask "/proc/interrupts" and "/sys/devices/system/cpu/cpu<x>/thermal_throttle"
inside containers by default. Privileged containers or containers started
with --security-opt="systempaths=unconfined" are not affected.

Mitigates potential Thermal Side-Channel Vulnerability Exploit
(https://github.com/moby/moby/security/advisories/GHSA-6fw5-f8r9-fgfm).

Also: improve integration test TestCreateWithCustomMaskedPaths() to ensure
default masked paths don't apply to privileged containers.

Refers to https://github.com/moby/moby/pull/49560

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2025-07-16 11:07:06 +02:00
Kubernetes Release Robot
9cf0b2db70 Update CHANGELOG/CHANGELOG-1.33.md for v1.33.3 2025-07-15 18:23:29 +00:00
Kubernetes Release Robot
80779bd6ff Release commit for Kubernetes v1.33.3 v1.33.3 2025-07-15 17:59:41 +00:00
Kubernetes Prow Robot
25709109dd Merge pull request #132272 from Peac36/automated-cherry-pick-of-#132168-upstream-release-1.33 
Automated cherry pick of #132168: reduce logspam when calculating sandbox resources
 2025-07-11 18:17:35 -07:00
Kubernetes Prow Robot
5158ef67a2 Merge pull request #131577 from ndbaker1/automated-cherry-pick-of-#131251-origin-release-1.33 
Automated cherry pick of #131251: fix(kubelet): acquire imageRecordsLock when removing image
 2025-07-11 18:17:28 -07:00
Kubernetes Prow Robot
f95a538dc5 Merge pull request #132728 from mimowo/automated-cherry-pick-of-#132614-upstream-release-1.33 
Automated cherry pick of #132614: Fix validation for Job with suspend=true,completions=0 to set Complete condition
 2025-07-11 17:07:28 -07:00
Kubernetes Prow Robot
a95af19070 Merge pull request #132860 from mimowo/automated-cherry-pick-of-#132502-upstream-release-1.33 
Automated cherry pick of #132502: Fix flake caused by invalid detection of active policies in VAP integration tests
 2025-07-11 13:35:28 -07:00
Carlos Panato
e7ff6701a9 Bump dependencies, images and versions used to Go 1.24.5 and distroless iptables 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-07-11 20:34:49 +02:00
Michal Wozniak
053e244efb Skip linter validation to allow cherrypick 2025-07-10 11:30:20 +02:00
Ben Luddy
6a9319c527 Use per-policy marker names for VAP integration tests. 
Writes to policy resources don't instantaneously take effect in admission. ValidatingAdmissionPolicy
integration tests determine that the policies under test have taken effect by adding a sentinel
policy rule and polling until that rule is applied to a request.

If the marker resource names are the same for each test case in a series of test cases, then
observing a policy's effect on a marker request only indicates that _any_ test policy is in effect,
but it's not necessarily the policy the current test case is waiting for. For example:

1. Test 1 creates a policy and binding.

2. The policy and binding are observed by the admission plugin and take effect.

3. Test 1 observes that a policy is in effect via marker requests.

4. Test 1 exercises the behavior under test and successfully deletes the policy and binding it
created.

5. Test 2 creates a policy and binding.

6. Test 2 observes that a policy is in effect via marker requests, but the policy in effect is still
the one created by Test 1.

7. Test 2 exercises the behavior under test, which fails because it was evaluated against Test 1's
policy.

Generating a per-policy name for the marker resource in each test resolves the timing issue. In the
example, step (6) will not proceed until the admission plugin has observed the policy and binding
created in (5).
 2025-07-10 10:12:40 +02:00
Kubernetes Prow Robot
ecc8d0ae6a Merge pull request #132337 from hakuna-matatah/automated-cherry-pick-of-#132244-upstream-release-1.33 
Automated cherry pick of #132244: 1.33 regression - Consistent paginated lists serve from cache
 2025-07-09 21:47:26 -07:00
Kubernetes Prow Robot
54a0ceab5f Merge pull request #132280 from neolit123/automated-cherry-pick-of-#130782-origin-release-1.33 
Automated cherry pick of #130782: Kubeadm issue #3152 ControlPlane node setup failing with "etcdserver: can only promote a learner member"
 2025-07-09 09:01:28 -07:00
Kubernetes Prow Robot
e9c25f7a90 Merge pull request #132158 from linxiulei/automated-cherry-pick-of-#132109-release-1.33 
Automated cherry pick of #132109: Clean backoff record earlier
 2025-07-09 05:43:26 -07:00