github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-18 08:09:58 +00:00
Code Issues Projects Releases Wiki Activity
117,339 Commits 42 Branches 8,000 Tags 1.3 GiB
2d3ce64e5d
Commit Graph

117339 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
2d3ce64e5d
Merge pull request #119281 from jsafrane/enable-reconstruction 
Enable NewVolumeManagerReconstruction
 2023-07-14 15:20:41 -07:00
Kubernetes Prow Robot
47aeec63a8
Merge pull request #119272 from deads2k/resources 
add list of served versions to storage version
 2023-07-14 13:22:41 -07:00
Kubernetes Prow Robot
1b7fffa0a1
Merge pull request #119328 from sanposhiho/ff-SchedulerQueueingHints 
implement SchedulerQueueingHints feature gate
 2023-07-14 12:24:01 -07:00
Kubernetes Prow Robot
6f3856f953
Merge pull request #118883 from danielvegamyhre/kep-4017-job 
Add completion index as pod label for indexed jobs
 2023-07-14 12:23:50 -07:00
David Eads
90ab7580aa add list of served versions to storage version 2023-07-14 13:47:19 -04:00
Kubernetes Prow Robot
c79be34fba
Merge pull request #119330 from bertinatto/fix-conn-reuse-test 
Proactively bump golang.org/x/net to v0.12.0
 2023-07-14 10:27:49 -07:00
Daniel Vega-Myhre
5f37c102cb revert changes in staging 2023-07-14 16:48:13 +00:00
Fabio Bertinatto
d9bd413f99 Proactively bump golang.org/x/net to v0.12.0 
Proactively bump to v0.12.0 to avoid v0.10.0 and v0.11.0, which contain
a regression added by commit
82780d606d.
This commit was later reverted in v0.12.0.

Generated with:

hack/pin-dependency.sh golang.org/x/net v0.12.0 && hack/update-vendor.sh
 2023-07-14 13:27:38 -03:00
Kubernetes Prow Robot
2a91bd1dfd
Merge pull request #118782 from MikeSpreitzer/exempt-borrowing-impl 
Exempt borrowing implementation
 2023-07-14 09:16:00 -07:00
Kubernetes Prow Robot
4e9b487e7e
Merge pull request #118051 from A-Hilaly/api-server/webhooks/smart-reload 
support `WebhookAccessors` smart reload
 2023-07-14 09:15:48 -07:00
Kubernetes Prow Robot
ffa4c26321
Merge pull request #119140 from danwinship/iptables-metrics 
fix sync_proxy_rules_iptables_total metric
 2023-07-14 07:36:01 -07:00
Kubernetes Prow Robot
7472634bcb
Merge pull request #118303 from carlory/deprecate-cephrdb-plugin-migration 
deprecate csi migration for ceph rbd
 2023-07-14 07:35:49 -07:00
Kubernetes Prow Robot
24fe6f38f1
Merge pull request #119057 from vadasambar/feat/scheduler/expose-load-config-func 
refactor: export `loadConfigFile` as a public function `LoadConfigFile`
 2023-07-14 06:25:48 -07:00
Dan Winship
883d0c3b71 Add a dummy implementation of proxyutil.LineBuffer 
Rather than actually assembling all of the rules we aren't going to
use, just count them and throw them away.
 2023-07-14 08:38:25 -04:00
Kensei Nakada
34640772ed implement SchedulerQueueingHints feature gate 2023-07-14 12:31:27 +00:00
Kubernetes Prow Robot
95c8d61918
Merge pull request #113583 from chendave/POC_resetCfg 
kubeadm: implementation of `ResetConfiguration` API types
 2023-07-14 04:05:48 -07:00
Dave Chen
2a907e6004 kubeadm: fix fuzzing for ResetConfiguration 
Signed-off-by: Dave Chen <dave.chen@arm.com>
 2023-07-14 17:03:37 +08:00
Dave Chen
2e6715bc77 kubeadm: implementation of ResetConfiguration API types 
Signed-off-by: Dave Chen <dave.chen@arm.com>
 2023-07-14 17:03:31 +08:00
Kubernetes Prow Robot
e3bc35bc1b
Merge pull request #119008 from nilekhc/hotreload-update-metrics 
[KMSv2] feat: implements metrics for encryption config hot reload
 2023-07-13 23:08:00 -07:00
Kubernetes Prow Robot
18e0e668ca
Merge pull request #118933 from wojtek-t/apf_watchlist_support 
Add support for watchlist to APF
 2023-07-13 23:07:49 -07:00
Mike Spreitzer
ce90eb2cc2 Fix validation to use field.Forbidden instead of Required 
Co-authored-by: David Eads <deads2k@users.noreply.github.com>
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
 2023-07-14 01:02:28 +00:00
Mike Spreitzer
7305c96710 QueueSet and controller part of borrowing by exempt PLs 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
 2023-07-14 01:01:57 +00:00
Mike Spreitzer
2069835094 Tolerate only the two allowed field changes 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
 2023-07-14 01:01:43 +00:00
Abu Kashem
3754d2da20 apf: allow admin to change the Exempt field only of the exempt pl 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
 2023-07-14 01:01:29 +00:00
Abu Kashem
f8e4e8abac apf: add validation to exempt for borrowing 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
 2023-07-14 01:01:09 +00:00
Mike Spreitzer
f78d6062eb Update generated code for APF borrowing by exempt 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
 2023-07-14 01:00:06 +00:00
Mike Spreitzer
a9d8cace1f Fix AutoUpdateAnnotationKey, NominalConcurrencyShares 
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
 2023-07-14 00:47:58 +00:00
Abu Kashem
3d3240c8b4 apf: add API changes for borrowing by exempt pl 2023-07-14 00:47:28 +00:00
Kubernetes Prow Robot
5c72df7281
Merge pull request #118953 from mskrocki/escLib 
Convert EndpointSlice Reconciler to a library in staging.
 2023-07-13 17:13:34 -07:00
Jiahui Feng
b635f2a401
ValidatingAdmissionPolicy: Variable Composition (#118642) 
* [API REVIEW] Variable Composition

* lazy map.

* variable composition implementation.

* check variables during VAP validation.

* generated: ./hack/update-vendor.sh

* generated: UPDATE_COMPATIBILITY_FIXTURE_DATA

(cd staging/src/k8s.io/api/ && env UPDATE_COMPATIBILITY_FIXTURE_DATA=true go test)

* cost calucation.

* tests for cost calculations.

* e2e test for variables.

* fix doc for Validation.Expression.

* generated: ./hack/update-codegen.sh

* fix missing utilruntime import.

* generated: ./hack/update-openapi-spec.sh
 2023-07-13 17:13:28 -07:00
Kubernetes Prow Robot
1e21da87b8
Merge pull request #118988 from nilekhc/hash-keyid 
[KMSv2] chore: hashes keyID being logged
 2023-07-13 15:47:48 -07:00
Kubernetes Prow Robot
be2cfc9697
Merge pull request #118228 from carlory/move-non-graceful-node-shutdown-to-GA 
move non-graceful node shutdown to GA
 2023-07-13 15:47:37 -07:00
Amine
49d0346802 Pre-allocate webhook accessors arrays for mutating and validating 
webhooks
 2023-07-13 23:43:12 +01:00
Daniel Vega-Myhre
037091284e fix unit test bug 2023-07-13 22:38:21 +00:00
Kubernetes Prow Robot
8839d08fc2
Merge pull request #119305 from deads2k/for-api 
allow api-approvers to approve directories touched by generation
 2023-07-13 14:44:04 -07:00
Alex Zielenski
423f4dfc79
Add quantity library to CEL (#118803) 
* add quantity library to CEL

* add more tests to quantity

* use 1.29 env for quantity

* set CEL default env to 1.28 for 1.28 release

* add compare function

* docs and arith lib

* fixup addInt and subInt overload, add docs

* more tests

* cleanup docs

* remove old comments

* remove unnecessary cast

* add isInteger

* add overflow tests

* boilerplate

* refactor expectedResult for tests

* doc typo fix

* returns bool

* add docs link

* different dos link

* add isInteger true case

* expand iff

* add quantity back to 1.28 version, and revert change to DefaultCompatibilityVersion

* formatting
 2023-07-13 14:43:56 -07:00
Kubernetes Prow Robot
fc798a8dc1
Merge pull request #118520 from jpbetz/validate-unique 
Add merge map key validation to StorageVersions
 2023-07-13 14:43:49 -07:00
Kubernetes Prow Robot
bea27f82d3
Merge pull request #118209 from pohly/dra-pre-scheduled-pods 
dra: pre-scheduled pods
 2023-07-13 14:43:37 -07:00
Daniel Vega-Myhre
a1a5f49bb9 remove statefulset label added to wrong branch 2023-07-13 21:07:17 +00:00
Daniel Vega-Myhre
1ae60c0ed1 use job completion index annotation as label 2023-07-13 21:04:37 +00:00
Kubernetes Prow Robot
1db4658614
Merge pull request #119295 from jsafrane/remove-serial-localvolume 
Remove test Pods sharing a single local PV
 2023-07-13 13:43:21 -07:00
Nilekh Chaudhari
131216fa8f
chore: hashes keyID 
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2023-07-13 20:42:09 +00:00
Kubernetes Prow Robot
adbc309123
Merge pull request #119288 from danwinship/proxy-testing-cleanup 
minor proxy unit testing cleanups
 2023-07-13 13:42:05 -07:00
Jiahui Feng
049614f884
ValidatingAdmissionPolicy controller for Type Checking (#117377) 
* [API REVIEW] ValidatingAdmissionPolicyStatucController config.

worker count.

* ValidatingAdmissionPolicyStatus controller.

* remove CEL typechecking from API server.

* fix initializer tests.

* remove type checking integration tests

from API server integration tests.

* validatingadmissionpolicy-status options.

* grant access to VAP controller.

* add defaulting unit test.

* generated: ./hack/update-codegen.sh

* add OWNERS for VAP status controller.

* type checking test case.
 2023-07-13 13:41:50 -07:00
Kubernetes Prow Robot
a9e40bd7c6
Merge pull request #114307 from rphillips/promote_probe_termination_grace_period 
ProbeTerminationGracePeriod promote to GA
 2023-07-13 13:41:38 -07:00
Nilekh Chaudhari
c291e6355c
feat: implements metrics for encryption config hot reload 
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2023-07-13 20:08:27 +00:00
Kubernetes Prow Robot
3f1704dfbd
Merge pull request #119296 from pohly/dra-pod-resource-claim-status-validation 
dra API: ensure that pod status contains no duplicate resource claims
 2023-07-13 12:39:49 -07:00
Kubernetes Prow Robot
1d846a12da
Merge pull request #118804 from benluddy/authz-deferred-errors 
CEL lib: Expose errors on authz decisions instead of raising them from check()
 2023-07-13 12:39:37 -07:00
David Eads
be2e5417ea allow api-approvers to approve directories touched by generation 2023-07-13 15:27:53 -04:00
Patrick Ohly
80ab8f0542 dra: handle scheduled pods in kube-controller-manager 
When someone decides that a Pod should definitely run on a specific node, they
can create the Pod with spec.nodeName already set. Some custom scheduler might
do that. Then kubelet starts to check the pod and (if DRA is enabled) will
refuse to run it, either because the claims are still waiting for the first
consumer or the pod wasn't added to reservedFor. Both are things the scheduler
normally does.

Also, if a pod got scheduled while the DRA feature was off in the
kube-scheduler, a pod can reach the same state.

The resource claim controller can handle these two cases by taking over for the
kube-scheduler when nodeName is set. Triggering an allocation is simpler than
in the scheduler because all it takes is creating the right
PodSchedulingContext with spec.selectedNode set. There's no need to list nodes
because that choice was already made, permanently. Adding the pod to
reservedFor also isn't hard.

What's currently missing is triggering de-allocation of claims to re-allocate
them for the desired node. This is not important for claims that get created
for the pod from a template and then only get used once, but it might be
worthwhile to add de-allocation in the future.
 2023-07-13 21:27:11 +02:00