Commit Graph

126230 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
e39571591d
Merge pull request #127478 from googs1025/scheduler/fine-grained
feature(scheduler): more fine-grained QHints for podtopologyspread plugin
2024-10-20 13:29:03 +01:00
Kubernetes Prow Robot
4f796c02f7
Merge pull request #128199 from kannon92/clean-up-swap-local-up-cluster
update local up cluster with latest swap changes
2024-10-19 16:49:03 +01:00
googs1025
1edbd0b54f feature(scheduler): more fine-grained QHints for podtopologyspread plugin 2024-10-19 23:45:13 +08:00
Kevin Hannon
2ab0d5b371 update local up cluster with latest swap changes 2024-10-19 10:46:13 -04:00
Kubernetes Prow Robot
ec16c90aaf
Merge pull request #126593 from stlaz/trustbundles-e2e
KEP-3257: e2e: extend cluster trust bundles coverage
2024-10-19 00:51:03 +01:00
Harshal Neelkamal
6e35b1f740
Update README.md
update hyper-link for 'create issue' to point to the right template.
2024-10-18 14:44:59 -07:00
Kubernetes Prow Robot
79cca2786e
Merge pull request #128172 from liggitt/3221-ga
KEP-3221: Promote StructuredAuthorizationConfiguration to GA
2024-10-18 20:21:09 +01:00
Kubernetes Prow Robot
bc893fc7b1
Merge pull request #128134 from siyuanfoundation/script
add instructions into verify-featuregates script.
2024-10-18 20:21:03 +01:00
torredil
56f2b192cc
scheduler: Improve CSILimits plugin accuracy by using VolumeAttachments
Signed-off-by: torredil <torredil@amazon.com>
2024-10-18 19:02:14 +00:00
Kubernetes Prow Robot
e8b59afec6
Merge pull request #128180 from pacoxu/node-validation
e2e_node: print system validation warnings
2024-10-18 19:09:10 +01:00
Kubernetes Prow Robot
7429566b07
Merge pull request #127918 from saschagrunert/backoff-status
Use image pull error in `message` during back-off
2024-10-18 19:09:03 +01:00
Siyuan Zhang
a2bf91e9cf add instructions into verify-featuregates script.
Signed-off-by: Siyuan Zhang <sizhang@google.com>
2024-10-18 09:53:27 -07:00
Kubernetes Release Robot
b0d0a1557d CHANGELOG: Update directory for v1.32.0-alpha.2 release 2024-10-18 16:40:13 +00:00
Kubernetes Prow Robot
7adcad3138
Merge pull request #128169 from liggitt/4193-ga
KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable
2024-10-18 17:39:11 +01:00
Kubernetes Prow Robot
d7bd728403
Merge pull request #128168 from liggitt/4601-beta
KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta
2024-10-18 17:39:03 +01:00
HirazawaUi
98e3cb4c56 promote feature gate to beta 2024-10-18 23:08:28 +08:00
Kubernetes Prow Robot
0daa75b972
Merge pull request #127797 from sanposhiho/cleanup-event-list
cleanup: remove event list
2024-10-18 15:31:04 +01:00
Kubernetes Prow Robot
de7e1e7b28
Merge pull request #128181 from SataQiu/clean-20241018
kubeadm: using options.Force constant instead of 'force' string
2024-10-18 12:19:04 +01:00
Stanislav Láznička
3ec3736d66
e2e: extend cluster trust bundles coverage 2024-10-18 12:30:13 +02:00
SataQiu
a0f8c51a75 kubeadm: using options.Force constant instead of 'force' string 2024-10-18 18:12:14 +08:00
Paco Xu
6877a2bfb8 e2e_node: print system validation warnings 2024-10-18 17:31:39 +08:00
Sascha Grunert
237c7e38bd
Update cni-plugins to v1.6.0
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-10-18 11:06:54 +02:00
Kubernetes Prow Robot
85ff7e75a2
Merge pull request #128143 from AnishShah/pod-resize-refactor
[FG:InPlacePodVerticalScaling]  Refactor in-place pod resize e2e tests
2024-10-18 08:11:04 +01:00
Sascha Grunert
0fc4b740f8
Use image pull error in message during back-off
The container status waiting reason toggles between `ImagePullBackOff`
and the actual pull error, resulting in a bad user experience for
consumers like kubectl. For example, the output of
`kubectl get pods` does return either:

```
NAME   READY   STATUS                      RESTARTS   AGE
pod    0/1     SignatureValidationFailed   0          10s
```

or

```
NAME   READY   STATUS             RESTARTS   AGE
pod    0/1     ImagePullBackOff   0          18s
```

depending in which state the image pull is. We now improve that behavior
by preserving the actual error in the `message` of the `waiting` state
from the pull during back-off:

```json
{
  "waiting": {
    "message": "Back-off pulling image \"quay.io/crio/unsigned:latest\": SignatureValidationFailed: image pull failed for quay.io/crio/unsigned:latest because the signature validation failed: Source
 image rejected: A signature was required, but no signature exists",
    "reason": "ImagePullBackOff"
  }
}
```

While the `SignatureValidationFailed` value inherits from the previous
known state:

```json
{
  "waiting": {
    "message": "image pull failed for quay.io/crio/unsigned:latest because the signature validation failed: Source image rejected: A signature was required, but no signature exists",
    "reason": "SignatureValidationFailed"
  }
}
```

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-10-18 08:47:37 +02:00
Kubernetes Prow Robot
98e5a701cb
Merge pull request #128175 from pacoxu/revert-128149-1.32-update-system-validators-to-v1.9.0
Revert "vendor: update system-validators to v1.9.0"
2024-10-18 06:55:04 +01:00
Kubernetes Prow Robot
a8fc7ae761
Merge pull request #128165 from liggitt/prune-self-require
Drop self-referencing replace directives
2024-10-18 03:53:11 +01:00
Kubernetes Prow Robot
f5ae0413ca
Merge pull request #126347 from vinayakankugoyal/kep2862impl
KEP-2862: Fine-grained Kubelet API Authorization
2024-10-18 03:53:04 +01:00
Paco Xu
93348753e2
Revert "vendor: update system-validators to v1.9.0" 2024-10-18 10:12:36 +08:00
Jordan Liggitt
ad808e609a
KEP-3221: Promote StructuredAuthorizationConfiguration to GA 2024-10-17 21:53:45 -04:00
Kubernetes Prow Robot
ded7ad554e
Merge pull request #125513 from mauri870/hotfix/grpc-handle-err
kubelet/cm/devicemanager: log grpc Serve error
2024-10-18 02:49:03 +01:00
Jordan Liggitt
0771f601e1
KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable 2024-10-17 21:25:09 -04:00
Kensei Nakada
83f9e4b6df cleanup: remove event list 2024-10-18 11:10:10 +10:00
Jordan Liggitt
9caca73126
KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta 2024-10-17 21:02:55 -04:00
Anish Shah
3e6df4a871 test: remove container runtime check and fix other nits 2024-10-17 17:14:04 -07:00
Kubernetes Prow Robot
b1b4e5d397
Merge pull request #128003 from pohly/dra-classic-dra-removal
DRA: remove "classic DRA"
2024-10-18 00:55:17 +01:00
Kubernetes Prow Robot
90ee68948d
Merge pull request #127504 from sttts/sttts-authz-cel-compiler-once
apiserver/authconfig: make CEL compiler shareable
2024-10-18 00:55:10 +01:00
Kubernetes Prow Robot
48f36acc7a
Merge pull request #125337 from aojea/document_node_addresses
kubelet --node-ip flag using  unspecified IPs and external cloud provider node addresses behavior
2024-10-18 00:55:03 +01:00
Kubernetes Prow Robot
bd00406951
Merge pull request #128144 from cheftako/updateANP
Bump konnectivity-client to v0.31.0
2024-10-17 23:15:10 +01:00
Kubernetes Prow Robot
42b388b068
Merge pull request #128120 from aojea/celmetrics
use same name as the folder for the package
2024-10-17 23:15:03 +01:00
Dr. Stefan Schimanski
c44fc28087
apiserver/validation: fix some sets.NewString deprecations
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-10-17 22:56:20 +02:00
Dr. Stefan Schimanski
4024390d8c
apiserver/authconfig: wire CEL compiler through lower layers to allow sharing
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-10-17 22:56:20 +02:00
Vinayak Goyal
b1f290d444 KEP-2862: Fine-grained Kubelet API Authorization
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-10-17 20:53:27 +00:00
Jordan Liggitt
3be1109829
Drop self-referencing replace directives 2024-10-17 15:51:15 -04:00
Kubernetes Prow Robot
b7d1766c18
Merge pull request #128158 from pohly/dra-controller-logging
DRA resource claim controller: improve log messages
2024-10-17 20:31:11 +01:00
Kubernetes Prow Robot
141951cd6b
Merge pull request #126420 from hoskeri/fix-container-succeeded-check-status
kuberuntime_manager: fix container success check.
2024-10-17 20:31:04 +01:00
Kubernetes Prow Robot
632ed16e00
Merge pull request #128153 from dom4ha/sch
Add UnschedulableAsync test in scheduler_perf to monitor impact of unschedulable pods on scheduler performance
2024-10-17 19:27:30 +01:00
Kubernetes Prow Robot
1b20b087fc
Merge pull request #128074 from pacoxu/fix-quota_lsci-e2e
storage fsquota monitoring pod should be user namespaced
2024-10-17 19:27:21 +01:00
Kubernetes Prow Robot
51f76febd7
Merge pull request #127402 from mimowo/managed-by-beta-update
Graduate JobManagedBy to Beta in 1.32
2024-10-17 19:27:14 +01:00
Kubernetes Prow Robot
c5a85abecb
Merge pull request #122867 from oilbeater/patch-1
fix broken links
2024-10-17 19:27:06 +01:00
Kubernetes Prow Robot
527d937b23
Merge pull request #128100 from yongruilin/fix-allow-label
refactor: Defer metrics label value allow list initialization
2024-10-17 18:23:18 +01:00