Oscar Utbult
421f142ffc
Update shellcheck version (0.7.1 -> 0.7.2) and fix findings
2022-11-01 23:10:44 +01:00
Chris Henzie
2d0afbc054
scheduler: integration test for ReadWriteOncePod alpha
...
Tests scheduler enforcement of the ReadWriteOncePod PVC access mode.
- Creates a pod using a PVC with ReadWriteOncePod
- Creates a second pod using the same PVC
- Observes the second pod fails to schedule because PVC is in-use
- Deletes the first pod
- Observes the second pod successfully schedules
2022-11-01 15:08:01 -07:00
Kubernetes Prow Robot
2452a95bd4
Merge pull request #112796 from SataQiu/clean-kubelet-20220930
...
kubelet: remove the unused constant AnnotationInvalidReason since sysctl annotations are deprecated and migrated to fields
2022-11-01 14:56:45 -07:00
Mark Rossetti
498d065cc5
Promoting WindowsHostProcessContainers to stable
...
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-11-01 14:06:25 -07:00
Han Kang
12d58d0875
update documentation with custom collector metrics
...
Change-Id: I78f2ca39bb4750e9596fba171136ffbe3ad35538
2022-11-01 13:57:10 -07:00
Han Kang
c2f67ac141
add support for parsing custom collectors from the stability framework
...
Change-Id: I1053b9f6956de571700c95b96e05c4377806a3cc
2022-11-01 13:56:57 -07:00
John Howard
916fe2f896
Rename and comment on why sharing is safe
2022-11-01 13:36:26 -07:00
Kubernetes Prow Robot
9b72f20156
Merge pull request #112373 from loktev-d/k8s_109717
...
Add unit tests for active_deadline.go
2022-11-01 12:54:44 -07:00
Davanum Srinivas
f82e98c5fc
Fix sample-apiserver E2E image build failure
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-11-01 15:41:25 -04:00
Elana Hashman
9d2d392802
Remove ehashman from sig-node roles
2022-11-01 12:16:43 -07:00
xing-yang
8128d87896
Move NodeOutOfServiceVolumeDetach to Beta
2022-11-01 18:35:32 +00:00
Kubernetes Prow Robot
1a41cb8985
Merge pull request #113021 from rphillips/fixes/112936
...
kubelet: fix nil crash in allocateRemainingFrom
2022-11-01 10:46:45 -07:00
Brian Pursley
8a1b48046d
Allow DBG=1 to be used with make release-images and make quick-release-images
2022-11-01 13:23:16 -04:00
Kubernetes Prow Robot
e6060f2780
Merge pull request #111220 from giuseppe/drop-superfluous-function
...
kubelet: remove superfluous function
2022-11-01 09:34:45 -07:00
Kubernetes Prow Robot
2ab2698e4c
Merge pull request #113490 from oscr/add-makefile-target-lint
...
Add Makefile target lint
2022-11-01 08:24:56 -07:00
Kubernetes Prow Robot
9b5fa57654
Merge pull request #113358 from mengjiao-liu/fix-StatefulSetAutoDeletePVC
...
StatefulSet: fix kube-controller-manager panic due to StatefulSetPersistentVolumeClaimRetentionPolicy being nil
2022-11-01 08:24:45 -07:00
Ryan Phillips
ddae396ce3
kubelet: fix pod log line corruption when using timestamps and long lines
2022-11-01 09:22:30 -05:00
Kubernetes Prow Robot
7a2984fddf
Merge pull request #113431 from SataQiu/kube-aggregator-20221028
...
kube-aggregator: remove redundant Scheme registration logic
2022-11-01 07:06:44 -07:00
Kubernetes Prow Robot
2d14d50b31
Merge pull request #113406 from jsafrane/fix-selinux-check-of-mounted
...
Fix SELinux check of mounted volumes
2022-11-01 04:14:45 -07:00
Kubernetes Prow Robot
22f3e64039
Merge pull request #113320 from chendave/test
...
kubeadm: simply struct of `joinOptions` by removing `joinControlPlane`
2022-11-01 02:48:45 -07:00
kerthcet
cfc53ee524
Refactor code and annotations for readability
...
Signed-off-by: kerthcet <kerthcet@gmail.com>
2022-11-01 17:44:45 +08:00
kerthcet
21e8a69a22
Use operationCode instead of string directly
...
Signed-off-by: kerthcet <kerthcet@gmail.com>
2022-11-01 17:01:22 +08:00
Shihang Zhang
af72ea5c07
graduate LegacyServiceAccountTokenNoAutoGeneration to ga
2022-10-31 22:55:21 -07:00
Tim Allclair
0574a8181d
[PSA] default warn to enforce level
2022-10-31 22:27:25 -07:00
daschott
dc2fc1045d
added backend hashing to winkernel proxier
2022-10-31 21:57:34 -07:00
Kubernetes Prow Robot
76ccb69cc1
Merge pull request #113484 from logicalhan/docs
...
update documentation for stability framework
2022-10-31 21:14:44 -07:00
Dave Chen
3ddedf00e5
kubeadm: add testcases for kubeadm reset
...
For parity with `init` and `join`, the test file only
covers some basic scenarios and is expected to be expanded
when the config file for `kubeadm reset` is ready.
Signed-off-by: Dave Chen <dave.chen@arm.com>
2022-11-01 11:34:53 +08:00
Kubernetes Prow Robot
7d9c0e0a78
Merge pull request #113411 from jsafrane/fix-selinux-context-mount
...
Fix SELinux context mount with unknown context
2022-10-31 17:00:44 -07:00
Oscar Utbult
0564fcce0f
Add Makefile target lint
2022-10-31 23:57:01 +01:00
Kubernetes Prow Robot
4c657e5014
Merge pull request #110403 from claudiubelu/unittests-3
...
unittests: Fixes unit tests for Windows (part 3)
2022-10-31 15:52:44 -07:00
Han Kang
13e7fd8ed1
update documentation for stability framework
...
Change-Id: Id3fea91aac9c6faf2c920b1a0bec721e930a99ae
2022-10-31 15:17:24 -07:00
Kubernetes Prow Robot
f9bfa378ef
Merge pull request #113424 from liggitt/simplify-go.mod
...
Simplify go.mod
2022-10-31 14:20:57 -07:00
Kubernetes Prow Robot
4811569e52
Merge pull request #113280 from oscr/fix-makefile-help
...
Fix Makefile help target
2022-10-31 14:20:45 -07:00
Stephen Heywood
168fa73b60
Promote ResourceQuota e2e test to Conformance
2022-11-01 09:20:38 +13:00
Kubernetes Prow Robot
f892ab1bd7
Merge pull request #113405 from jsafrane/reduce-log-noise-on-selinux
...
Reduce log noise on SELinux mount mismatch
2022-10-31 13:14:56 -07:00
Kubernetes Prow Robot
373a78feab
Merge pull request #113321 from jsafrane/selinux-all-plugins
...
Add SELinux mount support to all volume plugins
2022-10-31 13:14:44 -07:00
David Ashpole
f830d971b8
fix and extend apiserver tracing tests
2022-10-31 19:42:14 +00:00
Kubernetes Prow Robot
4a3bac5eae
Merge pull request #113281 from ialidzhikov/seccomp-default-fg
...
Update the doc string of the SeccompDefault feature gate
2022-10-31 11:50:56 -07:00
Kubernetes Prow Robot
62b21069d7
Merge pull request #113119 from marosset/hpc-local-account-e2e
...
Adding e2e test for running Windows hostprocess containers as members of a local usergroup
2022-10-31 11:50:45 -07:00
Jan Safranek
8dd3510032
Fix SELinux context mount with unknown context
...
Don't mount with SELinux mount option if kubelet does not know the SELinux
context, i.e. MounterArgs.SELinuxLabel is ""
2022-10-31 19:11:48 +01:00
Kubernetes Prow Robot
038da2bb13
Merge pull request #113472 from logicalhan/docs
...
update paths for documentation
2022-10-31 10:34:46 -07:00
Wojciech Tyczyński
bbcf5e3877
Fix setting resource version on deletion
2022-10-31 17:48:40 +01:00
Han Kang
fbdd02da40
update paths for documentation
...
Change-Id: I369b6972b2b6af2bab4561b1af824812ead95e0e
2022-10-31 09:20:39 -07:00
Michał Woźniak
3628532311
Extend metrics with the new labels ( #113324 )
...
* Extend job metrics
* Refactor TestMetrics to extract its checks into dedicated tests per feature
2022-10-31 08:50:45 -07:00
Kubernetes Prow Robot
4d2128b523
Merge pull request #113458 from CatherineF-dev/fix-tracing-wrapper-comment
...
Fix tracing wrapper comment
2022-10-31 06:14:44 -07:00
Jan Safranek
d37808faae
Report error on a pod startup on SELinux mismatch
...
When a volume is already mounted with an unexpected SELinux label,
kubelet must unmount it first and then mount it back with the expected one.
Report an error to user, just in case the unmount takes too long.
In therory, this error should not happen too often, because two Pods with
different SELinux label will not enter Desired State of World, see
dsw.AddPodToVolume. It can happen when DSW and ASW SELinux labels only when
a volume has been deleted from DSW (= Pod was deleted) or a volume was
reconstructed after kubelet restart. In both cases, volume manager should
unmount the volume quickly.
2022-10-31 13:59:23 +01:00
Jan Safranek
805482413a
Fix SELinux check of mounted volumes
...
In PodExistsInVolume with volumeObj.seLinuxMountContext != nil we know that
the volume has been previously mounted with a given SELinuxMountContext.
Either it has been mounted by this kubelet and we know it's correct or it
was by a previous instance of kubelet and the context has been
reconstructed from the filesystem. In both cases, the actual context is
correct, regardless if the volume plugin or PV access mode supports SELinux
mounts.
2022-10-31 13:39:48 +01:00
Jan Safranek
63ab1c86e7
Add SELinux mount support to all volume plugins
...
.. that are not migrated to CSI in 1.26 *and* are based on a block device.
NFS and CephFS may use the same volume as several PVs and then mounting
with -o context won't work.
2022-10-31 13:02:51 +01:00
Marcel Zięba
2f7b4ca685
Fix APF width estimate for creating service account's token
2022-10-31 11:06:07 +00:00
Kubernetes Prow Robot
d0e86111ef
Merge pull request #112855 from fromanirh/cpumanager-metrics
...
node: metrics: cpumanager: add metrics about pinning
2022-10-31 03:12:56 -07:00