Commit Graph

111741 Commits

Author SHA1 Message Date
Oscar Utbult
421f142ffc Update shellcheck version (0.7.1 -> 0.7.2) and fix findings 2022-11-01 23:10:44 +01:00
Chris Henzie
2d0afbc054 scheduler: integration test for ReadWriteOncePod alpha
Tests scheduler enforcement of the ReadWriteOncePod PVC access mode.

- Creates a pod using a PVC with ReadWriteOncePod
- Creates a second pod using the same PVC
- Observes the second pod fails to schedule because PVC is in-use
- Deletes the first pod
- Observes the second pod successfully schedules
2022-11-01 15:08:01 -07:00
Kubernetes Prow Robot
2452a95bd4
Merge pull request #112796 from SataQiu/clean-kubelet-20220930
kubelet: remove the unused constant AnnotationInvalidReason since sysctl annotations are deprecated and migrated to fields
2022-11-01 14:56:45 -07:00
Mark Rossetti
498d065cc5
Promoting WindowsHostProcessContainers to stable
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-11-01 14:06:25 -07:00
Han Kang
12d58d0875 update documentation with custom collector metrics
Change-Id: I78f2ca39bb4750e9596fba171136ffbe3ad35538
2022-11-01 13:57:10 -07:00
Han Kang
c2f67ac141 add support for parsing custom collectors from the stability framework
Change-Id: I1053b9f6956de571700c95b96e05c4377806a3cc
2022-11-01 13:56:57 -07:00
John Howard
916fe2f896 Rename and comment on why sharing is safe 2022-11-01 13:36:26 -07:00
Kubernetes Prow Robot
9b72f20156
Merge pull request #112373 from loktev-d/k8s_109717
Add unit tests for active_deadline.go
2022-11-01 12:54:44 -07:00
Davanum Srinivas
f82e98c5fc
Fix sample-apiserver E2E image build failure
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-11-01 15:41:25 -04:00
Elana Hashman
9d2d392802
Remove ehashman from sig-node roles 2022-11-01 12:16:43 -07:00
xing-yang
8128d87896 Move NodeOutOfServiceVolumeDetach to Beta 2022-11-01 18:35:32 +00:00
Kubernetes Prow Robot
1a41cb8985
Merge pull request #113021 from rphillips/fixes/112936
kubelet: fix nil crash in allocateRemainingFrom
2022-11-01 10:46:45 -07:00
Brian Pursley
8a1b48046d Allow DBG=1 to be used with make release-images and make quick-release-images 2022-11-01 13:23:16 -04:00
Kubernetes Prow Robot
e6060f2780
Merge pull request #111220 from giuseppe/drop-superfluous-function
kubelet: remove superfluous function
2022-11-01 09:34:45 -07:00
Kubernetes Prow Robot
2ab2698e4c
Merge pull request #113490 from oscr/add-makefile-target-lint
Add Makefile target lint
2022-11-01 08:24:56 -07:00
Kubernetes Prow Robot
9b5fa57654
Merge pull request #113358 from mengjiao-liu/fix-StatefulSetAutoDeletePVC
StatefulSet: fix kube-controller-manager panic due to StatefulSetPersistentVolumeClaimRetentionPolicy being nil
2022-11-01 08:24:45 -07:00
Ryan Phillips
ddae396ce3 kubelet: fix pod log line corruption when using timestamps and long lines 2022-11-01 09:22:30 -05:00
Kubernetes Prow Robot
7a2984fddf
Merge pull request #113431 from SataQiu/kube-aggregator-20221028
kube-aggregator: remove redundant Scheme registration logic
2022-11-01 07:06:44 -07:00
Kubernetes Prow Robot
2d14d50b31
Merge pull request #113406 from jsafrane/fix-selinux-check-of-mounted
Fix SELinux check of mounted volumes
2022-11-01 04:14:45 -07:00
Kubernetes Prow Robot
22f3e64039
Merge pull request #113320 from chendave/test
kubeadm: simply struct of `joinOptions` by removing `joinControlPlane`
2022-11-01 02:48:45 -07:00
kerthcet
cfc53ee524 Refactor code and annotations for readability
Signed-off-by: kerthcet <kerthcet@gmail.com>
2022-11-01 17:44:45 +08:00
kerthcet
21e8a69a22 Use operationCode instead of string directly
Signed-off-by: kerthcet <kerthcet@gmail.com>
2022-11-01 17:01:22 +08:00
Shihang Zhang
af72ea5c07 graduate LegacyServiceAccountTokenNoAutoGeneration to ga 2022-10-31 22:55:21 -07:00
Tim Allclair
0574a8181d [PSA] default warn to enforce level 2022-10-31 22:27:25 -07:00
daschott
dc2fc1045d added backend hashing to winkernel proxier 2022-10-31 21:57:34 -07:00
Kubernetes Prow Robot
76ccb69cc1
Merge pull request #113484 from logicalhan/docs
update documentation for stability framework
2022-10-31 21:14:44 -07:00
Dave Chen
3ddedf00e5 kubeadm: add testcases for kubeadm reset
For parity with `init` and `join`, the test file only
covers some basic scenarios and is expected to be expanded
when the config file for `kubeadm reset` is ready.

Signed-off-by: Dave Chen <dave.chen@arm.com>
2022-11-01 11:34:53 +08:00
Kubernetes Prow Robot
7d9c0e0a78
Merge pull request #113411 from jsafrane/fix-selinux-context-mount
Fix SELinux context mount with unknown context
2022-10-31 17:00:44 -07:00
Oscar Utbult
0564fcce0f Add Makefile target lint 2022-10-31 23:57:01 +01:00
Kubernetes Prow Robot
4c657e5014
Merge pull request #110403 from claudiubelu/unittests-3
unittests: Fixes unit tests for Windows (part 3)
2022-10-31 15:52:44 -07:00
Han Kang
13e7fd8ed1 update documentation for stability framework
Change-Id: Id3fea91aac9c6faf2c920b1a0bec721e930a99ae
2022-10-31 15:17:24 -07:00
Kubernetes Prow Robot
f9bfa378ef
Merge pull request #113424 from liggitt/simplify-go.mod
Simplify go.mod
2022-10-31 14:20:57 -07:00
Kubernetes Prow Robot
4811569e52
Merge pull request #113280 from oscr/fix-makefile-help
Fix Makefile help target
2022-10-31 14:20:45 -07:00
Stephen Heywood
168fa73b60 Promote ResourceQuota e2e test to Conformance 2022-11-01 09:20:38 +13:00
Kubernetes Prow Robot
f892ab1bd7
Merge pull request #113405 from jsafrane/reduce-log-noise-on-selinux
Reduce log noise on SELinux mount mismatch
2022-10-31 13:14:56 -07:00
Kubernetes Prow Robot
373a78feab
Merge pull request #113321 from jsafrane/selinux-all-plugins
Add SELinux mount support to all volume plugins
2022-10-31 13:14:44 -07:00
David Ashpole
f830d971b8
fix and extend apiserver tracing tests 2022-10-31 19:42:14 +00:00
Kubernetes Prow Robot
4a3bac5eae
Merge pull request #113281 from ialidzhikov/seccomp-default-fg
Update the doc string of the SeccompDefault feature gate
2022-10-31 11:50:56 -07:00
Kubernetes Prow Robot
62b21069d7
Merge pull request #113119 from marosset/hpc-local-account-e2e
Adding e2e test for running Windows hostprocess containers as members of a local usergroup
2022-10-31 11:50:45 -07:00
Jan Safranek
8dd3510032 Fix SELinux context mount with unknown context
Don't mount with SELinux mount option if kubelet does not know the SELinux
context, i.e. MounterArgs.SELinuxLabel is ""
2022-10-31 19:11:48 +01:00
Kubernetes Prow Robot
038da2bb13
Merge pull request #113472 from logicalhan/docs
update paths for documentation
2022-10-31 10:34:46 -07:00
Wojciech Tyczyński
bbcf5e3877 Fix setting resource version on deletion 2022-10-31 17:48:40 +01:00
Han Kang
fbdd02da40 update paths for documentation
Change-Id: I369b6972b2b6af2bab4561b1af824812ead95e0e
2022-10-31 09:20:39 -07:00
Michał Woźniak
3628532311
Extend metrics with the new labels (#113324)
* Extend job metrics

* Refactor TestMetrics to extract its checks into dedicated tests per feature
2022-10-31 08:50:45 -07:00
Kubernetes Prow Robot
4d2128b523
Merge pull request #113458 from CatherineF-dev/fix-tracing-wrapper-comment
Fix tracing wrapper comment
2022-10-31 06:14:44 -07:00
Jan Safranek
d37808faae Report error on a pod startup on SELinux mismatch
When a volume is already mounted with an unexpected SELinux label,
kubelet must unmount it first and then mount it back with the expected one.
Report an error to user, just in case the unmount takes too long.

In therory, this error should not happen too often, because two Pods with
different SELinux label will not enter Desired State of World, see
dsw.AddPodToVolume. It can happen when DSW and ASW SELinux labels only when
a volume has been deleted from DSW (= Pod was deleted) or a volume was
reconstructed after kubelet restart. In both cases, volume manager should
unmount the volume quickly.
2022-10-31 13:59:23 +01:00
Jan Safranek
805482413a Fix SELinux check of mounted volumes
In PodExistsInVolume with volumeObj.seLinuxMountContext != nil we know that
the volume has been previously mounted with a given SELinuxMountContext.

Either it has been mounted by this kubelet and we know it's correct or it
was by a previous instance of kubelet and the context has been
reconstructed from the filesystem. In both cases, the actual context is
correct, regardless if the volume plugin or PV access mode supports SELinux
mounts.
2022-10-31 13:39:48 +01:00
Jan Safranek
63ab1c86e7 Add SELinux mount support to all volume plugins
.. that are not migrated to CSI in 1.26 *and* are based on a block device.
NFS and CephFS may use the same volume as several PVs and then mounting
with -o context won't work.
2022-10-31 13:02:51 +01:00
Marcel Zięba
2f7b4ca685 Fix APF width estimate for creating service account's token 2022-10-31 11:06:07 +00:00
Kubernetes Prow Robot
d0e86111ef
Merge pull request #112855 from fromanirh/cpumanager-metrics
node: metrics: cpumanager: add metrics about pinning
2022-10-31 03:12:56 -07:00