Commit Graph

131799 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
461ba83084 Merge pull request #133021 from sanposhiho/pre-flight-skip
feat: trigger PreBindPreFlight in the binding cycle
2025-07-29 04:10:01 -07:00
Kensei Nakada
ac9fad6030 feat: trigger PreFilterPreBind in the binding cycle 2025-07-29 19:01:02 +09:00
Kubernetes Prow Robot
1ce98e3c09 Merge pull request #133267 from danwinship/apiserver-proxy-flake
Fix apiserver service proxying e2e test flakiness
2025-07-28 23:18:37 -07:00
Kubernetes Prow Robot
ba76d238ad Merge pull request #133259 from ndixita/code-refactor
Adding check for nil pod resources in huge pages test
2025-07-28 23:18:30 -07:00
Kubernetes Prow Robot
1ef7677415 Merge pull request #133220 from toVersus/fix/downward-api-e2e-failure
[PodLevelResources] Add missing label to Downward API test
2025-07-28 21:06:29 -07:00
Kubernetes Prow Robot
dd4e4f1dd1 Merge pull request #133262 from BenTheElder/no-authenticated-image-pulling
remove broken test that depends on expired credential, remove hardcoded credential, add TODOs
2025-07-28 17:28:28 -07:00
Dan Winship
f9bb14fcf0 Fix apiserver service proxying e2e test flakiness
Also, fix its conformance description, which appears to have
accidentally been filled in with the description of the wrong test.
2025-07-28 19:42:04 -04:00
Benjamin Elder
8ace0fb89f remove failing test that depends on expired credential, remove credential, add TODOs
see: https://github.com/kubernetes/kubernetes/issues/130271
2025-07-28 15:43:43 -07:00
ndixita
4b698656be Returning early if podResources is nil to avoid nil pointer dereferencing
Signed-off-by: ndixita <ndixita@google.com>
2025-07-28 19:31:08 +00:00
Kubernetes Prow Robot
924b324088 Merge pull request #133243 from yuanwang04/restart-rules
ContainerRestartRules feature gate should work with probes
2025-07-28 11:42:28 -07:00
Yuan Wang
fd206a0efb Add comments for restart rules not used for unknown container status and probes 2025-07-28 17:19:07 +00:00
Kubernetes Prow Robot
a2bf45b081 Merge pull request #133213 from sanposhiho/second-trial-conor
fix: handle corner cases in the async preemption
2025-07-28 10:06:36 -07:00
Kubernetes Prow Robot
2b2ea27250 Merge pull request #132868 from rata/userns-134-error-volume-devices
KEP-127 - validation: Return an error if user namespaces are used with volumeDevices
2025-07-28 10:06:30 -07:00
Yuan Wang
4b479da4b5 Remove the feature from e2e test 2025-07-28 16:33:20 +00:00
Kubernetes Prow Robot
e2eed70a29 Merge pull request #133245 from ivanvc/update-etcd-to-3.6.4
Update etcd to 3.6.4
2025-07-28 07:54:29 -07:00
Rodrigo Campos
48f8458c41 validation: Fix user-namespaces test case name
hostPath is a supported volume since Kubernetes 1.28. Let's update it.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-07-28 16:54:08 +02:00
Rodrigo Campos
50a7a8af4d validation: Align usage of hostUsers in error messages
Other validation errors, like using hostNetwork, don't put
pod.spec.HostNetwork in the error message.

Let's remove align with that.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-07-28 16:54:08 +02:00
Rodrigo Campos
5f7e611f73 validation: Return error if hostUsers=false && volumeDevices
Now if a pod tries to use user namespaces (hostUsers: false) and a
volume device, it will see this error:
	$ kubectl apply -f pod.yaml
	...
	* spec.ephemeralContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.initContainers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false
	* spec.containers[0].volumeDevices: Forbidden: when `pod.Spec.HostUsers` is false

Note that if a pod is already created with volumeDevices and userns,
then we allow modifications to that object.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-07-28 16:54:08 +02:00
Kensei Nakada
f3466f8adc fix: flake integration test 2025-07-28 23:12:58 +09:00
Kensei Nakada
ed74d4cd52 Revert "Revert "fix: handle corner cases in the async preemption""
This reverts commit 006d7620a8.
2025-07-28 20:22:27 +09:00
Kubernetes Prow Robot
2a03dd1d5e Merge pull request #133120 from utam0k/kep-5229-metrics
KEP-5229: Add the metrics
2025-07-28 03:58:36 -07:00
Kubernetes Prow Robot
010e0a9b5b Merge pull request #132886 from macsko/send_api_calls_through_dispatcher
KEP-5229: Send API calls through dispatcher and cache
2025-07-28 03:58:28 -07:00
Ivan Valdes
e8dc272c53 Update etcd to 3.6.4 2025-07-27 21:45:02 -07:00
Yuan Wang
9c8dacb037 ContainerRestartRules feature gate should work with probes 2025-07-27 23:14:12 +00:00
Kubernetes Prow Robot
d33916baa4 Merge pull request #133226 from ivanvc/bump-etcd-to-3.6.4
Bump etcd sdk to v3.6.4
2025-07-27 00:14:27 -07:00
Kubernetes Prow Robot
7cc3faf39d Merge pull request #133225 from ivanvc/build-etcd-3.6.4
Build etcd v3.6.4 image
2025-07-25 21:46:27 -07:00
Tsubasa Nagasawa
48fd30113c [PodLevelResources] Add missing label to Downward API test 2025-07-26 07:51:58 +09:00
Ivan Valdes
57ceb56c6f Bump etcd sdk to v3.6.4 2025-07-25 14:09:41 -07:00
Ivan Valdes
b562335cb3 Build etcd v3.6.4 image 2025-07-25 13:51:25 -07:00
Kubernetes Prow Robot
a493bafd02 Merge pull request #133156 from ritazh/draadminaccess-update-flake
DRAAdminAccess: move metrics test from e2e to integration
2025-07-25 13:40:27 -07:00
Maciej Skoczeń
17d733e243 KEP-5229: Send API calls through dispatcher and cache 2025-07-25 15:35:36 +00:00
Kubernetes Prow Robot
f9ed14bf9b Merge pull request #133214 from pohly/dra-e2e-stress-test-removal
DRA E2E: remove "supports reusing resources" stress test
2025-07-25 06:40:29 -07:00
Patrick Ohly
40a90df3b3 DRA E2E: remove stress test
The test needs to schedule 256 pods at once, which only works with three
nodes (default limit is 100, but could also be lower). It's also a stress test
which flaked recently.

For now it gets removed without a replacement. A similar integration test is in
development, but too big (needs some infrastructure changes in
test/integration/dra) to add during code freeze.
2025-07-25 12:45:01 +02:00
utam0k
b956484c25 KEP-5229: Add metrics for async API dispatcher
Signed-off-by: utam0k <k0ma@utam0k.jp>
2025-07-25 19:29:14 +09:00
Kubernetes Prow Robot
b93bcbfba1 Merge pull request #133195 from nojnhuh/dra-ga-comment
Update DRA Pod spec comments
2025-07-25 00:32:35 -07:00
Kubernetes Prow Robot
6d4ca967f7 Merge pull request #132824 from roycaihw/psi-pressure-test
Extend E2E test coverage for PSI metrics under pressure
2025-07-25 00:32:27 -07:00
Kubernetes Prow Robot
1e04b170e4 Merge pull request #133203 from pacoxu/revert-133167-preemption-conor-case
Revert "fix: handle corner cases in the async preemption"
2025-07-24 22:18:26 -07:00
Kubernetes Prow Robot
e72c318f72 Merge pull request #133192 from yongruilin/golangci-lint-config
fix(golangci-lint): skip config verification when -c none is used
2025-07-24 20:14:41 -07:00
Kubernetes Prow Robot
9409af4b80 Merge pull request #133180 from ylink-lfs/chore/ptr_cast_replace
chore: replace ptr caster with unified ptr.To
2025-07-24 20:14:34 -07:00
Kubernetes Prow Robot
72f9a9260a Merge pull request #130606 from Jpsassine/dra_device_health_status
Expose DRA device health in PodStatus
2025-07-24 20:14:27 -07:00
Paco Xu
006d7620a8 Revert "fix: handle corner cases in the async preemption" 2025-07-25 10:38:34 +08:00
Kubernetes Prow Robot
b09f1bfe12 Merge pull request #132902 from haircommander/userns-metrics
KEP-127: kubelet: add metrics for userns pods
2025-07-24 19:08:41 -07:00
Kubernetes Prow Robot
fdefb8a9e6 Merge pull request #132822 from roycaihw/psi-metrics-beta
Promote PSI metrics feature to beta
2025-07-24 19:08:33 -07:00
Kubernetes Prow Robot
3fd1251165 Merge pull request #131089 from KevinTMtz/pod-level-hugepage-cgroups
[PodLevelResources] Propagate Pod level hugepage cgroup to containers
2025-07-24 19:08:26 -07:00
Kubernetes Prow Robot
2d5f58a0ed Merge pull request #133176 from liggitt/psa-host-probe-emulation
Make PSA host enforcement honor emulation version
2025-07-24 17:59:27 -07:00
Kubernetes Prow Robot
802198e2da Merge pull request #133113 from alaypatel07/resource-claim-concurrent-syncs
bump resource claim controller concurrent syncs to 50
2025-07-24 17:59:20 -07:00
Kubernetes Prow Robot
7c2cc0fa0d Merge pull request #133062 from zylxjtu/shutdown
Promote windows graceful shutdown to Beta
2025-07-24 17:59:13 -07:00
Kubernetes Prow Robot
1451dd1b08 Merge pull request #132942 from thockin/kyaml
Add KYAML support to kubectl
2025-07-24 17:59:06 -07:00
Kubernetes Prow Robot
ba9ba5f92a Merge pull request #132940 from guptaNswati/kubelet-podresources-dra-beta
KEP-3695: add kubeletPodResources feature gate to Beta
2025-07-24 17:59:00 -07:00
Eddie
727a6e6db5 Reject pod when attachment limit is exceeded (#132933)
* Reject pod when attachment limit is exceeded

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Record admission rejection

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Fix pull-kubernetes-linter-hints

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Fix AD Controller unit test failure

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Consolidate error handling logic in WaitForAttachAndMount

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Improve error context

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Update admissionRejectionReasons to include VolumeAttachmentLimitExceededReason

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Update status message

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Add TestWaitForAttachAndMountVolumeAttachLimitExceededError unit test

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Add e2e test

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Fix pull-kubernetes-linter-hints

Signed-off-by: Eddie Torres <torredil@amazon.com>

---------

Signed-off-by: Eddie Torres <torredil@amazon.com>
2025-07-24 17:58:54 -07:00