Commit Graph

27150 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
4666b8cdf6 Merge pull request #130783 from jpbetz/versioned-formats
Support emulation versioning of custom resource formats
2025-03-13 11:55:55 -07:00
Kubernetes Prow Robot
be127ae0e2 Merge pull request #130751 from Jefftree/cle-promote-beta
[KEP-4355] Promote Coordinated Leader Election to Beta
2025-03-13 11:55:47 -07:00
Joe Betz
e0011c7236 Support emulation versioning of formats
We plan to add more formats in upcoming releases.
This tracks which formats are introduced at a version.

Unrecognized formats remain ignored. That is,
if a format is not supported at the emulated version,
the format is not enforced. This differs from typical
field handling, where unsupported field values are
forbidden. This is pre-existing behavior and is
in compliance with JSON Schema's format handling.

Ratcheting of custom resources helps with the introduction
of new formats. When a cluster is upgraded to a version
of Kubernetes that supports a format already set (but not enforced)
in a custom resource definition, the format will start
being enforced against custom resources. Ratcheting will
tolerate unchanged values of custom resources, even
if the value is not valid according to the format.
2025-03-13 11:09:12 -04:00
Kubernetes Prow Robot
68899f8e6d Merge pull request #124360 from carlory/kep-3751-quota-2
Add quota support for PVC with VolumeAttributesClass
2025-03-13 07:35:48 -07:00
carlory
27706a0b54 Add quota support for PVC with VolumeAttributesClass
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-13 13:50:44 +08:00
Kubernetes Prow Robot
96dd5508f6 Merge pull request #129714 from esotsal/fix-reset-injector-because-cri-proxy-undefined
testing: Skip test if cri proxy is disabled or undefined
2025-03-12 21:19:46 -07:00
Kubernetes Prow Robot
761f5646be Merge pull request #130138 from rata/userns-enabled-by-default
features: Enable user namespaces by default
2025-03-12 20:13:48 -07:00
Kubernetes Prow Robot
7b6c56e5fb Merge pull request #130135 from saschagrunert/image-volume-beta
[KEP-4639] Graduate image volume sources to beta
2025-03-12 18:03:58 -07:00
Kubernetes Prow Robot
05bfdbc6dd Merge pull request #129950 from ffromani/alignment-error-detail-metrics
node: metrics for alignment failures
2025-03-12 18:03:46 -07:00
Kubernetes Prow Robot
2261137135 Merge pull request #122550 from danwinship/tighten-ip-validation
Tighten IP/CIDR validation
2025-03-12 15:57:46 -07:00
Kubernetes Prow Robot
d70bfc8e86 Merge pull request #130636 from serathius/watchcache-integration-test
Move setup in TestListOptions before we start API server
2025-03-12 13:35:54 -07:00
Jefftree
3b88db4f23 Promote CLE to beta 2025-03-12 19:25:30 +00:00
Kubernetes Prow Robot
21f7eaa8e2 Merge pull request #130705 from aaron-prindle/validation-gen-add-metric-and-runtime-verification-upstream
[Declarative Validation] feat: add declarative validation metrics and associated runtime verification tests
2025-03-12 11:29:54 -07:00
Kubernetes Prow Robot
6b8341fc2e Merge pull request #130544 from jsafrane/selinux-beta
selinux: Promote SELinuxChangePolicy and SELinuxMount to beta
2025-03-12 11:29:47 -07:00
Jefftree
5ba4a90fda Add LeaseCandidate v1beta1 2025-03-12 17:52:10 +00:00
Kubernetes Prow Robot
caf541857f Merge pull request #130673 from gauravkghildiyal/kep-4444-ga
Promote ServiceTrafficDistribution feature-gate to GA and update docs with latest descriptions
2025-03-12 08:23:47 -07:00
Dan Winship
692785d25b Add legacy versions of IsValidIP/IsValidCIDR
Add validation.IsValidIPForLegacyField and
validation.IsValidCIDRForLegacyField, which validate "legacy" IP/CIDR
fields correctly. Use them for all such fields (indirectly, via a
wrapper in pkg/apis/core/validation that handles the
StrictIPCIDRValidation feature gate correctly).

Change IsValidIP and IsValidCIDR to require strict parsing and
canonical form, and update the IPAddr, ServiceCIDR, and
NetworkDeviceData validation to make use of them.
2025-03-12 09:58:04 -04:00
Marek Siarkowicz
ac6790450a Move TestListOptions setup before we start API server
This PR changes the TestListOptions setup to execute compaction before
we start apiserver allowing the test work with cache snapshots from
KEP-4988 by preventing creation of snapshots for compacted revisions.

While etcd compaction removes access to old revision, with KEP-4988
those revisions will be still available in watch cache. Implementing
compaction for watch cache doesn't make sense as it would only be
used for testing, making it unreliable.

To properly test how etcd and watch cache behaves on
compacted revisions we need to compact etcd before we start apiserver.
2025-03-12 14:52:34 +01:00
Kubernetes Prow Robot
e0ab1a16ad Merge pull request #128372 from aramase/aramase/f/kep_4412_alpha_impl
KSA token for Kubelet image credential providers alpha
2025-03-12 00:39:50 -07:00
Anish Ramasekar
2090a01e0a add e2e test with the gcp-credential-provider test plugin
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-11 20:36:36 -07:00
Kubernetes Prow Robot
f13237a34e Merge pull request #130735 from Jefftree/cle-lexo-check
CLE: Remove invalid emulated version and add lexographical order test
2025-03-11 19:47:59 -07:00
Kubernetes Prow Robot
4a0566c25b Merge pull request #130575 from Jefftree/cle-e2e
Add E2E tests for CLE
2025-03-11 19:47:45 -07:00
Aaron Prindle
de904f8099 feat: add declarative validation metrics and associated runtime verification tests 2025-03-12 02:41:30 +00:00
Anish Ramasekar
d398de294d Add KubeletServiceAccountTokenForCredentialProviders feature gate
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-11 19:24:54 -05:00
Kubernetes Prow Robot
1b6e321e23 Merge pull request #129407 from serathius/streaming-proto-list-encoder
Implement streaming proto list encoder
2025-03-11 17:11:45 -07:00
Kubernetes Prow Robot
c5d4e53444 Merge pull request #130731 from Jefftree/cle-int-refactor
Fix context usage in CLE integration test
2025-03-11 15:59:52 -07:00
Jefftree
775b118a6d Remove invalid emulated version and add lexographical order test 2025-03-11 21:00:48 +00:00
Jefftree
9eef88c844 Add CLE e2e tests 2025-03-11 20:54:45 +00:00
Marek Siarkowicz
f5dd7107f7 Implement streaming proto encoding 2025-03-11 21:49:50 +01:00
Kubernetes Prow Robot
309c4c17fb Merge pull request #128499 from stlaz/ctb_betav1
ClusterTrustBundles - move to beta
2025-03-11 12:47:45 -07:00
Jefftree
b7b1e78d62 Fix context usage 2025-03-11 19:29:21 +00:00
Kubernetes Prow Robot
6bb5901e2d Merge pull request #129058 from dom4ha/nominated_cluster_event
Trigger all pods rescheduling on nominated node changes
2025-03-11 11:27:47 -07:00
Stanislav Láznička
24e8fa769b move ClusterTrustBundles featuregates to beta 2025-03-11 18:07:32 +01:00
Stanislav Láznička
0cd2976cab integration: ctb: apiserversigner test to use certbeta api 2025-03-11 18:07:27 +01:00
Stanislav Láznička
e0f536bf1f use the ClusterTrustBundles beta API 2025-03-11 18:07:24 +01:00
Kubernetes Prow Robot
07d66d9c26 Merge pull request #130574 from natasha41575/drop_proposed_resize_status
[FG:InPlacePodVerticalScaling] Drop `Proposed` resize status
2025-03-11 09:49:46 -07:00
Sascha Grunert
f9e5dd84ad Graduate image volume sources to beta
Graduate the feature to beta, by:

- Allowing `subPath`/`subPathExpr` for image volumes
- Modifying the CRI to pass down the (resolved) sub path
- Adding metrics which are outlined in the KEP

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2025-03-11 13:41:45 +01:00
Kubernetes Prow Robot
4c311c9fcf Merge pull request #130475 from serathius/watchcache-consistency
Implement consistency checking
2025-03-11 05:09:46 -07:00
Marek Siarkowicz
e4d73c56cd Implement consistency checking 2025-03-11 10:17:23 +01:00
Kubernetes Prow Robot
8f97ac7fcf Merge pull request #130530 from pacoxu/v1.33-fg-cleanup
v1.33 feature gate cleanup
2025-03-10 23:03:46 -07:00
Paco Xu
f167454371 remove feature gate AdmissionWebhookMatchConditions that was GAed in v1.30 2025-03-11 10:54:04 +08:00
Paco Xu
8195f82fe8 remove AggregatedDiscoveryEndpoint that was GAed in v1.30 2025-03-11 10:51:43 +08:00
yongruilin
989d68d757 chore: update DeclarativeValidation featuregate 2025-03-10 22:39:03 +00:00
Natasha Sarkar
8a20e90839 [FG:InPlacePodVerticalScaling] Drop 'Proposed' resize status 2025-03-10 20:46:02 +00:00
Kubernetes Prow Robot
cad46631a8 Merge pull request #130655 from BenTheElder/pr130580
Set [Feature:OffByDefault] when WithFeatureGate receives an off-by-default feature gate
2025-03-10 13:31:46 -07:00
Jordan Liggitt
628d107b61 Switch cluster trust bundle e2e tests to generic alpha feature + feature gates
This relies on WithFeatureGate adding [Feature:OffByDefault]. Without that, the
test would start to run in jobs which don't enable the feature.
2025-03-10 12:04:04 -07:00
Benjamin Elder
9828ad64da e2e framework WithFeatureGate adds [Feature:OffByDefault]
(when passed a feature that is not Default)

This allows using the regex filter to skip tests that do not work on a cluster
without optional configuration, while moving tests to use WithFeatureGate
without also setting WithFeature unless they have some additional configuration
required.

Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
2025-03-10 12:04:04 -07:00
Kubernetes Prow Robot
133d5d612e Merge pull request #130603 from AndrewSirenko/fix-vac-flake
Mark VAC recovery e2e test flaky
2025-03-10 10:27:46 -07:00
Kubernetes Prow Robot
b82260f003 Merge pull request #130391 from bart0sh/PR174-e2e_node-fix-eviction-kubetest2
e2e_node: fix ImageGCNoEviction test for kubetest2
2025-03-10 08:57:53 -07:00
dom4ha
4deb4f2b5f Trigger rescheduling on delete event also when unscheduled pod is removed 2025-03-10 15:03:50 +00:00