Commit Graph

121759 Commits

Author SHA1 Message Date
Sean Sullivan
03812ddb16 streamtranslator counter metric by status code 2024-02-27 23:21:55 +00:00
Kubernetes Prow Robot
236f1b0f6b
Merge pull request #123540 from enj/enj/i/jwt_iss
jwt: strictly support compact serialization only
2024-02-27 15:19:01 -08:00
Monis Khan
e89dddd4af
jwt: strictly support compact serialization only
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-27 17:16:08 -05:00
Kubernetes Prow Robot
b63e991b57
Merge pull request #123216 from giuseppe/runtime-handler-cri
KEP-127: require userns support from the CRI runtime before using it
2024-02-27 14:15:03 -08:00
Kubernetes Prow Robot
12771ce773
Merge pull request #122493 from mengjiao-liu/fix-cronjob-error
cronjob: fix incorrect error checking
2024-02-27 14:14:54 -08:00
Jiahui Feng
dc4c92f5a5 add support for map
to CEL mutation library.
2024-02-27 13:55:08 -08:00
Vu Dinh
4fe78a17dd
Add duplicate key and field case-sensitivity CBOR decode tests.
1. Decoding map with duplicate keys into struct or map produces error.
2. Decoding a map into a Go struct matches json field tag names case-sensitively.
3. When decoding a map into a Go struct, a case-insensitive match between a key and a json field tag
   name is treated the same as no match.

Signed-off-by: Vu Dinh <vudinh@outlook.com>
2024-02-27 16:45:52 -05:00
Ben Luddy
374e4b5686
Address review nit, use longer variable identifiers. 2024-02-27 16:12:39 -05:00
Michał Woźniak
3852d1c0c1
Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380)
* Make explicit check in CronJob if Job is successful

before setting LastSuccessfulTime

* Review remarks for the CronJob

Co-authored-by: Filip Křepinský <fkrepins@redhat.com>

---------

Co-authored-by: Filip Křepinský <fkrepins@redhat.com>
2024-02-27 13:09:43 -08:00
Kubernetes Prow Robot
1853de77b2
Merge pull request #122874 from fusida/fix-kcm-panic
fix node lifecycle controller panic when conditionType ready is nil
2024-02-27 13:09:34 -08:00
Peter Hunt
cb39dfc9de Promote ImageMaximumGCAge to beta
and set to be on by default, adapting e2e tests for it

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-02-27 15:11:45 -05:00
Kevin Hannon
f832692d98 uid is also supported in field ref for downward api 2024-02-27 12:44:42 -05:00
Lukasz Szaszkiewicz
ecaf2093f5 storage/watch_cache: rework getAllEventsSinceLocked 2024-02-27 14:26:46 +01:00
Lukasz Szaszkiewicz
d629d3fa35 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc 2024-02-27 14:26:41 +01:00
Lukasz Szaszkiewicz
f90bcf649e storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested 2024-02-27 14:26:36 +01:00
Kubernetes Prow Robot
12217672a3
Merge pull request #123358 from pacoxu/fix-cri-stats-panic
fix panic in CRI stats of windows
2024-02-27 05:14:58 -08:00
Kubernetes Prow Robot
47c92e2ab7
Merge pull request #123521 from pohly/dra-e2e-structure
dra e2e: fix stack unwinding in helper function
2024-02-27 03:14:40 -08:00
Rodrigo Campos
0e2b447269
kubelet/userns: Test new functionality with feature gate enabled
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-02-27 12:01:00 +01:00
Rodrigo Campos
658b45cd03
kublet/userns: Test new functionality with feature gate disabled
We just added some more functionality, let's make sure it works fine
with the feature gate disabled.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-02-27 12:01:00 +01:00
Rodrigo Campos
1fb1218f57
kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-02-27 12:01:00 +01:00
Giuseppe Scrivano
b2a92406ef
KEP-127: check for runtime handler userns support
block the creation of a pod that requires a user namespace, unless the
runtime handler has support for it.

If the pod requested for a user namespace, and the handler does not
support it then return an error regardless of the feature gate.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-02-27 12:01:00 +01:00
Giuseppe Scrivano
024146f705
KEP-127: the kubelet stores runtime helpers
as they are received from the ResponseStatus request to the runtime.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-02-27 11:07:35 +01:00
carlory
ea69a5ea98 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades. 2024-02-27 15:05:29 +08:00
liyuerich
c3caddf3e6 e2e_apps:stop using deprecated framework.ExpectError
Signed-off-by: liyuerich <yue.li@daocloud.io>
2024-02-27 13:46:36 +08:00
Kubernetes Prow Robot
e457683e6c
Merge pull request #123444 from pohly/test-context-expect-no-error
ktesting: several fixes and better unit testing
2024-02-26 20:05:40 -08:00
Sean Sullivan
a147693deb remote command turn on feature gates 2024-02-27 02:05:24 +00:00
Kubernetes Prow Robot
a882a2bf50
Merge pull request #123526 from cblecker/fm2
Re-add KUBE_TIMEOUT explicitly to make test
2024-02-26 16:56:54 -08:00
Christoph Blecker
0a1edf8bda
Re-add KUBE_TIMEOUT explicitly to make test 2024-02-26 15:46:38 -08:00
Kubernetes Prow Robot
0a1cb2a4a4
Merge pull request #122589 from pohly/log-contextual-beta
promote contextual logging to beta, enabled by default
2024-02-26 13:56:13 -08:00
Kubernetes Prow Robot
5d527dcf12
Merge pull request #123517 from Jefftree/cachegc
remove unused service keys from aggregated discovery
2024-02-26 12:07:06 -08:00
Kubernetes Prow Robot
18a49b6c56
Merge pull request #123393 from cblecker/fix-make
Fix makefile variable expansion for test-integration target
2024-02-26 12:06:57 -08:00
Kubernetes Prow Robot
f8fc1956db
Merge pull request #123205 from aravindhp/nlq-promote-beta
features: promote NodeLogQuery to beta
2024-02-26 12:06:48 -08:00
Kubernetes Prow Robot
c53ac4cee4
Merge pull request #123157 from jsafrane/selinux-rwx
Add SELinuxMount feature gate
2024-02-26 12:06:39 -08:00
Aleksandra Malinowska
dd1e617ba0
Scheduler first fit (#123384)
* Don't evaluate extra nodes if there's no score plugin defined

* Fix existing unit test (add no op scoring plugin)

* Add unit tests for no score plugin scenario

* address review comments

* add a test with non-filter, non-scoring extender
2024-02-26 11:07:19 -08:00
Kubernetes Prow Robot
54bcbc3c75
Merge pull request #123512 from ingvagabund/system-kube-scheduler-rbac-dra-pod-finalizers
system:kube-scheduler: extend the RBAC with pods/finalizers
2024-02-26 09:10:15 -08:00
Kubernetes Prow Robot
77a2d6bced
Merge pull request #123511 from Rajalakshmi-Girish/fix-ut-ci-flake
ktesting: ut flake fix for CI
2024-02-26 09:10:01 -08:00
Christoph Blecker
ca41a9222d
Fix makefile variable expansion for test-integration target 2024-02-26 09:01:04 -08:00
Alexander Zielenski
aefaf66d2b remove unused service keys from aggregated discovery 2024-02-26 11:56:07 -05:00
Kubernetes Prow Robot
d171e6733a
Merge pull request #123503 from aojea/ccm_ci
Ccm ci
2024-02-26 08:02:58 -08:00
Kubernetes Prow Robot
414dabed44
Merge pull request #123498 from pacoxu/ip-mode-flake-ut
fix default IPMode set in UT
2024-02-26 08:02:45 -08:00
Jan Chaloupka
0045ef5294 system:kube-scheduler: extend the RBAC with pods/finalizers
When enabling DynamicResourceAllocation the dynamicresource plugin may
error during scheduling with:
```
E0212 08:57:53.817268       1 framework.go:1323] "Plugin failed" err="podschedulingcontexts.resource.k8s.io \"pod\" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: , <nil>" plugin="DynamicResources" pod="gpu-test2/pod"
```
2024-02-26 15:42:35 +01:00
Kubernetes Prow Robot
cc5362ebc1
Merge pull request #123504 from pacoxu/metrics-server-v0.7.0
bump metrics server to v0.7.0
2024-02-26 05:55:33 -08:00
Rajalakshmi-Girish1
fd5019a546 ktesting: ut flake fix for CI 2024-02-26 07:26:20 -05:00
Gunju Kim
a24f2c1192
Validate restartable init container state transition
This allows the state of restartable init containers to be transitioned
from terminated to non-terminated even for pods with RestartPolicyNever
or RestartPolicyOnFailure.
2024-02-26 20:47:40 +09:00
Kubernetes Prow Robot
98bd90fbe2
Merge pull request #114672 from pohly/log-text-split-streams
log: split streams also for text output
2024-02-26 01:44:58 -08:00
Paco Xu
c99996efab bump metrics server to v0.7.0 2024-02-26 17:26:18 +08:00
Antonio Ojea
0ab006b8a1 node-controller reconcile node labels on each update
instead of waiting for the periodic loop of the node-controller to
go through all the nodes, use the sync logic to reconcile the node
labels each time that the node has changed after it has been
initialized.

This has the benefit that changes by external entities on this labels
are quickly reconciled.

Change-Id: I45cfc1e3f0b9eefdfdd67267229420d76132ab87
2024-02-26 09:01:21 +00:00
Antonio Ojea
03bd3e25b1 [cloud-provider] require providerID to initialize node
The node controller has two reconcilations loops:

1. workqueue receiving events from watchers, to implement
the node initialization

2. periodic loop to reconcile cloud-provider addresses and
node objects, since there is no watch for the cloud-provider
addresses. However, this loop can take O(xx) mins on large
clusters.

Before the external cloud providers were enabled by default,
the kubelet was in charge of setting the corresponding
providerID and zone and region labels during the node object
creation.

Once this logic was moved to the external cloud providers,
there are cases that the node controller may fail to add the
providerID value on the node object and this is never reconciled.
The problem is that there are many controllers and projects that
depend on this field to be set.

Checking at the code it is not possible to not have a ProviderID
in any cloud-provider, since it is always built from the provider name
and the instance. ProviderID is also inmutable once set, so we make
ProviderID a requirement for node initialization.

To avoid any possible problems, we rollout this change under a feature
gate in deprecated state, so cloud providers can opt-out to the new
behavior.

Change-Id: Ic5d9c23b6a286b12c9721d4a378485a8b81212d1

Change-Id: Iac8c7e7e47a3247553806ed7128b273bbef0a30b
2024-02-26 09:01:21 +00:00
Antonio Ojea
099f26296b integration test for cloud provider
very simple tests to check that the node controllers removes the taint.

Test will be used later for add more coverage without having to depend
on e2e tests for validating complex scenarios and combinations of flags
and controllers.

Change-Id: I55ce01488352cce9d673585e7959678c2bfb5924
2024-02-26 09:01:21 +00:00
Antonio Ojea
ef83ec2753 don't use leader elect on ccm integration tests
Change-Id: Ic1d0ff73d7913f23ed577a121b0045a1c33b9e78
2024-02-26 09:01:21 +00:00