Commit Graph

125062 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
9f01cd7b28
Merge pull request #115834 from stlaz/remote-uid
RequestHeader authentication: add UID to recognized request headers
2024-09-05 14:53:37 +01:00
Gunju Kim
4363a8453c
Restart the init container to not be stuck in created state
The main sync loop should have created and started the container in one
step. If the init container is in the 'created' state, it's likely that
the container runtime failed to start it. To prevent the container from
getting stuck in the 'created' state, restart it.
2024-09-05 22:37:45 +09:00
Kensei Nakada
6d357d2476 fix: discard a pod at Pop() when the pod is being scheduled 2024-09-05 22:30:43 +09:00
Sascha Grunert
5f9a6d3e57
Remove socat and ebtables from kubeadm preflight checks
Follow-up on https://github.com/kubernetes/release/pull/3722

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-09-05 15:14:49 +02:00
Stanislav Láznička
3a4d9eccf4 integration: add a test for KAS remote UID headers 2024-09-05 14:34:15 +02:00
Stanislav Láznička
2ac7639016 integration: add a test where UID is not passed in Request Headers 2024-09-05 14:34:14 +02:00
Stanislav Láznička
26902de531 delegate authn: don't default the ReqHeaders UID header 2024-09-05 14:32:55 +02:00
Stanislav Láznička
dcc6cf9280 test:integration: add aggregated API test for RequestHeader UID 2024-09-05 14:32:54 +02:00
Stanislav Láznička
2cc0370169 client-go: add the UID to the auth-proxy roundtripper 2024-09-05 14:28:31 +02:00
Stanislav Láznička
0409ba7ff1 cluster trust CM: wire in the new RequestHeader UID config 2024-09-05 14:28:31 +02:00
Stanislav Láznička
7fabd06c2b requestheaders: add a "requestheader-uid-headers" flag and wire it up 2024-09-05 14:28:31 +02:00
Kubernetes Prow Robot
3b86da0c0c
Merge pull request #127136 from liangyuanpeng/agnhost_2.53
Bump version of agnhost to 2.53 used in e2e tests.
2024-09-05 12:16:07 +01:00
Kubernetes Prow Robot
3ac8fc04e1
Merge pull request #126834 from carlory/fix-125924-1
DRA: rename pkg/cm/dra/plugin files
2024-09-05 12:15:58 +01:00
Antonio Ojea
9ca4f946f3 remove unused images cuda-vector-add 2024-09-05 10:22:06 +00:00
tozastation
0c9828e7f0 add: integration test for NodeAffinity plugin
Signed-off-by: tozastation <tozastation@gmail.com>
2024-09-05 18:33:23 +09:00
Kubernetes Prow Robot
fbaeab34f9
Merge pull request #127090 from nayihz/add_test_interpodaffinity
add integration test for interpodaffinity in requeueing scenarios
2024-09-05 09:05:19 +01:00
nayihz
ffe6f0867a add integration test for interpodaffinity in requeueing scenarios 2024-09-05 14:55:31 +08:00
Kubernetes Prow Robot
b83ec12c43
Merge pull request #126847 from aroradaman/conntrack-netlink
Remove conntrack binary dependency from kube-proxy
2024-09-05 07:03:51 +01:00
Kubernetes Prow Robot
a105f3683c
Merge pull request #126810 from liangyuanpeng/testgrid_podhostips
Do not serial for tests of Pod Host IPs.
2024-09-05 07:03:44 +01:00
Lan Liang
10a39e2c22 Bump version of agnhost to 2.53 used in e2e tests.
Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-09-05 04:59:38 +00:00
Kensei Nakada
9743356980 chore: initialize metric recorder 2024-09-05 12:16:53 +09:00
Kensei Nakada
46eedeb121 chore: use a real logger in tests 2024-09-05 12:13:05 +09:00
Kensei Nakada
0b71f256a8 fix(scheduler): fix a possible memory leak for QueueingHint 2024-09-05 12:13:05 +09:00
carlory
d5d5bf9f59 Remove generally available feature gate NodeOutOfServiceVolumeDetach 2024-09-05 10:33:16 +08:00
carlory
c2a3009018 Remove generally available feature gate MinDomainsInPodTopologySpread 2024-09-05 10:29:41 +08:00
Abhijit Hoskeri
c7e4e831dd node self-register continue if CREATE is 403.
tryRegisterWithAPIServer issues node create requests
regardless of whether the Node already exists.

If there's an admission policy forbidding the creation
of new nodes, the policy would return 403 even if the
Node actually exists.

This change makes Kubelet proceed to attempt to GET
the node in case the Create returns 403.

The feature `KubeletRegistrationGetOnExistsOnly`
restores the previous behavior.
2024-09-05 01:22:44 +00:00
Kubernetes Prow Robot
bce499c136
Merge pull request #127131 from liggitt/guard-recursive-deps
Add guard for dependencies recursively depending on kubernetes or staging modules
2024-09-05 01:11:16 +01:00
Kubernetes Prow Robot
fe25e97403
Merge pull request #127116 from ameukam/update-runc-1.1.14
Update Runc to 1.1.14
2024-09-05 01:11:10 +01:00
Keerthan Reddy Mala
0e4648daf2 Do not bind webhook port if webhooks are not present 2024-09-04 16:56:26 -07:00
Kubernetes Prow Robot
8119e57c07
Merge pull request #126791 from Jefftree/feature-gate-port
chore: port all non deprecated, non apiserver/controller-manager referenced features to versioned
2024-09-04 22:25:56 +01:00
Jordan Liggitt
83f2b390b7
Add guard for dependencies recursively depending on kubernetes or staging modules 2024-09-04 16:58:04 -04:00
Arnaud Meukam
f810340183
Update Runc to 1.1.14
Changelog: https://github.com/opencontainers/runc/releases/tag/v1.1.14
2024-09-04 22:22:46 +02:00
Kubernetes Prow Robot
48d6d55a47
Merge pull request #127121 from mayooot/fix/typo-resources-
fix(typo): correct 'reources' to 'resources'
2024-09-04 21:04:43 +01:00
Kubernetes Prow Robot
e35ad25926
Merge pull request #127078 from tenzen-y/job-integration-retry-polling-job-until-timeout
JobInterationTest: Retry polling even if the client fails to obtain Jobs at once
2024-09-04 21:04:34 +01:00
Kubernetes Prow Robot
1942134644
Merge pull request #127119 from Jefftree/compat-version/cleanup-apiserver-example
Remove example feature gate from pkg/apiserver/kube_features.go
2024-09-04 19:56:25 +01:00
Kubernetes Prow Robot
05df9f4675
Merge pull request #127052 from sanposhiho/add-inflight-event-metric
feat(scheduler): support inflight_events metric
2024-09-04 19:56:19 +01:00
Daman Arora
c34b20fa63 proxy/conntrack: use proxier ip family for conntrack cleanup
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2024-09-04 22:56:03 +05:30
Kubernetes Prow Robot
cc27d21ad7
Merge pull request #127117 from robert-cronin/fix/traffic-distribution-comment
Fix traffic distribution comment to reflect graduated status in v1.31
2024-09-04 18:21:00 +01:00
Kubernetes Prow Robot
f28691d069
Merge pull request #127062 from eminwux/fix-kcm-flags-doc
Clarify KCM --service-account-private-key-file flag documentation and improve legacy controller warning message.
2024-09-04 18:20:54 +01:00
Jefftree
e1893bf44e fix feature gate version introduced for StatefulSetAutoDeletePVC 2024-09-04 17:00:42 +00:00
Daman Arora
a6b4aa7005 proxy/conntrack: consolidate flow cleanup
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2024-09-04 21:55:22 +05:30
Daman Arora
b0f823e6cc remove the conntrack binary dependency
kube-proxy needs to delete stale conntrack entries for UDP services to
avoid blackholing traffic. Instead of using the conntrack binary it
can use netlink calls directly, reducing the containers images size and
the security surface.

Signed-off-by: Daman Arora <aroradaman@gmail.com>
Co-authored-by: Antonio Ojea <aojea@google.com>
2024-09-04 21:48:34 +05:30
Harry Li
9bd3826bf1 fix(typo): correct 'reources' to 'resources' 2024-09-05 00:01:28 +08:00
Kubernetes Prow Robot
7df5940bf9
Merge pull request #126500 from liangyuanpeng/bump_etcd_3515
Bump dependency: etcd to 3.5.15.
2024-09-04 16:30:53 +01:00
Emiliano Spinella
29f23af012
Clarify KCM --service-account-private-key-file flag documentation and remove legacy token controller warning message. 2024-09-04 17:06:07 +02:00
Jefftree
79deb21ac1 Remove example feature gate from pkg/apiserver/kube_features.go 2024-09-04 14:50:41 +00:00
Jefftree
e7bfd4b6b2 Rename stable to GA 2024-09-04 14:40:12 +00:00
Jefftree
92c36f59b1 fix feature gate version introduced 2024-09-04 14:40:12 +00:00
Jefftree
11bbc0efb9 update discrepency betwen kube_features and website 2024-09-04 14:30:15 +00:00
Jefftree
2954dbbe26 fix feature gate version introduced for MatchLabelKeeysInPodAffinity 2024-09-04 14:30:15 +00:00