Commit Graph

126580 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
50362ac7d0 Promote StatefulSetAutoDeletePVC to stable for 1.32. 2024-11-07 09:43:49 -08:00
Kubernetes Prow Robot
9a2a7537f0
Merge pull request #128580 from jpbetz/bump-kube-openapi
Bump kube-openapi to latest
2024-11-05 21:45:41 +00:00
Kubernetes Prow Robot
08391b3d27
Merge pull request #123549 from carlory/kep-3751-finalizer
A new controller adds/removes finalizer to VAC for protection
2024-11-05 21:45:30 +00:00
Kubernetes Prow Robot
175a5b9c46
Merge pull request #128581 from stlaz/ctb_e2e_fix
e2e: ctb: run the tests as Serial for now
2024-11-05 19:16:07 +00:00
Kubernetes Prow Robot
f0ff870871
Merge pull request #128462 from benluddy/cbor-direct-custom-marshalers
KEP-4222: Reject custom marshalers from direct CBOR Marshal and Unmarshal.
2024-11-05 19:15:59 +00:00
Kubernetes Prow Robot
19d6337d59
Merge pull request #128415 from serathius/watchcache-btree-2
Use btree for watch cache storage to serve LIST more efficiently
2024-11-05 19:15:51 +00:00
Kubernetes Prow Robot
85d6b0f0b2
Merge pull request #127832 from skitt/securejoin
kubelet: use new securejoin API
2024-11-05 19:15:40 +00:00
Kubernetes Prow Robot
e57618970e
Merge pull request #126870 from AnishShah/outofcpu-fix
Ensure mirror pods are created as soon as node is registered
2024-11-05 19:15:29 +00:00
Kubernetes Prow Robot
2d6c8a129d
Merge pull request #127134 from jpbetz/mutating-admission
KEP-3962: MutatingAdmissionPolicy Alpha
2024-11-05 17:31:38 +00:00
Kubernetes Prow Robot
602c70b65d
Merge pull request #126533 from ah8ad3/kubectl-explain-wrap
Realign line breaks in kubectl explain wrap method
2024-11-05 17:31:29 +00:00
Kubernetes Prow Robot
3140807126
Merge pull request #128574 from dims/drop-remnants-as-we-switched-hcsshim-
Drop remnants in hack/unwanted-dependencies.json as we switched hcsshim->hnslib
2024-11-05 16:19:37 +00:00
Kubernetes Prow Robot
f56db61db5
Merge pull request #126862 from carlory/HPAContainerMetrics
Remove generally available feature gate HPAContainerMetrics
2024-11-05 16:19:29 +00:00
Stanislav Láznička
7b3a9db089
e2e: ctb: run the tests as Serial for now 2024-11-05 16:59:08 +01:00
Joe Betz
bedfcc9331 Add gopkg.in/yaml.v2 to hack/unwanted-dependencies.json 2024-11-05 10:41:29 -05:00
Marek Siarkowicz
5ea427ebb5 Use btree for watch cache storage to serve LIST more efficiently
Can be disabled via BtreeWatchCache feature flag.
2024-11-05 16:27:57 +01:00
Joe Betz
f2157ff73e hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d763339b258e 2024-11-05 10:18:57 -05:00
Kubernetes Prow Robot
9bbb46d05f
Merge pull request #128566 from macsko/run_scheduler_perf_with_queueinghints_enabled_disabled
Run scheduler_perf with QueueingHints both enabled and disabled
2024-11-05 14:53:29 +00:00
Davanum Srinivas
054f0f7e96
Drop remnants as we switched hcsshim->hnslib
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-11-05 08:22:31 -05:00
Stephen Kitt
16817e8f4f
kubelet: use new securejoin API
Using securejoin.SecureJoin() ensures that paths are bound within a
given root, but it doesn't protect from changes happening between the
construction of the path and its use. securejoin 0.3 introduces a new
Linux-specific API which avoids this by making rooted open operations
explicit; this migrates kubelet's log retrieval to use that.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-11-05 13:58:29 +01:00
Kubernetes Prow Robot
2bb886ce2a
Merge pull request #128482 from sanposhiho/scheduler-perf-ff
fix: register QHint metrics only when available
2024-11-05 12:15:30 +00:00
Kubernetes Prow Robot
033b275d10
Merge pull request #128352 from omerap12/fix-empty-remote-port
port-forward: fixed error handling for empty remote port
2024-11-05 11:11:29 +00:00
Kubernetes Prow Robot
c69f150008
Merge pull request #127277 from pohly/dra-structured-performance
kube-scheduler: enhance performance for DRA structured parameters
2024-11-05 10:05:29 +00:00
Kensei Nakada
0bf95100f1 fix: register QHint metrics only when available 2024-11-05 18:52:27 +09:00
Maciej Skoczeń
e44041ee47 Run scheduler_perf with QueueingHints both enabled and disabled 2024-11-05 09:13:03 +00:00
Anish Shah
dcafd93b68 kubelet: try registering mirror pods as soon as node is registered.
Mirror pods for static pods may not be created immediately during node startup
because either the node is not registered or node informer is not synced.
They will be created eventually when static pods are resynced (every 1-1.5 minutes).

However, during this delay of 1-1.5 mins, kube-scheduler might overcommit resources
to the node and eventually cause kubelet to reject pods with
OutOfCPU/OutOfMemory/OutOfPods error.

To ensure kube-scheduler is aware of static pod resource usage faster,
mirror pods are created as soon as the node registers.
2024-11-05 00:56:21 -08:00
Patrick Ohly
7863d9a381 DRA scheduler: refactor CEL compilation cache
A better place is the cel package because a) the name can become shorter
and b) it is tightly coupled with the compiler there.

Moving the compilation into the cache simplifies the callers.
2024-11-05 08:34:42 +01:00
Kubernetes Prow Robot
bc79d3ba87
Merge pull request #128396 from ritazh/deprecate-EnforceMountableSecretsAnnotation
deprecate EnforceMountableSecretsAnnotation in 1.32
2024-11-05 06:07:40 +00:00
lauralorenz
4965a7a8a0
KEP-4603: Refactor various hardcoded backoffs into separate constants (#128369)
* Refactor various hardcoded backoffs into separate constants

Signed-off-by: Laura Lorenz <lauralorenz@google.com>

* Fix comment formatting

Signed-off-by: Laura Lorenz <lauralorenz@google.com>

---------

Signed-off-by: Laura Lorenz <lauralorenz@google.com>
2024-11-05 06:07:28 +00:00
Kubernetes Prow Robot
e5a31e8bbc
Merge pull request #128552 from aojea/package_kubernete_test
fix package name
2024-11-05 04:45:28 +00:00
Joe Betz
0dc08eded9 Reorganize and expand unit test coverage
Also apply reviewer feedback
2024-11-04 21:41:33 -05:00
Joe Betz
0dfbc85cd9 Rename dispatcher Run to Start to match naming conventions 2024-11-04 21:40:54 -05:00
Joe Betz
0cb90973b0 Add authz test for deny when relevant fields are not changed 2024-11-04 21:40:54 -05:00
Joe Betz
1031e07e83 Fix comment in mutating webhook dispatcher 2024-11-04 21:40:54 -05:00
Joe Betz
1ad6fd7a0f Improve error messaging for validating admission policy authz 2024-11-04 21:40:54 -05:00
Joe Betz
c0f9c81338 Add MutatingAdmissionPolicy to samples 2024-11-04 21:40:54 -05:00
Joe Betz
700e3b5664 Update OpenAPI and fix openAPI tests to handle unexported jsonreferences
Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>
2024-11-04 21:40:54 -05:00
Joe Betz
a0f419fe56 Add integration tests
Co-authored-by: cici37 <cicih@google.com>
Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>
2024-11-04 21:40:54 -05:00
Joe Betz
712cc20996 Add jsonpatch.escapeKey CEL function 2024-11-04 21:40:54 -05:00
Joe Betz
25e11cd1c1 Add MutatingAdmissionPolicy plugin to admission chain
This expands the generic plugin support to both validating and mutating policies.  It also adds the
mutating policy admission plugin using the generics plugin support.

This also implements both ApplyConfiguration and JSONPatch support.

Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>
2024-11-04 21:40:54 -05:00
Joe Betz
081353bf8a Add mutation support into CompositedCompiler and reorganize for clarity 2024-11-04 21:40:54 -05:00
Joe Betz
fe3a7f5291 generate code 2024-11-04 21:40:47 -05:00
Joe Betz
3a1733f302 Add MutatingAdmissionPolicy API
This is closely aligned with ValidatingAdmissionPolicy
except that instead of validations that can fail with
messages, there are mutations, which can be defined
either with as an ApplyConfiguration or JSONPatch.

Co-authored-by: cici37 <cicih@google.com>
2024-11-04 21:40:38 -05:00
Kubernetes Prow Robot
ad9dad07a8
Merge pull request #127874 from AnishShah/image-gc-eviction
Cleanup unused images or containers first when eviction manager detects ContainerFsInodesFree signal
2024-11-05 02:39:28 +00:00
Kubernetes Prow Robot
f64eeb523d
Merge pull request #128096 from bart0sh/PR161-e2e_node-consolidate-NFSServer-APIs
e2e_node: consolidated NFSServer APIs.
2024-11-05 00:33:35 +00:00
Kubernetes Prow Robot
4932adf80d
Merge pull request #125296 from jsturtevant/windows-numa-support
Support CPU and Topology manager on Windows
2024-11-05 00:33:28 +00:00
Antonio Ojea
3424e7df46 fix package name 2024-11-04 23:58:59 +00:00
Kubernetes Prow Robot
19d56296aa
Merge pull request #128547 from aojea/rest_watch
rest client watch: use same name for package as folder
2024-11-04 23:15:51 +00:00
Kubernetes Prow Robot
74209418c4
Merge pull request #128514 from hoskeri/shop-local-proxy-local
e2e_node: Pass e2eCriProxy instead of updating global.
2024-11-04 23:15:43 +00:00
Kubernetes Prow Robot
5572688cef
Merge pull request #128342 from gnufied/recovery-expansion-beta
Move RecoverVolumeExpansionFailure feature to beta
2024-11-04 23:15:36 +00:00
Kubernetes Prow Robot
a2b19b3edb
Merge pull request #127910 from leonzz/leonzz-tmp
fix node start time inconsistency in kubelet
2024-11-04 23:15:29 +00:00