Sascha Grunert
51199deaa0
Decouple kubelet/cri/remote
package from kubelet/metrics
...
Importing the `k8s.io/kubernetes/pkg/kubelet/metrics` package in the
remote runtime implementation makes it harder to separate the
functionalities at some later point in time. We now decouple both
packages by extending the CRI API services to allow a callback on
`GetContainerEvents`. This callback can be used to do additional work if
the connection got established, because `GetContainerEvents` will go
into blocking mode after that.
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-03-07 11:46:06 +01:00
Kubernetes Prow Robot
2ec63e0d28
Merge pull request #123482 from sanposhiho/hpa-containerresource-graduation
...
graduate HPAContainerMetrics to stable
2024-03-06 17:37:36 -08:00
Kubernetes Prow Robot
c726b2b3a3
Merge pull request #123431 from aramase/aramase/f/kep_3331_multiple_jwt_authenticator
...
Support multiple JWT authenticators with structured authn config
2024-03-06 17:37:29 -08:00
Kubernetes Prow Robot
05cb0a55c8
Merge pull request #123696 from aramase/aramase/f/kep_3331_v1beta1_api
...
Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
2024-03-06 15:35:28 -08:00
Kubernetes Prow Robot
bd25605619
Merge pull request #123435 from tallclair/apparmor-ga
...
AppArmor fields API
2024-03-06 15:35:14 -08:00
Anish Ramasekar
39e1c9108c
Support multiple JWT authenticators with structured authn config
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-06 14:42:32 -08:00
Kubernetes Prow Robot
e0621034be
Merge pull request #123750 from cpanato/update-go
...
[go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
2024-03-06 12:35:50 -08:00
Tim Allclair
2d86cbf261
Separate feature-gate for AppArmor fields
2024-03-06 10:46:32 -08:00
Tim Allclair
22068e0cc7
Validate annotation & field match in PodTemplate
2024-03-06 10:46:31 -08:00
Tim Allclair
06caf32ecd
Validate localhost profile max length
2024-03-06 10:46:31 -08:00
Tim Allclair
0eb5f52d06
Rename AppArmor annotation constants with Deprecated
2024-03-06 10:46:31 -08:00
cpanato
70221e8405
[go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
...
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-06 13:09:17 -05:00
Kubernetes Prow Robot
5f2c9e73c0
Merge pull request #123759 from liggitt/update-workspace
...
Avoid clearing go version in go.work update script
2024-03-06 10:07:23 -08:00
Kubernetes Prow Robot
a5f5f44157
Merge pull request #123758 from liggitt/protobump
...
[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
2024-03-06 07:49:01 -08:00
Jordan Liggitt
6f2842c08c
Avoid clearing go version in go.work update script
2024-03-06 10:04:49 -05:00
Jordan Liggitt
c6673d2346
Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
2024-03-06 09:47:28 -05:00
Kubernetes Prow Robot
546f7c3086
Merge pull request #123738 from kannon92/fail-limited-swap-cgroup-v1
...
[KEP-2400]: Fail limited swap cgroup v1
2024-03-05 19:30:34 -08:00
Kubernetes Prow Robot
2b521e5f8e
Merge pull request #123405 from cici37/vapGA
...
[KEP-3488]Promote ValidatingAdmissionPolicy to GA
2024-03-05 18:29:53 -08:00
Kubernetes Prow Robot
39b085d936
Merge pull request #121725 from cubxxw/patch-1
...
fix: code style untidy and update version.sh
2024-03-05 18:29:44 -08:00
Kubernetes Prow Robot
695072027d
Merge pull request #123730 from pohly/dra-status-update-fix
...
dra api: fix status updates
2024-03-05 17:31:15 -08:00
Kubernetes Prow Robot
87f9b3891e
Merge pull request #123385 from HirazawaUi/allow-special-characters
...
Allow almost all printable ASCII characters in environment variables
2024-03-05 17:31:06 -08:00
Kubernetes Prow Robot
5b4d97dc5a
Merge pull request #122541 from aojea/headless_selector
...
Implement a field selector for ClusterIP on Services
2024-03-05 17:30:57 -08:00
Kevin Hannon
e90782bec8
fail LimitedSwap with cgroupv1
2024-03-05 20:19:27 -05:00
Kubernetes Prow Robot
3686ceb5b8
Merge pull request #122745 from kannon92/swap-no-swap-default
...
[KEP-2400] add no swap as the default option for swap
2024-03-05 16:32:40 -08:00
cici37
5d83282823
Auto updates
2024-03-05 16:00:21 -08:00
cici37
de506ce7ac
Promote ValidatingAdmissionPolicy to GA.
2024-03-05 16:00:21 -08:00
Kubernetes Prow Robot
262399065d
Merge pull request #123729 from seans3/streaming-owners
...
Adds OWNERS files to client-go streaming dirs
2024-03-05 14:46:02 -08:00
Kubernetes Prow Robot
751e3e9745
Merge pull request #123713 from aojea/missing_providerid
...
node-controller require providerID to initialize a node
2024-03-05 14:45:53 -08:00
Kubernetes Prow Robot
5fd38a8c78
Merge pull request #122907 from sohankunkerkar/prepare-kep-3983-for-beta
...
[KEP-4419]: promote KubeletConfigDropInDir feature to beta
2024-03-05 14:45:39 -08:00
Kubernetes Prow Robot
1e4124b081
Merge pull request #123726 from haircommander/kubelet_t
...
e2e_node: use kubelet_exec_t instead of bin_t for kubelet
2024-03-05 13:45:14 -08:00
Kubernetes Prow Robot
2bed0087c3
Merge pull request #123722 from atiratree/e2e-kubectl-delete-fix
...
fix e2e test for kubectl interactive delete
2024-03-05 13:45:07 -08:00
Kubernetes Prow Robot
df1eccae38
Merge pull request #123543 from jiahuif-forks/feature/validating-admission-policy/excluded-resources
...
ValidatingAdmissionPolicy: exclude brink-able resources.
2024-03-05 13:45:01 -08:00
Kubernetes Prow Robot
5f4a20e65d
Merge pull request #120718 from gjkim42/add-restartable-init-containers-to-pod-resources-api
...
Make PodResources API include restartable init containers
2024-03-05 13:44:54 -08:00
Kevin Hannon
6a4e19a4ec
add no swap as the default option for swap
2024-03-05 16:10:42 -05:00
Kubernetes Prow Robot
7a20def5ba
Merge pull request #123721 from enj/enj/i/authn_config_doc_nesting
...
Fix AuthenticationConfiguration docs around nested claims via CEL
2024-03-05 12:41:51 -08:00
Kubernetes Prow Robot
6efef796f6
Merge pull request #122998 from MikeSpreitzer/add-deletion-handling
...
Add DeletionHandlingObjectToName
2024-03-05 12:41:45 -08:00
Patrick Ohly
27df75c577
dra api: fix status updates
...
Changing object meta is not supposed to be possible via status updates. For
example, it circumvents RBAC permission checks.
2024-03-05 21:39:24 +01:00
Tim Allclair
ec325b328d
Match annotations against pod AppArmor field
2024-03-05 12:22:50 -08:00
Tim Allclair
d25b1ded76
PodSecurity check for AppArmor fields
2024-03-05 12:22:50 -08:00
Tim Allclair
24537a9131
Stop appending AppArmor status to node ready condition
2024-03-05 12:22:50 -08:00
Tim Allclair
207a965b3f
Update AppArmor e2e tests
2024-03-05 12:22:50 -08:00
Tim Allclair
bf3c8464ba
Implement Kubelet AppArmor field handling
2024-03-05 12:22:50 -08:00
Tim Allclair
289ec02e8b
Implement version skew strategy
2024-03-05 12:22:50 -08:00
Tim Allclair
b7f620c12b
Generated code
2024-03-05 12:22:50 -08:00
Sean Sullivan
855bc74023
Adds OWNERS files to client-go streaming dirs
2024-03-05 20:21:48 +00:00
Tim Allclair
94927afb50
AppArmor API changes
2024-03-05 12:02:43 -08:00
Jiahui Feng
6b03166bed
update to inject only the list of excluded resources.
2024-03-05 11:11:10 -08:00
Filip Křepinský
7a57bcea6c
fix e2e test for kubectl interactive delete
2024-03-05 19:57:28 +01:00
Kubernetes Prow Robot
b0ee334374
Merge pull request #123708 from p0lyn0mial/upstream-const-watchlist-bookmark-event
...
apimachinery/meta/types.go: define InitialEventsAnnotationKey const
2024-03-05 10:40:51 -08:00
Kubernetes Prow Robot
180c6bdc25
Merge pull request #122056 from dhenkel92/keep-pdb-condition
...
keep existing PDB conditions when updating status
2024-03-05 10:40:42 -08:00