Commit Graph

115121 Commits

Author SHA1 Message Date
Monis Khan
5469c198e5
kmsv2: validate encrypt response at DEK generation time
Prior to this change, we wait until the DEK is used to perform an
encryption before validating the response.  This means that the
plugin could report healthy but all TransformToStorage calls would
fail.  Now we correctly cause the plugin to become unhealthy and do
not attempt to use the newly generated DEK.

Signed-off-by: Monis Khan <mok@microsoft.com>
2023-03-22 21:48:53 -04:00
Kubernetes Prow Robot
d2be69ac11
Merge pull request #116860 from liggitt/test-binary
Drop development dependencies from test targets
2023-03-22 11:20:36 -07:00
Jordan Liggitt
a2bba333cc
Drop development dependencies from test targets 2023-03-22 10:38:42 -04:00
Kubernetes Prow Robot
3cf9f66e90
Merge pull request #116743 from thockin/docs-clarify-publish-not-ready-endpoints
Clarify EPSlice docs wrt the Ready conditions
2023-03-21 23:14:35 -07:00
Tim Allclair
7537cec567
Fix MatchConditions webhook validation testing (#116784)
* Fix MatchConditions webhook validation testing

* #squash verify error type

* #squash fix duplicate registration

* #squash uncomment validation test
2023-03-21 21:38:35 -07:00
Kubernetes Prow Robot
c7cc7886e2
Merge pull request #116702 from vinaykul/restart-free-pod-vertical-scaling-podmutation-fix
Fix pod object update that may cause data race
2023-03-21 19:26:36 -07:00
Kubernetes Prow Robot
9c6414cdfe
Merge pull request #116792 from pacoxu/fix-safe-sysctl-windows
safe-sysctl: skip checking for windows
2023-03-21 17:39:59 -07:00
vinay kulkarni
f41702b8d2 Return updatedPod if resize upon successful checkpointing of allocated resources 2023-03-22 00:24:00 +00:00
Paco Xu
e154b73535 safe-sysctl: skip checking for windows 2023-03-22 07:40:29 +08:00
Kubernetes Prow Robot
b2b9395c51
Merge pull request #116800 from claudiubelu/windows-remove-dns-check
kubelet: Read DNS Config options from file for Windows
2023-03-21 16:36:00 -07:00
Claudiu Belu
c68bc27f73 kubelet: Read DNS Config options from file for Windows
A previous commit added the capability to read the DNS configuration options
from a Windows host, while removing the capability to read from a resolv.conf-like
file.

This commit addresses this issue: if the given ``--resolv-conf`` option is not set to
``Host``, it will consider it as a file, preserving the previous behavior.
2023-03-21 22:21:57 +00:00
Kubernetes Prow Robot
8dd3807f4d
Merge pull request #116770 from alexzielenski/agg-discovery-err-sources
Fix aggregated discovery race when using CRD and Aggregated APIService under same group
2023-03-21 15:18:12 -07:00
Alexander Zielenski
933dfe3a51 use longer timeouts to avoid flakes on heavily loaded systems 2023-03-21 14:18:34 -07:00
Kubernetes Prow Robot
2f002862f0
Merge pull request #116820 from Jefftree/patch-1
Update kube_features comment for aggregated discovery and openapi v3
2023-03-21 14:16:12 -07:00
Alexander Zielenski
0740b11073 allow multiple sources to add/remove from discovery without clobbering each other 2023-03-21 14:14:23 -07:00
Kubernetes Prow Robot
786316f0b6
Merge pull request #116780 from KnVerey/applyset-annotation-domain
Use standard *.kubernetes.io instead of *.k8s.io for ApplySet
2023-03-21 12:28:24 -07:00
Kubernetes Prow Robot
6ec366261c
Merge pull request #116658 from Riaankl/add-get-resources-endpoint
Add 12 get * V1APIResources to file pending_eligible_endpoints.yaml
2023-03-21 12:28:11 -07:00
Jeffrey Ying
0e4cece0e8
Update kube_features comment for aggregated discovery and openapi v3 2023-03-21 15:18:41 -04:00
Kubernetes Prow Robot
94daf7f4b2
Merge pull request #116806 from sourcelliu/improvemap
Improve the performance of map usage
2023-03-21 11:30:24 -07:00
Kubernetes Prow Robot
956fa9b9ce
Merge pull request #116785 from enj/enj/i/clean_front_proxy_headers
Clear front proxy headers after authentication is complete
2023-03-21 11:30:11 -07:00
Kubernetes Prow Robot
9e622d2364
Merge pull request #116809 from liggitt/ci-regex
Fix CI regex for missing rc.0 tags
2023-03-21 09:56:24 -07:00
Kubernetes Prow Robot
9614d7c03b
Merge pull request #116783 from tallclair/cel-authz
[CEL] Clean up reference to deleted denied function
2023-03-21 09:56:11 -07:00
Kubernetes Prow Robot
42f54ccf9c
Merge pull request #116724 from tallclair/gc-test-flake
Deflake GC e2e test
2023-03-21 08:19:08 -07:00
Monis Khan
e9866d2794
Clear front proxy headers after authentication is complete
This matches the logic we have for the Authorization header as well
as the impersonation headers.

Signed-off-by: Monis Khan <mok@microsoft.com>
2023-03-21 10:51:22 -04:00
Jordan Liggitt
188844c3db
Make prerelease tag optional in CI versions 2023-03-21 09:23:45 -04:00
Jordan Liggitt
2010eaac52
Annotate CI version regexes 2023-03-21 09:08:05 -04:00
Jordan Liggitt
9ba4df15f8
Drop unused regex grouping 2023-03-21 09:08:05 -04:00
Jordan Liggitt
bff737d328
Update comments 2023-03-21 09:08:04 -04:00
Jordan Liggitt
e33a233c3b
Delete unused version regex function 2023-03-21 09:08:04 -04:00
mantuliu
0567c93b2a Improve the performance of map usage
Signed-off-by: mantuliu <240951888@qq.com>
2023-03-21 20:37:53 +08:00
Tim Allclair
d109f60a05 Clean up reference to deleted denied function 2023-03-20 18:24:10 -07:00
Tim Allclair
9cce3fa107 Deflake GC e2e test 2023-03-20 16:09:30 -07:00
Kubernetes Prow Robot
c9ff286668
Merge pull request #116772 from jiahuif-forks/fix/validating-admission-policy/message-expression-validation
ValidatingAdmissionPolicy: fix policy object validation
2023-03-20 15:21:11 -07:00
Katrina Verey
a0cff30104
Use standard *.kubernetes.io instead of *.k8s.io for ApplySet 2023-03-20 18:21:04 -04:00
Kubernetes Prow Robot
ac01acb8da
Merge pull request #116756 from liggitt/release-note-cleanup
Fixup 1.27 release note
2023-03-20 12:43:07 -07:00
Jiahui Feng
33c3fe3f74 differentiate kinds of expressions. 2023-03-20 12:13:21 -07:00
Kubernetes Prow Robot
15894cfc85
Merge pull request #116550 from alculquicondor/fix-bind-uid
Preserve UID and ResourceVersion in BindingREST
2023-03-20 08:49:20 -07:00
Jordan Liggitt
5949cb4d5c
Fixup 1.27 release note 2023-03-20 11:01:51 -04:00
Aldo Culquicondor
62889f416c
Preserve UID/ResourceVersion in the BindingREST endpoint
Change-Id: If4023da10c455963a320fdb9fc2a73c099bea3db
2023-03-20 10:29:25 -04:00
Tim Hockin
78530ec0a8
Clarify EPSlice docs wrt the Ready conditions
`publishNotReadyAddresses` is an explicit override, so this makes it
clear that is OK.
2023-03-19 09:28:58 -07:00
vinay kulkarni
d753893260 Do not modify original pod object when processing pod resource resize 2023-03-18 17:57:25 +00:00
Kubernetes Prow Robot
fe91bc257b
Merge pull request #116554 from atiratree/eviction-resource-version-fix
API-initiated eviction: handle deleteOptions correctly
2023-03-17 16:59:15 -07:00
Kubernetes Prow Robot
c14e0983fb
Merge pull request #116684 from vinaykul/restart-free-pod-vertical-scaling-fixes
Add missing unit test for resource resize policy defaulting
2023-03-17 15:13:17 -07:00
Filip Křepinský
51c0e2374f API-initiated eviction: handle deleteOptions correctly
when adding a DisruptionTarget condition into a pod that will be deleted

- handle ResourceVersion and Preconditions correctly
- handle DryRun option correctly

Co-authored-by: Jordan Liggitt jordan@liggitt.net
2023-03-17 22:18:07 +01:00
Kubernetes Prow Robot
05740daeed
Merge pull request #116718 from dims/move-the-arm-deprecation-notice-elsewhere
Move the arm deprecation notice in a different spot
2023-03-17 14:01:16 -07:00
Kubernetes Release Robot
fd16329f64 CHANGELOG: Update directory for v1.26.3 release 2023-03-17 19:07:06 +00:00
vinay kulkarni
358474b71d Explicitly return from checkpoint update failures. SyncPod will retry 2023-03-17 18:00:04 +00:00
Kubernetes Release Robot
7387ccbd31 CHANGELOG: Update directory for v1.25.8 release 2023-03-17 17:48:15 +00:00
Kubernetes Release Robot
a4e62edcc9 CHANGELOG: Update directory for v1.24.12 release 2023-03-17 17:10:22 +00:00
Kubernetes Prow Robot
aa0fea6944
Merge pull request #116706 from pacoxu/deflake-kubemark-data-race
kubelet: fix data races
2023-03-17 08:41:26 -07:00