github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 02:06:23 +00:00
Code Issues Projects Releases Wiki Activity
129,695 Commits 42 Branches 9,765 Tags
59644b2255cecb01ac1e12c8a93fc1bdbbf03a3a
Commit Graph

129695 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
galal-hussein
59644b2255 Add the ability to add extra admission plugins 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2026-06-12 11:47:21 -03:00
galal-hussein
263e2b5712 Ignore nfacct init error in kube-proxy 
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2026-06-12 11:47:21 -03:00
Erik Wilson
7124bb0b6c Add Vagrantfile 2026-06-12 11:47:21 -03:00
Darren Shepherd
227868294c Add tag.sh script 
Add DefaultKubeBinaryVersion to the tag script

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2026-06-12 11:47:21 -03:00
Darren Shepherd
00029cb870 Fix CSI initialization conflict 
CSI is used by both the kubelet and kube-controller-manager.  Both
components will initialize the csiPlugin with different VolumeHost
objects.  The csiPlugin will then assign a global variable for
the node info manager.  It is then possible that the kubelet gets
the credentials of the kube-controller-manager and that will cause
CSI to fail.
 2026-06-12 11:47:21 -03:00
Darren Shepherd
9c2b3a9b85 Allow override of "kubernetes" endpoint port 2026-06-12 11:47:21 -03:00
Darren Shepherd
83553035a9 Notify startup to grab a hold of handler and authenticator 
Fix to the completed options config

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2026-06-12 11:47:21 -03:00
Darren Shepherd
4b9fcc8a33 Add stopCh to apiserver & context to kublet commands 
Remove SetupSignalContext call from the apiserver

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
 2026-06-12 11:47:21 -03:00
Erik Wilson
3c1a46cc52 Update kubernetes service on start for port changes 2026-06-12 11:47:21 -03:00
Darren Shepherd
e04501c5d0 Don't ever select the flannel bridge or cni bridge 2026-06-12 11:47:21 -03:00
Darren Shepherd
3c5621d736 Cache loopback cert in the certs dir if set 2026-06-12 11:47:21 -03:00
Darren Shepherd
c08b0cca65 Add ability to disable proxy hostname check 2026-06-12 11:47:21 -03:00
Darren Shepherd
37309138d5 Hide deprecated warnings 2026-06-12 11:47:21 -03:00
Darren Shepherd
a58980e515 Set all sources so node+agent in the same process doesn't get restricted 2026-06-12 11:47:21 -03:00
Darren Shepherd
7a07b2fdeb Don't check for cpuset cgroup, not always required? 2026-06-12 11:47:21 -03:00
Darren Shepherd
4f16e1aef5 Wait for kube-apiserver for 2 minutes for slow (ARM) systems 2026-06-12 11:47:21 -03:00
Darren Shepherd
87b898096d Make kubelet.sock path changable 2026-06-12 11:47:21 -03:00
Darren Shepherd
481323d60c only use the resolved name if port was zero 2026-06-12 11:47:21 -03:00
Darren Shepherd
d0b19888d0 If you can't set hashsize on nf_conntrack don't fail 2026-06-12 11:47:21 -03:00
Darren Shepherd
dd9e64daea Drop credential providers 2026-06-12 11:47:21 -03:00
Darren Shepherd
334cc04bd1 Drop storage plugins 2026-06-12 11:47:21 -03:00
Darren Shepherd
1da9575615 Drop client-go cloud auth 2026-06-12 11:47:21 -03:00
Kubernetes Release Robot
c029d48d28 Release commit for Kubernetes v1.33.13 v1.33.13 2026-06-11 16:59:07 +00:00
Kubernetes Prow Robot
e358b76bcb Merge pull request #139590 from cpanato/update-go-images-rel133 
[release-1.33] [go] Bump images and versions to go 1.25.11 and distroless iptables
 2026-06-09 21:51:41 +05:30
Carlos Panato
a5e33bdfe5 Bump images and versions to go 1.25.11 and distroless iptables 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2026-06-09 15:20:21 +02:00
Kubernetes Prow Robot
2b395ade7a Merge pull request #139236 from rahulbabu95/automated-cherry-pick-of-#138736-upstream-release-1.33 
Automated cherry pick of #138736: fix: avoid panic on services with empty IPFamilies
 2026-06-08 17:13:46 +05:30
Rahul
2d5d3f0a23 fix(endpoint): avoid panic on services with empty IPFamilies 
Accessing svc.Spec.IPFamilies[0] without a bounds check panics when a
service reaches the controller with an empty IPFamilies field. This can
happen via watch events: the apiserver's defaultOnRead decorator populates
IPFamilies on GET/LIST but not on watch (cachingObject wrapping bypasses
the type assertion).

Restore the inference logic removed in #130101: fall back to ClusterIP
for headful services and pod IP for headless services.

Signed-off-by: Rahul <rahulbabu95@gmail.com>
 2026-05-21 13:45:59 -07:00
Kubernetes Release Robot
024e61db8a Update CHANGELOG/CHANGELOG-1.33.md for v1.33.12 2026-05-12 09:55:21 +00:00
Kubernetes Release Robot
1f348c8e82 Release commit for Kubernetes v1.33.12 v1.33.12 2026-05-12 09:43:17 +00:00
Kubernetes Prow Robot
e978e6e56d Merge pull request #138805 from neolit123/automated-cherry-pick-of-#138692-origin-release-1.33 
Automated cherry pick of #138692: kubeadm: skip LocalAPIEndpoint defaulting on worker join
 2026-05-11 21:51:57 +05:30
Kubernetes Prow Robot
121f890b6d Merge pull request #138686 from neolit123/automated-cherry-pick-of-#138449-origin-release-1.33 
Automated cherry pick of #138449: kubeadm: use the localAPIEndpoint for all API calls in 'init'
 2026-05-11 21:51:49 +05:30
Kubernetes Prow Robot
dd44baae38 Merge pull request #138964 from neolit123/automated-cherry-pick-of-#138957-origin-release-1.33 
Automated cherry pick of #138957: kubeadm: use dedicated ClusterRole for apiserver kubelet client
 2026-05-11 20:13:51 +05:30
Micah Hausler
5ea68035bb kubeadm: use dedicated ClusterRole for apiserver kubelet client 
Signed-off-by: Micah Hausler <mhausler@amazon.com>
 2026-05-11 14:34:27 +02:00
Seena Fallah
a051bd7fc8 kubeadm: skip LocalAPIEndpoint defaulting on worker join 
FetchInitConfigurationFromCluster always called SetAPIEndpointDynamicDefaults,
which invokes ChooseAPIServerBindAddress and requires a default route on the
host. Worker nodes joining the cluster don't need a LocalAPIEndpoint and may
legitimately have no default route, causing kubeadm join to fail with:

```
unable to fetch the kubeadm-config ConfigMap: unable to select an IP from
default routes.
```

Add a skipAPIEndpoint parameter to SetInitDynamicDefaults and pass
`!getAPIEndpoint` from FetchInitConfigurationFromCluster, so the endpoint
defaulter is bypassed when the caller did not request the endpoint (worker
join, non-control-plane reset/certs/upgrade paths).

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
 2026-05-06 11:09:36 +02:00
Lubomir I. Ivanov
be0a49b221 kubeadm: use the localAPIEndpoint for all API calls in 'init' 
Historicaly the kubeadm clients have used the 'admin.conf'
and 'super-admin.conf' directly, which makes all API calls
go trough the CPE (control plane endpoint). This can create
problems for scenarios when the LB is provisioned only after
'init' starts the kube-apiserver.

Instead of using the '.conf' as they are, modify them
in memory to point to the LAE (localAPIEndpoint).
This was already done by the WaitControlPlaneClient for
the WaitControlPlane phase, which required it. This separate
client is no longer needed.

However, do use a unmodified kubeconfig to the init phase
bootstrap-token since this is the phase that creates
the cluster-info CM and for that we need the original CPE
server address.
 2026-04-29 17:48:03 +02:00
Kubernetes Prow Robot
32137bf43b Merge pull request #138541 from ahrtr/automated-cherry-pick-of-#138403-upstream-release-1.33 
Automated cherry pick of #138403: kubeadm: Evaluate etcd cluster health using quorum
 2026-04-23 18:46:48 +05:30
Benjamin Wang
f7077de307 Add a (*Client) addEndpoint method 
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
 2026-04-23 09:16:24 +01:00
Benjamin Wang
cd70e54c56 Evaluate etcd cluster health using quorum 
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
 2026-04-23 09:16:24 +01:00
Kubernetes Release Robot
2ff801658c Update CHANGELOG/CHANGELOG-1.33.md for v1.33.11 2026-04-15 18:21:56 +00:00
Kubernetes Release Robot
9efa99e5a1 Release commit for Kubernetes v1.33.11 v1.33.11 2026-04-15 18:09:55 +00:00
Kubernetes Prow Robot
28a08b2680 Merge pull request #138358 from dims/update-moby-spdystream-v0.5.1-1.33 
[1.33] Update github.com/moby/spdystream from v0.5.0 to v0.5.1
 2026-04-14 12:02:36 +05:30
Kubernetes Prow Robot
d02a44941c Merge pull request #138350 from dashpole/update_prop_33 
[release-1.33] Update go.opentelemetry.io/otel to v1.41.0
 2026-04-14 07:00:36 +05:30
Davanum Srinivas
28b2a45d03 Update github.com/moby/spdystream from v0.5.0 to v0.5.1 
Kubernetes-commit: 7e9c2c8eef26f99aa2f94d8e09d6d32de86c7769
 2026-04-13 14:30:03 -04:00
David Ashpole
4128483392 update go.opentelemetry.io/otel to v1.41.0 2026-04-13 15:04:41 +00:00
Kubernetes Prow Robot
875a0ab0f0 Merge pull request #138306 from xmudrii/update-go-1.33 
[release-1.33] Bump images and versions to go 1.25.9 and distroless iptables
 2026-04-10 02:40:21 +05:30
Marko Mudrinić
ea46dad4da Bump images and versions to go 1.25.9 and distroless iptables 
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
 2026-04-09 22:00:49 +02:00
Kubernetes Prow Robot
04e0a33303 Merge pull request #138151 from liggitt/go-1-25-release-1-33 
[release-1.33] Bump to go 1.25.8
 2026-04-09 16:28:27 +05:30
Kubernetes Prow Robot
b21f28f0ec Merge pull request #137677 from haojiwu/cherry-pick-137147-release-1.33 
[release-1.33] Fix RepairIPAddress controller startup failure when namespace informer is not yet synced
 2026-04-09 16:28:20 +05:30
Kubernetes Prow Robot
151cebbbef Merge pull request #137998 from varshadeshmane92/automated-cherry-pick-of-#133624-upstream-release-1.33 
Automated cherry pick of #133624: Fix flaking RunTestDelayedWatchDelivery
 2026-04-09 14:13:34 +05:30
Jordan Liggitt
a4cc2ce4c2 Bump to go 1.25 2026-04-01 17:20:17 -04:00