github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-06 02:34:03 +00:00
Code Issues Projects Releases Wiki Activity
119,868 Commits 42 Branches 7,905 Tags 1.3 GiB
5ff42b2368
Commit Graph

119868 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
6c27f48387
Merge pull request #121852 from pohly/e2e-framework-test-labels-in-junit 
e2e: avoid redundant labels in JUnit file
 2023-11-13 11:05:12 +01:00
Patrick Ohly
617f2132fe e2e: avoid redundant labels in JUnit file 
Because labels are currently typically added also to the spec texts, we don't
need to write them separately.

This redundancy got introduced in f2cfbf44b1 when registering all inline tags
also as labels.
 2023-11-13 08:08:09 +01:00
andyzhangx
172f680326 fix: smb file share unavailable issue when it's deleted 2023-11-13 05:04:34 +00:00
Kubernetes Prow Robot
a95a79c785
Merge pull request #121801 from danwinship/iptables-test-count 
Fix "go test -count=2 ./pkg/proxy/iptables"
 2023-11-12 13:20:25 +01:00
Dan Winship
2017fb2ec5 Fix "go test -count=2 ./pkg/proxy/iptables" 
If you run the tests multiple times, the "partial restore failures"
metric didn't get reset in between.
 2023-11-11 08:41:53 -05:00
Kubernetes Prow Robot
930022cf26
Merge pull request #121841 from SataQiu/fix-renew-20231110 
kubeadm: support updating certificate organization during 'kubeadm certs renew'
 2023-11-11 09:49:36 +01:00
SataQiu
bda722bb68 kubeadm: support updating certificate organization during 'kubeadm certs renew' 2023-11-11 14:57:50 +08:00
Kubernetes Prow Robot
1f3256bbac
Merge pull request #121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert 
kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
 2023-11-10 17:56:07 +01:00
Lubomir I. Ivanov
2780060a78 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt 
The component connection between kube-apiserver and kubelet does not
require the "O" field on the Subject to be set to the
"system:masters" privileged group. It can be a less
privileged group like "kubeadm:cluster-admins".

Change the group in the apiserve-kubelet-client
certificate specification. This cert is passed to
--kubelet-client-certificate.
 2023-11-10 15:05:14 +02:00
Kubernetes Prow Robot
5ce0bd95cc
Merge pull request #121677 from kerthcet/cleanup/remove-evnet 
Unregister events in schedulingGates for performance
 2023-11-10 05:03:33 +01:00
Kubernetes Prow Robot
8a9b209cb1
Merge pull request #121706 from kannon92/fix-oom-swap-fedora 
Skip OOMKilled Jobs if Swap is enabled.
 2023-11-09 02:04:45 +01:00
Rita Zhang
11cdb8fd01
split compile and eval 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-11-08 16:37:10 -08:00
Rita Zhang
fe53db0dbd
authz: add benchmark for webhook authorizer 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-11-08 15:38:11 -08:00
Kubernetes Prow Robot
d26c154984
Merge pull request #121818 from liggitt/authz-config-rbac-anonymous 
Test authz config file with RBAC and anonymous auth
 2023-11-08 23:04:36 +01:00
Kevin Hannon
475bfa4a63 set LimitedSwap 2023-11-08 15:43:12 -05:00
Jordan Liggitt
819d1903a2
Add support for authorization-config to local-up-cluster 2023-11-08 14:36:05 -06:00
Jordan Liggitt
b53134f129
Test anonymous and RBAC handling via config file 2023-11-08 14:36:05 -06:00
Jordan Liggitt
264cd64824
Run RBAC hook correctly when running from authz config file 2023-11-08 14:36:01 -06:00
Jordan Liggitt
1f40e0916e
Only default mode to AlwaysAllow when config file is unspecified 2023-11-08 11:24:28 -06:00
Kubernetes Prow Robot
eb6feceb47
Merge pull request #121768 from borg-land/deadcode 
test: introduce a Feature label for skipping KubeUp specific tests
 2023-11-08 18:05:15 +01:00
upodroid
76277f693d create a new KubeUp feature label for tests marked for removal 2023-11-08 09:43:12 -06:00
cpanato
9e5b8402bb
update go.mod 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 09:32:17 -06:00
cpanato
88e124ecaa
[go] Bump images, dependencies and versions to go 1.21.4 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 08:25:30 -06:00
Peter Schuurman
e4fdc96c18 Pass External Storage label parameters as individual arguments in framework variadic function 2023-11-07 22:17:36 -08:00
Kubernetes Prow Robot
e4b74dd12f
Merge pull request #121765 from mimowo/ready-pods-stable-api 
Fix API comment for the Job ready field
 2023-11-07 23:52:12 +01:00
Kubernetes Prow Robot
0193fae084
Merge pull request #121764 from mimowo/backoff-limit-per-index-beta-api 
Fix API comment for the FailIndex Job pod failure policy action
 2023-11-07 23:52:03 +01:00
Daman Arora
f3dad97704 self nominate aroradaman as sig- 
proxy-reviewer

Signed-off-by: Daman Arora <aroradaman@gmail.com>
 2023-11-08 01:52:59 +05:30
Kubernetes Prow Robot
f927d5b385
Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed 
fix test store delete collection function failed
 2023-11-07 19:36:39 +01:00
Kevin Hannon
2645b22003
Self nominate Kevin Hannon for reviewer for job controller 
I have been lead the PodReplacementPolicy KEP for alpha and I helped review/fix some issues in beta.  

https://github.com/kubernetes/kubernetes/pulls?q=+is%3Apr+reviewed-by%3Akannon92+label%3Asig%2Fapps+

I have also been an active reviewer and helped GA job tracking last release.  I hope to continue reviewing Job related code.
 2023-11-07 13:21:02 -05:00
HirazawaUi
b12db6d9b5 fix test store delete collection function failed 2023-11-08 00:34:53 +08:00
Michal Wozniak
9d5b2a4476 Fix API comment for the Job ready field 2023-11-07 07:38:51 +01:00
Kubernetes Prow Robot
246d363ea4
Merge pull request #121700 from kannon92/fix-summary-more 
missed a few summary upper limits for major page faults
 2023-11-06 20:13:04 +01:00
Michal Wozniak
1395e2e02c Fix API comment for the FailIndex Job pod failure policy action 2023-11-06 17:47:13 +01:00
Kubernetes Prow Robot
cf4d031dbb
Merge pull request #121743 from neolit123/1.29-super-admin-conf 
kubeadm: ensure the kubelet and kube-apiserver wait checks go first
 2023-11-06 14:24:01 +01:00
Lubomir I. Ivanov
6dc11c1f21 kubeadm: ensure the kubelet and kube-apiserver wait checks go first 
The addition of the "super-admin.conf" functionality required
init.go's Client() to create RBAC rules on its first creation.

However this created a problem with the "wait-control-plane" phase
of "kubeadm init" where a client is needed to connect to the
API server Discovery API's "/healthz" endpoint. The logic that ensures
the RBAC became the step where the API server wait was polled for.

To avoid this, introduce a new InitData function ClientWithoutBootstrap.
In "wait-control-plane" use this client, which has no permissions
(anonymous), but is sufficient to connect to the "/healthz".

Pending changes here would be:
- Stop using the "/healthz", instead a regular REST client from
the kubelet cert/key can be constructed.
- Make the wait for kubelet / API server linear (not in go routines).
 2023-11-06 12:43:20 +02:00
tao.yang
bb315d1339 bump runc to v1.1.10 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-11-06 10:42:39 +08:00
kerthcet
f77a4543d1 Unregister events in schedulingGates plugin 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2023-11-06 10:01:13 +08:00
Kubernetes Prow Robot
24e6b03780
Merge pull request #121708 from aravindhp/add-azure-framework-ssh-provider 
framework: add SSH support for Azure
 2023-11-04 17:19:13 +01:00
Paco Xu
70c9eefff3 add --sbom=false --provenance=false for windows servercore cache build 2023-11-04 21:11:05 +08:00
Kubernetes Prow Robot
22866ca5eb
Merge pull request #121034 from alexzielenski/apiserver/apiextensions/ratcheting-oldself-create 
KEP-4008: CRDValidationRatcheting: Add support for optional `oldSelf`
 2023-11-04 02:57:46 +01:00
Kubernetes Prow Robot
9f319c3206
Merge pull request #113374 from ahmedtd/kep-3257-projected-types 
Implement ClusterTrustBundlePEM projected volume
 2023-11-04 01:44:56 +01:00
Kubernetes Prow Robot
953afbb328
Merge pull request #121193 from sohankunkerkar/kubelet-config-dir 
Retarget drop-in kubelet configuration dir feature to Alpha
 2023-11-03 23:59:29 +01:00
Alexander Zielenski
42a70cdbd1 codegen 2023-11-03 15:34:13 -07:00
Alexander Zielenski
bba0c9a81e validate defaults across an update from nil to ensure create ratcheting rules work 2023-11-03 15:34:13 -07:00
Alexander Zielenski
eef1515815 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true 2023-11-03 15:34:13 -07:00
Alexander Zielenski
5edb27aa38 ratcheting-cel: add optionalOldSelf field 2023-11-03 15:23:23 -07:00
Aravindh Puthiyaparambil
6b6be38896
test: Fix NodeLogQuery tests 
- Remove redundant tests
- Fix formatting of the query command by using fmt.Sprintf to
  prevent spurious characters from being introduced
- Fix running of the journalctl command on the node by add the
  default options
- Restrict running the tests on a single node
 2023-11-03 15:21:49 -07:00
Sohan Kunkerkar
ad7b9b56f5 test/e2e_node: add e2e test for Kubeletconfig drop-in dir 
Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
Co-authored-by: Peter Hunt <pehunt@redhat.com>
 2023-11-03 17:49:22 -04:00
Sohan Kunkerkar
ee5578be52 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set 
This commit resolves an issue where certain KubeletConfig fields, specifically:
- FileCheckFrequency
- VolumeStatsAggPeriod
- EvictionPressureTransitionPeriod
- Authorization.Mode
- EvictionHard
were inadvertently overridden when not explicitly set in drop-in configs. To retain the
original values if they were absent in the drop-in configs, mergeKubeletConfigurations
uses a JSON patch merge strategy to selectively merge configurations. It prevents essential
configuration settings from being overridden, ensuring a more predictable behavior for users.

Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
Co-authored-by: Peter Hunt <pehunt@redhat.com>
 2023-11-03 17:48:29 -04:00
Kubernetes Prow Robot
263ab254ef
Merge pull request #121715 from pohly/scheduler-logging-with-instrumentation 
scheduler: fix performance regression at -v3 + contextual logging
 2023-11-03 21:08:25 +01:00