Commit Graph

124626 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
62cd87e839
Merge pull request #126538 from SataQiu/validate-20240805
kubeadm: add a validation warning when the certificateValidityPeriod is more than the caCertificateValidityPeriod
2024-08-13 22:11:03 -07:00
Kubernetes Prow Robot
5e2cead785
Merge pull request #126534 from googs1025/scheduler_cleanup
scheduler: use logger instead of new klog.FromContext(ctx)
2024-08-13 22:10:56 -07:00
Kubernetes Prow Robot
051fa631dd
Merge pull request #126511 from AndrewSirenko/fix-broken-ad-metrics-test
Fix broken A/D Controller metrics test
2024-08-13 22:10:49 -07:00
Kubernetes Prow Robot
5b95fdb374
Merge pull request #126476 from pohly/scheduler-framework-filter-docs
scheduler: document behavior of Error status returned by Filter
2024-08-13 22:10:42 -07:00
Kubernetes Prow Robot
bf4cf4d779
Merge pull request #126460 from aojea/hosts_networks_hostfile
hostNetwork pods mount /etc/hosts without network
2024-08-13 21:04:19 -07:00
Kubernetes Prow Robot
f15ce180b5
Merge pull request #126451 from aramase/aramase/t/oidc_int_tests_parallel
Run `apiserver/oidc` integration tests in parallel
2024-08-13 21:04:12 -07:00
Kubernetes Prow Robot
046c098a45
Merge pull request #126449 from BenTheElder/coredns-1113
update coreDNS to v1.11.3
2024-08-13 21:04:06 -07:00
Kubernetes Prow Robot
7576984eec
Merge pull request #126444 from bart0sh/PR152-dra-e2e_node-cleanup
DRA: e2e_node: improve readability
2024-08-13 21:03:59 -07:00
Kubernetes Prow Robot
5891e72703
Merge pull request #126411 from hoskeri/fix-authnz-configfile-usage-formatting
Fix formatting of the authnz config usage.
2024-08-13 21:03:52 -07:00
Kubernetes Prow Robot
bc3d6fd491
Merge pull request #126354 from liangyuanpeng/celtest_update
Using NewExpressions for CEL lazy test.
2024-08-13 21:03:45 -07:00
Kubernetes Prow Robot
bbd1dd8c6f
Merge pull request #126342 from aramase/aramase/c/auth_rm_unused_function
cleanup unused fn IsValidServiceAccountKeyFile in authenticator config
2024-08-13 21:03:38 -07:00
Kubernetes Prow Robot
c06ea0fc81
Merge pull request #126316 from aramase/aramase/f/kep_3331_tighter_validation
Validate structured authn feature is enabled for discovery url/multiple audiences
2024-08-13 21:03:31 -07:00
Kubernetes Prow Robot
af782d05aa
Merge pull request #126292 from googs1025/scheduler_ut
scheduler(ut): call close method when finish profileMap in ut
2024-08-13 21:03:24 -07:00
Kubernetes Prow Robot
bb7411120a
Merge pull request #126287 from devppratik/121793-update-node-monitor-grace-period
node: Update Node Monitor Grace Period default duration to 50s
2024-08-13 21:03:16 -07:00
Kubernetes Prow Robot
cc4ed1d3fa
Merge pull request #126234 from fengshunli/protobuf
hack/tools: bump google.golang.org/protobuf to v1.31.0 for v1.34.2
2024-08-13 21:03:10 -07:00
Kubernetes Prow Robot
6cf49df138
Merge pull request #126158 from macsko/use_generics_in_scheduling_queue_heap
Use generics in scheduling queue's heap
2024-08-13 21:03:02 -07:00
Kubernetes Prow Robot
ea1143efc7
Merge pull request #126022 from macsko/new_node_to_status_map_structure
Change structure of NodeToStatus map in scheduler
2024-08-13 21:02:55 -07:00
Kubernetes Prow Robot
2fe54b4cbe
Merge pull request #125830 from siyuanfoundation/static-ana
add static analysis script to verify new feature gates are added as versioned feature specs
2024-08-13 21:02:49 -07:00
Toru Komatsu
a7242fcff7
Implement PVC/Add QueueingHint in CSILimit plugin (#124703)
Signed-off-by: utam0k <k0ma@utam0k.jp>
2024-08-13 21:02:42 -07:00
Jordan Liggitt
c181912dc5
Restore honoring --version build ID overrides 2024-08-13 21:52:58 -04:00
Kubernetes Prow Robot
9d140b136c
Merge pull request #125372 from hungnguyen243/pvcScalabilityFix
Improve PVC protection controller's scalability by batch-processing PVCs by namespace & caching live pod list results
2024-08-13 18:52:42 -07:00
Kubernetes Prow Robot
5fdab96c6c
Merge pull request #121997 from dongjiang1989/admission-ioutil
chores: Replace deprecation ioutil fucntions
2024-08-13 14:44:42 -07:00
Kubernetes Prow Robot
b2799bbda7
Merge pull request #124690 from mowangdk/test/add_e2e_test_for_volume_health
chore: Add e2e test for NodeGetVolumeStats
2024-08-13 13:00:43 -07:00
Maciej Skoczeń
5894e201fa Measure metrics only during a specific op in scheduler_perf 2024-08-13 12:34:06 +00:00
Tobias Klauser
99a90df3d0
client-go: fix typo in leaderelection error log message 2024-08-13 11:22:46 +02:00
Arda Güçlü
d981b19ad3 Add timeout cancellation to kubectl cp destination path check 2024-08-13 11:02:04 +03:00
Kubernetes Release Robot
09f025973a CHANGELOG: Update directory for v1.31.0 release 2024-08-13 07:56:14 +00:00
0x5457
81824b7c2e apiserver: declare kubeClient and dynamicClient as interface types to avoid panic 2024-08-13 11:25:11 +08:00
googs1025
529d13c746 refactor: kubelet preemption TestEvictPodsToFreeRequests() method 2024-08-13 08:41:07 +08:00
Wei Huang
f6a11da279
fix a scheduler preemption issue that victim is not patched properly 2024-08-12 15:25:10 -07:00
Peter Hunt
41e6162cc0 e2e/storage: update block device test to always specify a valid path
in the isEphemeral case, the pvcBlock doesn't have a filled in name, which means the DevicePath is "/mnt".

When using the OCI runtime runc, this is valid because runc sanitizes the path, mounting it in `/mnt` in the container.
However, the OCI runtime crun does not do this.

One can argue the validity of passing a path structured like a directory as a block device, but ultimately from what I can see
this wasn't intentional.

As such, fix it by setting the mount to be based on the first Volume name, which both cases should have filled out.

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-08-12 12:36:11 -04:00
Kubernetes Prow Robot
099a88370d
Merge pull request #126638 from soltysh/fix_wait
wait: don't lowercase condition in --for argument
2024-08-12 09:10:55 -07:00
Maciej Szulik
fad6c424ac
wait: don't lowercase condition in --for argument 2024-08-12 16:59:17 +02:00
Paco Xu
85c3c67094 fix a typo in kubeadm v1beta4 doc 2024-08-12 15:12:20 +08:00
xin.li
42e8446d7e kubeadm: increase ut coverage for util/version
Signed-off-by: xin.li <xin.li@daocloud.io>
2024-08-09 09:23:10 +08:00
Peter Hunt
c7b7ea0514 e2e_node: update node cgroup manager test to verify kubelet recreates kubepods cgroup
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-08-08 16:53:44 -04:00
Peter Hunt
dd2dcc0b0a e2e_node: enable and fix cgroups test for systemd
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-08-08 15:57:49 -04:00
Hung Nguyen
eb16aa1d4a improve PVC Protection Controller's processing mechanism with sample performance test 2024-08-08 16:57:55 +00:00
Sascha Grunert
d850fb6756
kubeadm: don't warn if crictl binary does not exist
kubeadm does not rely on `crictl` any more, so we can now drop the
warning in 1.32 as outlined in:

https://github.com/kubernetes/kubeadm/issues/3064

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-08-08 15:28:31 +02:00
mprahl
db2218d16e Stop the RetryWatcher when failing due to permissions issue
When the client does not have permission to watch a resource, the
RetryWatcher continuously retried. In this case, it's better to send an
error and stop retrying to let the caller handle this case since this is
not a transient error that can be recovered without user intervention.

This is particularly helpful in applications that leverage a user
provided service account and the application needs to notify the user to
set the correct permissions for the service account.

This also accounts for invalid credentials from the watch client.

Signed-off-by: mprahl <mprahl@users.noreply.github.com>
2024-08-07 09:58:24 -04:00
carlory
b6ef1c80e2 Collect more info for debugging #124136 2024-08-07 16:39:07 +08:00
Adarsh-verma-14
838d7c9049 remove duplicate call for ServeMux 2024-08-07 02:56:49 +05:30
Antonio Ojea
5845492cb4 hostNetwork pods mount /etc/hosts without network
hostNetwork pods mount the /etc/hosts from the root namespaces, hence
does not depend on PodIPs to be populated to mount the /etc/hosts file
and add the argumentes specified in the Pod.Spec like hostAliases.
2024-08-06 16:56:57 +00:00
Will Daly
d59687c367 kube-proxy: initialization wait for node and serviceCIDR synced
Follow-on from https://github.com/kubernetes/kubernetes/pull/126532
to wait for pre-sync events delivered for the remaining two informers
in kube-proxy (node and serviceCIDR).
2024-08-06 09:01:42 -07:00
Kubernetes Release Robot
60c4c2b252 CHANGELOG: Update directory for v1.31.0-rc.1 release 2024-08-06 06:14:49 +00:00
Sergey Kanzhelev
5c5b86accc adding SergeyKanzhelev as SIG Node approver 2024-08-05 20:11:33 +00:00
Monis Khan
bff6ce4a38
ForbiddenStatusError: make linter happy on error construction
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-08-05 10:50:51 -04:00
杨军10092085
56bbae4807 Updated incorrect description of persistentVolumeClaimRetentionPolicy 2024-08-05 21:30:25 +08:00
Stephen Kitt
f4ddb44c36
Handle all mock header generation with mockery
mockery is set up to generate headers in all the mocks it produces, so
the separate header generation in update-mocks.sh is no longer useful
(and leads to duplicate headers in three cases). This removes the
relevant parts of the shell script.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-08-05 11:19:37 +02:00
SataQiu
506d5c8966 kubeadm: add a validation warning when the certificateValidityPeriod is more than the caCertificateValidityPeriod 2024-08-05 16:15:24 +08:00