github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-17 07:39:22 +00:00
Code Issues Projects Releases Wiki Activity
120,088 Commits 42 Branches 8,000 Tags 1.3 GiB
6383b50ed9
Commit Graph

120088 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
eb6feceb47
Merge pull request #121768 from borg-land/deadcode 
test: introduce a Feature label for skipping KubeUp specific tests
 2023-11-08 18:05:15 +01:00
upodroid
76277f693d create a new KubeUp feature label for tests marked for removal 2023-11-08 09:43:12 -06:00
HirazawaUi
3fb16abfca make the decode function respect the timeout context 2023-11-08 23:39:10 +08:00
cpanato
9e5b8402bb
update go.mod 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 09:32:17 -06:00
21kyu
fec63d5ea0 fix: use generic set in pkg/util/iptables 2023-11-08 15:21:59 +00:00
cpanato
88e124ecaa
[go] Bump images, dependencies and versions to go 1.21.4 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 08:25:30 -06:00
carlory
ae24846c48 add comments for switch of syncUnboundClaim 2023-11-08 17:15:27 +08:00
Peter Schuurman
e4fdc96c18 Pass External Storage label parameters as individual arguments in framework variadic function 2023-11-07 22:17:36 -08:00
xin.li
29335763fe kubeadm: increase ut coverage app/upgrade/versiongetter 
Signed-off-by: xin.li <xin.li@daocloud.io>
 2023-11-08 09:45:42 +08:00
Kubernetes Prow Robot
e4b74dd12f
Merge pull request #121765 from mimowo/ready-pods-stable-api 
Fix API comment for the Job ready field
 2023-11-07 23:52:12 +01:00
Kubernetes Prow Robot
0193fae084
Merge pull request #121764 from mimowo/backoff-limit-per-index-beta-api 
Fix API comment for the FailIndex Job pod failure policy action
 2023-11-07 23:52:03 +01:00
Daman Arora
f3dad97704 self nominate aroradaman as sig- 
proxy-reviewer

Signed-off-by: Daman Arora <aroradaman@gmail.com>
 2023-11-08 01:52:59 +05:30
Kubernetes Prow Robot
f927d5b385
Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed 
fix test store delete collection function failed
 2023-11-07 19:36:39 +01:00
Kevin Hannon
2645b22003
Self nominate Kevin Hannon for reviewer for job controller 
I have been lead the PodReplacementPolicy KEP for alpha and I helped review/fix some issues in beta.  

https://github.com/kubernetes/kubernetes/pulls?q=+is%3Apr+reviewed-by%3Akannon92+label%3Asig%2Fapps+

I have also been an active reviewer and helped GA job tracking last release.  I hope to continue reviewing Job related code.
 2023-11-07 13:21:02 -05:00
HirazawaUi
b12db6d9b5 fix test store delete collection function failed 2023-11-08 00:34:53 +08:00
Michal Wozniak
9d5b2a4476 Fix API comment for the Job ready field 2023-11-07 07:38:51 +01:00
Kubernetes Prow Robot
246d363ea4
Merge pull request #121700 from kannon92/fix-summary-more 
missed a few summary upper limits for major page faults
 2023-11-06 20:13:04 +01:00
Michael Taufen
ab1eb8ff24 Add comment in noderestriction on Node-bound-tokens 
Explains why we don't explicitly prevent cross-node bindings in noderestriction (it's already implicitly enforced).
 2023-11-06 18:04:16 +00:00
Michal Wozniak
1395e2e02c Fix API comment for the FailIndex Job pod failure policy action 2023-11-06 17:47:13 +01:00
Jordan Liggitt
ed8d10f660
Update sig-auth aliases 2023-11-06 09:33:00 -06:00
Lars Ekman
d78a794be2 Remove unnecessary sort in kube-proxy ipvs 
Sorting of endpoints before adding them to ipvs is not
needed, nor wanted. It just takes time
 2023-11-06 14:57:18 +01:00
Kubernetes Prow Robot
cf4d031dbb
Merge pull request #121743 from neolit123/1.29-super-admin-conf 
kubeadm: ensure the kubelet and kube-apiserver wait checks go first
 2023-11-06 14:24:01 +01:00
Lubomir I. Ivanov
6dc11c1f21 kubeadm: ensure the kubelet and kube-apiserver wait checks go first 
The addition of the "super-admin.conf" functionality required
init.go's Client() to create RBAC rules on its first creation.

However this created a problem with the "wait-control-plane" phase
of "kubeadm init" where a client is needed to connect to the
API server Discovery API's "/healthz" endpoint. The logic that ensures
the RBAC became the step where the API server wait was polled for.

To avoid this, introduce a new InitData function ClientWithoutBootstrap.
In "wait-control-plane" use this client, which has no permissions
(anonymous), but is sufficient to connect to the "/healthz".

Pending changes here would be:
- Stop using the "/healthz", instead a regular REST client from
the kubelet cert/key can be constructed.
- Make the wait for kubelet / API server linear (not in go routines).
 2023-11-06 12:43:20 +02:00
weizhichen
b91f07008c add ut 2023-11-06 08:20:42 +00:00
xiegangpeng
c26bb7eb85 update util/sets to use standard package cmp 2023-11-06 10:59:46 +08:00
kunwuluan
a00a610d15
move SidecarContainers featureGate checking 
to PreFilter

Signed-off-by: KunWuLuan <kunwuluan@gmail.com>
 2023-11-06 10:46:52 +08:00
tao.yang
bb315d1339 bump runc to v1.1.10 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-11-06 10:42:39 +08:00
kerthcet
f77a4543d1 Unregister events in schedulingGates plugin 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2023-11-06 10:01:13 +08:00
tao.yang
6cca6e0524 bump kube-dns to v1.22.27 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-11-06 09:57:44 +08:00
Kubernetes Prow Robot
24e6b03780
Merge pull request #121708 from aravindhp/add-azure-framework-ssh-provider 
framework: add SSH support for Azure
 2023-11-04 17:19:13 +01:00
Dan Winship
e48aa09340 Make verify-typecheck.sh only check valid targets for a platform 
e.g., don't try to compile kube-proxy on darwin, since we don't build
it there anyway.
 2023-11-04 10:24:19 -04:00
Paco Xu
70c9eefff3 add --sbom=false --provenance=false for windows servercore cache build 2023-11-04 21:11:05 +08:00
Kubernetes Prow Robot
22866ca5eb
Merge pull request #121034 from alexzielenski/apiserver/apiextensions/ratcheting-oldself-create 
KEP-4008: CRDValidationRatcheting: Add support for optional `oldSelf`
 2023-11-04 02:57:46 +01:00
Kubernetes Prow Robot
9f319c3206
Merge pull request #113374 from ahmedtd/kep-3257-projected-types 
Implement ClusterTrustBundlePEM projected volume
 2023-11-04 01:44:56 +01:00
Kubernetes Prow Robot
953afbb328
Merge pull request #121193 from sohankunkerkar/kubelet-config-dir 
Retarget drop-in kubelet configuration dir feature to Alpha
 2023-11-03 23:59:29 +01:00
Alexander Zielenski
42a70cdbd1 codegen 2023-11-03 15:34:13 -07:00
Alexander Zielenski
bba0c9a81e validate defaults across an update from nil to ensure create ratcheting rules work 2023-11-03 15:34:13 -07:00
Alexander Zielenski
eef1515815 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true 2023-11-03 15:34:13 -07:00
Alexander Zielenski
5edb27aa38 ratcheting-cel: add optionalOldSelf field 2023-11-03 15:23:23 -07:00
Aravindh Puthiyaparambil
6b6be38896
test: Fix NodeLogQuery tests 
- Remove redundant tests
- Fix formatting of the query command by using fmt.Sprintf to
  prevent spurious characters from being introduced
- Fix running of the journalctl command on the node by add the
  default options
- Restrict running the tests on a single node
 2023-11-03 15:21:49 -07:00
Sohan Kunkerkar
ad7b9b56f5 test/e2e_node: add e2e test for Kubeletconfig drop-in dir 
Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
Co-authored-by: Peter Hunt <pehunt@redhat.com>
 2023-11-03 17:49:22 -04:00
Sohan Kunkerkar
ee5578be52 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set 
This commit resolves an issue where certain KubeletConfig fields, specifically:
- FileCheckFrequency
- VolumeStatsAggPeriod
- EvictionPressureTransitionPeriod
- Authorization.Mode
- EvictionHard
were inadvertently overridden when not explicitly set in drop-in configs. To retain the
original values if they were absent in the drop-in configs, mergeKubeletConfigurations
uses a JSON patch merge strategy to selectively merge configurations. It prevents essential
configuration settings from being overridden, ensuring a more predictable behavior for users.

Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
Co-authored-by: Peter Hunt <pehunt@redhat.com>
 2023-11-03 17:48:29 -04:00
Kubernetes Prow Robot
263ab254ef
Merge pull request #121715 from pohly/scheduler-logging-with-instrumentation 
scheduler: fix performance regression at -v3 + contextual logging
 2023-11-03 21:08:25 +01:00
Taahir Ahmed
bd6431323a ClusterTrustBundle projection: e2e test 2023-11-03 12:08:35 -07:00
Taahir Ahmed
96e610ac18 ClusterTrustBundle: Enforce max size during validation 2023-11-03 11:40:49 -07:00
Taahir Ahmed
1ebe5774d0 kubelet: Support ClusterTrustBundlePEM projections 2023-11-03 11:40:48 -07:00
Taahir Ahmed
e83baddbb1 LRUExpireCache: Allow removing multiple keys under lock 2023-11-03 11:40:48 -07:00
Taahir Ahmed
599fdb7add Regenerate for ClusterTrustBundlePEM projected volume API 2023-11-03 11:40:48 -07:00
Taahir Ahmed
ecfdc8fda5 Define ClusterTrustBundlePEM projected volume 
This commit defines the ClusterTrustBundlePEM projected volume types.
These types have been renamed from the KEP (PEMTrustAnchors) in order to
leave open the possibility of a similar projection drawing from a
yet-to-exist namespaced-scoped TrustBundle object, which came up during
KEP discussion.

* Add the projection field to internal and v1 APIs.
* Add validation to ensure that usages of the project must specify a
  name and path.
* Add TODO covering admission control to forbid mirror pods from using
  the projection.

Part of KEP-3257.
 2023-11-03 11:40:48 -07:00
Taahir Ahmed
0fd1362782 ClusterTrustBundles: ClusterTrustBundleProjection feature gate 2023-11-03 11:40:48 -07:00