121665 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Peter Hunt	646d464203	e2e_node: use kubelet_exec_t instead of bin_t for kubelet ... as bin_t isn't powerful enough, and we run into a wack-a-mole situation making bin_t powerful enough for the tests Signed-off-by: Peter Hunt <pehunt@redhat.com>	2024-03-05 13:39:52 -05:00
Kubernetes Prow Robot	791fd50eeb	Merge pull request #123114 from bzsuni/cleanup/npd/v0.8.15 ... Bump npd from v0.8.13 to v0.8.16	2024-03-05 05:46:42 -08:00
Kubernetes Prow Robot	a33f8b8211	Merge pull request #122259 from pacoxu/enlarge-pod-delete-timeout ... use e2e f.Timeouts.PodDelete instead of 1 minute	2024-03-05 05:46:29 -08:00
Kubernetes Prow Robot	777070c9a5	Merge pull request #123702 from p0lyn0mial/upstream-clean-up-after-123190 ... storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed	2024-03-05 04:41:15 -08:00
Kubernetes Prow Robot	13f40e9759	Merge pull request #123686 from kerthcet/fix/flaky-test-on-multi-profile ... [Scheduler] Fix flaky test on multi profiles waitingPods	2024-03-05 04:41:09 -08:00
Kubernetes Prow Robot	d826407152	Merge pull request #122653 from ardaguclu/interactive-delete-e2e-test ... Add e2e test for kubectl interactive delete	2024-03-05 03:08:59 -08:00
Kubernetes Prow Robot	835ad2bccd	Merge pull request #120346 from ardaguclu/custom-debug-profile ... kubectl debug: Add custom debug profiles on top of static profiles	2024-03-05 03:08:45 -08:00
Lukasz Szaszkiewicz	221ad9f7c2	storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed	2024-03-05 10:23:23 +01:00
kerthcet	5b072a59a2	Fix flaky test on multi profiles waiting pod ... Signed-off-by: kerthcet <kerthcet@gmail.com>	2024-03-05 14:54:33 +08:00
Kubernetes Prow Robot	dc3f5ec6cc	Merge pull request #112957 from mxpv/log-dir ... Allow changing pod log directory	2024-03-04 21:07:06 -08:00
Arda Güçlü	af2dadcb18	Add custom debug profiles on top of static profiles ... This PR adds `custom` flag to let user customizes debug resources. `custom` flag accepts partial container spec in json format.	2024-03-05 07:47:41 +03:00
Kubernetes Prow Robot	50f4b1ea47	Merge pull request #123568 from enj/enj/i/jwt_username_required ... jwt: fail on empty username via CEL expression	2024-03-04 20:07:33 -08:00
Kubernetes Prow Robot	26600b17ab	Merge pull request #123561 from enj/enj/i/validate_jwt_sa_iss ... Prevent conflicts between service account and jwt issuers	2024-03-04 20:07:24 -08:00
Kubernetes Prow Robot	a76a3e031f	Merge pull request #123487 from gauravkghildiyal/kep-4444 ... Introduce trafficDistribution field for Kubernetes Services	2024-03-04 20:07:15 -08:00
Kubernetes Prow Robot	229ebabc0a	Merge pull request #123336 from HyunSu1768/hyunsu1768/use-switch-cases ... Refactoring to encourage use of switch case	2024-03-04 20:07:06 -08:00
Kubernetes Prow Robot	0bcf6e3dde	Merge pull request #123679 from seans3/remotecommand-extend-deadlines ... Extend deadlines to one minute	2024-03-04 18:38:32 -08:00
Kubernetes Prow Robot	699984f25a	Merge pull request #123641 from liggitt/authz-config-beta-gate ... Promote StructuredAuthorizationConfiguration feature gate to beta	2024-03-04 18:38:23 -08:00
Kubernetes Prow Robot	5b6d8a4293	Merge pull request #123532 from serathius/separate-rpc ... Move cacher watch to separate rpc preventing starvation	2024-03-04 18:38:14 -08:00
Kubernetes Prow Robot	439f7df65b	Merge pull request #122320 from armstrongli/master ... allow service NodePort to be updated to 0 in case AllocateLoadBalance…	2024-03-04 18:38:05 -08:00
bzsuni	9ac9fdac8f	Bump npd from v0.8.13 to v0.8.16 ... Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>	2024-03-05 09:30:28 +08:00
Kubernetes Prow Robot	6929a11f69	Merge pull request #123481 from sanposhiho/mindomain-stable ... graduate MinDomainsInPodTopologySpread to stable	2024-03-04 17:18:53 -08:00
Kubernetes Prow Robot	f745503112	Merge pull request #123413 from seans3/tunneling-spdy-websockets ... PortForward: Tunnel SPDY through WebSockets	2024-03-04 17:18:44 -08:00
Kubernetes Prow Robot	e4ee7b005c	Merge pull request #123323 from gjkim42/add-ValidateInitContainerStateTransition ... Validate restartable init container state transition	2024-03-04 16:21:30 -08:00
Kubernetes Prow Robot	1c789a9d46	Merge pull request #122422 from neolit123/1.30-update-hostaliases-note ... core/v1: remove note about hostAliases not working with hostNetwork	2024-03-04 16:21:21 -08:00
Gaurav Ghildiyal	ec6fd2befa	Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field	2024-03-04 15:40:22 -08:00
Kubernetes Prow Robot	46a2137c1b	Merge pull request #123639 from liggitt/authz-metrics ... Add authorization webhook duration/count/failopen metrics	2024-03-04 14:09:30 -08:00
Sean Sullivan	b04d1177ef	extend deadlines to one minute	2024-03-04 11:31:56 -08:00
Kubernetes Prow Robot	320e288b5e	Merge pull request #123628 from Jefftree/agg-conformance ... promote aggregated discovery conformance tests	2024-03-04 11:23:59 -08:00
Kubernetes Prow Robot	6c8dc1d1ed	Merge pull request #123609 from veshij/fix ... [kubernetes/scheduler] use lockless diagnosis collection in findNodes…	2024-03-04 11:23:50 -08:00
Kubernetes Prow Robot	4ed7f6b4c4	Merge pull request #123583 from saschagrunert/image-id-container-status ... Add `image_id` to CRI `ContainerStatus` message	2024-03-04 11:23:41 -08:00
Kubernetes Prow Robot	599d92f1fb	Merge pull request #123190 from padlar/add-apiserver-wait-cache-metric ... Add apiserver_watch_cache_read_wait metric to cache refresh time	2024-03-04 11:23:32 -08:00
Sean Sullivan	3d56ff21fd	adds comments to tunnelingResponseWriter	2024-03-04 11:10:30 -08:00
Sean Sullivan	33af937b4a	re-write fallback dialer unit test	2024-03-04 11:10:30 -08:00
Sean Sullivan	e8bbb221d3	removes extra upgrade aware proxy logging; returns tunneling connection close error	2024-03-04 11:10:30 -08:00
Jordan Liggitt	2443b3fa69	Fix headerInterceptingConn handling	2024-03-04 11:10:30 -08:00
Sean Sullivan	9e15462843	adds return context in RunPortForward()	2024-03-04 11:10:30 -08:00
Sean Sullivan	8b447d8c97	portforward: tunnel spdy through websockets	2024-03-04 11:10:30 -08:00
Jordan Liggitt	79b344d85e	Add authorization webhook duration/count/failopen metrics	2024-03-04 14:01:15 -05:00
Kubernetes Prow Robot	89cbd94e68	Merge pull request #123593 from giuseppe/userns-use-kubelet-user-mappings ... KEP-127: kubelet: honor kubelet user mappings	2024-03-04 10:24:52 -08:00
Kubernetes Prow Robot	d34fbeb0a3	Merge pull request #123446 from linxiulei/hit_cache ... Hit APIServer cache when testing healthiness	2024-03-04 10:24:45 -08:00
Marek Siarkowicz	1cf4cec449	Test that separation of streams work by using progress notifies	2024-03-04 19:02:04 +01:00
Monis Khan	8345ad0bac	jwt: fail on empty username via CEL expression ... Signed-off-by: Monis Khan <mok@microsoft.com>	2024-03-04 12:51:19 -05:00
Gaurav Ghildiyal	606cae9b47	Add new metric servicesCountByTrafficDistribution	2024-03-04 09:33:40 -08:00
Monis Khan	05e1eff793	Prevent conflicts between service account and jwt issuers ... Signed-off-by: Monis Khan <mok@microsoft.com>	2024-03-04 11:40:02 -05:00
Kubernetes Prow Robot	9043ce05c1	Merge pull request #123667 from jsafrane/selinux-metrics-access-mode ... Add label with access mode to SELinux metrics	2024-03-04 08:25:39 -08:00
Jan Safranek	57d1b68dc2	Remove deprecated sets.String	2024-03-04 14:33:04 +01:00
Kubernetes Prow Robot	55d1518126	Merge pull request #123588 from pohly/scheduler-perf-any-cleanup ... scheduler_perf: automatically delete created objects	2024-03-04 04:49:12 -08:00
Jan Safranek	c4163a9cb8	Add label with access mode to SELinux metrics ... In the KEP 1710 we promised to have all SELinux metrics with access mode label, so cluster admin is able to distinguish when RWOP volumes are failing to mount (-> SELinuxMountReadWriteOncePod feature gate must be disabled) or volumes with any other access modes are failing (-> SELinuxMount feature gate must be disabled). Adding the label to kubelet is quite straightforward, there were some changes needed in the e2e test. Now grabMetrics() collects values of all SELinux related metrics with all labels. It only skips unrelated volume plugins. And waitForMetricIncrease gets metric with all labels on input, so it can check that say RWOP metric increased and RWX one did not.	2024-03-04 13:16:56 +01:00
Marek Siarkowicz	31d404b182	Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior	2024-03-04 12:51:06 +01:00
Kubernetes Prow Robot	a4eaf6e120	Merge pull request #123660 from xigang/cacher/watch ... cleanup: if triggerValue has a value fast break	2024-03-04 01:17:02 -08:00