Davanum Srinivas
8703640651
add utility for generating markdown for feature gates
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
fix for review comments
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2025-12-18 22:53:56 -05:00
Kubernetes Prow Robot
430fef557f
Merge pull request #135531 from pohly/golangci-lint-bump
...
golangci-lint: bump to v2.7.1
2025-12-18 07:55:18 -08:00
HirazawaUi
642d96dcb4
clean up unused constant
2025-12-18 19:45:38 +08:00
Kubernetes Prow Robot
34430b9127
Merge pull request #135589 from neolit123/1.36-revert-dynamic-etcd-map
...
kubeadm: revert to using a static list of etcd versions
2025-12-18 03:21:16 -08:00
Patrick Ohly
ad79e479c2
build: remove deprecated '// +build' tag
...
This has been replaced by `//build:...` for a long time now.
Removal of the old build tag was automated with:
for i in $(git grep -l '^// +build' | grep -v -e '^vendor/'); do if ! grep -q '^// Code generated' "$i"; then sed -i -e '/^\/\/ +build/d' "$i"; fi; done
2025-12-18 12:16:21 +01:00
Kubernetes Prow Robot
bb52ae5e24
Merge pull request #135776 from neolit123/1.36-always-retry-on-patch-node-errors
...
kubeadm: always retry Patch() Node API calls
2025-12-18 02:11:01 -08:00
Kubernetes Prow Robot
9618ffd46f
Merge pull request #135773 from neolit123/1.36-remove-ControlPlaneKubeletLocalMode
...
kubeadm: remove the FG ControlPlaneKubeletLocalMode
2025-12-18 02:10:54 -08:00
Kubernetes Prow Robot
1faee42453
Merge pull request #135548 from danwinship/conntrack-setup
...
Move kube-proxy conntrack setup code to pkg/proxy
2025-12-17 23:27:46 -08:00
Kubernetes Prow Robot
43cfcac7cc
Merge pull request #135434 from yliaog/quota_abuse
...
Fixes the loophole that allows users to workaround resource quota set by system admin
2025-12-17 22:35:28 -08:00
Kubernetes Prow Robot
cd48cabb04
Merge pull request #135232 from jsut21/kubelet/healthz-untilwithcontext-126379
...
kubelet: use wait.UntilWithContext for healthz server (structured logging)
2025-12-17 19:59:54 -08:00
yliao
3e34de29c4
fixed the loophole that allows user to get around resource quota set by system admin
2025-12-18 00:56:20 +00:00
Kubernetes Prow Robot
d6c073990b
Merge pull request #134623 from adrianmoisey/service-headless
...
Refactor 'Services should implement service.kubernetes.io/headless' test
2025-12-17 16:26:47 -08:00
Lubomir I. Ivanov
4d11e21fc9
kubeadm: always retry Patch() Node API calls
...
The PatchNodeOnce function has historically exited early
in scanarious when we Get a Node object, but the next Patch
API call on the same Node object fails. This can happen
in setups that are under a lot of resource pressure
or different network timeout scenarious.
Instead of exiting early and allow listing certain errors,
always retry on any Patch error. This aligns with the
general idea that kubeadm retries *all* API calls.
2025-12-16 19:09:01 +01:00
Lubomir I. Ivanov
df44db129b
kubeadm: remove the FG ControlPlaneKubeletLocalMode
...
The FG went GA in 1.35. It can be removed in 1.36.
2025-12-16 17:32:50 +01:00
Lubomir I. Ivanov
05c4e3febe
kubeadm: revert to using a static list of etcd versions
...
The introduction of dynamic keys in the etcd version
map in constants.go introduced a couple of problems:
1. The size of the map could no longer be unit tested
because at UT runtime there was only one key "0".
2. Once a new k8s release branch is cut the version map
has mismatched versions. The latest k8s version mapped to the
future prerelease alpha (placeholder), the previous was the current
WIP release version and the oldest version in the map is the
current stable. This introduces a undesider shift of versions
where we are applying the wrong version to the current WIP
release unless an contrubutor PRs it.
The old static approach on the other hand is safer because
it hardcodes the versions, and the utility function
EtcdSupportedVersion() ensures that we get a relevant etcd
version even if the input k8s MINOR key is out of bonds for the map.
- Revert to using static version in the map.
- Revert the unit test TestEtcdSupportedVersionLength.
- Add additional comments over the map.
2025-12-08 13:40:11 +01:00
bzsuni
2c811fdd3a
etcd: Update etcd to v3.6.6
...
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io >
2025-12-08 05:37:15 +00:00
Angelos Kolaitis
03066850f6
remove TestEtcdSupportedVersionLength, no longer relevant
...
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com >
2025-12-03 13:19:09 +02:00
Angelos Kolaitis
aa54ffa485
fix etcd versions after rotation
...
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com >
2025-12-03 13:15:49 +02:00
Angelos Kolaitis
4a944d1a3f
add skew -2 version in SupportedEtcdVersion
...
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com >
2025-12-03 13:11:10 +02:00
Dan Winship
fe84ab85f1
Move conntrack sysctl setup from cmd/kube-proxy/ to pkg/proxy/conntrack/
...
Eventually this code will be called from the backends themselves.
2025-12-02 11:03:00 -05:00
Dan Winship
d8a481a696
Move setupConntrack from server_linux.go to conntrack.go
2025-12-02 11:02:58 -05:00
Dan Winship
905492223b
Remove workaround for an old bug.
...
Kubernetes no longer supports containerd 1.7, and the workaround is
not needed with containerd 2.x (or cri-o).
2025-12-01 11:02:20 -05:00
Adrian Moisey
002c85b218
Tweak the informer for Services
...
It no longer filters out Services with the v1.IsHeadlessService
label as that is left for EndpointSlices
2025-11-17 08:39:38 +02:00
jsut21
f157114fa9
kubelet: use wait.UntilWithContext for healthz server (issue #126379 )
2025-11-08 16:26:46 +09:00
Kubernetes Prow Robot
173523550a
Merge pull request #135092 from MoonYoung02/kube-proxy-fix-contextual-logging
...
Switch kube-proxy/server.go to context-aware logging APIs (HandleErrorWithContext, UntilWithContext)
2025-11-07 13:18:52 -08:00
Kubernetes Prow Robot
f38a61181c
Merge pull request #133968 from yashsingh74/bump-coredns-1.12.4
...
Update coredns to v1.13.1
2025-11-06 20:38:54 -08:00
Richa Banker
8f2c0a9a60
kube-apiserver: Enable peer proxy and peer-aggregated discovery
...
Wire up peer proxy infrastructure in kube-apiserver:
- Add UnknownVersionInteroperabilityProxy feature gate
- Configure peer proxy with identity lease selectors
- Register CRD and APIService informers with exclusion filters
- Start peer discovery sync and GV cleanup workers
Includes extractors for CRDs and APIServices to identify which
GroupVersions should be excluded from peer discovery.
Part of KEP-4020: Unknown Version Interoperability Proxy
2025-11-06 12:48:19 -08:00
MoonYoung02
f86a456ea3
Switch kube-proxy/server.go to context-aware logging APIs (HandleErrorWithContext, UntilWithContext)
2025-11-07 00:56:29 +09:00
Maciej Skoczeń
9639274676
api: Create Workload API
2025-11-06 09:36:43 +00:00
Kubernetes Prow Robot
50b4bcbab5
Merge pull request #134210 from yliaog/admit_quota
...
DRA extended resource quota
2025-11-06 00:42:53 -08:00
Kubernetes Prow Robot
37934c5c26
Merge pull request #134890 from SataQiu/kubeadm-support-etcd-http-endpoints
...
kubeadm: support specifying HTTP endpoints for external etcd, allowing users to separate gRPC and HTTP traffic for etcd
2025-11-05 22:48:50 -08:00
yliao
870062df4f
adjusts DRA extended resource quota to include devices usages from regular resource claims
2025-11-05 23:24:24 +00:00
Kubernetes Prow Robot
799572b8db
Merge pull request #134711 from mortent/SimpleScoringForPrioritizedList
...
DRA: Add scoring for Prioritized List feature
2025-11-05 12:36:51 -08:00
Kubernetes Prow Robot
189b0052a5
Merge pull request #135100 from HirazawaUi/fix-3257
...
Fix potential dryrun failure when NodeLocalCRISocket reaches GA
2025-11-05 11:26:57 -08:00
Morten Torkildsen
fbfeb33231
DRA: Add scoring for Prioritized List feature
2025-11-05 17:18:38 +00:00
HirazawaUi
79dc7908ff
Fix potential dryrun failure when NodeLocalCRISocket reaches GA
2025-11-05 23:46:03 +08:00
Kubernetes Prow Robot
5fd9cefd95
Merge pull request #134995 from yongruilin/flagz-kk-structure
...
[KEP-4828] Flagz versioned structured response
2025-11-04 19:02:04 -08:00
Kubernetes Prow Robot
c1a6a3ca71
Merge pull request #134152 from pohly/dra-device-taints-1.35
...
DRA: device taints: new ResourceSlice API, new features
2025-11-04 15:32:07 -08:00
Patrick Ohly
f4a453389d
DRA device taint eviction: configurable number of workers
...
It might never be necessary to change the default, but it is hard to be sure.
It's better to have the option, just in case.
2025-11-04 21:57:24 +01:00
yongruilin
2422bc0bb8
feat: Implement structured /flagz endpoint
2025-11-04 19:45:30 +00:00
Kubernetes Prow Robot
a058cf788a
Merge pull request #134624 from yt2985/podcertificates-beta
...
Promote Pod Certificates feature to beta
2025-11-04 11:42:12 -08:00
SataQiu
a079e1ed25
kubeadm: add 'HTTPEndpoints' field to 'ClusterConfiguration.Etcd.ExternalEtcd' that can be used to configure the HTTP endpoints for etcd communication
2025-11-04 22:12:19 +08:00
Lukasz Szaszkiewicz
257ff6edcd
kubelet/app/server_bootstrap_test: fix Test_buildClientCertificateManager
2025-11-04 09:59:11 +01:00
Kubernetes Prow Robot
4e8499740e
Merge pull request #134985 from swatisehgal/node-cm-ctx-logging-migration
...
node: cm: migrate container manager to contextual logging
2025-11-03 09:34:12 -08:00
Kubernetes Prow Robot
5e2ad84f67
Merge pull request #134906 from carlory/fix-kubeadm-3229
...
kubeadm: added container runtime version check to preflight
2025-11-02 23:36:04 -08:00
tinatingyu
59e075e8d3
Promote PodCertificateRequests to v1beta1
2025-11-02 05:33:44 +00:00
Kubernetes Prow Robot
f66d1a9418
Merge pull request #133779 from carlory/kubelet-cleanup-pod-infra-container-image
...
Remove deprecated pod-infra-container-image flag
2025-10-31 10:10:07 -07:00
Kubernetes Prow Robot
299a4fc2d2
Merge pull request #134847 from prometherion/feat/kubeadm-dns-signature
...
refactor(kubeadm): including dns addon version to signature
2025-10-31 03:52:05 -07:00
carlory
b3415bfdfe
kubeadm: added container runtime version check to preflight
...
Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com >
Signed-off-by: carlory <baofa.fan@daocloud.io >
2025-10-31 09:51:01 +08:00
Kubernetes Prow Robot
9efb7ee538
Merge pull request #134313 from richabanker/statusz-structured
...
[KEP:4827] Structured statusz
2025-10-30 13:16:10 -07:00