Commit Graph

120994 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
72c3c7c924
Merge pull request #123282 from enj/enj/i/authn_config_algs
Support all key algs with structured authn config
2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot
0b24b55e7f
Merge pull request #123269 from pohly/lint-skip-in-verify
golangci-lint: optionally skip it during "make verify"
2024-02-14 18:08:18 -08:00
Kubernetes Prow Robot
68bbbd0359
Merge pull request #123300 from antoninbas/nodeipam-controller-remove-unused-field
Remove unused lookupIP field in NodeIPAM Controller struct
2024-02-14 17:00:13 -08:00
Kubernetes Prow Robot
ba450636a4
Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy
Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration
2024-02-14 17:00:04 -08:00
Kubernetes Prow Robot
e305e773bb
Merge pull request #123250 from benluddy/dep-bump-cbor-v2.6.0
Bump github.com/fxamacker/cbor/v2 to v2.6.0.
2024-02-14 15:56:56 -08:00
Kubernetes Prow Robot
8e11104f0b
Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta
KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta
2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot
5b2c919583
Merge pull request #114301 from harshanarayana/kubelet/log-rotate-improvements
kubelet: enable configurable rotation duration and parallel rotate
2024-02-14 15:56:38 -08:00
Kubernetes Prow Robot
145ccf1f13
Merge pull request #123260 from pohly/e2e-tag-docs
e2e: tag documentation + sorting
2024-02-14 14:52:33 -08:00
Kubernetes Prow Robot
684a9975fe
Merge pull request #122919 from alexzielenski/apiserver/policy/mutating-initial
Refactor AdmissionPolicy for code sharing with mutating
2024-02-14 14:52:26 -08:00
Antonin Bas
75a3069294 Remove unused lookupIP field in NodeIPAM Controller struct
I am not sure why this was originally required, but it doesn't seem to
have been used for years.

Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>
2024-02-14 13:28:35 -08:00
Anish Ramasekar
18c563546a
support multiple audiences with jwt authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 10:47:07 -08:00
Kubernetes Release Robot
3cc3b002ba CHANGELOG: Update directory for v1.29.2 release 2024-02-14 18:01:51 +00:00
Kubernetes Release Robot
b202d053fa CHANGELOG: Update directory for v1.26.14 release 2024-02-14 16:07:48 +00:00
Kubernetes Release Robot
cf99360c1f CHANGELOG: Update directory for v1.27.11 release 2024-02-14 15:51:51 +00:00
Kubernetes Release Robot
14045bf340 CHANGELOG: Update directory for v1.28.7 release 2024-02-14 15:49:35 +00:00
Ben Luddy
aac43dc96f
Bump github.com/fxamacker/cbor/v2 to v2.6.0. 2024-02-14 10:09:15 -05:00
Kubernetes Prow Robot
eeefc299e5
Merge pull request #123290 from AxeZhan/122435
Revert "Scheduler first fit"
2024-02-14 06:51:14 -08:00
Monis Khan
b5e0068325
Support all key algs with structured authn config
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-14 09:40:25 -05:00
AxeZhan
630ff96f9d Revert "Scheduler first fit" 2024-02-14 20:43:59 +08:00
Kubernetes Prow Robot
ed84e7f6d3
Merge pull request #123222 from pohly/dra-resurceclaim-lookup-race
DRA: fix data race in resourceclaim.Lookup
2024-02-14 03:24:57 -08:00
Kubernetes Prow Robot
fe9414d86e
Merge pull request #123284 from AkihiroSuda/agnhost
agnhost: v2.47
2024-02-14 01:07:11 -08:00
Kubernetes Prow Robot
0a162a9cd2
Merge pull request #123263 from pohly/lint-error-wrapping
golangci-lint: add hints for error wrapping
2024-02-13 23:40:42 -08:00
Patrick Ohly
008b075b46 DRA: fix data race in resourceclaim.Lookup
This gets uses concurrently as seen by a data race reported when running
integration tests with race detection enabled. All writes would have written
the same value, but it is a race nonetheless.
2024-02-14 08:14:47 +01:00
Akihiro Suda
9c726b015c
agnhost: v2.47
agnhost was updated to v2.46 in PR 123258, but the image was not
published due to the failue of `post-kubernetes-push-e2e-agnhost-test-images`
(issue 123266).

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 15:11:31 +09:00
Kubernetes Release Robot
2383fbe53a CHANGELOG: Update directory for v1.30.0-alpha.2 release 2024-02-14 05:11:17 +00:00
Kubernetes Prow Robot
14f8f5519d
Merge pull request #121719 from ruiwen-zhao/metric-size
Add image pull duration metric with bucketed image size
2024-02-13 16:23:50 -08:00
Monis Khan
b8a59346fe
test/oidc: extract key type to allow testing different algs
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-13 17:05:33 -05:00
Alexander Zielenski
b7e70f0e00 update-vendor after package rename 2024-02-13 13:06:39 -08:00
Alexander Zielenski
3094395fa7 bugfix: avoid NPE possibility by making composition environment global 2024-02-13 13:06:39 -08:00
Alexander Zielenski
18fbc48b01 refactor: implement VAP off of policy plugin fw 2024-02-13 13:06:39 -08:00
Alexander Zielenski
a6366573d5 refactor: create generic policy plugin type similar to webhook 2024-02-13 13:06:39 -08:00
Kubernetes Prow Robot
7ec1a89a50
Merge pull request #123270 from AkihiroSuda/fix-123266
image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list`
2024-02-13 10:41:45 -08:00
Anish Ramasekar
19da90d639
Add AudienceMatchPolicy to AuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-13 09:50:00 -08:00
Kubernetes Prow Robot
5031ae1159
Merge pull request #123249 from humblec/sidecar-snapshotter
make use of latest snapshot controller version v6.3.3 in the deployment
2024-02-13 09:33:26 -08:00
Kubernetes Prow Robot
79e11fe563
Merge pull request #122703 from TommyStarK/fix/dra-manager-should-timeout
dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake
2024-02-13 09:33:17 -08:00
Kubernetes Prow Robot
bd0e1e2d9e
Merge pull request #121554 from kaisoz/fix-job-controller-panics
Check if time is nil before logging
2024-02-13 09:33:04 -08:00
Akihiro Suda
6ff675310c
image-util.sh: fix gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list
Fix issue 123266

> CI: `post-kubernetes-push-e2e-agnhost-test-images` is failing
> (`gcr.io/k8s-staging-e2e-test-images/agnhost:2.46-linux-amd64 is a manifest list`)

To avoid creating a manifest list with the recent version of buildx,
`--provenance=false --sbom=false` has to be specified.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 01:37:05 +09:00
Patrick Ohly
39606af8c3 golangci-lint: optionally skip it during "make verify"
The pull-kubernetes-verify job is going to use this to run the base
verify-golangci.sh only in the pull-kubernetes-verify-lint job.
2024-02-13 17:35:15 +01:00
Kubernetes Prow Robot
498f02d18c
Merge pull request #123202 from kannon92/kevin-sig-node-reviewer
self nominate to be a sig-node reviewer
2024-02-13 08:28:56 -08:00
Kubernetes Prow Robot
7abb063b42
Merge pull request #123179 from aramase/aramase/f/encryption_config_reload_metric
Add `apiserver_encryption_config_controller_automatic_reloads_total` metric and deprecate success/failure counter
2024-02-13 08:28:47 -08:00
Kubernetes Prow Robot
c3b2295c3a
Merge pull request #123258 from AkihiroSuda/agnhost-stress
agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
2024-02-13 07:24:35 -08:00
Akihiro Suda
7ee89440c3
agnhost: v2.46
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:52 +09:00
Akihiro Suda
07c701fecb
agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
Merge vishh/stress@eab4e3384b into
agnhost.

Old usage: `stress -mem-alloc-size 12Mi -mem-alloc-sleep 10s -mem-total 4Gi`
New usage: `agnhost stress --mem-alloc-size 12Mi --mem-alloc-sleep 10s --mem-total 4Gi`

This is a part of the steps to migrate from legacy Schema 1 images
(issue 123146)

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:05 +09:00
Kubernetes Prow Robot
5bf23121cc
Merge pull request #123262 from cpanato/update-images
update images to have the full semver in the tag
2024-02-13 06:05:50 -08:00
Patrick Ohly
8876b68a60 golangci-lint: add hints for error wrapping
Wrapping errors may or may not be the right thing to do (see
https://go.dev/blog/go1.13-errors#whether-to-wrap and the discussion in
https://github.com/kubernetes/kubernetes/issues/123234). But developers should
at least think about it, so let's emit linter hints for it: the golangci-lint
config by default enables it for go-errorlint, just not the linter itself, so
we just need to add it for the "hints" config.

Direct error comparisons and assertions also get checked. Those are typically
something that should be replaced by errors.Is and errors.As, but as the
existing code often doesn't do that, let's also treat those as just hints.
2024-02-13 14:12:04 +01:00
cpanato
8e2c1b559a
update images to have the full semver in the tag
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-13 14:04:29 +01:00
Patrick Ohly
e53ac42633 e2e labels: add placeholder docs for existing items
Adding a doc comment for all existing items makes it more obvious that new
items should be documented more carefully. It also has the welcome side effect
that each item gets indented independently from the others.
2024-02-13 11:57:36 +01:00
Patrick Ohly
445443bd8a e2e labels: ensure that the lists remain sorted
Adding new entries at the bottom is tempting, but increases the risk of merge
conflicts between unrelated PRs. Let's use alphabetic order instead.
2024-02-13 11:51:45 +01:00
Anish Ramasekar
77241d3125
Add apiserver_encryption_config_controller_automatic_reloads_total
metric

- Adds `apiserver_encryption_config_controller_automatic_reloads_total`
  metric with status label for encryption config reload success/failure.
- Deprecated `apiserver_encryption_config_controller_automatic_reload_failures_total` and `apiserver_encryption_config_controller_automatic_reload_success_total`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 21:47:46 -08:00
Kubernetes Prow Robot
5909bd2ddf
Merge pull request #123251 from aramase/aramase/ci/debug_kms_job
ci: bump kind to latest for kms jobs
2024-02-12 20:40:11 -08:00