Commit Graph

121207 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
0a162a9cd2
Merge pull request #123263 from pohly/lint-error-wrapping
golangci-lint: add hints for error wrapping
2024-02-13 23:40:42 -08:00
Patrick Ohly
008b075b46 DRA: fix data race in resourceclaim.Lookup
This gets uses concurrently as seen by a data race reported when running
integration tests with race detection enabled. All writes would have written
the same value, but it is a race nonetheless.
2024-02-14 08:14:47 +01:00
Akihiro Suda
9c726b015c
agnhost: v2.47
agnhost was updated to v2.46 in PR 123258, but the image was not
published due to the failue of `post-kubernetes-push-e2e-agnhost-test-images`
(issue 123266).

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 15:11:31 +09:00
Kubernetes Release Robot
2383fbe53a CHANGELOG: Update directory for v1.30.0-alpha.2 release 2024-02-14 05:11:17 +00:00
Kubernetes Prow Robot
14f8f5519d
Merge pull request #121719 from ruiwen-zhao/metric-size
Add image pull duration metric with bucketed image size
2024-02-13 16:23:50 -08:00
Monis Khan
b8a59346fe
test/oidc: extract key type to allow testing different algs
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-13 17:05:33 -05:00
Alexander Zielenski
b7e70f0e00 update-vendor after package rename 2024-02-13 13:06:39 -08:00
Alexander Zielenski
3094395fa7 bugfix: avoid NPE possibility by making composition environment global 2024-02-13 13:06:39 -08:00
Alexander Zielenski
18fbc48b01 refactor: implement VAP off of policy plugin fw 2024-02-13 13:06:39 -08:00
Alexander Zielenski
a6366573d5 refactor: create generic policy plugin type similar to webhook 2024-02-13 13:06:39 -08:00
Kubernetes Prow Robot
7ec1a89a50
Merge pull request #123270 from AkihiroSuda/fix-123266
image-util.sh: fix `gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list`
2024-02-13 10:41:45 -08:00
Anish Ramasekar
19da90d639
Add AudienceMatchPolicy to AuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-13 09:50:00 -08:00
Kubernetes Prow Robot
5031ae1159
Merge pull request #123249 from humblec/sidecar-snapshotter
make use of latest snapshot controller version v6.3.3 in the deployment
2024-02-13 09:33:26 -08:00
Kubernetes Prow Robot
79e11fe563
Merge pull request #122703 from TommyStarK/fix/dra-manager-should-timeout
dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake
2024-02-13 09:33:17 -08:00
Kubernetes Prow Robot
bd0e1e2d9e
Merge pull request #121554 from kaisoz/fix-job-controller-panics
Check if time is nil before logging
2024-02-13 09:33:04 -08:00
Akihiro Suda
6ff675310c
image-util.sh: fix gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list
Fix issue 123266

> CI: `post-kubernetes-push-e2e-agnhost-test-images` is failing
> (`gcr.io/k8s-staging-e2e-test-images/agnhost:2.46-linux-amd64 is a manifest list`)

To avoid creating a manifest list with the recent version of buildx,
`--provenance=false --sbom=false` has to be specified.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 01:37:05 +09:00
Patrick Ohly
39606af8c3 golangci-lint: optionally skip it during "make verify"
The pull-kubernetes-verify job is going to use this to run the base
verify-golangci.sh only in the pull-kubernetes-verify-lint job.
2024-02-13 17:35:15 +01:00
Kubernetes Prow Robot
498f02d18c
Merge pull request #123202 from kannon92/kevin-sig-node-reviewer
self nominate to be a sig-node reviewer
2024-02-13 08:28:56 -08:00
Kubernetes Prow Robot
7abb063b42
Merge pull request #123179 from aramase/aramase/f/encryption_config_reload_metric
Add `apiserver_encryption_config_controller_automatic_reloads_total` metric and deprecate success/failure counter
2024-02-13 08:28:47 -08:00
Kubernetes Prow Robot
c3b2295c3a
Merge pull request #123258 from AkihiroSuda/agnhost-stress
agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
2024-02-13 07:24:35 -08:00
Akihiro Suda
7ee89440c3
agnhost: v2.46
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:52 +09:00
Akihiro Suda
07c701fecb
agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
Merge vishh/stress@eab4e3384b into
agnhost.

Old usage: `stress -mem-alloc-size 12Mi -mem-alloc-sleep 10s -mem-total 4Gi`
New usage: `agnhost stress --mem-alloc-size 12Mi --mem-alloc-sleep 10s --mem-total 4Gi`

This is a part of the steps to migrate from legacy Schema 1 images
(issue 123146)

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:05 +09:00
Kubernetes Prow Robot
5bf23121cc
Merge pull request #123262 from cpanato/update-images
update images to have the full semver in the tag
2024-02-13 06:05:50 -08:00
Patrick Ohly
8876b68a60 golangci-lint: add hints for error wrapping
Wrapping errors may or may not be the right thing to do (see
https://go.dev/blog/go1.13-errors#whether-to-wrap and the discussion in
https://github.com/kubernetes/kubernetes/issues/123234). But developers should
at least think about it, so let's emit linter hints for it: the golangci-lint
config by default enables it for go-errorlint, just not the linter itself, so
we just need to add it for the "hints" config.

Direct error comparisons and assertions also get checked. Those are typically
something that should be replaced by errors.Is and errors.As, but as the
existing code often doesn't do that, let's also treat those as just hints.
2024-02-13 14:12:04 +01:00
cpanato
8e2c1b559a
update images to have the full semver in the tag
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-13 14:04:29 +01:00
Stephen Kitt
1b1b902f81
codegen: don't nuke files if only verifying
The code generation tools support verification only with the
--verify-only option, but this now fails because the files are nuked
ahead of time.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-02-13 13:38:05 +01:00
Patrick Ohly
e53ac42633 e2e labels: add placeholder docs for existing items
Adding a doc comment for all existing items makes it more obvious that new
items should be documented more carefully. It also has the welcome side effect
that each item gets indented independently from the others.
2024-02-13 11:57:36 +01:00
Patrick Ohly
445443bd8a e2e labels: ensure that the lists remain sorted
Adding new entries at the bottom is tempting, but increases the risk of merge
conflicts between unrelated PRs. Let's use alphabetic order instead.
2024-02-13 11:51:45 +01:00
Akihiro Suda
a834bd84b5
cri-api: KEP-3857: Recursive Read-only (RRO) mounts
This commit modifies the following files:

- `staging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.proto`
- `staging/src/k8s.io/cri-api/pkg/errors/errors.go`

Other changes were auto-generated by running `make update`.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 16:14:22 +09:00
Anish Ramasekar
77241d3125
Add apiserver_encryption_config_controller_automatic_reloads_total
metric

- Adds `apiserver_encryption_config_controller_automatic_reloads_total`
  metric with status label for encryption config reload success/failure.
- Deprecated `apiserver_encryption_config_controller_automatic_reload_failures_total` and `apiserver_encryption_config_controller_automatic_reload_success_total`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 21:47:46 -08:00
Kubernetes Prow Robot
5909bd2ddf
Merge pull request #123251 from aramase/aramase/ci/debug_kms_job
ci: bump kind to latest for kms jobs
2024-02-12 20:40:11 -08:00
Kubernetes Prow Robot
c93c53ce24
Merge pull request #123254 from liggitt/revert-copy-test
Revert "kubeadm: increase ut coverage for app/util"
2024-02-12 18:17:09 -08:00
Jordan Liggitt
4ae2b3f75f
Revert "kubeadm: increase ut coverage for app/util"
This reverts commit 36904475db.
2024-02-12 20:13:30 -05:00
Anish Ramasekar
0e6409873a
remove --v arg from kubetest2-tester-ginkgo test args
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-13 00:02:49 +00:00
Anish Ramasekar
7dd624d344
ci: bump kind to latest for kms jobs
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 23:01:50 +00:00
Kubernetes Prow Robot
3bf9477b52
Merge pull request #122472 from pacoxu/flowcontrolv1
flowcontrol: set the serialization version to v1
2024-02-12 13:17:48 -08:00
Humble Chirammal
5b899d9303 make use of latest snapshot controller version v6.3.3 in the deployment
Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
2024-02-13 01:53:50 +05:30
Alexander Zielenski
d697f43d73 refactor: move matching logic into parent policy folder 2024-02-12 10:58:25 -08:00
Alexander Zielenski
8b14116509 refactor: move vap into parent policy folder
also renames to remove stutter

comment
2024-02-12 10:58:24 -08:00
Alexander Zielenski
8b26b6eec1 refactor: move celmetrics close to its usage in vap
does not need to be accessed from anywhere else, and removed an excessive lonesome `cel` pkg with just the metrics
2024-02-12 10:58:24 -08:00
Kubernetes Prow Robot
015e76aa24
Merge pull request #122846 from marosset/cri-stats-windows-fix
[KEP-2371] Fixing bug with windows criStatsProvider sometimes not reporting AvailableBytes correctly
2024-02-12 10:57:28 -08:00
Mark Rossetti
5ba3883be0
Adding unit test for makeWinContainerStats
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2024-02-12 09:56:58 -08:00
Kubernetes Prow Robot
7bea14097b
Merge pull request #122612 from mtardy/remove-scdeny
auth: remove SecurityContextDeny admission plugin
2024-02-12 08:37:13 -08:00
Kubernetes Prow Robot
e51e3c74f7
Merge pull request #122152 from pohly/client-go-event-context-fix
client-go events: support context.Background() as context
2024-02-12 06:48:06 -08:00
Akihiro Suda
5c825d8a22
core/v1: remove comment about non-existing constants
`NodeReachable`, `NodeLive`, `NodeSchedulable`, and `NodeRunnable` are mentioned
as "built-in set of conditions" but some of them do not exist in the current API.

Updated `pkgs/apis/core/types.go` too for consistency.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-12 23:16:43 +09:00
Kubernetes Prow Robot
73f19e4c01
Merge pull request #123235 from cpanato/update-bot
Update publishing-bot rules to Go 1.21.7
2024-02-11 09:11:02 -08:00
cpanato
a8abed8015
Update publishing-bot rules to Go 1.21.7
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-11 15:09:41 +01:00
Patrick Ohly
da0c9a93ae scheduler_perf: use dynamic client to create arbitrary objects
With a dynamic client and a rest mapper it is possible to load arbitrary YAML
files and create the object defined by it. This is simpler than adding specific
Go code for each supported type.

Because the version now matters, the incorrect version in the DRA YAMLs were
found and fixed.
2024-02-11 10:51:38 +01:00
Patrick Ohly
c46ae1b26a scheduler_perf: use ktesting.TContext + staging StartTestServer
ktesting.TContext combines several different interfaces. This makes the code
simpler because less parameters need to be passed around.

An intentional side effect is that the apiextensions client interface becomes
available, which makes it possible to use CRDs. This will be needed for future
DRA tests.

Support for CRDs depends on starting the apiserver via
k8s.io/kubernetes/cmd/kube-apiserver/app/testing because only that enables the
CRD extensions. As discussed on Slack, the long-term goal is to replace the
in-tree StartTestServer with the one in staging, so this is going in the right
direction.
2024-02-11 10:51:38 +01:00
Patrick Ohly
63aa261583 ktesting: add TContext
The new TContext interface combines a normal context and the testing interface,
then adds some helper methods. The context gets canceled when the test is done,
but that can also be requested earlier via Cancel.

The intended usage is to pass a single `tCtx ktesting.TContext` parameter
around in all helper functions that get called by a unit or integration test.

Logging is also more useful: Log[f] and Fatal[f] output is prefixed with
"[FATAL] ERROR: " to make it stand out more from regular log output.

If this approach turns out to be useful, it could be extended further (for
example, with a per-test timeout) and might get moved to a staging repository
to enable usage of it in other staging repositories.

To allow other implementations besides testing.T and testing.B, a custom
ktesting.TB interface gets defined with the methods expected from the
actual implementation. One such implementation can be ginkgo.GinkgoT().
2024-02-11 10:51:38 +01:00