Commit Graph

120629 Commits

Author SHA1 Message Date
Stephen Kitt
f040d9012c
verify-no-vendor-cycles: set up Go environment
This script relies on Go but doesn't set up the private Go environment
(which ensures that the go command meets k/k's requirements). This
fixes that.

As a drive-by improvement, drop two unnecessary backslashes from
regexes (before / which doesn't need to be escaped).

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2023-11-10 10:58:53 +01:00
vaibhav2107
30dc2f0773 Added Imagefs inodes in default Eviction Hard 2023-11-10 09:49:56 +05:30
Kubernetes Prow Robot
5ce0bd95cc
Merge pull request #121677 from kerthcet/cleanup/remove-evnet
Unregister events in schedulingGates for performance
2023-11-10 05:03:33 +01:00
upodroid
60520b6d4a look for the cm after the lb is created 2023-11-09 20:39:42 -06:00
Dan Winship
ae3235aa01 Remove --use-real-proxier support from kubemark
kubemark's proxy mode exists to test how kube-proxy affects the load
on the apiserver, not how it affects the load on the node. There's no
need to generate fake iptables commands, because that all happens
entirely independently of the api watchers.
2023-11-09 06:52:10 -05:00
carlory
407b9d9610 remove duplicated check in operator_generator.go 2023-11-09 15:38:49 +08:00
upodroid
bd4707ac9a fix dns autoscaling test to run with coredns 2023-11-08 22:09:54 -06:00
carlory
1c0044594d cleanup todo after feature.BlockVolume gate was removed 2023-11-09 10:01:24 +08:00
Kubernetes Prow Robot
8a9b209cb1
Merge pull request #121706 from kannon92/fix-oom-swap-fedora
Skip OOMKilled Jobs if Swap is enabled.
2023-11-09 02:04:45 +01:00
Rita Zhang
11cdb8fd01
split compile and eval
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-11-08 16:37:10 -08:00
Rita Zhang
fe53db0dbd
authz: add benchmark for webhook authorizer
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-11-08 15:38:11 -08:00
Kubernetes Prow Robot
d26c154984
Merge pull request #121818 from liggitt/authz-config-rbac-anonymous
Test authz config file with RBAC and anonymous auth
2023-11-08 23:04:36 +01:00
Kevin Hannon
475bfa4a63 set LimitedSwap 2023-11-08 15:43:12 -05:00
Jordan Liggitt
819d1903a2
Add support for authorization-config to local-up-cluster 2023-11-08 14:36:05 -06:00
Jordan Liggitt
b53134f129
Test anonymous and RBAC handling via config file 2023-11-08 14:36:05 -06:00
Jordan Liggitt
264cd64824
Run RBAC hook correctly when running from authz config file 2023-11-08 14:36:01 -06:00
Jordan Liggitt
1f40e0916e
Only default mode to AlwaysAllow when config file is unspecified 2023-11-08 11:24:28 -06:00
Kubernetes Prow Robot
eb6feceb47
Merge pull request #121768 from borg-land/deadcode
test: introduce a Feature label for skipping KubeUp specific tests
2023-11-08 18:05:15 +01:00
upodroid
76277f693d create a new KubeUp feature label for tests marked for removal 2023-11-08 09:43:12 -06:00
HirazawaUi
3fb16abfca make the decode function respect the timeout context 2023-11-08 23:39:10 +08:00
cpanato
9e5b8402bb
update go.mod
Signed-off-by: cpanato <ctadeu@gmail.com>
2023-11-08 09:32:17 -06:00
21kyu
fec63d5ea0 fix: use generic set in pkg/util/iptables 2023-11-08 15:21:59 +00:00
cpanato
88e124ecaa
[go] Bump images, dependencies and versions to go 1.21.4
Signed-off-by: cpanato <ctadeu@gmail.com>
2023-11-08 08:25:30 -06:00
carlory
ae24846c48 add comments for switch of syncUnboundClaim 2023-11-08 17:15:27 +08:00
Peter Schuurman
e4fdc96c18 Pass External Storage label parameters as individual arguments in framework variadic function 2023-11-07 22:17:36 -08:00
xin.li
29335763fe kubeadm: increase ut coverage app/upgrade/versiongetter
Signed-off-by: xin.li <xin.li@daocloud.io>
2023-11-08 09:45:42 +08:00
Kubernetes Prow Robot
e4b74dd12f
Merge pull request #121765 from mimowo/ready-pods-stable-api
Fix API comment for the Job ready field
2023-11-07 23:52:12 +01:00
Kubernetes Prow Robot
0193fae084
Merge pull request #121764 from mimowo/backoff-limit-per-index-beta-api
Fix API comment for the FailIndex Job pod failure policy action
2023-11-07 23:52:03 +01:00
Daman Arora
f3dad97704 self nominate aroradaman as sig-
proxy-reviewer

Signed-off-by: Daman Arora <aroradaman@gmail.com>
2023-11-08 01:52:59 +05:30
Patrick Ohly
166b71757b dependencies: zapr v1.3.0, zap v1.26.0
The new zapr adds support for slog. The new zap has various improvements. It no
longer depends on go.uber.org/atomic which enables dropping it from the
Kubernetes dependencies. github.com/pkg/errors is also no longer needed.
2023-11-07 20:24:28 +01:00
Kubernetes Prow Robot
f927d5b385
Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed
fix test store delete collection function failed
2023-11-07 19:36:39 +01:00
Kevin Hannon
2645b22003
Self nominate Kevin Hannon for reviewer for job controller
I have been lead the PodReplacementPolicy KEP for alpha and I helped review/fix some issues in beta.  

https://github.com/kubernetes/kubernetes/pulls?q=+is%3Apr+reviewed-by%3Akannon92+label%3Asig%2Fapps+

I have also been an active reviewer and helped GA job tracking last release.  I hope to continue reviewing Job related code.
2023-11-07 13:21:02 -05:00
HirazawaUi
b12db6d9b5 fix test store delete collection function failed 2023-11-08 00:34:53 +08:00
charles-chenzz
abaf7a800d increase timeout in fakeDraDriverGrpcServer to fix flake in dra/manger_test 2023-11-07 19:38:27 +08:00
Michal Wozniak
9d5b2a4476 Fix API comment for the Job ready field 2023-11-07 07:38:51 +01:00
Kubernetes Prow Robot
246d363ea4
Merge pull request #121700 from kannon92/fix-summary-more
missed a few summary upper limits for major page faults
2023-11-06 20:13:04 +01:00
Michael Taufen
ab1eb8ff24 Add comment in noderestriction on Node-bound-tokens
Explains why we don't explicitly prevent cross-node bindings in noderestriction (it's already implicitly enforced).
2023-11-06 18:04:16 +00:00
Michal Wozniak
1395e2e02c Fix API comment for the FailIndex Job pod failure policy action 2023-11-06 17:47:13 +01:00
Jordan Liggitt
ed8d10f660
Update sig-auth aliases 2023-11-06 09:33:00 -06:00
Lars Ekman
d78a794be2 Remove unnecessary sort in kube-proxy ipvs
Sorting of endpoints before adding them to ipvs is not
needed, nor wanted. It just takes time
2023-11-06 14:57:18 +01:00
Kubernetes Prow Robot
cf4d031dbb
Merge pull request #121743 from neolit123/1.29-super-admin-conf
kubeadm: ensure the kubelet and kube-apiserver wait checks go first
2023-11-06 14:24:01 +01:00
Gunju Kim
1cd1092dd9
Remove NodeAlphaFeature label from sidecar e2e tests 2023-11-06 19:50:05 +09:00
Lubomir I. Ivanov
6dc11c1f21 kubeadm: ensure the kubelet and kube-apiserver wait checks go first
The addition of the "super-admin.conf" functionality required
init.go's Client() to create RBAC rules on its first creation.

However this created a problem with the "wait-control-plane" phase
of "kubeadm init" where a client is needed to connect to the
API server Discovery API's "/healthz" endpoint. The logic that ensures
the RBAC became the step where the API server wait was polled for.

To avoid this, introduce a new InitData function ClientWithoutBootstrap.
In "wait-control-plane" use this client, which has no permissions
(anonymous), but is sufficient to connect to the "/healthz".

Pending changes here would be:
- Stop using the "/healthz", instead a regular REST client from
the kubelet cert/key can be constructed.
- Make the wait for kubelet / API server linear (not in go routines).
2023-11-06 12:43:20 +02:00
weizhichen
b91f07008c add ut 2023-11-06 08:20:42 +00:00
xiegangpeng
c26bb7eb85 update util/sets to use standard package cmp 2023-11-06 10:59:46 +08:00
kunwuluan
a00a610d15
move SidecarContainers featureGate checking
to PreFilter

Signed-off-by: KunWuLuan <kunwuluan@gmail.com>
2023-11-06 10:46:52 +08:00
tao.yang
bb315d1339 bump runc to v1.1.10
Signed-off-by: tao.yang <tao.yang@daocloud.io>
2023-11-06 10:42:39 +08:00
kerthcet
f77a4543d1 Unregister events in schedulingGates plugin
Signed-off-by: kerthcet <kerthcet@gmail.com>
2023-11-06 10:01:13 +08:00
tao.yang
6cca6e0524 bump kube-dns to v1.22.27
Signed-off-by: tao.yang <tao.yang@daocloud.io>
2023-11-06 09:57:44 +08:00
Kubernetes Prow Robot
24e6b03780
Merge pull request #121708 from aravindhp/add-azure-framework-ssh-provider
framework: add SSH support for Azure
2023-11-04 17:19:13 +01:00