Commit Graph

126634 Commits

Author SHA1 Message Date
Anish Shah
7ac302b47a test: cleanup validation tests 2024-11-06 01:33:15 +00:00
Anish Shah
dc3c4ed559 pod resize support in LimitRanger admission plugin 2024-11-06 01:33:15 +00:00
Anish Shah
1b98fe6079 support for resize subresource in ResourceQuota admission. 2024-11-06 01:33:15 +00:00
Anish Shah
277edcdb48 update codegen 2024-11-06 01:33:15 +00:00
Anish Shah
7e3ae1060f integration: RBAC tests for /resize request
The test confirms that the subject can successfully
resize the Pod resources but not the entire pod.
2024-11-06 01:33:14 +00:00
Anish Shah
ce0f4597d3 fix error message for pod resize validation failure 2024-11-06 01:33:14 +00:00
Anish Shah
07ca0b09bb refactor logic to override pod fields 2024-11-06 01:33:14 +00:00
Anish Shah
878c54fc9a test: add unit tests to verify the .status.resize field 2024-11-06 01:33:14 +00:00
Anish Shah
f1093962b6 integration tests for pod resize 2024-11-06 01:33:14 +00:00
Anish Shah
33a3d7578b e2e: Use resize subresource in e2e tests 2024-11-06 01:33:14 +00:00
Anish Shah
d9a1d861f7 api: generate client code for resize subresource 2024-11-06 01:33:14 +00:00
Anish Shah
2bf1f2349c validate resize request
We validate resize request by ensuring that pod QoS is unchanged and
only cpu and memory resources and resize policies are mutated.
2024-11-06 01:33:14 +00:00
Anish Shah
8f967c19b3 drop unrelated changes for /resize request
Since resize request takes the full pod object as the request type, drop
any unrelated changes. Only container resources and resize policy should
be validated.
2024-11-06 01:33:13 +00:00
Anish Shah
507ce443b0 introduce resize REST object
This commit introduces a basic REST object for resize subresource and
adds it to the pod storage.
2024-11-06 01:33:13 +00:00
Kubernetes Prow Robot
67a4d20970
Merge pull request #128505 from Jefftree/fix-cle-lock-acquisition
Fix CLE leader lock acquisition
2024-11-06 00:35:42 +00:00
Kubernetes Prow Robot
98b4ee6bfa
Merge pull request #126525 from dshebib/addSidecarE2EImgTest
Restart sidecar container when the image has changed
2024-11-06 00:35:35 +00:00
Kubernetes Prow Robot
2f3da71f99
Merge pull request #121206 from mochizuki875/fix_startup_probe_117153
Stop StartupProbe explicity when successThrethold is reached
2024-11-06 00:35:28 +00:00
Kubernetes Prow Robot
a28f14089c
Merge pull request #128539 from benluddy/cbor-feature-gates
KEP-4222: Add CBOR feature gates.
2024-11-05 23:21:56 +00:00
Kubernetes Prow Robot
f81a68f488
Merge pull request #128377 from tallclair/allocated-status-2
[FG:InPlacePodVerticalScaling] Implement AllocatedResources status changes for Beta
2024-11-05 23:21:49 +00:00
Kubernetes Prow Robot
be7d1000ee
Merge pull request #127404 from zylxjtu/master
Windows node graceful shutdown
2024-11-05 23:21:42 +00:00
Kubernetes Prow Robot
b5e6456795
Merge pull request #126806 from carlory/fix-image-volume-mount
Kubelet should honour the VolumeAttributes which are reported by the volume plugin
2024-11-05 23:21:35 +00:00
Kubernetes Prow Robot
246352a43a
Merge pull request #126605 from AndrewSirenko/bump-resizer
Fix storage E2E VolumeAttributesClass tests
2024-11-05 23:21:28 +00:00
Kubernetes Prow Robot
9a2a7537f0
Merge pull request #128580 from jpbetz/bump-kube-openapi
Bump kube-openapi to latest
2024-11-05 21:45:41 +00:00
Kubernetes Prow Robot
08391b3d27
Merge pull request #123549 from carlory/kep-3751-finalizer
A new controller adds/removes finalizer to VAC for protection
2024-11-05 21:45:30 +00:00
Jefftree
1ede4d8f15 Allow cle mutual exclusion lock to be reacquired 2024-11-05 21:01:03 +00:00
Ben Luddy
88c9dd7534
Update AllAlpha integration tests to recognize CBOR.
Setting AllAlpha=true in integration tests changes the dynamic client request encoding and the
custom resource storage encoding to CBOR. The etcd storage path is updated to accept either JSON or
CBOR as storage encoding. The client feature gate controlling the dynamic client request encoding is
temporarily disabled until the serving codecs for builtin APIs are wired to the CBOR apiserver
feature gate.
2024-11-05 15:09:12 -05:00
Ben Luddy
eafe7ed4a3
Regenerate openapi specs. 2024-11-05 15:09:12 -05:00
Ben Luddy
072dfcb416
Add CBOR feature gates.
For alpha, there is one apiserver feature gate and two client-go feature gates controlling
CBOR. They were initially wired to separate test-only feature gate instances in order to prevent
them from being configurable at runtime via command-line flags or environment variables (for
client-go feature gates outside of Kubernetes components). All of the integration tests required by
the KEP as alpha criteria have been implemented. This adds the feature gates to the usual feature
gate instances and removes the temporary code to support separate test-only feature gate instances.
2024-11-05 14:17:52 -05:00
Kubernetes Prow Robot
175a5b9c46
Merge pull request #128581 from stlaz/ctb_e2e_fix
e2e: ctb: run the tests as Serial for now
2024-11-05 19:16:07 +00:00
Kubernetes Prow Robot
f0ff870871
Merge pull request #128462 from benluddy/cbor-direct-custom-marshalers
KEP-4222: Reject custom marshalers from direct CBOR Marshal and Unmarshal.
2024-11-05 19:15:59 +00:00
Kubernetes Prow Robot
19d6337d59
Merge pull request #128415 from serathius/watchcache-btree-2
Use btree for watch cache storage to serve LIST more efficiently
2024-11-05 19:15:51 +00:00
Kubernetes Prow Robot
85d6b0f0b2
Merge pull request #127832 from skitt/securejoin
kubelet: use new securejoin API
2024-11-05 19:15:40 +00:00
Kubernetes Prow Robot
e57618970e
Merge pull request #126870 from AnishShah/outofcpu-fix
Ensure mirror pods are created as soon as node is registered
2024-11-05 19:15:29 +00:00
zylxjtu
459952a067 Windows node graceful shutdown 2024-11-05 17:46:22 +00:00
Kubernetes Prow Robot
2d6c8a129d
Merge pull request #127134 from jpbetz/mutating-admission
KEP-3962: MutatingAdmissionPolicy Alpha
2024-11-05 17:31:38 +00:00
Kubernetes Prow Robot
602c70b65d
Merge pull request #126533 from ah8ad3/kubectl-explain-wrap
Realign line breaks in kubectl explain wrap method
2024-11-05 17:31:29 +00:00
Tim Allclair
dc45ae38c6 Clarify limit ranger use of status resources 2024-11-05 09:21:22 -08:00
Kubernetes Prow Robot
3140807126
Merge pull request #128574 from dims/drop-remnants-as-we-switched-hcsshim-
Drop remnants in hack/unwanted-dependencies.json as we switched hcsshim->hnslib
2024-11-05 16:19:37 +00:00
Kubernetes Prow Robot
f56db61db5
Merge pull request #126862 from carlory/HPAContainerMetrics
Remove generally available feature gate HPAContainerMetrics
2024-11-05 16:19:29 +00:00
Stanislav Láznička
7b3a9db089
e2e: ctb: run the tests as Serial for now 2024-11-05 16:59:08 +01:00
Joe Betz
bedfcc9331 Add gopkg.in/yaml.v2 to hack/unwanted-dependencies.json 2024-11-05 10:41:29 -05:00
Marek Siarkowicz
5ea427ebb5 Use btree for watch cache storage to serve LIST more efficiently
Can be disabled via BtreeWatchCache feature flag.
2024-11-05 16:27:57 +01:00
Joe Betz
f2157ff73e hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d763339b258e 2024-11-05 10:18:57 -05:00
Kubernetes Prow Robot
9bbb46d05f
Merge pull request #128566 from macsko/run_scheduler_perf_with_queueinghints_enabled_disabled
Run scheduler_perf with QueueingHints both enabled and disabled
2024-11-05 14:53:29 +00:00
carlory
c6e6fadc48 fix pull-kubernetes-linter-hints 2024-11-05 21:26:00 +08:00
Davanum Srinivas
054f0f7e96
Drop remnants as we switched hcsshim->hnslib
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-11-05 08:22:31 -05:00
Stephen Kitt
16817e8f4f
kubelet: use new securejoin API
Using securejoin.SecureJoin() ensures that paths are bound within a
given root, but it doesn't protect from changes happening between the
construction of the path and its use. securejoin 0.3 introduces a new
Linux-specific API which avoids this by making rooted open operations
explicit; this migrates kubelet's log retrieval to use that.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-11-05 13:58:29 +01:00
Kubernetes Prow Robot
2bb886ce2a
Merge pull request #128482 from sanposhiho/scheduler-perf-ff
fix: register QHint metrics only when available
2024-11-05 12:15:30 +00:00
carlory
b6c9c2d6fa 1. When the kubelet constructs the cri mounts for the container which references an image volume source type, It passes the missing mount attributes to the CRI implementation, including readOnly, propagation, and recursiveReadOnly. When the readOnly field of the containerMount is explicitly set to false, the kubelet will take the readOnlyas true to the CRI implementation because the image volume plugin requires the mount to be read-only.
2. Fix a bug where the pod is unexpectedly running when the `image` volume source type is used and mounted to `/etc/hosts` in the container.
2024-11-05 19:47:12 +08:00
Kubernetes Prow Robot
033b275d10
Merge pull request #128352 from omerap12/fix-empty-remote-port
port-forward: fixed error handling for empty remote port
2024-11-05 11:11:29 +00:00