119810 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Kubernetes Prow Robot	7dea016c1f	Merge pull request #121779 from aroradaman/sig-network-reviewers ... self nominate aroradaman as sig-network-reviewer	2023-11-13 17:36:37 +01:00
Kubernetes Prow Robot	478a3fc1f7	Merge pull request #121718 from tkashem/apf-conformance ... Promote flowcontrol tests to conformance	2023-11-13 17:36:28 +01:00
Kubernetes Prow Robot	c3114b2789	Merge pull request #119652 from lixd/kubelet_image_gc ... fix kubelet image gc	2023-11-13 17:36:15 +01:00
Kubernetes Prow Robot	6ba7258a0f	Merge pull request #121808 from cpanato/go-update-main ... [go] Bump images, dependencies and versions to go 1.21.4	2023-11-13 16:15:44 +01:00
Kubernetes Prow Robot	8e1e957504	Merge pull request #121304 from claudiubelu/e2e-increase-memory-limits ... e2e: Increases the memory limit for downward API tests	2023-11-13 16:15:33 +01:00
Kubernetes Prow Robot	6c27f48387	Merge pull request #121852 from pohly/e2e-framework-test-labels-in-junit ... e2e: avoid redundant labels in JUnit file	2023-11-13 11:05:12 +01:00
Patrick Ohly	617f2132fe	e2e: avoid redundant labels in JUnit file ... Because labels are currently typically added also to the spec texts, we don't need to write them separately. This redundancy got introduced in f2cfbf44b1 when registering all inline tags also as labels.	2023-11-13 08:08:09 +01:00
Kubernetes Prow Robot	a95a79c785	Merge pull request #121801 from danwinship/iptables-test-count ... Fix "go test -count=2 ./pkg/proxy/iptables"	2023-11-12 13:20:25 +01:00
Dan Winship	2017fb2ec5	Fix "go test -count=2 ./pkg/proxy/iptables" ... If you run the tests multiple times, the "partial restore failures" metric didn't get reset in between.	2023-11-11 08:41:53 -05:00
Kubernetes Prow Robot	930022cf26	Merge pull request #121841 from SataQiu/fix-renew-20231110 ... kubeadm: support updating certificate organization during 'kubeadm certs renew'	2023-11-11 09:49:36 +01:00
SataQiu	bda722bb68	kubeadm: support updating certificate organization during 'kubeadm certs renew'	2023-11-11 14:57:50 +08:00
Kubernetes Prow Robot	1f3256bbac	Merge pull request #121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert ... kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt	2023-11-10 17:56:07 +01:00
Lubomir I. Ivanov	2780060a78	kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt ... The component connection between kube-apiserver and kubelet does not require the "O" field on the Subject to be set to the "system:masters" privileged group. It can be a less privileged group like "kubeadm:cluster-admins". Change the group in the apiserve-kubelet-client certificate specification. This cert is passed to --kubelet-client-certificate.	2023-11-10 15:05:14 +02:00
Kubernetes Prow Robot	5ce0bd95cc	Merge pull request #121677 from kerthcet/cleanup/remove-evnet ... Unregister events in schedulingGates for performance	2023-11-10 05:03:33 +01:00
Kubernetes Prow Robot	8a9b209cb1	Merge pull request #121706 from kannon92/fix-oom-swap-fedora ... Skip OOMKilled Jobs if Swap is enabled.	2023-11-09 02:04:45 +01:00
Kubernetes Prow Robot	d26c154984	Merge pull request #121818 from liggitt/authz-config-rbac-anonymous ... Test authz config file with RBAC and anonymous auth	2023-11-08 23:04:36 +01:00
Kevin Hannon	475bfa4a63	set LimitedSwap	2023-11-08 15:43:12 -05:00
Jordan Liggitt	819d1903a2	Add support for authorization-config to local-up-cluster	2023-11-08 14:36:05 -06:00
Jordan Liggitt	b53134f129	Test anonymous and RBAC handling via config file	2023-11-08 14:36:05 -06:00
Jordan Liggitt	264cd64824	Run RBAC hook correctly when running from authz config file	2023-11-08 14:36:01 -06:00
Jordan Liggitt	1f40e0916e	Only default mode to AlwaysAllow when config file is unspecified	2023-11-08 11:24:28 -06:00
Kubernetes Prow Robot	eb6feceb47	Merge pull request #121768 from borg-land/deadcode ... test: introduce a Feature label for skipping KubeUp specific tests	2023-11-08 18:05:15 +01:00
upodroid	76277f693d	create a new KubeUp feature label for tests marked for removal	2023-11-08 09:43:12 -06:00
cpanato	9e5b8402bb	update go.mod ... Signed-off-by: cpanato <ctadeu@gmail.com>	2023-11-08 09:32:17 -06:00
cpanato	88e124ecaa	[go] Bump images, dependencies and versions to go 1.21.4 ... Signed-off-by: cpanato <ctadeu@gmail.com>	2023-11-08 08:25:30 -06:00
Kubernetes Prow Robot	e4b74dd12f	Merge pull request #121765 from mimowo/ready-pods-stable-api ... Fix API comment for the Job ready field	2023-11-07 23:52:12 +01:00
Kubernetes Prow Robot	0193fae084	Merge pull request #121764 from mimowo/backoff-limit-per-index-beta-api ... Fix API comment for the FailIndex Job pod failure policy action	2023-11-07 23:52:03 +01:00
Daman Arora	f3dad97704	self nominate aroradaman as sig- ... proxy-reviewer Signed-off-by: Daman Arora <aroradaman@gmail.com>	2023-11-08 01:52:59 +05:30
Kubernetes Prow Robot	f927d5b385	Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed ... fix test store delete collection function failed	2023-11-07 19:36:39 +01:00
HirazawaUi	b12db6d9b5	fix test store delete collection function failed	2023-11-08 00:34:53 +08:00
Michal Wozniak	9d5b2a4476	Fix API comment for the Job ready field	2023-11-07 07:38:51 +01:00
Kubernetes Prow Robot	246d363ea4	Merge pull request #121700 from kannon92/fix-summary-more ... missed a few summary upper limits for major page faults	2023-11-06 20:13:04 +01:00
Michal Wozniak	1395e2e02c	Fix API comment for the FailIndex Job pod failure policy action	2023-11-06 17:47:13 +01:00
Kubernetes Prow Robot	cf4d031dbb	Merge pull request #121743 from neolit123/1.29-super-admin-conf ... kubeadm: ensure the kubelet and kube-apiserver wait checks go first	2023-11-06 14:24:01 +01:00
Lubomir I. Ivanov	6dc11c1f21	kubeadm: ensure the kubelet and kube-apiserver wait checks go first ... The addition of the "super-admin.conf" functionality required init.go's Client() to create RBAC rules on its first creation. However this created a problem with the "wait-control-plane" phase of "kubeadm init" where a client is needed to connect to the API server Discovery API's "/healthz" endpoint. The logic that ensures the RBAC became the step where the API server wait was polled for. To avoid this, introduce a new InitData function ClientWithoutBootstrap. In "wait-control-plane" use this client, which has no permissions (anonymous), but is sufficient to connect to the "/healthz". Pending changes here would be: - Stop using the "/healthz", instead a regular REST client from the kubelet cert/key can be constructed. - Make the wait for kubelet / API server linear (not in go routines).	2023-11-06 12:43:20 +02:00
kerthcet	f77a4543d1	Unregister events in schedulingGates plugin ... Signed-off-by: kerthcet <kerthcet@gmail.com>	2023-11-06 10:01:13 +08:00
Kubernetes Prow Robot	24e6b03780	Merge pull request #121708 from aravindhp/add-azure-framework-ssh-provider ... framework: add SSH support for Azure	2023-11-04 17:19:13 +01:00
Kubernetes Prow Robot	22866ca5eb	Merge pull request #121034 from alexzielenski/apiserver/apiextensions/ratcheting-oldself-create ... KEP-4008: CRDValidationRatcheting: Add support for optional `oldSelf`	2023-11-04 02:57:46 +01:00
Kubernetes Prow Robot	9f319c3206	Merge pull request #113374 from ahmedtd/kep-3257-projected-types ... Implement ClusterTrustBundlePEM projected volume	2023-11-04 01:44:56 +01:00
Kubernetes Prow Robot	953afbb328	Merge pull request #121193 from sohankunkerkar/kubelet-config-dir ... Retarget drop-in kubelet configuration dir feature to Alpha	2023-11-03 23:59:29 +01:00
Alexander Zielenski	42a70cdbd1	codegen	2023-11-03 15:34:13 -07:00
Alexander Zielenski	bba0c9a81e	validate defaults across an update from nil to ensure create ratcheting rules work	2023-11-03 15:34:13 -07:00
Alexander Zielenski	eef1515815	ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true	2023-11-03 15:34:13 -07:00
Alexander Zielenski	5edb27aa38	ratcheting-cel: add optionalOldSelf field	2023-11-03 15:23:23 -07:00
Sohan Kunkerkar	ad7b9b56f5	test/e2e_node: add e2e test for Kubeletconfig drop-in dir ... Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com> Co-authored-by: Peter Hunt <pehunt@redhat.com>	2023-11-03 17:49:22 -04:00
Sohan Kunkerkar	ee5578be52	cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set ... This commit resolves an issue where certain KubeletConfig fields, specifically: - FileCheckFrequency - VolumeStatsAggPeriod - EvictionPressureTransitionPeriod - Authorization.Mode - EvictionHard were inadvertently overridden when not explicitly set in drop-in configs. To retain the original values if they were absent in the drop-in configs, mergeKubeletConfigurations uses a JSON patch merge strategy to selectively merge configurations. It prevents essential configuration settings from being overridden, ensuring a more predictable behavior for users. Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com> Co-authored-by: Peter Hunt <pehunt@redhat.com>	2023-11-03 17:48:29 -04:00
Kubernetes Prow Robot	263ab254ef	Merge pull request #121715 from pohly/scheduler-logging-with-instrumentation ... scheduler: fix performance regression at -v3 + contextual logging	2023-11-03 21:08:25 +01:00
Taahir Ahmed	bd6431323a	ClusterTrustBundle projection: e2e test	2023-11-03 12:08:35 -07:00
Taahir Ahmed	96e610ac18	ClusterTrustBundle: Enforce max size during validation	2023-11-03 11:40:49 -07:00
Taahir Ahmed	1ebe5774d0	kubelet: Support ClusterTrustBundlePEM projections	2023-11-03 11:40:48 -07:00