Commit Graph

122270 Commits

Author SHA1 Message Date
galal-hussein
7f129e7884 Add the ability to add extra admission plugins
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2025-06-18 19:00:34 -03:00
Darren Shepherd
5100296573 Add tag.sh script 2025-06-18 19:00:34 -03:00
Darren Shepherd
995000acab Fix CSI initialization conflict
CSI is used by both the kubelet and kube-controller-manager.  Both
components will initialize the csiPlugin with different VolumeHost
objects.  The csiPlugin will then assign a global variable for
the node info manager.  It is then possible that the kubelet gets
the credentials of the kube-controller-manager and that will cause
CSI to fail.
2025-06-18 19:00:34 -03:00
Darren Shepherd
275e8d8845 Allow override of "kubernetes" endpoint port 2025-06-18 19:00:34 -03:00
Darren Shepherd
c7b20dbaeb Notify startup to grab a hold of handler and authenticator 2025-06-18 19:00:34 -03:00
Darren Shepherd
65a3ccec71 Add stopCh to apiserver & context to kublet commands 2025-06-18 19:00:34 -03:00
Erik Wilson
aab105bef8 Update kubernetes service on start for port changes 2025-06-18 19:00:34 -03:00
Darren Shepherd
dea3a72c45 Don't ever select the flannel bridge or cni bridge 2025-06-18 19:00:34 -03:00
Darren Shepherd
25c30a3a91 Cache loopback cert in the certs dir if set 2025-06-18 19:00:34 -03:00
Darren Shepherd
e6853b378e Add ability to disable proxy hostname check 2025-06-18 19:00:34 -03:00
Darren Shepherd
ff40fc9c69 Hide deprecated warnings 2025-06-18 19:00:34 -03:00
Darren Shepherd
8ef82833b1 Set all sources so node+agent in the same process doesn't get restricted 2025-06-18 19:00:34 -03:00
Darren Shepherd
709e0a31c2 Don't check for cpuset cgroup, not always required? 2025-06-18 19:00:34 -03:00
Darren Shepherd
b6ed1e63ad Wait for kube-apiserver for 2 minutes for slow (ARM) systems 2025-06-18 19:00:34 -03:00
Darren Shepherd
7b4cc91356 Make kubelet.sock path changable 2025-06-18 19:00:34 -03:00
Darren Shepherd
c46fc6aa83 only use the resolved name if port was zero 2025-06-18 19:00:34 -03:00
Darren Shepherd
8d57fe7c48 If you can't set hashsize on nf_conntrack don't fail 2025-06-18 19:00:34 -03:00
Darren Shepherd
3c0da8609b Drop credential providers 2025-06-18 19:00:34 -03:00
Darren Shepherd
cbc5a885e8 Drop storage plugins 2025-06-18 19:00:33 -03:00
Darren Shepherd
5aeaa91ee6 Drop client-go cloud auth 2025-06-18 19:00:33 -03:00
Kubernetes Release Robot
9e18483918 Release commit for Kubernetes v1.30.14 2025-06-17 18:29:19 +00:00
Kubernetes Prow Robot
a02f29ce51
Merge pull request #132223 from cpanato/update-go-1-30
[release-1.30] [go] Bump images, dependencies and versions to go 1.23.10 and distroless iptables
2025-06-13 03:46:57 -07:00
Carlos Panato
af29100d19
Bump images, dependencies and versions to go 1.23.10 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-06-11 08:27:36 +02:00
Kubernetes Prow Robot
433bffb831
Merge pull request #131813 from rata/automated-cherry-pick-of-#123678-upstream-release-1.30
Automated cherry pick of #123678: kubelet: Add logs for userns custom mappings parsing
2025-06-05 07:44:39 -07:00
Kubernetes Prow Robot
4a9a5ec712
Merge pull request #131812 from rata/automated-cherry-pick-of-#131623-upstream-release-1.30
Automated cherry pick of #131623: kubelet: userns: Improve errors returned to the user
2025-06-05 06:08:38 -07:00
Kubernetes Prow Robot
c9ce6543dc
Merge pull request #131811 from rata/automated-cherry-pick-of-#130800-upstream-release-1.30
Automated cherry pick of #130800: Fix unit tests on windows
2025-06-04 09:22:37 -07:00
Kubernetes Prow Robot
6d234a4545
Merge pull request #131938 from cpanato/update-go-1.30
[release-1.30] [go] Bump images, dependencies and versions to go 1.23.9 and distroless iptables
2025-05-26 13:14:14 -07:00
Carlos Panato
81d95c6412
Bump images, dependencies and versions to go 1.23.9 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-05-23 09:24:19 -04:00
Rodrigo Campos
7160194a54 kubelet: Wrap user namespace manager errors
So the error message has more context about what part is failing.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:33:57 +02:00
Rodrigo Campos
b8aa6d752a kubelet: Add logs for userns custom mappings parsing
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:33:57 +02:00
Rodrigo Campos
d222ec1426 userns: Wrap more errors
Most errors where already wrapped, but these were missing.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:31:24 +02:00
Rodrigo Campos
80aa6d0b1e userns: Improve error returned if userns is not supported
This makes it clear the error comes due to a user namespace
configuration. Otherwise the error returned looks too generic and is not
clear.

Before this PR, the error was:

	  Warning  FailedCreatePodSandBox  1s    kubelet            Failed to create pod sandbox: the handler "" is not known

Now it is:

	  Warning  FailedCreatePodSandBox  1s    kubelet            Failed to create pod sandbox: runtime does not support user namespaces

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:31:24 +02:00
Rodrigo Campos
ef132adf02 userns: Use len to handle empty non-nil slices
When using an old runtime like containerd 1.7, this message is not
implemented and what we get here is an empty non-nil slice. Let's check
the len of the slice instead.

While we are there, let's just return false and no error. In the
following commits we will wrap the error and we didn't find any more
info to add here.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:31:24 +02:00
Rodrigo Campos
b8ce9a3d5e pkg/kubelet/userns: Wrap error to get mappings
I needed to wrap the error for debugging, let's just keep this as it is
useful.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:21:54 +02:00
Rodrigo Campos
9efcbf99c7 pkg/kubelet/userns: Provide stub implementation for windows
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:21:54 +02:00
Rodrigo Campos
f491b54bcd pkg/kubelet: Fix userns tests on Windows
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-05-16 11:21:54 +02:00
Kubernetes Release Robot
4c2a2348b8 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.13 2025-05-15 10:16:53 +00:00
Kubernetes Release Robot
50af91c466 Release commit for Kubernetes v1.30.13 2025-05-15 09:47:44 +00:00
Kubernetes Prow Robot
cfb9de6f46
Merge pull request #131683 from ameukam/update-go-1-23-8-k8s-1-30-v2
[release-1.30][go] Bump images, dependencies and versions to go 1.23.8 and distroless iptables
2025-05-13 03:39:21 -07:00
Arnaud Meukam
7b92f1f7ce Bump images, dependencies and versions
Bump images, dependencies, versions to Go 1.23.8

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2025-05-09 00:46:51 +02:00
Kubernetes Release Robot
24abad1fe1 Update CHANGELOG/CHANGELOG-1.30.md for v1.30.12 2025-04-22 16:27:33 +00:00
Kubernetes Release Robot
66f4b3fc79 Release commit for Kubernetes v1.30.12 2025-04-22 15:58:21 +00:00
Kubernetes Prow Robot
e1041bed56
Merge pull request #130686 from carlory/automated-cherry-pick-of-#130335-upstream-release-1.30
Automated cherry pick of #130335: Fix kubelet restart unmounts volumes of running pods if the referenced PVC is being deleted by the user
2025-04-18 14:41:07 -07:00
carlory
48d8b1cc92 fix lints
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-04-18 10:18:47 +08:00
Kubernetes Prow Robot
b5ac53558d
Merge pull request #130085 from richabanker/automated-cherry-pick-of-#128430-upstream-release-1.30
Automated cherry pick of #128430: do not install handler for /metrics/slis using sync.Once
2025-04-17 10:35:07 -07:00
Kubernetes Prow Robot
df92ced36b
Merge pull request #131161 from wojtek-t/automated-cherry-pick-of-#131020-upstream-release-1.30
Automated cherry pick of #131020: Fix race for sending errors in watch
2025-04-17 09:21:07 -07:00
Wojciech Tyczyński
82cdad07ea Fix race for sending errors in watch 2025-04-03 08:48:42 +01:00
Kubernetes Release Robot
854828406f Update CHANGELOG/CHANGELOG-1.30.md for v1.30.11 2025-03-11 20:13:18 +00:00
Kubernetes Release Robot
6a074997c9 Release commit for Kubernetes v1.30.11 2025-03-11 19:51:05 +00:00
carlory
bf07bcadac fix handle terminating pvc when kubelet rebuild dsw
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-11 10:25:27 +08:00