github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-24 04:06:03 +00:00
Code Issues Projects Releases Wiki Activity
114,877 Commits 42 Branches 7,905 Tags 1.3 GiB
83cd5ec710
Commit Graph

114877 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Madhav Jivrajani
a466b7f5aa test/e2e: Add e2e tests for kubectl --subresource 
Signed-off-by: Madhav Jivrajani <madhav.jiv@gmail.com>
 2023-03-14 21:01:44 +05:30
Katrina Verey
923d9b63fd
Allow conformant CRDs to be ApplySet parents 2023-03-14 11:09:08 -04:00
Davanum Srinivas
a1d157bf32
Add some missing flags 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-03-14 10:36:25 -04:00
Kubernetes Prow Robot
689fc37dd2
Merge pull request #112334 from dgrisonnet/fix-eventseries-count 
Fix EventSeries starting count discrepancy
 2023-03-14 07:28:16 -07:00
Monis Khan
832d6f0e19
kmsv2: re-use DEK while key ID is unchanged 
This change updates KMS v2 to not create a new DEK for every
encryption.  Instead, we re-use the DEK while the key ID is stable.

Specifically:

We no longer use a random 12 byte nonce per encryption.  Instead, we
use both a random 4 byte nonce and an 8 byte nonce set via an atomic
counter.  Since each DEK is randomly generated and never re-used,
the combination of DEK and counter are always unique.  Thus there
can never be a nonce collision.  AES GCM strongly encourages the use
of a 12 byte nonce, hence the additional 4 byte random nonce.  We
could leave those 4 bytes set to all zeros, but there is no harm in
setting them to random data (it may help in some edge cases such as
live VM migration).

If the plugin is not healthy, the last DEK will be used for
encryption for up to three minutes (there is no difference on the
behavior of reads which have always used the DEK cache).  This will
reduce the impact of a short plugin outage while making it easy to
perform storage migration after a key ID change (i.e. simply wait
ten minutes after the key ID change before starting the migration).

The DEK rotation cycle is performed in sync with the KMS v2 status
poll thus we always have the correct information to determine if a
read is stale in regards to storage migration.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2023-03-14 10:23:50 -04:00
Gunju Kim
cdf501f77b
Add service-feature-gates argument to node_e2e 
This separates the "service-feature-gates" argument from the
"feature-gates" to set feature gates of API service independently.
 2023-03-14 22:54:30 +09:00
zhucan
80ff4b90a5 e2e: test for node expand volume with secrets failed 
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
 2023-03-14 21:12:31 +08:00
Kubernetes Prow Robot
fcf5d23e68
Merge pull request #96275 from swatisehgal/noderesourcetopology 
Remove NodeResourceTopology API from staging
 2023-03-14 06:00:17 -07:00
Swati Sehgal
126e184bc8 noderesourcetopology: remove reference to NRT-API in README. 
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 17:34:07 +05:30
Katrina Verey
6a31757f45
Applyset dry run tests + ID value (#116265) 
* Test for ApplySet with --dry-run=client|server

* Use the real format for ApplySet ID

* Incorporate feedback

* Adjustments from rebase
 2023-03-14 04:46:16 -07:00
Jan Safranek
c4f8c3f628 Fix volume reconstruction in standalone mode 
Kubelet in standalone mode won't have kubeclient, it cannot get node.status
and get devices from it. Such a kubelet cannot mount attachable volumes
anyway.
 2023-03-14 12:32:21 +01:00
Kubernetes Prow Robot
c8f001d798
Merge pull request #114504 from vrutkovs/tracing-kubelet-toplevel 
kubelet: create top-level traces for pod sync and GC
 2023-03-14 03:12:16 -07:00
Paco Xu
a5587de2e4 print all calls when compare CSI call failed 2023-03-14 18:03:08 +08:00
Claudiu Belu
4f16887a11 unit tests: Fixes init and rejoin unit tests for Windows 
The default CRI Socket on Windows is npipe://./pipe/containerd-containerd.
 2023-03-14 09:45:16 +00:00
Swati Sehgal
76d9b8dd87 noderesourcetopology-api: Remove nrt from publishing-bot rules.yaml 
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 15:13:35 +05:30
Andrew Sy Kim
ee18f60252
apiserver: exclude APF queue wait time from SLO latency metrics (#116420) 
* apiserver: add latency tracker for priority & fairness queue wait time

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* apiserver: exclude priority & fairness wait times to SLO/SLI latency metrics

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* apiserver: update TestLatencyTrackersFrom to check latency from PriorityAndFairnessTracker

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: add helper function observeQueueWaitTime to consolidate metric and latency tracker calls

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: replace time.Now() / time.Since() with clock.Now() / clock.Since() for better testability

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: add unit test TestQueueWaitTimeLatencyTracker to validate queue wait times recorded by latency tracker

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

---------

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2023-03-14 02:15:20 -07:00
Kubernetes Prow Robot
0e06be57a6
Merge pull request #116299 from pohly/dra-v1alpha2 
api: resource.k8s.io v1alpha1 -> v1alpha2
 2023-03-14 02:15:08 -07:00
Mengjiao Liu
c512232782 Migrate pkg/scheduler/framework/plugins/defaultbinder to contextual logging 2023-03-14 17:02:25 +08:00
Paco Xu
4e5171b396 upgrade csi provisioner to v3.4.0 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-03-14 16:51:46 +08:00
Paco Xu
40d543a59d check node expand secret ref and fix CSI calls compare failure 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-03-14 16:51:46 +08:00
Paco Xu
2f71a635af get pvc again to get the pv name that bound to the PVC 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-03-14 16:51:46 +08:00
Kubernetes Prow Robot
921dfed168
Merge pull request #116566 from liggitt/fix-fuzzer 
Fix StatefulSet fuzzer
 2023-03-14 00:45:09 -07:00
Swati Sehgal
4c8ee8e00e noderesourcetopology-api: Vendor update 
Generated by running:

```
./hack/updater-vendor.sh
```

Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 13:03:01 +05:30
Swati Sehgal
5a2adda7fa noderesourcetopology-api: Remove from staging 
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 12:58:31 +05:30
Patrick Ohly
29941b8d3e api: resource.k8s.io v1alpha1 -> v1alpha2 
For Kubernetes 1.27, we intend to make some breaking API changes:
- rename PodScheduling -> PodSchedulingHints (https://github.com/kubernetes/kubernetes/issues/114283)
- extend ResourceClaimStatus (https://github.com/kubernetes/enhancements/pull/3802)

We need to switch from v1alpha1 to v1alpha2 for that.
 2023-03-14 07:52:03 +01:00
Kubernetes Prow Robot
152876a3eb
Merge pull request #115668 from jiahuif-forks/feature/validating-admission-policy/type-system 
Type System for ValidatingAdmissionPolicy
 2023-03-13 23:27:09 -07:00
Kubernetes Prow Robot
dfc63f218c
Merge pull request #116557 from smarterclayton/sync_known_race 
kubelet: TestSyncKnownPods should not race
 2023-03-13 22:27:24 -07:00
Kubernetes Prow Robot
59b11feadd
Merge pull request #116553 from thockin/pr-111942-takeover 
API docs trivial typo
 2023-03-13 22:27:16 -07:00
Kubernetes Prow Robot
6612af0af0
Merge pull request #110304 from RomanBednar/resize-e2e 
add e2e test for correct resizing of a snaphot restore
 2023-03-13 22:27:08 -07:00
Jordan Liggitt
f7ab379489
Fix StatefulSet fuzzer 2023-03-14 01:19:12 -04:00
Kubernetes Prow Robot
0701e4b3b0
Merge pull request #116508 from tangwz/fix_PreFilter_and_PreScore_test_name 
Avoid using negative words in PreFilter and PreScore tests.
 2023-03-13 21:17:20 -07:00
Kubernetes Prow Robot
e3cf864279
Merge pull request #116502 from sourcelliu/removecast 
Remove unnecessary int64 type conversion
 2023-03-13 21:17:08 -07:00
Matthew Cary
74b8fc7534 Add statefulsets to v1beta1 default_test 
Change-Id: Id68cdb2c9bb7b4ebe21597ead1926e02e3b491af
 2023-03-13 20:35:00 -07:00
mantuliu
42ddbb4276 Fix PreFilter logic problem in node affinity 2023-03-14 11:23:40 +08:00
Jiahui Feng
2a3b5f66e2 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA 
(cd staging/src/k8s.io/api/ && env UPDATE_COMPATIBILITY_FIXTURE_DATA=true go test)
 2023-03-13 19:45:17 -07:00
Jiahui Feng
deb467261c generated: ./hack/update-codegen.sh && ./hack/update-openapi-spec.sh 2023-03-13 19:44:28 -07:00
Kubernetes Prow Robot
cd56332d06
Merge pull request #116501 from mattcary/ss-beta 
Graduate StatefulSetAutoDelete to beta
 2023-03-13 19:31:20 -07:00
Kubernetes Prow Robot
6b3e2b7873
Merge pull request #116397 from jiahuif-forks/feature/validating-admission-policy/message-expression 
MessageExpression for ValidatingAdmissionPolicy
 2023-03-13 19:31:08 -07:00
Monis Khan
aa80f8fb85
token/cache: use go 1.20's approach for no-copy string/bytes conversions 
Note that this fixes a bug in the existing `toBytes` implementation
which does not correctly set the capacity on the returned slice.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2023-03-13 21:01:17 -04:00
Kubernetes Prow Robot
e998b09bc4
Merge pull request #116555 from bart0sh/PR106-dra-plugin-constant 
DRA: add constant PluginClientTimeout
 2023-03-13 17:51:31 -07:00
Kubernetes Prow Robot
da20948492
Merge pull request #115621 from humblec/node-secret-beta 
promote CSINodeExpandSecret feature to Beta
 2023-03-13 17:51:24 -07:00
Kubernetes Prow Robot
781daea7b2
Merge pull request #115209 from dgrisonnet/cleanup-deprecated-metrics 
Cleanup deprecated metrics
 2023-03-13 17:51:12 -07:00
ZhangKe10140699
7198bcffcd daemonset: use contextual logging 2023-03-14 08:50:27 +08:00
杨军10092085
361e4ff0fa volume: use contextual logging 2023-03-14 08:37:30 +08:00
Matthew Cary
1d6df8233c Graduate StatefulSetAutoDelete to beta 
Change-Id: Iee385580d313c69fbb8a893eb5c165aa0b75725d
 2023-03-13 17:09:29 -07:00
Kubernetes Prow Robot
b740a34302
Merge pull request #116545 from flant/table-ssr-e2e 
Fix DescribeTable for selfsubjectreview e2e
 2023-03-13 16:49:21 -07:00
Kubernetes Prow Robot
4641604be8
Merge pull request #116513 from klueska/dra-update-multipleplugins 
Update DRAManager to allow multiple plugins to process a single claim
 2023-03-13 16:49:14 -07:00
Kubernetes Prow Robot
fb0a2d75e4
Merge pull request #116494 from SergeyKanzhelev/initializeFeatureGatesInTests 
initialize feature gates in test project
 2023-03-13 16:49:07 -07:00
Kubernetes Prow Robot
110541b3d7
Merge pull request #116490 from tallclair/docs-urls2 
Fix broken links in API documentation
 2023-03-13 16:48:56 -07:00
Ed Bartosh
50cb3268b6 DRA: add constant PluginClientTimeout 2023-03-14 00:37:43 +02:00