github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-18 04:54:54 +00:00
Code Issues Projects Releases Wiki Activity
136,971 Commits 42 Branches 9,765 Tags
84be8353160d29b810929467cd515f53e18ec708
Commit Graph

6115 Commits

Author SHA1 Message Date
Jordan Liggitt
84be835316 Deflake TestPodSubresourceAuth by waiting for effective permissions before testing 2026-03-31 10:27:08 -04:00
Kubernetes Prow Robot
7e705d7851 Merge pull request #137978 from ania-borowiec/flake 
Fix flakiness in integration test for TopologyAwareScheduling with Basic Policy
 2026-03-31 16:00:14 +05:30
Ania Borowiec
e622b86069 remove unnecessary fixes 2026-03-27 09:32:12 +00:00
Antonio Ojea
adbf3b5aa5 Add granular authorization for DRA ResourceClaim status updates 
This commit introduces the DRAResourceClaimGranularStatusAuthorization
feature gate (Beta in 1.36) to enforce fine-grained authorization checks
on ResourceClaim status updates.

Previously, 'update' permission on 'resourceclaims/status' allowed modifying
the entire status. To enforce the principle of least privilege for DRA
drivers and the scheduler, this change introduces synthetic subresources and
verb prefixes:

- 'resourceclaims/binding': Required to update 'status.allocation' and
  'status.reservedFor'.
- 'resourceclaims/driver': Required to update 'status.devices'. Evaluated
  on a per-driver basis using 'associated-node:<verb>' (for node-local
  ServiceAccounts) or 'arbitrary-node:<verb>' (for cluster-wide controllers).
 2026-03-26 13:22:09 +00:00
Ania Borowiec
c49126e031 Fix flakiness in integration test for TopologyAwareScheduling with Basic Policy 2026-03-24 09:42:00 +00:00
Antoni Zawodny
ccaaf9d3a5 Marry WAP logic with the new API fields 2026-03-24 09:36:00 +01:00
Kubernetes Prow Robot
07311a2afa Merge pull request #137606 from Argh4k/workload-preemption-v1alpha2 
Add workload aware preemption
 2026-03-24 00:32:16 +05:30
Maciej Wyrzuc
1f15743e49 Add pod group preemption 2026-03-23 16:22:32 +00:00
Jon Huhn
d80f384b70 Workload API: PodGroup ResourceClaims (KEP-5729) 2026-03-22 14:52:45 -05:00
Kubernetes Prow Robot
ef247770b5 Merge pull request #137190 from everpeace/KEP-5491-alpha 
KEP-5491: DRA: List Types for Attributes [Alpha]
 2026-03-21 14:18:12 +05:30
Kubernetes Prow Robot
15eaed180f Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status 
KEP-5677: Add ResourcePoolStatusRequest API for DRA resource availability visibility
 2026-03-21 08:16:13 +05:30
Shingo Omura
b613ed56a2 KEP-5491: change ResourceSliceMaxDevicesWithTaintsOrConsumesCounters to ResourceSliceMaxDevicesWithAdvancedFeatures and add testcases with max devices with list attributes 2026-03-20 20:29:00 +09:00
Heba
cf5ba01d13 KEP-5832: Implement PodGroup admission (#137464) 
* Add admission for podGroup

Signed-off-by: helayoty <heelayot@microsoft.com>

* Create workload object before podgroup

Signed-off-by: helayoty <heelayot@microsoft.com>

---------

Signed-off-by: helayoty <heelayot@microsoft.com>
 2026-03-19 21:32:34 +05:30
Nour
58cbde2aff Pass individual informers, move DRA controllers to resource.go, simplify retry logic and metric tests 
Signed-off-by: Nour <nurmn3m@gmail.com>
 2026-03-19 16:50:03 +02:00
Nour
4dffbf5b2a Add tests for ResourcePoolStatusRequest 
Add unit tests for handwritten and declarative validation, controller
logic, metrics, table printer output, controller-manager registration,
etcd storage round-trip, and an integration test for the full RPSR
lifecycle. Also add an e2e test exercising the DRA test driver with
RPSR and the example manifest.
 2026-03-19 16:50:03 +02:00
Kubernetes Prow Robot
9d02f5f918 Merge pull request #137032 from helayoty/helayoty/5547-workload-job-integration 
KEP-5547: Implement Workload APIs integration with Job controller
 2026-03-19 17:10:31 +05:30
Shingo Omura
9b45256ba3 KEP-5491: introduce "includes" CEL function that can work both for scalar and list attributes 2026-03-19 16:24:38 +09:00
Shingo Omura
b43153602c KEP-5491: validation for list attributes in DeviceAttribute 2026-03-19 14:46:47 +09:00
Kubernetes Prow Robot
a3b068a003 Merge pull request #137647 from nojnhuh/dra-gang 
DRA: fix Pods in a scheduling gang sharing ResourceClaims
 2026-03-19 07:08:28 +05:30
Kubernetes Prow Robot
bf1abbf2e9 Merge pull request #136355 from enj/enj/i/tls_cache_gc 
Add GC to client-go TLS cache
 2026-03-19 05:42:29 +05:30
helayoty
736f227760 Add integration tests for Workload/PodGroup Job integration 
Signed-off-by: helayoty <heelayot@microsoft.com>
 2026-03-18 22:32:57 +00:00
Jon Huhn
71f02bb2f3 DRA: fix Pods in a scheduling gang sharing ResourceClaims 2026-03-18 17:30:19 -05:00
Kubernetes Prow Robot
7a3a6cf4be Merge pull request #136725 from pravk03/native-dra-2 
Introduce support of DRA for Native Resources
 2026-03-19 03:36:38 +05:30
Monis Khan
fa9a1fe5f7 Add GC to client-go TLS cache 
Signed-off-by: Monis Khan <mok@microsoft.com>
 2026-03-18 17:24:33 -04:00
Kubernetes Prow Robot
1a3fd46367 Merge pull request #137854 from Jefftree/kcm-test-owners 
Add OWNERS for controller manager integration tests
 2026-03-19 02:14:37 +05:30
helayoty
68e30095de Implement Workload and PodGroup integration with Job controller 
Signed-off-by: helayoty <heelayot@microsoft.com>
 2026-03-18 20:32:37 +00:00
Kubernetes Prow Robot
e70704a43a Merge pull request #137489 from brejman/tas-complete 
Integrate TAS logic into the pod group scheduling cycle
 2026-03-19 01:02:32 +05:30
Praveen Krishna
cdcfc4eeb3 Add integration tests. 2026-03-18 19:20:10 +00:00
Jefftree
3bd92acb43 Add OWNERS for controller manager integration tests 2026-03-18 18:10:21 +00:00
Kubernetes Prow Robot
757cdd0115 Merge pull request #137850 from Jefftree/fix-discovery-cleanup-bug 
Fix discovery test cleanup to actually wait for object deletion
 2026-03-18 23:21:45 +05:30
Kubernetes Prow Robot
aa13dc5aa3 Merge pull request #137715 from jpbetz/fix-servicecidr-wiping 
Fix ServiceCIDR status field wiping
 2026-03-18 23:21:13 +05:30
Ania Borowiec
dd31537e01 Integration tests for Topology Aware Scheduling 2026-03-18 15:43:18 +00:00
Kubernetes Prow Robot
1d69828518 Merge pull request #137611 from helayoty/helayoty/podgroup-status 
KEP-5832: Add podGroup Status
 2026-03-18 20:54:33 +05:30
Joe Betz
15ad8cbb69 Add status field wiping to ServiceCIDR with opt-out FG 
# Conflicts:
#	test/compatibility_lifecycle/reference/feature_list.md
#	test/compatibility_lifecycle/reference/versioned_feature_list.yaml
 2026-03-18 10:59:54 -04:00
Kubernetes Prow Robot
0d28578de1 Merge pull request #137795 from ttsuuubasa/dra-binding-conditions-beta 
DRA Device Binding Conditions: graduate to beta
 2026-03-18 19:18:33 +05:30
Kubernetes Prow Robot
8972b2069b Merge pull request #137365 from yaroslavborbat/dra-resourceslice-reconcile-only-pool-name 
DRA: add ReconcileOnlyPoolName to ResourceSlice controller
 2026-03-18 17:00:32 +05:30
Yaroslav Borbat
b9bf406456 DRA ResourceSlice: explicit AllNodes on Pool and placement validation 
Signed-off-by: Yaroslav Borbat <yaroslav.752@gmail.com>
 2026-03-18 13:27:16 +03:00
Kubernetes Prow Robot
09183519e6 Merge pull request #137804 from macsko/fix_race_in_podgroupstate_locking 
Fix race in podGroupState locking
 2026-03-18 15:16:34 +05:30
Kubernetes Prow Robot
5953c57c6b Merge pull request #137607 from 0xMH/fix/133531-dra-queueing-hint 
DRA: return error on filter timeout instead of unschedulable
 2026-03-18 14:26:31 +05:30
Maciej Skoczeń
5e07560178 Fix race in TestActivatePods testing code 2026-03-18 07:32:48 +00:00
helayoty
3e9c4966ff Address code review feedback 
Signed-off-by: helayoty <heelayot@microsoft.com>
 2026-03-18 05:10:50 +00:00
helayoty
0ccf6c7b1a Add integration tests for PodGroup conditions 
Signed-off-by: helayoty <heelayot@microsoft.com>
 2026-03-18 05:09:51 +00:00
helayoty
57ba60526f Implement podGroup Status 
Signed-off-by: helayoty <heelayot@microsoft.com>
 2026-03-18 05:05:42 +00:00
Tsubasa Watanabe
57e649ae03 DRA Device Binding Conditions: update unit and integration tests 
- update expectations for the default BindingTimeout in KubeSchedulerConfiguration
- DRA unit tests:
  - enable DRADeviceBindingConditions by default
  - add allocationTimestamp to expected ResourceClaims for PreBind cases
- disable DRADeviceBindingConditions when testing the stable allocator in TestSchedulerPerf

Signed-off-by: Tsubasa Watanabe <w.tsubasa@fujitsu.com>
 2026-03-18 13:44:30 +09:00
Kubernetes Prow Robot
76de97d229 Merge pull request #136277 from brejman/issue-134393-perf-thresholds 
Set throughput threshold for matching anti-affinity scheduler perf test
 2026-03-18 09:57:38 +05:30
Hamza
67deec3bfa DRA: include node name in timeout error and rework FilterTimeout test setup 2026-03-18 04:33:24 +01:00
Kubernetes Prow Robot
130b8c6ce4 Merge pull request #137813 from dims/dsrinivas/0009-discovery-convergence-timeout 
test/integration/apiserver/discovery: give convergence more time
 2026-03-18 07:35:39 +05:30
Kubernetes Prow Robot
447d2bc16a Merge pull request #137812 from dims/dsrinivas/0010-storageversionmigrator-crd-update 
test/integration/storageversionmigrator: wait longer for CRD updates
 2026-03-18 05:21:04 +05:30
Jefftree
298629e1c6 Fix discovery test cleanup to wait for delete convergence 2026-03-17 19:50:59 -04:00
Kubernetes Prow Robot
2b6b888ed5 Merge pull request #137811 from dims/dsrinivas/0007-dra-controller-manager-metrics 
test/integration/dra: poll ControllerManagerMetrics values
 2026-03-18 05:20:57 +05:30