126568 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Kubernetes Prow Robot	85d6b0f0b2	Merge pull request #127832 from skitt/securejoin ... kubelet: use new securejoin API	2024-11-05 19:15:40 +00:00
Kubernetes Prow Robot	e57618970e	Merge pull request #126870 from AnishShah/outofcpu-fix ... Ensure mirror pods are created as soon as node is registered	2024-11-05 19:15:29 +00:00
Kubernetes Prow Robot	2d6c8a129d	Merge pull request #127134 from jpbetz/mutating-admission ... KEP-3962: MutatingAdmissionPolicy Alpha	2024-11-05 17:31:38 +00:00
Kubernetes Prow Robot	602c70b65d	Merge pull request #126533 from ah8ad3/kubectl-explain-wrap ... Realign line breaks in kubectl explain wrap method	2024-11-05 17:31:29 +00:00
Kubernetes Prow Robot	3140807126	Merge pull request #128574 from dims/drop-remnants-as-we-switched-hcsshim- ... Drop remnants in hack/unwanted-dependencies.json as we switched hcsshim->hnslib	2024-11-05 16:19:37 +00:00
Kubernetes Prow Robot	f56db61db5	Merge pull request #126862 from carlory/HPAContainerMetrics ... Remove generally available feature gate HPAContainerMetrics	2024-11-05 16:19:29 +00:00
Kubernetes Prow Robot	9bbb46d05f	Merge pull request #128566 from macsko/run_scheduler_perf_with_queueinghints_enabled_disabled ... Run scheduler_perf with QueueingHints both enabled and disabled	2024-11-05 14:53:29 +00:00
Davanum Srinivas	054f0f7e96	Drop remnants as we switched hcsshim->hnslib ... Signed-off-by: Davanum Srinivas <davanum@gmail.com>	2024-11-05 08:22:31 -05:00
Stephen Kitt	16817e8f4f	kubelet: use new securejoin API ... Using securejoin.SecureJoin() ensures that paths are bound within a given root, but it doesn't protect from changes happening between the construction of the path and its use. securejoin 0.3 introduces a new Linux-specific API which avoids this by making rooted open operations explicit; this migrates kubelet's log retrieval to use that. Signed-off-by: Stephen Kitt <skitt@redhat.com>	2024-11-05 13:58:29 +01:00
Kubernetes Prow Robot	2bb886ce2a	Merge pull request #128482 from sanposhiho/scheduler-perf-ff ... fix: register QHint metrics only when available	2024-11-05 12:15:30 +00:00
Kubernetes Prow Robot	033b275d10	Merge pull request #128352 from omerap12/fix-empty-remote-port ... port-forward: fixed error handling for empty remote port	2024-11-05 11:11:29 +00:00
Kubernetes Prow Robot	c69f150008	Merge pull request #127277 from pohly/dra-structured-performance ... kube-scheduler: enhance performance for DRA structured parameters	2024-11-05 10:05:29 +00:00
Kensei Nakada	0bf95100f1	fix: register QHint metrics only when available	2024-11-05 18:52:27 +09:00
Maciej Skoczeń	e44041ee47	Run scheduler_perf with QueueingHints both enabled and disabled	2024-11-05 09:13:03 +00:00
Anish Shah	dcafd93b68	kubelet: try registering mirror pods as soon as node is registered. ... Mirror pods for static pods may not be created immediately during node startup because either the node is not registered or node informer is not synced. They will be created eventually when static pods are resynced (every 1-1.5 minutes). However, during this delay of 1-1.5 mins, kube-scheduler might overcommit resources to the node and eventually cause kubelet to reject pods with OutOfCPU/OutOfMemory/OutOfPods error. To ensure kube-scheduler is aware of static pod resource usage faster, mirror pods are created as soon as the node registers.	2024-11-05 00:56:21 -08:00
Patrick Ohly	7863d9a381	DRA scheduler: refactor CEL compilation cache ... A better place is the cel package because a) the name can become shorter and b) it is tightly coupled with the compiler there. Moving the compilation into the cache simplifies the callers.	2024-11-05 08:34:42 +01:00
Kubernetes Prow Robot	bc79d3ba87	Merge pull request #128396 from ritazh/deprecate-EnforceMountableSecretsAnnotation ... deprecate EnforceMountableSecretsAnnotation in 1.32	2024-11-05 06:07:40 +00:00
lauralorenz	4965a7a8a0	KEP-4603: Refactor various hardcoded backoffs into separate constants (#128369) ... * Refactor various hardcoded backoffs into separate constants Signed-off-by: Laura Lorenz <lauralorenz@google.com> * Fix comment formatting Signed-off-by: Laura Lorenz <lauralorenz@google.com> --------- Signed-off-by: Laura Lorenz <lauralorenz@google.com>	2024-11-05 06:07:28 +00:00
Kubernetes Prow Robot	e5a31e8bbc	Merge pull request #128552 from aojea/package_kubernete_test ... fix package name	2024-11-05 04:45:28 +00:00
Joe Betz	0dc08eded9	Reorganize and expand unit test coverage ... Also apply reviewer feedback	2024-11-04 21:41:33 -05:00
Joe Betz	0dfbc85cd9	Rename dispatcher Run to Start to match naming conventions	2024-11-04 21:40:54 -05:00
Joe Betz	0cb90973b0	Add authz test for deny when relevant fields are not changed	2024-11-04 21:40:54 -05:00
Joe Betz	1031e07e83	Fix comment in mutating webhook dispatcher	2024-11-04 21:40:54 -05:00
Joe Betz	1ad6fd7a0f	Improve error messaging for validating admission policy authz	2024-11-04 21:40:54 -05:00
Joe Betz	c0f9c81338	Add MutatingAdmissionPolicy to samples	2024-11-04 21:40:54 -05:00
Joe Betz	700e3b5664	Update OpenAPI and fix openAPI tests to handle unexported jsonreferences ... Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>	2024-11-04 21:40:54 -05:00
Joe Betz	a0f419fe56	Add integration tests ... Co-authored-by: cici37 <cicih@google.com> Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>	2024-11-04 21:40:54 -05:00
Joe Betz	712cc20996	Add jsonpatch.escapeKey CEL function	2024-11-04 21:40:54 -05:00
Joe Betz	25e11cd1c1	Add MutatingAdmissionPolicy plugin to admission chain ... This expands the generic plugin support to both validating and mutating policies. It also adds the mutating policy admission plugin using the generics plugin support. This also implements both ApplyConfiguration and JSONPatch support. Co-authored-by: Alexander Zielensk <alexzielenski@gmail.com>	2024-11-04 21:40:54 -05:00
Joe Betz	081353bf8a	Add mutation support into CompositedCompiler and reorganize for clarity	2024-11-04 21:40:54 -05:00
Joe Betz	fe3a7f5291	generate code	2024-11-04 21:40:47 -05:00
Joe Betz	3a1733f302	Add MutatingAdmissionPolicy API ... This is closely aligned with ValidatingAdmissionPolicy except that instead of validations that can fail with messages, there are mutations, which can be defined either with as an ApplyConfiguration or JSONPatch. Co-authored-by: cici37 <cicih@google.com>	2024-11-04 21:40:38 -05:00
Kubernetes Prow Robot	ad9dad07a8	Merge pull request #127874 from AnishShah/image-gc-eviction ... Cleanup unused images or containers first when eviction manager detects ContainerFsInodesFree signal	2024-11-05 02:39:28 +00:00
Kubernetes Prow Robot	f64eeb523d	Merge pull request #128096 from bart0sh/PR161-e2e_node-consolidate-NFSServer-APIs ... e2e_node: consolidated NFSServer APIs.	2024-11-05 00:33:35 +00:00
Kubernetes Prow Robot	4932adf80d	Merge pull request #125296 from jsturtevant/windows-numa-support ... Support CPU and Topology manager on Windows	2024-11-05 00:33:28 +00:00
Antonio Ojea	3424e7df46	fix package name	2024-11-04 23:58:59 +00:00
Kubernetes Prow Robot	19d56296aa	Merge pull request #128547 from aojea/rest_watch ... rest client watch: use same name for package as folder	2024-11-04 23:15:51 +00:00
Kubernetes Prow Robot	74209418c4	Merge pull request #128514 from hoskeri/shop-local-proxy-local ... e2e_node: Pass e2eCriProxy instead of updating global.	2024-11-04 23:15:43 +00:00
Kubernetes Prow Robot	5572688cef	Merge pull request #128342 from gnufied/recovery-expansion-beta ... Move RecoverVolumeExpansionFailure feature to beta	2024-11-04 23:15:36 +00:00
Kubernetes Prow Robot	a2b19b3edb	Merge pull request #127910 from leonzz/leonzz-tmp ... fix node start time inconsistency in kubelet	2024-11-04 23:15:29 +00:00
Kubernetes Prow Robot	9fe41b6198	Merge pull request #128046 from AxeZhan/ga3960 ... Graduate PodLifecycleSleepAction to GA	2024-11-04 22:09:35 +00:00
Kubernetes Prow Robot	97c79df18f	Merge pull request #127981 from jsafrane/selinux-changepolicy ... 1710: Implement SELinuxChangePolicy	2024-11-04 22:09:29 +00:00
Rita Zhang	e7cdc59555	deprecate EnforceMountableSecretsAnnotation in 1.32 ... Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>	2024-11-04 13:13:32 -08:00
Kubernetes Prow Robot	b240c51a72	Merge pull request #128523 from carlory/cleanup-tmp-kubelet-dir ... clean up tmp kubelet dir after run tests	2024-11-04 20:17:51 +00:00
Kubernetes Prow Robot	e7bcf57171	Merge pull request #128430 from richabanker/kubelet-metrics-slis-fix ... do not install handler for '/metrics/slis' endpoint using sync.Once	2024-11-04 20:17:44 +00:00
Kubernetes Prow Robot	57438d0b8f	Merge pull request #128411 from macsko/split_scheduler_perf_tests ... Split scheduler_perf config into subdirectories	2024-11-04 20:17:36 +00:00
Kubernetes Prow Robot	a8e1f41131	Merge pull request #124216 from iholder101/in-pod-vertical-scaling/update-cgroup-systemd-instead-of-cgroupfs ... [FG:InPlacePodVerticalScaling] Handle systemd cgroup driver by using libcontainer for updating pod cgroup values	2024-11-04 20:17:29 +00:00
Antonio Ojea	8e1d0c664c	rest client watch: use same name for package as folder	2024-11-04 19:56:55 +00:00
Filip Křepinský	05bc270870	add tests for getReplicaSetFraction in the deployment controller (#128535) ... * better name variables in deployment_util * add tests for getReplicaSetFraction in the deployment controller - make validation more robust and make sure we do not divide by 0	2024-11-04 19:11:43 +00:00
Kubernetes Prow Robot	7a4d755644	Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru ... Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru	2024-11-04 19:11:35 +00:00