github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-09 12:07:47 +00:00
Code Issues Projects Releases Wiki Activity
120,010 Commits 42 Branches 7,905 Tags 1.3 GiB
888b99f6dc
Commit Graph

120010 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Ohly
617f2132fe e2e: avoid redundant labels in JUnit file 
Because labels are currently typically added also to the spec texts, we don't
need to write them separately.

This redundancy got introduced in f2cfbf44b1 when registering all inline tags
also as labels.
 2023-11-13 08:08:09 +01:00
andyzhangx
172f680326 fix: smb file share unavailable issue when it's deleted 2023-11-13 05:04:34 +00:00
Kubernetes Prow Robot
a95a79c785
Merge pull request #121801 from danwinship/iptables-test-count 
Fix "go test -count=2 ./pkg/proxy/iptables"
 2023-11-12 13:20:25 +01:00
Iceber Gu
33aa56097a Set the initial length of set[T] in sets.KeySet 
Signed-off-by: Iceber Gu <caiwei95@hotmail.com>
 2023-11-12 00:15:05 +08:00
Dan Winship
2017fb2ec5 Fix "go test -count=2 ./pkg/proxy/iptables" 
If you run the tests multiple times, the "partial restore failures"
metric didn't get reset in between.
 2023-11-11 08:41:53 -05:00
Kubernetes Prow Robot
930022cf26
Merge pull request #121841 from SataQiu/fix-renew-20231110 
kubeadm: support updating certificate organization during 'kubeadm certs renew'
 2023-11-11 09:49:36 +01:00
SataQiu
bda722bb68 kubeadm: support updating certificate organization during 'kubeadm certs renew' 2023-11-11 14:57:50 +08:00
Kubernetes Prow Robot
1f3256bbac
Merge pull request #121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert 
kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
 2023-11-10 17:56:07 +01:00
Lubomir I. Ivanov
2780060a78 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt 
The component connection between kube-apiserver and kubelet does not
require the "O" field on the Subject to be set to the
"system:masters" privileged group. It can be a less
privileged group like "kubeadm:cluster-admins".

Change the group in the apiserve-kubelet-client
certificate specification. This cert is passed to
--kubelet-client-certificate.
 2023-11-10 15:05:14 +02:00
Kubernetes Prow Robot
5ce0bd95cc
Merge pull request #121677 from kerthcet/cleanup/remove-evnet 
Unregister events in schedulingGates for performance
 2023-11-10 05:03:33 +01:00
Dan Winship
ae3235aa01 Remove --use-real-proxier support from kubemark 
kubemark's proxy mode exists to test how kube-proxy affects the load
on the apiserver, not how it affects the load on the node. There's no
need to generate fake iptables commands, because that all happens
entirely independently of the api watchers.
 2023-11-09 06:52:10 -05:00
upodroid
bd4707ac9a fix dns autoscaling test to run with coredns 2023-11-08 22:09:54 -06:00
carlory
1c0044594d cleanup todo after feature.BlockVolume gate was removed 2023-11-09 10:01:24 +08:00
Kubernetes Prow Robot
8a9b209cb1
Merge pull request #121706 from kannon92/fix-oom-swap-fedora 
Skip OOMKilled Jobs if Swap is enabled.
 2023-11-09 02:04:45 +01:00
Rita Zhang
11cdb8fd01
split compile and eval 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-11-08 16:37:10 -08:00
Rita Zhang
fe53db0dbd
authz: add benchmark for webhook authorizer 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2023-11-08 15:38:11 -08:00
Kubernetes Prow Robot
d26c154984
Merge pull request #121818 from liggitt/authz-config-rbac-anonymous 
Test authz config file with RBAC and anonymous auth
 2023-11-08 23:04:36 +01:00
Kevin Hannon
475bfa4a63 set LimitedSwap 2023-11-08 15:43:12 -05:00
Jordan Liggitt
819d1903a2
Add support for authorization-config to local-up-cluster 2023-11-08 14:36:05 -06:00
Jordan Liggitt
b53134f129
Test anonymous and RBAC handling via config file 2023-11-08 14:36:05 -06:00
Jordan Liggitt
264cd64824
Run RBAC hook correctly when running from authz config file 2023-11-08 14:36:01 -06:00
Jordan Liggitt
1f40e0916e
Only default mode to AlwaysAllow when config file is unspecified 2023-11-08 11:24:28 -06:00
Kubernetes Prow Robot
eb6feceb47
Merge pull request #121768 from borg-land/deadcode 
test: introduce a Feature label for skipping KubeUp specific tests
 2023-11-08 18:05:15 +01:00
upodroid
76277f693d create a new KubeUp feature label for tests marked for removal 2023-11-08 09:43:12 -06:00
HirazawaUi
3fb16abfca make the decode function respect the timeout context 2023-11-08 23:39:10 +08:00
cpanato
9e5b8402bb
update go.mod 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 09:32:17 -06:00
21kyu
fec63d5ea0 fix: use generic set in pkg/util/iptables 2023-11-08 15:21:59 +00:00
cpanato
88e124ecaa
[go] Bump images, dependencies and versions to go 1.21.4 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-08 08:25:30 -06:00
carlory
ae24846c48 add comments for switch of syncUnboundClaim 2023-11-08 17:15:27 +08:00
Peter Schuurman
e4fdc96c18 Pass External Storage label parameters as individual arguments in framework variadic function 2023-11-07 22:17:36 -08:00
xin.li
29335763fe kubeadm: increase ut coverage app/upgrade/versiongetter 
Signed-off-by: xin.li <xin.li@daocloud.io>
 2023-11-08 09:45:42 +08:00
Kubernetes Prow Robot
e4b74dd12f
Merge pull request #121765 from mimowo/ready-pods-stable-api 
Fix API comment for the Job ready field
 2023-11-07 23:52:12 +01:00
Kubernetes Prow Robot
0193fae084
Merge pull request #121764 from mimowo/backoff-limit-per-index-beta-api 
Fix API comment for the FailIndex Job pod failure policy action
 2023-11-07 23:52:03 +01:00
Daman Arora
f3dad97704 self nominate aroradaman as sig- 
proxy-reviewer

Signed-off-by: Daman Arora <aroradaman@gmail.com>
 2023-11-08 01:52:59 +05:30
Kubernetes Prow Robot
f927d5b385
Merge pull request #121780 from HirazawaUi/fix-delete-collection-test-failed 
fix test store delete collection function failed
 2023-11-07 19:36:39 +01:00
Kevin Hannon
2645b22003
Self nominate Kevin Hannon for reviewer for job controller 
I have been lead the PodReplacementPolicy KEP for alpha and I helped review/fix some issues in beta.  

https://github.com/kubernetes/kubernetes/pulls?q=+is%3Apr+reviewed-by%3Akannon92+label%3Asig%2Fapps+

I have also been an active reviewer and helped GA job tracking last release.  I hope to continue reviewing Job related code.
 2023-11-07 13:21:02 -05:00
HirazawaUi
b12db6d9b5 fix test store delete collection function failed 2023-11-08 00:34:53 +08:00
Michal Wozniak
9d5b2a4476 Fix API comment for the Job ready field 2023-11-07 07:38:51 +01:00
Kubernetes Prow Robot
246d363ea4
Merge pull request #121700 from kannon92/fix-summary-more 
missed a few summary upper limits for major page faults
 2023-11-06 20:13:04 +01:00
Michael Taufen
ab1eb8ff24 Add comment in noderestriction on Node-bound-tokens 
Explains why we don't explicitly prevent cross-node bindings in noderestriction (it's already implicitly enforced).
 2023-11-06 18:04:16 +00:00
Michal Wozniak
1395e2e02c Fix API comment for the FailIndex Job pod failure policy action 2023-11-06 17:47:13 +01:00
Jordan Liggitt
ed8d10f660
Update sig-auth aliases 2023-11-06 09:33:00 -06:00
Lars Ekman
d78a794be2 Remove unnecessary sort in kube-proxy ipvs 
Sorting of endpoints before adding them to ipvs is not
needed, nor wanted. It just takes time
 2023-11-06 14:57:18 +01:00
Kubernetes Prow Robot
cf4d031dbb
Merge pull request #121743 from neolit123/1.29-super-admin-conf 
kubeadm: ensure the kubelet and kube-apiserver wait checks go first
 2023-11-06 14:24:01 +01:00
Lubomir I. Ivanov
6dc11c1f21 kubeadm: ensure the kubelet and kube-apiserver wait checks go first 
The addition of the "super-admin.conf" functionality required
init.go's Client() to create RBAC rules on its first creation.

However this created a problem with the "wait-control-plane" phase
of "kubeadm init" where a client is needed to connect to the
API server Discovery API's "/healthz" endpoint. The logic that ensures
the RBAC became the step where the API server wait was polled for.

To avoid this, introduce a new InitData function ClientWithoutBootstrap.
In "wait-control-plane" use this client, which has no permissions
(anonymous), but is sufficient to connect to the "/healthz".

Pending changes here would be:
- Stop using the "/healthz", instead a regular REST client from
the kubelet cert/key can be constructed.
- Make the wait for kubelet / API server linear (not in go routines).
 2023-11-06 12:43:20 +02:00
weizhichen
b91f07008c add ut 2023-11-06 08:20:42 +00:00
xiegangpeng
c26bb7eb85 update util/sets to use standard package cmp 2023-11-06 10:59:46 +08:00
kunwuluan
a00a610d15
move SidecarContainers featureGate checking 
to PreFilter

Signed-off-by: KunWuLuan <kunwuluan@gmail.com>
 2023-11-06 10:46:52 +08:00
tao.yang
bb315d1339 bump runc to v1.1.10 
Signed-off-by: tao.yang <tao.yang@daocloud.io>
 2023-11-06 10:42:39 +08:00
kerthcet
f77a4543d1 Unregister events in schedulingGates plugin 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2023-11-06 10:01:13 +08:00