124089 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sean Sullivan	90d70ed73d	Adds metrics to PortForward Websockets	2024-07-22 14:08:42 -07:00
Kubernetes Prow Robot	b14769f2af	Merge pull request #126224 from neolit123/1.31-fix-bug-in-join-patches-healthz ... kubeadm: fix join bug where kubeletconfig was not patched in memory	2024-07-20 14:27:24 -07:00
Kubernetes Prow Robot	90a84704d6	Merge pull request #126231 from seans3/websocket-https-proxy-fix ... Falls back to SPDY for gorilla/websocket https proxy error	2024-07-20 13:23:16 -07:00
Kubernetes Prow Robot	8527092e02	Merge pull request #119024 from wafuwafu13/deprecated-node-label ... chore(node/util): add more labels to `deprecatedNodeLabels`	2024-07-20 11:31:40 -07:00
Lubomir I. Ivanov	b90b280c5a	kubeadm: fix join bug where kubeletconfig was not patched in memory ... During kubeadm join in 1.30 kubeadm started respecting the kubeletconfiguration healthz address/port. Previously it hardcoded the health check to localhost:defaultport. A corner case was not handled where the user applies --patches on join to modify the local kubeletconfiguration. This results in kubeletconfiguration patch target patches not being applied to the KubeletConfiguration in memory and the health check running on the address:port which are present in the kubelet-config configmap. Fix that by explicitly calling a new function to patch the KubeletConfiguration in memory. This is scoped to only handle the healthz checks *after* the kubelet config.yaml was already patched and written to disk.	2024-07-20 19:31:19 +03:00
Kubernetes Prow Robot	892acaa6a7	Merge pull request #126107 from enj/enj/i/svm_not_found_err ... svm: set UID and RV on SSA patch to cause conflict on logical create	2024-07-20 08:18:01 -07:00
Sean Sullivan	bc52647251	moving for easier cherry-pick	2024-07-20 05:29:57 -07:00
Kubernetes Prow Robot	b293ca9057	Merge pull request #126229 from aojea/network_policies_0.5.0 ... bump kube-network-policies to v0.5.0	2024-07-20 05:13:54 -07:00
Kubernetes Prow Robot	f2f7708375	Merge pull request #126244 from googs1025/informer ... chore(servicecidr): use WaitForCacheSync after sharedInformerFactory Start in integration test	2024-07-20 03:11:39 -07:00
googs1025	bc514ff68b	chore: remove t.Fatal typo	2024-07-20 16:19:47 +08:00
googs1025	a6ee8599f1	chore: use WaitForCacheSync method after sharedInformerFactory Start	2024-07-20 16:17:57 +08:00
Sean Sullivan	9d560540c5	Falls back to SPDY for gorilla/websocket https proxy error	2024-07-20 00:10:32 -07:00
Kubernetes Prow Robot	8f265b6305	Merge pull request #126136 from cici37/removeFG ... Remove feature gate CustomResourceValidationExpressions	2024-07-20 00:08:52 -07:00
Kubernetes Prow Robot	a8d354bf39	Merge pull request #126122 from HirazawaUi/remove-unused-options ... kubelet: Remove unused run container options	2024-07-19 18:05:16 -07:00
Kubernetes Prow Robot	14b34fc255	Merge pull request #125834 from tallclair/log-cleanup ... [kubelet] Cleanup incorrect log about static pod status change	2024-07-19 16:58:54 -07:00
Kubernetes Prow Robot	64ba17c605	Merge pull request #125571 from liggitt/filter-auth-02-sar ... add field and label selectors to authorization	2024-07-19 15:30:01 -07:00
Kubernetes Prow Robot	ec8015daac	Merge pull request #124273 from panoswoo/fix/124255 ... Remove missing extended resources from init containers	2024-07-19 15:29:53 -07:00
Kubernetes Prow Robot	fa15f12fb5	Merge pull request #126174 from dobsonj/corruptedmnt-enodev ... mount-utils: treat syscall.ENODEV as corrupted mount	2024-07-19 13:08:48 -07:00
Jordan Liggitt	5f22dd7c1a	Add integration test exercising webhook selector authz	2024-07-19 15:06:52 -04:00
Jordan Liggitt	9f8f36708a	Fixup lint warning	2024-07-19 15:06:52 -04:00
Jordan Liggitt	4d535db8be	Add selector authorization to the Node authorizer	2024-07-19 15:06:51 -04:00
Jordan Liggitt	a1398a8cca	Add structured labelSelector / fieldSelector to authorization webhook match conditions	2024-07-19 15:06:50 -04:00
Jordan Liggitt	83bd512861	Adjust CEL cost calculation and versioning for authorization library	2024-07-19 15:06:49 -04:00
David Eads	be2e32fa3e	Add CEL fieldSelector / labelSelector support to authorizer library	2024-07-19 15:06:49 -04:00
Jordan Liggitt	03d48b7683	Move CEL env initialization out of package init() ... This ensures compatibility version and feature gates can be initialized before cached CEL environments are created.	2024-07-19 15:06:48 -04:00
Jordan Liggitt	1d2ad282cf	Improve CEL cost tests to catch unhandled estimates or types	2024-07-19 15:06:47 -04:00
David Eads	92e3445e9d	add field and label selectors to authorization attributes ... Co-authored-by: Jordan Liggitt <liggitt@google.com>	2024-07-19 15:06:47 -04:00
Kubernetes Prow Robot	b3e769b72e	Merge pull request #126228 from googs1025/fix_informer ... chore(Job): make trivial improvements to job controller unit test	2024-07-19 12:03:24 -07:00
Kubernetes Prow Robot	6f3f115378	Merge pull request #126222 from macsko/dont_lock_activeq_twice_in_activate_in_scheduling_queue ... Don't lock activeQ twice when activating pod in scheduling queue	2024-07-19 12:03:10 -07:00
David Eads	f5e5bef2e0	generate	2024-07-19 14:35:37 -04:00
David Eads	90f0b88b6a	add subjectaccessreview field and label selectors ... Co-authored-by: Jordan Liggitt <liggitt@google.com>	2024-07-19 14:34:49 -04:00
Kubernetes Prow Robot	acaec0c23a	Merge pull request #126124 from cici37/feature/validating-admission-policy/metrics-improvement ... Feature/validating admission policy/metrics improvement	2024-07-19 10:34:58 -07:00
Kubernetes Prow Robot	ce961fdc84	Merge pull request #125165 from carlory/clean-volume-util ... remove unused functions in volume/util	2024-07-19 10:34:45 -07:00
Antonio Ojea	0c10b4534c	bump kube-network-policies to v0.5.0	2024-07-19 16:55:47 +00:00
googs1025	6626b9ce28	chore(Job): remove deprecated fake.NewSimpleClientset method	2024-07-19 23:46:29 +08:00
googs1025	75a4cfbd58	chore(Job): use ctx.Done() instead of stopCh	2024-07-19 23:43:36 +08:00
googs1025	af5b8bed70	chore(Job): use WaitForCacheSync method after sharedInformerFactory Start	2024-07-19 23:41:20 +08:00
bells17	e1aa8197ed	volumebinding: scheduler queueing hints - CSIStorageCapacity (#124961) ... * volumebinding: scheduler queueing hints - CSIStorageCapacity * Fixed points mentioned in the review * Fixed points mentioned in the review * Update pkg/scheduler/framework/plugins/volumebinding/volume_binding.go Co-authored-by: Kensei Nakada <handbomusic@gmail.com> * Update pkg/scheduler/framework/plugins/volumebinding/volume_binding_test.go Co-authored-by: Kensei Nakada <handbomusic@gmail.com> * Fixed points mentioned in the review * volume_binding.go を更新 Co-authored-by: Kensei Nakada <handbomusic@gmail.com> --------- Co-authored-by: Kensei Nakada <handbomusic@gmail.com>	2024-07-19 07:53:52 -07:00
Jonathan Dobson	4cec4e7422	mount-utils: treat syscall.ENODEV as corrupted mount	2024-07-19 08:14:30 -06:00
Kubernetes Prow Robot	01eb9f4754	Merge pull request #125929 from sanposhiho/requeueing-metrics ... add: implement event_handling_duration_seconds metric	2024-07-19 04:43:00 -07:00
Maciej Skoczeń	7421ded6f9	Don't lock activeQ twice when activating pod in scheduling queue	2024-07-19 09:18:42 +00:00
Kubernetes Prow Robot	77e12aeca9	Merge pull request #126207 from thockin/ingress-backend-port-atomic ... Make ServiceBackendPort an atomic struct	2024-07-18 19:24:26 -07:00
Kubernetes Prow Robot	7f2c167b9c	Merge pull request #126203 from danwinship/kube-proxy-bad-ips ... validate that kube-proxy handles "bad" IPs/CIDRs correctly	2024-07-18 19:24:18 -07:00
Kubernetes Prow Robot	25935965c5	Merge pull request #125782 from aborrero/master ... procMount: fix default value documentation	2024-07-18 19:24:11 -07:00
Kubernetes Prow Robot	27fa59a8af	Merge pull request #125656 from gyuho/recent-stats-check-error-for-error-level-logging ... feat(kubelet/stats): match cadvisor error to lower not found stats log level	2024-07-18 19:24:01 -07:00
Kubernetes Prow Robot	f2428d66cc	Merge pull request #125163 from pohly/dra-kubelet-api-version-independent-no-rest-proxy ... DRA: make kubelet independent of the resource.k8s.io API version	2024-07-18 17:47:48 -07:00
Kubernetes Prow Robot	5fc7032a0e	Merge pull request #126156 from pohly/kubelet-test-enhancements ... kubelet test enhancements	2024-07-18 14:50:54 -07:00
Kubernetes Prow Robot	fa7fcde5a4	Merge pull request #125813 from aojea/node_csr_ips ... Node Request Certificates require to have IPs	2024-07-18 14:50:48 -07:00
Patrick Ohly	a7396fdd3f	kubelet: grant permission for DeleteCollection also with RBAC ... If the node authorizer is active, RBAC rules are not needed. But if it's disabled, kubelet needs to get permission through RBAC. In contrast to the authorizer code which is a bit more flexible and isn't directly tied to the current kubelet implementation (i.e. it allows list+delete instead of just deletecollection), the RBAC entry is just for what the current kubelet does because it's a bit easier to change.	2024-07-18 23:30:09 +02:00
Patrick Ohly	7701a48bd6	dra kubelet: bump gRPC API to v1alpha4 ... The previous changes are an API break, therefore we need a new version.	2024-07-18 23:30:09 +02:00