Commit Graph

27237 Commits

Author SHA1 Message Date
vinay kulkarni
917c4b310b Fix lint issues, use kuberuntime's minGracePeriod const, boost container restart wait period 2025-03-19 13:26:01 +00:00
vinay kulkarni
d5d008a6bd Invoke UpdateContainerResources or trigger container restarts (for RestartContainer policy) when memory requests are resized 2025-03-19 06:33:27 +00:00
Kubernetes Prow Robot
a6227695ab Merge pull request #128402 from richabanker/mvp-agg-discovery
KEP 4020: Replace StorageVersionAPI with aggregated discovery to fetch served resources by a peer apiserver
2025-03-18 21:43:49 -07:00
Kubernetes Prow Robot
9f8a84930d Merge pull request #130573 from natasha41575/pod-conditions
[FG:PodObservedGenerationTracking] kubelet sets observedGeneration on pod conditions
2025-03-18 20:34:08 -07:00
Kubernetes Prow Robot
7fb8bd8aca Merge pull request #130905 from tallclair/ippr-beta
[FG:InPlacePodVerticalScaling] Graduate to Beta
2025-03-18 18:45:54 -07:00
Kubernetes Prow Robot
83f8513db8 Merge pull request #130550 from sanposhiho/async-preemption-beta
feat: graduate the async preemption feature to beta
2025-03-18 17:17:54 -07:00
Kubernetes Prow Robot
6a968c5789 Merge pull request #130904 from serathius/watchcache-corrupt
In TestListCorruptObject corrupt the object in etcd instead of changing encryption key
2025-03-18 16:09:55 -07:00
Kubernetes Prow Robot
94d66387d0 Merge pull request #130553 from Phaow/vac-e2e
Add protection finalizer to vac when it is created
2025-03-18 14:59:54 -07:00
Kubernetes Prow Robot
64621d17a6 Merge pull request #129832 from pohly/dra-seamless-upgrade
DRA: seamless driver upgrades
2025-03-18 13:51:51 -07:00
Marek Siarkowicz
506e4fed14 In TestListCorruptObject corrupt the object in etcd instead of changing encryption key
Changing the encryption key doesn't work with watch cache as it doesn't
break decoding newly written objects. A new object will be written using
a new key, and decoded using a new key.
2025-03-18 21:49:17 +01:00
Richa Banker
8b2cee83c1 Replace StorageVersion API with aggregated discovery to fetch served resources by a peer for MVP
Co-authored-by: Joe Betz <jpbetz@google.com>

Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2025-03-18 13:27:27 -07:00
Eddie Torres
c766a52356 Implement KEP 4876 Mutable CSINode (#130007)
* Implement KEP-4876 Mutable CSINode Allocatable Count

Signed-off-by: torredil <torredil@amazon.com>

* Update TestGetNodeAllocatableUpdatePeriod

Signed-off-by: torredil <torredil@amazon.com>

* Implement CSINodeUpdater

Signed-off-by: torredil <torredil@amazon.com>

* Use sync.Once in csiNodeUpdater

Signed-off-by: torredil <torredil@amazon.com>

* ImVerify driver is installed before running periodic updates

Signed-off-by: torredil <torredil@amazon.com>

* Update NodeAllocatableUpdatePeriodSeconds type comment

Signed-off-by: torredil <torredil@amazon.com>

* Leverage apivalidation.ValidateImmutableField in ValidateCSINodeUpdate

Signed-off-by: torredil <torredil@amazon.com>

* Update strategy functions

Signed-off-by: torredil <torredil@amazon.com>

* Run hack/update-openapi-spec.sh

Signed-off-by: torredil <torredil@amazon.com>

* Update VolumeError.ErrorCode field

Signed-off-by: torredil <torredil@amazon.com>

* CSINodeUpdater improvements

Signed-off-by: torredil <torredil@amazon.com>

* Iron out concurrency in syncDriverUpdater

Signed-off-by: torredil <torredil@amazon.com>

* Run hack/update-openapi-spec.sh

Signed-off-by: torredil <torredil@amazon.com>

* Revise logging

Signed-off-by: torredil <torredil@amazon.com>

* Revise log in VerifyExhaustedResource

Signed-off-by: torredil <torredil@amazon.com>

* Update API validation

Signed-off-by: torredil <torredil@amazon.com>

* Add more code coverage

Signed-off-by: torredil <torredil@amazon.com>

* Fix pull-kubernetes-linter-hints

Signed-off-by: torredil <torredil@amazon.com>

* Update API types documentation

Signed-off-by: torredil <torredil@amazon.com>

* Update strategy and validation for new errorCode field

Signed-off-by: torredil <torredil@amazon.com>

* Update validation tests after strategy changes

Signed-off-by: torredil <torredil@amazon.com>

* Update VA status strategy

Signed-off-by: torredil <torredil@amazon.com>

---------

Signed-off-by: torredil <torredil@amazon.com>
2025-03-18 12:45:49 -07:00
Tim Allclair
9be73c0d67 Graduate InPlacePodVerticalScaling to beta 2025-03-18 12:26:42 -07:00
Kubernetes Prow Robot
55573a0739 Merge pull request #130823 from torredil/update-storage-csi-test-manifests
Update hostpathplugin image to v1.16.1
2025-03-18 11:28:01 -07:00
Natasha Sarkar
4c2be4bdde kubelet sets observedGeneration in conditions 2025-03-18 15:43:24 +00:00
Kubernetes Prow Robot
8312d8e85e Merge pull request #130560 from stlaz/remote-uid-config-beta
RemoteRequestHeaderUID: bump to beta, enabled by default
2025-03-18 06:31:49 -07:00
Kubernetes Prow Robot
8559194e11 Merge pull request #130878 from yongruilin/compatibility-version-featuregate
feat: Add alpha feature verification to feature gates
2025-03-18 05:25:49 -07:00
Patrick Ohly
582b421393 DRA kubeletplugin: add RollingUpdate
When the new RollingUpdate option is used, the DRA driver gets deployed such
that it uses unique socket paths and uses file locking to serialize gRPC
calls. This enables the kubelet to pick arbitrarily between two concurrently
instances. The handover is seamless (no downtime, no removal of ResourceSlices
by the kubelet).

For file locking, the fileutils package from etcd is used because that was
already a Kubernetes dependency. Unfortunately that package brings in some
additional indirect dependency for DRA drivers (zap, multierr), but those
seem acceptable.
2025-03-18 12:32:35 +01:00
Patrick Ohly
760903c0de DRA kubelet: give DRA drivers a 30 second grace period for updates
When doing an update of a DaemonSet, first the old pod gets stopped and
then the new one is started. This causes the kubelet to remove all
ResourceSlices directly after removal and forces the new pod to recreate all of
them.

Now the kubelet waits 30 seconds before it deletes ResourceSlices. If a new
driver registers during that period, nothing is done at all. The new driver
finds the existing ResourceSlices and only needs to update them if something
changed.

The downside is that if the driver gets removed permanently, this creates a
delay where pods might still get scheduled to the node although the driver is
not going to run there anymore and thus the pods will be stuck.
2025-03-18 12:32:35 +01:00
Kubernetes Prow Robot
83c5f99f97 Merge pull request #128184 from cupnes/add-storage-capacity-scoring
KEP-4049: Add storage capacity scoring to VolumeBinding plugin
2025-03-18 03:49:49 -07:00
Stanislav Láznička
b3890d9fa0 bump RemoteRequestHeaderUID featuregate to Beta, on by default 2025-03-18 10:22:17 +01:00
Kubernetes Prow Robot
6396fa0f77 Merge pull request #130860 from carlory/remove-storage-feature-labels
e2e tests: remove unneeded storage feature label
2025-03-17 20:27:56 -07:00
Kubernetes Prow Robot
aba6aa4d7a Merge pull request #130867 from vinayakankugoyal/gitRepo
Fix failing git_repo e2e release informing tests.
2025-03-17 17:45:48 -07:00
yongruilin
5d0caaa1a6 feat: Add alpha feature verification to feature gates
Implement a new function, verifyAlphaFeatures, to ensure that alpha features cannot be enabled by default. Update the verifyOrUpdateFeatureList function to call this new verification. Add corresponding unit tests to validate the behavior of alpha feature handling.
2025-03-18 00:04:16 +00:00
Natasha Sarkar
a15520fbea Move pod resize status to pod conditions 2025-03-17 22:01:05 +00:00
Kubernetes Prow Robot
917a556981 Merge pull request #130250 from marosset/withdraw-windows-hostnetwork
Withdraw alpha support for HostNetwork containers on Windows
2025-03-17 11:59:48 -07:00
Kubernetes Prow Robot
f8cc9c92d6 Merge pull request #130858 from dims/trying-to-fix-provider-kubelet_config_dir_test
Fix kubelet_config_dir_test after KubeletServiceAccountTokenForCredentialProviders was added
2025-03-17 10:43:49 -07:00
Mark Rossett
a666451e8a withdraw Windows HostNetwork support 2025-03-17 09:40:12 -07:00
Kubernetes Prow Robot
2cb9e77fde Merge pull request #130658 from tenzen-y/promote-successpolicy-e2e-to-conformance
KEP-3998: Promote JobSuccessPolicy E2E to Conformance
2025-03-17 09:35:56 -07:00
Vinayak Goyal
2b504a7089 Fix failing git_repo e2e release informing tests. 2025-03-17 16:07:50 +00:00
Kubernetes Prow Robot
d367e0b326 Merge pull request #130865 from serathius/integration-refactor
Split subfunction to allow adding more subtests
2025-03-17 08:18:27 -07:00
Kubernetes Prow Robot
8906223b00 Merge pull request #130347 from Jefftree/remove-v2beta1-agg-discovery
Add a deprecated feature gate to stop serving apidiscovery.k8s.io/v2beta1
2025-03-17 08:17:52 -07:00
Kensei Nakada
c30eb9d9e5 feat: graduate the async preemption feature to beta 2025-03-17 23:43:39 +09:00
Yuki Iwai
e394d430c4 Promote E2E to conformance tests for JobSuccessPolicy
Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>
2025-03-17 23:22:13 +09:00
Kubernetes Prow Robot
fcb2418f7b Merge pull request #128152 from stlaz/ensure-secret-images
Multi-tenancy in accessing node images via Pod API
2025-03-17 07:09:49 -07:00
Marek Siarkowicz
414bfc707f Split subfunction to allow adding more subtests 2025-03-17 12:43:17 +01:00
carlory
8c9452f4ca e2e tests: remove unneeded storage feature label 2025-03-17 11:57:18 +08:00
Yuma Ogami
bc74476bdb Remove VolumeCapacityPriority feature gate 2025-03-17 00:49:58 +00:00
Yuma Ogami
43382b1b39 Switch control from VolumeCapacityPriority to StorageCapacityScoring
The tests and comments have also been updated because while
VolumeCapacityPriority preferred a node with the least allocatable,
StorageCapacityScoring preferred a node with the maximum allocatable.
2025-03-17 00:49:58 +00:00
bells17
f6ddee95f9 Add storage capacity scoring to VolumeBinding plugin 2025-03-17 00:49:58 +00:00
Davanum Srinivas
410dc1d654 Trying to fix kubelet_config_dir_test
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-03-16 18:38:23 -04:00
Kubernetes Prow Robot
f007012f5f Merge pull request #130700 from pohly/dra-kubeletplugin-helper
DRA kubeletplugin: turn helper into wrapper
2025-03-16 01:55:47 -07:00
carlory
1f04af7947 Remove general avaliable feature-gate PersistentVolumeLastPhaseTransitionTime 2025-03-15 16:05:34 +08:00
Kubernetes Prow Robot
555efba04a Merge pull request #128123 from felipeagger/feat/add-updatepodsandbox-cri-method
[FG:InPlacePodVerticalScaling] Add UpdatePodSandboxResources CRI method
2025-03-14 23:07:46 -07:00
Penghao
0393497468 Add protection finalizer to vac when it is created 2025-03-15 10:41:04 +08:00
Kubernetes Prow Robot
c12006e8b4 Merge pull request #130742 from gauravkghildiyal/kep-2433-ga
Promote TopologyAwareHints feature-gate to GA
2025-03-14 17:41:53 -07:00
Kubernetes Prow Robot
8de738e336 Merge pull request #129923 from vinayakankugoyal/gitRepo
KEP-5040: Disable git_repo volume driver.
2025-03-14 17:41:46 -07:00
Kubernetes Prow Robot
e981d1302b Merge pull request #130728 from jpbetz/enable-declarative-validation
Enable DeclarativeValidation feature gate by default
2025-03-14 16:27:46 -07:00
Kubernetes Prow Robot
22ff6b4918 Merge pull request #130818 from macsko/fix_flaky_nonimatednodename_integration_test
Wait for node to appear in cache in TestUpdateNominatedNodeName integration test
2025-03-14 13:39:58 -07:00
Jefftree
95d3d4a22d Gate apidiscovery/v2beta1 serving with a feature gate 2025-03-14 19:35:20 +00:00