github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-19 09:52:49 +00:00
Code Issues Projects Releases Wiki Activity
114,231 Commits 42 Branches 7,874 Tags 1.3 GiB
9382fab9b6
Commit Graph

114231 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nilekh Chaudhari
9382fab9b6
feat: implements encrypt all 
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2023-03-08 22:18:49 +00:00
Kubernetes Prow Robot
a80b423351
Merge pull request #116222 from ameukam/remove-retention-policy 
remove retention policy for staging buckets
 2023-03-02 14:52:04 -08:00
Kubernetes Prow Robot
e0ca10118e
Merge pull request #115865 from seans3/discovery-client-cleanup 
Updates old 403 and 404 discovery response tolerations
 2023-03-02 14:51:57 -08:00
Kubernetes Prow Robot
2898a044d9
Merge pull request #116215 from kannon92/comment-manual-selector 
update documentation on generateSelector for manual selector case
 2023-03-02 12:48:56 -08:00
kannon92
cd71486cfb update documentation on generateSelector for manual selector case 2023-03-02 19:47:58 +00:00
Kubernetes Prow Robot
ff52646d93
Merge pull request #116221 from enj/enj/i/kms_lru_size 
kmsv2: retain more key ID metrics
 2023-03-02 11:37:07 -08:00
Kubernetes Prow Robot
74f0819069
Merge pull request #116152 from torredil/fix-windows-e2e-test 
Add windows nodeSelector to provisioning functions
 2023-03-02 11:36:56 -08:00
Kubernetes Prow Robot
ab002db788
Merge pull request #116223 from logicalhan/metric-docs 
include beta metrics in documentation and update docs for metrics
 2023-03-02 10:31:04 -08:00
Kubernetes Prow Robot
57fd02ca29
Merge pull request #116218 from pohly/test-lease-controller-leak 
update lease controller
 2023-03-02 10:30:56 -08:00
Arnaud Meukam
471985557a
remove retention policy for staging buckets 
Follow-up of:
  - https://github.com/kubernetes/kubernetes/pull/115634

The current retention policy prevent creation or update of new objects
until the existing one are deleted based on the retention period.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
 2023-03-02 19:15:29 +01:00
Kubernetes Prow Robot
efe20f6c9b
Merge pull request #114114 from ffromani/full-pcpus-stricter-precheck-issue113537 
node: cpumgr: stricter pre-check for  the policy option full-pcpus-only
 2023-03-02 09:04:56 -08:00
Monis Khan
539f734bfd
kmsv2: retain more key ID metrics 
This change helps users understand the state of their encryption
config if storage migration is not consistently run with key ID
rotation.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2023-03-02 12:02:34 -05:00
Francesco Romani
0e9b92090c node: cpumgr: stricter precheck for full-pcpus-only 
In order to implement the `full-pcpus-only` cpumanager policy option,
we leverage the implementation of the algorithm which picks CPUs.
By design, CPUs are taken from the biggest chunk available (socket
or NUMA zone) to physical cores, down to single cores.

Leveraging this, if the requested CPU count is a multiple of the SMT
level (commonly 2), we're guaranteed that only full physical cores
will be taken.

The hidden assumption here is this holds true by construction iff
the user reserved CPUs (if any) considering full physical CPUs.
IOW, if the user did intentionally or mistakely reserve single threads
which are no core siblings[1], then the simple check we implemented
is not sufficient.

A easy example can probably outline this better. With this setup:

cores: [(0, 4), (1, 5), (2, 6), (3, 8)] (in parens: thread siblings).
SMT level: 2 (each tuple is 2 elements)
Reserved CPUs: 0,1 (explicit pick using `--reserved-cpus`)

A container then requests 6 cpus. full-pcpus-only check: 6 % 2 == 0. Passed.
The CPU allocator will take first full cores, (2,6) and (3,8), and will
then pick the remaining single CPUs. The allocation will succeed, but
it's incorrect.

We can fix this case with a stricter precheck.
We need to additionally consider all the core siblings of the reserved
CPUs as unavailable when computing the free cpus, before to start the
actual allocation. Doing so, we fall back in the intended behavior, and
by construction all possible CPUs allocation whose number is multiple
of the SMT level are now correct again.

+++

[1] or thread siblings in the linux parlance, in any case:
hyperthread siblings of the same physical core

Signed-off-by: Francesco Romani <fromani@redhat.com>
 2023-03-02 16:00:58 +01:00
Patrick Ohly
dad95e1be6 update lease controller 
Passing in a context instead of a stop channel has several advantages:
- ensures that client-go calls return as soon as the controller is asked to stop
- contextual logging can be used

By passing that context down to its own functions and checking it while
waiting, the lease controller also doesn't get stuck in backoffEnsureLease
anymore (https://github.com/kubernetes/kubernetes/issues/116196).
 2023-03-02 15:06:00 +01:00
Kubernetes Prow Robot
b6d102d634
Merge pull request #116071 from yuanchen8911/symlink 
Add symlink data verification to statefulset e2e
 2023-03-02 05:43:07 -08:00
Kubernetes Prow Robot
78e5db0931
Merge pull request #115107 from swatisehgal/handle-device-mgr-recovery-sample-dp-changes 
node: device-mgr: sample device plugin: Add support to control registration process
 2023-03-02 05:42:55 -08:00
Kubernetes Prow Robot
096e67d30e
Merge pull request #116179 from justinsb/visiteduids_deprecation 
cleanup: replace deprecated sets.String
 2023-03-02 04:04:56 -08:00
Kubernetes Prow Robot
0ad676fca8
Merge pull request #110960 from p0lyn0mial/upstream-cacher-sends-stream 
cacher consistent streaming support
 2023-03-02 03:00:56 -08:00
Lukasz Szaszkiewicz
52ce41a293 cacher_watcher: Add support for consistent streaming 
design details https://github.com/kubernetes/enhancements/tree/master/keps/sig-api-machinery/3157-watch-list#design-details
 2023-03-02 10:59:48 +01:00
Lukasz Szaszkiewicz
7c7e773305 cacher: Add support for consistent streaming 
design details https://github.com/kubernetes/enhancements/tree/master/keps/sig-api-machinery/3157-watch-list#design-details
 2023-03-02 10:59:47 +01:00
Kubernetes Prow Robot
762fa12686
Merge pull request #115402 from p0lyn0mial/upstream-sendinitialevents-take-2 
Add API for watch list
 2023-03-02 01:58:55 -08:00
Kubernetes Prow Robot
af9f7a4d90
Merge pull request #115220 from ruiwen-zhao/limit 
Add MaxParallelImagePulls support
 2023-03-01 23:32:55 -08:00
Kubernetes Prow Robot
949bee0118
Merge pull request #116189 from marosset/windows-hyperv-basic-e2e-test 
Adding e2e test to verify hyperv container is running inside a VM on Windows
 2023-03-01 22:27:07 -08:00
aimuz
571adf6e84
Improved FormatMap: Improves performance by about 4x, or nearly 2x in the worst case (#112661) 
* Improved FormatMap

Improves performance by about 4x, or nearly 2x in the worst case

old FormatMap
BenchmarkFormatMap-12             873046                1238 ns/op             384 B/op         13 allocs/op
new FormatMap
BenchmarkFormatMap-12            3665762               327.0 ns/op             152 B/op          3 allocs/op

Signed-off-by: aimuz <mr.imuz@gmail.com>

* fixed

Signed-off-by: aimuz <mr.imuz@gmail.com>

* fixed

Signed-off-by: aimuz <mr.imuz@gmail.com>

* test: fix test

Signed-off-by: aimuz <mr.imuz@gmail.com>

---------

Signed-off-by: aimuz <mr.imuz@gmail.com>
 2023-03-01 22:26:55 -08:00
Kubernetes Prow Robot
d788d436c9
Merge pull request #115893 from mgoltzsche/go-jose-update-2.6 
bump go-jose to v2.6.0
 2023-03-01 20:23:06 -08:00
Kubernetes Prow Robot
2b50e09f78
Merge pull request #115816 from ivelichkovich/celrefactor 
refactor validatingadmissionpolicy cel validator and compiler to be reusable
 2023-03-01 20:22:54 -08:00
ruiwen-zhao
572e6e0ffb Add MaxParallelImagePulls support 
Signed-off-by: ruiwen-zhao <ruiwen@google.com>
 2023-03-02 03:57:59 +00:00
Kubernetes Prow Robot
b4b2345f9a
Merge pull request #116106 from alexzielenski/revert-116062-revert-field-manager 
Revert "Revert "Merge pull request #115324 from alexzielenski/apiserver/smd/use-openapiv3"
 2023-03-01 19:09:07 -08:00
Kubernetes Prow Robot
59a7e34052
Merge pull request #115442 from bobbypage/unknown_pods_test 
test: Add e2e node test to check for unknown pods
 2023-03-01 19:08:55 -08:00
Max Goltzsche
fa5e6587f1
handle new error where sa jwt issued in the future 
Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
 2023-03-02 03:15:13 +01:00
Max Goltzsche
031075d149
check jwt timestamp for zero value 
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
 2023-03-02 03:09:49 +01:00
Kubernetes Prow Robot
ddb0d06744
Merge pull request #116052 from kannon92/validation-coverage-and-cleanup 
remove ValidateJobTemplate and add more test cases to batch validation
 2023-03-01 18:05:07 -08:00
Kubernetes Prow Robot
53f3583c7f
Merge pull request #114785 from TommyStarK/kubelet/replace-deprecated-pointer-function 
kubelet: Replace deprecated pointer function
 2023-03-01 18:04:55 -08:00
Max Goltzsche
df8fa2eab5
bump go-jose to v2.6.0 
Update go-jose from v2.2.2 to v2.6.0.
This is to make the kubernetes code compatible with newer go-jose versions that have a small breaking change (`jwt.NewNumericDate()` returns a pointer).

Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
 2023-03-02 02:53:17 +01:00
Kubernetes Prow Robot
bb8e9f3afb
Merge pull request #116195 from seans3/openapi3-root-fix 
Fixes bug with Root not handling Group without Version
 2023-03-01 16:55:30 -08:00
Kubernetes Prow Robot
5157158d3d
Merge pull request #116089 from cvvz/fix-116028 
fix: should not set default storageclass if annotation "volume.beta.kubernetes.io/storage-class" is set
 2023-03-01 16:55:23 -08:00
Kubernetes Prow Robot
1646ed8222
Merge pull request #116057 from bobbypage/nodee2elog 
test: Add log artifact for ginkgo node e2e and tune default ginkgo flags
 2023-03-01 16:55:16 -08:00
Igor Velichkovich
e96ef31187 refactor admission cel validator and compiler to be reusable 2023-03-01 18:46:45 -06:00
Kubernetes Prow Robot
dfa03231da
Merge pull request #116110 from knabben/knabben/polling-hpc-stats 
Poll for stats until Windows kubelet present it in the stats endpoint
 2023-03-01 15:11:27 -08:00
Kubernetes Prow Robot
51dedff4f3
Merge pull request #115277 from pohly/klog-update 
klog update
 2023-03-01 15:11:16 -08:00
Mark Rossetti
ab020ee628
Adding e2e test to verify hyperv container is running inside a VM on Windows 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2023-03-01 14:08:46 -08:00
kannon92
3489ace708 generated code 2023-03-01 21:43:25 +00:00
Sean Sullivan
17cd59ec1c Fixes bug with Root not handling Group without Version 2023-03-01 21:27:37 +00:00
kannon92
cb9334ebb2 update batch apis 2023-03-01 20:39:47 +00:00
kannon92
2da3e839b0 remove ValidateJobSpec and add more test cases to batch validation 2023-03-01 20:39:47 +00:00
Kubernetes Prow Robot
b0c949d9dd
Merge pull request #116148 from aramase/aramase/f/ci-metrics 
[KMSv2] update ci script to create cluster and gather metrics
 2023-03-01 12:39:30 -08:00
Kubernetes Prow Robot
94424ba808
Merge pull request #115634 from ameukam/e2e-hardcode-bucket-logs-location 
Add retention policy to staging buckets
 2023-03-01 12:39:18 -08:00
Amim Knabben
3fd3a76eb9 Poll for stats until Windows kubelet present it in the stats endpoint 2023-03-01 17:17:23 -03:00
Han Kang
0199276f85 include beta metrics in documentation and update docs for metrics 2023-03-01 11:32:19 -08:00
Kubernetes Prow Robot
60eefa8066
Merge pull request #115425 from pohly/scheduler-perf-benchstat 
scheduler perf: benchstat support
 2023-03-01 11:19:29 -08:00