Commit Graph

112161 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
d7bff1c809
Merge pull request #111577 from brianpursley/troubleshoot-unit-test-flake
Add logging for reconciler unit test
2022-11-11 00:44:09 -08:00
Wei Huang
8530fbefd9
Fix typos in CHANGELOG-1.26.md 2022-11-10 22:32:05 -08:00
Kubernetes Prow Robot
cf12a74b18
Merge pull request #113835 from zshihang/master
fix test flake in TestLegacyServiceAccountTokenTracking
2022-11-10 18:36:12 -08:00
Alexander Zielenski
3c68fe6596 fix aggregated discovery version sorting
add test for level based priorities
2022-11-10 17:16:14 -08:00
Jefftree
d74b6b2cfa fix dropped subresources
some subresources were not properly included in the array due to pointers becoming stale over a resize
2022-11-10 17:16:14 -08:00
Jefftree
c9b3488400 add aggregated /apis handler for genericapiserver
so that aggregated-apiservers can also take advantage. discovered by e2e tests with feature enabled
2022-11-10 17:16:12 -08:00
Kubernetes Release Robot
520e2c84b3 CHANGELOG: Update directory for v1.26.0-beta.0 release 2022-11-11 00:15:57 +00:00
Alexander Zielenski
1550655336 fix aggregated discovery legacy fallback
due to redesign where we changed from new endpoint to /apis. The expected error was not also changed.

Caught by e2e tests when feature enabled. Should have been caught by unit test first but it was implemented without root /apis. Unit test also fixed
2022-11-10 15:39:20 -08:00
Filip Křepinský
2fbbc473b7 integration: add eviction tests for UnhealthyPodEvictionPolicy 2022-11-10 23:32:27 +01:00
Filip Křepinský
3e3912467a generated 2022-11-10 23:32:27 +01:00
Filip Křepinský
a429797f2e api: add UnhealthyPodEvictionPolicy for PDBs 2022-11-10 23:25:42 +01:00
Kubernetes Prow Robot
7785ad083b
Merge pull request #113812 from mimowo/handling-pod-failures-beta-enable-e2e-test
Add e2e test for job pod failure policy used to match pod disruption
2022-11-10 13:58:09 -08:00
Shihang Zhang
6784610beb fix test flake in TestLegacyServiceAccountTokenTracking 2022-11-10 13:48:53 -08:00
Kubernetes Prow Robot
3649eeae9c
Merge pull request #113824 from logicalhan/more-docs
update documentation after code freeze
2022-11-10 11:33:26 -08:00
Kubernetes Prow Robot
763f68ef77
Merge pull request #113819 from soltysh/events_beta
Move events command to top level
2022-11-10 11:33:14 -08:00
Patrick Ohly
0133df3929 kube-controller-manager: add ResourceClaim controller
The controller uses the exact same logic as the generic ephemeral inline volume
controller, just for inline ResourceClaimTemplate -> ResourceClaim.

In addition, it supports removal of pods from the ReservedFor field when those
pods are known to not need the claim anymore. At the moment, only this special
case is supported. Removal of arbitrary objects would imply granting full read
access to all types to determine whether a) an object is gone and b) if the
current incarnation is the one which is listed in ReservedFor. This may get
added later.
2022-11-10 20:23:50 +01:00
Patrick Ohly
b87530af4f kube-controller-manager: clone resource controller from volume/ephemeral 2022-11-10 20:23:50 +01:00
Patrick Ohly
59d46c026f staging: add ResourceClaim support code
This is similar to the support code for generic ephemeral inline volumes.
Differences:
- to avoid stuttering, the functions are just resourceclaim.Name and
  resourceclaim.IsForPod
- resourceclaim.Name returns the right name for both cases (template
  and reference), which will simplify some code

Other helper functions check some simple status conditions.
2022-11-10 20:23:50 +01:00
Patrick Ohly
76cb805af2 staging: create dynamic resource allocation repo
This will be used for different individual packages. A separate repo
is better than reusing something like component-helpers because dependencies
will be different.
2022-11-10 20:23:50 +01:00
Patrick Ohly
c34185b2e5 logcheck.conf: ensure that dra uses contextual logging
It's new code, so we should follow the latest recommendations for logging.
2022-11-10 20:23:50 +01:00
Patrick Ohly
8018ab7cd9 api: fully validate PotentialNodes and SuitableNodes
This is in response to review feedback. Checking for valid node names and the
set property catches programming mistakes in the components that have write
permission.
2022-11-10 20:23:50 +01:00
Patrick Ohly
ec06d2c1fd api: update testdata
This is the result of

   cd staging/src/k8s.io/api && UPDATE_COMPATIBILITY_FIXTURE_DATA=true go test ./...
2022-11-10 20:23:47 +01:00
Patrick Ohly
5c5e060fb8 api: implement printers for dynamic resource allocation
This is needed for "kubectl get". It depends on the generated swagger docs.
2022-11-10 20:22:47 +01:00
Patrick Ohly
9683c60c05 api: generated files 2022-11-10 20:22:42 +01:00
Patrick Ohly
5cca60f0b8 api: dynamic resource allocation API
This adds a new resource.k8s.io API group with v1alpha1 as version. It contains
four new types: resource.ResourceClaim, resource.ResourceClass, resource.ResourceClaimTemplate, and
resource.PodScheduling.
2022-11-10 20:08:24 +01:00
Patrick Ohly
5433da0419 test: adapt reference data to Pod changes
These tests print a v1.Pod with Sprintf, which includes the new field even when
it is empty.
2022-11-10 20:08:24 +01:00
Patrick Ohly
7d11b422e3 api: add resource claims to core API
The resource.k8s.io/ClaimTemplate only gets referenced by name, therefore the
changes to the core API are limited.
2022-11-10 20:08:24 +01:00
Patrick Ohly
155d49813f kube features: add DynamicResourceAllocation 2022-11-10 20:08:24 +01:00
Marko Mudrinić
ecfc7f189d
Add CVE-2021-25749 to CHANGELOG-1.23.md
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2022-11-10 19:43:53 +01:00
Marko Mudrinić
d34373cdbe
Add CVE-2022-3294 to CHANGELOG-1.22.md
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2022-11-10 19:41:59 +01:00
Marko Mudrinić
dcee13c924
Add CVE-2022-3294 to CHANGELOG-1.23.md
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2022-11-10 19:41:16 +01:00
Marko Mudrinić
04ad0d4b67
Add CVE-2022-3162 to CHANGELOG-1.24.md
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2022-11-10 19:40:38 +01:00
Marko Mudrinić
2432d6d1fd
Add CVE-2022-3162 to CHANGELOG-1.25.md
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2022-11-10 19:40:22 +01:00
Kubernetes Release Robot
3964214dc3 CHANGELOG: Update directory for v1.23.14 release 2022-11-10 17:30:13 +00:00
Kubernetes Release Robot
b01f1c7503 CHANGELOG: Update directory for v1.22.16 release 2022-11-10 17:29:04 +00:00
Kubernetes Release Robot
675c43eb60 CHANGELOG: Update directory for v1.24.8 release 2022-11-10 17:27:53 +00:00
Jan Safranek
5b284a50b7 Revert "Remove references to openstack and cinder"
This reverts commit 9bbf01bae9.
2022-11-10 18:25:30 +01:00
Kubernetes Release Robot
43ff82d112 CHANGELOG: Update directory for v1.25.4 release 2022-11-10 16:50:55 +00:00
Han Kang
4c9d3a1c42 update documentation after code freeze
Change-Id: Ifdc6ec5ef8a0070f4f5cae74543671c4ceb01a4d
2022-11-10 08:45:43 -08:00
Kubernetes Prow Robot
d94261e904
Merge pull request #113186 from ttakahashi21/KEP-3294
Introduce APIs to support CrossNamespaceSourceProvisioning
2022-11-10 08:06:54 -08:00
Michal Wozniak
41285a7c91 Add e2e test for job pod failure policy used to match pod disruption 2022-11-10 15:50:02 +01:00
Maciej Szulik
50c7ebb5b4
Move events command to top level 2022-11-10 14:44:22 +01:00
Jordan Liggitt
3678584c02
Update unwanted dependencies list 2022-11-10 08:22:54 -05:00
Maciej Szulik
0253397fbd
Use goroutine to speed up volume clenaups
This removes WaitTimeoutForPodNoLongerRunningOrNotFoundInNamespace
introduced in f2b9479f8e and changes
the test to use goroutines to speed up the cleanups.
2022-11-10 13:15:06 +01:00
Kubernetes Prow Robot
70e73a6cda
Merge pull request #113809 from jsafrane/add-selinux-feature
Add [Feature:SELinux] to all tests that require SELinux
2022-11-10 02:46:54 -08:00
Jan Safranek
ee12e3ff42 Add [Feature:SELinux] to all tests that require SELinux
Most CI jobs run an OS that does not support SELinux, therefore tests that
need it should be skipped by default.

* [Feature:SELinux] marks tests that need SELinux (for any feature)
* [Feature:SELinuxMountReadWriteOncePod] marks tests that need
  SELinuxMountReadWriteOncePod alpha gate enabled.

Currently, all SELinux tests have both, but it will change in the future.
2022-11-10 10:18:11 +01:00
Kubernetes Prow Robot
77b027936a
Merge pull request #113803 from dashpole/revert-113693-apiserver_tracing_beta
Revert "Graduate API Server tracing to beta"
2022-11-09 23:36:53 -08:00
Kubernetes Prow Robot
72a25b1772
Merge pull request #113735 from cici37/renameDir
Rename cel admission package and the feature gate to validatingadmissionpolicy
2022-11-09 20:40:57 -08:00
Cici Huang
2973712486 Rename FG to ValidatingAdmissionPolicy 2022-11-10 03:37:35 +00:00
Cici Huang
e81820dd20 Update modules.txt 2022-11-10 03:37:35 +00:00