github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-21 19:01:49 +00:00
Code Issues Projects Releases Wiki Activity
114,849 Commits 42 Branches 7,905 Tags 1.3 GiB
94ed45ab4a
Commit Graph

114849 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
94ed45ab4a
Merge pull request #116568 from pacoxu/fix-alpha-feature-ci 
get pvc again to get the pv name that bound to the PVC
 2023-03-14 10:41:09 -07:00
Kubernetes Prow Robot
bab2774b21
Merge pull request #116517 from dims/re-organize-remote-e2e-test-to-be-pluggable 
re-organize remote e2e test to be pluggable
 2023-03-14 10:41:00 -07:00
Kubernetes Prow Robot
25edb4943a
Merge pull request #116465 from sourcelliu/nodeaffinity 
Fix PreFilter logic problem in node affinity
 2023-03-14 10:40:52 -07:00
Kubernetes Prow Robot
6a111bebe2
Merge pull request #116377 from kinvolk/rata/userns 
KEP-127: user namespace support for stateless pods
 2023-03-14 10:40:43 -07:00
Kubernetes Prow Robot
480a0c2c36
Merge pull request #116353 from KnVerey/applyset-crd-parents 
ApplySet: allow custom resources to be parent objects
 2023-03-14 10:40:36 -07:00
Kubernetes Prow Robot
4950f51903
Merge pull request #116155 from enj/enj/f/dek_reuse 
kmsv2: re-use DEK while key ID is unchanged
 2023-03-14 10:40:28 -07:00
Kubernetes Prow Robot
49649c89ea
Merge pull request #113584 from yangjunmyfm192085/volume-contextual-logging 
volume: use contextual logging
 2023-03-14 10:40:16 -07:00
Kubernetes Prow Robot
e660a1702b
Merge pull request #116571 from mengjiao-liu/scheduler-plugins-defaultbinder 
Migrate pkg/scheduler/framework/plugins/defaultbinder to contextual logging
 2023-03-14 09:39:59 -07:00
Kubernetes Prow Robot
e192a7dbcc
Merge pull request #116330 from SataQiu/clean-kubelet-20230307 
Followup 112643: remove residual code associated with DynamicKubeletConfig
 2023-03-14 09:39:51 -07:00
Kensei Nakada
b49b34c03a
HPA: expose the metrics "reconciliations_total" and "reconciliation_duration_seconds" from HPA controller (#116010) 2023-03-14 09:39:42 -07:00
Kubernetes Prow Robot
c2ad27aaa2
Merge pull request #115619 from jprzychodzen/cluster-kcm-ccm 
[GCE] [cluster] Split run controllers per controller-manager
 2023-03-14 09:39:34 -07:00
Kubernetes Prow Robot
cb5ad1e044
Merge pull request #115576 from silenceshell/fix-fake-os-files-concurrent-map-write 
fix concurrent-map-write of FakeOS.Create
 2023-03-14 09:39:26 -07:00
Kubernetes Prow Robot
8bf7805e05
Merge pull request #115397 from sourcelliu/boottime 
Add test for pkg/kubelet/util
 2023-03-14 09:39:18 -07:00
Kubernetes Prow Robot
af97bb9ac5
Merge pull request #115053 from qingwave/remove-unuse-code 
Remove unuse code in pkg/kubelet/util
 2023-03-14 09:39:10 -07:00
Kubernetes Prow Robot
898143a96a
Merge pull request #114904 from TommyStarK/kubelet/pod_startup_latency_tracker 
kubelet: fix recording when pulling image did finish
 2023-03-14 09:39:02 -07:00
Kubernetes Prow Robot
aa49f001bc
Merge pull request #114701 from goushicui/vlm 
update comment
 2023-03-14 09:38:53 -07:00
Kubernetes Prow Robot
b623fcc181
Merge pull request #114634 from TommyStarK/unit-tests/pkg-kubelet-cloudresource 
kubelet/cloudresource: Improving test coverage
 2023-03-14 09:38:45 -07:00
kunkunhaohao
a772691165
Update pod_container_manager_linux.go (#114598) 
* Update pod_container_manager_linux.go

This is a simple optimization to reduce repeated invoking of the GetPodContainerName function.

* Update pod_container_manager_linux.go

将podContainerName, _ := m.GetPodContainerName(pod)更靠近使用podcontainerName变量的位置
 2023-03-14 09:38:36 -07:00
Kubernetes Prow Robot
f769c66aa8
Merge pull request #113622 from 249043822/br-context-logging-daemon 
daemonset: use contextual logging
 2023-03-14 09:38:28 -07:00
Kubernetes Prow Robot
23023776b2
Merge pull request #110435 from haircommander/exec-sync-cve 
cri-api: document expectation of 16 MB limit
 2023-03-14 09:38:16 -07:00
Kubernetes Prow Robot
a9008b502d
Merge pull request #116577 from jsafrane/fix-standalone-mode 
Fix volume reconstruction in standalone mode
 2023-03-14 08:37:02 -07:00
Kubernetes Prow Robot
fe9dc2ee11
Merge pull request #116573 from claudiubelu/fix-kubeadm-unittests 
unit tests: Fixes init and rejoin unit tests for Windows
 2023-03-14 08:36:52 -07:00
Kubernetes Prow Robot
204a9a1f17
Merge pull request #116459 from ffromani/podresources-ratelimit-minimal 
add podresources DOS prevention using rate limit
 2023-03-14 08:36:45 -07:00
Kubernetes Prow Robot
2bd69db8d7
Merge pull request #116351 from vinaykul/restart-free-pod-vertical-scaling-kubelet-fix-followup 
Initialize pod resource allocation checkpoint manager to noop
 2023-03-14 08:36:37 -07:00
Kubernetes Prow Robot
4f76e4a0fd
Merge pull request #115603 from pacoxu/coredns-v1.10.1 
update coredns to v1.10.1
 2023-03-14 08:36:28 -07:00
Kubernetes Prow Robot
06619135e0
Merge pull request #114226 from saschagrunert/apiextensions-apiserver-static 
Link `apiextensions-apiserver` binary statically
 2023-03-14 08:36:16 -07:00
Katrina Verey
923d9b63fd
Allow conformant CRDs to be ApplySet parents 2023-03-14 11:09:08 -04:00
Davanum Srinivas
a1d157bf32
Add some missing flags 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2023-03-14 10:36:25 -04:00
Kubernetes Prow Robot
689fc37dd2
Merge pull request #112334 from dgrisonnet/fix-eventseries-count 
Fix EventSeries starting count discrepancy
 2023-03-14 07:28:16 -07:00
Monis Khan
832d6f0e19
kmsv2: re-use DEK while key ID is unchanged 
This change updates KMS v2 to not create a new DEK for every
encryption.  Instead, we re-use the DEK while the key ID is stable.

Specifically:

We no longer use a random 12 byte nonce per encryption.  Instead, we
use both a random 4 byte nonce and an 8 byte nonce set via an atomic
counter.  Since each DEK is randomly generated and never re-used,
the combination of DEK and counter are always unique.  Thus there
can never be a nonce collision.  AES GCM strongly encourages the use
of a 12 byte nonce, hence the additional 4 byte random nonce.  We
could leave those 4 bytes set to all zeros, but there is no harm in
setting them to random data (it may help in some edge cases such as
live VM migration).

If the plugin is not healthy, the last DEK will be used for
encryption for up to three minutes (there is no difference on the
behavior of reads which have always used the DEK cache).  This will
reduce the impact of a short plugin outage while making it easy to
perform storage migration after a key ID change (i.e. simply wait
ten minutes after the key ID change before starting the migration).

The DEK rotation cycle is performed in sync with the KMS v2 status
poll thus we always have the correct information to determine if a
read is stale in regards to storage migration.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2023-03-14 10:23:50 -04:00
zhucan
80ff4b90a5 e2e: test for node expand volume with secrets failed 
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
 2023-03-14 21:12:31 +08:00
Kubernetes Prow Robot
fcf5d23e68
Merge pull request #96275 from swatisehgal/noderesourcetopology 
Remove NodeResourceTopology API from staging
 2023-03-14 06:00:17 -07:00
Swati Sehgal
126e184bc8 noderesourcetopology: remove reference to NRT-API in README. 
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 17:34:07 +05:30
Katrina Verey
6a31757f45
Applyset dry run tests + ID value (#116265) 
* Test for ApplySet with --dry-run=client|server

* Use the real format for ApplySet ID

* Incorporate feedback

* Adjustments from rebase
 2023-03-14 04:46:16 -07:00
Jan Safranek
c4f8c3f628 Fix volume reconstruction in standalone mode 
Kubelet in standalone mode won't have kubeclient, it cannot get node.status
and get devices from it. Such a kubelet cannot mount attachable volumes
anyway.
 2023-03-14 12:32:21 +01:00
Kubernetes Prow Robot
c8f001d798
Merge pull request #114504 from vrutkovs/tracing-kubelet-toplevel 
kubelet: create top-level traces for pod sync and GC
 2023-03-14 03:12:16 -07:00
Paco Xu
a5587de2e4 print all calls when compare CSI call failed 2023-03-14 18:03:08 +08:00
Claudiu Belu
4f16887a11 unit tests: Fixes init and rejoin unit tests for Windows 
The default CRI Socket on Windows is npipe://./pipe/containerd-containerd.
 2023-03-14 09:45:16 +00:00
Swati Sehgal
76d9b8dd87 noderesourcetopology-api: Remove nrt from publishing-bot rules.yaml 
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 15:13:35 +05:30
Andrew Sy Kim
ee18f60252
apiserver: exclude APF queue wait time from SLO latency metrics (#116420) 
* apiserver: add latency tracker for priority & fairness queue wait time

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* apiserver: exclude priority & fairness wait times to SLO/SLI latency metrics

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* apiserver: update TestLatencyTrackersFrom to check latency from PriorityAndFairnessTracker

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: add helper function observeQueueWaitTime to consolidate metric and latency tracker calls

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: replace time.Now() / time.Since() with clock.Now() / clock.Since() for better testability

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

* flowcontrol: add unit test TestQueueWaitTimeLatencyTracker to validate queue wait times recorded by latency tracker

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>

---------

Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2023-03-14 02:15:20 -07:00
Kubernetes Prow Robot
0e06be57a6
Merge pull request #116299 from pohly/dra-v1alpha2 
api: resource.k8s.io v1alpha1 -> v1alpha2
 2023-03-14 02:15:08 -07:00
Mengjiao Liu
c512232782 Migrate pkg/scheduler/framework/plugins/defaultbinder to contextual logging 2023-03-14 17:02:25 +08:00
Paco Xu
4e5171b396 upgrade csi provisioner to v3.4.0 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-03-14 16:51:46 +08:00
Paco Xu
40d543a59d check node expand secret ref and fix CSI calls compare failure 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-03-14 16:51:46 +08:00
Paco Xu
2f71a635af get pvc again to get the pv name that bound to the PVC 
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
 2023-03-14 16:51:46 +08:00
Kubernetes Prow Robot
921dfed168
Merge pull request #116566 from liggitt/fix-fuzzer 
Fix StatefulSet fuzzer
 2023-03-14 00:45:09 -07:00
Swati Sehgal
4c8ee8e00e noderesourcetopology-api: Vendor update 
Generated by running:

```
./hack/updater-vendor.sh
```

Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 13:03:01 +05:30
Swati Sehgal
5a2adda7fa noderesourcetopology-api: Remove from staging 
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
 2023-03-14 12:58:31 +05:30
Patrick Ohly
29941b8d3e api: resource.k8s.io v1alpha1 -> v1alpha2 
For Kubernetes 1.27, we intend to make some breaking API changes:
- rename PodScheduling -> PodSchedulingHints (https://github.com/kubernetes/kubernetes/issues/114283)
- extend ResourceClaimStatus (https://github.com/kubernetes/enhancements/pull/3802)

We need to switch from v1alpha1 to v1alpha2 for that.
 2023-03-14 07:52:03 +01:00
Kubernetes Prow Robot
152876a3eb
Merge pull request #115668 from jiahuif-forks/feature/validating-admission-policy/type-system 
Type System for ValidatingAdmissionPolicy
 2023-03-13 23:27:09 -07:00