Commit Graph

14798 Commits

Author SHA1 Message Date
HirazawaUi
98c29f0312 promote DisableNodeKubeProxyVersion feature gate to beta 2024-04-14 20:32:49 +08:00
Akihiro Suda
d4925ce8f8 e2e: KEP-3857: Recursive Read-only (RRO) mounts
Usage:
```
make test-e2e-node \
  TEST_ARGS='--service-feature-gates=RecursiveReadOnlyMounts=true --kubelet-flags="--feature-gates=RecursiveReadOnlyMounts=true"' \
  FOCUS="Mount recursive read-only" SKIP=""
```

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-03-10 03:00:59 +09:00
Kubernetes Prow Robot
e0a142dc5c Merge pull request #123815 from mimowo/job-managed-by-test2
Follow up fix to the job status update test
2024-03-08 08:00:35 -08:00
Kubernetes Prow Robot
74b2f4d976 Merge pull request #123821 from dims/check-taints-as-well-for-control-plane
Check taints as well for control-plane
2024-03-08 05:32:32 -08:00
Davanum Srinivas
ee64b30d05 Check taints as well for control-plane
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-08 07:17:21 -05:00
Michal Wozniak
acf6b500ee Follow up fix to the job status update test 2024-03-08 07:33:10 +01:00
Kubernetes Prow Robot
7ea3d0245a Merge pull request #123516 from pohly/dra-structured-parameters
DRA: structured parameters
2024-03-07 19:24:48 -08:00
Patrick Ohly
7f5566ac6f dra e2e: enable more tests for usage with structured parameters
This finishes the shuffling around of test scenarios so that all of them which
make sense with structured parameters are also executed with those.
2024-03-07 22:26:20 +01:00
Patrick Ohly
2c6246c906 dra e2e: move ResourceSlice test
This should better run with multiple nodes, it's more realistic that way.
2024-03-07 22:23:03 +01:00
Patrick Ohly
0b6a0d686a dra api: rename NodeResourceSlice -> ResourceSlice
While currently those objects only get published by the kubelet for node-local
resources, this could change once we also support network-attached
resources. Dropping the "Node" prefix enables such a future extension.

The NodeName in ResourceSlice and StructuredResourceHandle then becomes
optional. The kubelet still needs to provide one and it must match its own node
name, otherwise it doesn't have permission to access ResourceSlice objects.
2024-03-07 22:22:55 +01:00
Patrick Ohly
234dc1f63d dra e2e: run more test scenarios with structured parameters 2024-03-07 22:22:13 +01:00
Patrick Ohly
d59676a545 dra kubelet: publish NodeResourceSlices
The information is received from the DRA driver plugin through a new gRPC
streaming interface. This is backwards compatible with old DRA driver kubelet
plugins, their gRPC server will return "not implemented" and that can be
handled by kubelet. Therefore no API break is needed.

However, DRA drivers need to be updated because the Go API changed. They can
return
    status.New(codes.Unimplemented, "no node resource support").Err()
if they don't support the new ListAndWatchResources method and
structured parameters.

The controller in kubelet then synchronizes this information from the driver
with NodeResourceSlice objects, creating, updating and deleting them as needed.
2024-03-07 22:22:13 +01:00
Patrick Ohly
5e40afca06 dra testing: add tests for structured parameters
The test driver now supports a ConfigMap (as before) and the named resources
structured parameter model. It doesn't have any instance attributes.
2024-03-07 22:22:13 +01:00
Patrick Ohly
6f1ddfcd2e kubelet: support structured parameters for preparing resources
If the resource handle has data from a structured parameter model, then we need
to pass that to the DRA driver kubelet plugin. Because Kubernetes uses
gogo/protobuf, we cannot use "optional" for that new optional field and have to
resort to "repeated" with a single repetition if present.

This is a new, backwards-compatible field.

That extending the resource.k8s.io changes the checksum of a kubelet checkpoint
is unfortunate. Updating the test cases is a stop-gap measure, the actual
solution will have to be something else before beta.
2024-03-07 22:22:13 +01:00
Davanum Srinivas
b1341c8795 Revert portion of the GPU testcase
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-07 12:39:04 -05:00
Kubernetes Prow Robot
246e678acc Merge pull request #123751 from mimowo/job-update-conformance-test
Update Job conformance test for job status updates
2024-03-07 07:49:24 -08:00
Kubernetes Prow Robot
bf7fcfdc7f Merge pull request #123776 from dims/adjust-gpu-test-to-work-with-latest-nvidia-daemonset
Adjust GPU test to work with latest nvidia daemonset on AWS/ec2
2024-03-07 06:30:55 -08:00
Kubernetes Prow Robot
a035f5b19e Merge pull request #123774 from cici37/vapGA
Enabled conformance test for GA feature.
2024-03-07 06:30:48 -08:00
Davanum Srinivas
30857658e4 Adjust GPU test to work with latest nvidia daemonset
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-06 21:42:21 -05:00
cici37
758dc53510 Enabled conformance test for VAP which is GAed. 2024-03-06 23:53:20 +00:00
Kubernetes Prow Robot
bd25605619 Merge pull request #123435 from tallclair/apparmor-ga
AppArmor fields API
2024-03-06 15:35:14 -08:00
Tim Allclair
0eb5f52d06 Rename AppArmor annotation constants with Deprecated 2024-03-06 10:46:31 -08:00
Michal Wozniak
1395c80109 Update Job conformance test to do a legal update 2024-03-06 14:00:21 +01:00
Kubernetes Prow Robot
2b521e5f8e Merge pull request #123405 from cici37/vapGA
[KEP-3488]Promote ValidatingAdmissionPolicy to GA
2024-03-05 18:29:53 -08:00
Kubernetes Prow Robot
87f9b3891e Merge pull request #123385 from HirazawaUi/allow-special-characters
Allow almost all printable ASCII characters in environment variables
2024-03-05 17:31:06 -08:00
cici37
de506ce7ac Promote ValidatingAdmissionPolicy to GA. 2024-03-05 16:00:21 -08:00
Tim Allclair
207a965b3f Update AppArmor e2e tests 2024-03-05 12:22:50 -08:00
Filip Křepinský
7a57bcea6c fix e2e test for kubectl interactive delete 2024-03-05 19:57:28 +01:00
Kubernetes Prow Robot
74adc0b3f7 Merge pull request #122489 from carlory/fix-120080
storage e2e: update hostpath and mock images
2024-03-05 07:11:36 -08:00
Kubernetes Prow Robot
a33f8b8211 Merge pull request #122259 from pacoxu/enlarge-pod-delete-timeout
use e2e f.Timeouts.PodDelete instead of 1 minute
2024-03-05 05:46:29 -08:00
Kubernetes Prow Robot
d826407152 Merge pull request #122653 from ardaguclu/interactive-delete-e2e-test
Add e2e test for kubectl interactive delete
2024-03-05 03:08:59 -08:00
HirazawaUi
01689d0906 add e2e tests for relaxed validation 2024-03-05 17:09:15 +08:00
carlory
2bd7f4f8e0 storage e2e: update hostpath and mock images 2024-03-05 10:18:54 +08:00
Kubernetes Prow Robot
320e288b5e Merge pull request #123628 from Jefftree/agg-conformance
promote aggregated discovery conformance tests
2024-03-04 11:23:59 -08:00
Jan Safranek
57d1b68dc2 Remove deprecated sets.String 2024-03-04 14:33:04 +01:00
Jan Safranek
c4163a9cb8 Add label with access mode to SELinux metrics
In the KEP 1710 we promised to have all SELinux metrics with access mode
label, so cluster admin is able to distinguish when RWOP volumes are
failing to mount (-> SELinuxMountReadWriteOncePod feature gate must be
disabled) or volumes with any other access modes are failing (->
SELinuxMount feature gate must be disabled).

Adding the label to kubelet is quite straightforward, there were some
changes needed in the e2e test. Now grabMetrics() collects values of all
SELinux related metrics with all labels. It only skips unrelated volume
plugins. And waitForMetricIncrease gets metric with all labels on input, so
it can check that say RWOP metric increased and RWX one did not.
2024-03-04 13:16:56 +01:00
Kubernetes Prow Robot
d440ab18ce Merge pull request #123656 from huww98/e2e-pod-fail-fast
e2e pod: fail fast on failed pod
2024-03-04 00:00:14 -08:00
Jefftree
ebcb78df52 promote aggregated discovery conformance tests 2024-03-03 14:29:25 -05:00
Davanum Srinivas
b33c5a8292 Switch to newer cos-gpu-installer - v2.1.10
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 14:22:24 -05:00
huweiwen
c2ccb921ea e2e pod: fail fast on failed pod
no need to wait until timeout. reduce test time
2024-03-04 00:01:02 +08:00
Joe Betz
eb5f31b9e1 Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons 2024-03-02 11:14:06 -05:00
Aaron U'Ren
d2051503a3 e2e/service.go: remove same node nodeport test
Remove local pod -> local nodeport from service termination test
2024-03-01 17:01:07 -06:00
Kubernetes Prow Robot
3f25211d69 Merge pull request #122882 from Jefftree/agg-discovery-v2-usage
Use Aggregated Discovery v2 types and promote to GA
2024-03-01 14:41:02 -08:00
Kubernetes Prow Robot
8b8d133770 Merge pull request #123564 from ivelichkovich/tests
promote match conditions e2e tests to conformance
2024-03-01 12:06:09 -08:00
Jefftree
462dd326c2 Use v2 types with agg discovery 2024-03-01 13:15:22 -05:00
Kubernetes Prow Robot
df366107d1 Merge pull request #123529 from thockin/go-workspaces
Go workspaces for k/k and k/staging/*
2024-03-01 08:43:03 -08:00
Igor Velichkovich
dde48918dd promote match conditions e2e tests to conformance 2024-03-01 10:04:42 -06:00
Kubernetes Prow Robot
055b51728c Merge pull request #123554 from jsafrane/selinux-rwx-tests
Add tests for SELinuxMount feature
2024-03-01 06:43:17 -08:00
Jan Safranek
74417b517a Tag all feature gates required by a test
Use all necessary feature gates in SELinuxMount tests.
2024-03-01 14:38:24 +01:00
Tim Hockin
81ba0f3b44 Make golang::setup-env turn on workspaces
Both GO111MODULE and GOWORK default to on, so this just unsets them.  We
could set them to explicit values but this seems equivalent and cleaner.
2024-02-29 22:07:42 -08:00