Commit Graph

127191 Commits

Author SHA1 Message Date
Richa Banker
99eedea5cc Remove the feature-gate check before populating serverRunOptions.Flagz 2025-02-20 19:33:34 -08:00
yongruilin
a0eb3acf30 test: Add emulated-version flag verification in flagz test 2025-02-20 18:54:51 -08:00
yongruilin
8b3a93b843 fix: flagz endpoint to return parsed flags value 2025-02-20 18:54:04 -08:00
Kubernetes Prow Robot
dce86010a0
Merge pull request #130034 from aroradaman/automated-cherry-pick-of-#130032-upstream-release-1.32
Automated cherry pick of #130032: Conntrack memory leak fix
2025-02-19 08:38:27 -08:00
Kubernetes Prow Robot
fdf6d464bf
Merge pull request #130253 from fuweid/1.32-backport-130126
[release-1.32] proxy: should add PingPeriod for websocket translator
2025-02-19 07:16:27 -08:00
Wei Fu
f5fc57e1ee proxy: should add PingPeriod for websocket translator
IIUC, before using the translator handler, the ping data can be delivered from
the client to the runtime side since kube-apiserver does not parse any client
data. However, with WebSocket, the server responds with a pong to the client
without forwarding the data to the runtime side. If a proxy is present, it may
close the connection due to inactivity. SPDY's PingPeriod can help address this
issue.

Signed-off-by: Wei Fu <fuweid89@gmail.com>
Co-authored-by: Antonio Ojea <aojea@google.com>
(cherry picked from commit dc59c0246f)
Signed-off-by: Wei Fu <fuweid89@gmail.com>
2025-02-18 21:21:21 -05:00
Kubernetes Prow Robot
0126bb57a8
Merge pull request #130175 from liggitt/go-tools-132
[release-1.32][go1.23] Honor KUBE_HACK_TOOLS_GOTOOLCHAIN
2025-02-14 17:24:21 -08:00
Jordan Liggitt
1f27b75275
Honor KUBE_HACK_TOOLS_GOTOOLCHAIN 2025-02-14 13:00:04 -05:00
Kubernetes Release Robot
ac28939fdd Update CHANGELOG/CHANGELOG-1.32.md for v1.32.2 2025-02-12 21:40:30 +00:00
Kubernetes Release Robot
67a30c0adc Release commit for Kubernetes v1.32.2 2025-02-12 21:19:46 +00:00
Kubernetes Prow Robot
5841717525
Merge pull request #130078 from cpanato/update-go-132
[release-1.32][go] Bump images, dependencies and versions to go 1.23.6 and distroless iptables
2025-02-11 15:47:58 -08:00
cpanato
ae0ec29cbf
Bump images, dependencies and versions to go 1.23.6 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2025-02-10 21:27:24 -06:00
Kubernetes Prow Robot
393ffc7d26
Merge pull request #129966 from cpanato/update-go-rel132
[release-1.32][go] Bump images, dependencies and versions to go 1.23.5 and distroless iptables
2025-02-07 09:31:57 -08:00
Daman Arora
f0022d3752 bump netlink
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2025-02-07 17:40:31 +05:30
Kubernetes Prow Robot
80fb77ad8e
Merge pull request #130015 from aramase/aramase/f/disable_serviceaccountnodeaudiencerestriction_1.32
Disable ServiceAccountNodeAudienceRestriction feature gate by default in v1.32
2025-02-07 01:11:55 -08:00
Kubernetes Prow Robot
b53c36d327
Merge pull request #130010 from tallclair/automated-cherry-pick-of-#129739-upstream-release-1.32
Automated cherry pick of #129739: Kubelet server handler cleanup
2025-02-06 23:47:56 -08:00
Anish Ramasekar
953ac56c21
Disable ServiceAccountNodeAudienceRestriction feature gate by default in v1.32
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-02-06 13:50:47 -06:00
Tim Allclair
302fab7411 Kubelet server handler cleanup 2025-02-06 10:57:29 -08:00
Kubernetes Prow Robot
33ca881223
Merge pull request #129928 from mimowo/fix-job-int-test-1.32
Cherry-pick #129894 and #129913: Deflake job integration test 1.32
2025-02-04 08:35:00 -08:00
cpanato
fa68823677
Bump images, dependencies and versions to go 1.23.5 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2025-02-03 18:44:30 +01:00
Michal Wozniak
45b2f1c200 Fix the remaining flaky integration tests in Job controller 2025-01-31 10:43:10 +01:00
Michal Wozniak
9d0179ee11 WIP: fix the flaky Job integration tests 2025-01-31 10:42:59 +01:00
Kubernetes Prow Robot
faf35b4eac
Merge pull request #129862 from neolit123/automated-cherry-pick-of-#129859-origin-release-1.32
Automated cherry pick of #129859: kubeadm: use the v1beta4 EtcdAPICall timeout for etcd calls
2025-01-30 05:55:23 -08:00
Lubomir I. Ivanov
5cc748f324 kubeadm: use the v1beta4 EtcdAPICall timeout for etcd calls
v1beta4 added the Timeouts struct and a EtcdAPICall timeout
field, but it was never used in the etcd client calls.

This is a bug, so it should be fixed, we also reduced
the timeout from 200 seconds exponentional backoff to 2 minute
linear default timeout.
2025-01-28 17:52:52 +02:00
Kubernetes Prow Robot
dac2e30a73
Merge pull request #129627 from gnufied/automated-cherry-pick-of-#129618-upstream-release-1.32
Automated cherry pick of #129618: Bump CSI sidecars to fix CI issues and such
2025-01-28 05:31:26 -08:00
Kubernetes Prow Robot
ad81b22354
Merge pull request #129743 from pjsharath28/automated-cherry-pick-of-#128997-upstream-release-1.32
Automated cherry pick of #128997: Replaced util.NewIOHandler() with fakeIOHandler to make UT pass on different host envs
2025-01-28 04:19:37 -08:00
Kubernetes Prow Robot
ce39aed39e
Merge pull request #129740 from bobsongplus/automated-cherry-pick-of-#129629-upstream-release-1.32
Automated cherry pick of #129629: Fix: touch /dev/null permission denied on macos
2025-01-28 04:19:30 -08:00
Kubernetes Prow Robot
4ac02cbbbd
Merge pull request #129608 from neolit123/automated-cherry-pick-of-#129594-origin-release-1.32
Automated cherry pick of #129594: kubeadm: remove misplaced error during image pull
2025-01-28 04:19:23 -08:00
Kubernetes Prow Robot
5648b9caa8
Merge pull request #129782 from pohly/apidiff-release-1.32
hack: backport apidiff.sh
2025-01-23 07:36:58 -08:00
Patrick Ohly
9ade604a07 hack: backport apidiff.sh
This makes the script identical to current
master (f3cbd79db7). This is needed
because pull-kubernetes-apidiff-client-go is the same for all
branches and assumes that the script automatically determines
the diff based on Prow env variables.
2025-01-23 13:06:39 +01:00
song
11c3bd3038 Fix: touch /dev/null permission denied on macos
Signed-off-by: song <tinysong1226@gmail.com>
2025-01-22 09:22:35 +08:00
Kubernetes Prow Robot
643951a962
Merge pull request #129674 from gohilankit/automated-cherry-pick-of-#129630-upstream-release-1.32
Automated cherry pick of #129630: Fix Portworx plugin's CSI translation to copy secret name & namespace
2025-01-21 13:42:36 -08:00
Abhishek Kr Srivastav
4e43ab095e Added check for multipath device mapper
Addressed review comments
2025-01-21 15:09:17 +05:30
Ankit Gohil
051414a53a Fix Portworx plugin's CSI translation to copy secret name & namespace 2025-01-17 06:01:40 +00:00
Kubernetes Release Robot
6473e7b6ca Update CHANGELOG/CHANGELOG-1.32.md for v1.32.1 2025-01-15 15:00:37 +00:00
Kubernetes Release Robot
e9c9be4007 Release commit for Kubernetes v1.32.1 2025-01-15 14:31:54 +00:00
Hemant Kumar
0bf3f03dda We still can't rely on first condition being fs-expansion pending condition
Also, we don't really need this check here, because code above already
checks for fs expansion
2025-01-14 18:57:28 -05:00
Hemant Kumar
570f550189 Bump CSI sidecars to fix CI issues and such 2025-01-14 18:57:28 -05:00
Kubernetes Prow Robot
5fe148234f
Merge pull request #129598 from aravindhp/automated-cherry-pick-of-#129595-upstream-release-1.32
Automated cherry pick of #129595: kubelet: use env vars in node log query PS command
2025-01-14 10:26:35 -08:00
Lubomir I. Ivanov
8ed6e5c88d kubeadm: remove misplaced error during image pull
During preflight when an image is pulled, if the sandbox image
check returns an error, the same error later blocks the actual
image pull.
2025-01-14 09:25:55 +02:00
Aravindh Puthiyaparambil
00be157dab
kubelet: use env vars in node log query PS command
- Use environment variables to pass string arguments in the node log
  query PS command
- Split getLoggingCmd into getLoggingCmdEnv and getLoggingCmdArgs
  for better modularization
2025-01-13 14:25:35 -08:00
Kubernetes Prow Robot
e616858316
Merge pull request #129544 from pohly/automated-cherry-pick-of-#129543-origin-release-1.32
Automated cherry pick of #129543: DRA API: bump maximum size of ReservedFor to 256
2025-01-10 11:14:31 -08:00
Patrick Ohly
aba61276ed DRA e2e: adapt to increased ReservedFor limit
We want to be sure that the maximum number of pods per claim are actually
scheduled concurrently. Previously the test just made sure that they ran
eventually.

Running 256 pods only works on more than 2 nodes, so network-attached resources
have to be used. This is what the increased limit is meant for anyway. Because
of the tightened validation of node selectors in 1.32, the E2E test has to
use MatchExpressions because they allow listing node names.
2025-01-10 16:08:34 +01:00
Kubernetes Prow Robot
181bc4773b
Merge pull request #129528 from tnqn/automated-cherry-pick-of-#129201-upstream-release-1.32
Automated cherry pick of #129201: Add watch permission to namespace-controller for WatchListClient feature
2025-01-10 06:00:31 -08:00
Kubernetes Prow Robot
08ec9118a0
Merge pull request #129429 from neolit123/automated-cherry-pick-of-#129418-origin-release-1.32-1735554474
Automated cherry pick of #129418 kubeadm: skip disabled addons in clusterconfig on upgrade
2025-01-09 17:38:31 -08:00
Patrick Ohly
a5de75458e DRA API: bump maximum size of ReservedFor to 256
The original limit of 32 seemed sufficient for a single GPU on a node. But for
shared non-local resources it is too low. For example, a ResourceClaim might be
used to allocate an interconnect channel that connects all pods of a workload
running on several different nodes, in which case the number of pods can be
considerably larger.

256 is high enough for currently planned systems. If we need something even
higher in the future, an alternative approach might be needed to avoid
scalability problems.

Normally, increasing such a limit would have to be done incrementally over two
releases. In this case we decided on
Slack (https://kubernetes.slack.com/archives/CJUQN3E4T/p1734593174791519) to
make an exception and apply this change to current master for 1.33 and backport
it to the next 1.32.x patch release for production usage.

This breaks downgrades to a 1.32 release without this change if there are
ResourceClaims with a number of consumers > 32 in ReservedFor. In practice,
this breakage is very unlikely because there are no workloads yet which need so
many consumers and such downgrades to a previous patch release are also
unlikely. Downgrades to 1.31 already weren't supported when using DRA v1beta1.
2025-01-09 14:27:03 +01:00
Kubernetes Prow Robot
db14116697
Merge pull request #129495 from MadhavJivrajani/132-go124-webhook-regex-ut
[go1.24][1.32] webhook: alter regex to account for x509sha1 GODEBUG removal
2025-01-09 03:46:39 -08:00
Kubernetes Prow Robot
4466b1347a
Merge pull request #129322 from ardaguclu/automated-cherry-pick-of-#129301-upstream-release-1.32
Automated cherry pick of #129301: Do not attempt to truncate revision history if revisionHistoryLimit is negative
2025-01-09 03:46:31 -08:00
Kubernetes Prow Robot
117a48fcdf
Merge pull request #129455 from neolit123/automated-cherry-pick-of-#129418-origin-release-1.32-1735822604
Automated cherry pick of #129452 kubeadm: fix a bug where the node.skipPhases in UpgradeNodeConfigurat…
2025-01-08 14:06:38 -08:00
Kubernetes Prow Robot
88f4a70c32
Merge pull request #129180 from RomanBednar/automated-cherry-pick-of-#128086-upstream-release-1.32
Automated cherry pick of #128086: prevent unnecessary resolving of iscsi/fc devices to dm
2025-01-08 14:06:31 -08:00