Commit Graph

127106 Commits

Author SHA1 Message Date
Tim Allclair
5a3a40cd19 Handle resize edge cases around min CPU shares 2024-11-07 17:02:25 -08:00
Tim Allclair
8661f743a3 Fix AllocatedResources feature gate annotation 2024-11-07 16:31:25 -08:00
Kubernetes Prow Robot
210deea063
Merge pull request #128681 from soltysh/client-go_port_forward_reset
Client go port forward reset, error handling and tests
2024-11-07 23:33:03 +00:00
Kubernetes Prow Robot
b09acdfc72
Merge pull request #128674 from richabanker/master
Fix OIDC flags
2024-11-07 23:32:56 +00:00
Mark Rossetti
3c9380c449
Memory manager support for Windows nodes (#128560) 2024-11-07 23:32:49 +00:00
Kubernetes Prow Robot
8504758a2e
Merge pull request #125757 from Nordix/esotsal/125205
[FG:InPlacePodVerticalScaling] Fix backoff problem when quickly reverting resize patch
2024-11-07 23:32:42 +00:00
Achraf BOUAOUDA
3fa38a28e4 bug(quota): handle ResourcesChanged on resource quota filter 2024-11-07 23:51:38 +01:00
Abu Kashem
25efc8f2d1 handle watch for unsafe delete 2024-11-07 17:37:59 -05:00
Abu Kashem
9932dbef57 add access control check for unsafe delete
add access control check to ensure that the user has permission to do
'unsafe-delete-ignore-read-error' on the resource being deleted
2024-11-07 17:37:59 -05:00
Abu Kashem
367a265c0e add an integration test that exercises the unsafe delete flow
- add an integration test that exercises the unsafe delete flow
- extend newTransformTest to enable RBAC
- add integration test to verify that LIST returns corrupt object keys
2024-11-07 17:37:59 -05:00
Abu Kashem
5d4b4a160d implement unsafe deletion, and wire it
- implement unsafe deletion, and wire it
- aggregate corrupt object error(s) from the storage LIST operation
- extend storage error:
a) add a new type ErrCodeCorruptObj to represent a corrupt object:
b) add a new member 'InnerErr error' to StorageError to hold
   the inner error
- add API status error
2024-11-07 17:37:59 -05:00
Abu Kashem
aff05b0bca api: run codegen
run 'make update' to code gen for changes in meta/v1 DeleteOptions
2024-11-07 17:37:55 -05:00
Kubernetes Prow Robot
b7113809cb
Merge pull request #128670 from liggitt/externaljwt-broadcast
Move broadcast of key updates into sync, fixup of externaljwt generation / test
2024-11-07 22:20:58 +00:00
Kubernetes Prow Robot
ab30adcbae
Merge pull request #128356 from lauralorenz/crashloopbackoff-maintain10minuterecoverythreshold
KEP-4603: Maintain current 10 minute recovery threshold for container backoff regardless of changes to the maximum duration
2024-11-07 22:20:50 +00:00
Kubernetes Prow Robot
3300aa1783
Merge pull request #128247 from mattcary/autodelete-ga
Promote StatefulSetAutoDeletePVC to stable in 1.32
2024-11-07 22:20:43 +00:00
vivzbansal
cf8ee421f1 Updated the comment of IsRestartableInitContainer(...) 2024-11-07 22:14:22 +00:00
vivzbansal
0548756f06 Fix duplicate import error 2024-11-07 21:23:18 +00:00
vivzbansal
763e810fb5 refactor code to add sidecar container support in IPPR 2024-11-07 21:20:48 +00:00
Lionel Jouin
d84c8d2a64 [KEP-4817] make update 2024-11-07 22:19:09 +01:00
Lionel Jouin
118356175d [KEP-4817] Add limits on conditions and IPs + fix documentation
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
2024-11-07 22:18:53 +01:00
Kir Kolyshkin
19477b7eed kubelet/kuberuntime: use sync.OnceValue
This was added to Go 1.21, and makes the code simpler.

(Best reviewed ignoring changes in amount of whitespace).

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2024-11-07 13:11:49 -08:00
Kubernetes Prow Robot
6e25c2a456
Merge pull request #128668 from liggitt/externaljwt
Update staging docs to add externaljwt
2024-11-07 21:07:17 +00:00
Kubernetes Prow Robot
601feb8ccb
Merge pull request #128661 from sanposhiho/split-test
fix: move the queueing integration tests to another package to address the timeout issue
2024-11-07 21:07:09 +00:00
Kubernetes Prow Robot
b82013ecd6
Merge pull request #127326 from stlaz/ctb_new_signer
trustbundles: add a new kube-apiserver-serving signer
2024-11-07 21:07:02 +00:00
Kubernetes Prow Robot
1dd81aa1c9
Merge pull request #126653 from zhifei92/fix-podstatus
fix the issue of losing the pending phase after a node restart.
2024-11-07 21:06:54 +00:00
Kubernetes Prow Robot
1ce20b2b6f
Merge pull request #126336 from HirazawaUi/remove-runonce-mode
Kubelet: Remove runonce mode
2024-11-07 21:06:46 +00:00
Kir Kolyshkin
3a1b0f2864 kubelet/kuberuntime: switch to runc/libct
runc/libcontainer/cgroups.ParseCgroupFile is a universal function; for
cgroup v2 it returns path to unified in a map with "" as a key.

Let's use it here, dropping cgroups dependency entirely.

Amends commit e86d02b60c.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2024-11-07 13:04:56 -08:00
Richa Banker
8bf6eecedf add statusz implementation and enablement in apiserver 2024-11-07 12:37:38 -08:00
carlory
b209a62483 Fix OIDC flags 2024-11-07 12:28:03 -08:00
Maciej Szulik
0b1617ccef
Clean error handling in port-forward
This commit introduces:
1. Cleanups in port-forwarding error handling code, which ensures that
   we only compare lowercased text always.
2. E2E verifying that when a pod is removed a port-forward is stopped.

Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2024-11-07 21:19:59 +01:00
Nic
dbe6b6657b
fix: draining remote stream after port-forward connection broken
Signed-off-by: Nic <qianyong@api7.ai>
2024-11-07 21:19:59 +01:00
Abu Kashem
b6773f1589
api: add a new field to meta/v1 DeleteOptions
- add a new boolean field
  IgnoreStoreReadErrorWithClusterBreakingPotential to meta/v1 DeleteOptions

- add validation for the new delete option
add validation for the new field in the delete options
ignoreStoreReadErrorWithClusterBreakingPotential

- prevent the pod eviction handler from issuing an unsafe pod delete
prevent the pod eviction handler from enabling the
'ignoreStoreReadErrorWithClusterBreakingPotential' delete option
2024-11-07 15:12:56 -05:00
Sreeram Venkitesh
851dbf25e5 Added unit tests 2024-11-08 01:17:05 +05:30
Kubernetes Prow Robot
847be85000
Merge pull request #128657 from ffromani/unshare-containermap-among-managers
node: cm: don't share containerMap instances between managers
2024-11-07 19:45:20 +00:00
Kubernetes Prow Robot
aee1a91896
Merge pull request #128644 from huww98/multi-volume-part-1
kubelet: don't check for mounted before update dsw PV size
2024-11-07 19:45:11 +00:00
Kubernetes Prow Robot
25101d33bc
Merge pull request #128518 from tallclair/pleg-watch-conditions
[FG:InPlacePodVerticalScaling] PLEG watch conditions: rapid polling for expected changes
2024-11-07 19:45:01 +00:00
Kubernetes Prow Robot
fb033826a8
Merge pull request #128170 from sanposhiho/async-preemption
feature(KEP-4832): asynchronous preemption
2024-11-07 19:44:54 +00:00
Kubernetes Prow Robot
9660e5c4cd
Merge pull request #127360 from knight42/feat/split-stdout-stderr-server-side
API: add a new `Stream` field to `PodLogOptions`
2024-11-07 19:44:45 +00:00
Jordan Liggitt
070f74bbdb
Add definitions for non-dockerized proto generation 2024-11-07 14:17:26 -05:00
Jordan Liggitt
c68a11a09f
Deflake supported key ack 2024-11-07 14:14:39 -05:00
Jordan Liggitt
dc41c91a07
Move broadcast of key updates into sync 2024-11-07 14:07:33 -05:00
Sotiris Salloumis
68fcc9cf8a Fix slow reconcile when quickly reverting resize patch 2024-11-07 19:51:47 +01:00
Laura Lorenz
a0b83a7741 Maintain 10 minute recovery threshold for container backoff
Signed-off-by: Laura Lorenz <lauralorenz@google.com>
2024-11-07 18:46:11 +00:00
Kubernetes Prow Robot
9c571abeec
Merge pull request #128658 from stlaz/ctb_alpha_extend
clustertrustbundles: extend alpha for 2 more releases
2024-11-07 18:32:58 +00:00
Kubernetes Prow Robot
7243fa60e1
Merge pull request #128641 from benluddy/e2e-cbor-client-compat
KEP-4222: Fix JSON fallback for clients using default content-type and add E2E client test.
2024-11-07 18:32:50 +00:00
Kubernetes Prow Robot
631d83b56f
Merge pull request #128569 from tenzen-y/add-job-evaluation-orders-comment
Job: Add evaluation step comments in the syncJob
2024-11-07 18:32:43 +00:00
Kubernetes Prow Robot
50362ac7d0 Promote StatefulSetAutoDeletePVC to stable for 1.32. 2024-11-07 09:43:49 -08:00
Kensei Nakada
6e19d5ac79 fix: move the queueing integration tests to another package to address the timeout issue 2024-11-08 02:33:57 +09:00
Stanislav Láznička
a4b83e77d9
trustbundles: add a new kube-apiserver-serving signer 2024-11-07 18:07:06 +01:00
Sotiris Salloumis
2d8939c4ae Gate: disallow in-place resize for guaranteed pods on nodes with a static topology policy
New gate "InPlacePodVerticalScalingExclusiveCPUs" is off by default,
but can be enabled to unblock development of Static CPU management alongside
InPlacePodVerticalScaling.
2024-11-07 16:59:23 +00:00