Commit Graph

28807 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
dd6f46856d Merge pull request #135117 from borg-land/bump-pvc-5g
provision 10G disks for testing pvc instead of 1 byte or 1GB
2025-11-04 20:56:11 -08:00
Kubernetes Prow Robot
22d41b5443 Merge pull request #135059 from macsko/reenable_async_api_calls
Re-enable SchedulerAsyncAPICalls feature in v1.35
2025-11-04 20:56:04 -08:00
Kubernetes Prow Robot
5fd9cefd95 Merge pull request #134995 from yongruilin/flagz-kk-structure
[KEP-4828] Flagz versioned structured response
2025-11-04 19:02:04 -08:00
Kubernetes Prow Robot
3d595e3691 Merge pull request #134803 from enj/enj/f/constrained_impersonation
KEP-5284: Implement Constrained Impersonation
2025-11-04 15:32:23 -08:00
Kubernetes Prow Robot
c1a6a3ca71 Merge pull request #134152 from pohly/dra-device-taints-1.35
DRA: device taints: new ResourceSlice API, new features
2025-11-04 15:32:07 -08:00
Kubernetes Prow Robot
dec78c833d Merge pull request #135094 from stlaz/fix-node-conformance-failures
Fix failures in node-e2e image pull tests
2025-11-04 14:32:11 -08:00
Kubernetes Prow Robot
459bea5adf Merge pull request #135084 from tallclair/resize-validation
Fix pod resize validation when adding non-resizable resources
2025-11-04 14:32:04 -08:00
upodroid
90f0fd09f2 provision 10G disks for testing pvc instead of 1 byte or 1GB 2025-11-05 01:25:13 +03:00
Kubernetes Prow Robot
97cb47a913 Merge pull request #135080 from dejanzele/feat/promote-job-managedby-to-ga
KEP-4368: Job Managed By; Promote to GA
2025-11-04 13:42:12 -08:00
Monis Khan
2a3f66d3f6 KEP-5284: Implement Constrained Impersonation
Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Monis Khan <mok@microsoft.com>

Co-authored-by: Jian Qiu <jqiu@redhat.com>
Co-authored-by: Monis Khan <mok@microsoft.com>
2025-11-04 16:30:49 -05:00
Patrick Ohly
3f45a675fc DRA integration: test eviction through DeviceTaintRule
This covers permissions and correct usage of SSA.
2025-11-04 21:57:24 +01:00
Kubernetes Prow Robot
934c34435a Merge pull request #134875 from Jpsassine/jpsassine-dra-health-fix
Fix bug in reporting health for templated and renamed DRA claims
2025-11-04 12:52:11 -08:00
yongruilin
09dfeeb988 test: add integration test for /flagz endpoint in scheduler 2025-11-04 19:45:32 +00:00
yongruilin
ba059168c3 test: add integration test for /flagz endpoint in KCM 2025-11-04 19:45:32 +00:00
yongruilin
16db8e2375 feat: add integration test for /flagz kube-apiserver endpoint 2025-11-04 19:45:32 +00:00
Kubernetes Prow Robot
08a9e4fca7 Merge pull request #135067 from natasha41575/ippr-conformance
[InPlacePodVerticalScaling] Promote IPPR e2e tests to conformance
2025-11-04 11:42:20 -08:00
Kubernetes Prow Robot
a058cf788a Merge pull request #134624 from yt2985/podcertificates-beta
Promote Pod Certificates feature to beta
2025-11-04 11:42:12 -08:00
Kubernetes Prow Robot
f620a04eb5 Merge pull request #135060 from pohly/dra-scheduler-perf-normal-tests-experimental-allocator
DRA scheduler_perf: benchmark baseline test cases with different allocators
2025-11-04 09:14:15 -08:00
Kubernetes Prow Robot
276c59af7c Merge pull request #134769 from dejanzele/fix-job-starttime-validation-on-resume
fix: allow job startTime updates on resume from suspended state
2025-11-04 09:14:08 -08:00
Stanislav Láznička
ed62db7acf e2e registry: run as pods even in seemingly in-cluster pull tests
Signed-off-by: Stanislav Láznička <slznika@microsoft.com>
2025-11-04 17:27:17 +01:00
Stanislav Láznička
a275785bd4 node conformance e2e: log fake registry creds on test failure 2025-11-04 17:26:40 +01:00
Stanislav Láznička
fba24a8e71 node-conformance-e2e: finite wait for pod status
Signed-off-by: Stanislav Láznička <slznika@microsoft.com>
2025-11-04 17:26:35 +01:00
Penghao
27a81144b2 Add checkpoint for groupsnapshot data consistency (#134637)
* Add checkpoint for groupsnapshot data consistency

Signed-off-by: Penghao <pewang@redhat.com>

* fix: using exist helpers check data consistency

Signed-off-by: Penghao <pewang@redhat.com>

---------

Signed-off-by: Penghao <pewang@redhat.com>
2025-11-04 08:20:15 -08:00
Kubernetes Prow Robot
af70ebcbf5 Merge pull request #132157 from haircommander/drop-userns-psa
drop UserNamespacesPodSecurityStandards feature gate
2025-11-04 08:20:08 -08:00
Kubernetes Prow Robot
f09cd625bc Merge pull request #135007 from ania-borowiec/nnn_code_update
KEP-5278 Bring back clearing NominatedNodeName after scheduling or binding failure
2025-11-04 07:14:24 -08:00
Arda Güçlü
9113013eb8 Introduce --as-user-extra persistent flag in kubectl (#134378)
* Introduce --as-user-extra as persistent flag

* Add integration test to verify the behavior

* Update flag type to string slice
2025-11-04 07:14:09 -08:00
Kubernetes Prow Robot
c7b6dfb144 Merge pull request #134730 from ania-borowiec/verify_ongoing_preemption
Verify if pod has ongoing async preemption before evicting pods
2025-11-04 06:22:09 -08:00
Kubernetes Prow Robot
4d0d412686 Merge pull request #135093 from pohly/dra-e2e-kind-jobs-config
Revert "prepare DRA kind config for kubeadm v1beta4"
2025-11-04 04:50:15 -08:00
Patrick Ohly
d132afc87e DRA scheduler_perf: benchmark baseline test cases with different allocators
When adding new features to the "experimental" allocator we are not directly
breaking "normal" usage of DRA because that uses the "incubating"
allocator. But we still want to know about potential performance problems also
for those test cases. If there is one, we might not be able to implement an
experimental feature in a way that allows promoting it later.

This is achieved by running the benchmarks twice as sub-tests, with different
topic names. The topic names then can be used to select different thresholds,
using a new extension of the scheduler_pref JSON config format.
2025-11-04 13:34:29 +01:00
Ania Borowiec
191ab8d78d Integration test verifying that in case a preemptor pod with higher priority arrives while preemption is ongoing, the lower priority preemptor does not get stuck in unschedulable 2025-11-04 11:57:39 +00:00
Ania Borowiec
9640da5452 Verify if pod has ongoing async preemption before evicting pods 2025-11-04 11:57:34 +00:00
Kubernetes Prow Robot
34bb3477a2 Merge pull request #135069 from jsafrane/snapshot-v1beta2
test: update volume group snapshots to v1beta2
2025-11-04 02:34:07 -08:00
Dejan Zele Pejchev
3dabd4417d KEP-4368: Job Managed By; Promote to GA
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
2025-11-04 10:59:45 +01:00
Ania Borowiec
c98804b77f Fix existing integration tests for NominatedNodeName 2025-11-04 09:45:50 +00:00
Patrick Ohly
1fc389c43f Revert "prepare DRA kind config for kubeadm v1beta4"
This reverts commit d17ed9be17.

The CI jobs append

    kubeadmConfigPatches:
    - |
      kind: ClusterConfiguration
      etcd:
        local:
          dataDir: /tmp/etcd

With that commit also adding kubeadmConfigPatches, all jobs break with

     mapping key "kubeadmConfigPatches" already defined at line 14

We have to update jobs first, then add the change back.
2025-11-04 09:37:32 +01:00
Tim Allclair
9b95eaf593 Fix pod resize validation when adding non-resizable resources 2025-11-03 20:39:37 -08:00
Kubernetes Prow Robot
48c56e04e0 Merge pull request #135017 from liggitt/stateful-set-noop-rollout
Fix spurious statefulset rollout from 1.33 → 1.34
2025-11-03 19:58:11 -08:00
Kubernetes Prow Robot
ddec0243ed Merge pull request #135016 from BenTheElder/kubeadm-kind-v1beta4
prepare kind configs for kubeadm v1beta4
2025-11-03 19:58:04 -08:00
John-Paul Sassine
1e8fc543cc Fix report health for templated and renamed DRA claims
The Kubelet's DRA manager was failing to report device health status in a pod's status for certain types of resource claims. The logic incorrectly assumed that the claim name used within the container's spec (`container.resources.claims[*].name`) was the same as the metadata name of the actual ResourceClaim object.

This assumption is false in two key scenarios:
1.  When a claim is generated from a `ResourceClaimTemplate`, Kubernetes creates a `ResourceClaim` object with a randomized suffix in its name.
2.  When a user defines a pre-existing claim in `pod.spec.resourceClaims`, they can provide a local name that differs from the actual `ResourceClaim` object's name.

In both cases, the code would fail to find the claim's information in its internal cache, resulting in the health status not being populated, as reported in issue #134482.

This fix corrects the logic by using `pod.Status.ResourceClaimStatuses` as the authoritative map to look up the actual, generated name of the `ResourceClaim` object. This ensures that both templated and renamed claims are resolved correctly before their health status is retrieved from the cache.

Additionally, this change introduces a new node e2e test that specifically covers templated and renamed claims to prevent future regressions.
2025-11-03 22:56:32 +00:00
Jordan Liggitt
979c442774 Fix spurious workload rollout due to null creationTimestamp in controller revisions 2025-11-03 17:11:06 -05:00
Kubernetes Prow Robot
3ec72e2e97 Merge pull request #135070 from pohly/e2e-slow-priority
E2E framework: start slow tests first
2025-11-03 13:24:11 -08:00
Natasha Sarkar
eb1a5b6ddf remove pod resize endpoints from pending eligible endpoints 2025-11-03 21:12:17 +00:00
Kubernetes Prow Robot
462c869354 Merge pull request #134326 from sairameshv/global_cache_dra
Add global cache to map between the deviceclass and the extended resource
2025-11-03 10:40:06 -08:00
Kubernetes Prow Robot
4e8499740e Merge pull request #134985 from swatisehgal/node-cm-ctx-logging-migration
node: cm: migrate container manager to contextual logging
2025-11-03 09:34:12 -08:00
Kubernetes Prow Robot
da2eea1bf2 Merge pull request #134263 from ardaguclu/autoscale-dryrun-client
Add given namespace in dryrun=client output of HPA
2025-11-03 09:34:05 -08:00
Jan Safranek
a3bf2abddb Move a comment about ginkgo to code that runs ginkgo 2025-11-03 18:29:46 +01:00
Jan Safranek
3e33e61968 Enable group snapshot tests
e2e.test now requires CSI_PROW_ENABLE_GROUP_SNAPSHOT to be enabled to run
the csi-driver-hostpath tests with volume group snapshots.

See https://github.com/kubernetes/kubernetes/pull/134214/
2025-11-03 18:28:36 +01:00
Patrick Ohly
f9ef004916 E2E framework: start slow tests first
This avoids the risk of having a slow test started towards the end of a run,
which then would cause the run to take longer. When started early they can run
in parallel to other tests. In serial runs it doesn't matter.

The implementation maps the Slow label to the new ginkgo.SpecPriority. The
default is 0. Tests with priority 1 run first.
2025-11-03 18:17:59 +01:00
Jan Safranek
321c1e37c0 Update group snapshot tests to v1beta2
Copy VolumeGroupSnapshot v1beta2 CRDs from the external-snapshotter and
disable v1beta1 API in them - we can't run the conversion webhook in e2e
tests easily.

Update e2e tests to use v1beta2.
2025-11-03 17:53:30 +01:00
Natasha Sarkar
de9138f4fa Promote IPPR e2e tests to conformance 2025-11-03 16:37:07 +00:00