Kubernetes Prow Robot
a9c156baef
Merge pull request #125787 from dims/pandaamanda-remove_apiserver_logs_api
...
kube-apiserver: default --enable-logs-handler flag to false
2024-06-29 11:23:12 -07:00
Kubernetes Prow Robot
fa75b4371d
Merge pull request #125550 from sanposhiho/scheduler_perf-gated
...
add a test case with gated pod-affinity pods to scheduler_perf
2024-06-29 07:06:42 -07:00
Kubernetes Prow Robot
a7832cc169
Merge pull request #123102 from astundzia/master
...
kubeadm: Validate only the first cert entry when external ca mode is used
2024-06-29 01:07:45 -07:00
Kensei Nakada
d6d55196ae
add a test case with PodAffinity gated pods to scheduler_perf
2024-06-29 03:35:10 +00:00
Kubernetes Prow Robot
34b8832edb
Merge pull request #125631 from SergeyKanzhelev/logFailedAdmission
...
improve logging of pod admission denied
2024-06-28 19:36:20 -07:00
Lin Yang
4093c354f0
[code-generator] feat: add func for generating register code ( #124946 )
...
* feat: add func for generating register code
* refactor:remove unused local variable
* fix: make the function name singular
Signed-off-by: Lin Yang <reaver@flomesh.io>
* fix: precisely matching the comment tag for register-gen
Signed-off-by: Lin Yang <reaver@flomesh.io>
---------
Signed-off-by: Lin Yang <reaver@flomesh.io>
2024-06-28 18:26:03 -07:00
Kubernetes Prow Robot
3fdf06ae08
Merge pull request #125401 from bitoku/fix-fail-message
...
Fix E2E error message
2024-06-28 16:48:38 -07:00
Kubernetes Prow Robot
16b7d5310a
Merge pull request #125047 from zhanluxianshen/clean-typos-in-kubelet
...
clean typos logs in kubelet.
2024-06-28 16:48:24 -07:00
Alex Stundzia
58ff17bbfa
When using external CA, look for common trust anchor within CA bundle.
2024-06-28 18:04:31 -05:00
Kubernetes Prow Robot
19d9e4fa7f
Merge pull request #125776 from vinayakankugoyal/armor2
...
Remove kubelet soft admission
2024-06-28 14:20:48 -07:00
Kubernetes Prow Robot
ac9aec9f9b
Merge pull request #125116 from pohly/dra-one-of-source
...
DRA: remove "source" indirection from v1 Pod API
2024-06-28 12:46:45 -07:00
Davanum Srinivas
a88dc632a4
kube-apiserver: default --enable-logs-handler flag to false
...
Co-Authored-By: Iceber Gu <wei.cai-nat@daocloud.io>
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-06-28 15:22:22 -04:00
Patrick Ohly
8e37501cd4
api: remove obsolete validation of deterministic claim name
...
When replacing the deterministic ResourceClaim name with a generated one this
particular piece of the original validation was incorrectly left in place.
It's not required anymore that "<pod name>-<claim name in pod spec>" is a valid
ResourceClaim name.
2024-06-28 20:38:50 +02:00
Matthieu MOREL
0cde5f1e28
fix: enable bool-compare rule from testifylint linter ( #125135 )
...
* fix: enable bool-compare rule from testifylint linter
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
* Update hack/golangci.yaml.in
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
* Update golangci.yaml.in
* Update golangci-strict.yaml
* Update golangci.yaml.in
* Update golangci.yaml.in
* Update golangci.yaml.in
* Update golangci.yaml.in
* Update golangci.yaml
* Update golangci-hints.yaml
* Update golangci-strict.yaml
* Update golangci.yaml.in
* Update golangci.yaml
* Update mux_test.go
---------
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
2024-06-28 10:58:05 -07:00
Kubernetes Prow Robot
bcadbfcc55
Merge pull request #125496 from harche/cgroup_imp
...
KEP-4569: Separate cgroup v1 and v2 manager implementations
2024-06-28 09:54:02 -07:00
Kubernetes Prow Robot
5e331569e4
Merge pull request #125779 from SataQiu/fix-upgrade-diff-20240628
...
kubeadm: fix a bug where the path of the manifest can not be specified when 'upgrade diff' specified a config file
2024-06-28 07:04:00 -07:00
Kubernetes Prow Robot
eb66365bc4
Merge pull request #124931 from pohly/dra-scheduler-prebind-fix
...
DRA: fix scheduler/resource claim controller race
2024-06-28 05:57:24 -07:00
Harshal Patil
79495a21a8
Separate cgroup v1 and v2 manager implementations
...
Signed-off-by: Harshal Patil <harpatil@redhat.com>
2024-06-28 07:49:43 -04:00
Kubernetes Prow Robot
e832b70230
Merge pull request #125545 from claudiubelu/unittests-12
...
unittests: Fixes unit tests for Windows (part 12)
2024-06-28 03:57:56 -07:00
SataQiu
7c2384d374
kubeadm: mark '--api-server-manifest', '--controller-manager-manifest' and '--scheduler-manifest' as deprecated flags
2024-06-28 18:53:05 +08:00
SataQiu
975f1c978d
kubeadm: fix a bug where the path of the manifest can not be specified when 'upgrade diff' specified a config file
2024-06-28 18:01:19 +08:00
Claudiu Belu
b5e3b81de6
unittests: Fixes unit tests for Windows (part 12)
...
Currently, there are some unit tests that are failing on Windows due
to various reasons:
- IPVS proxy mode is not supported on Windows.
- pkg/kubelet/cri/remote was moved to cri-client.
2024-06-28 08:05:38 +00:00
Kubernetes Prow Robot
d40676c227
Merge pull request #122047 from aojea/treeless
...
KEP-1880 Multiple Service CIDRs: Graduate to Beta (1/2)
2024-06-28 01:00:20 -07:00
Vinayak Goyal
c3ae97056d
Remove kubelet soft admission.
2024-06-28 06:57:04 +00:00
Antonio Ojea
ac82ba67f7
update openapi
2024-06-28 06:54:14 +00:00
Kubernetes Prow Robot
f24211524b
Merge pull request #125714 from googs1025/add_defaultSelector_ut
...
chore: add DefaultSelector method ut
2024-06-27 22:10:59 -07:00
Kubernetes Prow Robot
4c44efe81c
Merge pull request #125759 from dims/bump-prometheus/common-v0.55.0
...
Bump `prometheus/common` to v0.55.0
2024-06-27 20:40:05 -07:00
Kubernetes Prow Robot
522e2e5066
Merge pull request #124917 from vinayakankugoyal/kep4633
...
KEP-4633: Only allow anonymous auth for configured endpoints.
2024-06-27 20:39:51 -07:00
Kubernetes Prow Robot
bec82cc63c
Merge pull request #125479 from kundan2707/kube_proxy_update
...
kube-proxy config update
2024-06-27 18:13:32 -07:00
Vinayak Goyal
5e6a4937f5
KEP-4633: Allow health-only anonymous auth mode.
...
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-06-28 00:30:05 +00:00
Kubernetes Prow Robot
2c6daa41de
Merge pull request #125162 from sttts/sttts-code-generator-core-group
...
code-generator/client-gen: decouple core group from package name 'api'
2024-06-27 16:12:15 -07:00
Antonio Ojea
2aeace5977
generated
2024-06-27 21:00:57 +00:00
Kubernetes Prow Robot
742b2f70b9
Merge pull request #125766 from dims/update-moby/spdystream-to-v0.4.0
...
Update moby/spdystream to v0.4.0
2024-06-27 13:02:35 -07:00
Kubernetes Prow Robot
010409ad0d
Merge pull request #125730 from p0lyn0mial/upstream-bring-back-consistent-read-from-cache-supports-pagination
...
apiserver/storage/cacher: consistent read from cache supports limit
2024-06-27 11:57:20 -07:00
Kubernetes Prow Robot
ef1d28aa52
Merge pull request #125177 from liggitt/dynamic-public-key
...
Move public key serviceaccount getter to interface, filter by key id
2024-06-27 11:57:06 -07:00
Kubernetes Prow Robot
991e7a8c15
Merge pull request #125646 from HirazawaUi/apply-null
...
Prune explicit nulls from client-side apply create
2024-06-27 10:40:14 -07:00
Kubernetes Prow Robot
df20694c62
Merge pull request #125600 from thockin/plus_default_deprecated_volumes
...
Use +default for deprecated volume types
2024-06-27 10:40:00 -07:00
Antonio Ojea
91c4aac738
document the API with the details about the allocation CIDR ranges
2024-06-27 17:18:00 +00:00
Davanum Srinivas
377a3f7ec4
Update moby/spdystream to v0.4.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-06-27 13:07:47 -04:00
Patrick Ohly
bde9b64cdf
DRA: remove "source" indirection from v1 Pod API
...
This makes the API nicer:
resourceClaims:
- name: with-template
resourceClaimTemplateName: test-inline-claim-template
- name: with-claim
resourceClaimName: test-shared-claim
Previously, this was:
resourceClaims:
- name: with-template
source:
resourceClaimTemplateName: test-inline-claim-template
- name: with-claim
source:
resourceClaimName: test-shared-claim
A more long-term benefit is that other, future alternatives
might not make sense under the "source" umbrella.
This is a breaking change. It's justified because DRA is still
alpha and will have several other API breaks in 1.31.
2024-06-27 17:53:24 +02:00
Kubernetes Prow Robot
41f21823f5
Merge pull request #125758 from SataQiu/improve-validateSupportedVersion-20240627
...
kubeadm: improve the error/warning messages of `validateSupportedVersion` to include the checked resource kind
2024-06-27 07:45:17 -07:00
Davanum Srinivas
35ccdc8b35
Bump prometheus/common to
v0.55.0
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-06-27 09:34:23 -04:00
Dr. Stefan Schimanski
ac3b7643ad
make codegen
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:33:08 +02:00
Dr. Stefan Schimanski
676d989713
code-generator/examples: fix json tags
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:41 +02:00
Dr. Stefan Schimanski
be2cf7e4d9
code-generator/client-gen: add example with single package api/v1
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:41 +02:00
Dr. Stefan Schimanski
6b2f779bd4
code-generator/client-gen: decouple core group from package name 'api'
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:40 +02:00
Dr. Stefan Schimanski
7e52d34852
code-generator/client-gen: add example with core group
...
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:39 +02:00
Patrick Ohly
4bddebc48e
DRA: fix scheduler/resource claim controller race with retry
...
The JSON patch approach works, but it is complex. A retry loop is easier to
understand (detect conflict, get new claim, try again). There is one additional
API call (the get), but in practice this scenario is unlikely.
2024-06-27 15:03:56 +02:00
Patrick Ohly
ecbafb8de5
DRA: fix scheduler/resource claim controller race
...
There was a race caused by having to update claim finalizer and status in two
different operations:
- Resource claim controller removes allocation, does not yet
get to remove the finalizer.
- Scheduler prepares an allocation, without adding the finalizer
because it's there.
- Controller removes finalizer.
- Scheduler adds allocation.
This is an invalid state. Automatic checking found this during the execution of
the "with translated parameters on single node.*supports sharing a claim
sequentially" E2E test, but only when run stand-alone. When running in
parallel (as in the CI), the bad outcome of the race did not occur.
The fix is to check that the finalizer is still set when adding the
allocation. The apiserver doesn't check that because it doesn't know which
finalizer goes with the allocation result. It could check for "some finalizer",
but that is not guaranteed to be correct (could be some unrelated one).
Checking the finalizer can only be done with a JSON patch. Despite the
complications, having the ability to add multiple pods concurrently to
ReservedFor seems worth it (avoids expensive rescheduling or a local retry
loop).
The resource claim controller doesn't need this, it can do a normal update
which implicitly checks ResourceVersion.
2024-06-27 15:03:06 +02:00
Lukasz Szaszkiewicz
2f9660db6b
apiserver/storage/watchcache: WaitUntilFreshAndList supports path prefix
2024-06-27 14:30:42 +02:00