Commit Graph

123604 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
a9c156baef
Merge pull request #125787 from dims/pandaamanda-remove_apiserver_logs_api
kube-apiserver: default --enable-logs-handler flag to false
2024-06-29 11:23:12 -07:00
Kubernetes Prow Robot
fa75b4371d
Merge pull request #125550 from sanposhiho/scheduler_perf-gated
add a test case with gated pod-affinity pods to scheduler_perf
2024-06-29 07:06:42 -07:00
Kubernetes Prow Robot
a7832cc169
Merge pull request #123102 from astundzia/master
kubeadm: Validate only the first cert entry when external ca mode is used
2024-06-29 01:07:45 -07:00
Kensei Nakada
d6d55196ae add a test case with PodAffinity gated pods to scheduler_perf 2024-06-29 03:35:10 +00:00
Kubernetes Prow Robot
34b8832edb
Merge pull request #125631 from SergeyKanzhelev/logFailedAdmission
improve logging of pod admission denied
2024-06-28 19:36:20 -07:00
Lin Yang
4093c354f0
[code-generator] feat: add func for generating register code (#124946)
* feat: add func for generating register code

* refactor:remove unused local variable

* fix: make the function name singular

Signed-off-by: Lin Yang <reaver@flomesh.io>

* fix: precisely matching the comment tag for register-gen

Signed-off-by: Lin Yang <reaver@flomesh.io>

---------

Signed-off-by: Lin Yang <reaver@flomesh.io>
2024-06-28 18:26:03 -07:00
Kubernetes Prow Robot
3fdf06ae08
Merge pull request #125401 from bitoku/fix-fail-message
Fix E2E error message
2024-06-28 16:48:38 -07:00
Kubernetes Prow Robot
16b7d5310a
Merge pull request #125047 from zhanluxianshen/clean-typos-in-kubelet
clean typos logs in kubelet.
2024-06-28 16:48:24 -07:00
Alex Stundzia
58ff17bbfa
When using external CA, look for common trust anchor within CA bundle. 2024-06-28 18:04:31 -05:00
Kubernetes Prow Robot
19d9e4fa7f
Merge pull request #125776 from vinayakankugoyal/armor2
Remove kubelet soft admission
2024-06-28 14:20:48 -07:00
Kubernetes Prow Robot
ac9aec9f9b
Merge pull request #125116 from pohly/dra-one-of-source
DRA: remove "source" indirection from v1 Pod API
2024-06-28 12:46:45 -07:00
Davanum Srinivas
a88dc632a4
kube-apiserver: default --enable-logs-handler flag to false
Co-Authored-By: Iceber Gu <wei.cai-nat@daocloud.io>
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-06-28 15:22:22 -04:00
Patrick Ohly
8e37501cd4 api: remove obsolete validation of deterministic claim name
When replacing the deterministic ResourceClaim name with a generated one this
particular piece of the original validation was incorrectly left in place.
It's not required anymore that "<pod name>-<claim name in pod spec>" is a valid
ResourceClaim name.
2024-06-28 20:38:50 +02:00
Matthieu MOREL
0cde5f1e28
fix: enable bool-compare rule from testifylint linter (#125135)
* fix: enable bool-compare rule from testifylint linter

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update hack/golangci.yaml.in

Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>

* Update golangci.yaml.in

* Update golangci-strict.yaml

* Update golangci.yaml.in

* Update golangci.yaml.in

* Update golangci.yaml.in

* Update golangci.yaml.in

* Update golangci.yaml

* Update golangci-hints.yaml

* Update golangci-strict.yaml

* Update golangci.yaml.in

* Update golangci.yaml

* Update mux_test.go

---------

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
2024-06-28 10:58:05 -07:00
Kubernetes Prow Robot
bcadbfcc55
Merge pull request #125496 from harche/cgroup_imp
KEP-4569: Separate cgroup v1 and v2 manager implementations
2024-06-28 09:54:02 -07:00
Kubernetes Prow Robot
5e331569e4
Merge pull request #125779 from SataQiu/fix-upgrade-diff-20240628
kubeadm: fix a bug where the path of the manifest can not be specified when 'upgrade diff' specified a config file
2024-06-28 07:04:00 -07:00
Kubernetes Prow Robot
eb66365bc4
Merge pull request #124931 from pohly/dra-scheduler-prebind-fix
DRA: fix scheduler/resource claim controller race
2024-06-28 05:57:24 -07:00
Harshal Patil
79495a21a8 Separate cgroup v1 and v2 manager implementations
Signed-off-by: Harshal Patil <harpatil@redhat.com>
2024-06-28 07:49:43 -04:00
Kubernetes Prow Robot
e832b70230
Merge pull request #125545 from claudiubelu/unittests-12
unittests: Fixes unit tests for Windows (part 12)
2024-06-28 03:57:56 -07:00
SataQiu
7c2384d374 kubeadm: mark '--api-server-manifest', '--controller-manager-manifest' and '--scheduler-manifest' as deprecated flags 2024-06-28 18:53:05 +08:00
SataQiu
975f1c978d kubeadm: fix a bug where the path of the manifest can not be specified when 'upgrade diff' specified a config file 2024-06-28 18:01:19 +08:00
Claudiu Belu
b5e3b81de6 unittests: Fixes unit tests for Windows (part 12)
Currently, there are some unit tests that are failing on Windows due
to various reasons:

- IPVS proxy mode is not supported on Windows.
- pkg/kubelet/cri/remote was moved to cri-client.
2024-06-28 08:05:38 +00:00
Kubernetes Prow Robot
d40676c227
Merge pull request #122047 from aojea/treeless
KEP-1880 Multiple Service CIDRs: Graduate to Beta (1/2)
2024-06-28 01:00:20 -07:00
Vinayak Goyal
c3ae97056d Remove kubelet soft admission. 2024-06-28 06:57:04 +00:00
Antonio Ojea
ac82ba67f7 update openapi 2024-06-28 06:54:14 +00:00
Kubernetes Prow Robot
f24211524b
Merge pull request #125714 from googs1025/add_defaultSelector_ut
chore: add DefaultSelector method ut
2024-06-27 22:10:59 -07:00
Kubernetes Prow Robot
4c44efe81c
Merge pull request #125759 from dims/bump-prometheus/common-v0.55.0
Bump `prometheus/common` to v0.55.0
2024-06-27 20:40:05 -07:00
Kubernetes Prow Robot
522e2e5066
Merge pull request #124917 from vinayakankugoyal/kep4633
KEP-4633: Only allow anonymous auth for configured endpoints.
2024-06-27 20:39:51 -07:00
Kubernetes Prow Robot
bec82cc63c
Merge pull request #125479 from kundan2707/kube_proxy_update
kube-proxy config update
2024-06-27 18:13:32 -07:00
Vinayak Goyal
5e6a4937f5 KEP-4633: Allow health-only anonymous auth mode.
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-06-28 00:30:05 +00:00
Kubernetes Prow Robot
2c6daa41de
Merge pull request #125162 from sttts/sttts-code-generator-core-group
code-generator/client-gen: decouple core group from package name 'api'
2024-06-27 16:12:15 -07:00
Antonio Ojea
2aeace5977 generated 2024-06-27 21:00:57 +00:00
Kubernetes Prow Robot
742b2f70b9
Merge pull request #125766 from dims/update-moby/spdystream-to-v0.4.0
Update moby/spdystream to v0.4.0
2024-06-27 13:02:35 -07:00
Kubernetes Prow Robot
010409ad0d
Merge pull request #125730 from p0lyn0mial/upstream-bring-back-consistent-read-from-cache-supports-pagination
apiserver/storage/cacher: consistent read from cache supports limit
2024-06-27 11:57:20 -07:00
Kubernetes Prow Robot
ef1d28aa52
Merge pull request #125177 from liggitt/dynamic-public-key
Move public key serviceaccount getter to interface, filter by key id
2024-06-27 11:57:06 -07:00
Kubernetes Prow Robot
991e7a8c15
Merge pull request #125646 from HirazawaUi/apply-null
Prune explicit nulls from client-side apply create
2024-06-27 10:40:14 -07:00
Kubernetes Prow Robot
df20694c62
Merge pull request #125600 from thockin/plus_default_deprecated_volumes
Use +default for deprecated volume types
2024-06-27 10:40:00 -07:00
Antonio Ojea
91c4aac738 document the API with the details about the allocation CIDR ranges 2024-06-27 17:18:00 +00:00
Davanum Srinivas
377a3f7ec4
Update moby/spdystream to v0.4.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-06-27 13:07:47 -04:00
Patrick Ohly
bde9b64cdf DRA: remove "source" indirection from v1 Pod API
This makes the API nicer:

    resourceClaims:
    - name: with-template
      resourceClaimTemplateName: test-inline-claim-template
    - name: with-claim
      resourceClaimName: test-shared-claim

Previously, this was:

    resourceClaims:
    - name: with-template
      source:
        resourceClaimTemplateName: test-inline-claim-template
    - name: with-claim
      source:
        resourceClaimName: test-shared-claim

A more long-term benefit is that other, future alternatives
might not make sense under the "source" umbrella.

This is a breaking change. It's justified because DRA is still
alpha and will have several other API breaks in 1.31.
2024-06-27 17:53:24 +02:00
Kubernetes Prow Robot
41f21823f5
Merge pull request #125758 from SataQiu/improve-validateSupportedVersion-20240627
kubeadm: improve the error/warning messages of `validateSupportedVersion` to include the checked resource kind
2024-06-27 07:45:17 -07:00
Davanum Srinivas
35ccdc8b35
Bump prometheus/common to v0.55.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-06-27 09:34:23 -04:00
Dr. Stefan Schimanski
ac3b7643ad
make codegen
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:33:08 +02:00
Dr. Stefan Schimanski
676d989713
code-generator/examples: fix json tags
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:41 +02:00
Dr. Stefan Schimanski
be2cf7e4d9
code-generator/client-gen: add example with single package api/v1
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:41 +02:00
Dr. Stefan Schimanski
6b2f779bd4
code-generator/client-gen: decouple core group from package name 'api'
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:40 +02:00
Dr. Stefan Schimanski
7e52d34852
code-generator/client-gen: add example with core group
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-06-27 15:16:39 +02:00
Patrick Ohly
4bddebc48e DRA: fix scheduler/resource claim controller race with retry
The JSON patch approach works, but it is complex. A retry loop is easier to
understand (detect conflict, get new claim, try again). There is one additional
API call (the get), but in practice this scenario is unlikely.
2024-06-27 15:03:56 +02:00
Patrick Ohly
ecbafb8de5 DRA: fix scheduler/resource claim controller race
There was a race caused by having to update claim finalizer and status in two
different operations:
- Resource claim controller removes allocation, does not yet
  get to remove the finalizer.
- Scheduler prepares an allocation, without adding the finalizer
  because it's there.
- Controller removes finalizer.
- Scheduler adds allocation.

This is an invalid state. Automatic checking found this during the execution of
the "with translated parameters on single node.*supports sharing a claim
sequentially" E2E test, but only when run stand-alone. When running in
parallel (as in the CI), the bad outcome of the race did not occur.

The fix is to check that the finalizer is still set when adding the
allocation. The apiserver doesn't check that because it doesn't know which
finalizer goes with the allocation result. It could check for "some finalizer",
but that is not guaranteed to be correct (could be some unrelated one).

Checking the finalizer can only be done with a JSON patch. Despite the
complications, having the ability to add multiple pods concurrently to
ReservedFor seems worth it (avoids expensive rescheduling or a local retry
loop).

The resource claim controller doesn't need this, it can do a normal update
which implicitly checks ResourceVersion.
2024-06-27 15:03:06 +02:00
Lukasz Szaszkiewicz
2f9660db6b apiserver/storage/watchcache: WaitUntilFreshAndList supports path prefix 2024-06-27 14:30:42 +02:00