Commit Graph

122143 Commits

Author SHA1 Message Date
Davanum Srinivas
fb5140f562
Rename cluster to storage_cluster_id for apiserver_storage_size_bytes metric
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-11 17:15:32 -04:00
Kubernetes Release Robot
7606cf7b3d CHANGELOG: Update directory for v1.30.0-rc.2 release 2024-04-11 17:05:57 +00:00
huweiwen
3a71fe57f7 ad controller: lift nodeAttachedTo.mountedByNode
optimize adc.nodeUpdate(). Time complexity reduced from O(n) to O(1), where n is the number of nodes.

Data stored in nodeAttachedTo.mountedByNode is now at actualStateOfWorld.inUseVolumes.

This refactor also ensures that we can record the state update even if the volume is not present in ASW yet.

The added BenchmarkNodeUpdate result is reduced from 28076923 to 16030 ns/op.
The previous BenchmarkPopulateActualStateOfWorld result is also reduced from 13s to 8s.
2024-04-11 15:35:17 +08:00
Wojciech Tyczyński
36141fa6fb Bump min watch timeout for secret & configmap manager in Kubelet 2024-04-10 19:36:29 +02:00
Wojciech Tyczyński
29e38c19b8 Allow for configuring MinWatchTimeout in Reflector and Informer. 2024-04-10 19:36:29 +02:00
Maksym Pavlenko
be4b7176dc
Fix Abs path validation on Windows (#124084)
* Windows: Consider slash-prefixed paths as absolute

filepath.IsAbs does not consider "/" or "\" as absolute paths, even
though files can be addressed as such. [1][2]

Currently, there are some unit tests that are failing on Windows due to
this reason.

[1] https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats#traditional-dos-paths
[2] https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#fully-qualified-vs-relative-paths

* Add test to verify IsAbs for windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Fix abs path validation on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Skipp path clean check for podLogDir on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Implement IsPathClean to validate path

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Add warn comment for IsAbs

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

---------

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
Co-authored-by: Claudiu Belu <cbelu@cloudbasesolutions.com>
2024-04-10 10:13:59 -07:00
Wojciech Tyczyński
4da185a601 Refactor informer constructors 2024-04-10 19:07:30 +02:00
Flavian Missi
e13ff5ece2 resourcequota: use singleflight.Group to reduce apiserver load
relates to #22422 and #123806
2024-04-10 15:54:56 +02:00
Stephen Heywood
a2a1e0434e Move 3 get*APIGroup endpoints to ineligible_endpoints.yaml 2024-04-10 11:52:22 +12:00
Sean Sullivan
98ecfd0468 Adds apiserver proxy doc.go 2024-04-09 17:56:46 +00:00
carlory
a6b2619274 remove unneeded func SyncReconstructedVolume from ActualStateOfWorld 2024-04-09 15:34:33 +08:00
Hiranmoy Das Chowdhury
0cd2588d4f deep copy issue in getting controller is solved 2024-04-09 11:14:33 +06:00
Xuzheng Chang
3e08030d53 fix wrong comments of dra
Signed-off-by: Xuzheng Chang <changxuzheng@huawei.com>
2024-04-09 09:41:25 +08:00
Ruediger Pluem
988bc86016 Appease gofmt 2024-04-08 20:06:56 +02:00
Ruediger Pluem
db51d5f99c Fix linter hints 2024-04-08 17:51:24 +02:00
Ruediger Pluem
0e13fa24ae Move flag mapping to a separate function and unit test it 2024-04-08 17:16:35 +02:00
Kevin Hannon
43e0bd4304 mark flaky jobs as flaky and move them to a different job 2024-04-08 09:27:15 -04:00
Hiroki Takatsuka
84ffc2fc3d
fix(job_controller): add delay duration to log message when enqueueing job 2024-04-07 16:42:48 +09:00
Kubernetes Prow Robot
9791f0d1f3
Merge pull request #124206 from cpanato/update-rules
Update publishing-bot rules to Go 1.21.9
2024-04-06 19:52:22 -07:00
Tim Hockin
ae01c2126f
Remove the gate "SkipReadOnlyValidationGCE"
One less GCE-specifc wart in the codebase.
2024-04-06 15:11:20 -07:00
cpanato
d19bff9a02
Update publishing-bot rules to Go 1.21.9
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-06 12:34:48 +02:00
guoguangwu
ad7799d07d fix: close tmp file
Signed-off-by: guoguangwu <guoguangwug@gmail.com>
2024-04-06 10:55:08 +08:00
Tim Hockin
ca1d4c1bc9 build_binaries: use return as it's not in a subshell anymore 2024-04-06 00:23:42 +03:00
Tim Hockin
29d6922df2 kube::golang::place_bins: more verbose output 2024-04-06 00:20:51 +03:00
Ed Bartosh
91099aca72 hacks: build main target without go in the PATH
`make` is able to build project binaries, but fails with
error `hack/lib/golang.sh: line 455: go: command not found`
trying to place them if go binary is not in the PATH.
This happens because kube::golang::place_bins uses different
environment than kube::golang::build_binaries.

Setting up an one environment for both `kube::golang::place_bins`
and `kube::golang::build_binaries` should solve this issue and allow
default make target to fully work without go binary in the PATH.
2024-04-05 17:36:57 +03:00
Kubernetes Prow Robot
f8930f980d
Merge pull request #124196 from cpanato/update-go-main
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
2024-04-05 07:30:42 -07:00
cpanato
1366f1f447
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-05 14:27:57 +02:00
Maciej Szulik
b40057db2a
Update applyconfig-gen for pacakges where group and dir differ in name
It is possible that package paths might differ from the group name, see
https://github.com/openshift/api/blob/master/operatorcontrolplane/v1alpha1/doc.go
notice that pacakge name is `operatorcontrolplane` whereas the group is
`controlplane.operator...`. This confuses the generator since it tries
to extrapolate the name of the package based on the group name. Whereas
the ImportTracker can properly recognize the import path. This leads to
cyclical imports in packages where the group name is different from the
actual import path.
2024-04-05 13:20:45 +02:00
HirazawaUi
4a4a04fa74 remove kubeadm unused function 2024-04-04 23:36:00 +08:00
Ruediger Pluem
3e646cd8cf Align go.mod and go.sum
Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:34:12 +02:00
Ruediger Pluem
2bdacbf685 Fix bind mounts of filesystems with specific mount options set
Currently bind mounts of filesystems with nodev, noexec, nosuid,
noatime, relatime or nodiratime options set fail if we are running in a
user namespace if the same options are not set for the bind mount.

In case we are running in a user name space fix this by searching the
mount options of the source filesystem for nodev, noexec, nosuid,
noatime, relatime or nodiratime and retry the bind mount with the
options found added.

Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:25:30 +02:00
Kubernetes Prow Robot
d9c54f69d4
Merge pull request #124174 from dims/update-x/net-for-CVE-2023-45288
Update x/net for CVE-2023-45288
2024-04-03 20:13:01 -07:00
Davanum Srinivas
99fac38d28
Update x/net for CVE-2023-45288
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-03 19:56:04 -04:00
Quan Tian
6fefa74616 Add tnqn to sig-network-reviewers
Signed-off-by: Quan Tian <qtian@vmware.com>
2024-04-03 16:10:17 +08:00
Kubernetes Release Robot
6673e7a93d CHANGELOG: Update directory for v1.30.0-rc.1 release 2024-04-02 19:30:33 +00:00
Kubernetes Prow Robot
ec301a5cc7
Merge pull request #124099 from cpanato/update-set-cap-debian-base
update setcap/debian-base to bookworm-v1.0.2
2024-04-02 08:24:11 -07:00
Kubernetes Prow Robot
c9f6d4e172
Merge pull request #124019 from alexzielenski/fix-ratcheting-flake
fix test flake caused by not waiting for CRD schema update
2024-04-02 07:00:11 -07:00
Nadia Pinaeva
56d1011aa5 kube-proxy: ensure nftables unit test parity with iptables.
Add packet tracing unit tests for ipv4 and ipv6.
Remove unreachable code from runChain, since some of the parsed rules
are never generated by the proxy implementation.

Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
2024-04-02 11:57:47 +02:00
Nadia Pinaeva
1c7b366182 kube-proxy: rename iptables unit test to match tested function name.
Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
2024-04-02 11:57:47 +02:00
Nadia Pinaeva
20bd3dd774 Update knftables to v0.0.16
Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
2024-04-02 11:57:47 +02:00
Kubernetes Prow Robot
e3bb757129
Merge pull request #124143 from enj/enj/i/svm_update_crd_flake
svm test: wait after updating CRD to avoid flakes
2024-04-01 14:19:35 -07:00
Monis Khan
f338ab5f95
svm test: wait after updating CRD to avoid flakes
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-04-01 16:15:29 -04:00
Kubernetes Prow Robot
79c61d5f03
Merge pull request #124124 from carlory/fix-124120
fix panic with SIGSEGV in kubeadm certs check-expiration
2024-04-01 01:35:34 -07:00
carlory
363fee59e4 fix panic with SIGSEGV in kubeadm certs check-expiration 2024-04-01 11:09:53 +08:00
Dr. Stefan Schimanski
62d379fa5a
kubectl: fix plugin lookup with positional arguments
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-03-31 19:45:41 +02:00
Krzysztof Dąbrowski
170d143b1a
Revert changes in tests 2024-03-30 20:47:29 +01:00
Krzysztof Dąbrowski
5e94ffe90b
nodeipam: poll nodes immediately 2024-03-29 20:56:08 +01:00
Alex Zielenski
0add741012 fix test flake caused by not waiting for CRD schema update 2024-03-29 08:54:10 -07:00
Kubernetes Prow Robot
3dedb8eb8c
Merge pull request #124111 from liggitt/deflake-authz-test
Deflake authz config reload test
2024-03-29 08:53:43 -07:00
Jordan Liggitt
02139c9102
Deflake authz config reload test 2024-03-29 10:18:45 -04:00