Commit Graph

5958 Commits

Author SHA1 Message Date
Monis Khan
ba2a68e1db KEP-5284: add constrained impersonation metrics
See https://kep.k8s.io/5284 for details.

apiserver_impersonation_attempts_total{mode, decision}
apiserver_impersonation_attempts_duration_seconds{mode, decision}
apiserver_impersonation_authorization_attempts_total{mode, decision}
apiserver_impersonation_authorization_attempts_duration_seconds{mode, decision}

Signed-off-by: Monis Khan <mok@microsoft.com>
2026-03-05 15:26:45 -05:00
Kubernetes Prow Robot
2a5b28436c Merge pull request #137253 from tsj-30/fix-133435
DRA: start scheduler after creating binding/non-binding slicesin Basicflow
2026-03-02 17:21:01 +05:30
Jon Huhn
db8e2f4842 DRA: serialize binding conditions integration tests with custom scheduler config 2026-03-01 14:36:17 -06:00
Kubernetes Prow Robot
d63c9049c3 Merge pull request #137053 from danwinship/kep-4858-beta
KEP-4858: update StrictIPCIDRValidation to Beta
2026-02-28 00:49:30 +05:30
Kubernetes Prow Robot
cf876463cd Merge pull request #137272 from pmengelbert/pmengelbert/kuberc_name_to_command/1
Rename `name` to `command` in kuberc credentialPluginAllowlist entries
2026-02-27 23:25:30 +05:30
Kubernetes Prow Robot
887929bb95 Merge pull request #137147 from haojiwu/haoji/fix-issue-136288
Fix RepairIPAddress controller startup failure when namespace informer is not yet synced
2026-02-27 04:13:55 +05:30
Peter Engelbert
505b937bab Rename AllowlistEntry clientcmd.Name to Command
Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>
2026-02-26 13:27:46 -05:00
S J Tharun
d7e8ee8cfd start scheduler after creating binding/non-binding slices 2026-02-26 14:46:46 +05:30
S J Tharun
8a7e586b42 dra: stabilize DeviceBindingConditions BasicFlow by creating without-binding slice first 2026-02-26 11:34:54 +05:30
Karthik Bhat
43bfd8615d Refactor NewTestContext to return Context instead of TContext 2026-02-26 11:27:26 +05:30
haojiwu
ef30ab659e Update startup_race_test.go 2026-02-25 20:52:44 -08:00
Maciej Wyrzuc
ee5e2b1ec1 Extract tCtx and collectorCtx from executor 2026-02-25 10:16:50 +00:00
Maciej Wyrzuc
e123d5caf1 Separate operations and executor in scheduler_perf directory 2026-02-25 10:16:49 +00:00
Maciej Wyrzuc
fa36069c7f Extend template functions supported in scheduler perf 2026-02-25 10:16:49 +00:00
haojiwu
ce984590a2 Update startup_race_test.go 2026-02-20 16:02:28 -08:00
Jordan Liggitt
4ab6ae2a59 Drop direct use of github.com/stretchr/testify in component-helpers 2026-02-20 14:50:15 -05:00
Kubernetes Prow Robot
7336e04752 Merge pull request #137101 from richabanker/informer-metric-latency
Add processing latency metric for RealFIFO
2026-02-20 03:31:46 +05:30
Kubernetes Prow Robot
855ee92e19 Merge pull request #133407 from richabanker/mvp-egress-dialer
Add egress dialer to proxyClientConfig for Mixed Version Proxy
2026-02-20 01:45:43 +05:30
Kubernetes Prow Robot
8812ec563c Merge pull request #134353 from skitt/drop-string-slice
Deprecate obsolete slice utility functions
2026-02-20 00:57:41 +05:30
Richa Banker
50d2f0fce1 Add egress dialer to proxyClientConfig for Mixed Version Prpxy 2026-02-19 10:10:24 -08:00
Richa Banker
d049bd1233 Add processing latency metric for RealFIFO 2026-02-19 10:04:03 -08:00
haojiwu
124f6f01c6 Add test to reproduce issue 136288 2026-02-18 21:40:47 -08:00
Your Name
66a7bd6de6 Fix TestEtcdStoragePath for MutatingAdmissionPolicy emulation
This commit fixes a failure in TestEtcdStoragePath when emulating version 1.34. The test failure was caused by the removal of alpha versions from the test data during emulation, which prevented 'storageVersionAtEmulationVersion' from correctly resolving the storage version for MutatingAdmissionPolicy (which relies on v1alpha1 in this compatibility mode).

Changes:

- Updated GetEtcdStorageDataServedAt in test/integration/etcd/data.go to pass a full copy of etcdStorageData (including alpha versions) to storageVersionAtEmulationVersion.

- Added ExpectedGVK to MutatingAdmissionPolicy and MutatingAdmissionPolicyBinding in test/integration/etcd/data.go to ensure correct version resolution during tests.

- Removed explicit storage version overrides for MutatingAdmissionPolicy in pkg/kubeapiserver/default_storage_factory_builder.go as part of the graduation process.
2026-02-18 18:33:22 +00:00
Lalit Chauhan
962f5fe9ba Fix integration tests 2026-02-18 18:33:22 +00:00
Lalit Chauhan
0d5bdaedc9 promote MutatingAdmissionPolicy to v1: update plugin implementation
- Update MutatingAdmissionPolicy plugin to use v1 types.
2026-02-18 17:51:43 +00:00
Kubernetes Prow Robot
0ca5cba140 Merge pull request #135965 from kannon92/kep-5440-feature-gate-enable-e2e-test
set KEP-5440 to enabled by default
2026-02-18 18:13:38 +05:30
Maciej Wyrzuc
4a326b0196 Preempt pods in prebind phase without delete calls.
This change allows the preemption to preempt a pod that is not yet
bound, but is already in prebind phase) without issuing a delete call to the
apiserver.

Pods are added to a special map of pods currently in prebind phaseand
preemption can cancel the context that is used for given pod prebind phase ,
allowing it to gracefully handle error in the same manner as errors
coming out from prebind plugins. This results in pods being pushed to
backoff queue, allowing them to be rescheduled in upcoming scheduling
cycles.
2026-02-18 09:00:23 +00:00
Kubernetes Prow Robot
c9020bef5a Merge pull request #135732 from pohly/dra-upgrade-downgrade-device-taints
DRA: upgrade/downgrade device taints
2026-02-17 22:13:42 +05:30
Patrick Ohly
ff551f387f DRA E2E: disarm footgun in PodExternal
The implicit matching of the ResourceClaim name to ExternalClaim was
convenient (no need to specify the parameter) but did go wrong in integration
testing where there are multiple calls to ExternalClaim.
2026-02-17 16:35:36 +01:00
Patrick Ohly
e53d93a6bc DRA integration: fix data race
Gomega matchers cannot be used concurrently, they get mutated. Each user must
get its own separate instance.

    WARNING: DATA RACE
    Write at 0x00c0195da678 by goroutine 322445:
      github.com/onsi/gomega/matchers.(*AndMatcher).Match()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/matchers/and.go:18 +0x44
      github.com/onsi/gomega/internal.(*AsyncAssertion).pollMatcher()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/internal/async_assertion.go:387 +0xbe
      github.com/onsi/gomega/internal.(*AsyncAssertion).match()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/internal/async_assertion.go:415 +0x47b
      github.com/onsi/gomega/internal.(*AsyncAssertion).Should()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/internal/async_assertion.go:145 +0xc4
      k8s.io/kubernetes/test/integration/dra.testShareResourceClaimSequentially.func3()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/dra/resourceclaim_test.go:104 +0x361
      k8s.io/kubernetes/test/integration/dra.testShareResourceClaimSequentially.func5()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/dra/resourceclaim_test.go:139 +0xa1
      sync.(*WaitGroup).Go.func1()
          /home/prow/go/src/k8s.io/kubernetes/_output/local/go/cache/mod/golang.org/toolchain@v0.0.1-go1.25.7.linux-amd64/src/sync/waitgroup.go:239 +0x5d

    Previous write at 0x00c0195da678 by goroutine 322438:
      github.com/onsi/gomega/matchers.(*AndMatcher).Match()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/matchers/and.go:18 +0x44
      github.com/onsi/gomega/internal.(*AsyncAssertion).pollMatcher()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/internal/async_assertion.go:387 +0xbe
      github.com/onsi/gomega/internal.(*AsyncAssertion).match()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/internal/async_assertion.go:415 +0x47b
      github.com/onsi/gomega/internal.(*AsyncAssertion).Should()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/onsi/gomega/internal/async_assertion.go:145 +0xc4
      k8s.io/kubernetes/test/integration/dra.testShareResourceClaimSequentially.func3()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/dra/resourceclaim_test.go:104 +0x361
      k8s.io/kubernetes/test/integration/dra.testShareResourceClaimSequentially.func5()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/dra/resourceclaim_test.go:139 +0xa1
      sync.(*WaitGroup).Go.func1()
          /home/prow/go/src/k8s.io/kubernetes/_output/local/go/cache/mod/golang.org/toolchain@v0.0.1-go1.25.7.linux-amd64/src/sync/waitgroup.go:239 +0x5d
2026-02-17 14:38:25 +01:00
Kubernetes Prow Robot
23fc0bff62 Merge pull request #137049 from pohly/dra-scheduler-perf-failures
DRA scheduler_perf: avoid race between assume cache and Update calls
2026-02-17 16:37:04 +05:30
Kubernetes Prow Robot
f9c9f03b05 Merge pull request #136618 from macsko/workload_scheduling_cycle
KEP-4671: Introduce Workload Scheduling Cycle
2026-02-17 15:21:04 +05:30
Maciej Skoczeń
6233b25907 Introduce Workload Scheduling Cycle
Add integration tests for gang and basic policy workload scheduling

Add more tests for cluster snapshot

Proceed to binding cycle just after pod group cycle

Enforce one scheduler name per pod group, rename workload cycle to pod group cycle

Add unit tests for pod group scheduling cycle

Run ScheduleOne tests treating pod as part of a pod group

Rename NeedsPodGroupCycle to NeedsPodGroupScheduling

Observe correct per-pod and per-podgroup metrics during pod group cycle

Rename pod group algorithm status to waiting_on_preemption

Mention forgotAllAssumedPods is a safety check
2026-02-17 09:02:32 +00:00
Dan Winship
6182de8b13 KEP-4858: update StrictIPCIDRValidation to Beta 2026-02-16 10:55:45 -05:00
Patrick Ohly
ca0433bdb2 DRA scheduler_perf: avoid race between assume cache and Update calls
A updated claim can only be stored in the assume cache if the cache already
contains a copy of it. That wasn't guaranteed because the update operations
where based on listing existing claims without going through the cache.

To avoid the race, we can ensure that the assume cache is up-to-date before
we start updating claims and the cache. This is simpler than retrying the
assume call.
2026-02-16 13:47:39 +01:00
Stephen Kitt
d42d1e3d1f Deprecate obsolete slice utility functions
... and update users to use standard library functions.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
2026-02-16 10:04:33 +01:00
Kubernetes Prow Robot
03da245585 Merge pull request #134827 from michaelasp/rvStore
Add Resource Version query and Bookmarks to thread safe store
2026-02-13 03:58:00 +05:30
Kubernetes Prow Robot
d7f6f91dae Merge pull request #135820 from pohly/dra-sharing-claim-sequentially-test
DRA: sharing claim sequentially test
2026-02-13 01:50:09 +05:30
Kubernetes Prow Robot
5b63a8c68e Merge pull request #136921 from dims/dump-from-utils
Move dump package from apimachinery to k8s.io/utils
2026-02-12 22:28:10 +05:30
Davanum Srinivas
550cc8645b Move dump package from apimachinery to k8s.io/utils
Replace all imports of k8s.io/apimachinery/pkg/util/dump with
k8s.io/utils/dump across the repo. The apimachinery dump package
now contains deprecated wrapper functions that delegate to
k8s.io/utils/dump for backwards compatibility.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-02-12 07:34:19 -05:00
Patrick Ohly
0cb57b97e7 DRA integration: test sharing a claim sequentially
This used to be an E2E test, but it turned out to be too slow and unreliable
and therefore got removed. As an integration test we have a bit better control
over the environment, so it should be possible to avoid the same flakes.

Some of the slowness comes from pods entering backoff. Maybe this is an
opportunity for future improvements.

To support this tests, the ResourceClaim controller is needed. The framework
can start it on demand now, similar to how the scheduler was handled already.
2026-02-12 12:33:22 +01:00
Kevin Hannon
94cc00aebb set KEP-5440 to enabled by default and add two e2e tests confirming behavior 2026-02-11 23:17:21 -05:00
Michael Aspinwall
9c6ac550ef Add rv query to store 2026-02-12 00:41:25 +00:00
Kubernetes Prow Robot
54489c1a33 Merge pull request #136729 from ahmedtd/podcert-pkcs10
Pod Certificates: Add StubPKCS10Request; migrate in-tree usages
2026-02-12 04:43:59 +05:30
Antonio Ojea
2cfc90672a fix flake on ipaddress allocator integration test
The test need to consider the time for the Delete operation to populate
the ipallocator informer, otherwise, it can happen the allocator fails
with a range full failing the test.

Co-authored-by: hiirrxnn <hiren2004sharma@gmail.com>
2026-02-10 10:34:47 +00:00
Kubernetes Prow Robot
b6f27f1993 Merge pull request #136856 from pohly/dra-integration-timeouts
DRA integration: bump timeouts to 1 minute
2026-02-10 12:59:59 +05:30
Kubernetes Prow Robot
0bb75334dd Merge pull request #135464 from MikeSpreitzer/better-concurrency-test-margin
Relax the noise margin threshold in TestConcurrencyIsolation
2026-02-10 10:30:04 +05:30
Kubernetes Prow Robot
7b0310aadd Merge pull request #136820 from dims/update-otel-deps
Update OpenTelemetry dependencies to latest versions
2026-02-10 05:44:05 +05:30
Patrick Ohly
2238a33655 DRA integration: bump timeouts to 1 minute
The 30 second timeouts in binding condition testing recently flaked, probably
related to increasing parallelism in integration test jobs.
2026-02-09 13:21:13 +01:00
Mads Jensen
7883039b31 Remove unneeded use of fmt.Sprintf in test/{integration,e2e} 2026-02-08 14:34:13 +01:00