Commit Graph

121975 Commits

Author SHA1 Message Date
Matt Karrmann
bcf42255bb Refactor and simplify WaitForPodsRunningReady; update callers to use new interface 2024-04-17 23:18:26 -05:00
Matt Karrmann
272a055a46 Use new WaitForAlmostAllPodsReady function ins e2e setup 2024-04-17 23:18:26 -05:00
Matt Karrmann
fcdf67a815 Add WaitForAlmostAllPodsReady function, similar to previous WaitForPodsRunningReady function 2024-04-17 23:18:26 -05:00
Matt Karrmann
fe251cb737 Explicitity set contract for WaitForPodsRunningReady, and rewrite accordingly 2024-04-17 23:18:26 -05:00
Matt Karrmann
2537c10453 Improve logging and comments in WaitForPodsRunningReady 2024-04-17 23:18:26 -05:00
Matt Karrmann
273cd03c01 Cleanup WaitForPodsRunningReady: fail for bad pods and reword log message 2024-04-17 23:18:26 -05:00
Kubernetes Prow Robot
88350dbeb0
Merge pull request #118457 from rpluem-vf/nodev_noexec_nosuid_noatime_relatime_nodiratime
Fix bind mounts of filesystems with specific mount options set
2024-04-17 20:07:12 -07:00
Kubernetes Prow Robot
56e35c1fa4
Merge pull request #118387 from testwill/ioutil-csi
chore: io/ioutil deprecated
2024-04-17 18:29:56 -07:00
Kubernetes Prow Robot
0dc45103d8
Merge pull request #116781 from muff1nman/protobuf-fully-qualified-types
generate fully qualified type references
2024-04-17 16:05:02 -07:00
Kubernetes Release Robot
a7f9938cd5 CHANGELOG: Update directory for v1.30.0 release 2024-04-17 17:56:15 +00:00
Kubernetes Release Robot
d831b13e6f CHANGELOG: Update directory for v1.29.4 release 2024-04-16 21:41:06 +00:00
Kubernetes Release Robot
f1874adf5f CHANGELOG: Update directory for v1.28.9 release 2024-04-16 20:44:48 +00:00
Kubernetes Release Robot
69e332560d CHANGELOG: Update directory for v1.27.13 release 2024-04-16 15:20:21 +00:00
Kubernetes Prow Robot
b722d017a3
Merge pull request #124322 from ritazh/admission-ephemeralcontainers-envfrom
Add envFrom to serviceaccount admission plugin
2024-04-15 09:16:32 -07:00
Rita Zhang
128d6cc146
Add envFrom to serviceaccount admission plugin
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-04-12 10:49:30 -07:00
Kubernetes Prow Robot
cae35dba5a
Merge pull request #124283 from dims/rename-cluster-to-storage_cluster_id-for-apiserver_storage_size_bytes-metric
Rename Label `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
2024-04-12 00:13:00 -07:00
Davanum Srinivas
fb5140f562
Rename cluster to storage_cluster_id for apiserver_storage_size_bytes metric
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-11 17:15:32 -04:00
Kubernetes Release Robot
7606cf7b3d CHANGELOG: Update directory for v1.30.0-rc.2 release 2024-04-11 17:05:57 +00:00
Maksym Pavlenko
be4b7176dc
Fix Abs path validation on Windows (#124084)
* Windows: Consider slash-prefixed paths as absolute

filepath.IsAbs does not consider "/" or "\" as absolute paths, even
though files can be addressed as such. [1][2]

Currently, there are some unit tests that are failing on Windows due to
this reason.

[1] https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats#traditional-dos-paths
[2] https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#fully-qualified-vs-relative-paths

* Add test to verify IsAbs for windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Fix abs path validation on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Skipp path clean check for podLogDir on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Implement IsPathClean to validate path

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Add warn comment for IsAbs

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

---------

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
Co-authored-by: Claudiu Belu <cbelu@cloudbasesolutions.com>
2024-04-10 10:13:59 -07:00
Ruediger Pluem
988bc86016 Appease gofmt 2024-04-08 20:06:56 +02:00
Ruediger Pluem
db51d5f99c Fix linter hints 2024-04-08 17:51:24 +02:00
Ruediger Pluem
0e13fa24ae Move flag mapping to a separate function and unit test it 2024-04-08 17:16:35 +02:00
Kubernetes Prow Robot
9791f0d1f3
Merge pull request #124206 from cpanato/update-rules
Update publishing-bot rules to Go 1.21.9
2024-04-06 19:52:22 -07:00
cpanato
d19bff9a02
Update publishing-bot rules to Go 1.21.9
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-06 12:34:48 +02:00
Kubernetes Prow Robot
f8930f980d
Merge pull request #124196 from cpanato/update-go-main
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
2024-04-05 07:30:42 -07:00
cpanato
1366f1f447
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-05 14:27:57 +02:00
Ruediger Pluem
3e646cd8cf Align go.mod and go.sum
Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:34:12 +02:00
Ruediger Pluem
2bdacbf685 Fix bind mounts of filesystems with specific mount options set
Currently bind mounts of filesystems with nodev, noexec, nosuid,
noatime, relatime or nodiratime options set fail if we are running in a
user namespace if the same options are not set for the bind mount.

In case we are running in a user name space fix this by searching the
mount options of the source filesystem for nodev, noexec, nosuid,
noatime, relatime or nodiratime and retry the bind mount with the
options found added.

Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:25:30 +02:00
Kubernetes Prow Robot
d9c54f69d4
Merge pull request #124174 from dims/update-x/net-for-CVE-2023-45288
Update x/net for CVE-2023-45288
2024-04-03 20:13:01 -07:00
Davanum Srinivas
99fac38d28
Update x/net for CVE-2023-45288
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-03 19:56:04 -04:00
Kubernetes Release Robot
6673e7a93d CHANGELOG: Update directory for v1.30.0-rc.1 release 2024-04-02 19:30:33 +00:00
Kubernetes Prow Robot
ec301a5cc7
Merge pull request #124099 from cpanato/update-set-cap-debian-base
update setcap/debian-base to bookworm-v1.0.2
2024-04-02 08:24:11 -07:00
Kubernetes Prow Robot
c9f6d4e172
Merge pull request #124019 from alexzielenski/fix-ratcheting-flake
fix test flake caused by not waiting for CRD schema update
2024-04-02 07:00:11 -07:00
Kubernetes Prow Robot
e3bb757129
Merge pull request #124143 from enj/enj/i/svm_update_crd_flake
svm test: wait after updating CRD to avoid flakes
2024-04-01 14:19:35 -07:00
Monis Khan
f338ab5f95
svm test: wait after updating CRD to avoid flakes
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-04-01 16:15:29 -04:00
Kubernetes Prow Robot
79c61d5f03
Merge pull request #124124 from carlory/fix-124120
fix panic with SIGSEGV in kubeadm certs check-expiration
2024-04-01 01:35:34 -07:00
carlory
363fee59e4 fix panic with SIGSEGV in kubeadm certs check-expiration 2024-04-01 11:09:53 +08:00
Alex Zielenski
0add741012 fix test flake caused by not waiting for CRD schema update 2024-03-29 08:54:10 -07:00
Kubernetes Prow Robot
3dedb8eb8c
Merge pull request #124111 from liggitt/deflake-authz-test
Deflake authz config reload test
2024-03-29 08:53:43 -07:00
Jordan Liggitt
02139c9102
Deflake authz config reload test 2024-03-29 10:18:45 -04:00
Andrew DeMaria
9edf1fc51c
generate fully qualified type references
Currently type references for non-local names are output as relative
types which is subject to the resolution rules as defined at
https://protobuf.com/docs/language-spec#reference-resolution
This works fine within the k8s.io namespace where no subpackages are
named k8s, but other users of go-to-protobuf likely have k8s in their
package name. This causes conflicts in the search resolution when
executing `go-to-protobuf`:

```
company.example.com/k8s/custom/pkg/apis/custom.k8s.example.com/v1/generated.proto:64:12: "k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta" is resolved to "company.example.com.k8s.custom.pkg.apis.custom.k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta", which is not defined. The innermost scope is searched first in name resolution. Consider using a leading '.'(i.e., ".k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta") to start from the outermost scope.
```

To avoid this we can output fully qualified type references using a
preceding dot (.)

This results in a change for k8s generated.proto files, but the
effect is a noop.

Fixes kubernetes/code-generator#147

Signed-off-by: Andrew DeMaria <ademaria@cloudflare.com>
2024-03-28 09:34:11 -06:00
cpanato
fc428df491
update setcap/debian-base to bookworm-v1.0.2
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-28 14:57:22 +01:00
Kubernetes Prow Robot
f4e246bc93
Merge pull request #123908 from Nordix/esotsal/OOMKiller
oomkiller_linux_test: fix warnings
2024-03-27 11:42:19 -07:00
Kubernetes Prow Robot
531726ee65
Merge pull request #124078 from dims/bump-publishing-130
releng: update publishing bot rules for 1.30
2024-03-27 08:52:54 -07:00
Davanum Srinivas
06e69e4b09
releng: update publishing bot rules for 1.30
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-27 10:42:45 -04:00
Kubernetes Release Robot
d098af353c CHANGELOG: Update directory for v1.30.0-rc.0 release 2024-03-27 09:49:51 +00:00
Kubernetes Prow Robot
03ce045844
Merge pull request #124048 from bertinatto/fix-uncertain-reconstruction-gate
Use the right feature gate when updating uncertain volumes
2024-03-27 01:54:53 -07:00
Fabio Bertinatto
c893c48432 Use the right feature gate when updating uncertain volumes 2024-03-25 16:47:08 -03:00
Kubernetes Prow Robot
227c2e7c2b
Merge pull request #123720 from HirazawaUi/fix-slow-dra-test
kubelet: fix slow dra unit test
2024-03-25 10:22:33 -07:00
Kubernetes Prow Robot
20d0ab7ae8
Merge pull request #124011 from bart0sh/PR138-e2e_node-fix-podresurces-failure
e2e_node: fix podresources test
2024-03-22 08:16:08 -07:00