Commit Graph

122161 Commits

Author SHA1 Message Date
Kubernetes Release Robot
f1874adf5f CHANGELOG: Update directory for v1.28.9 release 2024-04-16 20:44:48 +00:00
Kubernetes Release Robot
69e332560d CHANGELOG: Update directory for v1.27.13 release 2024-04-16 15:20:21 +00:00
杨军10092085
86a31ca302 fix:When the parameter of kube-proxy is configured as ipv6, the ip address of metrics listens to 127.0.0.1 by default, instead of::1 2024-04-16 08:56:49 +08:00
Kubernetes Prow Robot
b722d017a3
Merge pull request #124322 from ritazh/admission-ephemeralcontainers-envfrom
Add envFrom to serviceaccount admission plugin
2024-04-15 09:16:32 -07:00
Ben Luddy
c985a0a0f6
Group CBOR decode tests by the kind of their inputs.
No test cases are added, removed, or modified. Grouping them this way is intended to make it easier
to reason about the coverage for possible inputs versus one long list of test cases.
2024-04-15 11:50:18 -04:00
Lan Liang
9236425df6 pkg/registry: drop pointer wrapper functions.
The new k8s.io/utils/ptr package provides generic wrapper functions,
which can be used instead of type-specific pointer wrapper functions.
This replaces the latter with the former, and migrates other uses of
the deprecated pointer package to ptr in affacted files.

See kubernetes/utils#283 for details.

Signed-off-by: Lan Liang <gcslyp@gmail.com>
2024-04-15 14:34:53 +00:00
Lan Liang
78762c70db u 2024-04-15 09:24:44 +00:00
Patrick Ohly
feb27b9907 e2e framework: configure Ginkgo logger and klog consistently
Even if the textlogger which writes to Ginkgo is installed as the logger in
klog, klog still does some verbosity checks itself (for example,
klog.V().Enabled).

Therefore the framework has to keep the verbosity settings in the textlogger
and in klog consistent. This is done by wrapping the Set call instead of
replacing it.
2024-04-15 10:10:56 +02:00
Dan Winship
8de0fc09aa Remove an unused type from kube-proxy config, move around some helpers 2024-04-13 11:12:28 -04:00
Ayato Tokubi
c52160eb3c Use WaitForPodCondition instead of sleep
Signed-off-by: Ayato Tokubi <atokubi@redhat.com>
2024-04-13 00:01:11 +00:00
Rita Zhang
128d6cc146
Add envFrom to serviceaccount admission plugin
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-04-12 10:49:30 -07:00
Patrick Ohly
ff541e7924 e2e node: fix -v support
Since 43539c855f (first released in
v1.30.0-alpha.2), the test/e2e/framework manages -v and -vmodule and uses them
for a logger which writes to the Ginkgo output stream.

This did not work for test/e2e_node, because:
- logs.AddFlags(pflag.CommandLine) registers its own -v and -vmodule flags
- pflag.CommandLine.AddGoFlagSet(flag.CommandLine) skips the corresponding
  flags in the flag.CommandLine
- pflag.Parse() initializes the settings in the "logs" package even though
  those are not used at runtime

The solution is to not use the "logs" package.
2024-04-12 12:27:29 +02:00
Kubernetes Prow Robot
cae35dba5a
Merge pull request #124283 from dims/rename-cluster-to-storage_cluster_id-for-apiserver_storage_size_bytes-metric
Rename Label `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
2024-04-12 00:13:00 -07:00
nayihz
1b3d10aafa fix: node added with matched pod anti-affinity topologyKey
Co-authored-by: Kensei Nakada <handbomusic@gmail.com>
2024-04-12 11:08:44 +08:00
Davanum Srinivas
fb5140f562
Rename cluster to storage_cluster_id for apiserver_storage_size_bytes metric
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-11 17:15:32 -04:00
Kubernetes Release Robot
7606cf7b3d CHANGELOG: Update directory for v1.30.0-rc.2 release 2024-04-11 17:05:57 +00:00
huweiwen
3a71fe57f7 ad controller: lift nodeAttachedTo.mountedByNode
optimize adc.nodeUpdate(). Time complexity reduced from O(n) to O(1), where n is the number of nodes.

Data stored in nodeAttachedTo.mountedByNode is now at actualStateOfWorld.inUseVolumes.

This refactor also ensures that we can record the state update even if the volume is not present in ASW yet.

The added BenchmarkNodeUpdate result is reduced from 28076923 to 16030 ns/op.
The previous BenchmarkPopulateActualStateOfWorld result is also reduced from 13s to 8s.
2024-04-11 15:35:17 +08:00
Wojciech Tyczyński
36141fa6fb Bump min watch timeout for secret & configmap manager in Kubelet 2024-04-10 19:36:29 +02:00
Wojciech Tyczyński
29e38c19b8 Allow for configuring MinWatchTimeout in Reflector and Informer. 2024-04-10 19:36:29 +02:00
Maksym Pavlenko
be4b7176dc
Fix Abs path validation on Windows (#124084)
* Windows: Consider slash-prefixed paths as absolute

filepath.IsAbs does not consider "/" or "\" as absolute paths, even
though files can be addressed as such. [1][2]

Currently, there are some unit tests that are failing on Windows due to
this reason.

[1] https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats#traditional-dos-paths
[2] https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#fully-qualified-vs-relative-paths

* Add test to verify IsAbs for windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Fix abs path validation on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Skipp path clean check for podLogDir on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Implement IsPathClean to validate path

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Add warn comment for IsAbs

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

---------

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
Co-authored-by: Claudiu Belu <cbelu@cloudbasesolutions.com>
2024-04-10 10:13:59 -07:00
Wojciech Tyczyński
4da185a601 Refactor informer constructors 2024-04-10 19:07:30 +02:00
Flavian Missi
e13ff5ece2 resourcequota: use singleflight.Group to reduce apiserver load
relates to #22422 and #123806
2024-04-10 15:54:56 +02:00
Stephen Heywood
a2a1e0434e Move 3 get*APIGroup endpoints to ineligible_endpoints.yaml 2024-04-10 11:52:22 +12:00
Sean Sullivan
98ecfd0468 Adds apiserver proxy doc.go 2024-04-09 17:56:46 +00:00
carlory
a6b2619274 remove unneeded func SyncReconstructedVolume from ActualStateOfWorld 2024-04-09 15:34:33 +08:00
Hiranmoy Das Chowdhury
0cd2588d4f deep copy issue in getting controller is solved 2024-04-09 11:14:33 +06:00
Xuzheng Chang
3e08030d53 fix wrong comments of dra
Signed-off-by: Xuzheng Chang <changxuzheng@huawei.com>
2024-04-09 09:41:25 +08:00
Ruediger Pluem
988bc86016 Appease gofmt 2024-04-08 20:06:56 +02:00
Ruediger Pluem
db51d5f99c Fix linter hints 2024-04-08 17:51:24 +02:00
Ruediger Pluem
0e13fa24ae Move flag mapping to a separate function and unit test it 2024-04-08 17:16:35 +02:00
Kevin Hannon
43e0bd4304 mark flaky jobs as flaky and move them to a different job 2024-04-08 09:27:15 -04:00
Artur Rodrigues
7e40886020
Fix spelling in tests 2024-04-08 08:35:28 +01:00
Artur Rodrigues
645b25ec67
scheduler: fix typo in metric pod_scheduling_sli_duration_seconds help 2024-04-07 16:15:06 +01:00
Hiroki Takatsuka
84ffc2fc3d
fix(job_controller): add delay duration to log message when enqueueing job 2024-04-07 16:42:48 +09:00
Kubernetes Prow Robot
9791f0d1f3
Merge pull request #124206 from cpanato/update-rules
Update publishing-bot rules to Go 1.21.9
2024-04-06 19:52:22 -07:00
Tim Hockin
ae01c2126f
Remove the gate "SkipReadOnlyValidationGCE"
One less GCE-specifc wart in the codebase.
2024-04-06 15:11:20 -07:00
cpanato
d19bff9a02
Update publishing-bot rules to Go 1.21.9
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-06 12:34:48 +02:00
guoguangwu
ad7799d07d fix: close tmp file
Signed-off-by: guoguangwu <guoguangwug@gmail.com>
2024-04-06 10:55:08 +08:00
Tim Hockin
ca1d4c1bc9 build_binaries: use return as it's not in a subshell anymore 2024-04-06 00:23:42 +03:00
Tim Hockin
29d6922df2 kube::golang::place_bins: more verbose output 2024-04-06 00:20:51 +03:00
Ed Bartosh
91099aca72 hacks: build main target without go in the PATH
`make` is able to build project binaries, but fails with
error `hack/lib/golang.sh: line 455: go: command not found`
trying to place them if go binary is not in the PATH.
This happens because kube::golang::place_bins uses different
environment than kube::golang::build_binaries.

Setting up an one environment for both `kube::golang::place_bins`
and `kube::golang::build_binaries` should solve this issue and allow
default make target to fully work without go binary in the PATH.
2024-04-05 17:36:57 +03:00
Kubernetes Prow Robot
f8930f980d
Merge pull request #124196 from cpanato/update-go-main
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
2024-04-05 07:30:42 -07:00
cpanato
1366f1f447
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-05 14:27:57 +02:00
Maciej Szulik
b40057db2a
Update applyconfig-gen for pacakges where group and dir differ in name
It is possible that package paths might differ from the group name, see
https://github.com/openshift/api/blob/master/operatorcontrolplane/v1alpha1/doc.go
notice that pacakge name is `operatorcontrolplane` whereas the group is
`controlplane.operator...`. This confuses the generator since it tries
to extrapolate the name of the package based on the group name. Whereas
the ImportTracker can properly recognize the import path. This leads to
cyclical imports in packages where the group name is different from the
actual import path.
2024-04-05 13:20:45 +02:00
Ayato Tokubi
d04f87abde add nil check for Node(Un)PrepareResources.
Signed-off-by: Ayato Tokubi <atokubi@redhat.com>
2024-04-04 23:24:25 +00:00
HirazawaUi
4a4a04fa74 remove kubeadm unused function 2024-04-04 23:36:00 +08:00
Ruediger Pluem
3e646cd8cf Align go.mod and go.sum
Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:34:12 +02:00
Ruediger Pluem
2bdacbf685 Fix bind mounts of filesystems with specific mount options set
Currently bind mounts of filesystems with nodev, noexec, nosuid,
noatime, relatime or nodiratime options set fail if we are running in a
user namespace if the same options are not set for the bind mount.

In case we are running in a user name space fix this by searching the
mount options of the source filesystem for nodev, noexec, nosuid,
noatime, relatime or nodiratime and retry the bind mount with the
options found added.

Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:25:30 +02:00
Kubernetes Prow Robot
d9c54f69d4
Merge pull request #124174 from dims/update-x/net-for-CVE-2023-45288
Update x/net for CVE-2023-45288
2024-04-03 20:13:01 -07:00
Davanum Srinivas
99fac38d28
Update x/net for CVE-2023-45288
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-03 19:56:04 -04:00