Tim Allclair
7bd78b06e9
Warn on deprecated AppArmor annotation use
2024-03-07 09:51:48 -08:00
Davanum Srinivas
b1341c8795
Revert portion of the GPU testcase
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-07 12:39:04 -05:00
Kubernetes Prow Robot
ebf4ca686a
Merge pull request #123801 from HirazawaUi/followup-allow-special-characters
...
Follow-up on unresolved question in PR #123385
2024-03-07 09:18:17 -08:00
Michal Wozniak
194009fac9
Add integration test for managedBy and cleanup of finalizers
2024-03-07 17:54:16 +01:00
HirazawaUi
2867be47b3
followup to allow special characters
2024-03-08 00:08:43 +08:00
Kubernetes Prow Robot
246e678acc
Merge pull request #123751 from mimowo/job-update-conformance-test
...
Update Job conformance test for job status updates
2024-03-07 07:49:24 -08:00
Patrick Ohly
a92d2a4cea
noderestriction admission: lock down create of NodeResourceSlice
...
The proper value of NodeName must be checked here for create because
the node authorizer cannot do it.
2024-03-07 16:15:52 +01:00
Patrick Ohly
2e34e187c9
node authorizer: lock down access for NodeResourceSlice
...
The kubelet running on one node should not be allowed to access
NodeResourceSlice objects belonging to some other node, as defined by the
NodeResourceSlice.NodeName field.
2024-03-07 16:15:52 +01:00
Patrick Ohly
39bbcedbca
dra api: add structured parameters
...
NodeResourceSlice will be used by kubelet to publish resource information on
behalf of DRA drivers on the node. NodeName and DriverName in
NodeResourceSlice must be immutable. This simplifies tracking the different
objects because what they are for cannot change after creation.
The new field in ResourceClass tells scheduler and autoscaler that they are
expected to handle allocation.
ResourceClaimParameters and ResourceClassParameters are new types for telling
in-tree components how to handle claims.
2024-03-07 16:15:31 +01:00
Patrick Ohly
eb1470d60d
scheduler: fix assume cache with no index
...
The assume cache in the volumbinding plugin can be created with no separate
index, but List then failed because it tried to use the empty index name
instead of using the store's List function.
2024-03-07 16:09:44 +01:00
Kubernetes Prow Robot
bf7fcfdc7f
Merge pull request #123776 from dims/adjust-gpu-test-to-work-with-latest-nvidia-daemonset
...
Adjust GPU test to work with latest nvidia daemonset on AWS/ec2
2024-03-07 06:30:55 -08:00
Kubernetes Prow Robot
a035f5b19e
Merge pull request #123774 from cici37/vapGA
...
Enabled conformance test for GA feature.
2024-03-07 06:30:48 -08:00
Kubernetes Prow Robot
fb1d8b015d
Merge pull request #123798 from cpanato/update-bot
...
Update publishing-bot rules to Go 1.21.8
2024-03-07 05:24:39 -08:00
cpanato
48daa91857
Update publishing-bot rules to Go 1.21.8
...
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-07 06:32:51 -05:00
Kubernetes Prow Robot
a31a465405
Merge pull request #123735 from thockin/master
...
Don't embed plural exceptions in tools
2024-03-07 02:08:27 -08:00
Stephen Kitt
6bf667af06
Switch from golang/mock to uber-go/mock
...
See https://github.com/golang/mock#gomock : golang/mock is no longer
maintained, and should be replaced by go.uber.org/mock.
This allows golang/mock to be dropped from the status and vendored
fields in unwanted-dependencies.json.
Signed-off-by: Stephen Kitt <skitt@redhat.com>
2024-03-07 09:12:16 +01:00
Davanum Srinivas
30857658e4
Adjust GPU test to work with latest nvidia daemonset
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-06 21:42:21 -05:00
Sean Sullivan
ffafb2b9ca
adds portforward streamtunnel unit tests
2024-03-06 18:21:50 -08:00
Kubernetes Prow Robot
2ec63e0d28
Merge pull request #123482 from sanposhiho/hpa-containerresource-graduation
...
graduate HPAContainerMetrics to stable
2024-03-06 17:37:36 -08:00
Kubernetes Prow Robot
c726b2b3a3
Merge pull request #123431 from aramase/aramase/f/kep_3331_multiple_jwt_authenticator
...
Support multiple JWT authenticators with structured authn config
2024-03-06 17:37:29 -08:00
cici37
758dc53510
Enabled conformance test for VAP which is GAed.
2024-03-06 23:53:20 +00:00
Kubernetes Prow Robot
05cb0a55c8
Merge pull request #123696 from aramase/aramase/f/kep_3331_v1beta1_api
...
Duplicate v1alpha1 AuthenticationConfiguration to v1beta1
2024-03-06 15:35:28 -08:00
Kubernetes Prow Robot
bd25605619
Merge pull request #123435 from tallclair/apparmor-ga
...
AppArmor fields API
2024-03-06 15:35:14 -08:00
Tim Hockin
df7f5fca27
Don't embed plural exceptions in tools
2024-03-06 14:57:46 -08:00
Anish Ramasekar
39e1c9108c
Support multiple JWT authenticators with structured authn config
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-06 14:42:32 -08:00
Kubernetes Prow Robot
e0621034be
Merge pull request #123750 from cpanato/update-go
...
[go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
2024-03-06 12:35:50 -08:00
Tim Allclair
2d86cbf261
Separate feature-gate for AppArmor fields
2024-03-06 10:46:32 -08:00
Tim Allclair
22068e0cc7
Validate annotation & field match in PodTemplate
2024-03-06 10:46:31 -08:00
Tim Allclair
06caf32ecd
Validate localhost profile max length
2024-03-06 10:46:31 -08:00
Tim Allclair
0eb5f52d06
Rename AppArmor annotation constants with Deprecated
2024-03-06 10:46:31 -08:00
Jefftree
8373f3035a
fix aggregator path filtering to include /
2024-03-06 13:33:33 -05:00
cpanato
70221e8405
[go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables
...
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-03-06 13:09:17 -05:00
Kubernetes Prow Robot
5f2c9e73c0
Merge pull request #123759 from liggitt/update-workspace
...
Avoid clearing go version in go.work update script
2024-03-06 10:07:23 -08:00
Kubernetes Prow Robot
a5f5f44157
Merge pull request #123758 from liggitt/protobump
...
[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
2024-03-06 07:49:01 -08:00
Jordan Liggitt
6f2842c08c
Avoid clearing go version in go.work update script
2024-03-06 10:04:49 -05:00
Jordan Liggitt
c6673d2346
Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
2024-03-06 09:47:28 -05:00
Francesco Romani
36fcbca0f4
owner: self-nominate ffromani as sig-node reviewer
...
per https://github.com/kubernetes/community/blob/master/sig-node/sig-node-contributor-ladder.md#reviewer
Signed-off-by: Francesco Romani <fromani@redhat.com>
2024-03-06 15:31:31 +01:00
Michal Wozniak
1395c80109
Update Job conformance test to do a legal update
2024-03-06 14:00:21 +01:00
John Mcgrath
edb0287cb1
DisableServiceLinks admission controller
2024-03-06 00:39:23 -06:00
Tim Hockin
ca0d2e27e6
Comment some manual conversions
...
Explain why seemingly-useless manual conversions are needed. This is
deeply unfortunate, but better to document it than not.
2024-03-05 21:46:42 -08:00
Tim Hockin
c4ba1b990e
Remove manual admissionregistration.Rule conversions
2024-03-05 21:46:30 -08:00
Tim Hockin
b4f14ce00b
Remove manual Volume conversions
2024-03-05 21:45:02 -08:00
Tim Hockin
2f853b8eb8
Remove manual LoadBalancerStatus conversions
...
These are not needed.
2024-03-05 21:45:01 -08:00
Tim Hockin
2e465cd6fa
Remove _tmp from test/images/image-util.sh
2024-03-05 21:44:46 -08:00
Tim Hockin
be7ee821b9
Make verify-vendor use verify::generated
2024-03-05 21:44:45 -08:00
Tim Hockin
778644154f
Remove _tmp from verify-openapi-docs-urls
2024-03-05 21:44:44 -08:00
Tim Hockin
4d6f56d398
Make vendor-licenses use verify::generated
2024-03-05 21:44:43 -08:00
Tim Hockin
8a3a299c65
Remove _tmp from pin-dependency
2024-03-05 21:44:43 -08:00
Tim Hockin
813787489b
Make verify-openapi-spec use verify::generated
...
Tested by injecting an API change, generating openapi, then watching
this fail.
2024-03-05 21:44:41 -08:00
Kubernetes Prow Robot
546f7c3086
Merge pull request #123738 from kannon92/fail-limited-swap-cgroup-v1
...
[KEP-2400]: Fail limited swap cgroup v1
2024-03-05 19:30:34 -08:00
