Commit Graph

122042 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
835ad2bccd
Merge pull request #120346 from ardaguclu/custom-debug-profile
kubectl debug: Add custom debug profiles on top of static profiles
2024-03-05 03:08:45 -08:00
Lukasz Szaszkiewicz
3f7d4b787b apimachinery/meta/types.go: define InitialEventsAnnotationKey const
InitialEventsAnnotationKey the name of the key
under which an annotation marking the end of
a watchlist stream is stored.
The annotation is added to a "Bookmark" event.

The const will be immediately used in client-go and apiserver packages.
2024-03-05 11:52:25 +01:00
Lukasz Szaszkiewicz
221ad9f7c2 storage/cacher: mark the addition of a metric for waitUntilFreshAndBlock as completed 2024-03-05 10:23:23 +01:00
HirazawaUi
01689d0906 add e2e tests for relaxed validation 2024-03-05 17:09:15 +08:00
HirazawaUi
fa3c101439 relax validation pod envfrom 2024-03-05 17:09:15 +08:00
HirazawaUi
e56240b2e1 add validation method at the top level 2024-03-05 17:09:10 +08:00
kerthcet
5b072a59a2 Fix flaky test on multi profiles waiting pod
Signed-off-by: kerthcet <kerthcet@gmail.com>
2024-03-05 14:54:33 +08:00
Kubernetes Prow Robot
dc3f5ec6cc
Merge pull request #112957 from mxpv/log-dir
Allow changing pod log directory
2024-03-04 21:07:06 -08:00
HirazawaUi
96a16a7bc9 add relaxed env var name function 2024-03-05 12:51:54 +08:00
Arda Güçlü
af2dadcb18 Add custom debug profiles on top of static profiles
This PR adds `custom` flag to let user customizes debug resources.
`custom` flag accepts partial container spec in json format.
2024-03-05 07:47:41 +03:00
Kubernetes Prow Robot
50f4b1ea47
Merge pull request #123568 from enj/enj/i/jwt_username_required
jwt: fail on empty username via CEL expression
2024-03-04 20:07:33 -08:00
Kubernetes Prow Robot
26600b17ab
Merge pull request #123561 from enj/enj/i/validate_jwt_sa_iss
Prevent conflicts between service account and jwt issuers
2024-03-04 20:07:24 -08:00
Kubernetes Prow Robot
a76a3e031f
Merge pull request #123487 from gauravkghildiyal/kep-4444
Introduce trafficDistribution field for Kubernetes Services
2024-03-04 20:07:15 -08:00
Kubernetes Prow Robot
229ebabc0a
Merge pull request #123336 from HyunSu1768/hyunsu1768/use-switch-cases
Refactoring to encourage use of switch case
2024-03-04 20:07:06 -08:00
Kubernetes Prow Robot
0bcf6e3dde
Merge pull request #123679 from seans3/remotecommand-extend-deadlines
Extend deadlines to one minute
2024-03-04 18:38:32 -08:00
Kubernetes Prow Robot
699984f25a
Merge pull request #123641 from liggitt/authz-config-beta-gate
Promote StructuredAuthorizationConfiguration feature gate to beta
2024-03-04 18:38:23 -08:00
Kubernetes Prow Robot
5b6d8a4293
Merge pull request #123532 from serathius/separate-rpc
Move cacher watch to separate rpc preventing starvation
2024-03-04 18:38:14 -08:00
Kubernetes Prow Robot
439f7df65b
Merge pull request #122320 from armstrongli/master
allow service NodePort to be updated to 0 in case AllocateLoadBalance…
2024-03-04 18:38:05 -08:00
carlory
2bd7f4f8e0 storage e2e: update hostpath and mock images 2024-03-05 10:18:54 +08:00
bzsuni
9ac9fdac8f Bump npd from v0.8.13 to v0.8.16
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-03-05 09:30:28 +08:00
Kubernetes Prow Robot
6929a11f69
Merge pull request #123481 from sanposhiho/mindomain-stable
graduate MinDomainsInPodTopologySpread to stable
2024-03-04 17:18:53 -08:00
Kubernetes Prow Robot
f745503112
Merge pull request #123413 from seans3/tunneling-spdy-websockets
PortForward: Tunnel SPDY through WebSockets
2024-03-04 17:18:44 -08:00
Harish Kuna
4a5fe2deca Addd negative case for the fix in #123570 2024-03-05 01:00:50 +00:00
Kubernetes Prow Robot
e4ee7b005c
Merge pull request #123323 from gjkim42/add-ValidateInitContainerStateTransition
Validate restartable init container state transition
2024-03-04 16:21:30 -08:00
Kubernetes Prow Robot
1c789a9d46
Merge pull request #122422 from neolit123/1.30-update-hostaliases-note
core/v1: remove note about hostAliases not working with hostNetwork
2024-03-04 16:21:21 -08:00
Gaurav Ghildiyal
ec6fd2befa Add options construct to EndpointSlice NewReconciler for the new trafficDistributionEnabled field 2024-03-04 15:40:22 -08:00
Kubernetes Prow Robot
46a2137c1b
Merge pull request #123639 from liggitt/authz-metrics
Add authorization webhook duration/count/failopen metrics
2024-03-04 14:09:30 -08:00
Sean Sullivan
b04d1177ef extend deadlines to one minute 2024-03-04 11:31:56 -08:00
Kubernetes Prow Robot
320e288b5e
Merge pull request #123628 from Jefftree/agg-conformance
promote aggregated discovery conformance tests
2024-03-04 11:23:59 -08:00
Kubernetes Prow Robot
6c8dc1d1ed
Merge pull request #123609 from veshij/fix
[kubernetes/scheduler] use lockless diagnosis collection in findNodes…
2024-03-04 11:23:50 -08:00
Kubernetes Prow Robot
4ed7f6b4c4
Merge pull request #123583 from saschagrunert/image-id-container-status
Add `image_id` to CRI `ContainerStatus` message
2024-03-04 11:23:41 -08:00
Kubernetes Prow Robot
599d92f1fb
Merge pull request #123190 from padlar/add-apiserver-wait-cache-metric
Add apiserver_watch_cache_read_wait metric to cache refresh time
2024-03-04 11:23:32 -08:00
Sean Sullivan
3d56ff21fd adds comments to tunnelingResponseWriter 2024-03-04 11:10:30 -08:00
Sean Sullivan
33af937b4a re-write fallback dialer unit test 2024-03-04 11:10:30 -08:00
Sean Sullivan
e8bbb221d3 removes extra upgrade aware proxy logging; returns tunneling connection close error 2024-03-04 11:10:30 -08:00
Jordan Liggitt
2443b3fa69 Fix headerInterceptingConn handling 2024-03-04 11:10:30 -08:00
Sean Sullivan
9e15462843 adds return context in RunPortForward() 2024-03-04 11:10:30 -08:00
Sean Sullivan
8b447d8c97 portforward: tunnel spdy through websockets 2024-03-04 11:10:30 -08:00
Jordan Liggitt
79b344d85e
Add authorization webhook duration/count/failopen metrics 2024-03-04 14:01:15 -05:00
Kubernetes Prow Robot
89cbd94e68
Merge pull request #123593 from giuseppe/userns-use-kubelet-user-mappings
KEP-127: kubelet: honor kubelet user mappings
2024-03-04 10:24:52 -08:00
Kubernetes Prow Robot
d34fbeb0a3
Merge pull request #123446 from linxiulei/hit_cache
Hit APIServer cache when testing healthiness
2024-03-04 10:24:45 -08:00
Marek Siarkowicz
1cf4cec449 Test that separation of streams work by using progress notifies 2024-03-04 19:02:04 +01:00
Monis Khan
8345ad0bac
jwt: fail on empty username via CEL expression
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 12:51:19 -05:00
Gaurav Ghildiyal
606cae9b47 Add new metric servicesCountByTrafficDistribution 2024-03-04 09:33:40 -08:00
Monis Khan
05e1eff793
Prevent conflicts between service account and jwt issuers
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 11:40:02 -05:00
Kubernetes Prow Robot
9043ce05c1
Merge pull request #123667 from jsafrane/selinux-metrics-access-mode
Add label with access mode to SELinux metrics
2024-03-04 08:25:39 -08:00
Jan Safranek
57d1b68dc2 Remove deprecated sets.String 2024-03-04 14:33:04 +01:00
Kubernetes Prow Robot
55d1518126
Merge pull request #123588 from pohly/scheduler-perf-any-cleanup
scheduler_perf: automatically delete created objects
2024-03-04 04:49:12 -08:00
Jan Safranek
c4163a9cb8 Add label with access mode to SELinux metrics
In the KEP 1710 we promised to have all SELinux metrics with access mode
label, so cluster admin is able to distinguish when RWOP volumes are
failing to mount (-> SELinuxMountReadWriteOncePod feature gate must be
disabled) or volumes with any other access modes are failing (->
SELinuxMount feature gate must be disabled).

Adding the label to kubelet is quite straightforward, there were some
changes needed in the e2e test. Now grabMetrics() collects values of all
SELinux related metrics with all labels. It only skips unrelated volume
plugins. And waitForMetricIncrease gets metric with all labels on input, so
it can check that say RWOP metric increased and RWX one did not.
2024-03-04 13:16:56 +01:00
Marek Siarkowicz
31d404b182 Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior 2024-03-04 12:51:06 +01:00