github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 02:06:23 +00:00
Code Issues Projects Releases Wiki Activity
129,684 Commits 42 Branches 9,765 Tags
c08b0cca65afe7cb1606daaac94cfdb19dced104
Commit Graph

129684 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Darren Shepherd
c08b0cca65 Add ability to disable proxy hostname check 2026-06-12 11:47:21 -03:00
Darren Shepherd
37309138d5 Hide deprecated warnings 2026-06-12 11:47:21 -03:00
Darren Shepherd
a58980e515 Set all sources so node+agent in the same process doesn't get restricted 2026-06-12 11:47:21 -03:00
Darren Shepherd
7a07b2fdeb Don't check for cpuset cgroup, not always required? 2026-06-12 11:47:21 -03:00
Darren Shepherd
4f16e1aef5 Wait for kube-apiserver for 2 minutes for slow (ARM) systems 2026-06-12 11:47:21 -03:00
Darren Shepherd
87b898096d Make kubelet.sock path changable 2026-06-12 11:47:21 -03:00
Darren Shepherd
481323d60c only use the resolved name if port was zero 2026-06-12 11:47:21 -03:00
Darren Shepherd
d0b19888d0 If you can't set hashsize on nf_conntrack don't fail 2026-06-12 11:47:21 -03:00
Darren Shepherd
dd9e64daea Drop credential providers 2026-06-12 11:47:21 -03:00
Darren Shepherd
334cc04bd1 Drop storage plugins 2026-06-12 11:47:21 -03:00
Darren Shepherd
1da9575615 Drop client-go cloud auth 2026-06-12 11:47:21 -03:00
Kubernetes Release Robot
c029d48d28 Release commit for Kubernetes v1.33.13 v1.33.13 2026-06-11 16:59:07 +00:00
Kubernetes Prow Robot
e358b76bcb Merge pull request #139590 from cpanato/update-go-images-rel133 
[release-1.33] [go] Bump images and versions to go 1.25.11 and distroless iptables
 2026-06-09 21:51:41 +05:30
Carlos Panato
a5e33bdfe5 Bump images and versions to go 1.25.11 and distroless iptables 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2026-06-09 15:20:21 +02:00
Kubernetes Prow Robot
2b395ade7a Merge pull request #139236 from rahulbabu95/automated-cherry-pick-of-#138736-upstream-release-1.33 
Automated cherry pick of #138736: fix: avoid panic on services with empty IPFamilies
 2026-06-08 17:13:46 +05:30
Rahul
2d5d3f0a23 fix(endpoint): avoid panic on services with empty IPFamilies 
Accessing svc.Spec.IPFamilies[0] without a bounds check panics when a
service reaches the controller with an empty IPFamilies field. This can
happen via watch events: the apiserver's defaultOnRead decorator populates
IPFamilies on GET/LIST but not on watch (cachingObject wrapping bypasses
the type assertion).

Restore the inference logic removed in #130101: fall back to ClusterIP
for headful services and pod IP for headless services.

Signed-off-by: Rahul <rahulbabu95@gmail.com>
 2026-05-21 13:45:59 -07:00
Kubernetes Release Robot
024e61db8a Update CHANGELOG/CHANGELOG-1.33.md for v1.33.12 2026-05-12 09:55:21 +00:00
Kubernetes Release Robot
1f348c8e82 Release commit for Kubernetes v1.33.12 v1.33.12 2026-05-12 09:43:17 +00:00
Kubernetes Prow Robot
e978e6e56d Merge pull request #138805 from neolit123/automated-cherry-pick-of-#138692-origin-release-1.33 
Automated cherry pick of #138692: kubeadm: skip LocalAPIEndpoint defaulting on worker join
 2026-05-11 21:51:57 +05:30
Kubernetes Prow Robot
121f890b6d Merge pull request #138686 from neolit123/automated-cherry-pick-of-#138449-origin-release-1.33 
Automated cherry pick of #138449: kubeadm: use the localAPIEndpoint for all API calls in 'init'
 2026-05-11 21:51:49 +05:30
Kubernetes Prow Robot
dd44baae38 Merge pull request #138964 from neolit123/automated-cherry-pick-of-#138957-origin-release-1.33 
Automated cherry pick of #138957: kubeadm: use dedicated ClusterRole for apiserver kubelet client
 2026-05-11 20:13:51 +05:30
Micah Hausler
5ea68035bb kubeadm: use dedicated ClusterRole for apiserver kubelet client 
Signed-off-by: Micah Hausler <mhausler@amazon.com>
 2026-05-11 14:34:27 +02:00
Seena Fallah
a051bd7fc8 kubeadm: skip LocalAPIEndpoint defaulting on worker join 
FetchInitConfigurationFromCluster always called SetAPIEndpointDynamicDefaults,
which invokes ChooseAPIServerBindAddress and requires a default route on the
host. Worker nodes joining the cluster don't need a LocalAPIEndpoint and may
legitimately have no default route, causing kubeadm join to fail with:

```
unable to fetch the kubeadm-config ConfigMap: unable to select an IP from
default routes.
```

Add a skipAPIEndpoint parameter to SetInitDynamicDefaults and pass
`!getAPIEndpoint` from FetchInitConfigurationFromCluster, so the endpoint
defaulter is bypassed when the caller did not request the endpoint (worker
join, non-control-plane reset/certs/upgrade paths).

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
 2026-05-06 11:09:36 +02:00
Lubomir I. Ivanov
be0a49b221 kubeadm: use the localAPIEndpoint for all API calls in 'init' 
Historicaly the kubeadm clients have used the 'admin.conf'
and 'super-admin.conf' directly, which makes all API calls
go trough the CPE (control plane endpoint). This can create
problems for scenarios when the LB is provisioned only after
'init' starts the kube-apiserver.

Instead of using the '.conf' as they are, modify them
in memory to point to the LAE (localAPIEndpoint).
This was already done by the WaitControlPlaneClient for
the WaitControlPlane phase, which required it. This separate
client is no longer needed.

However, do use a unmodified kubeconfig to the init phase
bootstrap-token since this is the phase that creates
the cluster-info CM and for that we need the original CPE
server address.
 2026-04-29 17:48:03 +02:00
Kubernetes Prow Robot
32137bf43b Merge pull request #138541 from ahrtr/automated-cherry-pick-of-#138403-upstream-release-1.33 
Automated cherry pick of #138403: kubeadm: Evaluate etcd cluster health using quorum
 2026-04-23 18:46:48 +05:30
Benjamin Wang
f7077de307 Add a (*Client) addEndpoint method 
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
 2026-04-23 09:16:24 +01:00
Benjamin Wang
cd70e54c56 Evaluate etcd cluster health using quorum 
Signed-off-by: Benjamin Wang <benjamin.ahrtr@gmail.com>
 2026-04-23 09:16:24 +01:00
Kubernetes Release Robot
2ff801658c Update CHANGELOG/CHANGELOG-1.33.md for v1.33.11 2026-04-15 18:21:56 +00:00
Kubernetes Release Robot
9efa99e5a1 Release commit for Kubernetes v1.33.11 v1.33.11 2026-04-15 18:09:55 +00:00
Kubernetes Prow Robot
28a08b2680 Merge pull request #138358 from dims/update-moby-spdystream-v0.5.1-1.33 
[1.33] Update github.com/moby/spdystream from v0.5.0 to v0.5.1
 2026-04-14 12:02:36 +05:30
Kubernetes Prow Robot
d02a44941c Merge pull request #138350 from dashpole/update_prop_33 
[release-1.33] Update go.opentelemetry.io/otel to v1.41.0
 2026-04-14 07:00:36 +05:30
Davanum Srinivas
28b2a45d03 Update github.com/moby/spdystream from v0.5.0 to v0.5.1 
Kubernetes-commit: 7e9c2c8eef26f99aa2f94d8e09d6d32de86c7769
 2026-04-13 14:30:03 -04:00
David Ashpole
4128483392 update go.opentelemetry.io/otel to v1.41.0 2026-04-13 15:04:41 +00:00
Kubernetes Prow Robot
875a0ab0f0 Merge pull request #138306 from xmudrii/update-go-1.33 
[release-1.33] Bump images and versions to go 1.25.9 and distroless iptables
 2026-04-10 02:40:21 +05:30
Marko Mudrinić
ea46dad4da Bump images and versions to go 1.25.9 and distroless iptables 
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
 2026-04-09 22:00:49 +02:00
Kubernetes Prow Robot
04e0a33303 Merge pull request #138151 from liggitt/go-1-25-release-1-33 
[release-1.33] Bump to go 1.25.8
 2026-04-09 16:28:27 +05:30
Kubernetes Prow Robot
b21f28f0ec Merge pull request #137677 from haojiwu/cherry-pick-137147-release-1.33 
[release-1.33] Fix RepairIPAddress controller startup failure when namespace informer is not yet synced
 2026-04-09 16:28:20 +05:30
Kubernetes Prow Robot
151cebbbef Merge pull request #137998 from varshadeshmane92/automated-cherry-pick-of-#133624-upstream-release-1.33 
Automated cherry pick of #133624: Fix flaking RunTestDelayedWatchDelivery
 2026-04-09 14:13:34 +05:30
Jordan Liggitt
a4cc2ce4c2 Bump to go 1.25 2026-04-01 17:20:17 -04:00
Davanum Srinivas
8489a1d821 bump golang.org/x/vuln/cmd/govulncheck to v1.1.4 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-04-01 16:56:59 -04:00
Marek Siarkowicz
a4f94edc37 Fix flaking RunTestDelayedWatchDelivery 2026-03-24 02:47:04 -07:00
Kubernetes Prow Robot
594c1ef261 Merge pull request #137809 from danwinship/automated-cherry-pick-of-#137501-origin-release-1.33 
Automated cherry pick of #137501: Fix kube-proxy on systems with nft 1.1.3 (take 2)
 2026-03-19 18:08:31 +05:30
Kubernetes Release Robot
ce78d2290a Update CHANGELOG/CHANGELOG-1.33.md for v1.33.10 2026-03-18 18:40:20 +00:00
Kubernetes Release Robot
51a8c572b0 Release commit for Kubernetes v1.33.10 v1.33.10 2026-03-18 18:28:16 +00:00
Alessio Attilio
b5f44064ef pkg/proxy/nftables: fix kube-proxy crash with newer nftables versions 
Fixes kube-proxy's nftables mode to work on systems with nft 1.1.3.
 2026-03-17 08:15:03 -04:00
Dan Winship
cdf6c75481 Update knftables to v0.0.21 2026-03-17 08:15:03 -04:00
haojiwu
6046458062 Fix RepairIPAddress controller startup failure when namespace informer is not yet synced 
Cherry-pick of https://github.com/kubernetes/kubernetes/pull/137147
 2026-03-12 13:10:38 -07:00
Kubernetes Prow Robot
391e36f94a Merge pull request #137646 from BenTheElder/no-rules-1.33 
drop publishing rules from dependencies.yaml on release-1.33
 2026-03-12 11:45:35 +05:30
Benjamin Elder
dd3efcf7a9 drop publishing rules from dependencies.yaml on release branch 
We only use the rules in the master branch.

Since we don't need rules.yaml, we don't have two places to match, so we can drop the golang version entirely from this file

bump .go-version alone will be sufficient* on release branches after kubernetes#136954

* ignoring e2e images like agnhost, which will require follow-up PRs ...
 2026-03-11 12:59:05 -07:00
Benjamin Elder
f6bd39f561 test/images: read .go-version instead of duplicating 2026-03-11 12:58:50 -07:00