Jan Safranek
c4163a9cb8
Add label with access mode to SELinux metrics
...
In the KEP 1710 we promised to have all SELinux metrics with access mode
label, so cluster admin is able to distinguish when RWOP volumes are
failing to mount (-> SELinuxMountReadWriteOncePod feature gate must be
disabled) or volumes with any other access modes are failing (->
SELinuxMount feature gate must be disabled).
Adding the label to kubelet is quite straightforward, there were some
changes needed in the e2e test. Now grabMetrics() collects values of all
SELinux related metrics with all labels. It only skips unrelated volume
plugins. And waitForMetricIncrease gets metric with all labels on input, so
it can check that say RWOP metric increased and RWX one did not.
2024-03-04 13:16:56 +01:00
Kubernetes Prow Robot
a4eaf6e120
Merge pull request #123660 from xigang/cacher/watch
...
cleanup: if triggerValue has a value fast break
2024-03-04 01:17:02 -08:00
Kubernetes Prow Robot
9d39ce04fd
Merge pull request #123595 from neolit123/1.30-add-timeouts-upgradeconfig
...
kubeadm: add timeouts to v1beta4.UpgradeConfiguration
2024-03-04 01:16:44 -08:00
Kubernetes Prow Robot
d440ab18ce
Merge pull request #123656 from huww98/e2e-pod-fail-fast
...
e2e pod: fail fast on failed pod
2024-03-04 00:00:14 -08:00
Kubernetes Prow Robot
8c80c07e85
Merge pull request #123655 from huww98/mt-n
...
agnhost/mounttest: add new line to output
2024-03-03 22:29:44 -08:00
Kubernetes Prow Robot
e4a14fe0f5
Merge pull request #123575 from Huang-Wei/pod-scheduling-readiness-stable
...
Graduate PodSchedulingReadiness to stable
2024-03-03 22:29:38 -08:00
Kubernetes Prow Robot
d756b0a1c0
Merge pull request #123659 from dims/check-length-of-instance-name-before-truncating
...
Check length of instance name before truncating
2024-03-03 20:41:11 -08:00
Kubernetes Prow Robot
ee5eca2a49
Merge pull request #123527 from aramase/aramase/f/kep_3331_discovery_url
...
Add `DiscoveryURL` to Authentication Configuration
2024-03-03 18:51:54 -08:00
xigang
d72448a41c
cleanup: if triggerValue has a value, fast break
...
Signed-off-by: xigang <wangxigang2014@gmail.com>
2024-03-04 10:29:31 +08:00
Anish Ramasekar
78fb0bae22
wire up discovery url in authenticator
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 17:34:51 -08:00
Anish Ramasekar
84852ff56f
Add DiscoveryURL
to AuthenticationConfiguration
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 16:57:24 -08:00
Kubernetes Prow Robot
6d2ee131eb
Merge pull request #123225 from aramase/aramase/f/kep_3331_latency_metrics
...
Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
2024-03-03 16:27:50 -08:00
Davanum Srinivas
c61b2a3975
Check length of instance name before truncating
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 18:49:57 -05:00
Kubernetes Prow Robot
d45d803ac4
Merge pull request #123657 from dims/switch-to-new-cos-gpu-installer-v2.1.10
...
Switch to newer cos-gpu-installer - v2.1.10
2024-03-03 13:20:51 -08:00
Kubernetes Prow Robot
ccb5dd3b57
Merge pull request #123652 from dims/ensure-gcp-instance-names-are-a-max-of-63-characters
...
Ensure GCP instance names are a max of 63 characters
2024-03-03 11:58:53 -08:00
Davanum Srinivas
b33c5a8292
Switch to newer cos-gpu-installer - v2.1.10
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 14:22:24 -05:00
Davanum Srinivas
968aefd1bf
Ensure GCP instance names are a max of 63 characters
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 13:19:12 -05:00
huweiwen
c2ccb921ea
e2e pod: fail fast on failed pod
...
no need to wait until timeout. reduce test time
2024-03-04 00:01:02 +08:00
huweiwen
c134bfe9eb
agnhost/mounttest: add new line to output
...
make the output easier to read.
2024-03-03 23:46:22 +08:00
Kubernetes Prow Robot
e798fa67b5
Merge pull request #123654 from LiorLieberman/fix-kubeadam-with-structured-authz
...
[structured authz][kubeadam] avoid setting default authorization-mode when structured authz is wanted
2024-03-03 07:44:02 -08:00
Lior Lieberman
db115ca929
[kubeadam] do not set authorization-mode in api server when authorization-config is provided
2024-03-03 14:43:47 +00:00
Kubernetes Prow Robot
7c11cc9cfc
Merge pull request #123578 from carlory/fix-kubeadm-494
...
kubeadm: print all the kubelets and nodes that need to be upgraded on "upgrade plan"
2024-03-03 01:46:03 -08:00
Kubernetes Prow Robot
3086d88dc6
Merge pull request #123614 from ameukam/bump-cuda-version
...
test: Bump CUDA images
2024-03-02 19:29:42 -08:00
carlory
22adf221a1
print nodename
2024-03-03 11:03:29 +08:00
Anish Ramasekar
0da5e8137b
Add apiserver_authentication_jwt_authenticator_latency_seconds
metric
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-02 17:12:19 -08:00
Kubernetes Prow Robot
19df52c41a
Merge pull request #123647 from thockin/use_go_-C_instead_of_pushd_popd
...
Change `pushd $d; go ...; popd` to `go -C $d ...`
2024-03-02 16:41:56 -08:00
Kubernetes Prow Robot
38e5a29df6
Merge pull request #123648 from thockin/use_go.work_to_find_internal_modules
...
Use go.work to auto-find internal modules
2024-03-02 15:39:41 -08:00
Tim Hockin
a0215badb8
Change pushd $d; go ...; popd
to go -C $d ...
...
Just an annoyance in reading these scripts.
2024-03-02 14:40:10 -08:00
Tim Hockin
90e6546c68
Use go.work to auto-find internal modules
2024-03-02 14:38:25 -08:00
Kubernetes Prow Robot
1fceb815ac
Merge pull request #123437 from tenzen-y/fix-job-validatioin-test-name
...
Job: Fix test case names for the validations
2024-03-02 13:33:18 -08:00
Kubernetes Prow Robot
4164e7c3a7
Merge pull request #123629 from thockin/master
...
Get rid of unused API type NodeResources
2024-03-02 12:33:18 -08:00
Kubernetes Prow Robot
8674282a05
Merge pull request #123640 from liggitt/authz-beta-config
...
Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
2024-03-02 10:26:26 -08:00
Kubernetes Prow Robot
0364c6cc3d
Merge pull request #123623 from pohly/hack-protoc-search-path
...
hack: re-enable protobindings which use k8s.io/api
2024-03-02 10:26:20 -08:00
Kubernetes Prow Robot
96a5cfe513
Merge pull request #123646 from jpbetz/fix-openapi-conformance-selectable-fields
...
Fix publish openapi conformance tests to ignore x-kubernetes-selectable-fields
2024-03-02 09:23:42 -08:00
Joe Betz
eb5f31b9e1
Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons
2024-03-02 11:14:06 -05:00
Kubernetes Prow Robot
61410237c3
Merge pull request #123636 from dims/rely-only-on-source-cli-parameter-in-conformance-walk
...
Rely only on `source` cli parameter in conformance/walk
2024-03-02 07:44:20 -08:00
Arnaud Meukam
3bada5d451
test: Bump CUDA images
...
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2024-03-02 09:42:05 +01:00
Jordan Liggitt
0605a75c5e
Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
2024-03-02 02:00:31 -05:00
Kubernetes Prow Robot
0a31504ee1
Merge pull request #123635 from seans3/remotecommand-write-deadline
...
Increase client-side websocket write deadline
2024-03-01 22:05:51 -08:00
Kubernetes Prow Robot
95875b7723
Merge pull request #123634 from liggitt/handler-race
...
Fix discovery v2 conversion registration data race
2024-03-01 19:48:37 -08:00
Kubernetes Prow Robot
84c32fdb65
Merge pull request #123630 from thockin/add_go_work_header
...
Add a header to go.work
2024-03-01 19:48:27 -08:00
Kubernetes Prow Robot
8845c4c657
Merge pull request #123135 from munnerz/4193-beta-promotion
...
KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta
2024-03-01 19:48:18 -08:00
Sean Sullivan
1d4be7527f
increases client-side websocket write deadline to 30 seconds
2024-03-01 19:34:36 -08:00
Davanum Srinivas
948d9ca221
Rely only on source
cli parameter in conformance/walk
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-01 21:58:54 -05:00
Kubernetes Prow Robot
3e1da21801
Merge pull request #123611 from ritazh/authz-mcmetrics
...
Add authz webhook matchcondition metrics
2024-03-01 18:49:17 -08:00
Kubernetes Prow Robot
65d75501f7
Merge pull request #123484 from erikgb/csa-upgrade-subresource
...
Add option to upgrade subresource from CSA to SSA
2024-03-01 18:49:08 -08:00
Kubernetes Prow Robot
f4b01154ef
Merge pull request #123622 from aauren/remove_same_node_nodeport_test
...
e2e/service.go: remove same node nodeport test
2024-03-01 16:59:56 -08:00
Kubernetes Prow Robot
4e8674f4e5
Merge pull request #122975 from aramase/aramase/c/cleanup_authn_validation
...
cleanup structured authn/authz error logic
2024-03-01 16:59:47 -08:00
Kubernetes Prow Robot
673d3c9e70
Merge pull request #122693 from yanggangtony/fix_kubelet_server_journal_linux
...
Fix kubelet_server_journal --until parms.
2024-03-01 16:59:38 -08:00
Jordan Liggitt
0e9cdf76ad
Fix discovery v2 conversion registration data race
2024-03-01 19:29:39 -05:00