github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 20:00:07 +00:00
Code Issues Projects Releases Wiki Activity
135,532 Commits 42 Branches 9,765 Tags
c4b2640b32ec7fc2fd00e49fa2167d8a070bb2b3
Commit Graph

10709 Commits

Author SHA1 Message Date
Joel Speed
c4b2640b32 Remove exceptions for groups with no issues 2026-02-12 11:16:54 +00:00
Joel Speed
8651d99a26 Enforce either optional or required tag on apiserverinternal API group 2026-02-12 11:14:37 +00:00
Kubernetes Prow Robot
7b0310aadd Merge pull request #136820 from dims/update-otel-deps 
Update OpenTelemetry dependencies to latest versions
 2026-02-10 05:44:05 +05:30
Kubernetes Prow Robot
f693c45c4e Merge pull request #136775 from atombrella/feature/activate_modernize_slicessort 
Enable modernize/slicessort rule
 2026-02-10 05:43:57 +05:30
Davanum Srinivas
275adf8b04 Update OpenTelemetry dependencies to latest versions 
Bump OpenTelemetry dependencies:
- go.opentelemetry.io/otel v1.39.0 → v1.40.0
- go.opentelemetry.io/otel/metric v1.39.0 → v1.40.0
- go.opentelemetry.io/otel/sdk v1.39.0 → v1.40.0
- go.opentelemetry.io/otel/trace v1.39.0 → v1.40.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0 → v1.40.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0 → v1.40.0
- go.opentelemetry.io/contrib/.../otelrestful v0.64.0 → v0.65.0
- go.opentelemetry.io/contrib/.../otelhttp v0.64.0 → v0.65.0
- go.opentelemetry.io/contrib/.../otelgrpc v0.63.0 → v0.65.0

Unpin otelgrpc: the nil TracerProvider panic (kubernetes#135865) that
required pinning at v0.63.0 is fixed in v0.65.0. Removed the
pinnedModules entry from unwanted-dependencies.json.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-02-07 09:21:51 -05:00
Mads Jensen
95616cecda Use slices.Sort instead of sort.Slice. 
There were only two instances of this in the entire code-base. Hence,
I have enabled the modernize rule/linter in golangci-lint.
 2026-02-06 22:46:08 +01:00
Davanum Srinivas
8518a8bcfa Mark flynn/go-shlex and kr/pty as unwanted dependencies 
Both repositories are archived on GitHub and were detected by the
new check-dependency-archived-periodical CI job.

Also add flynn/go-shlex to unwantedReferences (referenced by
github.com/coredns/caddy).

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-02-06 07:17:02 -05:00
Kubernetes Prow Robot
38c2026613 Merge pull request #136315 from liyuerich/commentstartauthorization 
enable commentstart check on authorization API group
 2026-02-06 14:04:32 +05:30
liyuerich
d172d92d6c enable commentstart check on authorization API group 
Signed-off-by: liyuerich <yue.li@daocloud.io>
 2026-02-06 14:15:29 +08:00
Kubernetes Prow Robot
aba3dc7256 Merge pull request #133759 from BenTheElder/integrationprocs 
Reapply "stop overriding max concurrency in CI, let automax procs handle it
 2026-02-06 11:06:36 +05:30
Kubernetes Prow Robot
9b1228fe05 Merge pull request #136706 from Jefftree/ulimit 
Fix ulimit check in test.sh
 2026-02-06 04:16:30 +05:30
Kubernetes Prow Robot
dab5f4f0ae Merge pull request #136777 from omerap12/update-agnhost 
Upgrade agnhost image to 2.63.0
 2026-02-06 00:44:38 +05:30
Kubernetes Prow Robot
344604831e Merge pull request #136492 from Ignoramuss/optionalorrequired-policy 
api: enable optionalorrequired linter for policy API
 2026-02-06 00:44:30 +05:30
Omer Aplatony
201fe11b03 Promote agnhost image to 2.63.0 
Signed-off-by: Omer Aplatony <omerap12@gmail.com>
 2026-02-05 17:21:34 +00:00
Kubernetes Prow Robot
dc1ec1211e Merge pull request #136747 from dims/use-k8s-utils-btree 
Use btree from k8s.io/utils instead of github.com/google/btree
 2026-02-05 16:02:30 +05:30
Davanum Srinivas
a328ca88ad Use btree from k8s.io/utils instead of github.com/google/btree 
The google/btree package is deprecated, so switch to the maintained
fork in k8s.io/utils/third_party/forked/golang/btree.

API differences:
- NewG -> New
- BTreeG[T] -> BTree[T]

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-02-04 16:11:16 -05:00
Ignoramuss
d485fe5610 api: enable optionalorrequired linter for policy API 
Add missing +optional markers to PodDisruptionBudgetStatus fields in
policy/v1 and policy/v1beta1 and enable the optionalorrequired linter
for the policy API group.
 2026-02-04 07:50:27 -08:00
Davanum Srinivas
1a25b103f5 Remove openstorage pinned module from unwanted-dependencies 
The github.com/libopenstorage/openstorage dependency was removed in
299ec97e6f, so we no longer
need to pin it in hack/unwanted-dependencies.json.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-02-04 08:34:57 -05:00
Kubernetes Prow Robot
cde1fe6a40 Merge pull request #133844 from pohly/invariants 
E2E: check log output to detect DATA RACEs
 2026-02-04 06:30:27 +05:30
Kubernetes Prow Robot
c91e982433 Merge pull request #136489 from Ignoramuss/optionalorrequired-node 
api: enable optionalorrequired linter for node API
 2026-02-03 23:58:27 +05:30
Jefftree
09333f1a97 Fix ulimit check 2026-02-02 21:33:05 -05:00
Mads Jensen
8f9038e7b2 Enabling many modernize linter rules as hints. 
Follow-up to #136292
 2026-02-02 18:01:26 +01:00
Ignoramuss
50eb238457 api: enable optionalorrequired linter for node API 
Add missing +required marker to RuntimeClass.Spec in node/v1alpha1 and
enable the optionalorrequired linter for the node API group.
 2026-01-30 17:24:42 -08:00
Davanum Srinivas
cfcb10ef8a hack: switch local-up-cluster to ptp CNI for reliable DIND networking 
The ci-kubernetes-local-e2e job has been flaky (~40-45% success rate)
with intermittent DNS/service connectivity failures. The root cause is
that bridge CNI requires br_netfilter and bridge-nf-call-iptables
kernel settings, which don't work reliably in docker-in-docker.

This switches to ptp (point-to-point) CNI, which creates direct veth
pairs between pods and host namespace. No bridge means no br_netfilter
dependency. This is the same approach KIND uses and it works reliably.

Changes:
- Replace bridge CNI with ptp CNI plugin
- Configure kernel network parameters for DIND (route_localnet,
  arp_ignore, ip_forward) required for ptp and iptables-based kube-proxy
- Remove CoreDNS pod delete/restart workaround from 1168b11875 that was
  masking the underlying networking issues (no longer needed)
- Add CoreDNS log capture during cleanup for debugging DNS issues

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-01-30 16:25:05 -05:00
Matteo Fari
b18b7aa966 modified exceptions to match the new KAL 2026-01-30 10:07:13 +01:00
Matteo Fari
2182441bdd enabled jsontags for kal and added exceptions 
enabled jsontags for kal and added exceptions
 2026-01-30 09:58:57 +01:00
Kubernetes Prow Robot
a7b940cde2 Merge pull request #131068 from soltysh/sample_controller_scheme 
Switch sample-controller to use NewClientset supporting applyconfiguration rather than deprecated NewSimpleClientset
 2026-01-30 12:09:42 +05:30
Kubernetes Prow Robot
9b8aa0b585 Merge pull request #134867 from ShaanveerS/enable-kal-nodurations 
Enable nodurations rule for Kube API Linter
 2026-01-30 01:21:49 +05:30
Kubernetes Prow Robot
4b5e40aacd Merge pull request #136190 from pohly/logcheck-update 
test dependencies: logtools v0.10.0
 2026-01-29 23:31:58 +05:30
Kubernetes Prow Robot
f1d3ab9cf3 Merge pull request #134925 from ShaanveerS/shaan/imagepolicy-on-joel 
feat(kal): enforce either optional or required tag on imagepolicy API group
 2026-01-29 23:31:51 +05:30
Maciej Szulik
afaa8c19fe Update update-codegen.sh with sample-controller exception for openapi 
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
 2026-01-29 16:06:16 +01:00
Kubernetes Prow Robot
a41a5c35d3 Merge pull request #135106 from bkhadars/enable-commentstart1 
enable commentstart check on admissionregistration API group
 2026-01-28 20:39:53 +05:30
Kubernetes Prow Robot
437184c055 Merge pull request #136292 from atombrella/feature/modernize_plusbuild 
Remove obsolete `// +build` instruction.
 2026-01-26 19:05:59 +05:30
ShaanveerS
46e9b9e671 feat(kal): enforce optional/required on imagepolicy API group 2026-01-26 12:26:31 +01:00
ShaanveerS
281964596f Enable nodurations rule for Kube API Linter 2026-01-25 16:16:19 +01:00
amigo-nishant
b56c322f24 cleanup: improve darwin error messages 2026-01-23 09:30:07 +05:30
Kubernetes Prow Robot
b3f3cb88e8 Merge pull request #136419 from pacoxu/add-google-btree-unwanted 
Add github.com/google/btree to unwanted dependencies
 2026-01-22 19:17:28 +05:30
Paco Xu
be68191231 Add github.com/google/btree to unwanted dependencies 
Mark github.com/google/btree as unwanted due to being unmaintained
and in archive mode. The module is currently referenced by:
- go.etcd.io/etcd/server/v3
- k8s.io/apiserver
 2026-01-22 16:56:57 +08:00
Basheer
aecc4135cc enable commentstart check on admissionregistration API group 2026-01-22 10:05:23 +05:30
Kubernetes Prow Robot
69eb15ee58 Merge pull request #136362 from dims/update-opentelemetry-v1.39.0 
Update OpenTelemetry dependencies to latest versions
 2026-01-22 02:23:25 +05:30
Kubernetes Prow Robot
6010707b8a Merge pull request #135470 from Ignoramuss/optionalorrequired-scheduling 
api: add +required markers to scheduling API
 2026-01-21 21:21:28 +05:30
Davanum Srinivas
c40ea60b9f Update OpenTelemetry dependencies to latest versions 
Core packages (opentelemetry-go):
- go.opentelemetry.io/otel: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/metric: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/trace: v1.38.0 → v1.39.0
- go.opentelemetry.io/otel/sdk: v1.38.0 → v1.39.0

Exporters:
- go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.34.0 → v1.39.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.34.0 → v1.39.0

Contrib instrumentation (opentelemetry-go-contrib):
- go.opentelemetry.io/contrib/.../otelhttp: v0.61.0 → v0.64.0
- go.opentelemetry.io/contrib/.../otelrestful: v0.44.0 → v0.64.0

Protocol definitions (opentelemetry-proto-go):
- go.opentelemetry.io/proto/otlp: v1.5.0 → v1.9.0

Notable changes:
- Go 1.24 is now the minimum required version (Go 1.23 support dropped) for OTEL components
- Performance: ~4x improvement in histogram concurrent operations; xxhash
  replaces fnv for attribute hashing
- Fixed goroutine leak in span processors when context is canceled
- otelrestful migrated semantic conventions from v1.20.0 to v1.34.0
  (e.g., http.method → http.request.method)
- Partial OTLP export errors now surfaced instead of being silently dropped
- otelrestful no longer depends on json-iterator/go, modern-go/concurrent,
  or modern-go/reflect2; unwanted-dependencies.json updated accordingly

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-01-20 18:24:44 -05:00
Kubernetes Prow Robot
8f76dbf79b Merge pull request #136227 from dims/update-grpc-ecosystem-deps-jan2026 
Update gRPC ecosystem dependencies
 2026-01-20 22:41:26 +05:30
Mads Jensen
f38fc5d064 Enforce plusbuild rule with golangci-lint 2026-01-19 20:27:56 +01:00
Davanum Srinivas
9dda58194a Update agnhost to 2.61 and etcd to 3.6.7-0 in test manifests 
Update outdated image versions across test manifests and add tracking
to build/dependencies.yaml for version drift detection via zeitgeist:

- agnhost: 2.32/2.53/2.54/2.57 → 2.61 (latest)
- etcd: 3.2.24 → 3.6.7-0
- kitten/nautilus BASEIMAGE: agnhost 2.57 → 2.61

and added etcd statefulset reference to existing etcd entry.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-01-18 20:39:57 -05:00
Kubernetes Prow Robot
57e68a76e3 Merge pull request #135842 from liyuerich/commentstartauthentication 
enable commentstart check on authentication API group
 2026-01-17 08:35:22 +05:30
Kubernetes Prow Robot
6817bea700 Merge pull request #136274 from pohly/e2e-ginkgo-forbidigo 
golangci-lint: enforce control over ginkgo.ReportBeforeSuite/ReportAfterSuite
 2026-01-17 02:31:31 +05:30
Patrick Ohly
391a58ce24 test dependencies: logtools v0.10.0 
The update logcheck linter will warn about logger.V().Error by default. Such
calls make no sense because logr by design treats this like logger.Error. In
Kubernetes, they tend to be the result of an incorrect conversion of
klog.V().Error[S], which does check the verbosity. With logger, Error needs to
be replaced by Info.
 2026-01-16 18:44:21 +01:00
Patrick Ohly
e058fbdd99 golangci-lint: enforce control over ginkgo.ReportBeforeSuite/ReportAfterSuite 
https://git.k8s.io/enhancements/keps/sig-testing/5468-invariant-testing
introduced a mechanism for tests which hook into the test suite run via
ginkgo.ReportAfterSuite. Usage was limited to code in test/e2e/invariants with
stricter reviews.

However, this was not enforced mechanically. With forbidigo we can be sure that
nothing slips through.

ginkgo.ReportBeforeSuite has similar restrictions.
 2026-01-16 13:32:05 +01:00
Davanum Srinivas
f727e938dc Update gRPC ecosystem dependencies 
Update the gRPC ecosystem to pick up performance improvements,
bug fixes, and maintain compatibility with the latest protobuf
and OpenTelemetry releases.

Notable changes in grpc v1.78.0:
- mem.Reader interface changed to struct
- Legacy pick_first load balancer policy removed (pickfirstleaf)
- Improved connection state management

Updated dependencies:
- grpc-gateway/v2: v2.27.4 (2025-12-26)
- go-grpc-middleware/v2: v2.3.3 (2025-11-04)
- go-grpc-middleware/providers/prometheus: v1.1.0 (2025-06-16)
- google.golang.org/grpc: v1.78.0 (2025-12-23)
- genproto/googleapis/api: v0.0.0-20260112192933-99fd39fd28a9 (2026-01-12)
- genproto/googleapis/rpc: v0.0.0-20260112192933-99fd39fd28a9 (2026-01-12)

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-01-16 07:20:17 -05:00