Commit Graph

126520 Commits

Author SHA1 Message Date
carlory
c6e6fadc48 fix pull-kubernetes-linter-hints 2024-11-05 21:26:00 +08:00
carlory
b6c9c2d6fa 1. When the kubelet constructs the cri mounts for the container which references an image volume source type, It passes the missing mount attributes to the CRI implementation, including readOnly, propagation, and recursiveReadOnly. When the readOnly field of the containerMount is explicitly set to false, the kubelet will take the readOnlyas true to the CRI implementation because the image volume plugin requires the mount to be read-only.
2. Fix a bug where the pod is unexpectedly running when the `image` volume source type is used and mounted to `/etc/hosts` in the container.
2024-11-05 19:47:12 +08:00
carlory
2529d7d5a6 TestMakeMounts: add new cases for the image volume feature 2024-11-05 15:08:52 +08:00
Kubernetes Prow Robot
bc79d3ba87
Merge pull request #128396 from ritazh/deprecate-EnforceMountableSecretsAnnotation
deprecate EnforceMountableSecretsAnnotation in 1.32
2024-11-05 06:07:40 +00:00
lauralorenz
4965a7a8a0
KEP-4603: Refactor various hardcoded backoffs into separate constants (#128369)
* Refactor various hardcoded backoffs into separate constants

Signed-off-by: Laura Lorenz <lauralorenz@google.com>

* Fix comment formatting

Signed-off-by: Laura Lorenz <lauralorenz@google.com>

---------

Signed-off-by: Laura Lorenz <lauralorenz@google.com>
2024-11-05 06:07:28 +00:00
Kubernetes Prow Robot
e5a31e8bbc
Merge pull request #128552 from aojea/package_kubernete_test
fix package name
2024-11-05 04:45:28 +00:00
Kubernetes Prow Robot
ad9dad07a8
Merge pull request #127874 from AnishShah/image-gc-eviction
Cleanup unused images or containers first when eviction manager detects ContainerFsInodesFree signal
2024-11-05 02:39:28 +00:00
Kubernetes Prow Robot
f64eeb523d
Merge pull request #128096 from bart0sh/PR161-e2e_node-consolidate-NFSServer-APIs
e2e_node: consolidated NFSServer APIs.
2024-11-05 00:33:35 +00:00
Kubernetes Prow Robot
4932adf80d
Merge pull request #125296 from jsturtevant/windows-numa-support
Support CPU and Topology manager on Windows
2024-11-05 00:33:28 +00:00
Antonio Ojea
3424e7df46 fix package name 2024-11-04 23:58:59 +00:00
Kubernetes Prow Robot
19d56296aa
Merge pull request #128547 from aojea/rest_watch
rest client watch: use same name for package as folder
2024-11-04 23:15:51 +00:00
Kubernetes Prow Robot
74209418c4
Merge pull request #128514 from hoskeri/shop-local-proxy-local
e2e_node: Pass e2eCriProxy instead of updating global.
2024-11-04 23:15:43 +00:00
Kubernetes Prow Robot
5572688cef
Merge pull request #128342 from gnufied/recovery-expansion-beta
Move RecoverVolumeExpansionFailure feature to beta
2024-11-04 23:15:36 +00:00
Kubernetes Prow Robot
a2b19b3edb
Merge pull request #127910 from leonzz/leonzz-tmp
fix node start time inconsistency in kubelet
2024-11-04 23:15:29 +00:00
Kubernetes Prow Robot
9fe41b6198
Merge pull request #128046 from AxeZhan/ga3960
Graduate PodLifecycleSleepAction to GA
2024-11-04 22:09:35 +00:00
Kubernetes Prow Robot
97c79df18f
Merge pull request #127981 from jsafrane/selinux-changepolicy
1710: Implement SELinuxChangePolicy
2024-11-04 22:09:29 +00:00
Rita Zhang
e7cdc59555
deprecate EnforceMountableSecretsAnnotation in 1.32
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-11-04 13:13:32 -08:00
Kubernetes Prow Robot
b240c51a72
Merge pull request #128523 from carlory/cleanup-tmp-kubelet-dir
clean up tmp kubelet dir after run tests
2024-11-04 20:17:51 +00:00
Kubernetes Prow Robot
e7bcf57171
Merge pull request #128430 from richabanker/kubelet-metrics-slis-fix
do not install handler for '/metrics/slis' endpoint using sync.Once
2024-11-04 20:17:44 +00:00
Kubernetes Prow Robot
57438d0b8f
Merge pull request #128411 from macsko/split_scheduler_perf_tests
Split scheduler_perf config into subdirectories
2024-11-04 20:17:36 +00:00
Kubernetes Prow Robot
a8e1f41131
Merge pull request #124216 from iholder101/in-pod-vertical-scaling/update-cgroup-systemd-instead-of-cgroupfs
[FG:InPlacePodVerticalScaling] Handle systemd cgroup driver by using libcontainer for updating pod cgroup values
2024-11-04 20:17:29 +00:00
Antonio Ojea
8e1d0c664c rest client watch: use same name for package as folder 2024-11-04 19:56:55 +00:00
Filip Křepinský
05bc270870
add tests for getReplicaSetFraction in the deployment controller (#128535)
* better name variables in deployment_util

* add tests for getReplicaSetFraction in the deployment controller

- make validation more robust and make sure we do not divide by 0
2024-11-04 19:11:43 +00:00
Kubernetes Prow Robot
7a4d755644
Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
2024-11-04 19:11:35 +00:00
Alay Patel
3e3276e9fe
Promote PodIndexLabel for Statefulset and IndexedJob stable (#128387)
* lock feature gate for PodIndexLabel and mark it GA

Signed-off-by: Alay Patel <alayp@nvidia.com>

* add emulated version if testing disabling of PodIndexLabel FG

Signed-off-by: Alay Patel <alayp@nvidia.com>

---------

Signed-off-by: Alay Patel <alayp@nvidia.com>
2024-11-04 19:11:28 +00:00
leonzz
d5067208e4 fix boottime inconsistency with accurate uptime
`golang.org/x/sys/unix`.`Sysinfo` only provide uptime in whole second,
which leads to +-1s drifting in the boot time calculation. Reading from
/proc/stat is a better option as there's a reliable boot time directly
returned from linux kernel.
2024-11-04 19:09:27 +00:00
Kubernetes Prow Robot
b4d91d1b8a
Merge pull request #128517 from Tal-or/memorymanager-ga-features
node: kubelet: memmgr: Memory Manager to GA
2024-11-04 17:19:36 +00:00
Kubernetes Prow Robot
6a1a6fd85f
Merge pull request #126894 from carlory/ZeroLimitedNominalConcurrencyShares
remove generally available feature-gate ZeroLimitedNominalConcurrencyShares
2024-11-04 17:19:29 +00:00
Davanum Srinivas
2b0592ee77
Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-11-04 10:51:13 -05:00
Kubernetes Prow Robot
cb31e42b85
Merge pull request #128533 from neolit123/1.32-update-system-validators-to-v1.9.0
vendor: update system-validators to v1.9.1
2024-11-04 14:49:28 +00:00
Kubernetes Prow Robot
cc319bf654
Merge pull request #128527 from atiratree/annotations-validation
improve validation for ReplicaSet annotations in the deployment controller
2024-11-04 13:07:28 +00:00
Kubernetes Prow Robot
6ae2d359ad
Merge pull request #128494 from dims/drop-go-colortext-and-its-usage
Drop go-colortext and its usage
2024-11-04 11:41:35 +00:00
Kubernetes Prow Robot
c6ea102f5f
Merge pull request #128298 from SergeyKanzhelev/convergePluginRegistrationForDRAAndDP
converge DRA and Device Plugin plugins registration
2024-11-04 11:41:28 +00:00
Lubomir I. Ivanov
6928007087 vendor: update system-validators to v1.9.1 2024-11-04 13:25:28 +02:00
Filip Křepinský
3ac0ac7a81 improve validation for ReplicaSet annotations in the deployment controller 2024-11-04 10:43:16 +01:00
Kubernetes Prow Robot
b845137026
Merge pull request #128526 from atiratree/deployment-improve-scaling
simplify ScalingReplicaSet event building in the deployment controller
2024-11-04 09:01:28 +00:00
Maciej Skoczeń
8371a35824 Split scheduler_perf config into subdirectories 2024-11-04 08:45:34 +00:00
Talor Itzhak
a56fde3694 lint: fix linter's complaints
Signed-off-by: Talor Itzhak <titzhak@redhat.com>
2024-11-04 09:59:39 +02:00
Talor Itzhak
37bcd38785 memorymanager: FG is locked to ON by default
We can remove the `if()` guards, since
the feature is always available.

Signed-off-by: Talor Itzhak <titzhak@redhat.com>
2024-11-04 09:57:21 +02:00
Talor Itzhak
c279c67071 hack/update-featuregates.sh output
Signed-off-by: Talor Itzhak <titzhak@redhat.com>
2024-11-04 09:57:18 +02:00
Talor Itzhak
004db73142 node:kubelet:memmgr: Memory Manager to GA
Signed-off-by: Talor Itzhak <titzhak@redhat.com>
2024-11-04 09:56:06 +02:00
Kubernetes Prow Robot
f4d05aad77
Merge pull request #128470 from omerap12/autoscale-unit
kubectl: add test coverage for autoscale command
2024-11-04 07:43:28 +00:00
Filip Křepinský
a460e2c413 simplify ScalingReplicaSet event building in the deployment controller 2024-11-04 08:42:22 +01:00
carlory
8a45986eea clean up tmp kubelet dir 2024-11-04 14:52:41 +08:00
Kubernetes Prow Robot
3036d107a0
Merge pull request #127074 from Tal-or/mm_fix_checkpoint_file_comparison
memorymanager: fix checkpoint file comparison
2024-11-04 02:13:27 +00:00
Kubernetes Prow Robot
6cb5ea56cb
Merge pull request #128484 from carlory/improve-error
improve error message format for WaitForPodSuccessInNamespaceTimeout
2024-11-03 02:19:27 +00:00
Abhijit Hoskeri
d86debe500 e2e_node: Pass e2eCriProxy instead of updating global.
e2eCriProxy is defined in a _test.go and referenced
in a non-test file. This confuses gopls.

It's also clearer to future readers.
2024-11-02 17:40:49 -07:00
Kubernetes Prow Robot
dfd456c567
Merge pull request #128276 from kolyshkin/runc-1.2.0
vendor: bump runc/libcontainer to v1.2.1
2024-11-02 18:23:26 +00:00
Kubernetes Prow Robot
6fce566781
Merge pull request #128474 from neolit123/1.32-handle-custom-addreses-comp-readyz
kubeadm: use actual addresses/ports for WaitForAllControlPlaneComponents
2024-11-02 17:19:26 +00:00
Lubomir I. Ivanov
b2741f7b1c kubeadm: use actual addresses/ports for WaitForAllControlPlaneComponents
By default check the KCM and scheduler on 127.0.0.1:<port> as that is the
defaall --bind-address kubeamd uses for these components.

For kube-apiserver take the value from APIEndpoint.AdvertiseAddress which is
dynamically detected from the host. Unless the user has passed explicitly --advertise-address
as an extra arg.

Read the <port> values for all components from the --secure-port flag
value if needed. Otherwise use defaults.

Use /livez for apiserver and scheduler. Add TODO for KCM to
switch to /livez as well.
2024-11-02 18:09:36 +02:00