github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-18 04:54:54 +00:00
Code Issues Projects Releases Wiki Activity
129,634 Commits 42 Branches 9,765 Tags
c78556fb4b90bbebb462f3440f217bed700bd8d9
Commit Graph

129634 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Ohly
c78556fb4b agnhost pause: report signal, support termination message 
Which signal really cause the pause command to exit may be relevant to know.

By supporting the default /dev/termination-log, that information also shows up
in the pod status and then is often already shown in output of E2E tests for
unexpected pod failures.
 2025-05-02 14:46:56 +02:00
Kubernetes Prow Robot
1b517e5501 Merge pull request #131536 from enj/enj/r/oidc_cel_activation 
jwt: refactor CEL eval to drop `unstructured` and `map[string]any`
 2025-04-29 18:47:55 -07:00
Kubernetes Prow Robot
25f124886c Merge pull request #131460 from jpbetz/cel-value-reflect 
Add lazy reflective CEL object wrapper
 2025-04-29 13:43:54 -07:00
Joe Betz
ea64418271 Appease linters 2025-04-29 15:37:26 -04:00
Monis Khan
43d6ea12e3 jwt: refactor CEL eval to drop unstructured and map[string]any 
This prepares us to add support for distributed claims support in
CEL expressions.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2025-04-29 15:37:01 -04:00
Kubernetes Prow Robot
2cc53d78b7 Merge pull request #131525 from carlory/fix-131512 
Fix pod failure policy defaults does not work for cronjob
 2025-04-29 10:36:05 -07:00
Kubernetes Prow Robot
e73db626bd Merge pull request #131265 from rikatz/check-ipv6-enablement-kproxy 
kube-proxy should check global IPv6 enablement
 2025-04-29 10:35:58 -07:00
Joe Betz
064074c07a Add lazy reflective CEL object wrapper 2025-04-29 13:32:26 -04:00
Kubernetes Prow Robot
e3b9541b23 Merge pull request #131527 from carlory/cleanup-kubelet-UserNamespaces 
Fix incorrect  feature gate name UserNamespaceSupport for kubelet apis
 2025-04-29 09:18:17 -07:00
Kubernetes Prow Robot
67d2befc93 Merge pull request #131526 from pohly/dra-test-driver-example-update 
DRA test: update examples
 2025-04-29 09:18:10 -07:00
Kubernetes Prow Robot
e0dbdc9d17 Merge pull request #131518 from kevinrizza/pod-resize-test-namespace 
Don't create extra namespaces during pod resize tests
 2025-04-29 09:18:02 -07:00
Kubernetes Prow Robot
ea08d4df93 Merge pull request #128946 from jackfrancis/SetPVCVACName-eventually-gomega 
test: don't panic during an Eventually retry loop
 2025-04-29 09:17:55 -07:00
Kubernetes Prow Robot
2579512f2f Merge pull request #131492 from aroradaman/nftables-cleanup 
nftables: cleanup service chain checks
 2025-04-29 08:10:06 -07:00
Kubernetes Prow Robot
75f85451d1 Merge pull request #131224 from skitt/go-1.24-osroot 
Use Go 1.24 os.Root instead of filepath-securejoin
 2025-04-29 08:09:55 -07:00
kevinrizza
903d6d4f03 Don't reinitialize test framework during each test case 
This commit updates pod resize tests to resolve an
issue where extraneous unused namespaces are created
when the tests are run. This happens because a new
instance of the test framework is generated when
looping over the test specs, registering BeforeEach each
time.
 2025-04-29 09:17:40 -04:00
carlory
a56378d9fc Update UserNamespaceSupport feature gate name 2025-04-29 16:15:41 +08:00
Patrick Ohly
3cadb6ff80 DRA test: update examples 
Some more out-dated reference to resource class. Keeping the pod running is
better for demonstrating the lifecycle of claims because it is actually
possible to see a claim in the allocated state.
 2025-04-29 09:55:05 +02:00
carlory
c6f652d5fe Refactor pod failure policy defaults 2025-04-29 14:58:57 +08:00
Kubernetes Prow Robot
5be7941786 Merge pull request #131522 from sunnylovestiramisu/addReviewer 
Add sunnylovestiramisu as Reviewer
 2025-04-28 21:29:54 -07:00
Ricardo Pchevuzinske Katz
68b1a950f9 kube-proxy should check global IPv6 enablement 
IPv6 should also be checked if it is globally enabled. On nftables, today this
is hardcoded, so if a Linux Kernel disables IPv6 during its boot or doesn't
have IPv6 compiled, it will still try to use IPv6, which can lead to some
unexpected errors.

This change verifies if IPv6 is enabled by checking if the IPv6 network interfaces
proc file is available
 2025-04-28 22:14:02 -03:00
Sunny Song
2080bafa15 Add sunnylovestiramisu as Reviewer 2025-04-28 23:40:49 +00:00
Kubernetes Prow Robot
23258f104d Merge pull request #131511 from pohly/dep-misspell 
dependencies: github.com/client9/misspell -> github.com/golangci/misspell
 2025-04-28 12:25:53 -07:00
Kubernetes Prow Robot
1f056f8f88 Merge pull request #131495 from carlory/fix-131381 
Handle unsupported node expansion for RWX volumes
 2025-04-28 10:39:54 -07:00
carlory
dddfeb4a0e Handle unsupported node expansion for RWX volumes 
Co-authored-by: Hemant Kumar <gnufied@users.noreply.github.com>
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-04-29 00:19:47 +08:00
Kubernetes Prow Robot
a688664afa Merge pull request #131493 from hoskeri/externaljwt-oidc-discovery-fix 
Externaljwt OIDC discovery fix
 2025-04-28 08:23:54 -07:00
Patrick Ohly
8bb7b05637 dependencies: github.com/client9/misspell -> github.com/golangci/misspell 
github.com/client9/misspell was archived by the owner on Mar 26, 2025.
The golangci-lint team maintains a fork.

The newer code finds some misspellings which where missed before.
 2025-04-28 15:44:04 +02:00
Kubernetes Prow Robot
0abee6bd55 Merge pull request #131488 from sivchari/apply-slices-package 
kubeadm: use slices package to reduce the codes
 2025-04-28 03:07:28 -07:00
Kubernetes Prow Robot
a19c0ad553 Merge pull request #131491 from tchap/kubectl-service-describe-trafficdistribution 
kubectl describe service: Add Traffic Distribution
 2025-04-28 00:37:32 -07:00
Ondra Kupka
ad40bc8856 kubectl describe service: Add Traffic Distribution 2025-04-28 08:28:46 +02:00
Kubernetes Prow Robot
c519248e8a Merge pull request #131093 from bzsuni/bz/etcd/image/build/v3.6.0-rc.3 
Build etcd v3.6.0-rc.4 image
 2025-04-27 05:43:24 -07:00
Kubernetes Prow Robot
549a6a6c58 Merge pull request #131489 from sivchari/use-testing-tmpdir 
kubeadm: use testing.TempDir and delete helper function
 2025-04-26 20:57:24 -07:00
Abhijit Hoskeri
db960d1007 Fix openid discovery docs with external jwt signer. 
If the external jwt signer is enabled, publishing
OIDC discovery docs and keys fails because the PublicKeysGetter
is not wired correctly.

Set the public keys getter on startup so public key
discovery works in that case as well.
 2025-04-26 17:39:31 -07:00
Kubernetes Prow Robot
5675be2575 Merge pull request #131297 from thockin/kk_one_type_discoverer 
validation-gen: Use a single TypeDiscoverer for all inputs
 2025-04-26 15:51:23 -07:00
Abhijit Hoskeri
1869f6f23a Fix typo in service account config test. 2025-04-26 14:36:33 -07:00
Daman Arora
c7a870135a nftables: cleanup service chain checks 
A packet can traverse the service-xxxx chains by matching on either
service-ips or service-nodeports verdict map. We masquerade off-cluster
traffic to ClusterIP (when masqueradeAll = false) by adding a rule in
service-xxxx which checks if destination IP is ClusterIP, port and
protocol matches with service specs and source IP doesn't belong to
PodCIDR and masquerade on match.

If the packet reaches the service chain by match on service-ips map,
then ClusterIP, port and protocol are already matching service specs.
If it comes via external-xxxx chain then the destination IP will
never be ClusterIP. Therefore, we can simplify the masquerade
off-cluster traffic to ClusterIP check by simply matching on
destination ip and source ip.

Signed-off-by: Daman Arora <aroradaman@gmail.com>
 2025-04-27 01:05:45 +05:30
Kubernetes Prow Robot
5290c24e85 Merge pull request #131486 from aroradaman/kube-proxy-ipt-init-error 
kube-proxy: log errors during proxy boot
 2025-04-26 09:29:23 -07:00
sivchari
494b2b563f use testing.TempDir and delete helper function 
Signed-off-by: sivchari <shibuuuu5@gmail.com>
 2025-04-27 01:21:39 +09:00
sivchari
efcceee903 reduce assignment 
Signed-off-by: sivchari <shibuuuu5@gmail.com>
 2025-04-27 00:33:07 +09:00
sivchari
f42ee7a2d6 use slices package to reduce the codes 
Signed-off-by: sivchari <shibuuuu5@gmail.com>
 2025-04-26 23:08:02 +09:00
Daman Arora
9cb3dfb5d3 kube-proxy: log errors during proxy boot 
Signed-off-by: Daman Arora <aroradaman@gmail.com>
 2025-04-26 16:06:18 +05:30
Kubernetes Prow Robot
fe5afa919b Merge pull request #130333 from kmala/job 
handle job complete update delayed event
 2025-04-25 17:55:22 -07:00
Kubernetes Prow Robot
8b460b45ad Merge pull request #130613 from mengqiy/patch-3 
Update OWNERS_ALIASES for sig scalability
 2025-04-25 15:43:22 -07:00
Kubernetes Prow Robot
30f8f3d146 Merge pull request #131361 from jkyros/fix-inplace-test-wait-quota-status 
[FG:InPlacePodVerticalScaling] deflake - wait for resourceQuota status to be populated
 2025-04-25 13:35:22 -07:00
Kubernetes Prow Robot
b2e72e6caa Merge pull request #131462 from BenTheElder/kubectl-proxy-local-skip 
kubectl proxy env e2e test, skip when host is localhost
 2025-04-25 11:25:34 -07:00
Kubernetes Prow Robot
e2ccbd255c Merge pull request #130362 from aojea/node_addresses_init 
Use node addresses from informer in kubelet certificate manager
 2025-04-25 11:25:22 -07:00
Kubernetes Prow Robot
1b509a8883 Merge pull request #131434 from pacoxu/fsnotify 
bump fsnotify v1.9.0
 2025-04-25 09:41:30 -07:00
Kubernetes Prow Robot
375f282985 Merge pull request #131408 from gnufied/remove-unknown-resizing-error 
Remove warning about resizing failed for unknown reason
 2025-04-25 09:41:24 -07:00
Kubernetes Prow Robot
b837e345a9 Merge pull request #131406 from saschagrunert/cri-tools-1.33 
Update cri-tools to v1.33.0
 2025-04-25 07:53:04 -07:00
Kubernetes Prow Robot
629537d8c6 Merge pull request #131151 from yashsingh74/bump-coredns-1.12.1 
Update coredns to v1.12.1
 2025-04-25 07:52:57 -07:00
Kubernetes Prow Robot
09d0ffee6b Merge pull request #131465 from pacoxu/v1.33.0-api-testdata 
v1.33.0 api testdata
 2025-04-25 06:24:38 -07:00