github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-18 04:54:54 +00:00
Code Issues Projects Releases Wiki Activity
129,592 Commits 42 Branches 9,765 Tags
c7a870135a3cc5fb72eb00a5371591d86c0a504f
Commit Graph

129592 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daman Arora
c7a870135a nftables: cleanup service chain checks 
A packet can traverse the service-xxxx chains by matching on either
service-ips or service-nodeports verdict map. We masquerade off-cluster
traffic to ClusterIP (when masqueradeAll = false) by adding a rule in
service-xxxx which checks if destination IP is ClusterIP, port and
protocol matches with service specs and source IP doesn't belong to
PodCIDR and masquerade on match.

If the packet reaches the service chain by match on service-ips map,
then ClusterIP, port and protocol are already matching service specs.
If it comes via external-xxxx chain then the destination IP will
never be ClusterIP. Therefore, we can simplify the masquerade
off-cluster traffic to ClusterIP check by simply matching on
destination ip and source ip.

Signed-off-by: Daman Arora <aroradaman@gmail.com>
 2025-04-27 01:05:45 +05:30
Kubernetes Prow Robot
5290c24e85 Merge pull request #131486 from aroradaman/kube-proxy-ipt-init-error 
kube-proxy: log errors during proxy boot
 2025-04-26 09:29:23 -07:00
Daman Arora
9cb3dfb5d3 kube-proxy: log errors during proxy boot 
Signed-off-by: Daman Arora <aroradaman@gmail.com>
 2025-04-26 16:06:18 +05:30
Kubernetes Prow Robot
fe5afa919b Merge pull request #130333 from kmala/job 
handle job complete update delayed event
 2025-04-25 17:55:22 -07:00
Kubernetes Prow Robot
8b460b45ad Merge pull request #130613 from mengqiy/patch-3 
Update OWNERS_ALIASES for sig scalability
 2025-04-25 15:43:22 -07:00
Kubernetes Prow Robot
30f8f3d146 Merge pull request #131361 from jkyros/fix-inplace-test-wait-quota-status 
[FG:InPlacePodVerticalScaling] deflake - wait for resourceQuota status to be populated
 2025-04-25 13:35:22 -07:00
Kubernetes Prow Robot
b2e72e6caa Merge pull request #131462 from BenTheElder/kubectl-proxy-local-skip 
kubectl proxy env e2e test, skip when host is localhost
 2025-04-25 11:25:34 -07:00
Kubernetes Prow Robot
e2ccbd255c Merge pull request #130362 from aojea/node_addresses_init 
Use node addresses from informer in kubelet certificate manager
 2025-04-25 11:25:22 -07:00
Kubernetes Prow Robot
1b509a8883 Merge pull request #131434 from pacoxu/fsnotify 
bump fsnotify v1.9.0
 2025-04-25 09:41:30 -07:00
Kubernetes Prow Robot
375f282985 Merge pull request #131408 from gnufied/remove-unknown-resizing-error 
Remove warning about resizing failed for unknown reason
 2025-04-25 09:41:24 -07:00
Kubernetes Prow Robot
b837e345a9 Merge pull request #131406 from saschagrunert/cri-tools-1.33 
Update cri-tools to v1.33.0
 2025-04-25 07:53:04 -07:00
Kubernetes Prow Robot
629537d8c6 Merge pull request #131151 from yashsingh74/bump-coredns-1.12.1 
Update coredns to v1.12.1
 2025-04-25 07:52:57 -07:00
Kubernetes Prow Robot
09d0ffee6b Merge pull request #131465 from pacoxu/v1.33.0-api-testdata 
v1.33.0 api testdata
 2025-04-25 06:24:38 -07:00
Kubernetes Prow Robot
736f03bb88 Merge pull request #131464 from pacoxu/fix-windows 
[kubelet] fix nil pointer panic on windows node
 2025-04-25 06:24:31 -07:00
Kubernetes Prow Robot
3a8af5a174 Merge pull request #131459 from BenTheElder/codegen-streamline 
automatically setup hack/update-codegen.sh dependencies
 2025-04-25 03:58:30 -07:00
Kubernetes Prow Robot
e9379e92db Merge pull request #131444 from erdii/update-cel-go 
chore: update github.com/google/cel-go dependency to v0.25.0
 2025-04-25 02:14:31 -07:00
Josh Gwosdz
7a24c4ce5d chore: update github.com/google/cel-go dependency to v0.25.0 
Signed-off-by: Josh Gwosdz <jgwosdz@redhat.com>
 2025-04-25 10:07:12 +02:00
Paco Xu
addaf680ae remove v1.31.0 api testdata 2025-04-25 15:49:41 +08:00
Paco Xu
86a43f4b53 Add v1.33.0 API testdata 2025-04-25 15:49:16 +08:00
Paco Xu
89156452ae fix nil pointer panic on windows node 2025-04-25 15:38:14 +08:00
John Kyros
00908ce2d1 Wait for resource quota status to be populated 
Trying to create a pod using a resourcequota whose status has not been
populated will result in api admission rejecting it with a 403
Forbidden. The pod resize tests do not wait/check to make sure the
resourcequota status is populated before trying to use the quota when
creating a pod, so in scenarious where either the test runs too fast, or
the resourcequota controller is too slow, the tests will fail.

This just makes the test wait up to a minute for the quota status to
populate. The status generation timing/logic gets tested separately in
test/e2e/apimachinery/resource_quota.go, and it waits a minute, so we
wait a minute, but in practice it takes at worst seconds.
 2025-04-25 01:09:08 -05:00
Benjamin Elder
d5bf33e7d7 update-codegen.sh: automatically install protoc 2025-04-24 22:54:09 -07:00
Benjamin Elder
8a2f367ec3 automatically install goimports when running update-codegen 2025-04-24 22:54:09 -07:00
Benjamin Elder
1473aeaac4 add goimports to tools module 
used by go-to-protobuf, currently we rely on the host copy ...
 2025-04-24 22:54:09 -07:00
Benjamin Elder
540ea5949f skip kubectl proxy env tests when the host is localhost/loopback and would not be proxied 2025-04-24 22:40:05 -07:00
Antonio Ojea
1214dc223c kubelet: Use node addresses from informer 
The kubelet certificate manager was using a closure to get the node addresses,
but this closure depended on a static field that was only updated during the node
status update. This created a twisted dependency between the node.status
reconcile loops and the certificate manager.

This commit fixes this issue by using the node informer to get the node addresses directly.
This ensures that the kubelet always requests a certificate with the latest node addresses.
 2025-04-25 03:15:42 +00:00
Kubernetes Prow Robot
616d6d4e75 Merge pull request #131456 from BenTheElder/staging-dep-approvers 
enable dep-approvers for staging go.mod/go.sum
 2025-04-24 19:14:31 -07:00
Benjamin Elder
187b43d5ad enable dep-approvers for staging go.mod/go.sum 
NOTE: to use filters, _all_ entries must be under filters https://go.k8s.io/owners/#filters
 2025-04-24 17:17:27 -07:00
Kubernetes Prow Robot
38ad2e1c95 Merge pull request #131454 from BenTheElder/mark-yaml-unwanted 
track gopkg.in/yaml.v3 as an unwanted depdendency
 2025-04-24 17:16:30 -07:00
Kubernetes Prow Robot
0a60b104b0 Merge pull request #131452 from BenTheElder/dep-approve-attempt 
attempt to re-introduce dep-approvers for go.mod/go.sum
 2025-04-24 15:24:38 -07:00
Kubernetes Prow Robot
05a3d178a2 Merge pull request #129564 from Jefftree/compat-134 
Bump DefaultKubeBinaryVersion to 1.34 and fix VAP test
 2025-04-24 15:24:30 -07:00
Benjamin Elder
08794974b7 track gopkg.in/yaml.v3 as an unwanted depdendency 
this repo (which also has yaml.v2) was archived

we have a fork of it already in sigs.k8s.io/yaml/goyaml.v3
 2025-04-24 15:02:29 -07:00
Kubernetes Prow Robot
07bcf93678 Merge pull request #131321 from karlkfi/karl-very-fast-watch 
chore: Add VeryShortWatchError typed error
 2025-04-24 14:06:30 -07:00
Benjamin Elder
58e5dfd45c attempt to re-introduce dep-approvers for go.mod/go.sum 2025-04-24 13:08:46 -07:00
Rodrey
74e84dbf5a Add more test cases to TestDescribeSecret test (#131422) 
* Converted to parameterised tests.

* Added test case for sorting with casing.

* Formatted code.

* Added test case for keys that contain numbers.
 2025-04-24 12:00:50 -07:00
Kubernetes Prow Robot
5da29d0ee7 Merge pull request #131334 from natasha41575/fix-cgorup-error-msg 
[FG:InPlacePodVerticalScaling] add more error details to the failing cgroup check
 2025-04-24 12:00:41 -07:00
Kubernetes Prow Robot
595516a149 Merge pull request #130468 from jingyuanliang/PodAntiAffinity 
fix: comment on preferred PodAntiAffinity
 2025-04-24 12:00:34 -07:00
Karl Isenberg
6eff9db0f1 chore: Add VeryShortWatchError typed error 
- Add a new VeryShortWatchError struct for error matching, returned
  by `handleAnyWatch`, up through `Reflector.ListAndWatch`.
- Update test expectations to match exact errors.
 2025-04-24 11:01:03 -07:00
Kubernetes Prow Robot
08f32728b9 Merge pull request #131311 from gnufied/fix-csi-json-file-removal 
Fix error handling and csi json file removal interaction
 2025-04-24 10:52:38 -07:00
Kubernetes Prow Robot
af53af19e6 Merge pull request #130211 from carlory/add-intree-driver-for-nfs3 
e2e storage test: in-tree driver adds the support for nfs v3
 2025-04-24 10:52:31 -07:00
Kubernetes Prow Robot
6e1d5e310a Merge pull request #131435 from wojtek-t/fix_watcher 
Fix etcd3 watcher flake
 2025-04-24 09:18:31 -07:00
Natasha Sarkar
932cff5dd4 add more error details to the failing cgroup check 2025-04-24 15:51:08 +00:00
Wojciech Tyczyński
c3bb59d078 Fix etcd3 watcher flake 2025-04-24 17:06:27 +02:00
Kubernetes Prow Robot
c59203e051 Merge pull request #121967 from torredil/update-logging 
Update log verbosity for node health and taint checks
 2025-04-24 06:22:34 -07:00
Kubernetes Prow Robot
71e7f9eba7 Merge pull request #131425 from carlory/follow-up-128810 
Remove deprecated scheduler cache metrics
 2025-04-24 04:56:29 -07:00
Kubernetes Prow Robot
233ebd69ad Merge pull request #131424 from toVersus/fix/dra-kubeletplugin-doc 
Fix comment for default gRPC log level in DRA plugin
 2025-04-24 03:48:35 -07:00
Paco Xu
a2281f97bb bump fsnotify v1.9.0 2025-04-24 17:01:00 +08:00
Kubernetes Prow Robot
4bcaa515c9 Merge pull request #131267 from tallclair/resize-helpers 
Move pod resize e2e utilities out of e2e/framework
 2025-04-24 01:28:44 -07:00
Kubernetes Prow Robot
62129df407 Merge pull request #129699 from carlory/cleanup-intree 
remove unnecessary functions
 2025-04-24 01:28:33 -07:00
Kubernetes Prow Robot
5ec7b65318 Merge pull request #131418 from gnufied/check-recovery-feature-kubelet 
Check for newer fields when deciding expansion recovery feature status
 2025-04-23 21:10:37 -07:00