Commit Graph

136802 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ca5c40e58a Merge pull request #137764 from pacoxu/sig-node-standalone
e2e_node: fix pod StartTime assertion to compare time value
2026-03-19 05:42:59 +05:30
Kubernetes Prow Robot
158b69d223 Merge pull request #137753 from adamkasztenny/fix-lease-optimistic-update-log-level-v2
Reduce log level for optimistic lease update fallback
2026-03-19 05:42:51 +05:30
Kubernetes Prow Robot
c2a7819806 Merge pull request #137719 from sohankunkerkar/memqos-kernel-metrics-e2e
KEP-2570: Add tiered memory protection, metrics, rollback fix, and E2E tests for MemoryQoS
2026-03-19 05:42:44 +05:30
Kubernetes Prow Robot
87924903db Merge pull request #137629 from stlaz/ensure-secret-images-allowlist-fix
Image Pulling Authorization: fix the allowlisting policy
2026-03-19 05:42:36 +05:30
Kubernetes Prow Robot
bf1abbf2e9 Merge pull request #136355 from enj/enj/i/tls_cache_gc
Add GC to client-go TLS cache
2026-03-19 05:42:29 +05:30
Kubernetes Prow Robot
76a3d535a1 Merge pull request #136548 from mariafromano-25/psi-ga-update
[KEP 4205] GA the KubeletPSI FeatureGate
2026-03-19 04:54:28 +05:30
Kubernetes Prow Robot
7a3a6cf4be Merge pull request #136725 from pravk03/native-dra-2
Introduce support of DRA for Native Resources
2026-03-19 03:36:38 +05:30
Kubernetes Prow Robot
b865748c1c Merge pull request #135118 from johanneswuerbach/scaletozero
KEP-2021: HPA condition based scaling to zero
2026-03-19 03:36:30 +05:30
Monis Khan
fa9a1fe5f7 Add GC to client-go TLS cache
Signed-off-by: Monis Khan <mok@microsoft.com>
2026-03-18 17:24:33 -04:00
Kubernetes Prow Robot
1a3fd46367 Merge pull request #137854 from Jefftree/kcm-test-owners
Add OWNERS for controller manager integration tests
2026-03-19 02:14:37 +05:30
Kubernetes Prow Robot
74c2317766 Merge pull request #137846 from lalitc375/required-forbidden
Add tests for +k8s:required and +k8s:forbidden validation tags
2026-03-19 02:14:30 +05:30
Sohan Kunkerkar
d2b77a8133 Rename HardReservation to TieredReservation for memoryReservationPolicy
The tiered approach uses memory.min for Guaranteed pods (hard protection)
and memory.low for Burstable pods (soft protection). Rename the policy
value to reflect this design.
2026-03-18 16:24:27 -04:00
Sohan Kunkerkar
dbd3f16787 Add node E2E tests for MemoryQoS
Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
2026-03-18 16:24:26 -04:00
Sohan Kunkerkar
5ccf6ae320 Add node-level metric and rollback reconciliation 2026-03-18 16:24:26 -04:00
Kubernetes Prow Robot
1b5bcf309c Merge pull request #137641 from helayoty/helayoty/protection-controller-podgroup
KEP-5832: Add protection controller for PodGroup
2026-03-19 01:03:00 +05:30
Kubernetes Prow Robot
47751d94ac Merge pull request #137564 from iPraveenParihar/e2e/update-snapshotmetadataservice-crd
e2e: update snapshotmetadataservice crd to v1beta1
2026-03-19 01:02:42 +05:30
Kubernetes Prow Robot
e70704a43a Merge pull request #137489 from brejman/tas-complete
Integrate TAS logic into the pod group scheduling cycle
2026-03-19 01:02:32 +05:30
Praveen Krishna
3cd22dcb4f Verify that assumed pod NodeAllocatableResourceClaimStatuses matches the status to patch. 2026-03-18 19:20:11 +00:00
Praveen Krishna
11c8bf1f13 Cleanup NodeAllocatableDRAClaimStatus in Unreserve 2026-03-18 19:20:11 +00:00
Praveen Krishna
cdcfc4eeb3 Add integration tests. 2026-03-18 19:20:10 +00:00
Praveen Krishna
6b83eef7a2 Add pod Status and ResourceSlice API validation 2026-03-18 19:20:10 +00:00
Praveen Krishna
a84f938404 Validate Pod resources cover container and DRA requests. 2026-03-18 19:20:10 +00:00
Praveen Krishna
628365297a Add validation check to disallow node-allocatable resource claim sharing. 2026-03-18 19:20:10 +00:00
Praveen Krishna
2ce83e6cbb Add validation to disable in-place resize for pods with node-allocatable resource claims 2026-03-18 19:20:10 +00:00
Praveen Krishna
9e22d7b033 Include node-allocatable claims in kubelet admission check 2026-03-18 19:20:10 +00:00
Praveen Krishna
7c4f9ace63 Account for node-allocatable claims in NodeInfo cache 2026-03-18 19:20:10 +00:00
Praveen Krishna
0c25bdf74d Update scheduler cache interface to pass node-allocatable resource allocations to NodeInfo. 2026-03-18 19:20:10 +00:00
Praveen Krishna
af186d3534 Implement changes in DRA Plugin to handle node-allocatable claims
* Filter: Calculate the pod's total resource footprint by combining spec requests and DRA allocations, respecting accounting policies. Perform node resource fit checks. Cache the resulting NodeAllocatableResourceClaimStatus in CycleState.
* PreBind: Retrieve result from CycleState and patch it into Pod.Status.
2026-03-18 19:17:30 +00:00
Sohan Kunkerkar
aa560bd2c0 Use memory.low for Burstable pods, memory.min for Guaranteed only 2026-03-18 14:22:07 -04:00
Sohan Kunkerkar
c859cb3e64 Add kernel 5.9+ version check for MemoryQoS
The check runs only when MemoryQoS feature gate is enabled and
cgroups v2 is in use. It logs a warning but does not block kubelet
startup, since RHEL/LTS kernels may backport the fix without bumping
the version.

Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
2026-03-18 14:22:07 -04:00
Jefftree
3bd92acb43 Add OWNERS for controller manager integration tests 2026-03-18 18:10:21 +00:00
Kubernetes Prow Robot
757cdd0115 Merge pull request #137850 from Jefftree/fix-discovery-cleanup-bug
Fix discovery test cleanup to actually wait for object deletion
2026-03-18 23:21:45 +05:30
Kubernetes Prow Robot
ec68099e62 Merge pull request #137849 from bryantbiggs/deps/update-kube-openapi
deps: Update `kube-openapi` to drop `ginkgo/gomega` indirect deps
2026-03-18 23:21:37 +05:30
Kubernetes Prow Robot
6fbb90204c Merge pull request #137781 from richabanker/nh-kube-proxy
Enable native histograms gated by feature flag in kube-proxy
2026-03-18 23:21:29 +05:30
Kubernetes Prow Robot
92767f8e32 Merge pull request #137746 from dims/dsrinivas/issue-137740-nodeipam-resync
nodeipam: buffer TestNodeSyncResync report notifications
2026-03-18 23:21:21 +05:30
Kubernetes Prow Robot
aa13dc5aa3 Merge pull request #137715 from jpbetz/fix-servicecidr-wiping
Fix ServiceCIDR status field wiping
2026-03-18 23:21:13 +05:30
Kubernetes Prow Robot
da13772444 Merge pull request #137711 from duanwei33/add-volumegroupsnapshotclass-test
[e2e] Add volume_group_snapshot_class cases
2026-03-18 23:21:05 +05:30
vshkrabkov
5ea4532969 Add PodGroupPodsCount placement score scheduler plugin (#137488)
* placement score plugin, grounded on count of scheduled pods and pods for placement

* align with v1alpha2 api changes

* addressing review comments

* plugin renaming
2026-03-18 23:20:57 +05:30
Kubernetes Prow Robot
27b42dd16d Merge pull request #137453 from rawsocket/master
kubelet: add terminated_containers_total metric
2026-03-18 23:20:49 +05:30
Kubernetes Prow Robot
ad81d3802d Merge pull request #137086 from alaypatel07/kep-5304/downward-api
KEP 5304: add implementation for discoverable DRA Device metadata in pod
2026-03-18 23:20:41 +05:30
Kubernetes Prow Robot
055254a882 Merge pull request #134179 from Priyankasaggu11929/kep-3085-pod-ready-to-start-containers
KEP 3085: PodReadyToStartContainersCondition: add test to verify sandbox condition for missing secret
2026-03-18 23:20:32 +05:30
Stanislav Láznička
70a6b73fd8 kubelet/pullmanager: use image name parsers that don't modify the source
`k8s.io/kubernetes/pkg/util/parsers.ParseImageName()` does not only parse
the input, but also adds Docker-specific domain/org for images names
that exclude these - "familiar" image names, such as "alpine", for
example.

While this means that previous records _are_ invalid, we should be able
to do this change safely as if `imageRef` matches a known record, if
we miss on the "image name" level, we will always request a new pull
if the Pod does not present any credentials that are already recorded,
or it will write the new "image name" record with the valid presented
credentials.

Signed-off-by: Stanislav Láznička <slznika@microsoft.com>
2026-03-18 17:41:01 +01:00
Kubernetes Prow Robot
e7a3b09a03 Merge pull request #131744 from ArangoGutierrez/dra_describe
Add ResourceSlices field to kubectl describe node
2026-03-18 22:04:31 +05:30
Maria Romano
0ce4a7003b fixed merge conflicts; prev msg: ran hack/update-featuregates.sh 2026-03-18 16:19:34 +00:00
Ania Borowiec
dd31537e01 Integration tests for Topology Aware Scheduling 2026-03-18 15:43:18 +00:00
Bartosz
9ad4385472 Integrate placement plugins into placement scheduling algorithm 2026-03-18 15:38:37 +00:00
helayoty
fc88e37288 Add admission plugin for PodGroup to add finalizer to every new object
Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-18 15:28:14 +00:00
helayoty
1b90507cfa move protectionutil pkg to controller/util
Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-18 15:27:56 +00:00
helayoty
0ef8d78d1d Add new protection controller for PodGroup
Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-18 15:27:17 +00:00
Kubernetes Prow Robot
92a3cb856f Merge pull request #137847 from shwetha-s-poojary/fix_TestGetConntrackMax
Fix TestGetConntrackMax to align with capped conntrack max values
2026-03-18 20:55:03 +05:30