Commit Graph

121952 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
6c8dc1d1ed
Merge pull request #123609 from veshij/fix
[kubernetes/scheduler] use lockless diagnosis collection in findNodes…
2024-03-04 11:23:50 -08:00
Kubernetes Prow Robot
4ed7f6b4c4
Merge pull request #123583 from saschagrunert/image-id-container-status
Add `image_id` to CRI `ContainerStatus` message
2024-03-04 11:23:41 -08:00
Kubernetes Prow Robot
599d92f1fb
Merge pull request #123190 from padlar/add-apiserver-wait-cache-metric
Add apiserver_watch_cache_read_wait metric to cache refresh time
2024-03-04 11:23:32 -08:00
Sean Sullivan
3d56ff21fd adds comments to tunnelingResponseWriter 2024-03-04 11:10:30 -08:00
Sean Sullivan
33af937b4a re-write fallback dialer unit test 2024-03-04 11:10:30 -08:00
Sean Sullivan
e8bbb221d3 removes extra upgrade aware proxy logging; returns tunneling connection close error 2024-03-04 11:10:30 -08:00
Jordan Liggitt
2443b3fa69 Fix headerInterceptingConn handling 2024-03-04 11:10:30 -08:00
Sean Sullivan
9e15462843 adds return context in RunPortForward() 2024-03-04 11:10:30 -08:00
Sean Sullivan
8b447d8c97 portforward: tunnel spdy through websockets 2024-03-04 11:10:30 -08:00
Jordan Liggitt
79b344d85e
Add authorization webhook duration/count/failopen metrics 2024-03-04 14:01:15 -05:00
Kubernetes Prow Robot
89cbd94e68
Merge pull request #123593 from giuseppe/userns-use-kubelet-user-mappings
KEP-127: kubelet: honor kubelet user mappings
2024-03-04 10:24:52 -08:00
Kubernetes Prow Robot
d34fbeb0a3
Merge pull request #123446 from linxiulei/hit_cache
Hit APIServer cache when testing healthiness
2024-03-04 10:24:45 -08:00
Marek Siarkowicz
1cf4cec449 Test that separation of streams work by using progress notifies 2024-03-04 19:02:04 +01:00
Monis Khan
8345ad0bac
jwt: fail on empty username via CEL expression
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 12:51:19 -05:00
Gaurav Ghildiyal
606cae9b47 Add new metric servicesCountByTrafficDistribution 2024-03-04 09:33:40 -08:00
Monis Khan
05e1eff793
Prevent conflicts between service account and jwt issuers
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 11:40:02 -05:00
Kubernetes Prow Robot
9043ce05c1
Merge pull request #123667 from jsafrane/selinux-metrics-access-mode
Add label with access mode to SELinux metrics
2024-03-04 08:25:39 -08:00
Jan Safranek
57d1b68dc2 Remove deprecated sets.String 2024-03-04 14:33:04 +01:00
Kubernetes Prow Robot
55d1518126
Merge pull request #123588 from pohly/scheduler-perf-any-cleanup
scheduler_perf: automatically delete created objects
2024-03-04 04:49:12 -08:00
Jan Safranek
c4163a9cb8 Add label with access mode to SELinux metrics
In the KEP 1710 we promised to have all SELinux metrics with access mode
label, so cluster admin is able to distinguish when RWOP volumes are
failing to mount (-> SELinuxMountReadWriteOncePod feature gate must be
disabled) or volumes with any other access modes are failing (->
SELinuxMount feature gate must be disabled).

Adding the label to kubelet is quite straightforward, there were some
changes needed in the e2e test. Now grabMetrics() collects values of all
SELinux related metrics with all labels. It only skips unrelated volume
plugins. And waitForMetricIncrease gets metric with all labels on input, so
it can check that say RWOP metric increased and RWX one did not.
2024-03-04 13:16:56 +01:00
Marek Siarkowicz
31d404b182 Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior 2024-03-04 12:51:06 +01:00
Kubernetes Prow Robot
a4eaf6e120
Merge pull request #123660 from xigang/cacher/watch
cleanup: if triggerValue has a value fast break
2024-03-04 01:17:02 -08:00
Kubernetes Prow Robot
9d39ce04fd
Merge pull request #123595 from neolit123/1.30-add-timeouts-upgradeconfig
kubeadm: add timeouts to v1beta4.UpgradeConfiguration
2024-03-04 01:16:44 -08:00
Patrick Ohly
eb6abf0462 scheduler_perf: automatically delete created objects
This is not relevant for namespaced objects, but matters for the cluster-scoped
ResourceClass during unit testing. This works right now because there is only
one such unit test, but will fail when adding a second one.

Instead of passing a boolean flag down into all functions where it might be
needed, it's now a context value.
2024-03-04 09:54:38 +01:00
Kubernetes Prow Robot
d440ab18ce
Merge pull request #123656 from huww98/e2e-pod-fail-fast
e2e pod: fail fast on failed pod
2024-03-04 00:00:14 -08:00
Gaurav Ghildiyal
51f86b9124 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
51a3fa2e6f Start reconciling on the new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
9513f75089 Add trafficdist package for handling reconciliation of new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
646fd200b8 Run 'make update' 2024-03-03 22:46:00 -08:00
Gaurav Ghildiyal
996d11d4e8 Add new field trafficDistribution to Service spec 2024-03-03 22:34:17 -08:00
Kubernetes Prow Robot
8c80c07e85
Merge pull request #123655 from huww98/mt-n
agnhost/mounttest: add new line to output
2024-03-03 22:29:44 -08:00
Kubernetes Prow Robot
e4a14fe0f5
Merge pull request #123575 from Huang-Wei/pod-scheduling-readiness-stable
Graduate PodSchedulingReadiness to stable
2024-03-03 22:29:38 -08:00
Kubernetes Prow Robot
d756b0a1c0
Merge pull request #123659 from dims/check-length-of-instance-name-before-truncating
Check length of instance name before truncating
2024-03-03 20:41:11 -08:00
Kubernetes Prow Robot
ee5eca2a49
Merge pull request #123527 from aramase/aramase/f/kep_3331_discovery_url
Add `DiscoveryURL` to Authentication Configuration
2024-03-03 18:51:54 -08:00
xigang
d72448a41c cleanup: if triggerValue has a value, fast break
Signed-off-by: xigang <wangxigang2014@gmail.com>
2024-03-04 10:29:31 +08:00
Anish Ramasekar
78fb0bae22
wire up discovery url in authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 17:34:51 -08:00
Anish Ramasekar
84852ff56f
Add DiscoveryURL to AuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 16:57:24 -08:00
Kubernetes Prow Robot
6d2ee131eb
Merge pull request #123225 from aramase/aramase/f/kep_3331_latency_metrics
Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
2024-03-03 16:27:50 -08:00
Davanum Srinivas
c61b2a3975
Check length of instance name before truncating
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 18:49:57 -05:00
Kubernetes Prow Robot
d45d803ac4
Merge pull request #123657 from dims/switch-to-new-cos-gpu-installer-v2.1.10
Switch to newer cos-gpu-installer - v2.1.10
2024-03-03 13:20:51 -08:00
Kubernetes Prow Robot
ccb5dd3b57
Merge pull request #123652 from dims/ensure-gcp-instance-names-are-a-max-of-63-characters
Ensure GCP instance names are a max of 63 characters
2024-03-03 11:58:53 -08:00
Jefftree
ebcb78df52 promote aggregated discovery conformance tests 2024-03-03 14:29:25 -05:00
Davanum Srinivas
b33c5a8292
Switch to newer cos-gpu-installer - v2.1.10
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 14:22:24 -05:00
Davanum Srinivas
968aefd1bf
Ensure GCP instance names are a max of 63 characters
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 13:19:12 -05:00
huweiwen
c2ccb921ea e2e pod: fail fast on failed pod
no need to wait until timeout. reduce test time
2024-03-04 00:01:02 +08:00
huweiwen
c134bfe9eb agnhost/mounttest: add new line to output
make the output easier to read.
2024-03-03 23:46:22 +08:00
Kubernetes Prow Robot
e798fa67b5
Merge pull request #123654 from LiorLieberman/fix-kubeadam-with-structured-authz
[structured authz][kubeadam] avoid setting default authorization-mode when structured authz is wanted
2024-03-03 07:44:02 -08:00
Lior Lieberman
db115ca929
[kubeadam] do not set authorization-mode in api server when authorization-config is provided 2024-03-03 14:43:47 +00:00
Kubernetes Prow Robot
7c11cc9cfc
Merge pull request #123578 from carlory/fix-kubeadm-494
kubeadm: print all the kubelets and nodes that need to be upgraded on "upgrade plan"
2024-03-03 01:46:03 -08:00
Kubernetes Prow Robot
3086d88dc6
Merge pull request #123614 from ameukam/bump-cuda-version
test: Bump CUDA images
2024-03-02 19:29:42 -08:00