Commit Graph

121952 Commits

Author SHA1 Message Date
carlory
22adf221a1 print nodename 2024-03-03 11:03:29 +08:00
Anish Ramasekar
0da5e8137b
Add apiserver_authentication_jwt_authenticator_latency_seconds metric
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-02 17:12:19 -08:00
Kubernetes Prow Robot
19df52c41a
Merge pull request #123647 from thockin/use_go_-C_instead_of_pushd_popd
Change `pushd $d; go ...; popd` to `go -C $d ...`
2024-03-02 16:41:56 -08:00
Kubernetes Prow Robot
38e5a29df6
Merge pull request #123648 from thockin/use_go.work_to_find_internal_modules
Use go.work to auto-find internal modules
2024-03-02 15:39:41 -08:00
Tim Hockin
a0215badb8
Change pushd $d; go ...; popd to go -C $d ...
Just an annoyance in reading these scripts.
2024-03-02 14:40:10 -08:00
Tim Hockin
90e6546c68
Use go.work to auto-find internal modules 2024-03-02 14:38:25 -08:00
Kubernetes Prow Robot
1fceb815ac
Merge pull request #123437 from tenzen-y/fix-job-validatioin-test-name
Job: Fix test case names for the validations
2024-03-02 13:33:18 -08:00
Kubernetes Prow Robot
4164e7c3a7
Merge pull request #123629 from thockin/master
Get rid of unused API type NodeResources
2024-03-02 12:33:18 -08:00
Kubernetes Prow Robot
8674282a05
Merge pull request #123640 from liggitt/authz-beta-config
Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
2024-03-02 10:26:26 -08:00
Kubernetes Prow Robot
0364c6cc3d
Merge pull request #123623 from pohly/hack-protoc-search-path
hack: re-enable protobindings which use k8s.io/api
2024-03-02 10:26:20 -08:00
Kubernetes Prow Robot
96a5cfe513
Merge pull request #123646 from jpbetz/fix-openapi-conformance-selectable-fields
Fix publish openapi conformance tests to ignore x-kubernetes-selectable-fields
2024-03-02 09:23:42 -08:00
Joe Betz
eb5f31b9e1 Add x-kubernetes-selectable-fields to fields excluded in publish openapi conformance comparisons 2024-03-02 11:14:06 -05:00
Kubernetes Prow Robot
61410237c3
Merge pull request #123636 from dims/rely-only-on-source-cli-parameter-in-conformance-walk
Rely only on `source` cli parameter in conformance/walk
2024-03-02 07:44:20 -08:00
Rodrigo Campos
6174f199df
kublet/userns: Add test switching feature gate off/on
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-03-02 12:15:44 +01:00
Rodrigo Campos
4bb508dd30
kubelet/userns: Add unit test
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-03-02 12:15:44 +01:00
Rodrigo Campos
0b69c2bc81
kubelet/userns: Use kubelet maxPods
We don't have the alpha limitation anymore, let's just use the kubelet
maxPods instead of our hardcoded 1024 max.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-03-02 12:15:44 +01:00
Rodrigo Campos
39c6815676
kubelet/userns: Remove alpha maxPods limitation
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-03-02 12:15:44 +01:00
Rodrigo Campos
4180284dc9
pkg/kubelet/userns: Remove outdated test
When we were alocating the whole UID space, the first range was reserved
to the host. Now we don't allocate the whole UID space, but just the
range configured, so the first range doesn't point to [0;65535] anymore,
so no need to test it is always set.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-03-02 12:15:43 +01:00
Giuseppe Scrivano
4c81e5c9dc
features: promote UserNamespacesSupport to beta
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-03-02 12:15:43 +01:00
Giuseppe Scrivano
87a057d417
KEP-127: kubelet: honor kubelet user mappings
allow to specify what IDs must be used by the kubelet to create user
namespaces.

If no additional UIDs/GIDs are not allocated to the "kubelet" user,
then the kubelet assumes it can use any ID on the system.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-03-02 12:15:39 +01:00
Arnaud Meukam
3bada5d451
test: Bump CUDA images
Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
2024-03-02 09:42:05 +01:00
Jordan Liggitt
30256c8909
Promote StructuredAuthorizationConfiguration feature gate to beta 2024-03-02 02:12:36 -05:00
Jordan Liggitt
0605a75c5e
Duplicate v1alpha1 AuthorizationConfiguration to v1beta1 2024-03-02 02:00:31 -05:00
Kubernetes Prow Robot
0a31504ee1
Merge pull request #123635 from seans3/remotecommand-write-deadline
Increase client-side websocket write deadline
2024-03-01 22:05:51 -08:00
Kensei Nakada
b48b4ebc69 address reviews 2024-03-02 04:51:00 +00:00
Kubernetes Prow Robot
95875b7723
Merge pull request #123634 from liggitt/handler-race
Fix discovery v2 conversion registration data race
2024-03-01 19:48:37 -08:00
Kubernetes Prow Robot
84c32fdb65
Merge pull request #123630 from thockin/add_go_work_header
Add a header to go.work
2024-03-01 19:48:27 -08:00
Kubernetes Prow Robot
8845c4c657
Merge pull request #123135 from munnerz/4193-beta-promotion
KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta
2024-03-01 19:48:18 -08:00
Sean Sullivan
1d4be7527f increases client-side websocket write deadline to 30 seconds 2024-03-01 19:34:36 -08:00
Davanum Srinivas
948d9ca221
Rely only on source cli parameter in conformance/walk
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-01 21:58:54 -05:00
Kubernetes Prow Robot
3e1da21801
Merge pull request #123611 from ritazh/authz-mcmetrics
Add authz webhook matchcondition metrics
2024-03-01 18:49:17 -08:00
Kubernetes Prow Robot
65d75501f7
Merge pull request #123484 from erikgb/csa-upgrade-subresource
Add option to upgrade subresource from CSA to SSA
2024-03-01 18:49:08 -08:00
Kubernetes Prow Robot
f4b01154ef
Merge pull request #123622 from aauren/remove_same_node_nodeport_test
e2e/service.go: remove same node nodeport test
2024-03-01 16:59:56 -08:00
Kubernetes Prow Robot
4e8674f4e5
Merge pull request #122975 from aramase/aramase/c/cleanup_authn_validation
cleanup structured authn/authz error logic
2024-03-01 16:59:47 -08:00
Kubernetes Prow Robot
673d3c9e70
Merge pull request #122693 from yanggangtony/fix_kubelet_server_journal_linux
Fix kubelet_server_journal --until parms.
2024-03-01 16:59:38 -08:00
Jordan Liggitt
0e9cdf76ad
Fix discovery v2 conversion registration data race 2024-03-01 19:29:39 -05:00
Tim Hockin
e2b96b2566
Add a header to go.work 2024-03-01 16:23:21 -08:00
Kubernetes Prow Robot
55e4172a0d
Merge pull request #123536 from benluddy/cbor-roundtrip-unit-via-interface
KEP-4222: Make CBOR roundtrip tests pass through interface{}.
2024-03-01 15:59:31 -08:00
Kubernetes Prow Robot
cde4788a27
Merge pull request #123215 from adrianreber/2024-02-09-forensic-container-checkpointing-beta
Switch 'ContainerCheckpoint' from Alpha to Beta
2024-03-01 15:59:24 -08:00
Tim Hockin
467d5d745c
Get rid of unused API type NodeResources 2024-03-01 15:13:50 -08:00
Aaron U'Ren
d2051503a3
e2e/service.go: remove same node nodeport test
Remove local pod -> local nodeport from service termination test
2024-03-01 17:01:07 -06:00
Rita Zhang
e76fce7566
add authz webhook matchcondition metrics
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
Signed-off-by: Jordan Liggitt <liggitt@google.com>
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2024-03-01 14:41:27 -08:00
Kubernetes Prow Robot
138f99b41a
Merge pull request #123436 from dinhxuanvu/cbor-tests
KEP-4222: Add duplicate key and field case-sensitivity CBOR decode tests.
2024-03-01 14:41:11 -08:00
Kubernetes Prow Robot
3f25211d69
Merge pull request #122882 from Jefftree/agg-discovery-v2-usage
Use Aggregated Discovery v2 types and promote to GA
2024-03-01 14:41:02 -08:00
Erik Godding Boye
9633e25579
feat: add csaupgrade option to upgrade subresource 2024-03-01 23:27:30 +01:00
Ben Luddy
1503997b4f
Make CBOR roundtrip cases pass through interface{} as well. 2024-03-01 16:48:12 -05:00
Kubernetes Prow Robot
fc4613f996
Merge pull request #123570 from Jefftree/filter-openapi-agg
Filter aggregated apiservice gv filter for OpenAPI
2024-03-01 13:41:11 -08:00
Sohan Kunkerkar
3b630ae1af test/e2e_node:add more coverage for the kubelet config drop-in dir feature
Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
2024-03-01 16:01:01 -05:00
Patrick Ohly
f34782bb92 hack: re-enable protobindings which use k8s.io/api
Before the workspace changes, it was possible to include proto files via the
vendor path and the symlinks there. Now those symlinks are gone, so the search
path for them must be given separately.
2024-03-01 21:53:13 +01:00
Jefftree
9a404b590b Filter aggregated apiservice gv 2024-03-01 20:39:57 +00:00