Commit Graph

6123 Commits

Author SHA1 Message Date
Kevin Hannon
0f0c734c52 batch/job: Fix scheduling directives mutation for not-yet-started suspended Jobs
When MutableSchedulingDirectivesForSuspendedJobs feature gate is
enabled, it overwrites the notStarted check with a stricter condition
requiring the JobSuspended=True condition. This rejects mutations on
suspended Jobs that have never started but whose JobSuspended condition
has not yet been set by the job controller, breaking external
controllers like MultiKueue that inject scheduling directives
immediately after creating a suspended Job.

Preserve the notStarted path as an OR condition alongside the
JobSuspended condition check, restoring pre-1.36 behavior for
not-yet-started Jobs while maintaining the new relaxation for
previously-started Jobs.

Kubernetes-issue: https://github.com/kubernetes/kubernetes/issues/139281
2026-05-27 10:28:13 -04:00
Kubernetes Prow Robot
550504bb25 Merge pull request #138300 from michaelasp/svmOverload
Reduce number of chaos workers to prevent timeouts
2026-04-10 15:58:19 +05:30
Michael Aspinwall
28b6b1e274 Reduce number of chaos workers to prevent timeouts 2026-04-09 19:33:19 +00:00
Kubernetes Prow Robot
40007b6452 Merge pull request #138210 from Mujib-Ahasan/featuregate-WorkloadWithJob
Rename feature gate `EnableWorkloadWithJob` to `WorkloadWithJob`
2026-04-09 23:12:21 +05:30
Jefftree
8254743864 Pin MutatingAdmissionPolicy storage version to v1beta1 2026-04-08 23:44:34 -04:00
Mujib Ahasan
b9b0ff440d remove accidently commited file
Signed-off-by: Mujib Ahasan <ahasanmujib8@gmail.com>
2026-04-04 12:53:30 +05:30
Lubomir I. Ivanov
bc2179d882 pause: fix version drift in various files
The latest pause version is 3.10.2 but due to the introduction
of the PATCH level version to the pause image (previously was
only MAJOR.MINOR), various files have remained on an older
version. Either 3.10 or 3.10.1. Our validation with
build/dependencies.yaml ./hack/verify-external-dependencies.sh
did not account for that.
2026-04-03 16:11:09 +02:00
Jordan Liggitt
1140c34121 Make cleanup aware of uid differences 2026-04-02 11:13:44 -04:00
Jordan Liggitt
84be835316 Deflake TestPodSubresourceAuth by waiting for effective permissions before testing 2026-03-31 10:27:08 -04:00
Kubernetes Prow Robot
7e705d7851 Merge pull request #137978 from ania-borowiec/flake
Fix flakiness in integration test for TopologyAwareScheduling with Basic Policy
2026-03-31 16:00:14 +05:30
Ania Borowiec
e622b86069 remove unnecessary fixes 2026-03-27 09:32:12 +00:00
Antonio Ojea
adbf3b5aa5 Add granular authorization for DRA ResourceClaim status updates
This commit introduces the DRAResourceClaimGranularStatusAuthorization
feature gate (Beta in 1.36) to enforce fine-grained authorization checks
on ResourceClaim status updates.

Previously, 'update' permission on 'resourceclaims/status' allowed modifying
the entire status. To enforce the principle of least privilege for DRA
drivers and the scheduler, this change introduces synthetic subresources and
verb prefixes:

- 'resourceclaims/binding': Required to update 'status.allocation' and
  'status.reservedFor'.
- 'resourceclaims/driver': Required to update 'status.devices'. Evaluated
  on a per-driver basis using 'associated-node:<verb>' (for node-local
  ServiceAccounts) or 'arbitrary-node:<verb>' (for cluster-wide controllers).
2026-03-26 13:22:09 +00:00
Ania Borowiec
c49126e031 Fix flakiness in integration test for TopologyAwareScheduling with Basic Policy 2026-03-24 09:42:00 +00:00
Antoni Zawodny
ccaaf9d3a5 Marry WAP logic with the new API fields 2026-03-24 09:36:00 +01:00
Kubernetes Prow Robot
07311a2afa Merge pull request #137606 from Argh4k/workload-preemption-v1alpha2
Add workload aware preemption
2026-03-24 00:32:16 +05:30
Maciej Wyrzuc
1f15743e49 Add pod group preemption 2026-03-23 16:22:32 +00:00
Jon Huhn
d80f384b70 Workload API: PodGroup ResourceClaims (KEP-5729) 2026-03-22 14:52:45 -05:00
Kubernetes Prow Robot
ef247770b5 Merge pull request #137190 from everpeace/KEP-5491-alpha
KEP-5491: DRA: List Types for Attributes [Alpha]
2026-03-21 14:18:12 +05:30
Kubernetes Prow Robot
15eaed180f Merge pull request #137028 from nmn3m/feature/dra-resource-pool-status
KEP-5677: Add ResourcePoolStatusRequest API for DRA resource availability visibility
2026-03-21 08:16:13 +05:30
Shingo Omura
b613ed56a2 KEP-5491: change ResourceSliceMaxDevicesWithTaintsOrConsumesCounters to ResourceSliceMaxDevicesWithAdvancedFeatures and add testcases with max devices with list attributes 2026-03-20 20:29:00 +09:00
Heba
cf5ba01d13 KEP-5832: Implement PodGroup admission (#137464)
* Add admission for podGroup

Signed-off-by: helayoty <heelayot@microsoft.com>

* Create workload object before podgroup

Signed-off-by: helayoty <heelayot@microsoft.com>

---------

Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-19 21:32:34 +05:30
Nour
58cbde2aff Pass individual informers, move DRA controllers to resource.go, simplify retry logic and metric tests
Signed-off-by: Nour <nurmn3m@gmail.com>
2026-03-19 16:50:03 +02:00
Nour
4dffbf5b2a Add tests for ResourcePoolStatusRequest
Add unit tests for handwritten and declarative validation, controller
logic, metrics, table printer output, controller-manager registration,
etcd storage round-trip, and an integration test for the full RPSR
lifecycle. Also add an e2e test exercising the DRA test driver with
RPSR and the example manifest.
2026-03-19 16:50:03 +02:00
Kubernetes Prow Robot
9d02f5f918 Merge pull request #137032 from helayoty/helayoty/5547-workload-job-integration
KEP-5547: Implement Workload APIs integration with Job controller
2026-03-19 17:10:31 +05:30
Shingo Omura
9b45256ba3 KEP-5491: introduce "includes" CEL function that can work both for scalar and list attributes 2026-03-19 16:24:38 +09:00
Shingo Omura
b43153602c KEP-5491: validation for list attributes in DeviceAttribute 2026-03-19 14:46:47 +09:00
Kubernetes Prow Robot
a3b068a003 Merge pull request #137647 from nojnhuh/dra-gang
DRA: fix Pods in a scheduling gang sharing ResourceClaims
2026-03-19 07:08:28 +05:30
Kubernetes Prow Robot
bf1abbf2e9 Merge pull request #136355 from enj/enj/i/tls_cache_gc
Add GC to client-go TLS cache
2026-03-19 05:42:29 +05:30
helayoty
736f227760 Add integration tests for Workload/PodGroup Job integration
Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-18 22:32:57 +00:00
Jon Huhn
71f02bb2f3 DRA: fix Pods in a scheduling gang sharing ResourceClaims 2026-03-18 17:30:19 -05:00
Kubernetes Prow Robot
7a3a6cf4be Merge pull request #136725 from pravk03/native-dra-2
Introduce support of DRA for Native Resources
2026-03-19 03:36:38 +05:30
Monis Khan
fa9a1fe5f7 Add GC to client-go TLS cache
Signed-off-by: Monis Khan <mok@microsoft.com>
2026-03-18 17:24:33 -04:00
Kubernetes Prow Robot
1a3fd46367 Merge pull request #137854 from Jefftree/kcm-test-owners
Add OWNERS for controller manager integration tests
2026-03-19 02:14:37 +05:30
helayoty
68e30095de Implement Workload and PodGroup integration with Job controller
Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-18 20:32:37 +00:00
Kubernetes Prow Robot
e70704a43a Merge pull request #137489 from brejman/tas-complete
Integrate TAS logic into the pod group scheduling cycle
2026-03-19 01:02:32 +05:30
Praveen Krishna
cdcfc4eeb3 Add integration tests. 2026-03-18 19:20:10 +00:00
Jefftree
3bd92acb43 Add OWNERS for controller manager integration tests 2026-03-18 18:10:21 +00:00
Kubernetes Prow Robot
757cdd0115 Merge pull request #137850 from Jefftree/fix-discovery-cleanup-bug
Fix discovery test cleanup to actually wait for object deletion
2026-03-18 23:21:45 +05:30
Kubernetes Prow Robot
aa13dc5aa3 Merge pull request #137715 from jpbetz/fix-servicecidr-wiping
Fix ServiceCIDR status field wiping
2026-03-18 23:21:13 +05:30
Ania Borowiec
dd31537e01 Integration tests for Topology Aware Scheduling 2026-03-18 15:43:18 +00:00
Kubernetes Prow Robot
1d69828518 Merge pull request #137611 from helayoty/helayoty/podgroup-status
KEP-5832: Add podGroup Status
2026-03-18 20:54:33 +05:30
Joe Betz
15ad8cbb69 Add status field wiping to ServiceCIDR with opt-out FG
# Conflicts:
#	test/compatibility_lifecycle/reference/feature_list.md
#	test/compatibility_lifecycle/reference/versioned_feature_list.yaml
2026-03-18 10:59:54 -04:00
Kubernetes Prow Robot
0d28578de1 Merge pull request #137795 from ttsuuubasa/dra-binding-conditions-beta
DRA Device Binding Conditions: graduate to beta
2026-03-18 19:18:33 +05:30
Kubernetes Prow Robot
8972b2069b Merge pull request #137365 from yaroslavborbat/dra-resourceslice-reconcile-only-pool-name
DRA: add ReconcileOnlyPoolName to ResourceSlice controller
2026-03-18 17:00:32 +05:30
Yaroslav Borbat
b9bf406456 DRA ResourceSlice: explicit AllNodes on Pool and placement validation
Signed-off-by: Yaroslav Borbat <yaroslav.752@gmail.com>
2026-03-18 13:27:16 +03:00
Kubernetes Prow Robot
09183519e6 Merge pull request #137804 from macsko/fix_race_in_podgroupstate_locking
Fix race in podGroupState locking
2026-03-18 15:16:34 +05:30
Kubernetes Prow Robot
5953c57c6b Merge pull request #137607 from 0xMH/fix/133531-dra-queueing-hint
DRA: return error on filter timeout instead of unschedulable
2026-03-18 14:26:31 +05:30
Maciej Skoczeń
5e07560178 Fix race in TestActivatePods testing code 2026-03-18 07:32:48 +00:00
helayoty
3e9c4966ff Address code review feedback
Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-18 05:10:50 +00:00
helayoty
0ccf6c7b1a Add integration tests for PodGroup conditions
Signed-off-by: helayoty <heelayot@microsoft.com>
2026-03-18 05:09:51 +00:00