Commit Graph

128659 Commits

Author SHA1 Message Date
Aaron Prindle
cfcf7e93a3 chore(validation-gen): rename flag --extra-pkg -> --readonly-pkg in validation-gen 2025-03-11 19:17:48 +00:00
Kubernetes Prow Robot
67e1a1ebbb
Merge pull request #130626 from BenTheElder/sort-client-gen
sort client-gen output
2025-03-11 09:49:53 -07:00
Kubernetes Prow Robot
07d66d9c26
Merge pull request #130574 from natasha41575/drop_proposed_resize_status
[FG:InPlacePodVerticalScaling] Drop `Proposed` resize status
2025-03-11 09:49:46 -07:00
Keisuke Ishigami
efac8fdea2
Delete todo comment to ignore update where 'old' is equivalent to 'cur' (#130322)
* use resource version to ignore updating pdb

* delete todo comment
2025-03-11 07:13:46 -07:00
Kubernetes Prow Robot
4c311c9fcf
Merge pull request #130475 from serathius/watchcache-consistency
Implement consistency checking
2025-03-11 05:09:46 -07:00
Marek Siarkowicz
e4d73c56cd Implement consistency checking 2025-03-11 10:17:23 +01:00
Kubernetes Prow Robot
e9a3d99f37
Merge pull request #129826 from danwinship/iptables-constructors
fix up iptables construction, kubelet iptables startup messages
2025-03-11 01:17:45 -07:00
Kubernetes Prow Robot
1177529fa2
Merge pull request #130706 from jpbetz/handle-optional-value-types-with-defaults
Declarative validation: Add default + optional handling
2025-03-11 00:11:54 -07:00
Kubernetes Prow Robot
3782b558a2
Merge pull request #128786 from danwinship/bad-ip-warnings
warn on bad IPs in objects
2025-03-11 00:11:47 -07:00
Kubernetes Prow Robot
8f97ac7fcf
Merge pull request #130530 from pacoxu/v1.33-fg-cleanup
v1.33 feature gate cleanup
2025-03-10 23:03:46 -07:00
Kubernetes Prow Robot
b7b8942387
Merge pull request #130703 from yongruilin/validation-gen_featuregate
[Declarative Validation] update Declarative Validation featuregate
2025-03-10 20:11:46 -07:00
Tim Hockin
92aeb63a5b Handle optional value-types with defaults 2025-03-10 23:10:17 -04:00
Paco Xu
f167454371 remove feature gate AdmissionWebhookMatchConditions that was GAed in v1.30 2025-03-11 10:54:04 +08:00
Paco Xu
8195f82fe8 remove AggregatedDiscoveryEndpoint that was GAed in v1.30 2025-03-11 10:51:43 +08:00
Kubernetes Prow Robot
82667879bb
Merge pull request #130599 from tallclair/acknowledged-resources
[FG:InPlacePodVerticalScaling] Track actuated resources to trigger resizes
2025-03-10 19:01:46 -07:00
Tim Hockin
141e98ed05 Add comments to FunctionGen
Now we can emit comments which stick to functions instead of coming
before or after the functions when emitting code.

For followup: I think we can simplify FunctionGen and ValidationGen
2025-03-10 21:13:43 -04:00
Kubernetes Prow Robot
b90ff89ed6
Merge pull request #130699 from thockin/master_validation-gen_odd_cases
Prevent validation-gen usage patterns we don't want to support
2025-03-10 17:15:52 -07:00
Kubernetes Prow Robot
f5f9484286
Merge pull request #130695 from yongruilin/validation-gen_coveredbydeclarative
[Declarative Validation] Add CoveredByDeclarative to field error struct
2025-03-10 17:15:46 -07:00
yongruilin
989d68d757 chore: update DeclarativeValidation featuregate 2025-03-10 22:39:03 +00:00
Kubernetes Prow Robot
a38d4e53e1
Merge pull request #130697 from thockin/fix_replication_controller_validation_tests
Fix validation test for ReplicationController
2025-03-10 14:41:54 -07:00
Kubernetes Prow Robot
f510123183
Merge pull request #130559 from esotsal/fix-use-CamelCase-for-memory-manager-policy-name-check-for-InPlacePodVerticalScalingExclusiveCPUs-feature-gate
[FG:InPlacePodVerticalScaling] Fix use CamelCase for memory manager policy in InPlacePodVerticalScalingExclusiveCPUs
2025-03-10 14:41:47 -07:00
Natasha Sarkar
8a20e90839 [FG:InPlacePodVerticalScaling] Drop 'Proposed' resize status 2025-03-10 20:46:02 +00:00
Kubernetes Prow Robot
cad46631a8
Merge pull request #130655 from BenTheElder/pr130580
Set [Feature:OffByDefault] when WithFeatureGate receives an off-by-default feature gate
2025-03-10 13:31:46 -07:00
Tim Hockin
3460b2238e
Disallow optional/required on non-pointer structs 2025-03-10 13:14:11 -07:00
Tim Hockin
dcbfe67b1c
Prevent usage patterns we don't want to support
* typedefs to pointers
* pointers to pointers
* pointers to lists
* pointers to maps
* fixed-size arrays
* lists of pointers
* lists of lists
* lists of maps
* maps with non-string keys
* maps of pointers
* maps of lists
* maps of maps
2025-03-10 13:09:19 -07:00
yongruilin
8eb90fe136 Add CoveredByDeclarative to field error struct
- Introduce CoveredByDeclarative field to Error struct
- Add MarkCoveredByDeclarative method for Error and ErrorList
- Implement ExtractDeclarative method to filter out declaratively covered errors
- Update error constructors to include the new field
- Add corresponding test cases for new declarative validation functionality
2025-03-10 19:07:51 +00:00
Jordan Liggitt
628d107b61 Switch cluster trust bundle e2e tests to generic alpha feature + feature gates
This relies on WithFeatureGate adding [Feature:OffByDefault]. Without that, the
test would start to run in jobs which don't enable the feature.
2025-03-10 12:04:04 -07:00
Benjamin Elder
9828ad64da e2e framework WithFeatureGate adds [Feature:OffByDefault]
(when passed a feature that is not Default)

This allows using the regex filter to skip tests that do not work on a cluster
without optional configuration, while moving tests to use WithFeatureGate
without also setting WithFeature unless they have some additional configuration
required.

Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
2025-03-10 12:04:04 -07:00
Kubernetes Prow Robot
9b57a960f8
Merge pull request #130675 from pacoxu/fix-ut-flake
fix a flake of TestRoundTripTypes: for FirstAvailable[].AllocationMode
2025-03-10 11:55:54 -07:00
Kubernetes Prow Robot
0791d6ef70
Merge pull request #130666 from thockin/yaml_json_ambiguous_decode
Better handling of YAML that tastes like JSON
2025-03-10 11:55:47 -07:00
Tim Hockin
46ac2af06a
Fix validation test for ReplicationController
I discovered this by changing the validation in a way that SHOULD fail
(by allowing something it should not).  But it didn't.  A different
error happens which totally masks the non-failure I expected.  New test
is much more explicit about what failures are expected.

This does not focus on adding test coverage, just making sure the test
is not terrible.
2025-03-10 11:51:53 -07:00
Kubernetes Prow Robot
133d5d612e
Merge pull request #130603 from AndrewSirenko/fix-vac-flake
Mark VAC recovery e2e test flaky
2025-03-10 10:27:46 -07:00
Tim Allclair
6d0b6278cd Rename some allocation.Manager methods 2025-03-10 10:03:35 -07:00
Tim Allclair
d4444dd598 Use actuated resources to determine resize status 2025-03-10 10:03:35 -07:00
Tim Allclair
660bd6b42d Track actuated resources in the allocation manager 2025-03-10 09:58:29 -07:00
Kubernetes Prow Robot
b82260f003
Merge pull request #130391 from bart0sh/PR174-e2e_node-fix-eviction-kubetest2
e2e_node: fix ImageGCNoEviction test for kubetest2
2025-03-10 08:57:53 -07:00
Kubernetes Prow Robot
ef47225466
Merge pull request #130004 from stlaz/remote-uid-config-fix
cluster authn trust configmap: increase write interval during apiserver dueling
2025-03-10 08:57:47 -07:00
Kubernetes Prow Robot
4806519423
Merge pull request #130622 from pohly/DRAPrioritizedList
DRA: Prioritized Alternatives in Device Requests, II
2025-03-10 06:51:51 -07:00
Kubernetes Prow Robot
9d2fc46556
Merge pull request #130637 from serathius/watchcache-unify-validation
Unify ListOptions validation between cache and etcd
2025-03-10 04:41:46 -07:00
Patrick Ohly
89440b1239 DRA: integration tests for prioritized list
This adds dedicated integration tests for the feature to the general
test/integration/dra for the API and some minimal testing with the scheduler.

It also adds non-performance test cases for scheduler_perf because that is a
better place for running through the complete flow (for example, can reuse
infrastructure for setting up nodes).
2025-03-10 11:38:06 +01:00
Marek Siarkowicz
ccb607f06b Unify ListOptions validation between cache and etcd 2025-03-10 11:36:24 +01:00
Stanislav Láznička
dbf780a48a
authn-trust: don't react to target CM updates
If kube-apiservers run at a different version (during upgrades) and
each has different opinion on what the `extension-apiserver-authentication`
config map should look like, they would start dueling with config map
writes.

This commit removes handling of the update events of the target CM
in order to reduce the amount of such dueling to once a minute, as
the controller is guaranteed to run at least once a minute anyway.

The idea is that a cluster state with two different versions of
kube-apiserver should never be permanent, and so a reduced amount of
dueling for that period is tolerable.
2025-03-10 11:28:02 +01:00
Kubernetes Prow Robot
5227bad0df
Merge pull request #130335 from carlory/fix-handle-terminating-pvc-when-kubelet-rebuild-dsw
Fix kubelet restart unmounts volumes of running pods if the referenced PVC is being deleted by the user
2025-03-10 03:09:47 -07:00
carlory
aab083972d fix handle terminating pvc when kubelet rebuild dsw
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-10 15:39:18 +08:00
Paco Xu
ce163947aa fix a flake of TestRoundTripTypes: for FirstAvailable[].AllocationMode 2025-03-10 14:03:55 +08:00
Drew Sirenko
085d23388a Mark VAC roll-forward test as flaky 2025-03-10 00:40:53 -04:00
Kubernetes Prow Robot
0f2bde7745
Merge pull request #130555 from thockin/k_k_randfill
Use randfill in k/k
2025-03-09 01:47:45 -08:00
Tim Hockin
770ce2d874
Better handling of YAML that tastes like JSON
For the most part, JSON is a subset of YAML.  This might lead one to
think that we should ALWAYS use YAML processing.  Unfortunately a JSON
"stream" (as defined by Go's encoding/json and many other places, though
not the JSON spec) is a series of JSON objects.  E.g. This:

```
{}{}{}
```

...is a valid JSON stream.

YAML does NOT accept that, insisting on `---` on a new line between YAML
documents.

Before this commit, YAMLOrJSONDecoder tries to detect if the input is
JSON by looking at the first few characters for "{".  Unfortunately,
some perfectly valid YAML also tastes like that.

After this commit, YAMLOrJSONDecoder will detect a failure to parse as
JSON and instead flip to YAML parsing.  This should handle the ambiguous
YAML.

Once we flip to YAML we never flip back, and once we detect a JSON
stream (as defined above) we lose the ability to flip to YAML.  A
multi-document is either all JSON or all YAML, even if we use the JSON
parser to decode the first object (because JSON is YAML for a single
object).
2025-03-08 15:38:10 -08:00
Tim Hockin
f08e640b9e
Lock down gofuzz in deps 2025-03-08 15:22:01 -08:00
Tim Hockin
0ce4268b1f
Vendor randfill 2025-03-08 15:21:58 -08:00