Commit Graph

121927 Commits

Author SHA1 Message Date
Jan Safranek
2a22b6f6b8 Add information about SELinux test tags 2024-02-28 12:56:11 +01:00
Jan Safranek
ba3562776f Update SELinuxMount stage/unstage tests to allow RWO
Previously, SELinuxMount started two pods and in laboratory conditions
waited for the second Pod to get stuck (because of RWOP) and observed
kubelet behavor after the test unstuck them (i.e. deleted the first Pod).

When testing RWO volumes, the second Pod may not get stuck, it may actually
run. So update the tests to allow the second Pod to run and start counting
CSI calls for it earlier.
2024-02-28 12:56:11 +01:00
Jan Safranek
52558a0310 Add e2e tests for SELinuxMount 2024-02-28 12:56:11 +01:00
Kubernetes Prow Robot
c498177b99
Merge pull request #123461 from carlory/fix-kubeadm-494
kubeadm: fix upgrade plan json/yaml output. introduce v1alpha3 changes
2024-02-28 03:53:04 -08:00
Wojciech Tyczyński
92bdc7b387 Ensure that initial events are sorted for WatchList 2024-02-28 12:50:53 +01:00
Kensei Nakada
58a826a59a graduate MinDomainsInPodTopologySpread to stable 2024-02-28 10:42:29 +00:00
Lukasz Szaszkiewicz
20ded27570 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test
changes the test to populate the underlying data store with
more data to trigger potential ordering issues.
2024-02-28 10:57:11 +01:00
Kubernetes Prow Robot
d2b4928669
Merge pull request #122830 from p0lyn0mial/upstream-watch-cache-wati-for-bk-after-rv
storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested
2024-02-28 01:43:37 -08:00
Sascha Grunert
e663285ccf
Add image_id to CRI Container message
This new field allows fixing the kubelet image garbage collection in
container runtimes. The `image_ref` has been historically used by
container runtimes to reference images by digest.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-02-28 10:05:07 +01:00
Kubernetes Release Robot
3327bb3674 CHANGELOG: Update directory for v1.30.0-alpha.3 release 2024-02-28 05:37:29 +00:00
Kubernetes Prow Robot
f7ca532472
Merge pull request #123281 from seans3/remote-command-websocket-beta
RemoteCommand over WebSockets to Beta
2024-02-27 21:01:55 -08:00
Jordan Liggitt
b394aac4ce
Use the websocket protocol header, verify selected protocol 2024-02-27 22:47:19 -05:00
Kubernetes Prow Robot
286cdad32d
Merge pull request #123538 from jiahuif-forks/fix/cel/mutation-library-map-support
CEL mutation library: add support for map
2024-02-27 18:46:10 -08:00
Kubernetes Prow Robot
872c621bb7
Merge pull request #123475 from alexzielenski/apiserver/apiextensions/cel-error-fieldpath
bugfix: incorrect fieldpath when using multiple crd validation rules
2024-02-27 18:45:57 -08:00
Kubernetes Prow Robot
cb989b84c8
Merge pull request #123424 from haircommander/image-gc-beta
Promote ImageMaximumGCAge to beta
2024-02-27 16:47:36 -08:00
Kubernetes Prow Robot
72c92e975d
Merge pull request #123411 from hunshcn/fix/volume-link
fix persistent volume docs link
2024-02-27 16:47:27 -08:00
Kubernetes Prow Robot
02306739ab
Merge pull request #122451 from Songjoy/master
remove duplicated check on validateTokenRequests for new object
2024-02-27 16:47:13 -08:00
Sean Sullivan
03812ddb16 streamtranslator counter metric by status code 2024-02-27 23:21:55 +00:00
Kubernetes Prow Robot
236f1b0f6b
Merge pull request #123540 from enj/enj/i/jwt_iss
jwt: strictly support compact serialization only
2024-02-27 15:19:01 -08:00
Monis Khan
e89dddd4af
jwt: strictly support compact serialization only
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-27 17:16:08 -05:00
Kubernetes Prow Robot
b63e991b57
Merge pull request #123216 from giuseppe/runtime-handler-cri
KEP-127: require userns support from the CRI runtime before using it
2024-02-27 14:15:03 -08:00
Kubernetes Prow Robot
12771ce773
Merge pull request #122493 from mengjiao-liu/fix-cronjob-error
cronjob: fix incorrect error checking
2024-02-27 14:14:54 -08:00
Jiahui Feng
dc4c92f5a5 add support for map
to CEL mutation library.
2024-02-27 13:55:08 -08:00
Vu Dinh
4fe78a17dd
Add duplicate key and field case-sensitivity CBOR decode tests.
1. Decoding map with duplicate keys into struct or map produces error.
2. Decoding a map into a Go struct matches json field tag names case-sensitively.
3. When decoding a map into a Go struct, a case-insensitive match between a key and a json field tag
   name is treated the same as no match.

Signed-off-by: Vu Dinh <vudinh@outlook.com>
2024-02-27 16:45:52 -05:00
Ben Luddy
374e4b5686
Address review nit, use longer variable identifiers. 2024-02-27 16:12:39 -05:00
Michał Woźniak
3852d1c0c1
Make explicit check in CronJob if Job is successful before setting LastSuccessfulTime (#123380)
* Make explicit check in CronJob if Job is successful

before setting LastSuccessfulTime

* Review remarks for the CronJob

Co-authored-by: Filip Křepinský <fkrepins@redhat.com>

---------

Co-authored-by: Filip Křepinský <fkrepins@redhat.com>
2024-02-27 13:09:43 -08:00
Kubernetes Prow Robot
1853de77b2
Merge pull request #122874 from fusida/fix-kcm-panic
fix node lifecycle controller panic when conditionType ready is nil
2024-02-27 13:09:34 -08:00
Peter Hunt
cb39dfc9de Promote ImageMaximumGCAge to beta
and set to be on by default, adapting e2e tests for it

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-02-27 15:11:45 -05:00
Kevin Hannon
f832692d98 uid is also supported in field ref for downward api 2024-02-27 12:44:42 -05:00
Lukasz Szaszkiewicz
ecaf2093f5 storage/watch_cache: rework getAllEventsSinceLocked 2024-02-27 14:26:46 +01:00
Lukasz Szaszkiewicz
d629d3fa35 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc 2024-02-27 14:26:41 +01:00
Lukasz Szaszkiewicz
f90bcf649e storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested 2024-02-27 14:26:36 +01:00
Kubernetes Prow Robot
12217672a3
Merge pull request #123358 from pacoxu/fix-cri-stats-panic
fix panic in CRI stats of windows
2024-02-27 05:14:58 -08:00
Kubernetes Prow Robot
47c92e2ab7
Merge pull request #123521 from pohly/dra-e2e-structure
dra e2e: fix stack unwinding in helper function
2024-02-27 03:14:40 -08:00
Rodrigo Campos
0e2b447269
kubelet/userns: Test new functionality with feature gate enabled
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-02-27 12:01:00 +01:00
Rodrigo Campos
658b45cd03
kublet/userns: Test new functionality with feature gate disabled
We just added some more functionality, let's make sure it works fine
with the feature gate disabled.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-02-27 12:01:00 +01:00
Rodrigo Campos
1fb1218f57
kublet/userns: Switch TestGetOrCreateUserNamespaceMappingsDisabled to table format
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2024-02-27 12:01:00 +01:00
Giuseppe Scrivano
b2a92406ef
KEP-127: check for runtime handler userns support
block the creation of a pod that requires a user namespace, unless the
runtime handler has support for it.

If the pod requested for a user namespace, and the handler does not
support it then return an error regardless of the feature gate.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-02-27 12:01:00 +01:00
Giuseppe Scrivano
024146f705
KEP-127: the kubelet stores runtime helpers
as they are received from the ResponseStatus request to the runtime.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-02-27 11:07:35 +01:00
carlory
ea69a5ea98 in the new output API output.kubeadm.k8s.io/v1alpha3 modify the UpgradePlan structure to include a list of multiple available upgrades. 2024-02-27 15:05:29 +08:00
liyuerich
c3caddf3e6 e2e_apps:stop using deprecated framework.ExpectError
Signed-off-by: liyuerich <yue.li@daocloud.io>
2024-02-27 13:46:36 +08:00
Kubernetes Prow Robot
e457683e6c
Merge pull request #123444 from pohly/test-context-expect-no-error
ktesting: several fixes and better unit testing
2024-02-26 20:05:40 -08:00
Sean Sullivan
a147693deb remote command turn on feature gates 2024-02-27 02:05:24 +00:00
Kubernetes Prow Robot
a882a2bf50
Merge pull request #123526 from cblecker/fm2
Re-add KUBE_TIMEOUT explicitly to make test
2024-02-26 16:56:54 -08:00
Christoph Blecker
0a1edf8bda
Re-add KUBE_TIMEOUT explicitly to make test 2024-02-26 15:46:38 -08:00
Kubernetes Prow Robot
0a1cb2a4a4
Merge pull request #122589 from pohly/log-contextual-beta
promote contextual logging to beta, enabled by default
2024-02-26 13:56:13 -08:00
Kubernetes Prow Robot
5d527dcf12
Merge pull request #123517 from Jefftree/cachegc
remove unused service keys from aggregated discovery
2024-02-26 12:07:06 -08:00
Kubernetes Prow Robot
18a49b6c56
Merge pull request #123393 from cblecker/fix-make
Fix makefile variable expansion for test-integration target
2024-02-26 12:06:57 -08:00
Kubernetes Prow Robot
f8fc1956db
Merge pull request #123205 from aravindhp/nlq-promote-beta
features: promote NodeLogQuery to beta
2024-02-26 12:06:48 -08:00
Kubernetes Prow Robot
c53ac4cee4
Merge pull request #123157 from jsafrane/selinux-rwx
Add SELinuxMount feature gate
2024-02-26 12:06:39 -08:00