Commit Graph

124363 Commits

Author SHA1 Message Date
Benjamin Elder
d0ced54c8a kube-up.sh: drop unnecessary legacy mirror config, enable injecting registry.k8s.io mirror 2024-07-30 17:30:33 -07:00
Kubernetes Prow Robot
e8588e6493
Merge pull request #126429 from saschagrunert/kubelet-panic
Fix kubelet cadvisor stats runtime panic
2024-07-29 11:06:07 -07:00
Kubernetes Prow Robot
aab56e9b70
Merge pull request #126441 from micahhausler/kubelet-cert-feature-gate-rename
Rename kubelet CSR admission feature gate
2024-07-29 09:39:34 -07:00
Micah Hausler
a7af830209 Rename kubelet CSR admission feature gate
Retitle the feature to the affirmative ("AllowInsecure...=false") instead of a
double-negative ("Disable$NEWTHING...=false") for clarity

Signed-off-by: Micah Hausler <mhausler@amazon.com>
2024-07-29 10:14:19 -05:00
Sascha Grunert
50e430b3e9
Fix kubelet cadvisor stats runtime panic
Fixing a kubelet runtime panic when the runtime returns incomplete data:

```
E0729 08:17:47.260393    5218 panic.go:115] "Observed a panic" panic="runtime error: index out of range [0] with length 0" panicGoValue="runtime.boundsError{x:0, y:0, signed:true, code:0x0}" stacktrace=<
        goroutine 174 [running]:
        k8s.io/apimachinery/pkg/util/runtime.logPanic({0x33631e8, 0x4ddf5c0}, {0x2c9bfe0, 0xc000a563f0})
                k8s.io/apimachinery/pkg/util/runtime/runtime.go:107 +0xbc
        k8s.io/apimachinery/pkg/util/runtime.handleCrash({0x33631e8, 0x4ddf5c0}, {0x2c9bfe0, 0xc000a563f0}, {0x4ddf5c0, 0x0, 0x10000000043c9e5?})
                k8s.io/apimachinery/pkg/util/runtime/runtime.go:82 +0x5e
        k8s.io/apimachinery/pkg/util/runtime.HandleCrash({0x0, 0x0, 0xc000ae08c0?})
                k8s.io/apimachinery/pkg/util/runtime/runtime.go:59 +0x108
        panic({0x2c9bfe0?, 0xc000a563f0?})
                runtime/panic.go:785 +0x132
        k8s.io/kubernetes/pkg/kubelet/stats.(*cadvisorStatsProvider).ImageFsStats(0xc000535d10, {0x3363348, 0xc000afa330})
                k8s.io/kubernetes/pkg/kubelet/stats/cadvisor_stats_provider.go:277 +0xaba
        k8s.io/kubernetes/pkg/kubelet/images.(*realImageGCManager).GarbageCollect(0xc000a3c820, {0x33631e8?, 0x4ddf5c0?}, {0x0?, 0x0?, 0x4dbca20?})
                k8s.io/kubernetes/pkg/kubelet/images/image_gc_manager.go:354 +0x1d3
        k8s.io/kubernetes/pkg/kubelet.(*Kubelet).StartGarbageCollection.func2()
                k8s.io/kubernetes/pkg/kubelet/kubelet.go:1472 +0x58
        k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1(0x30?)
                k8s.io/apimachinery/pkg/util/wait/backoff.go:226 +0x33
        k8s.io/apimachinery/pkg/util/wait.BackoffUntil(0xc000add110, {0x3330380, 0xc000afa300}, 0x1, 0xc0000ac150)
                k8s.io/apimachinery/pkg/util/wait/backoff.go:227 +0xaf
        k8s.io/apimachinery/pkg/util/wait.JitterUntil(0xc000add110, 0x45d964b800, 0x0, 0x1, 0xc0000ac150)
                k8s.io/apimachinery/pkg/util/wait/backoff.go:204 +0x7f
        k8s.io/apimachinery/pkg/util/wait.Until(...)
                k8s.io/apimachinery/pkg/util/wait/backoff.go:161
        created by k8s.io/kubernetes/pkg/kubelet.(*Kubelet).StartGarbageCollection in goroutine 1
                k8s.io/kubernetes/pkg/kubelet/kubelet.go:1470 +0x247
```

This commit fixes panics if:

- `len(imageStats.ImageFilesystems) == 0`
- `len(imageStats.ContainerFilesystems) == 0`
- `imageStats.ImageFilesystems[0].FsId == nil`
- `imageStats.ContainerFilesystems[0].FsId == nil`
- `imageStats.ImageFilesystems[0].UsedBytes == nil`
- `imageStats.ContainerFilesystems[0].UsedBytes == nil`

It also fixes the wrapped `nil` error for the check: `err != nil ||
imageStats == nil` in case that `imageStats == nil`.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-07-29 14:13:47 +02:00
Kubernetes Prow Robot
7a4c962341
Merge pull request #126428 from sttts/sttts-cle-controller-test
kube-apiserver/leaderelection/test: clean up controller test
2024-07-29 05:13:01 -07:00
Kubernetes Prow Robot
05934d6283
Merge pull request #126330 from ArkaSaha30/revert-to-go1.22
Revert to go1.22.5
2024-07-29 04:04:23 -07:00
ArkaSaha30
aa28bd6158
Revert distroless-iptables from v0.6.1 to v0.5.6
This commit will revert the distroless-iptables version from v0.6.1(built on go1.23rc2) to v0.5.6(built on go1.22.5).

Signed-off-by: ArkaSaha30 <arkasaha30@gmail.com>
2024-07-29 13:55:37 +05:30
ArkaSaha30
d1dfeed505
Revert "Bump images, dependencies and versions to go 1.23rc1"
This reverts commit 5c269fecf8.
2024-07-29 13:55:03 +05:30
ArkaSaha30
c203b120c0
Revert "Bump images, dependencies and versions to go 1.23rc2"
This reverts commit 9d5a7ff859.
2024-07-29 13:54:16 +05:30
Dr. Stefan Schimanski
3987d850a4
kube-apiserver/leaderelection/test: clean up controller test
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-29 09:56:39 +02:00
Dr. Stefan Schimanski
b13aab9cf1
kube-apiserver/leaderelection: remove klog noise
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-29 09:56:05 +02:00
Kubernetes Prow Robot
a2106b5f73
Merge pull request #126407 from Jefftree/fake-clock
Fix unit flake in leaderelection/TestReconcileElectionStep
2024-07-27 16:04:14 -07:00
Kubernetes Prow Robot
2aa468c708
Merge pull request #126344 from MikeSpreitzer/fix-120112
Relax noise margin in TestOneWeightedHistogram
2024-07-27 14:13:50 -07:00
Jefftree
f173f0c58c kube-apiserver/leaderelection/tests: fix test case PingTime should be ahead of RenewTime 2024-07-27 17:54:09 +00:00
Dr. Stefan Schimanski
b8045f98a4 kube-apiserver/leaderelection/tests: use fake clock
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-27 17:54:09 +00:00
Dr. Stefan Schimanski
8c971c5c15 kube-apiserver/leaderelection/test: fixing waiting for informer
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-27 17:54:08 +00:00
Kubernetes Prow Robot
ba6141a145
Merge pull request #126405 from sttts/sttts-sync-informerfactory-start
Call non-blocking informerFactory.Start synchronously to avoid races
2024-07-27 10:50:48 -07:00
Jefftree
cd69335542
informers: add comment that Start does not block
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-27 18:23:51 +02:00
Dr. Stefan Schimanski
c7a1fa432a
Call non-blocking informerFactory.Start synchronously to avoid races
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-27 18:13:09 +02:00
Kubernetes Prow Robot
250f7b5d15
Merge pull request #126386 from kannon92/126367-device-plugin-label
fix resource health status test failures in unlabeled jobs
2024-07-26 16:34:55 -07:00
Feilian Xie
ebdca53805
[sample-apiserver] Fix: Use Correct Effective Version for kube (#125941)
* Fix slice copy of VersionedSpecs in FeatureGate.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

* Update wardle to kube version mapping

Signed-off-by: Siyuan Zhang <sizhang@google.com>
Signed-off-by: Feilian Xie <fxie@redhat.com>
Co-authored-by: Feilian Xie <fxie@redhat.com>

* Add cap to wardleEmulationVersionToKubeEmulationVersion.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

* Add integration test for default BanFlunder behavior in version 1.2 without Wardle feature gate.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

---------

Signed-off-by: Siyuan Zhang <sizhang@google.com>
Signed-off-by: Feilian Xie <fxie@redhat.com>
Co-authored-by: Siyuan Zhang <sizhang@google.com>
2024-07-26 12:03:52 -07:00
Kubernetes Prow Robot
86e2e26936
Merge pull request #125674 from flavianmissi/builds-doc
build: fix README instructions to load the output image tar
2024-07-26 10:52:36 -07:00
Kevin Hannon
a1bbae8168 fix resource health status test failures in unlabeled jobs 2024-07-26 09:43:48 -04:00
Kubernetes Prow Robot
3a8a60eba2
Merge pull request #126240 from bzsuni/bz/etcd/update/v3.5.15
Update etcd to v3.5.15
2024-07-26 04:58:05 -07:00
Flavian Missi
b98817cb77 build: fix README instructions to load the output image tar 2024-07-26 11:02:05 +02:00
Kubernetes Prow Robot
f44f7b7422
Merge pull request #126377 from sttts/sttts-cle-fix-TestPickBestStrategy
kube-apiserver/leaderelection: remove broken printf
2024-07-26 01:35:30 -07:00
Dr. Stefan Schimanski
87f40441d6
kube-apiserver/leaderelection: remove broken printf
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-07-26 09:27:05 +02:00
Kubernetes Prow Robot
bee5e03707
Merge pull request #126333 from aroradaman/master
kube-proxy: internal config: fuzz cidr values for unit tests
2024-07-25 15:47:17 -07:00
Kubernetes Prow Robot
b4dcbbe81f
Merge pull request #126356 from pacoxu/fix-etcd-build-windows
add workdir in etcd Dockerfile for windows
2024-07-25 13:06:20 -07:00
Kubernetes Prow Robot
c853ca49c3
Merge pull request #126355 from haircommander/fs-quotas-false
set LocalStorageCapacityIsolationFSQuotaMonitoring to false by default
2024-07-25 13:06:11 -07:00
Kubernetes Prow Robot
9a16c96d7b
Merge pull request #126324 from pacoxu/v1beta4-typo
fix a typo in kubeadm v1beta4 doc
2024-07-25 13:06:02 -07:00
Kubernetes Prow Robot
5f5c02da51
Merge pull request #124012 from Jefftree/le-controller
Coordinated Leader Election
2024-07-25 13:05:53 -07:00
Kubernetes Prow Robot
e9d9a82839
Merge pull request #124101 from haircommander/process_stats-with-pid-fix
kubelet: fix PID based eviction
2024-07-25 11:59:57 -07:00
Kubernetes Prow Robot
9edabd6179
Merge pull request #126353 from liggitt/fix-vendor
Fix verify-vendor script to check all go.mod and go.sum files
2024-07-25 08:45:25 -07:00
Sebastiaan van Stijn
aeb607443d
revendor dependencies
I was workinng on updating a dependency, and noticed that running
hack/update-vendor.sh resulted in a diff. Comitting the result
as a PR.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-07-25 10:39:12 -04:00
Jordan Liggitt
08a74f24c4
Fix verify-vendor script to check all go.mod and go.sum files 2024-07-25 10:39:11 -04:00
Paco Xu
087134c840 add workdir in etcd Dockerfile for windows 2024-07-25 22:17:28 +08:00
Peter Hunt
eeae981048 set LocalStorageCapacityIsolationFSQuotaMonitoring to false by default
as the feature relies on UserNamespaces support, which is also off by default.
Having it on by default won't do anything negative, except adding some needless
checks as to whether the pod has hostUsers==true (impossible without the feature gate)

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-07-25 10:11:10 -04:00
Paco Xu
bdb51f28df fix a typo in kubeadm v1beta4 doc 2024-07-25 22:01:04 +08:00
Daman Arora
5359098c14 kube-proxy: internal config: fuzz cidr values for unit tests
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2024-07-25 19:20:24 +05:30
Kubernetes Prow Robot
b95f9c32d6
Merge pull request #126282 from macsko/fix_scheduler_perf_tests_taking_too_long
Init etcd and apiserver per test case in scheduler_perf integration tests
2024-07-25 02:04:46 -07:00
bzsuni
4ad2cd9299 Update etcd from v3.5.14 to v3.5.15
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-07-25 10:48:34 +08:00
Kubernetes Prow Robot
6ac20677c7
Merge pull request #126274 from ConnorJC3/flaky-vac-test
De-flake VAC tests by returning new PVC from WaitForVolumeModification
2024-07-24 15:39:52 -07:00
Mike Spreitzer
77541c1e35
Relax noise margin in TestOneWeightedHistogram
Signed-off-by: Mike Spreitzer <mspreitz@us.ibm.com>
2024-07-24 17:45:12 -04:00
Kubernetes Prow Robot
df69a528d5
Merge pull request #126335 from kannon92/split-filesystem-fix
[KEP-4191]: Move container fs check so that we only check if system is split
2024-07-24 13:55:09 -07:00
Kubernetes Prow Robot
696ad19801
Merge pull request #126242 from bzsuni/bz/etcd/build/v3.5.15
Build etcd image of v3.5.15
2024-07-24 09:53:53 -07:00
Kevin Hannon
3e642aee3f move container fs check so that we only check if system is split 2024-07-24 11:22:23 -04:00
Jefftree
56b278d5d2 fix flake in TestLeaseCandidateCleanup 2024-07-24 14:41:13 +00:00
Jefftree
919e7abe0f update codegen and openapi 2024-07-24 14:41:13 +00:00