Tim Allclair
d109f60a05
Clean up reference to deleted denied function
2023-03-20 18:24:10 -07:00
Tim Allclair
9cce3fa107
Deflake GC e2e test
2023-03-20 16:09:30 -07:00
Kubernetes Prow Robot
c9ff286668
Merge pull request #116772 from jiahuif-forks/fix/validating-admission-policy/message-expression-validation
...
ValidatingAdmissionPolicy: fix policy object validation
2023-03-20 15:21:11 -07:00
Katrina Verey
a0cff30104
Use standard *.kubernetes.io instead of *.k8s.io for ApplySet
2023-03-20 18:21:04 -04:00
Kubernetes Prow Robot
ac01acb8da
Merge pull request #116756 from liggitt/release-note-cleanup
...
Fixup 1.27 release note
2023-03-20 12:43:07 -07:00
Jiahui Feng
33c3fe3f74
differentiate kinds of expressions.
2023-03-20 12:13:21 -07:00
Kubernetes Prow Robot
15894cfc85
Merge pull request #116550 from alculquicondor/fix-bind-uid
...
Preserve UID and ResourceVersion in BindingREST
2023-03-20 08:49:20 -07:00
Jordan Liggitt
5949cb4d5c
Fixup 1.27 release note
2023-03-20 11:01:51 -04:00
Aldo Culquicondor
62889f416c
Preserve UID/ResourceVersion in the BindingREST endpoint
...
Change-Id: If4023da10c455963a320fdb9fc2a73c099bea3db
2023-03-20 10:29:25 -04:00
Prince Pereira
f59ac6e652
[WinProxy] Adding additional validations to queried endpoint list iteration.
2023-03-20 02:58:54 -07:00
Tim Hockin
78530ec0a8
Clarify EPSlice docs wrt the Ready conditions
...
`publishNotReadyAddresses` is an explicit override, so this makes it
clear that is OK.
2023-03-19 09:28:58 -07:00
vinay kulkarni
d753893260
Do not modify original pod object when processing pod resource resize
2023-03-18 17:57:25 +00:00
Dan Winship
db5590a194
Remove sig-network-driver-approvers alias
...
This previously existed so the dockershim networking stuff had
different approvers than general sig-network stuff, but that code is
gone now, and the remaining kubelet DNS code should be owned by
sig-network in general (and sig-node via inheritance).
2023-03-18 11:29:38 -04:00
Dan Winship
fc8892d26d
Add more labels (esp. area/kube-proxy) to sig-network OWNERS
2023-03-18 11:29:38 -04:00
Dan Winship
2f3800e100
Make pkg/util/iptables and pkg/util/ipvs owned by sig-network
2023-03-18 11:29:36 -04:00
Kubernetes Prow Robot
fe91bc257b
Merge pull request #116554 from atiratree/eviction-resource-version-fix
...
API-initiated eviction: handle deleteOptions correctly
2023-03-17 16:59:15 -07:00
Kubernetes Prow Robot
c14e0983fb
Merge pull request #116684 from vinaykul/restart-free-pod-vertical-scaling-fixes
...
Add missing unit test for resource resize policy defaulting
2023-03-17 15:13:17 -07:00
Filip Křepinský
51c0e2374f
API-initiated eviction: handle deleteOptions correctly
...
when adding a DisruptionTarget condition into a pod that will be deleted
- handle ResourceVersion and Preconditions correctly
- handle DryRun option correctly
Co-authored-by: Jordan Liggitt jordan@liggitt.net
2023-03-17 22:18:07 +01:00
Kubernetes Prow Robot
05740daeed
Merge pull request #116718 from dims/move-the-arm-deprecation-notice-elsewhere
...
Move the arm deprecation notice in a different spot
2023-03-17 14:01:16 -07:00
Kubernetes Release Robot
fd16329f64
CHANGELOG: Update directory for v1.26.3 release
2023-03-17 19:07:06 +00:00
vinay kulkarni
358474b71d
Explicitly return from checkpoint update failures. SyncPod will retry
2023-03-17 18:00:04 +00:00
Kubernetes Release Robot
7387ccbd31
CHANGELOG: Update directory for v1.25.8 release
2023-03-17 17:48:15 +00:00
Kubernetes Release Robot
a4e62edcc9
CHANGELOG: Update directory for v1.24.12 release
2023-03-17 17:10:22 +00:00
Kubernetes Prow Robot
aa0fea6944
Merge pull request #116706 from pacoxu/deflake-kubemark-data-race
...
kubelet: fix data races
2023-03-17 08:41:26 -07:00
Monis Khan
94f2d35164
Wire bootstrap token authn secret lister only when it is enabled
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-03-17 11:17:20 -04:00
Davanum Srinivas
26313ed2b0
Move the arm deprecation notice in a different spot
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-03-17 10:28:32 -04:00
Paco Xu
5134520a3b
add lock in volume manager reconciler to avoid data race
...
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-03-17 21:29:10 +08:00
vinay kulkarni
f66e8848ee
Fix pod object update that may cause data race
2023-03-17 08:50:52 +00:00
Paco Xu
7afcfe1826
kubelet: use filepath.Clean before init, validate it in setupDataDirs
2023-03-17 15:45:39 +08:00
Kubernetes Prow Robot
8b2dae57d4
Merge pull request #116705 from pacoxu/fix-verify-master
...
update openapi-spec
2023-03-17 00:39:18 -07:00
vinay kulkarni
0c2c132005
Update in-place pod resize changelog to remove unwanted release note, make feature description user friendly
2023-03-17 05:43:30 +00:00
vinay kulkarni
0ee5d43d74
Add unit tests covering ephemeral storage resource combinations
2023-03-17 05:43:30 +00:00
vinay kulkarni
07c567a848
Add missing unit test for resource resize policy defaulting
2023-03-17 05:43:30 +00:00
Paco Xu
8d38b30f82
update openapi-spec
2023-03-17 13:06:06 +08:00
Paco Xu
a780544f58
add log for kubemark start
2023-03-17 11:33:48 +08:00
Kubernetes Release Robot
8e01ee79bf
CHANGELOG: Update directory for v1.27.0-beta.0 release
2023-03-17 00:49:13 +00:00
Kubernetes Prow Robot
e1c2af399a
Merge pull request #115331 from mimowo/kubelet-fail-pending-deleted-pods
...
Give terminal phase correctly to all pods that will not be restarted
2023-03-16 16:47:17 -07:00
Kubernetes Prow Robot
76d351065e
Merge pull request #116623 from lavalamp/xfrmr
...
change where transformers are called
2023-03-16 15:03:19 -07:00
Clayton Coleman
d25572c389
kubelet: HandlePodCleanups takes an extra sync to restart pods
...
HandlePodCleanups is responsible for restarting pods that are no
longer running (usually due to delete and recreation with the same
UID in quick succession). We have to filter the list of pods to
restart from podManager to get the list of admitted pods, which
uses filterOutInactivePods on the kubelet. That method excludes
pods the pod worker has already terminated. Since a restarted
pod will be in the terminated state before HandlePodCleanups
calls SyncKnownPods, we have to call filterOutInactivePods after
SyncKnownPods, otherwise the to-be-restarted pod is ignored and
we have to wait for the next houskeeping cycle to restart it.
Since static pods are often critical system components, this
extra 2s wait is undesirable and we should restart as soon as
we can. Add a failing test that passes after we move the filter
call after SyncKnownPods.
2023-03-16 15:18:44 -06:00
Michal Wozniak
3d68f362c3
Give terminal phase correctly to all pods that will not be restarted
2023-03-16 21:25:29 +01:00
Clayton Coleman
58d1dc669f
kubelet: Remove status manager channel
...
The status manager channel forces all container status to be
processed, even if multiple updates are generated in succession.
Instead of queueing the updates, just remember which ones changed
and process them in a batch. This should reduce QPS load from
the Kubelet for status, reduce latency of status propagation to
the API in general, and is easier to reason about.
This also prevents status from being lost when the channel is
full - all updates sent by SetPodStatus are guaranteed to be
recorded. Changing to remove the channel allows us to set a
marker flag when the pod worker state machine completes that
avoids the status manager having to call into the pod worker
directly.
2023-03-16 21:22:43 +01:00
Kubernetes Prow Robot
a34e37c996
Merge pull request #113218 from ahmedtd/kep-3257
...
Add certificates.k8s.io/v1alpha1 ClusterTrustBundle
2023-03-16 11:13:20 -07:00
Sathyanarayanan Saravanamuthu
c84c8add70
Decouple batch/job back-off logic from workqueues ( #114768 )
...
* batch/job: decouple backoff from workqueue
Signed-off-by: Sathyanarayanan Saravanamuthu <sathyanarays@vmware.com>
* Resolving review comments
* Resolving more review comments
* Resolving review comments
Signed-off-by: Sathyanarayanan Saravanamuthu <sathyanarays@vmware.com>
* Computing finish time to now when FinishedAt is unix epoch
* Addressing review comments
Signed-off-by: Sathyanarayanan Saravanamuthu <sathyanarays@vmware.com>
---------
Signed-off-by: Sathyanarayanan Saravanamuthu <sathyanarays@vmware.com>
2023-03-16 10:15:21 -07:00
Kubernetes Prow Robot
856d6d9caa
Merge pull request #116172 from wojtek-t/fix_watch_cache
...
Fix missed watch events when watch is initialized simultanously with reinitializing watchcache
2023-03-16 07:31:21 -07:00
Davanum Srinivas
41ed0e1234
Add an image for kubectl
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2023-03-16 10:28:04 -04:00
Dan Winship
1c7155e7ff
Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark
...
This way it inherits the OWNERS from pkg/proxy which makes it easier
for sig-network to keep it in sync with changes made to internal proxy
APIs.
2023-03-16 09:47:54 -04:00
Wojciech Tyczyński
3277d85604
Fix missed watch events
2023-03-16 14:32:11 +01:00
Stanislav Laznicka
8d3a498c87
don't ignore UID impersonation in webhook clients
2023-03-16 12:18:56 +01:00
Taahir Ahmed
51f759aa05
ClusterTrustBundles: kube-apiserver integration tests
2023-03-15 20:19:48 -07:00
Taahir Ahmed
2e4b637bf8
ClusterTrustBundles: make update
2023-03-15 20:10:59 -07:00