Commit Graph

127242 Commits

Author SHA1 Message Date
Wei Fu
f5fc57e1ee proxy: should add PingPeriod for websocket translator
IIUC, before using the translator handler, the ping data can be delivered from
the client to the runtime side since kube-apiserver does not parse any client
data. However, with WebSocket, the server responds with a pong to the client
without forwarding the data to the runtime side. If a proxy is present, it may
close the connection due to inactivity. SPDY's PingPeriod can help address this
issue.

Signed-off-by: Wei Fu <fuweid89@gmail.com>
Co-authored-by: Antonio Ojea <aojea@google.com>
(cherry picked from commit dc59c0246f)
Signed-off-by: Wei Fu <fuweid89@gmail.com>
2025-02-18 21:21:21 -05:00
Kubernetes Prow Robot
0126bb57a8
Merge pull request #130175 from liggitt/go-tools-132
[release-1.32][go1.23] Honor KUBE_HACK_TOOLS_GOTOOLCHAIN
2025-02-14 17:24:21 -08:00
Jordan Liggitt
1f27b75275
Honor KUBE_HACK_TOOLS_GOTOOLCHAIN 2025-02-14 13:00:04 -05:00
Michal Wozniak
00f135bb64 Deflake the PodReplacementPolicyFeatureToggling Job integration test 2025-02-14 14:14:22 +01:00
Aleksander Mistewicz
1ac9e213a8 Limit ResourceQuota LIST requests to times when informer is not synced
This should reduce the number of slow (100ms) LIST requests when there
are no ResourceQuota objects present in the namespace. The behavior
stays virtually the same.
2025-02-13 12:46:53 +01:00
Kubernetes Release Robot
ac28939fdd Update CHANGELOG/CHANGELOG-1.32.md for v1.32.2 2025-02-12 21:40:30 +00:00
Kubernetes Release Robot
67a30c0adc Release commit for Kubernetes v1.32.2 2025-02-12 21:19:46 +00:00
Ed Bartosh
d428c6b8fe kubelet: fix DRA registration test
Set expected slice fields in the reactor function instead of
test cleanup instead of doing it in the test cleanup.

This should fix the test failure caused by kubelet calling reactor function
before the test cleanup sets the deleteCollectionForDriver variable.
2025-02-12 14:22:12 +05:30
Kubernetes Prow Robot
5841717525
Merge pull request #130078 from cpanato/update-go-132
[release-1.32][go] Bump images, dependencies and versions to go 1.23.6 and distroless iptables
2025-02-11 15:47:58 -08:00
cpanato
ae0ec29cbf
Bump images, dependencies and versions to go 1.23.6 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2025-02-10 21:27:24 -06:00
Michal Wozniak
d589f56657 Fix the flaky Job test: TestSuccessPolicy_ReEnabling 2025-02-10 16:45:38 +01:00
Kubernetes Prow Robot
393ffc7d26
Merge pull request #129966 from cpanato/update-go-rel132
[release-1.32][go] Bump images, dependencies and versions to go 1.23.5 and distroless iptables
2025-02-07 09:31:57 -08:00
Daman Arora
f0022d3752 bump netlink
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2025-02-07 17:40:31 +05:30
Kubernetes Prow Robot
80fb77ad8e
Merge pull request #130015 from aramase/aramase/f/disable_serviceaccountnodeaudiencerestriction_1.32
Disable ServiceAccountNodeAudienceRestriction feature gate by default in v1.32
2025-02-07 01:11:55 -08:00
Kubernetes Prow Robot
b53c36d327
Merge pull request #130010 from tallclair/automated-cherry-pick-of-#129739-upstream-release-1.32
Automated cherry pick of #129739: Kubelet server handler cleanup
2025-02-06 23:47:56 -08:00
Anish Ramasekar
953ac56c21
Disable ServiceAccountNodeAudienceRestriction feature gate by default in v1.32
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-02-06 13:50:47 -06:00
Tim Allclair
302fab7411 Kubelet server handler cleanup 2025-02-06 10:57:29 -08:00
Kubernetes Prow Robot
33ca881223
Merge pull request #129928 from mimowo/fix-job-int-test-1.32
Cherry-pick #129894 and #129913: Deflake job integration test 1.32
2025-02-04 08:35:00 -08:00
cpanato
fa68823677
Bump images, dependencies and versions to go 1.23.5 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2025-02-03 18:44:30 +01:00
Michal Wozniak
45b2f1c200 Fix the remaining flaky integration tests in Job controller 2025-01-31 10:43:10 +01:00
Michal Wozniak
9d0179ee11 WIP: fix the flaky Job integration tests 2025-01-31 10:42:59 +01:00
Kubernetes Prow Robot
faf35b4eac
Merge pull request #129862 from neolit123/automated-cherry-pick-of-#129859-origin-release-1.32
Automated cherry pick of #129859: kubeadm: use the v1beta4 EtcdAPICall timeout for etcd calls
2025-01-30 05:55:23 -08:00
Lubomir I. Ivanov
5cc748f324 kubeadm: use the v1beta4 EtcdAPICall timeout for etcd calls
v1beta4 added the Timeouts struct and a EtcdAPICall timeout
field, but it was never used in the etcd client calls.

This is a bug, so it should be fixed, we also reduced
the timeout from 200 seconds exponentional backoff to 2 minute
linear default timeout.
2025-01-28 17:52:52 +02:00
Kubernetes Prow Robot
dac2e30a73
Merge pull request #129627 from gnufied/automated-cherry-pick-of-#129618-upstream-release-1.32
Automated cherry pick of #129618: Bump CSI sidecars to fix CI issues and such
2025-01-28 05:31:26 -08:00
Kubernetes Prow Robot
ad81b22354
Merge pull request #129743 from pjsharath28/automated-cherry-pick-of-#128997-upstream-release-1.32
Automated cherry pick of #128997: Replaced util.NewIOHandler() with fakeIOHandler to make UT pass on different host envs
2025-01-28 04:19:37 -08:00
Kubernetes Prow Robot
ce39aed39e
Merge pull request #129740 from bobsongplus/automated-cherry-pick-of-#129629-upstream-release-1.32
Automated cherry pick of #129629: Fix: touch /dev/null permission denied on macos
2025-01-28 04:19:30 -08:00
Kubernetes Prow Robot
4ac02cbbbd
Merge pull request #129608 from neolit123/automated-cherry-pick-of-#129594-origin-release-1.32
Automated cherry pick of #129594: kubeadm: remove misplaced error during image pull
2025-01-28 04:19:23 -08:00
Patrick Ohly
00faa5e7ae DRA CEL: skip estimating the cost in the scheduler
Compiling a CEL expression used to do the cost estimation, whether the caller
needed the result or not. Now callers can skip it. The scheduler does that,
through the CEL cache.

The main advantage is that failures in the estimator (like panics) are limited
to the apiserver. Performance in the scheduler is not expected to benefit much
because compilation results are cached.
2025-01-24 09:17:19 +01:00
Kubernetes Prow Robot
5648b9caa8
Merge pull request #129782 from pohly/apidiff-release-1.32
hack: backport apidiff.sh
2025-01-23 07:36:58 -08:00
Patrick Ohly
9ade604a07 hack: backport apidiff.sh
This makes the script identical to current
master (f3cbd79db7). This is needed
because pull-kubernetes-apidiff-client-go is the same for all
branches and assumes that the script automatically determines
the diff based on Prow env variables.
2025-01-23 13:06:39 +01:00
song
11c3bd3038 Fix: touch /dev/null permission denied on macos
Signed-off-by: song <tinysong1226@gmail.com>
2025-01-22 09:22:35 +08:00
Kubernetes Prow Robot
643951a962
Merge pull request #129674 from gohilankit/automated-cherry-pick-of-#129630-upstream-release-1.32
Automated cherry pick of #129630: Fix Portworx plugin's CSI translation to copy secret name & namespace
2025-01-21 13:42:36 -08:00
Abhishek Kr Srivastav
4e43ab095e Added check for multipath device mapper
Addressed review comments
2025-01-21 15:09:17 +05:30
Patrick Ohly
f89e4c08cf DRA CEL: add missing size estimator
Not implementing a size estimator had the effect that strings retrieved from
the attributes were treated as "unknown size", leading to wildly overestimating
the cost and validation errors even for even simple expressions like this:

    device.attributes["qat.intel.com"].services.matches("[^a]?sym")

Maximum number of elements in maps and the maximum length of the driver name
string were also ignored resp. missing. Pre-defined types like
apiservercel.StringType must be avoided because they are defined as having
a zero maximum size.
2025-01-17 14:27:49 +01:00
Ankit Gohil
051414a53a Fix Portworx plugin's CSI translation to copy secret name & namespace 2025-01-17 06:01:40 +00:00
Kubernetes Release Robot
6473e7b6ca Update CHANGELOG/CHANGELOG-1.32.md for v1.32.1 2025-01-15 15:00:37 +00:00
Kubernetes Release Robot
e9c9be4007 Release commit for Kubernetes v1.32.1 2025-01-15 14:31:54 +00:00
Hemant Kumar
0bf3f03dda We still can't rely on first condition being fs-expansion pending condition
Also, we don't really need this check here, because code above already
checks for fs expansion
2025-01-14 18:57:28 -05:00
Hemant Kumar
570f550189 Bump CSI sidecars to fix CI issues and such 2025-01-14 18:57:28 -05:00
Kubernetes Prow Robot
5fe148234f
Merge pull request #129598 from aravindhp/automated-cherry-pick-of-#129595-upstream-release-1.32
Automated cherry pick of #129595: kubelet: use env vars in node log query PS command
2025-01-14 10:26:35 -08:00
Lubomir I. Ivanov
8ed6e5c88d kubeadm: remove misplaced error during image pull
During preflight when an image is pulled, if the sandbox image
check returns an error, the same error later blocks the actual
image pull.
2025-01-14 09:25:55 +02:00
Aravindh Puthiyaparambil
00be157dab
kubelet: use env vars in node log query PS command
- Use environment variables to pass string arguments in the node log
  query PS command
- Split getLoggingCmd into getLoggingCmdEnv and getLoggingCmdArgs
  for better modularization
2025-01-13 14:25:35 -08:00
Kubernetes Prow Robot
e616858316
Merge pull request #129544 from pohly/automated-cherry-pick-of-#129543-origin-release-1.32
Automated cherry pick of #129543: DRA API: bump maximum size of ReservedFor to 256
2025-01-10 11:14:31 -08:00
Patrick Ohly
aba61276ed DRA e2e: adapt to increased ReservedFor limit
We want to be sure that the maximum number of pods per claim are actually
scheduled concurrently. Previously the test just made sure that they ran
eventually.

Running 256 pods only works on more than 2 nodes, so network-attached resources
have to be used. This is what the increased limit is meant for anyway. Because
of the tightened validation of node selectors in 1.32, the E2E test has to
use MatchExpressions because they allow listing node names.
2025-01-10 16:08:34 +01:00
Kubernetes Prow Robot
181bc4773b
Merge pull request #129528 from tnqn/automated-cherry-pick-of-#129201-upstream-release-1.32
Automated cherry pick of #129201: Add watch permission to namespace-controller for WatchListClient feature
2025-01-10 06:00:31 -08:00
Kubernetes Prow Robot
08ec9118a0
Merge pull request #129429 from neolit123/automated-cherry-pick-of-#129418-origin-release-1.32-1735554474
Automated cherry pick of #129418 kubeadm: skip disabled addons in clusterconfig on upgrade
2025-01-09 17:38:31 -08:00
Patrick Ohly
a5de75458e DRA API: bump maximum size of ReservedFor to 256
The original limit of 32 seemed sufficient for a single GPU on a node. But for
shared non-local resources it is too low. For example, a ResourceClaim might be
used to allocate an interconnect channel that connects all pods of a workload
running on several different nodes, in which case the number of pods can be
considerably larger.

256 is high enough for currently planned systems. If we need something even
higher in the future, an alternative approach might be needed to avoid
scalability problems.

Normally, increasing such a limit would have to be done incrementally over two
releases. In this case we decided on
Slack (https://kubernetes.slack.com/archives/CJUQN3E4T/p1734593174791519) to
make an exception and apply this change to current master for 1.33 and backport
it to the next 1.32.x patch release for production usage.

This breaks downgrades to a 1.32 release without this change if there are
ResourceClaims with a number of consumers > 32 in ReservedFor. In practice,
this breakage is very unlikely because there are no workloads yet which need so
many consumers and such downgrades to a previous patch release are also
unlikely. Downgrades to 1.31 already weren't supported when using DRA v1beta1.
2025-01-09 14:27:03 +01:00
Kubernetes Prow Robot
db14116697
Merge pull request #129495 from MadhavJivrajani/132-go124-webhook-regex-ut
[go1.24][1.32] webhook: alter regex to account for x509sha1 GODEBUG removal
2025-01-09 03:46:39 -08:00
Kubernetes Prow Robot
4466b1347a
Merge pull request #129322 from ardaguclu/automated-cherry-pick-of-#129301-upstream-release-1.32
Automated cherry pick of #129301: Do not attempt to truncate revision history if revisionHistoryLimit is negative
2025-01-09 03:46:31 -08:00
Kubernetes Prow Robot
117a48fcdf
Merge pull request #129455 from neolit123/automated-cherry-pick-of-#129418-origin-release-1.32-1735822604
Automated cherry pick of #129452 kubeadm: fix a bug where the node.skipPhases in UpgradeNodeConfigurat…
2025-01-08 14:06:38 -08:00