Commit Graph

120549 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
9d86dbd0ad
Merge pull request #122710 from dims/local-up-cluster-use-newly-built-library-always
local-up-cluster: use the newly built library always
2024-01-11 18:25:47 +01:00
Kubernetes Prow Robot
823ecb58f6
Merge pull request #122706 from pacoxu/klog-upgrade
bump klog to  v2.120.0
2024-01-11 18:25:38 +01:00
Kubernetes Prow Robot
773ad73b90
Merge pull request #122705 from cpanato/update-go-1.21-master
[go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
2024-01-11 14:19:21 +01:00
Davanum Srinivas
ddbf3ab662
local-up-cluster: use the newly built library always
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-01-11 08:13:21 -05:00
cpanato
a5861a1262
[go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-01-11 11:54:35 +01:00
Paco Xu
3c86d21316 bump klog to v2.120.0 2024-01-11 17:35:07 +08:00
Lukasz Szaszkiewicz
6376dd6296 component-base/featuregate: store atomic.Value fields as value not reference
featureGate is a pointer receiver thus it is safe to store
atomic fields as values because they won't be copied.
2024-01-11 09:19:34 +01:00
Paco Xu
56321a7779 Revert "Graduate Evented PLEG to Beta"
This reverts commit d971809b49.
2024-01-11 15:27:23 +08:00
Lukasz Szaszkiewicz
57ec7d20e8 client-go/features: move the defaultKubernetesFeatureGates variable to the new file 2024-01-11 08:26:49 +01:00
Kubernetes Prow Robot
c9158e9a19
Merge pull request #122595 from dims/support-building-with-and-without-cloud-providers
KUBE_PROVIDERLESS - Support building with and without cloud providers
2024-01-11 05:42:23 +01:00
Daman Arora
b0e929264f e2e/network/conntrack: rename invalid conntrack state test
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2024-01-11 03:11:42 +05:30
Kubernetes Prow Robot
741fd84d15
Merge pull request #122689 from enj/enj/r/ec_hash_cleanup
Clean up encryption config reading and hashing logic
2024-01-10 21:58:17 +01:00
Monis Khan
9387a66c71
Clean up encryption config reading and hashing logic
This is a no-op change that makes the internal encryption config
hash more specific to it use and explicitly marks it as unstable.

Signed-off-by: Monis Khan <mok@microsoft.com>
2024-01-10 14:52:12 -05:00
Kubernetes Prow Robot
0341e8294a
Merge pull request #122555 from p0lyn0mial/upstream-client-go-fg-provider-with-types
client-go/features: introduce feature gates
2024-01-10 20:49:12 +01:00
Daman Arora
4ffa12b9d9 pkg/proxy/nftables: drop ct-state-invalid rule
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2024-01-10 22:53:09 +05:30
Lukasz Szaszkiewicz
04bbd3481f client-go/features: warn when ordering initialization issue
ReplaceFeatureGates logs a warning when the default env var
implementation has been already used.
Such a situation indicates a potential ordering issue and usually is unwanted.
2024-01-10 17:24:55 +01:00
Lukasz Szaszkiewicz
d74c57d4f5 client-go/features: introduce feature gates
This PR add a feature gates mechanisim to client-go
as described in https://docs.google.com/document/d/1g9BGCRw-7ucUxO6OtCWbb3lfzUGA_uU9178wLdXAIfs

In particular:
  - Adds a default feature gate implementation based on environment variables.
  - Adds a set of methods for reading, overwriting the default implementation, and adding features to an external registry.

Co-authored-by: deads2k <deads@redhat.com>
Co-authored-by: Ben Luddy <bluddy@redhat.com>
2024-01-10 17:20:40 +01:00
Kubernetes Prow Robot
35bed806dc
Merge pull request #121956 from rewanthtammana/patch-1
Fixed `remotePath` in mount_windows.go
2024-01-10 17:08:08 +01:00
Kubernetes Prow Robot
7dca023859
Merge pull request #122684 from soltysh/improve_output
Add missing string formatting directive
2024-01-10 15:59:26 +01:00
Kubernetes Prow Robot
6e614b0e3f
Merge pull request #122683 from soltysh/fix_validatingadmissionpolicies
Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies
2024-01-10 15:59:08 +01:00
amewayne
71c3593f85 support nodeAnnotationsChanged event to trigger rescheduling 2024-01-10 22:38:54 +08:00
Kubernetes Prow Robot
fc691e8ffd
Merge pull request #122476 from kerthcet/feat/support-annotation
Support annotation in nodewrapper
2024-01-10 14:05:58 +01:00
Maciej Szulik
70e20b58dd
Add missing string formatting directive 2024-01-10 13:28:02 +01:00
Maciej Szulik
8abe5394ac
Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies 2024-01-10 13:20:27 +01:00
Kubernetes Prow Robot
331e5561ab
Merge pull request #122642 from my-git9/componentconfigs-ut-q
kubeadm: increase ut coverage app/componentconfigs
2024-01-10 02:47:06 +01:00
Kubernetes Prow Robot
c74cd5fec4
Merge pull request #122524 from AxeZhan/testPQupdate
[Scheduler] refactor TestPriorityQueue_Update
2024-01-10 02:46:59 +01:00
Kubernetes Prow Robot
95a159299b
Merge pull request #122614 from tnqn/nftables-firewall
kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode
2024-01-09 22:27:16 +01:00
Kubernetes Prow Robot
1cfe76a8e4
Merge pull request #122583 from jsafrane/fix-selinux-e2e
Fix SELinux e2e tests: add label to observed metrics
2024-01-09 22:27:07 +01:00
Davanum Srinivas
ce263d8828
Address comments during Review
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-01-09 15:52:16 -05:00
Kubernetes Prow Robot
13fad117aa
Merge pull request #122630 from uablrek/kube-proxy-ip-types
Kube-proxy: use type net.IP for addresses
2024-01-09 21:18:25 +01:00
Kubernetes Prow Robot
ccb1d08162
Merge pull request #121834 from vaibhav2107/eviction-update
Added Imagefs inodes in default Eviction Hard
2024-01-09 21:18:16 +01:00
Kubernetes Prow Robot
4c82da4d9f
Merge pull request #122655 from uablrek/cleanup-cidrs
kube-proxy: don't use invalid cidrs in unit test
2024-01-09 19:36:16 +01:00
Kubernetes Prow Robot
56ecdadd99
Merge pull request #122574 from brianpursley/kubectl-1532
Fix kubectl drain error handling bug.
2024-01-09 17:40:17 +01:00
xin.li
1a69fd4cb0 kubeadm: increase ut coverage app/componentconfigs
Signed-off-by: xin.li <xin.li@daocloud.io>
2024-01-09 21:52:11 +08:00
Quan Tian
f21f8d9984 kube-proxy: fix LoadBalancerSourceRanges not working for nftables mode
Previously, the firewall-check chain was run in input, forward, and
output hook but not prerouting hook. When the LoadBalancer traffic
arrived at input or forward hook, it had been DNATed to endpoint IP and
port, so the firewall-check chain didn't take effect, traffic from out
of LoadBalancerSourceRanges was not dropped.

It was not detected by unit test because the chains were sorted by
priority only, while hook should be taken into consideration.

The commit links the firewall-check chain to prerouting hook and unlinks
it from input and forward hook to ensure the traffic is filtered before
DNAT. The priorities of filter chains are updated from "DNATPriority-1"
to "DNATPriority-10" to allow third parties to insert something else
between them.

Signed-off-by: Quan Tian <qtian@vmware.com>
2024-01-09 17:34:16 +08:00
Lars Ekman
50b3ffc71f kube-proxy: LoadBalancerSourceRanges as *net.IPNet 2024-01-09 09:17:56 +01:00
Lars Ekman
9eac24c656 kube-proxy: store ExternalIPs as net.IP
They were stored as strings which could be non-canonical
and cause problems
2024-01-09 09:17:50 +01:00
Lars Ekman
d2294007b0 kube-proxy: store LoadBalancerVIPs as net.IP
They were stored as strings which could be non-canonical
and cause problems
2024-01-09 09:17:43 +01:00
Lars Ekman
564b80b1e1 kube-proxy: don't use invalid cidrs in unit test
CIDRs like 192.168.200.3/24 and fd00:20::1/64 replaced with
192.168.200.0/24 and fd00:20::/64
2024-01-09 09:17:31 +01:00
Lars Ekman
41ba76d23e kube-proxy: don't use invalid cidrs in unit test
CIDRs like 192.168.200.3/24 and fd00:20::1/64 replaced with
192.168.200.0/24 and fd00:20::/64
2024-01-09 09:14:20 +01:00
Kubernetes Prow Robot
85097f3d2c
Merge pull request #122652 from AkihiroSuda/fix-122650
Fix compiling e2e.test on macOS
2024-01-09 03:56:30 +01:00
Akihiro Suda
2e999fff02
Fix compiling e2e.test on macOS
Fix issue 122650 (regression in PR 122552)

```
$ make WHAT=test/e2e/e2e.test
+++ [0109 10:06:53] Building go targets for darwin/amd64
    k8s.io/kubernetes/test/e2e/e2e.test (test)
package k8s.io/kubernetes/test/e2e
        imports k8s.io/kubernetes/test/e2e/common
        imports k8s.io/kubernetes/test/e2e/common/node
        imports k8s.io/kubernetes/pkg/kubelet
        imports github.com/opencontainers/runc/libcontainer/userns: C source files not allowed when not using cgo or SWIG: userns_maps.c
!!! [0109 10:06:54] Call tree:
!!! [0109 10:06:54]  1: /Users/suda/gopath/src/k8s.io/kubernetes/hack/lib/golang.sh:948 kube::golang::build_binaries_for_platform(...)
!!! [0109 10:06:54]  2: hack/make-rules/build.sh:27 kube::golang::build_binaries(...)
!!! [0109 10:06:54] Call tree:
!!! [0109 10:06:54]  1: hack/make-rules/build.sh:27 kube::golang::build_binaries(...)
!!! [0109 10:06:54] Call tree:
!!! [0109 10:06:54]  1: hack/make-rules/build.sh:27 kube::golang::build_binaries(...)
make: *** [all] Error 1
```

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-01-09 10:42:20 +09:00
Kubernetes Prow Robot
9e0eccabb4
Merge pull request #119968 from j4ckstraw/replace-stat-with-statx
Replace stat syscall with statx
2024-01-08 21:17:03 +01:00
Kubernetes Prow Robot
627416325c
Merge pull request #122552 from yankay/runc/update-to-1.1.11
Bump runc to v1.1.11
2024-01-08 18:37:47 +01:00
Kubernetes Prow Robot
2cf7465755
Merge pull request #122605 from tnqn/stale-chain-cleanup
kube-proxy: do not delete previously stale but currently active chains
2024-01-08 17:30:53 +01:00
Kubernetes Prow Robot
919d4624a0
Merge pull request #122503 from sunbinnnnn/scheduler-extender-support-ignore-bind
Support ignore scheduler extender error when binding
2024-01-08 17:30:44 +01:00
Kubernetes Prow Robot
5b979a3a53
Merge pull request #122498 from Gekko0114/close
Allow framework plugins to be closed
2024-01-08 17:30:36 +01:00
Kubernetes Prow Robot
f538feed8c
Merge pull request #122296 from tnqn/nftables-kernel-requirement
kube-proxy: change implementation of LoadBalancerSourceRanges for wider kernel support
2024-01-08 17:30:27 +01:00
Ziqi Zhao
6b5e973e5f
Migrate cmd/kube-proxy to contextual logging (#122197)
* cmd/kube-proxy support contextual logging

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>

* use ktesting.NewTestContext(t) in unit test

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>

* use ktesting.NewTestContext(t) in unit test

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>

* remove unnecessary blank line & add cmd/kube-proxy to contextual section in logcheck.conf

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>

* add more contextual logging

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>

* new lint yaml

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>

---------

Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>
2024-01-08 17:30:18 +01:00
Kubernetes Prow Robot
c8a718bb87
Merge pull request #121916 from carlory/issue-121892
E2E - Sig-autoscaling: Refactor the Autoscaling utils
2024-01-08 17:30:08 +01:00