Commit Graph

134908 Commits

Author SHA1 Message Date
Lukasz Szaszkiewicz
78fcb4475f client-go/metadata/metadatainformer: wrap the LW with WatchList semantics 2025-10-20 12:11:01 +02:00
Lubomir I. Ivanov
0613fdeccb kubeadm: add missing cluster-info context validation
When retrieving the cluster-info CM, ensure the cluster pointed
out by the current context in the kubeconfig is validated.

Add unit test for the above.

Make the function GetClusterFromKubeConfig() to return various
errors. Handle the errors on call sites. Add unit tests
for the update.

The above changes prevent panics when the users has manually
edited and malformed the kubeconfig in the cluster-info CM.
2025-10-20 11:58:58 +02:00
Aaron Prindle
47e9686b4d feat(validation-gen): add +k8s:format=k8s-long-name-caseless declarative validation for DeviceRequestAllocationResult.Driver 2025-10-19 23:55:16 +00:00
Aaron Prindle
0cf9102763 feat: add +k8s:enum declarative validation to ResourceClaim DeviceTolerationOperator and DeviceTaintEffect 2025-10-19 22:36:15 +00:00
Kubernetes Prow Robot
e34f01402f Merge pull request #134703 from pohly/e2e-fix-test-name-uniqueness
e2e: find and fix reuse of test names
2025-10-18 15:38:07 -07:00
GrigoriyMikhalkin
4ba0891cf4 Fixing data race in etcd watcher 2025-10-18 15:42:51 +02:00
Adrian Moisey
44a268e272 KEP: 5495 - Add deprecation warning for ipvs 2025-10-18 15:11:58 +02:00
Adrian Moisey
7742bd0b07 Refactor 'Services should implement service.kubernetes.io/headless' test 2025-10-18 15:05:45 +02:00
Thomas Hein
d7b83193c4 docs: quote PowerShell completion script path ($HOME may contain spaces) 2025-10-18 04:31:42 -05:00
Thomas Hein
0f6bc57d11 docs: dot-source kubectl completion script in PowerShell profile 2025-10-18 04:19:46 -05:00
eun2ce
d07b769418 Replace feature label with WithFeatureGate for KubeletPSI test
- Remove feature.KubeletPSI label as it may be redundant for categorization
- Add framework.WithFeatureGate(features.KubeletPSI) for proper feature gate checking
- Remove redundant utilfeature.DefaultFeatureGate.Enabled check in BeforeEach

This addresses the cleanup goal in issue #134172 to replace feature labels
with feature gates where appropriate.
2025-10-18 15:45:04 +09:00
Kubernetes Prow Robot
b067e45290 Merge pull request #134695 from kannon92/procmount-usernamespace
usernamespace and procmount are tightly coupled. Disable them together
2025-10-17 21:56:40 -07:00
Kubernetes Prow Robot
d536e31ce2 Merge pull request #134692 from joshjms/bump-etcd-v3.5.23
etcd: Bump supported etcd version to v3.5.23 for release v1.31, v1.32, and v1.33
2025-10-17 19:00:47 -07:00
Kubernetes Prow Robot
1f34c16772 Merge pull request #134690 from haircommander/gc-conformance
test: move kubelet GC tests to node conformance
2025-10-17 19:00:40 -07:00
Kubernetes Prow Robot
76f5a1c8c2 Merge pull request #134635 from vivzbansal/execprobe1
Locked the (generally available) feature gate `ExecProbeTimeout` to true.
2025-10-17 18:06:40 -07:00
bin
786f4e9c20 fix validateFunctionShape nil pointer if RequestedToCapacityRatio not set
Signed-off-by: bin <bin.pan@daocloud.io>
2025-10-18 07:59:26 +08:00
Kubernetes Prow Robot
13eb5a92cc Merge pull request #134443 from lalitc375/optional-pointer
Add DV list keys on ResourceClaimStatus.Devices
2025-10-17 16:38:41 -07:00
Lalit Chauhan
2072acb3ba Add listType=map and listMapekeys on ResourceClaimStatus.Devices 2025-10-17 22:48:52 +00:00
Lalit Chauhan
4bd3d17e4a Allow pointers for list keys 2025-10-17 22:47:33 +00:00
Kubernetes Prow Robot
2158dd67e9 Merge pull request #134630 from lalitc375/k8s-enum
feat: add enum validation for AllocationConfigSource
2025-10-17 15:40:51 -07:00
Kubernetes Prow Robot
9dcfb3d04b Merge pull request #133373 from AkihiroSuda/carry-133278
[Carry 133278] kubelet: Don't ignore idsPerPod config #133278
2025-10-17 15:40:43 -07:00
Kevin Hannon
03c7962d17 usernamespace and procmount are tightly coupled. Disable them together 2025-10-17 16:40:45 -04:00
Kubernetes Prow Robot
1b3cb5ca32 Merge pull request #134575 from lalitc375/k8s-long-name
Use DV for long name validation of firstAvailable.deviceClassName
2025-10-17 13:28:41 -07:00
Lalit Chauhan
1f803aa314 Use DV for long name validation of spec.devices.requests[%d].firstAvailable[%d].deviceClassName 2025-10-17 19:15:34 +00:00
Kubernetes Prow Robot
4bb072512e Merge pull request #134446 from aaron-prindle/dv-device-allocation-mode-enum-migration
feat: add +k8s:enum declarative validation to ResourceClaim DeviceAllocationMode
2025-10-17 11:54:41 -07:00
Vivek Bansal
af17392630 Setting the default feature-gate ExecProbeTimeout value to TRUE 2025-10-17 18:38:05 +00:00
Patrick Ohly
d0a2a0d22e e2e: find and fix reuse of test names
This reports and fixes for test/e2e:

    ERROR: E2E suite initialization was faulty, these errors must be fixed:
    ERROR: apimachinery/mutatingadmissionpolicy.go:184: full test name is not unique: "[sig-api-machinery] MutatingAdmissionPolicy [Privileged:ClusterAdmin] [Feature:MutatingAdmissionPolicy] [FeatureGate:MutatingAdmissionPolicy] [Beta] [Feature:OffByDefault] should support MutatingAdmissionPolicy API operations" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e/apimachinery/mutatingadmissionpolicy.go:184, /nvme/gopath/src/k8s.io/kubernetes/test/e2e/apimachinery/mutatingadmissionpolicy.go:606)
    ERROR: apimachinery/mutatingadmissionpolicy.go:412: full test name is not unique: "[sig-api-machinery] MutatingAdmissionPolicy [Privileged:ClusterAdmin] [Feature:MutatingAdmissionPolicy] [FeatureGate:MutatingAdmissionPolicy] [Beta] [Feature:OffByDefault] should support MutatingAdmissionPolicyBinding API operations" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e/apimachinery/mutatingadmissionpolicy.go:412, /nvme/gopath/src/k8s.io/kubernetes/test/e2e/apimachinery/mutatingadmissionpolicy.go:834)
    ERROR: common/node/pod_level_resources.go:250: full test name is not unique: "[sig-node] Pod Level Resources [Serial] [Feature:PodLevelResources] [FeatureGate:PodLevelResources] [Beta] Guaranteed QoS pod with container resources" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e/common/node/pod_level_resources.go:250 (2x))
    ERROR: dra/dra.go:1899: full test name is not unique: "[sig-node] [DRA] kubelet [Feature:DynamicResourceAllocation] [FeatureGate:DRAConsumableCapacity] [Alpha] [Feature:OffByDefault] [FeatureGate:DynamicResourceAllocation] must allow multiple allocations and consume capacity [KubeletMinVersion:1.34]" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e/dra/dra.go:1899 (2x))
    ERROR: storage/testsuites/volume_group_snapshottable.go:173: full test name is not unique: "[sig-storage] CSI Volumes [Driver: csi-hostpath] [Testpattern:  (delete policy)] volumegroupsnapshottable [Feature:volumegroupsnapshot] VolumeGroupSnapshottable  should create snapshots for multiple volumes in a pod" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e/storage/testsuites/volume_group_snapshottable.go:173 (2x))
    ERROR: storage/testsuites/volume_group_snapshottable.go:173: full test name is not unique: "[sig-storage] CSI Volumes [Driver: pd.csi.storage.gke.io] [Serial] [Testpattern:  (delete policy)] volumegroupsnapshottable [Feature:volumegroupsnapshot] VolumeGroupSnapshottable  should create snapshots for multiple volumes in a pod" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e/storage/testsuites/volume_group_snapshottable.go:173 (2x))

And for test/e2e_node:

    ERROR: cpu_manager_test.go:1622: full test name is not unique: "[sig-node] CPU Manager [Serial] [Feature:CPUManager] when checking the CFS quota management should disable for guaranteed pod with exclusive CPUs assigned" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e_node/cpu_manager_test.go:1622, /nvme/gopath/src/k8s.io/kubernetes/test/e2e_node/cpu_manager_test.go:1642)
    ERROR: eviction_test.go:800: full test name is not unique: "[sig-node] LocalStorageCapacityIsolationFSQuotaMonitoring [Slow] [Serial] [Disruptive] [Feature:LocalStorageCapacityIsolationQuota] [Feature:LSCIQuotaMonitoring] [Feature:UserNamespacesSupport] when we run containers that should cause use quotas for LSCI monitoring (quotas enabled: true)  should eventually evict all of the correct pods" (/nvme/gopath/src/k8s.io/kubernetes/test/e2e_node/eviction_test.go:800 (2x))
2025-10-17 20:19:52 +02:00
joshjms
51fc3c744a bump etcd to v3.5.23 for release v1.31, v1.32, and v1.33
Signed-off-by: joshjms <joshjms1607@gmail.com>
2025-10-18 02:10:21 +08:00
Sergey Kanzhelev
9864c29861 Lock SystemdWatchdog feature gate 2025-10-17 17:50:41 +00:00
pranshul gupta
6ae916a577 rbac: Remove PolicyRule.Verbs from declarative validation migration 2025-10-17 23:18:49 +05:30
pranshul gupta
2ea3d3815c feat(validation-gen): Add declarative validation support for rolebinding(v1,v1alpha1,v1beta1) 2025-10-17 23:18:49 +05:30
pranshul gupta
4e660cc05b feat(validation-gen): Add declarative validation support for ClusterRole(v1,v1alpha1,v1beta1) 2025-10-17 23:11:26 +05:30
Peter Hunt
70a8babb09 test: move kubelet GC tests to node conformance
and drop the feature.GarbageCollect, as it's not needed anymore

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2025-10-17 13:32:46 -04:00
Kubernetes Prow Robot
a1af295559 Merge pull request #134687 from cpanato/update-rules
update publishing rules
2025-10-17 09:50:41 -07:00
Carlos Panato
41cb2378b4 update publishing rules
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-10-17 17:59:30 +02:00
Konrad Kaim
f23f716af4 drop support for policyv1beta1.PodDisruptionBudget 2025-10-17 15:41:17 +00:00
Lukasz Szaszkiewicz
5594d94e67 ./hack/update-codegen.sh 2025-10-17 14:35:36 +02:00
Lukasz Szaszkiewicz
f076736206 code-generator/cmd/informer-gen/generators: wrap the LW with WatchList semantics 2025-10-17 14:30:49 +02:00
Kubernetes Prow Robot
e64ed3d8ba Merge pull request #134641 from p0lyn0mial/upstream-watchlist-unsupported-wl-semantics-reflector
client-go/tools/cache/reflector: supports watchlist.DoesClientNotSupportWatchListSemantics
2025-10-17 01:50:41 -07:00
Kubernetes Prow Robot
f794aa12d7 Merge pull request #134663 from p0lyn0mial/upstream-watchlist-unsupported-wl-semantics-typed
client-go/typed/fake: expose IsWatchListSemanticsUnSupported
2025-10-17 00:58:42 -07:00
Goend
778ff5d5ab update after review 2025-10-17 15:29:05 +08:00
Lukasz Szaszkiewicz
d15b289334 ./hack/update-codegen.sh 2025-10-17 09:07:46 +02:00
Lukasz Szaszkiewicz
4d9fcfeeca client-go/kubernetes_test/fake_client_test: TestDoesClientSupportWatchListSemantics 2025-10-17 09:07:40 +02:00
Kubernetes Prow Robot
5c7325dbda Merge pull request #134407 from natasha41575/ippr-tests
[InPlacePodVerticalScaling] add e2e coverage for pod resize 'read' and 'replace' endpoints
2025-10-16 16:54:39 -07:00
Aaron Prindle
2fd727bf92 address feedback - comment on declarative defaulting gap w/ DV 2025-10-16 22:47:22 +00:00
Kubernetes Prow Robot
cf991024a2 Merge pull request #134656 from BenTheElder/cleanup-rsync
additional build simplification, drop rsync requirement
2025-10-16 14:32:47 -07:00
Kubernetes Prow Robot
c699725502 Merge pull request #134646 from p0lyn0mial/upstream-watchlist-unsupported-wl-semantics-meta
client-go/metadata/fake: expose IsWatchListSemanticsUnSupported
2025-10-16 14:32:40 -07:00
Lukasz Szaszkiewicz
c284201b71 generators/fake/generator_fake_for_clientset: intro IsWatchListSemanticsUnSupported 2025-10-16 22:31:52 +02:00
Lukasz Szaszkiewicz
4bb2bd0532 client-go/tools/cache/reflector: supports watchlist.DoesClientNotSupportWatchListSemantics 2025-10-16 22:21:25 +02:00
Kubernetes Prow Robot
2593cca82a Merge pull request #134659 from BenTheElder/ensure-executable-images
ensure permissions are consistent on dockerized binaries
2025-10-16 13:02:48 -07:00