github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-17 23:57:49 +00:00
Code Issues Projects Releases Wiki Activity
125,959 Commits 42 Branches 8,000 Tags 1.3 GiB
dcafd93b68
Commit Graph

125959 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Anish Shah
dcafd93b68 kubelet: try registering mirror pods as soon as node is registered. 
Mirror pods for static pods may not be created immediately during node startup
because either the node is not registered or node informer is not synced.
They will be created eventually when static pods are resynced (every 1-1.5 minutes).

However, during this delay of 1-1.5 mins, kube-scheduler might overcommit resources
to the node and eventually cause kubelet to reject pods with
OutOfCPU/OutOfMemory/OutOfPods error.

To ensure kube-scheduler is aware of static pod resource usage faster,
mirror pods are created as soon as the node registers.
 2024-11-05 00:56:21 -08:00
Kubernetes Prow Robot
79cca2786e
Merge pull request #128172 from liggitt/3221-ga 
KEP-3221: Promote StructuredAuthorizationConfiguration to GA
 2024-10-18 20:21:09 +01:00
Kubernetes Prow Robot
bc893fc7b1
Merge pull request #128134 from siyuanfoundation/script 
add instructions into verify-featuregates script.
 2024-10-18 20:21:03 +01:00
Kubernetes Prow Robot
e8b59afec6
Merge pull request #128180 from pacoxu/node-validation 
e2e_node: print system validation warnings
 2024-10-18 19:09:10 +01:00
Kubernetes Prow Robot
7429566b07
Merge pull request #127918 from saschagrunert/backoff-status 
Use image pull error in `message` during back-off
 2024-10-18 19:09:03 +01:00
Siyuan Zhang
a2bf91e9cf add instructions into verify-featuregates script. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2024-10-18 09:53:27 -07:00
Kubernetes Release Robot
b0d0a1557d CHANGELOG: Update directory for v1.32.0-alpha.2 release 2024-10-18 16:40:13 +00:00
Kubernetes Prow Robot
7adcad3138
Merge pull request #128169 from liggitt/4193-ga 
KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable
 2024-10-18 17:39:11 +01:00
Kubernetes Prow Robot
d7bd728403
Merge pull request #128168 from liggitt/4601-beta 
KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta
 2024-10-18 17:39:03 +01:00
Kubernetes Prow Robot
0daa75b972
Merge pull request #127797 from sanposhiho/cleanup-event-list 
cleanup: remove event list
 2024-10-18 15:31:04 +01:00
Kubernetes Prow Robot
de7e1e7b28
Merge pull request #128181 from SataQiu/clean-20241018 
kubeadm: using options.Force constant instead of 'force' string
 2024-10-18 12:19:04 +01:00
SataQiu
a0f8c51a75 kubeadm: using options.Force constant instead of 'force' string 2024-10-18 18:12:14 +08:00
Paco Xu
6877a2bfb8 e2e_node: print system validation warnings 2024-10-18 17:31:39 +08:00
Kubernetes Prow Robot
85ff7e75a2
Merge pull request #128143 from AnishShah/pod-resize-refactor 
[FG:InPlacePodVerticalScaling]  Refactor in-place pod resize e2e tests
 2024-10-18 08:11:04 +01:00
Sascha Grunert
0fc4b740f8
Use image pull error in message during back-off 
The container status waiting reason toggles between `ImagePullBackOff`
and the actual pull error, resulting in a bad user experience for
consumers like kubectl. For example, the output of
`kubectl get pods` does return either:

```
NAME   READY   STATUS                      RESTARTS   AGE
pod    0/1     SignatureValidationFailed   0          10s
```

or

```
NAME   READY   STATUS             RESTARTS   AGE
pod    0/1     ImagePullBackOff   0          18s
```

depending in which state the image pull is. We now improve that behavior
by preserving the actual error in the `message` of the `waiting` state
from the pull during back-off:

```json
{
  "waiting": {
    "message": "Back-off pulling image \"quay.io/crio/unsigned:latest\": SignatureValidationFailed: image pull failed for quay.io/crio/unsigned:latest because the signature validation failed: Source
 image rejected: A signature was required, but no signature exists",
    "reason": "ImagePullBackOff"
  }
}
```

While the `SignatureValidationFailed` value inherits from the previous
known state:

```json
{
  "waiting": {
    "message": "image pull failed for quay.io/crio/unsigned:latest because the signature validation failed: Source image rejected: A signature was required, but no signature exists",
    "reason": "SignatureValidationFailed"
  }
}
```

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2024-10-18 08:47:37 +02:00
Kubernetes Prow Robot
98e5a701cb
Merge pull request #128175 from pacoxu/revert-128149-1.32-update-system-validators-to-v1.9.0 
Revert "vendor: update system-validators to v1.9.0"
 2024-10-18 06:55:04 +01:00
Kubernetes Prow Robot
a8fc7ae761
Merge pull request #128165 from liggitt/prune-self-require 
Drop self-referencing replace directives
 2024-10-18 03:53:11 +01:00
Kubernetes Prow Robot
f5ae0413ca
Merge pull request #126347 from vinayakankugoyal/kep2862impl 
KEP-2862: Fine-grained Kubelet API Authorization
 2024-10-18 03:53:04 +01:00
Paco Xu
93348753e2
Revert "vendor: update system-validators to v1.9.0" 2024-10-18 10:12:36 +08:00
Jordan Liggitt
ad808e609a
KEP-3221: Promote StructuredAuthorizationConfiguration to GA 2024-10-17 21:53:45 -04:00
Kubernetes Prow Robot
ded7ad554e
Merge pull request #125513 from mauri870/hotfix/grpc-handle-err 
kubelet/cm/devicemanager: log grpc Serve error
 2024-10-18 02:49:03 +01:00
Jordan Liggitt
0771f601e1
KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable 2024-10-17 21:25:09 -04:00
Kensei Nakada
83f9e4b6df cleanup: remove event list 2024-10-18 11:10:10 +10:00
Jordan Liggitt
9caca73126
KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta 2024-10-17 21:02:55 -04:00
Anish Shah
3e6df4a871 test: remove container runtime check and fix other nits 2024-10-17 17:14:04 -07:00
Kubernetes Prow Robot
b1b4e5d397
Merge pull request #128003 from pohly/dra-classic-dra-removal 
DRA: remove "classic DRA"
 2024-10-18 00:55:17 +01:00
Kubernetes Prow Robot
90ee68948d
Merge pull request #127504 from sttts/sttts-authz-cel-compiler-once 
apiserver/authconfig: make CEL compiler shareable
 2024-10-18 00:55:10 +01:00
Kubernetes Prow Robot
48f36acc7a
Merge pull request #125337 from aojea/document_node_addresses 
kubelet --node-ip flag using  unspecified IPs and external cloud provider node addresses behavior
 2024-10-18 00:55:03 +01:00
Kubernetes Prow Robot
bd00406951
Merge pull request #128144 from cheftako/updateANP 
Bump konnectivity-client to v0.31.0
 2024-10-17 23:15:10 +01:00
Kubernetes Prow Robot
42b388b068
Merge pull request #128120 from aojea/celmetrics 
use same name as the folder for the package
 2024-10-17 23:15:03 +01:00
Dr. Stefan Schimanski
c44fc28087
apiserver/validation: fix some sets.NewString deprecations 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-10-17 22:56:20 +02:00
Dr. Stefan Schimanski
4024390d8c
apiserver/authconfig: wire CEL compiler through lower layers to allow sharing 
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
 2024-10-17 22:56:20 +02:00
Vinayak Goyal
b1f290d444 KEP-2862: Fine-grained Kubelet API Authorization 
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
 2024-10-17 20:53:27 +00:00
Jordan Liggitt
3be1109829
Drop self-referencing replace directives 2024-10-17 15:51:15 -04:00
Kubernetes Prow Robot
b7d1766c18
Merge pull request #128158 from pohly/dra-controller-logging 
DRA resource claim controller: improve log messages
 2024-10-17 20:31:11 +01:00
Kubernetes Prow Robot
141951cd6b
Merge pull request #126420 from hoskeri/fix-container-succeeded-check-status 
kuberuntime_manager: fix container success check.
 2024-10-17 20:31:04 +01:00
Kubernetes Prow Robot
632ed16e00
Merge pull request #128153 from dom4ha/sch 
Add UnschedulableAsync test in scheduler_perf to monitor impact of unschedulable pods on scheduler performance
 2024-10-17 19:27:30 +01:00
Kubernetes Prow Robot
1b20b087fc
Merge pull request #128074 from pacoxu/fix-quota_lsci-e2e 
storage fsquota monitoring pod should be user namespaced
 2024-10-17 19:27:21 +01:00
Kubernetes Prow Robot
51f76febd7
Merge pull request #127402 from mimowo/managed-by-beta-update 
Graduate JobManagedBy to Beta in 1.32
 2024-10-17 19:27:14 +01:00
Kubernetes Prow Robot
c5a85abecb
Merge pull request #122867 from oilbeater/patch-1 
fix broken links
 2024-10-17 19:27:06 +01:00
Kubernetes Prow Robot
527d937b23
Merge pull request #128100 from yongruilin/fix-allow-label 
refactor: Defer metrics label value allow list initialization
 2024-10-17 18:23:18 +01:00
Kubernetes Prow Robot
631fa55cab
Merge pull request #127973 from yongruilin/metrics-logging 
fix: Clarify allowed format for metric label overrides
 2024-10-17 18:23:11 +01:00
Robbie Cronin
cdbfbde4aa
Add ut coverage for capabilities.Setup (#125395) 
* Add ut coverage for capabilities.Setup

* Update pkg/capabilities/capabilities_test.go

Co-authored-by: Ed Bartosh <eduard.bartosh@intel.com>

* Add ut coverage for capabilities.Setup

Signed-off-by: robert-cronin <robert.owen.cronin@gmail.com>

---------

Signed-off-by: robert-cronin <robert.owen.cronin@gmail.com>
Co-authored-by: Ed Bartosh <eduard.bartosh@intel.com>
 2024-10-17 18:23:03 +01:00
Walter Fender
f72c374187 Bump konnectivity-client to v0.30.0 
Bump konnectivity network proxy to v0.30.0.
Lease-based server counting logic for agent and lease controller for ANP server

reran hack/update-vendor.sh
 2024-10-17 10:00:38 -07:00
Patrick Ohly
d572df2493 DRA resource claim controller: improve log messages 
Some code paths didn't log anything. One log message about "claim got deleted"
was incorrect.
 2024-10-17 18:28:55 +02:00
Kubernetes Prow Robot
4cf9bff9eb
Merge pull request #128145 from bzsuni/bz/npd/update/0.8.20 
Update npd from v0.8.19 to v0.8.20
 2024-10-17 17:17:27 +01:00
Kubernetes Prow Robot
c6ad6fa951
Merge pull request #125477 from my-git9/namespaceformat 
Modify some error words
 2024-10-17 17:17:17 +01:00
Kubernetes Prow Robot
e6099268e3
Merge pull request #125080 from TommyStarK/unit-tests/kubelet-apis-config-validation 
kubelet/apis/config/validation: improve unit test coverage
 2024-10-17 17:17:10 +01:00
Kubernetes Prow Robot
f5b92902a3
Merge pull request #124434 from tu1h/fix-compute-resources-link 
API docs: point outdate link to current link
 2024-10-17 17:17:03 +01:00
dom4ha
b7f55a37a0 Bring back the smallest integration test 2024-10-17 15:41:36 +00:00