Commit Graph

134204 Commits

Author SHA1 Message Date
Lubomir I. Ivanov
df44db129b kubeadm: remove the FG ControlPlaneKubeletLocalMode
The FG went GA in 1.35. It can be removed in 1.36.
2025-12-16 17:32:50 +01:00
Kubernetes Prow Robot
c180d6762d Merge pull request #135692 from pohly/local-up-containerd-config-fix
local-up-cluster.sh: support more recent containerd like 2.2
2025-12-12 20:33:45 -08:00
Patrick Ohly
f58f81d917 local-up-cluster.sh: support more recent containerd like 2.2
The kubekins image got updated from containerd 1.7 to 2.2, which broke
local-up-cluster.sh in the CI because more recent containerd uses single
quotation marks around strings instead of double quotation marks as before. The
search/replaced with sed no longer matched, causing containerd to fail mounting
overlayfs on the default /var/lib/containerd. We have to use the emptyDir host
mount under /docker-graph.

The fix is to relax the search term slightly so that it accepts both kinds of
quotation marks.
2025-12-10 09:17:03 +01:00
Kubernetes Release Robot
04d87a4b6e CHANGELOG: Update directory for v1.33.7 release 2025-12-10 01:15:24 +00:00
Kubernetes Release Robot
f887a29fe2 CHANGELOG: Update directory for v1.34.3 release 2025-12-10 01:13:50 +00:00
Kubernetes Release Robot
612122f1d7 CHANGELOG: Update directory for v1.35.0-rc.1 release 2025-12-09 13:56:23 +00:00
Kubernetes Prow Robot
b4980b8d6e Merge pull request #135635 from ahmedtd/fix-pcr-logging-nil-panic
kubelet: Fix nil panic in podcertificatemanager
2025-12-08 17:07:33 -08:00
Taahir Ahmed
8d4237fde8 kubelet: Fix nil panic in podcertificatemanager
If the the PCR that kubelet created gets deleted before it is issued, a
nil panic will be thrown while composing the error message.
2025-12-08 11:43:07 -08:00
Kubernetes Prow Robot
03e14cc943 Merge pull request #135271 from bzsuni/bz/etcd/update/v3.6.6
etcd: Update etcd to v3.6.6
2025-12-07 23:39:29 -08:00
bzsuni
2c811fdd3a etcd: Update etcd to v3.6.6
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2025-12-08 05:37:15 +00:00
Kubernetes Prow Robot
c70011cf10 Merge pull request #135620 from cpanato/update-rules
update publishing rules
2025-12-05 12:06:55 -08:00
Kubernetes Prow Robot
ff9971ec7f Merge pull request #135586 from pohly/dra-upgrade-downgrade-skew-range
DRA upgrade/downgrade: roll over only after -alpha.0
2025-12-05 09:22:56 -08:00
Carlos Panato
dede2886a8 update publishing rules
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-05 13:59:29 +01:00
Kubernetes Prow Robot
4e94e70dca Merge pull request #135609 from cpanato/update-go-125
Bump images and versions to go 1.25.5 and distroless iptables
2025-12-05 04:42:59 -08:00
Carlos Panato
eae2a1bd5f Bump images and versions to go 1.25.5 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-05 10:40:45 +01:00
Kubernetes Prow Robot
9293f9326d Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-fallback
downgrade reflector watchlist fallback log to V(4)
2025-12-04 14:42:56 -08:00
Kubernetes Prow Robot
04e8064bcc Merge pull request #135580 from serathius/client-go-transformer
Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
2025-12-04 12:55:04 -08:00
Kubernetes Prow Robot
de61f59895 Merge pull request #135536 from dims/bump-x/crypto-to-v0.45.0
Bump golang.org/x/crypto to v0.45.0
2025-12-04 12:54:56 -08:00
Kubernetes Prow Robot
2711e8cb53 Merge pull request #135499 from aojea/crazy_ipallocator
ipallocator: handle errors correctly
2025-12-04 10:21:02 -08:00
Lukasz Szaszkiewicz
3f42ca1401 downgrade reflector watchlist fallback log to V(4) 2025-12-04 19:05:46 +01:00
Patrick Ohly
91e221b047 DRA upgrade/downgrade: roll over only after -alpha.0
All version up to and including x.y.z-alpha.0 are treated as if we were
still the previous minor version x.(y-1). There are two reason for this:

- During code freeze around (at?) -rc.0, the master branch already
  identfies itself as the next release with -alpha.0. Without this
  special case, we would change the version skew testing from what
  has been tested and been known to work to something else, which
  can and at least once did break.

- Early in the next cycle the differences compared to the previous
  release are small, so it's more interesting to go back further.
2025-12-04 14:25:12 +01:00
Jordan Liggitt
91368adbb5 Use transformer in consistency checker 2025-12-04 14:17:22 +01:00
Valerian Roche
76da8d6de0 Add unit tests for Data Consistency Detector 2025-12-04 14:17:19 +01:00
Valerian Roche
88c20d46a4 [client-go #1415] Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO are implementing it
Signed-off-by: Valerian Roche <valerian.roche@datadoghq.com>
2025-12-04 13:46:08 +01:00
Kubernetes Prow Robot
615ac0d299 Merge pull request #135560 from lalitc375/map-debug
Fix MAP failure on objects with duplicate list items
2025-12-03 16:14:20 -08:00
Kubernetes Prow Robot
3025b0a7b4 Merge pull request #135553 from neoaggelos/neo/publishing-bot-rules-v1.35
add release-1.35 publishing bot rules
2025-12-03 05:40:21 -08:00
Angelos Kolaitis
c6fa10dbb7 add release-1.35 publishing bot rules 2025-12-03 14:33:16 +02:00
Kubernetes Prow Robot
579d4c6d06 Merge pull request #135568 from neoaggelos/neo/etcd-supported-versions
add skew -2 version in SupportedEtcdVersion
2025-12-03 04:10:26 -08:00
Angelos Kolaitis
03066850f6 remove TestEtcdSupportedVersionLength, no longer relevant
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:19:09 +02:00
Angelos Kolaitis
aa54ffa485 fix etcd versions after rotation
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:15:49 +02:00
Angelos Kolaitis
4a944d1a3f add skew -2 version in SupportedEtcdVersion
Signed-off-by: Angelos Kolaitis <neoaggelos@gmail.com>
2025-12-03 13:11:10 +02:00
Antonio Ojea
51f614a156 ipallocator: handle errors correctly
The ipallocator was blindly assuming that all errors are retryable, that
causes that the allocator tries to exhaust all the possibilities to
allocate an IP address.

If the error is not retryable this means the allocator will generate as
many API calls as existing available IPs are in the allocator, causing
CPU exhaustion since this requests are coming from inside the apiserver.

In addition to handle the error correctly, this patch also interpret the
error to return the right status code depending on the error type.

Co-authored-by: carlory <baofa.fan@daocloud.io>
2025-12-03 10:39:57 +00:00
Lalit Chauhan
de1b8e076a Fix MAP failure on objects with duplicate list items
When a Mutating Admission Policy (MAP) using ApplyConfiguration was applied to an existing object containing duplicate items in a list (e.g., duplicate environment variables), the operation would fail with a conversion error from Structured Merge Diff.

This change updates the `ApplyStructuredMergeDiff` function to use `typed.AllowDuplicates` when converting the `originalObject`. This allows MAP to process existing objects that may have technically invalid (duplicate) entries but are permitted by legacy validation.

New patches generated by the policy are still strictly validated and cannot introduce new duplicates.

Tests have been added to verify:
1. MAP can process an object with duplicate env vars.
2. MAP can modify an existing env var in an object with duplicates (which has the side effect of deduplicating the entry).
2025-12-02 23:27:55 +00:00
Kubernetes Release Robot
76b76c2d52 CHANGELOG: Update directory for v1.35.0-rc.0 release 2025-12-02 17:16:33 +00:00
Kubernetes Prow Robot
ec1bf8a4f3 Merge pull request #135545 from cpanato/update-rules
update publishing rules
v1.36.0-alpha.0
2025-12-02 05:18:25 -08:00
Carlos Panato
f8be8d320f drop rules for release-1.31 as it is EOL
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-02 13:07:18 +01:00
Carlos Panato
7e3e9b6a64 update publishing rules
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-12-02 13:03:45 +01:00
Kubernetes Prow Robot
cb689abdfb Merge pull request #135492 from cpanato/update-go-125
[go] Bump images and versions to go 1.25.4 and distroless iptables
2025-12-02 02:18:24 -08:00
Kubernetes Prow Robot
d4d5fd8f9b Merge pull request #135535 from Rajalakshmi-Girish/remove-test-watch-stream-sep
Remove TestWatchStreamSeparation from storage/cacher related tests
2025-12-01 23:10:26 -08:00
Davanum Srinivas
5302b929ae Bump golang.org/x/crypto to v0.45.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-12-01 14:11:01 -05:00
Rajalakshmi-Girish
fcdc4e2495 Remove TestWatchStreamSeparation from storage/cacher related tests 2025-12-01 10:25:10 -08:00
Kubernetes Prow Robot
9998041e0f Merge pull request #135278 from aman4433/KUBE-134468
Fix goroutine leak in CRDFinalizer
2025-11-30 21:04:23 -08:00
Carlos Panato
3661554f87 Bump images and versions to go 1.25.4 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2025-11-28 10:21:55 +01:00
Kubernetes Prow Robot
61c629cc57 Merge pull request #135426 from kfess/update-relaxedservicenamevalidation
Fix: Check `defaultBackend` in `allowRelaxedServiceNameValidation`
2025-11-28 00:00:22 -08:00
Adrian Moisey
dae1dbc1ff KEP-5311 - Revert RelaxedServiceNameValidation promote to beta 2025-11-27 20:52:35 +09:00
Kubernetes Prow Robot
4bed36e03e Merge pull request #135445 from mortent/FixExtendedResourcesIntegrationTest
DRA: Fix flaky integration test
2025-11-26 12:46:21 -08:00
Kubernetes Prow Robot
1043513f30 Merge pull request #135461 from liggitt/deflake-pod-certificates
Run a unique signer name for each pod certificate tests to avoid cross-test flaking
2025-11-26 11:50:24 -08:00
Jordan Liggitt
6bf802807b Make unique signerName per pod certificate test 2025-11-26 12:19:56 -05:00
Kubernetes Prow Robot
4c04786f74 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
e2e/storage: deflake CSI Mock volume expansion quota validation
2025-11-26 09:10:36 -08:00
Dev1622
d80e73c0a9 cleanup: removed uncached client plumbing, keeping the sequencing fix for quota validation 2025-11-26 19:56:42 +05:30