Jan Safranek
df88b1a771
Add all RBAC rules for the SELinux controller
...
The SELinuxWarningController does not necessarily need permissions to read
the objects, because it gets them through a shared informer instantiated by
KCM itself, but let's list the permissions for completeness.
2024-11-06 13:06:52 +01:00
Jan Safranek
52b47ea4de
Don't create a new controller context
2024-11-06 12:29:56 +01:00
Jan Safranek
4b99a342f4
Move feature gate to ControllerDescriptor
2024-11-06 12:29:56 +01:00
Jan Safranek
8875f4daf0
Describe what the input list of SELinux options is
2024-11-06 11:16:06 +01:00
Jan Safranek
8791efc732
Update property name in metrics
...
selinux_volume_conflict should not have space in its label value - it's
harder to query for that value. Use SELinuxLabel as both human friendly (in
an event) and label value.
2024-11-06 11:16:06 +01:00
Jan Safranek
cf7a2c7d35
Add a comment why PVC indexer is used
2024-11-06 11:16:06 +01:00
Jan Safranek
3ff3ed4b6d
Add comment how GetPodsForCSIDriver is useful
2024-11-06 11:16:06 +01:00
Jan Safranek
6eab8a8691
Use RWLock for the controller cache
...
It could help a tiny bit with parallel operations.
2024-11-06 11:16:06 +01:00
Jan Safranek
e6807a8e4f
Use _ for unused parameters
...
Sometimes the logger is not used. This fixes some linter warnings.
2024-11-06 11:16:06 +01:00
Jan Safranek
dfb88095b0
Rename label to seLinuxLabel
...
In various parameters, variables and fields. To make the name more
obvious.
2024-11-06 11:16:06 +01:00
Jan Safranek
e438bc0561
Rework event recorder startup
...
* Remove Controller.recorder field, there already is eventRecorder.
* Start the event broadcaster in Run(), to save a bit of CPU and memory
when something initializes the controller, but does not Run() it.
* Log events with log level 3, as the other contollers usually do.
* Use StartStructuredLogging(), which looks fancier than StartLogging
2024-11-06 11:16:06 +01:00
Jan Safranek
da2d9fa16e
Fix golint errors
...
Revealed by the new SELinux warning controller, but not related to it.
2024-11-06 11:16:05 +01:00
Jan Safranek
aa8872d7a3
Add SELinux warning controller
2024-11-06 11:16:02 +01:00
Jan Safranek
0d71dc677e
Refactor CreateVolumeSpec
...
Rename old CreateVolumeSpec to CreateVolumeSpecWithNodeMigration that
extracts volume.Spec with node specific CSI migration.
Add CreateVolumeSpec that does the same, only without evaluating node CSI
migration.
2024-11-06 11:15:31 +01:00
Kubernetes Prow Robot
f451aec237
Merge pull request #128296 from AnishShah/kubectl-resize
...
[FG:InPlacePodVerticalScaling] Remove restrictions on subresource flag in kubectl commands
2024-11-06 10:01:45 +00:00
Kubernetes Prow Robot
833ee8502e
Merge pull request #128194 from AnishShah/extended-resource
...
test: refactor logic to add/remove extended resources
2024-11-06 10:01:37 +00:00
Kubernetes Prow Robot
0fad78930f
Merge pull request #127904 from towca/jtuznik/dra-autoscaling
...
DRA: allow Cluster Autoscaler to integrate with DRA scheduler plugin
2024-11-06 10:01:29 +00:00
Kubernetes Prow Robot
ab4b869b52
Merge pull request #128590 from benluddy/protobuf-storage-integration-test
...
Add integration test for per-resource storage encoding.
2024-11-06 08:51:44 +00:00
Kubernetes Prow Robot
89c1925e23
Merge pull request #128582 from pohly/dra-resourceslice-unit-test-fix
...
DRA resource slice controller: fix unit test flake
2024-11-06 08:51:36 +00:00
Kubernetes Prow Robot
3dcad5f0db
Merge pull request #128532 from neolit123/1.32-handle-custom-addreses-comp-readyz
...
kubeadm: use advertise address for WaitForAllControlPlaneComponents
2024-11-06 08:51:29 +00:00
Anish Shah
e1ca63489f
kubectl: remove subresource restrictions from all commands
...
Removing this restrictions will allow us to use these commands with the
new resize subresource.
2024-11-05 23:06:40 -08:00
Kubernetes Prow Robot
aafcf4e932
Merge pull request #128453 from tallclair/cacheless-pleg
...
Cleanup unused cacheless PLEG code
2024-11-06 06:59:35 +00:00
Kubernetes Prow Robot
648717cc74
Merge pull request #128266 from AnishShah/resize-subresource
...
[FG:InPlacePodVerticalScaling] Introduce /resize subresource to request pod resource resizing
2024-11-06 06:59:29 +00:00
Kubernetes Prow Robot
b631dae569
Merge pull request #128584 from thockin/compartmentalize_spew
...
Compartmentalize spew more
2024-11-06 04:19:51 +00:00
Kubernetes Prow Robot
a50b4e52a9
Merge pull request #128553 from thockin/master
...
Validation: merge TooLong and TooLongMaxLen
2024-11-06 04:19:43 +00:00
Kubernetes Prow Robot
5e0b818ff9
Merge pull request #128551 from tallclair/allocated-checkpoint
...
[FG:InPlacePodVerticalScaling] Don't checkpoint ResizeStatus
2024-11-06 04:19:36 +00:00
Kubernetes Prow Robot
bf75546494
Merge pull request #128432 from zhifei92/integrating-health-check
...
Integrate device plugin registration gRPC server health checks.
2024-11-06 04:19:29 +00:00
Ben Luddy
006146f58f
Add integration test for per-resource storage encoding.
2024-11-05 22:38:46 -05:00
Kubernetes Prow Robot
ce81cc70a6
Merge pull request #128403 from carlory/fix-128385
...
Fix failing test: PodRejectionStatus Kubelet should reject pod when the node didn't have enough resource
2024-11-06 02:29:36 +00:00
Kubernetes Prow Robot
8c5472ce66
Merge pull request #128189 from zylxjtu/bug
...
Fix the incorrect metrics setting/naming in nodeshutdown manager
2024-11-06 02:29:29 +00:00
Anish Shah
bfb0b83d45
update codegen
2024-11-06 01:43:50 +00:00
Anish Shah
e55bf09ca5
Fix unit tests
2024-11-06 01:33:16 +00:00
Anish Shah
5b5e4a87c3
apply feedback
2024-11-06 01:33:16 +00:00
Anish Shah
332d794559
remove redundant validation check for pod resize
2024-11-06 01:33:15 +00:00
Anish Shah
832d7f7dc2
apply feedback
2024-11-06 01:33:15 +00:00
Anish Shah
4c69bf2496
implement GetResetFieldsFilter
...
GetResetFieldsFilter returns a set of fields filter reset
by pod resize strategy. This is needed to make server-side apply
work correctly.
2024-11-06 01:33:15 +00:00
Anish Shah
0a80c5ecb7
better variable names
2024-11-06 01:33:15 +00:00
Anish Shah
79f45bce19
client-go: rename Resize to UpdateResize
2024-11-06 01:33:15 +00:00
Anish Shah
3b91edb660
unit tests to ensure pod metadata cannot be updated during resize.
2024-11-06 01:33:15 +00:00
Anish Shah
7ac302b47a
test: cleanup validation tests
2024-11-06 01:33:15 +00:00
Anish Shah
dc3c4ed559
pod resize support in LimitRanger admission plugin
2024-11-06 01:33:15 +00:00
Anish Shah
1b98fe6079
support for resize subresource in ResourceQuota admission.
2024-11-06 01:33:15 +00:00
Anish Shah
277edcdb48
update codegen
2024-11-06 01:33:15 +00:00
Anish Shah
7e3ae1060f
integration: RBAC tests for /resize request
...
The test confirms that the subject can successfully
resize the Pod resources but not the entire pod.
2024-11-06 01:33:14 +00:00
Anish Shah
ce0f4597d3
fix error message for pod resize validation failure
2024-11-06 01:33:14 +00:00
Anish Shah
07ca0b09bb
refactor logic to override pod fields
2024-11-06 01:33:14 +00:00
Anish Shah
878c54fc9a
test: add unit tests to verify the .status.resize field
2024-11-06 01:33:14 +00:00
Anish Shah
f1093962b6
integration tests for pod resize
2024-11-06 01:33:14 +00:00
Anish Shah
33a3d7578b
e2e: Use resize subresource in e2e tests
2024-11-06 01:33:14 +00:00
Anish Shah
d9a1d861f7
api: generate client code for resize subresource
2024-11-06 01:33:14 +00:00