Commit Graph

134864 Commits

Author SHA1 Message Date
Patrick Ohly
e058fbdd99 golangci-lint: enforce control over ginkgo.ReportBeforeSuite/ReportAfterSuite
https://git.k8s.io/enhancements/keps/sig-testing/5468-invariant-testing
introduced a mechanism for tests which hook into the test suite run via
ginkgo.ReportAfterSuite. Usage was limited to code in test/e2e/invariants with
stricter reviews.

However, this was not enforced mechanically. With forbidigo we can be sure that
nothing slips through.

ginkgo.ReportBeforeSuite has similar restrictions.
2026-01-16 13:32:05 +01:00
Kubernetes Prow Robot
81383b249f Merge pull request #135164 from helayoty/helayoty/workload-declarative-validation
KEP-4671: Add Declarative Validation to Workload API
2026-01-16 12:13:11 +05:30
Kubernetes Prow Robot
1d45fecf9a Merge pull request #135685 from chaochn47/master-fix-audit-log
Bugfix: calculate request latency properly in audit log filter
2026-01-16 09:25:12 +05:30
Kubernetes Prow Robot
e777bba0b2 Merge pull request #136243 from dims/mounttest-tmpfs-detection
Add tmpfs detection to mounttest and unit tests
2026-01-16 07:07:11 +05:30
Kubernetes Prow Robot
c6ba23521c Merge pull request #136257 from BenTheElder/go125.6
upgrade core binaries to go to 1.25.6 for CVE fixes
2026-01-16 05:53:11 +05:30
Kubernetes Prow Robot
a9af774b23 Merge pull request #136259 from BenTheElder/rip-logicalhan
emeritus logicalhan, rest in peace
2026-01-16 05:01:27 +05:30
Kubernetes Prow Robot
7de6160456 Merge pull request #136253 from lalitc375/testing-utils
Make sure errors present in declarative validation test files are DV …
2026-01-16 05:01:19 +05:30
Kubernetes Prow Robot
b82b03b924 Merge pull request #136008 from michaelasp/atomicResync
Add atomic resync operation for real fifo
2026-01-16 05:01:11 +05:30
Heba Elayoty
5d7208e48f Add udpate and immutable tags on Workload API
Co-Author: Lalit Chauhan <lalitc375@gmail.com>

Signed-off-by: Heba Elayoty <heelayot@microsoft.com>
2026-01-15 14:26:40 -08:00
Chao Chen
f82471dee9 Bugfix: calculate request latency properly in audit log filter
Signed-off-by: Chao Chen <chaochn@amazon.com>
2026-01-15 22:07:25 +00:00
Kubernetes Prow Robot
f4f3e5f92c Merge pull request #136247 from MikeZappa87/mzappa/deletedeadcode
Delete mistakenly added file
2026-01-16 03:05:13 +05:30
Michael Aspinwall
6fbaebc054 Add atomic resync and remove usage of store in FIFO 2026-01-15 21:18:25 +00:00
Benjamin Elder
4c37109787 clone dep-approvers list to dep-reviewers to avoid warning about empty alias
we could remove the alias everywhere instead, but that's higher-churn, and the distinction may be useful in the future with onboarding new reviewer => approvers
2026-01-15 12:19:49 -08:00
Benjamin Elder
a60d114402 emeritus logicalhan, rest in peace
https://github.com/cncf/memorials/blob/main/han-kang.md
2026-01-15 12:18:02 -08:00
Benjamin Elder
9e27ee8042 bump go to 1.25.6 for CVE fixes 2026-01-15 11:25:15 -08:00
Kubernetes Prow Robot
fd41228d1a Merge pull request #136246 from dims/update-vendor-deps-cadvisor-containerd-oci
Update vendored dependencies: cadvisor, containerd, runtime-spec, selinux
2026-01-15 23:53:38 +05:30
Lalit Chauhan
c3fecccd3e Make sure errors present in declarative validation test files are DV errors 2026-01-15 17:42:02 +00:00
Kubernetes Prow Robot
1dde6f3475 Merge pull request #135584 from pohly/dra-upgrade-downgrade-tests
DRA testing: upgrade/downgrade preparation for 1.35
2026-01-15 22:41:40 +05:30
Davanum Srinivas
d3d78ce0dd Add tmpfs detection to mounttest and unit tests
Refactor fsType() to use a platform-specific formatFsType() helper that
translates filesystem magic numbers to human-readable names. On Linux,
tmpfs filesystems now display as "tmpfs" instead of the raw magic number.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-15 12:02:56 -05:00
Kubernetes Prow Robot
8392659d3c Merge pull request #136143 from pohly/client-go-fake-list-and-watch-fix
client-go testing: fix List+Watch support
2026-01-15 21:35:36 +05:30
Michael Zappa
b651f2f34d delete dead code 2026-01-15 09:00:40 -07:00
Davanum Srinivas
050c786014 Update vendored dependencies: cadvisor, containerd, runtime-spec, selinux
Update the following vendored dependencies:

- github.com/google/cadvisor: v0.55.1 -> v0.56.0
- github.com/containerd/containerd/api: v1.9.0 -> v1.10.0
- github.com/opencontainers/runtime-spec: v1.2.1 -> v1.3.0
- github.com/opencontainers/selinux: v1.13.0 -> v1.13.1

cadvisor v0.56.0 changes:
- Add s390x (IBM Z/mainframe) CPU topology support with NumBooks and
  NumDrawers fields in MachineInfo
- Add new Prometheus metrics: machine_cpu_books and machine_cpu_drawers
- Add standard deviation (Std) field to Percentiles for resource statistics
- Add sysfs constants CPUBookID and CPUDrawerID for s390x topology detection

containerd/api v1.10.0 changes:
- Add ActiveMount message type for tracking mounts with timestamps
- Add ActivationInfo message for mount management and lifecycle tracking

runtime-spec v1.3.0 changes (from ChangeLog):
- Add FreeBSD platform support with new Spec.FreeBSD field
- Add netDevices object for moving network devices to container namespaces
- Add memoryPolicy object for NUMA memory policy configuration
- Add hwConfig object for VM-based containers (vcpus, memory, device-tree)
- Add iomems for hardware I/O memory page access in VMs
- Add intelRdt.schemata and intelRdt.enableMonitoring fields
- Change LinuxPids.Limit to pointer type for optional handling
- Clarify intelRdt configuration and pids cgroup settings

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-15 10:26:13 -05:00
Patrick Ohly
3783a720e7 client-go testing: start ResourceVersion at 1 for empty set
List should never return "0", that has a special meaning in queries.
2026-01-15 16:08:23 +01:00
Patrick Ohly
359aff0552 client-go testing: include event handler in List+Watch unit test
The event handler must receive both object (the initial one from List, the
newer one from Watch) and it must be considered synced.
2026-01-15 16:08:23 +01:00
Patrick Ohly
6bfa727bee client-go testing: fix List+Watch support
5644850607 added support for List+Watch to a fake client-go instance.
However, that support was not quite working yet as seen when analyzing a test
flake:

- List returned early when there were no objects, without adding the
  ResourceVersion. The ResourceVersion should have been "0" instead.
- When encountering "" as ResourceVersion, Watch didn't deliver
  any objects. That was meant to preserve compatibility with clients
  which don't expect objects from a Watch, but the right semantic of
  "" is "Start at most recent", which includes delivering existing
  objects.

Tests which meddle with the List implementation via a reactor (like
clustertrustbundlepublisher) have to be aware that Watch now may
return objects when given an empty ResourceVersion.
2026-01-15 16:08:23 +01:00
Kubernetes Prow Robot
2c677fe034 Merge pull request #135563 from yangjunmyfm192085/fixkubectl
When using kubectl to delete multiple sts pods simultaneously, it gets stuck and won't exit
2026-01-15 20:15:35 +05:30
Kubernetes Prow Robot
3fe167e586 Merge pull request #136245 from soltysh/clarify_scaling
Eliminate duplicate scale methods deployment controller in favor of a parameter
2026-01-15 19:13:40 +05:30
Maciej Szulik
5f21c6c709 Eliminate duplicate scale methods deployment controller in favor of a parameter
This initially was attempted in 5f083e3b9f
but it caused e2e failing heavily (see
https://github.com/kubernetes/kubernetes/issues/135222 for more details).
The changes proposed in e6641cd290
clarified the naming of the two existing scale methods but they still
leave both of them as is.

This change goes a step further by combining both into a single method
with a parameter `forceUpdate` which is responsible for driving the mode
of execution between lazy update and a forced update.

Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2026-01-15 13:50:39 +01:00
Kubernetes Prow Robot
14d67d489c Merge pull request #135981 from vshkrabkov/fix/unschedulable_pods_broke_while_preenqueue
Fix unschedulable pods metric broke while preenqueue
2026-01-15 18:11:35 +05:30
Kubernetes Prow Robot
0ba578f91f Merge pull request #135393 from tosi3k/parallel-prebind
Run PreBind plugins in parallel
2026-01-15 12:39:34 +05:30
Kubernetes Prow Robot
8b1496ac62 Merge pull request #136184 from yongruilin/master_dependenttag
feat(kube-api-linter): add dependenttags linter for k8s:unionMember
2026-01-15 11:09:45 +05:30
Kubernetes Prow Robot
b40830cca7 Merge pull request #135794 from AutuSnow/master
kubelet: resolve data race in WaitForAllPodsUnmount when collecting errors(#134083)
2026-01-15 11:09:37 +05:30
Kubernetes Prow Robot
e79df94fc8 Merge pull request #136064 from coillteoir/master
testing: reintegrate volume image e2e test
2026-01-15 07:27:34 +05:30
Kubernetes Prow Robot
8322d26d1f Merge pull request #135462 from michaelasp/atomicReplace
Add atomic replace in client-go
2026-01-15 03:35:37 +05:30
Kubernetes Prow Robot
3ad38f3885 Merge pull request #132120 from flpanbin/fix-requestedToCapacityRatio-nil-pointer
fix the noderesourcefit plugin's nil pointer by validating RequestedToCapacityRatio config
2026-01-15 02:35:37 +05:30
yongruilin
49be15534e feat: Enforce +k8s:optional on +k8s:unionMember fields via dependenttag linter 2026-01-14 20:08:59 +00:00
yongruilin
37e05b74c7 update sigs.k8s.io/kube-api-linter to latest 2026-01-14 20:02:30 +00:00
Kubernetes Prow Robot
285222e92e Merge pull request #136192 from dnaeon/fix/defaulter-gen-leftover
code-generator/defaulter-gen: remove a leftover
2026-01-15 01:29:35 +05:30
Michael Aspinwall
3d585f1c50 Add support for ReplacedAll delta handling 2026-01-14 19:00:32 +00:00
Michael Aspinwall
022fec7ba8 Plumb AtomicFIFO options into controller/store construction 2026-01-14 19:00:32 +00:00
Michael Aspinwall
9e25c19199 Add AtomicFIFO feature gate 2026-01-14 19:00:32 +00:00
Michael Aspinwall
64f780c1ec Guard against unexpected delta types in batch processing 2026-01-14 19:00:32 +00:00
Michael Aspinwall
b8470beda4 Make PopBatch process a single-item batch identically to Pop 2026-01-14 19:00:32 +00:00
Michael Aspinwall
1c29ee7e7b Expand controller unit test coverage 2026-01-14 19:00:32 +00:00
Michael Aspinwall
4171c8cff8 Plumb keyFunc to informer/controller/delta handling 2026-01-14 19:00:31 +00:00
Michael Aspinwall
b94e610244 Refactor RealFIFO#Replace delete/update handling to reconcileReplacement 2026-01-14 19:00:31 +00:00
Michael Aspinwall
ebd6959b12 Fix Replaced delta documentation 2026-01-14 19:00:31 +00:00
Michael Aspinwall
2dad39751d Refactor delta addition/clearing 2026-01-14 19:00:31 +00:00
Kubernetes Prow Robot
cd8fc957c7 Merge pull request #135303 from vikasbolla/fix_pcr_flake
Fix context deadline exceeded in PodCertificate test
2026-01-15 00:27:46 +05:30
Kubernetes Prow Robot
616fff8247 Merge pull request #131317 from bitoku/fix-static-init
Fix:Static pod status is always Init:0/1 if unable to get init container status
2026-01-15 00:27:38 +05:30