Commit Graph

135077 Commits

Author SHA1 Message Date
Dan Winship
e17963cb99 Do nftables hairpin handling centrally rather than per-endpoint 2026-03-02 11:05:52 -05:00
Dan Winship
aa3a30d134 Do clusterIP masquerading centrally rather than per-service 2026-03-02 11:05:52 -05:00
Dan Winship
75aab220b4 Add NodeName to all EndpointSlices in nftables proxier unit tests
Previously it was leaving NodeName unset in many cases. Give all of
the endpoints an explicit NodeName, making them explicitly local in
all the test cases that don't care either way, and explicitly
non-local in those test cases that did care but were previously just
relying on the fact that a nil NodeName would be treated as remote.
2026-03-02 11:05:50 -05:00
Dan Winship
3c1ad42773 Add a helper for the operation-counting unit tests in nftables
(This will make it easier to keep the counts in sync when we change
things.)
2026-01-24 09:42:42 -05:00
Darshan Murthy
b4947a5891 feat(storage): enable validation-gen + DV wiring for storage.k8s.io (#135438)
* Enable DV coverage for VolumeAttachmentSpec.Attacher validation

update code-gen

* addressing PR comments
2026-01-24 14:29:26 +05:30
Kubernetes Prow Robot
af5dd4492e Merge pull request #136484 from dims/fix-container-restart-test-aftereach
Fix container_restart_test AfterEach failing when CRI Proxy is undefined
2026-01-24 12:19:26 +05:30
Kubernetes Prow Robot
4bfdd672b5 Merge pull request #136442 from borg-land/drop-ipc-utils-image-one
add util-linux to agnhost so we can replace ipc-utils with agnhost
2026-01-24 10:33:55 +05:30
Kubernetes Prow Robot
4d59060ba2 Merge pull request #136052 from sreeram-venkitesh/added-missing-tests-for-client-go-metrics
Added missing tests for client-go metrics
2026-01-24 10:33:47 +05:30
Kubernetes Prow Robot
7cdeb11327 Merge pull request #135800 from danwinship/nftables-hairpin
rework nftables masquerading code, part 1
2026-01-24 10:33:39 +05:30
Kubernetes Prow Robot
5eb7087ccb Merge pull request #135761 from darshansreenivas/admissionregistratio_k8s_io_policy_name
feat: wire admissionregistration group for declarative validation and +k8s:required to ValidatingAdmissionPolicyBindingSpec.PolicyName
2026-01-24 10:33:31 +05:30
Kubernetes Prow Robot
4116b65ac5 Merge pull request #135694 from saschagrunert/update-cri-tools-v1.35.0
Update cri-tools to v1.35.0
2026-01-24 09:01:26 +05:30
Kubernetes Prow Robot
56583f4464 Merge pull request #136444 from borg-land/drop-arm-from-e2e-test-images
drop armv7 from our e2e test images
2026-01-24 07:39:35 +05:30
Kubernetes Prow Robot
0c127dd954 Merge pull request #135291 from xuzhenglun/fix-ut
fix case title in kubelet/server unit
2026-01-24 07:39:28 +05:30
Kubernetes Prow Robot
01cc26fba3 Merge pull request #136379 from amigo-nishant/master
cleanup: improve darwin error messages
2026-01-24 06:43:27 +05:30
Davanum Srinivas
03e6622c92 Fix container_restart_test AfterEach failing when CRI Proxy is undefined
Two test contexts were failing because their AfterEach blocks run even
when BeforeEach skips the test (standard Ginkgo behavior). This caused
resetCRIProxyInjector to fail with "CRI Proxy is undefined".

Switched to using DeferCleanup inside BeforeEach instead, which only
runs if BeforeEach succeeds. This is the same pattern the other test
contexts in this file already use.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-23 19:59:22 -05:00
Kubernetes Prow Robot
c7416f744e Merge pull request #136486 from dims/fix-imagepulltest-timeout
Add timeout to ImagePullTest poll loop to prevent infinite hangs
2026-01-24 05:51:27 +05:30
Davanum Srinivas
48f67b9656 Add timeout to ImagePullTest poll loop to prevent infinite hangs
ImagePullTest was using wait.PollUntilContextCancel which has no
timeout, causing tests to hang for hours when the expected container
state is never reached (e.g., ErrImageNeverPull).

Changed to wait.PollUntilContextTimeout with ContainerStatusRetryTimeout
(5 minutes), matching the pattern used by other tests in the same file.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-23 18:19:17 -05:00
Kubernetes Prow Robot
6b092968ac Merge pull request #136166 from ngopalak-redhat/ngopalak/sub-dir-walk
Add test and doc for processing all the sub-directories in kubelet drop-in folder
2026-01-24 00:29:30 +05:30
Kubernetes Prow Robot
62cbba593b Merge pull request #136413 from hoteye/migrate-kubelet-getnode-context
kubelet: migrate kubelet_getters.go to contextual logging
2026-01-23 23:35:37 +05:30
Kubernetes Prow Robot
4c221cdc56 Merge pull request #133335 from bart0sh/PR190-pluginmanager-fix-handling-registration-failures
pluginmanager: fix handling registration failures
2026-01-23 23:35:29 +05:30
upodroid
111c4cfb9f add util-linux-misc to agnhost so we can replace ipc-utils with agnhost 2026-01-23 20:19:46 +03:00
Neeraj Krishna Gopalakrishna
001dcf63ba Add test and doc for processing all the sub-directories in drop-in folder 2026-01-23 21:58:31 +05:30
Kubernetes Prow Robot
a90cf50004 Merge pull request #136443 from dims/bump-e2e-test-images
Bump e2e test images to latest promoted versions
2026-01-23 18:57:38 +05:30
Kubernetes Prow Robot
a46ff14f97 Merge pull request #136089 from ngopalak-redhat/ngopalak/config-dir
Improve logging, doc and test for kubelet config-dir file extension
2026-01-23 18:57:31 +05:30
Mahamed Ali
00238edfdd drop armv7 from our e2e test images 2026-01-23 12:20:32 +00:00
Kubernetes Prow Robot
0af247eb14 Merge pull request #136344 from brejman/kep-5732-tas-rename-podgroupinfo
Rename PodGroupInfo in preparation for Workload-aware scheduling changes
2026-01-23 17:37:29 +05:30
hoteye
e649292782 kubelet: migrate kubelet_getters.go to contextual logging. Migrate GetNode and related functions to use contextual logging 2026-01-23 19:54:43 +08:00
Davanum Srinivas
bceadbece2 Bump e2e test images to latest promoted versions
Image updates:
- ipc-utils: 1.3 → 1.4
- kitten: 1.7 → 1.8
- nautilus: 1.7 → 1.8
- nginx: 1.14-4 → 1.15-4
- nginx (new): 1.15-4 → 1.27-0
- node-perf/npb-ep: 1.2 → 1.6.0
- node-perf/npb-is: 1.2 → 1.7.0
- nonewprivs: 1.3 → 1.4
- nonroot: 1.4 → 1.5
- resource-consumer: 1.13 → 1.14
- volume/nfs: 1.4 → 1.6.0
- volume/iscsi: 2.6 → 2.7

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-23 06:19:30 -05:00
amigo-nishant
b56c322f24 cleanup: improve darwin error messages 2026-01-23 09:30:07 +05:30
Kubernetes Prow Robot
c2618d48c0 Merge pull request #136445 from dims/fix-volume-nfs-centos-stream9
Fix volume/nfs image for CentOS Stream 9
2026-01-23 09:25:25 +05:30
Davanum Srinivas
e8d1e3563b Fix volume/nfs image for CentOS Stream 9
The volume/nfs:1.5 image was updated from CentOS 8 to CentOS Stream 9
in commit 9b47a096f4, but this broke NFS server startup because
NFSv2 is no longer supported in RHEL 9 / CentOS Stream 9.

The `-N 2` flag (disable NFSv2) passed to rpc.mountd and rpc.nfsd
causes them to fail with "2: Unsupported version" since there's no
NFSv2 to disable. This prevented rpc.nfsd from starting, causing
NFS mount timeouts in e2e tests.

Fix by removing the `-N 2` flags. NFSv2 is already unavailable in
CentOS Stream 9, so explicitly disabling it is unnecessary.

Red Hat documentation states: "NFS version 2 (NFSv2) is no longer
supported by Red Hat."

Reference: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/managing_file_systems/mounting-nfs-shares_managing-file-systems

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-22 21:13:15 -05:00
Kubernetes Prow Robot
5f4adaf579 Merge pull request #136303 from ShaanveerS/fix-flake
scheduler: deflake TestUnReservePreBindPlugins
2026-01-23 05:17:27 +05:30
Kubernetes Prow Robot
3863ed83f1 Merge pull request #136429 from dims/fix-npb-is-ppc64le
Remove ppc64le and s390x support from npb-is image
2026-01-23 03:03:35 +05:30
Kubernetes Prow Robot
5614f02d2a Merge pull request #135940 from pohly/webhook-unit-test-flake
webhook admission: avoid risk of flakes
2026-01-23 03:03:27 +05:30
Kubernetes Prow Robot
4b5db19cb7 Merge pull request #136407 from ivanvc/master
Bump etcd client SDK to 3.6.7
2026-01-23 02:09:35 +05:30
Kubernetes Prow Robot
ed4c206ffa Merge pull request #136398 from dims/use-pytorch-wide-deep-in-tests
Switch node perf tests from TensorFlow to PyTorch Wide-Deep
2026-01-23 02:09:27 +05:30
darshansreenivas
04ea1eabff feat(admissionregistration): wire group for declarative validation and require PolicyName 2026-01-22 11:19:22 -08:00
Kubernetes Prow Robot
a20550b2f8 Merge pull request #135751 from PhantomInTheWire/fix/operation-executor-test
Fix goroutine leak in pluginmanager test
2026-01-22 23:57:36 +05:30
Kubernetes Prow Robot
c42aa9b74a Merge pull request #132047 from rzlink/memory
kubelet/windows: use CommitMemoryBytes for MemoryStats.UsageBytes in CRI stats provider
2026-01-22 23:57:29 +05:30
Kubernetes Prow Robot
789e38ef03 Merge pull request #136404 from borg-land/nonewprivs-agnhost
add nonewprivs to agnhost
2026-01-22 22:47:29 +05:30
Davanum Srinivas
00e1a2e9a2 Switch node perf tests from TensorFlow to PyTorch Wide-Deep
Replace the TensorFlow-based wide-deep workload with the PyTorch
implementation. This change:

- Adds pytorchWideDeepWorkload using the new pytorch-wide-deep image (1.0.0)
- Removes tfWideDeepWorkload and tf-wide-deep image references
- Enables arm64 support (PyTorch image is multi-arch)
- Uses the same log parsing (time -p output format)

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-22 12:02:58 -05:00
Ivan Valdes
63e442e167 Bump etcd 3.6.7 SDK 2026-01-22 08:51:06 -08:00
Kubernetes Prow Robot
8a04fd20dd Merge pull request #136425 from Karthik-K-N/small-cleanup
Remove previously added print statement for test debug
2026-01-22 21:55:39 +05:30
Kubernetes Prow Robot
01c430acd5 Merge pull request #136359 from dims/glibc-dns-testing-code-update
test: update code to use GlibcDnsTesting image
2026-01-22 21:55:31 +05:30
Davanum Srinivas
4060725e7b Remove ppc64le and s390x support from npb-is image
The npb-is image was failing to build on ppc64le with relocation overflow:
  relocation truncated to fit: R_PPC64_TOC16_HA against symbol 'key_array'

Remove ppc64le and s390x from supported architectures:
- The IS benchmark with CLASS=D has ~8GB data arrays that require special
  compiler flags for non-x86 architectures
- ppc64le and s390x builds are difficult to test and maintain
- Keep amd64 and arm64 which are the primary node performance test targets

I don't think these arch(es) ever worked!

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-22 10:50:21 -05:00
Bartosz
ae27a49a13 Rename PodGroupInfo to PodGroupState
This is in preparation for PodGroupInfo struct with more pod group
details
2026-01-22 14:45:40 +00:00
Kubernetes Prow Robot
a4272922fc Merge pull request #136397 from dims/add-pytorch-wide-deep-test-image
Add PyTorch Wide-Deep node performance test image
2026-01-22 20:15:28 +05:30
upodroid
8fb70f8716 add nonewprivs to agnhost 2026-01-22 17:08:03 +03:00
Kubernetes Prow Robot
b3f3cb88e8 Merge pull request #136419 from pacoxu/add-google-btree-unwanted
Add github.com/google/btree to unwanted dependencies
2026-01-22 19:17:28 +05:30
Davanum Srinivas
0183b5547a test: update code to use GlibcDnsTesting image
Updates the codebase to use the new glibc-dns-testing image which replaces
the deprecated jessie-dnsutils image.

This PR depends on the glibc-dns-testing image being available in the
registry (registry.k8s.io/e2e-test-images/glibc-dns-testing:2.0.0).

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-01-22 08:39:46 -05:00