Commit Graph

119747 Commits

Author SHA1 Message Date
Taahir Ahmed
e83baddbb1 LRUExpireCache: Allow removing multiple keys under lock 2023-11-03 11:40:48 -07:00
Taahir Ahmed
599fdb7add Regenerate for ClusterTrustBundlePEM projected volume API 2023-11-03 11:40:48 -07:00
Taahir Ahmed
ecfdc8fda5 Define ClusterTrustBundlePEM projected volume
This commit defines the ClusterTrustBundlePEM projected volume types.
These types have been renamed from the KEP (PEMTrustAnchors) in order to
leave open the possibility of a similar projection drawing from a
yet-to-exist namespaced-scoped TrustBundle object, which came up during
KEP discussion.

* Add the projection field to internal and v1 APIs.
* Add validation to ensure that usages of the project must specify a
  name and path.
* Add TODO covering admission control to forbid mirror pods from using
  the projection.

Part of KEP-3257.
2023-11-03 11:40:48 -07:00
Taahir Ahmed
0fd1362782 ClusterTrustBundles: ClusterTrustBundleProjection feature gate 2023-11-03 11:40:48 -07:00
Kubernetes Prow Robot
66e20ff891
Merge pull request #121394 from pohly/e2e-framework-test-labels
e2e: test labels
2023-11-03 17:35:03 +01:00
Kubernetes Prow Robot
3716bd7681
Merge pull request #121717 from neolit123/1.29-cleanup-kube-dns-service-e2e-tests
test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
2023-11-03 14:13:54 +01:00
Kubernetes Prow Robot
f883370b8a
Merge pull request #121679 from bzsuni/fix/integration/apiserver/discovery/service-go/WaitForReady
Fix parameter passing error in function WaitForReady in file test/integration/apiserver/discovery
2023-11-03 13:02:46 +01:00
Kubernetes Prow Robot
edb39d703b
Merge pull request #121583 from bzsuni/fix/e2e/apimachinery
Fix the e2e bug related to the Garbage collector in api-machinery
2023-11-03 13:02:34 +01:00
Lubomir I. Ivanov
b565fbeac0 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
kube-dns as an alternative DNS addon to CoreDNS hasn't been supported
since 1.22 when kubeadm's v1beta3 API was added.

Remove the related tests from the e2e_kubeadm test framework.
2023-11-03 12:05:22 +02:00
Kubernetes Prow Robot
c3eebb233d
Merge pull request #121709 from aramase/aramase/f/authn_user_info_fix
[StructuredAuthn] Ensure empty fields of user object are accessible by CEL
2023-11-03 03:16:04 +01:00
Kubernetes Prow Robot
fb9c94b3a5
Merge pull request #121705 from liggitt/authz-config-webhook-test
Add multi-webhook integration test
2023-11-03 01:29:52 +01:00
Jordan Liggitt
0112d91a05
Add multi-webhook integration test 2023-11-02 19:21:06 -04:00
Anish Ramasekar
b693f09d54
[StructuredAuthn] Ensure empty fields of user object are accessible by
CEL

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-02 22:53:06 +00:00
Jordan Liggitt
44d89c8cf8
Include empty string attributes for CEL authz evaluation 2023-11-02 16:56:52 -04:00
Jordan Liggitt
2e2f51a441
Plumb failure policy from config to webhook construction 2023-11-02 16:56:51 -04:00
Kubernetes Release Robot
0674135c1a CHANGELOG: Update directory for v1.29.0-alpha.3 release 2023-11-02 19:00:00 +00:00
Jordan Liggitt
a000af25ff
Require match condition version only if matchConditions are specified 2023-11-02 13:54:39 -04:00
Kubernetes Prow Robot
6eee80fa9a
Merge pull request #121633 from mimowo/backoff-limit-per-index-remaining-e2e-test
Add remaining e2e tests for Job BackoffLimitPerIndex based on KEP
2023-11-02 16:11:31 +01:00
Kubernetes Prow Robot
6c64593ba1
Merge pull request #120616 from kannon92/kubelet-disk-api-changes
Kubelet disk api changes
2023-11-02 16:11:20 +01:00
Kubernetes Prow Robot
1f69e12148
Merge pull request #121653 from tkashem/apf-conformance-test
Add conformance tests for flowcontrol APIs
2023-11-02 14:44:47 +01:00
Kubernetes Prow Robot
73ef630138
Merge pull request #121566 from mzaian/etcd-3510
etcd: Update to version 3.5.10
2023-11-02 14:44:38 +01:00
Kubernetes Prow Robot
3240e2b28e
Merge pull request #121674 from neolit123/1.29-super-admin-conf
test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
2023-11-02 12:10:08 +01:00
Mohamed Omar Zaian
3c268b7524 etcd: Update to version 3.5.10 2023-11-02 10:30:41 +01:00
Kubernetes Prow Robot
515d1ce6c0
Merge pull request #121393 from mimowo/backoff-limit-per-index-load-test
Benchmark job with backoff limit per index
2023-11-02 09:58:26 +01:00
Lubomir I. Ivanov
4c532213ae test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
Add a test that checks if the CRB (kubeadm:cluster-admins)
used for binding admin.conf file users (part of the
kubeadm:cluster-admins Group) to the "cluster-admins"
ClusterRole exists in kubeadm clusters.

It does that only for versions newer than the version
when this feature was added.
2023-11-02 09:49:29 +02:00
Michal Wozniak
ae73cf9cfb Add remaining e2e tests for backoffLimitPerIndex based on KEP 2023-11-02 08:23:41 +01:00
Kubernetes Prow Robot
227d1b2357
Merge pull request #119762 from AxeZhan/PollUntilContextCancel
wait.PollUntilContextCancel immediately executes condition once
2023-11-02 05:40:03 +01:00
Kubernetes Prow Robot
6b8b188149
Merge pull request #121686 from logicalhan/update-inst-docs
update docs for v1.29 release (note this must be committed after code freeze)
2023-11-02 02:34:57 +01:00
Han Kang
85b10c06fa update docs for v1.29 release (note this must be committed after code freeze) 2023-11-01 15:00:48 -07:00
Kubernetes Prow Robot
9754e40439
Merge pull request #121682 from liggitt/conditional-rbac
Make service-cidrs-controller role feature-gated
2023-11-01 21:16:21 +01:00
Jordan Liggitt
cda349cda4
Make service-cidrs-controller role feature-gated 2023-11-01 15:10:33 -04:00
Kubernetes Prow Robot
4c54ff0e16
Merge pull request #121671 from kannon92/fix-swap-summary-failure
increase bounded limits for major page faults
2023-11-01 20:07:30 +01:00
Kevin Hannon
26923b91e8 implementation of split disk kep 2023-11-01 14:46:33 -04:00
bzsuni
003e4886c6 Fix parameter passing error
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-11-02 01:14:45 +08:00
Kubernetes Prow Robot
9e84a02950
Merge pull request #121672 from pohly/golangci-lint-comment-check-fix
golangci-lint: tone down comment checking
2023-11-01 17:47:45 +01:00
bzsuni
b2c743154c Fix the e2e bug related to the Garbage collector in api-machinery.
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-11-02 00:23:08 +08:00
Kubernetes Prow Robot
974735854b
Merge pull request #121573 from tukwila/bump_etcd_v3.5.10
bump etcd newest version: v3.5.10
2023-11-01 15:33:13 +01:00
Kubernetes Prow Robot
da61382068
Merge pull request #121552 from pohly/klog-update
klog v2.110.1 update
2023-11-01 15:32:59 +01:00
Patrick Ohly
338fe7ad55 e2e framework: validate test definitions
This checks that the With* label functions are used instead of the previous
inline tags. To catch strings passed to Ginkgo directly instead of the
framework wrapper functions, the final test specs are checked.
2023-11-01 15:17:34 +01:00
Patrick Ohly
f2cfbf44b1 e2e: use framework labels
This changes the text registration so that tags for which the framework has a
dedicated API (features, feature gates, slow, serial, etc.) those APIs are
used.

Arbitrary, custom tags are still left in place for now.
2023-11-01 15:17:34 +01:00
Patrick Ohly
248100ce6d golangci-lint: tone down comment checking
39df946c06 was meant to enable stricter comment checking only for cmd/kubeadm
because the maintainers of that want that. However, the exclude rule didn't
capture all possible error texts and therefore some checks were enabled across
the entire code base.

The extended pattern is now based on the golangci-lint source code.

Also, the hint config didn't suppress any of these checks.
2023-11-01 14:59:28 +01:00
Kevin Hannon
ecb32a3e29 increase bounded limits for major page faults 2023-11-01 09:57:37 -04:00
Kubernetes Prow Robot
2c53de96e4
Merge pull request #121665 from pacoxu/sync-etcd-build
etcd: add --provenance=false during etcd multi-arch build
2023-11-01 14:14:23 +01:00
Paco Xu
ceaacc88f0 add --provenance=false during etcd multi-arch build 2023-11-01 17:16:28 +08:00
Kubernetes Prow Robot
375e9ee7c4
Merge pull request #120145 from LingyanYin/inplace_vpa_inprogress_custom_resource_fix
fix inplace VPA stuck in InProgress when custom resources are specified
2023-11-01 09:59:32 +01:00
Patrick Ohly
833156b77e e2e: define environment 2023-11-01 09:38:59 +01:00
Patrick Ohly
4a380609a9 serviceaccount: fix incorrect usage of %w in Errorf
Found by govet in combination with new klog where printf-style checking is
enabled.
2023-11-01 09:32:23 +01:00
Patrick Ohly
878d037d3b dependencies: klog v2.110.1
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378)
2023-11-01 09:32:20 +01:00
Kubernetes Prow Robot
d038b65fee
Merge pull request #121303 from humblec/csinodeexpand-ga
Promote CSINodeExpandSecret to GA
2023-11-01 07:32:23 +01:00
guangli.bao
bc1df9e7da bump to newest etcd: v3.5.10
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
2023-11-01 11:59:31 +08:00