Taahir Ahmed
e83baddbb1
LRUExpireCache: Allow removing multiple keys under lock
2023-11-03 11:40:48 -07:00
Taahir Ahmed
599fdb7add
Regenerate for ClusterTrustBundlePEM projected volume API
2023-11-03 11:40:48 -07:00
Taahir Ahmed
ecfdc8fda5
Define ClusterTrustBundlePEM projected volume
...
This commit defines the ClusterTrustBundlePEM projected volume types.
These types have been renamed from the KEP (PEMTrustAnchors) in order to
leave open the possibility of a similar projection drawing from a
yet-to-exist namespaced-scoped TrustBundle object, which came up during
KEP discussion.
* Add the projection field to internal and v1 APIs.
* Add validation to ensure that usages of the project must specify a
name and path.
* Add TODO covering admission control to forbid mirror pods from using
the projection.
Part of KEP-3257.
2023-11-03 11:40:48 -07:00
Taahir Ahmed
0fd1362782
ClusterTrustBundles: ClusterTrustBundleProjection feature gate
2023-11-03 11:40:48 -07:00
Kubernetes Prow Robot
66e20ff891
Merge pull request #121394 from pohly/e2e-framework-test-labels
...
e2e: test labels
2023-11-03 17:35:03 +01:00
Kubernetes Prow Robot
3716bd7681
Merge pull request #121717 from neolit123/1.29-cleanup-kube-dns-service-e2e-tests
...
test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
2023-11-03 14:13:54 +01:00
Kubernetes Prow Robot
f883370b8a
Merge pull request #121679 from bzsuni/fix/integration/apiserver/discovery/service-go/WaitForReady
...
Fix parameter passing error in function WaitForReady in file test/integration/apiserver/discovery
2023-11-03 13:02:46 +01:00
Kubernetes Prow Robot
edb39d703b
Merge pull request #121583 from bzsuni/fix/e2e/apimachinery
...
Fix the e2e bug related to the Garbage collector in api-machinery
2023-11-03 13:02:34 +01:00
Lubomir I. Ivanov
b565fbeac0
test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests
...
kube-dns as an alternative DNS addon to CoreDNS hasn't been supported
since 1.22 when kubeadm's v1beta3 API was added.
Remove the related tests from the e2e_kubeadm test framework.
2023-11-03 12:05:22 +02:00
Kubernetes Prow Robot
c3eebb233d
Merge pull request #121709 from aramase/aramase/f/authn_user_info_fix
...
[StructuredAuthn] Ensure empty fields of user object are accessible by CEL
2023-11-03 03:16:04 +01:00
Kubernetes Prow Robot
fb9c94b3a5
Merge pull request #121705 from liggitt/authz-config-webhook-test
...
Add multi-webhook integration test
2023-11-03 01:29:52 +01:00
Jordan Liggitt
0112d91a05
Add multi-webhook integration test
2023-11-02 19:21:06 -04:00
Anish Ramasekar
b693f09d54
[StructuredAuthn] Ensure empty fields of user object are accessible by
...
CEL
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-02 22:53:06 +00:00
Jordan Liggitt
44d89c8cf8
Include empty string attributes for CEL authz evaluation
2023-11-02 16:56:52 -04:00
Jordan Liggitt
2e2f51a441
Plumb failure policy from config to webhook construction
2023-11-02 16:56:51 -04:00
Kubernetes Release Robot
0674135c1a
CHANGELOG: Update directory for v1.29.0-alpha.3 release
2023-11-02 19:00:00 +00:00
Jordan Liggitt
a000af25ff
Require match condition version only if matchConditions are specified
2023-11-02 13:54:39 -04:00
Kubernetes Prow Robot
6eee80fa9a
Merge pull request #121633 from mimowo/backoff-limit-per-index-remaining-e2e-test
...
Add remaining e2e tests for Job BackoffLimitPerIndex based on KEP
2023-11-02 16:11:31 +01:00
Kubernetes Prow Robot
6c64593ba1
Merge pull request #120616 from kannon92/kubelet-disk-api-changes
...
Kubelet disk api changes
2023-11-02 16:11:20 +01:00
Kubernetes Prow Robot
1f69e12148
Merge pull request #121653 from tkashem/apf-conformance-test
...
Add conformance tests for flowcontrol APIs
2023-11-02 14:44:47 +01:00
Kubernetes Prow Robot
73ef630138
Merge pull request #121566 from mzaian/etcd-3510
...
etcd: Update to version 3.5.10
2023-11-02 14:44:38 +01:00
Kubernetes Prow Robot
3240e2b28e
Merge pull request #121674 from neolit123/1.29-super-admin-conf
...
test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
2023-11-02 12:10:08 +01:00
Mohamed Omar Zaian
3c268b7524
etcd: Update to version 3.5.10
2023-11-02 10:30:41 +01:00
Kubernetes Prow Robot
515d1ce6c0
Merge pull request #121393 from mimowo/backoff-limit-per-index-load-test
...
Benchmark job with backoff limit per index
2023-11-02 09:58:26 +01:00
Lubomir I. Ivanov
4c532213ae
test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB
...
Add a test that checks if the CRB (kubeadm:cluster-admins)
used for binding admin.conf file users (part of the
kubeadm:cluster-admins Group) to the "cluster-admins"
ClusterRole exists in kubeadm clusters.
It does that only for versions newer than the version
when this feature was added.
2023-11-02 09:49:29 +02:00
Michal Wozniak
ae73cf9cfb
Add remaining e2e tests for backoffLimitPerIndex based on KEP
2023-11-02 08:23:41 +01:00
Kubernetes Prow Robot
227d1b2357
Merge pull request #119762 from AxeZhan/PollUntilContextCancel
...
wait.PollUntilContextCancel immediately executes condition once
2023-11-02 05:40:03 +01:00
Kubernetes Prow Robot
6b8b188149
Merge pull request #121686 from logicalhan/update-inst-docs
...
update docs for v1.29 release (note this must be committed after code freeze)
2023-11-02 02:34:57 +01:00
Han Kang
85b10c06fa
update docs for v1.29 release (note this must be committed after code freeze)
2023-11-01 15:00:48 -07:00
Kubernetes Prow Robot
9754e40439
Merge pull request #121682 from liggitt/conditional-rbac
...
Make service-cidrs-controller role feature-gated
2023-11-01 21:16:21 +01:00
Jordan Liggitt
cda349cda4
Make service-cidrs-controller role feature-gated
2023-11-01 15:10:33 -04:00
Kubernetes Prow Robot
4c54ff0e16
Merge pull request #121671 from kannon92/fix-swap-summary-failure
...
increase bounded limits for major page faults
2023-11-01 20:07:30 +01:00
Kevin Hannon
26923b91e8
implementation of split disk kep
2023-11-01 14:46:33 -04:00
bzsuni
003e4886c6
Fix parameter passing error
...
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-11-02 01:14:45 +08:00
Kubernetes Prow Robot
9e84a02950
Merge pull request #121672 from pohly/golangci-lint-comment-check-fix
...
golangci-lint: tone down comment checking
2023-11-01 17:47:45 +01:00
bzsuni
b2c743154c
Fix the e2e bug related to the Garbage collector in api-machinery.
...
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-11-02 00:23:08 +08:00
Kubernetes Prow Robot
974735854b
Merge pull request #121573 from tukwila/bump_etcd_v3.5.10
...
bump etcd newest version: v3.5.10
2023-11-01 15:33:13 +01:00
Kubernetes Prow Robot
da61382068
Merge pull request #121552 from pohly/klog-update
...
klog v2.110.1 update
2023-11-01 15:32:59 +01:00
Patrick Ohly
338fe7ad55
e2e framework: validate test definitions
...
This checks that the With* label functions are used instead of the previous
inline tags. To catch strings passed to Ginkgo directly instead of the
framework wrapper functions, the final test specs are checked.
2023-11-01 15:17:34 +01:00
Patrick Ohly
f2cfbf44b1
e2e: use framework labels
...
This changes the text registration so that tags for which the framework has a
dedicated API (features, feature gates, slow, serial, etc.) those APIs are
used.
Arbitrary, custom tags are still left in place for now.
2023-11-01 15:17:34 +01:00
Patrick Ohly
248100ce6d
golangci-lint: tone down comment checking
...
39df946c06
was meant to enable stricter comment checking only for cmd/kubeadm
because the maintainers of that want that. However, the exclude rule didn't
capture all possible error texts and therefore some checks were enabled across
the entire code base.
The extended pattern is now based on the golangci-lint source code.
Also, the hint config didn't suppress any of these checks.
2023-11-01 14:59:28 +01:00
Kevin Hannon
ecb32a3e29
increase bounded limits for major page faults
2023-11-01 09:57:37 -04:00
Kubernetes Prow Robot
2c53de96e4
Merge pull request #121665 from pacoxu/sync-etcd-build
...
etcd: add --provenance=false during etcd multi-arch build
2023-11-01 14:14:23 +01:00
Paco Xu
ceaacc88f0
add --provenance=false during etcd multi-arch build
2023-11-01 17:16:28 +08:00
Kubernetes Prow Robot
375e9ee7c4
Merge pull request #120145 from LingyanYin/inplace_vpa_inprogress_custom_resource_fix
...
fix inplace VPA stuck in InProgress when custom resources are specified
2023-11-01 09:59:32 +01:00
Patrick Ohly
833156b77e
e2e: define environment
2023-11-01 09:38:59 +01:00
Patrick Ohly
4a380609a9
serviceaccount: fix incorrect usage of %w in Errorf
...
Found by govet in combination with new klog where printf-style checking is
enabled.
2023-11-01 09:32:23 +01:00
Patrick Ohly
878d037d3b
dependencies: klog v2.110.1
...
Dropping a newline at the end of the message when using klog calls is an
intentional improvement (https://github.com/kubernetes/klog/pull/378 )
2023-11-01 09:32:20 +01:00
Kubernetes Prow Robot
d038b65fee
Merge pull request #121303 from humblec/csinodeexpand-ga
...
Promote CSINodeExpandSecret to GA
2023-11-01 07:32:23 +01:00
guangli.bao
bc1df9e7da
bump to newest etcd: v3.5.10
...
Signed-off-by: guangli.bao <guangli.bao@daocloud.io>
2023-11-01 11:59:31 +08:00