Commit Graph

132194 Commits

Author SHA1 Message Date
galal-hussein
e8a22dce0b Ignore nfacct init error in kube-proxy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-04-15 20:07:55 -03:00
Erik Wilson
cb82dbf6ae Add Vagrantfile 2026-04-15 20:07:55 -03:00
Darren Shepherd
07ace43492 Add tag.sh script
Add DefaultKubeBinaryVersion to the tag script

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-04-15 20:07:55 -03:00
Darren Shepherd
7efcec414f Fix CSI initialization conflict
CSI is used by both the kubelet and kube-controller-manager.  Both
components will initialize the csiPlugin with different VolumeHost
objects.  The csiPlugin will then assign a global variable for
the node info manager.  It is then possible that the kubelet gets
the credentials of the kube-controller-manager and that will cause
CSI to fail.
2026-04-15 20:07:55 -03:00
Darren Shepherd
ea922b0e99 Allow override of "kubernetes" endpoint port 2026-04-15 20:07:55 -03:00
Darren Shepherd
1c1c283234 Notify startup to grab a hold of handler and authenticator
Fix to the completed options config

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-04-15 20:07:55 -03:00
Darren Shepherd
b70acfe493 Add stopCh to apiserver & context to kublet commands
Remove SetupSignalContext call from the apiserver

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-04-15 20:07:55 -03:00
Erik Wilson
2e1ebf0fa0 Update kubernetes service on start for port changes 2026-04-15 20:07:55 -03:00
Darren Shepherd
a4be1d8aeb Don't ever select the flannel bridge or cni bridge 2026-04-15 20:07:55 -03:00
Darren Shepherd
64ba22b326 Cache loopback cert in the certs dir if set 2026-04-15 20:07:55 -03:00
Darren Shepherd
375ddda19b Add ability to disable proxy hostname check 2026-04-15 20:07:55 -03:00
Darren Shepherd
9ca345d600 Hide deprecated warnings 2026-04-15 20:07:55 -03:00
Darren Shepherd
545583018d Set all sources so node+agent in the same process doesn't get restricted 2026-04-15 20:07:55 -03:00
Darren Shepherd
bd21551cea Don't check for cpuset cgroup, not always required? 2026-04-15 20:07:55 -03:00
Darren Shepherd
0df1e245fa Wait for kube-apiserver for 2 minutes for slow (ARM) systems 2026-04-15 20:07:55 -03:00
Darren Shepherd
e0a3ca99a9 Make kubelet.sock path changable 2026-04-15 20:07:55 -03:00
Darren Shepherd
d7da28ab74 only use the resolved name if port was zero 2026-04-15 20:07:55 -03:00
Darren Shepherd
6331c5bb54 If you can't set hashsize on nf_conntrack don't fail 2026-04-15 20:07:55 -03:00
Darren Shepherd
68342f02ec Drop credential providers 2026-04-15 20:07:55 -03:00
Darren Shepherd
b7f6855022 Drop storage plugins 2026-04-15 20:07:55 -03:00
Darren Shepherd
7818b6f3ee Drop client-go cloud auth 2026-04-15 20:07:55 -03:00
Kubernetes Release Robot
66d3c15b9a Release commit for Kubernetes v1.34.7 v1.34.7 2026-04-15 18:09:03 +00:00
Kubernetes Prow Robot
ca12702454 Merge pull request #138357 from dims/update-moby-spdystream-v0.5.1-1.34
[1.34] Update github.com/moby/spdystream from v0.5.0 to v0.5.1
2026-04-14 19:18:39 +05:30
Kubernetes Prow Robot
678244eee1 Merge pull request #138349 from dashpole/update_prop_34
[release-1.34] Update go.opentelemetry.io/otel to v1.41.0
2026-04-14 07:00:36 +05:30
Davanum Srinivas
4b3d41fae7 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
Kubernetes-commit: 7e9c2c8eef26f99aa2f94d8e09d6d32de86c7769
2026-04-13 14:22:13 -04:00
David Ashpole
27f03ccf2d update go.opentelemetry.io/otel to v1.41.0 2026-04-13 14:42:47 +00:00
Kubernetes Prow Robot
a48ef21c6a Merge pull request #138027 from zxqlxy/local-cherry-pick-135485-v1.34
Cherry pick of #135485: Fix device plugin admission failure after container restart
2026-04-10 04:02:18 +05:30
Kubernetes Prow Robot
4e5772e126 Merge pull request #138305 from xmudrii/update-go-1.34
[release-1.34] Bump images and versions to go 1.25.9 and distroless iptables
2026-04-10 02:42:26 +05:30
Marko Mudrinić
e9820abb8b Bump images and versions to go 1.25.9 and distroless iptables
Signed-off-by: Marko Mudrinić <mudrinic.mare@gmail.com>
2026-04-09 21:57:12 +02:00
Kubernetes Prow Robot
a8c111a548 Merge pull request #137997 from varshadeshmane92/automated-cherry-pick-of-#133624-upstream-release-1.34
Automated cherry pick of #133624: Fix flaking RunTestDelayedWatchDelivery
2026-04-09 23:26:21 +05:30
Kubernetes Prow Robot
8bc6e2d550 Merge pull request #138150 from liggitt/go-1-25-release-1-34
[release-1.34] Bump to go 1.25.8
2026-04-09 15:17:37 +05:30
Jordan Liggitt
8d6ca236a0 Bump to go 1.25 2026-04-01 17:21:10 -04:00
Francesco Romani
9c0f626e6d podresources: filter out inactive pods in Get()
Currently the provider that the podresources API
consumes does *not* obviously filters out the terminal
pod, and this is corroborated by the fact the related
e2e test starts to fail.
We had a bug in the test which masked the real failure,
but now it's evident.

So we perform a trivial extraction of the kubelet filtering
code and we apply in both places.
Note that the existing flow is unaffected except for the
trivial code extraciton.

Signed-off-by: Francesco Romani <fromani@redhat.com>
2026-03-30 20:12:45 +00:00
Francesco Romani
aa1f18ea7d e2e: node: podresources: fix expectations for Get() and terminated pods
terminated pods should not be reported by Get() calls,
we should get an error instead

Signed-off-by: Francesco Romani <fromani@redhat.com>
2026-03-30 20:12:44 +00:00
Sascha Grunert
5dea39fc01 Fix device plugin admission failure after container restart
When a container restarts before kubelet restarts, containerMap has
multiple entries (old exited + new running). GetContainerID() may
return the exited container, causing the running check to fail. Fixed
by checking if ANY container for the pod/name is running.

Also filter terminal pods from podresources since they no longer
consume resources, and fix test error handling to avoid exiting
Eventually immediately on transient errors.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2026-03-26 21:45:29 +00:00
Kubernetes Prow Robot
808ebe63af Merge pull request #136282 from chaochn47/automated-cherry-pick-of-#135685-upstream-release-1.34
Automated cherry pick of #135685: Bugfix: calculate request latency properly in audit log filter
2026-03-26 21:20:19 +05:30
Marek Siarkowicz
0b87e643e7 Fix flaking RunTestDelayedWatchDelivery 2026-03-24 02:17:31 -07:00
Kubernetes Prow Robot
51ba107046 Merge pull request #137808 from danwinship/automated-cherry-pick-of-#137501-origin-release-1.34
Automated cherry pick of #137501: Fix kube-proxy on systems with nft 1.1.3 (take 2)
2026-03-19 18:10:32 +05:30
Kubernetes Release Robot
f95ab204b3 Update CHANGELOG/CHANGELOG-1.34.md for v1.34.6 2026-03-18 19:27:20 +00:00
Kubernetes Release Robot
8b2bf66ce7 Release commit for Kubernetes v1.34.6 v1.34.6 2026-03-18 19:15:56 +00:00
Alessio Attilio
77ba3a841e pkg/proxy/nftables: fix kube-proxy crash with newer nftables versions
Fixes kube-proxy's nftables mode to work on systems with nft 1.1.3.
2026-03-17 08:10:07 -04:00
Dan Winship
82db8918d3 Update knftables to v0.0.21 2026-03-17 08:10:07 -04:00
Kubernetes Prow Robot
9aae4d4ddc Merge pull request #137643 from BenTheElder/no-rules-1.34
drop publishing rules from dependencies.yaml on release-1.34
2026-03-12 06:21:35 +05:30
Benjamin Elder
87990decd2 drop publishing rules from dependencies.yaml on release branch
We only use the rules in the master branch.

Since we don't need rules.yaml, we don't have two places to match, so we can drop the golang version entirely from this file

bump .go-version alone will be sufficient* on release branches after kubernetes#136954

* ignoring e2e images like agnhost, which will require follow-up PRs ...
2026-03-11 12:55:56 -07:00
Kubernetes Prow Robot
537ab630b2 Merge pull request #137570 from fuweid/cp-1374942-134
[release-1.34] cmd/kubeadm: ignore EINVAL error during unmount
2026-03-11 21:17:36 +05:30
Kubernetes Prow Robot
bcd1ef31ef Merge pull request #137258 from ahrtr/automated-cherry-pick-of-#137251-upstream-release-1.34
Automated cherry pick of #137251: kubeadm: do not add learner member to etcd client endpoints
2026-03-11 16:23:38 +05:30
Wei Fu
da50ffde17 cmd/kubeadm: ignore EINVAL error during unmount
If /var/lib/kubelet is MS_SHARED mountpoint, all the mountpoints
under /var/lib/kubelet will have duplicate one. When `kubeadm reset -f`
is executed, it will try to umount one path twice. However, they are in
the peer group. Once we umount one path, the duplicate one will be
umounted as well. So, in this case, we should ignore EINVAL error.

Signed-off-by: Wei Fu <fuweid89@gmail.com>
(cherry picked from commit 2634261c17)
Signed-off-by: Wei Fu <fuweid89@gmail.com>
2026-03-09 10:20:21 -04:00
Kubernetes Prow Robot
3b27d54731 Merge pull request #136386 from vikasbolla/automated-cherry-pick-of-#135567-upstream-release-1.34
[release1.34]Automated cherry pick of #135567: Fix flaky TestApplyCRDuringCRDFinalization test
2026-03-03 16:13:20 +05:30
Kubernetes Prow Robot
4b165951b9 Merge pull request #137077 from varshadeshmane92/automated-cherry-pick-of-#133360-upstream-release-1.34
Automated cherry pick of #133360: fix: parsing the patch directly
2026-03-03 14:57:29 +05:30
Kubernetes Prow Robot
9e5e5ce16e Merge pull request #136832 from varshadeshmane92/automated-cherry-pick-of-#134754-upstream-release-1.34
Automated cherry pick of #134754: Use fast policy refresh interval for TestParamRef
2026-03-03 14:57:21 +05:30