Commit Graph

129618 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ea08d4df93 Merge pull request #128946 from jackfrancis/SetPVCVACName-eventually-gomega
test: don't panic during an Eventually retry loop
2025-04-29 09:17:55 -07:00
Kubernetes Prow Robot
2579512f2f Merge pull request #131492 from aroradaman/nftables-cleanup
nftables: cleanup service chain checks
2025-04-29 08:10:06 -07:00
Kubernetes Prow Robot
75f85451d1 Merge pull request #131224 from skitt/go-1.24-osroot
Use Go 1.24 os.Root instead of filepath-securejoin
2025-04-29 08:09:55 -07:00
Kubernetes Prow Robot
5be7941786 Merge pull request #131522 from sunnylovestiramisu/addReviewer
Add sunnylovestiramisu as Reviewer
2025-04-28 21:29:54 -07:00
Sunny Song
2080bafa15 Add sunnylovestiramisu as Reviewer 2025-04-28 23:40:49 +00:00
Kubernetes Prow Robot
23258f104d Merge pull request #131511 from pohly/dep-misspell
dependencies: github.com/client9/misspell -> github.com/golangci/misspell
2025-04-28 12:25:53 -07:00
Kubernetes Prow Robot
1f056f8f88 Merge pull request #131495 from carlory/fix-131381
Handle unsupported node expansion for RWX volumes
2025-04-28 10:39:54 -07:00
carlory
dddfeb4a0e Handle unsupported node expansion for RWX volumes
Co-authored-by: Hemant Kumar <gnufied@users.noreply.github.com>
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-04-29 00:19:47 +08:00
Kubernetes Prow Robot
a688664afa Merge pull request #131493 from hoskeri/externaljwt-oidc-discovery-fix
Externaljwt OIDC discovery fix
2025-04-28 08:23:54 -07:00
Patrick Ohly
8bb7b05637 dependencies: github.com/client9/misspell -> github.com/golangci/misspell
github.com/client9/misspell was archived by the owner on Mar 26, 2025.
The golangci-lint team maintains a fork.

The newer code finds some misspellings which where missed before.
2025-04-28 15:44:04 +02:00
Kubernetes Prow Robot
0abee6bd55 Merge pull request #131488 from sivchari/apply-slices-package
kubeadm: use slices package to reduce the codes
2025-04-28 03:07:28 -07:00
Kubernetes Prow Robot
a19c0ad553 Merge pull request #131491 from tchap/kubectl-service-describe-trafficdistribution
kubectl describe service: Add Traffic Distribution
2025-04-28 00:37:32 -07:00
Ondra Kupka
ad40bc8856 kubectl describe service: Add Traffic Distribution 2025-04-28 08:28:46 +02:00
Kubernetes Prow Robot
c519248e8a Merge pull request #131093 from bzsuni/bz/etcd/image/build/v3.6.0-rc.3
Build etcd v3.6.0-rc.4 image
2025-04-27 05:43:24 -07:00
Kubernetes Prow Robot
549a6a6c58 Merge pull request #131489 from sivchari/use-testing-tmpdir
kubeadm: use testing.TempDir and delete helper function
2025-04-26 20:57:24 -07:00
Abhijit Hoskeri
db960d1007 Fix openid discovery docs with external jwt signer.
If the external jwt signer is enabled, publishing
OIDC discovery docs and keys fails because the PublicKeysGetter
is not wired correctly.

Set the public keys getter on startup so public key
discovery works in that case as well.
2025-04-26 17:39:31 -07:00
Kubernetes Prow Robot
5675be2575 Merge pull request #131297 from thockin/kk_one_type_discoverer
validation-gen: Use a single TypeDiscoverer for all inputs
2025-04-26 15:51:23 -07:00
Abhijit Hoskeri
1869f6f23a Fix typo in service account config test. 2025-04-26 14:36:33 -07:00
Daman Arora
c7a870135a nftables: cleanup service chain checks
A packet can traverse the service-xxxx chains by matching on either
service-ips or service-nodeports verdict map. We masquerade off-cluster
traffic to ClusterIP (when masqueradeAll = false) by adding a rule in
service-xxxx which checks if destination IP is ClusterIP, port and
protocol matches with service specs and source IP doesn't belong to
PodCIDR and masquerade on match.

If the packet reaches the service chain by match on service-ips map,
then ClusterIP, port and protocol are already matching service specs.
If it comes via external-xxxx chain then the destination IP will
never be ClusterIP. Therefore, we can simplify the masquerade
off-cluster traffic to ClusterIP check by simply matching on
destination ip and source ip.

Signed-off-by: Daman Arora <aroradaman@gmail.com>
2025-04-27 01:05:45 +05:30
Kubernetes Prow Robot
5290c24e85 Merge pull request #131486 from aroradaman/kube-proxy-ipt-init-error
kube-proxy: log errors during proxy boot
2025-04-26 09:29:23 -07:00
sivchari
494b2b563f use testing.TempDir and delete helper function
Signed-off-by: sivchari <shibuuuu5@gmail.com>
2025-04-27 01:21:39 +09:00
sivchari
efcceee903 reduce assignment
Signed-off-by: sivchari <shibuuuu5@gmail.com>
2025-04-27 00:33:07 +09:00
sivchari
f42ee7a2d6 use slices package to reduce the codes
Signed-off-by: sivchari <shibuuuu5@gmail.com>
2025-04-26 23:08:02 +09:00
Daman Arora
9cb3dfb5d3 kube-proxy: log errors during proxy boot
Signed-off-by: Daman Arora <aroradaman@gmail.com>
2025-04-26 16:06:18 +05:30
Kubernetes Prow Robot
fe5afa919b Merge pull request #130333 from kmala/job
handle job complete update delayed event
2025-04-25 17:55:22 -07:00
Kubernetes Prow Robot
8b460b45ad Merge pull request #130613 from mengqiy/patch-3
Update OWNERS_ALIASES for sig scalability
2025-04-25 15:43:22 -07:00
Kubernetes Prow Robot
30f8f3d146 Merge pull request #131361 from jkyros/fix-inplace-test-wait-quota-status
[FG:InPlacePodVerticalScaling] deflake - wait for resourceQuota status to be populated
2025-04-25 13:35:22 -07:00
Kubernetes Prow Robot
b2e72e6caa Merge pull request #131462 from BenTheElder/kubectl-proxy-local-skip
kubectl proxy env e2e test, skip when host is localhost
2025-04-25 11:25:34 -07:00
Kubernetes Prow Robot
e2ccbd255c Merge pull request #130362 from aojea/node_addresses_init
Use node addresses from informer in kubelet certificate manager
2025-04-25 11:25:22 -07:00
Kubernetes Prow Robot
1b509a8883 Merge pull request #131434 from pacoxu/fsnotify
bump fsnotify v1.9.0
2025-04-25 09:41:30 -07:00
Kubernetes Prow Robot
375f282985 Merge pull request #131408 from gnufied/remove-unknown-resizing-error
Remove warning about resizing failed for unknown reason
2025-04-25 09:41:24 -07:00
Kubernetes Prow Robot
b837e345a9 Merge pull request #131406 from saschagrunert/cri-tools-1.33
Update cri-tools to v1.33.0
2025-04-25 07:53:04 -07:00
Kubernetes Prow Robot
629537d8c6 Merge pull request #131151 from yashsingh74/bump-coredns-1.12.1
Update coredns to v1.12.1
2025-04-25 07:52:57 -07:00
Kubernetes Prow Robot
09d0ffee6b Merge pull request #131465 from pacoxu/v1.33.0-api-testdata
v1.33.0 api testdata
2025-04-25 06:24:38 -07:00
Kubernetes Prow Robot
736f03bb88 Merge pull request #131464 from pacoxu/fix-windows
[kubelet] fix nil pointer panic on windows node
2025-04-25 06:24:31 -07:00
Kubernetes Prow Robot
3a8af5a174 Merge pull request #131459 from BenTheElder/codegen-streamline
automatically setup hack/update-codegen.sh dependencies
2025-04-25 03:58:30 -07:00
Kubernetes Prow Robot
e9379e92db Merge pull request #131444 from erdii/update-cel-go
chore: update github.com/google/cel-go dependency to v0.25.0
2025-04-25 02:14:31 -07:00
Josh Gwosdz
7a24c4ce5d chore: update github.com/google/cel-go dependency to v0.25.0
Signed-off-by: Josh Gwosdz <jgwosdz@redhat.com>
2025-04-25 10:07:12 +02:00
Paco Xu
addaf680ae remove v1.31.0 api testdata 2025-04-25 15:49:41 +08:00
Paco Xu
86a43f4b53 Add v1.33.0 API testdata 2025-04-25 15:49:16 +08:00
Paco Xu
89156452ae fix nil pointer panic on windows node 2025-04-25 15:38:14 +08:00
John Kyros
00908ce2d1 Wait for resource quota status to be populated
Trying to create a pod using a resourcequota whose status has not been
populated will result in api admission rejecting it with a 403
Forbidden. The pod resize tests do not wait/check to make sure the
resourcequota status is populated before trying to use the quota when
creating a pod, so in scenarious where either the test runs too fast, or
the resourcequota controller is too slow, the tests will fail.

This just makes the test wait up to a minute for the quota status to
populate. The status generation timing/logic gets tested separately in
test/e2e/apimachinery/resource_quota.go, and it waits a minute, so we
wait a minute, but in practice it takes at worst seconds.
2025-04-25 01:09:08 -05:00
Benjamin Elder
d5bf33e7d7 update-codegen.sh: automatically install protoc 2025-04-24 22:54:09 -07:00
Benjamin Elder
8a2f367ec3 automatically install goimports when running update-codegen 2025-04-24 22:54:09 -07:00
Benjamin Elder
1473aeaac4 add goimports to tools module
used by go-to-protobuf, currently we rely on the host copy ...
2025-04-24 22:54:09 -07:00
Benjamin Elder
540ea5949f skip kubectl proxy env tests when the host is localhost/loopback and would not be proxied 2025-04-24 22:40:05 -07:00
Antonio Ojea
1214dc223c kubelet: Use node addresses from informer
The kubelet certificate manager was using a closure to get the node addresses,
but this closure depended on a static field that was only updated during the node
status update. This created a twisted dependency between the node.status
reconcile loops and the certificate manager.

This commit fixes this issue by using the node informer to get the node addresses directly.
This ensures that the kubelet always requests a certificate with the latest node addresses.
2025-04-25 03:15:42 +00:00
Kubernetes Prow Robot
616d6d4e75 Merge pull request #131456 from BenTheElder/staging-dep-approvers
enable dep-approvers for staging go.mod/go.sum
2025-04-24 19:14:31 -07:00
Benjamin Elder
187b43d5ad enable dep-approvers for staging go.mod/go.sum
NOTE: to use filters, _all_ entries must be under filters https://go.k8s.io/owners/#filters
2025-04-24 17:17:27 -07:00
Kubernetes Prow Robot
38ad2e1c95 Merge pull request #131454 from BenTheElder/mark-yaml-unwanted
track gopkg.in/yaml.v3 as an unwanted depdendency
2025-04-24 17:16:30 -07:00