Commit Graph

122099 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
d35ba3635b
Merge pull request #121970 from pohly/log-apimachinery-runtime
apimachinery runtime: support contextual logging
2024-04-17 23:59:47 -07:00
Kubernetes Prow Robot
a2abca11ff
Merge pull request #121898 from carlory/ing-registry-test
ingress registry: add unit test for UpdateStatus
2024-04-17 23:59:40 -07:00
Kubernetes Prow Robot
3fda574e5e
Merge pull request #121770 from frzifus/tracing_kubelet_read-only
pass tracerprovider to kublet-readonly server
2024-04-17 23:59:33 -07:00
Kubernetes Prow Robot
528cff12f6
Merge pull request #120969 from skitt/uber-go-mock
Switch from golang/mock to uber-go/mock
2024-04-17 23:59:24 -07:00
Kubernetes Prow Robot
56b39eab7c
Merge pull request #119436 from claudiubelu/unittests-9
unittests: Fixes unit tests for Windows (part 9)
2024-04-17 22:51:32 -07:00
Kubernetes Prow Robot
88350dbeb0
Merge pull request #118457 from rpluem-vf/nodev_noexec_nosuid_noatime_relatime_nodiratime
Fix bind mounts of filesystems with specific mount options set
2024-04-17 20:07:12 -07:00
Kubernetes Prow Robot
56e35c1fa4
Merge pull request #118387 from testwill/ioutil-csi
chore: io/ioutil deprecated
2024-04-17 18:29:56 -07:00
Kubernetes Prow Robot
0dc45103d8
Merge pull request #116781 from muff1nman/protobuf-fully-qualified-types
generate fully qualified type references
2024-04-17 16:05:02 -07:00
Kubernetes Release Robot
a7f9938cd5 CHANGELOG: Update directory for v1.30.0 release 2024-04-17 17:56:15 +00:00
Kubernetes Release Robot
d831b13e6f CHANGELOG: Update directory for v1.29.4 release 2024-04-16 21:41:06 +00:00
Kubernetes Release Robot
f1874adf5f CHANGELOG: Update directory for v1.28.9 release 2024-04-16 20:44:48 +00:00
Kubernetes Release Robot
69e332560d CHANGELOG: Update directory for v1.27.13 release 2024-04-16 15:20:21 +00:00
杨军10092085
86a31ca302 fix:When the parameter of kube-proxy is configured as ipv6, the ip address of metrics listens to 127.0.0.1 by default, instead of::1 2024-04-16 08:56:49 +08:00
Kubernetes Prow Robot
b722d017a3
Merge pull request #124322 from ritazh/admission-ephemeralcontainers-envfrom
Add envFrom to serviceaccount admission plugin
2024-04-15 09:16:32 -07:00
Rita Zhang
128d6cc146
Add envFrom to serviceaccount admission plugin
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2024-04-12 10:49:30 -07:00
Kubernetes Prow Robot
cae35dba5a
Merge pull request #124283 from dims/rename-cluster-to-storage_cluster_id-for-apiserver_storage_size_bytes-metric
Rename Label `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric
2024-04-12 00:13:00 -07:00
nayihz
1b3d10aafa fix: node added with matched pod anti-affinity topologyKey
Co-authored-by: Kensei Nakada <handbomusic@gmail.com>
2024-04-12 11:08:44 +08:00
Davanum Srinivas
fb5140f562
Rename cluster to storage_cluster_id for apiserver_storage_size_bytes metric
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-11 17:15:32 -04:00
Kubernetes Release Robot
7606cf7b3d CHANGELOG: Update directory for v1.30.0-rc.2 release 2024-04-11 17:05:57 +00:00
huweiwen
3a71fe57f7 ad controller: lift nodeAttachedTo.mountedByNode
optimize adc.nodeUpdate(). Time complexity reduced from O(n) to O(1), where n is the number of nodes.

Data stored in nodeAttachedTo.mountedByNode is now at actualStateOfWorld.inUseVolumes.

This refactor also ensures that we can record the state update even if the volume is not present in ASW yet.

The added BenchmarkNodeUpdate result is reduced from 28076923 to 16030 ns/op.
The previous BenchmarkPopulateActualStateOfWorld result is also reduced from 13s to 8s.
2024-04-11 15:35:17 +08:00
Maksym Pavlenko
be4b7176dc
Fix Abs path validation on Windows (#124084)
* Windows: Consider slash-prefixed paths as absolute

filepath.IsAbs does not consider "/" or "\" as absolute paths, even
though files can be addressed as such. [1][2]

Currently, there are some unit tests that are failing on Windows due to
this reason.

[1] https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats#traditional-dos-paths
[2] https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#fully-qualified-vs-relative-paths

* Add test to verify IsAbs for windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Fix abs path validation on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Skipp path clean check for podLogDir on windows

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Implement IsPathClean to validate path

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

* Add warn comment for IsAbs

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>

---------

Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
Co-authored-by: Claudiu Belu <cbelu@cloudbasesolutions.com>
2024-04-10 10:13:59 -07:00
Flavian Missi
e13ff5ece2 resourcequota: use singleflight.Group to reduce apiserver load
relates to #22422 and #123806
2024-04-10 15:54:56 +02:00
Hiranmoy Das Chowdhury
0cd2588d4f deep copy issue in getting controller is solved 2024-04-09 11:14:33 +06:00
Xuzheng Chang
3e08030d53 fix wrong comments of dra
Signed-off-by: Xuzheng Chang <changxuzheng@huawei.com>
2024-04-09 09:41:25 +08:00
Ruediger Pluem
988bc86016 Appease gofmt 2024-04-08 20:06:56 +02:00
Ruediger Pluem
db51d5f99c Fix linter hints 2024-04-08 17:51:24 +02:00
Ruediger Pluem
0e13fa24ae Move flag mapping to a separate function and unit test it 2024-04-08 17:16:35 +02:00
Kevin Hannon
43e0bd4304 mark flaky jobs as flaky and move them to a different job 2024-04-08 09:27:15 -04:00
Kubernetes Prow Robot
9791f0d1f3
Merge pull request #124206 from cpanato/update-rules
Update publishing-bot rules to Go 1.21.9
2024-04-06 19:52:22 -07:00
cpanato
d19bff9a02
Update publishing-bot rules to Go 1.21.9
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-06 12:34:48 +02:00
guoguangwu
ad7799d07d fix: close tmp file
Signed-off-by: guoguangwu <guoguangwug@gmail.com>
2024-04-06 10:55:08 +08:00
Tim Hockin
ca1d4c1bc9 build_binaries: use return as it's not in a subshell anymore 2024-04-06 00:23:42 +03:00
Tim Hockin
29d6922df2 kube::golang::place_bins: more verbose output 2024-04-06 00:20:51 +03:00
Ed Bartosh
91099aca72 hacks: build main target without go in the PATH
`make` is able to build project binaries, but fails with
error `hack/lib/golang.sh: line 455: go: command not found`
trying to place them if go binary is not in the PATH.
This happens because kube::golang::place_bins uses different
environment than kube::golang::build_binaries.

Setting up an one environment for both `kube::golang::place_bins`
and `kube::golang::build_binaries` should solve this issue and allow
default make target to fully work without go binary in the PATH.
2024-04-05 17:36:57 +03:00
Kubernetes Prow Robot
f8930f980d
Merge pull request #124196 from cpanato/update-go-main
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
2024-04-05 07:30:42 -07:00
cpanato
1366f1f447
[go] Bump images, dependencies and versions to go 1.22.2 and distroless iptables
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-04-05 14:27:57 +02:00
Maciej Szulik
b40057db2a
Update applyconfig-gen for pacakges where group and dir differ in name
It is possible that package paths might differ from the group name, see
https://github.com/openshift/api/blob/master/operatorcontrolplane/v1alpha1/doc.go
notice that pacakge name is `operatorcontrolplane` whereas the group is
`controlplane.operator...`. This confuses the generator since it tries
to extrapolate the name of the package based on the group name. Whereas
the ImportTracker can properly recognize the import path. This leads to
cyclical imports in packages where the group name is different from the
actual import path.
2024-04-05 13:20:45 +02:00
Ruediger Pluem
3e646cd8cf Align go.mod and go.sum
Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:34:12 +02:00
Ruediger Pluem
2bdacbf685 Fix bind mounts of filesystems with specific mount options set
Currently bind mounts of filesystems with nodev, noexec, nosuid,
noatime, relatime or nodiratime options set fail if we are running in a
user namespace if the same options are not set for the bind mount.

In case we are running in a user name space fix this by searching the
mount options of the source filesystem for nodev, noexec, nosuid,
noatime, relatime or nodiratime and retry the bind mount with the
options found added.

Signed-off-by: Ruediger Pluem <ruediger.pluem@vodafone.com>
2024-04-04 14:25:30 +02:00
Kubernetes Prow Robot
d9c54f69d4
Merge pull request #124174 from dims/update-x/net-for-CVE-2023-45288
Update x/net for CVE-2023-45288
2024-04-03 20:13:01 -07:00
Davanum Srinivas
99fac38d28
Update x/net for CVE-2023-45288
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-04-03 19:56:04 -04:00
Quan Tian
6fefa74616 Add tnqn to sig-network-reviewers
Signed-off-by: Quan Tian <qtian@vmware.com>
2024-04-03 16:10:17 +08:00
Kubernetes Release Robot
6673e7a93d CHANGELOG: Update directory for v1.30.0-rc.1 release 2024-04-02 19:30:33 +00:00
Kubernetes Prow Robot
ec301a5cc7
Merge pull request #124099 from cpanato/update-set-cap-debian-base
update setcap/debian-base to bookworm-v1.0.2
2024-04-02 08:24:11 -07:00
Kubernetes Prow Robot
c9f6d4e172
Merge pull request #124019 from alexzielenski/fix-ratcheting-flake
fix test flake caused by not waiting for CRD schema update
2024-04-02 07:00:11 -07:00
Nadia Pinaeva
56d1011aa5 kube-proxy: ensure nftables unit test parity with iptables.
Add packet tracing unit tests for ipv4 and ipv6.
Remove unreachable code from runChain, since some of the parsed rules
are never generated by the proxy implementation.

Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
2024-04-02 11:57:47 +02:00
Nadia Pinaeva
1c7b366182 kube-proxy: rename iptables unit test to match tested function name.
Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
2024-04-02 11:57:47 +02:00
Nadia Pinaeva
20bd3dd774 Update knftables to v0.0.16
Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
2024-04-02 11:57:47 +02:00
Kubernetes Prow Robot
e3bb757129
Merge pull request #124143 from enj/enj/i/svm_update_crd_flake
svm test: wait after updating CRD to avoid flakes
2024-04-01 14:19:35 -07:00
Monis Khan
f338ab5f95
svm test: wait after updating CRD to avoid flakes
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-04-01 16:15:29 -04:00