Commit Graph

112151 Commits

Author SHA1 Message Date
Jan Safranek
ebc5b208ae Fix OwnerReferencesPermissionEnforcement complaints when autodeleting PVCs
When StatefulSetAutoDeletePVC feature gate is enabled, StatefulSet
controller updates ownerReferences on managed PVCs. To be able to pass
OwnerReferencesPermissionEnforcement admission, it must have permissions to
delete PVCs.
2022-11-24 14:46:45 +01:00
Kubernetes Prow Robot
8f2371bcce
Merge pull request #114096 from pacoxu/vul-version-wrong
changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
2022-11-24 00:30:04 -08:00
Paco Xu
efb3f79328 changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 2022-11-24 13:03:44 +08:00
Kubernetes Prow Robot
45279654db
Merge pull request #114093 from pacoxu/etcd-3.5.6
use etcd 3.5.6-0 after etcd image is promoted
2022-11-23 19:02:04 -08:00
Paco Xu
75f89875f8 use etcd 3.5.6-0 after promotion 2022-11-24 09:45:56 +08:00
Kubernetes Prow Robot
7530baa9a1
Merge pull request #114044 from andrewsykim/fix-node-proxy-tests
test/e2e_node: set apiserver kubelet preferred addresses
2022-11-23 14:16:03 -08:00
Kubernetes Prow Robot
9884746f0f
Merge pull request #114084 from dims/bump-golang-version-for-building-etcd
Bump GOLANG_VERSION to build etcd `migrate` utility
2022-11-23 08:06:16 -08:00
Davanum Srinivas
efd8723ece
Bump GOLANG_VERSION to build etcd (from 1.16.x to 1.17.x)
Also fix REVISION back to `0` this was missed in the previous PR

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-11-23 10:02:03 -05:00
Kubernetes Prow Robot
deba5619ab
Merge pull request #114064 from pacoxu/etcd-356
etcd: Build image 3.5.6-0
2022-11-23 05:26:14 -08:00
Kubernetes Prow Robot
21916415cb
Merge pull request #114077 from dims/add-missing-tags-for-kms-and-dynamic-resource-allocation-for-publishing
Add missing tags for kms and dynamic-resource-allocation for publishing
2022-11-22 20:24:14 -08:00
Davanum Srinivas
130bd8cba5
Add missing tags for kms and dynamic-resource-allocation for publishing
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-11-22 21:04:19 -05:00
Kubernetes Prow Robot
5fd9a519a9
Merge pull request #113946 from Huang-Wei/fix-podschedulingreadiness-metric
Fix an accuracy issue of `scheduler_pending_pods` metric
2022-11-22 16:42:13 -08:00
Paco Xu
a8b22ff28c upgrade etcd 3.5.6 for image build 2022-11-22 17:08:12 +08:00
Wei Huang
a731a44596
Fix an accuracy issue of scheduler_pending_pods metric 2022-11-21 21:33:16 -08:00
Andrew Sy Kim
6c8eacb157 test/e2e_node: set apiserver kubelet preferred addresses
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-21 15:09:04 -05:00
Kubernetes Prow Robot
57eb5d631c
Merge pull request #113976 from swatisehgal/dra-fix-claim-parameter-name
dra: test examples: ensure that the claim parameter name is consistent
2022-11-18 05:16:30 -08:00
Kubernetes Prow Robot
77022402c5
Merge pull request #113960 from moshe010/doc
[DRA] Add RUNTIME_CONFIG="resource.k8s.io/v1alpha1"
2022-11-18 04:12:30 -08:00
Swati Sehgal
4d15502e43 dra: test examples: ensure that the claim parameter name is consistent
In the Dynamic Resource allocation example specs, the claim
parameter name specified was inconsistent.

This commit fixes that with a better/more consistent name,
which is used to define the configmap and referenced in
the `ResourceClaimTemplate` spec.

Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
2022-11-17 14:56:42 +00:00
Kubernetes Prow Robot
3f823c0daa
Merge pull request #113955 from enj/enj/i/kms_conn_close
kms: use different context for server lifecycle and initial load
2022-11-16 14:50:48 -08:00
Monis Khan
cb3410e1b7
kms: use different context for server lifecycle and initial load
Signed-off-by: Monis Khan <mok@microsoft.com>
2022-11-16 16:44:23 -05:00
Moshe Levi
f46b66088a [DRA] Add RUNTIME_CONFIG="resource.k8s.io/v1alpha1"
This flag is required to enable the DRA resource api

Signed-off-by: Moshe Levi <moshele@nvidia.com>
2022-11-16 23:09:24 +02:00
Kubernetes Prow Robot
43b7a25353
Merge pull request #113923 from claudiubelu/patch-9
e2e tests: Revert windows-nanoserver image version
2022-11-16 06:14:49 -08:00
Kubernetes Prow Robot
6c65bed7ce
Merge pull request #113934 from salaxander/publishing-release-126
staging/publishing: add release-1.26 branch
2022-11-16 03:22:49 -08:00
Kubernetes Prow Robot
96fd7b1b50
Merge pull request #113937 from liggitt/drop-strict-beta
Switch deprecated API serving back to gating on beta
2022-11-15 21:00:47 -08:00
Jordan Liggitt
32ac434d4d
Switch deprecated API serving back to gating on beta 2022-11-15 22:02:49 -05:00
Kubernetes Release Robot
0fdac49162 CHANGELOG: Update directory for v1.26.0-rc.0 release 2022-11-16 00:01:41 +00:00
Xander Grzywinski
2111eceb6a Add publishing bot rules for 1.26 2022-11-15 13:51:18 -08:00
Kubernetes Prow Robot
e39a0af5ce
Merge pull request #113927 from alculquicondor/job-wait-finish
Add e2e test to ignore failures with 137 exit code
2022-11-15 12:32:48 -08:00
Aldo Culquicondor
f40debc8c5
Add e2e test to ignore failures with 137 exit code
Change-Id: Iaf71284f34f420f5a30f43aad0bc284c84fc19f9
2022-11-15 14:31:12 -05:00
Kubernetes Prow Robot
591fc0d8ab
Merge pull request #113858 from aojea/ingress_nightly
Fix kubernetes/gce-ingress jobs
2022-11-15 10:56:47 -08:00
Aldo Culquicondor
7dc36bdf82
Wait for Pods to finish before considering Failed in Job (#113860)
* Wait for Pods to finish before considering Failed

Limit behavior to feature gates PodDisruptionConditions and
JobPodFailurePolicy and jobs with a podFailurePolicy.

Change-Id: I926391cc2521b389c8e52962afb0d4a6a845ab8f

* Remove check for unsheduled terminating pod

Change-Id: I3dc05bb4ea3738604f01bf8cb5fc8cc0f6ea54ec
2022-11-15 09:44:53 -08:00
Kubernetes Prow Robot
dc7fd39eb7
Merge pull request #113738 from andrewsykim/cel-integration-tests
test/integration/apiserver/cel: more tests!
2022-11-15 09:44:41 -08:00
Claudiu Belu
4276f8c023
e2e tests: Revert windows-nanoserver image version
A recent PR [1] updated the image versions we use for E2E tests. However, the ``windows-nanoserver`` image is meant to be in a private authenticated registry: ``gcr.io/authenticated-image-pulling/windows-nanoserver``, which requires credentials to pull images from it. This image is required by the ``[sig-node] Container Runtime blackbox test when running a container with a new image should be able to pull from private registry with secret [NodeConformance]`` test for Windows. The ``v3`` image does not exist, there's no automatic promotion process for that registry. Previously, it was built and pushed manually.

Because of this, the https://testgrid.k8s.io/sig-windows-signal#capz-windows-containerd-master jobs have started to fail.

Reverts the image version to ``v1``.


[1] https://github.com/kubernetes/kubernetes/pull/113900
2022-11-15 19:04:03 +02:00
Kubernetes Prow Robot
d34bdeea41
Merge pull request #113853 from jsafrane/add-volumepath
Fix subpath disruptive tests
2022-11-15 07:56:52 -08:00
Kubernetes Prow Robot
730d1e209f
Merge pull request #113650 from aojea/e2e_lb_conntrack
e2e loadbalancer udp conntrack test
2022-11-15 07:56:40 -08:00
Antonio Ojea
962dbbba48 fix glbc jobs
use latest stable version
add permissions for endpointslices
2022-11-15 13:39:59 +00:00
Andrew Sy Kim
34a2d265d7 test/integration/apiserver/cel: update createAndWaitReady to retry on error including 'not yet synced to use for admission'
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 22:27:16 -05:00
Andrew Sy Kim
7127f565f6 test/integration/apiserver/cel: add Test_ValidatingAdmissionPolicy_UpdateParamResource
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 21:48:12 -05:00
Andrew Sy Kim
0fb038fb15 test/integration/apiserver/cel: add lifecycle tests for deleting/recreating policy, policy bindings, and param resources
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 21:48:12 -05:00
Andrew Sy Kim
3f477f847d test/integration/apiserver/cel: update feature gate name CELValidatingAdmission -> ValidatingAdmissionPolicy
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 21:48:12 -05:00
Andrew Sy Kim
38d884580b test/integration/apiserver/cel: add tests for match resources and match policy
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
2022-11-14 21:48:12 -05:00
Kubernetes Prow Robot
3cfa245342
Merge pull request #113900 from marosset/update-e2e-test-image-refs
Updating refs for e2e test images to latest
2022-11-14 17:18:42 -08:00
Mark Rossetti
e6a1f3b626
Removing --alsologtostderr from sample-webhook containers used for e2e tests
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-11-14 16:00:44 -08:00
Kubernetes Prow Robot
9b5782959b
Merge pull request #113895 from marosset/use-pause-3.9
Updating pause image refernces to 3.9
2022-11-14 15:18:41 -08:00
Mark Rossetti
575ee2c782
Updating refs for e2e test images to latest
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-11-14 14:47:16 -08:00
Kubernetes Prow Robot
b6b0e1a0c8
Merge pull request #113814 from sftim/20221110_mark_instrumentation_doc_autogenerated
Fix autogeneration mark for instrumentation doc
2022-11-14 12:00:41 -08:00
Kubernetes Prow Robot
418608e926
Merge pull request #113797 from seans3/force-no-aggregated
Adds field to force non-aggregated discovery
2022-11-14 10:56:52 -08:00
Kubernetes Prow Robot
84a55ad8d2
Merge pull request #113147 from andrewsykim/storageversiongc-controller-tests
add unit tests for storageversiongc controller
2022-11-14 10:56:41 -08:00
Mark Rossetti
534f052a8d
Updating pause image refernces to 3.9
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
2022-11-14 10:24:54 -08:00
Kubernetes Prow Robot
b10731edc3
Merge pull request #113850 from aojea/e2e_service_panic
remove unused afterEach hook on e2e services
2022-11-14 09:50:53 -08:00