Commit Graph

121941 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
d34fbeb0a3
Merge pull request #123446 from linxiulei/hit_cache
Hit APIServer cache when testing healthiness
2024-03-04 10:24:45 -08:00
Marek Siarkowicz
1cf4cec449 Test that separation of streams work by using progress notifies 2024-03-04 19:02:04 +01:00
Monis Khan
8345ad0bac
jwt: fail on empty username via CEL expression
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 12:51:19 -05:00
Gaurav Ghildiyal
606cae9b47 Add new metric servicesCountByTrafficDistribution 2024-03-04 09:33:40 -08:00
Monis Khan
05e1eff793
Prevent conflicts between service account and jwt issuers
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-04 11:40:02 -05:00
Kubernetes Prow Robot
9043ce05c1
Merge pull request #123667 from jsafrane/selinux-metrics-access-mode
Add label with access mode to SELinux metrics
2024-03-04 08:25:39 -08:00
Jan Safranek
57d1b68dc2 Remove deprecated sets.String 2024-03-04 14:33:04 +01:00
Kubernetes Prow Robot
55d1518126
Merge pull request #123588 from pohly/scheduler-perf-any-cleanup
scheduler_perf: automatically delete created objects
2024-03-04 04:49:12 -08:00
Jan Safranek
c4163a9cb8 Add label with access mode to SELinux metrics
In the KEP 1710 we promised to have all SELinux metrics with access mode
label, so cluster admin is able to distinguish when RWOP volumes are
failing to mount (-> SELinuxMountReadWriteOncePod feature gate must be
disabled) or volumes with any other access modes are failing (->
SELinuxMount feature gate must be disabled).

Adding the label to kubelet is quite straightforward, there were some
changes needed in the e2e test. Now grabMetrics() collects values of all
SELinux related metrics with all labels. It only skips unrelated volume
plugins. And waitForMetricIncrease gets metric with all labels on input, so
it can check that say RWOP metric increased and RWX one did not.
2024-03-04 13:16:56 +01:00
Marek Siarkowicz
31d404b182 Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior 2024-03-04 12:51:06 +01:00
Kubernetes Prow Robot
a4eaf6e120
Merge pull request #123660 from xigang/cacher/watch
cleanup: if triggerValue has a value fast break
2024-03-04 01:17:02 -08:00
Kubernetes Prow Robot
9d39ce04fd
Merge pull request #123595 from neolit123/1.30-add-timeouts-upgradeconfig
kubeadm: add timeouts to v1beta4.UpgradeConfiguration
2024-03-04 01:16:44 -08:00
Patrick Ohly
eb6abf0462 scheduler_perf: automatically delete created objects
This is not relevant for namespaced objects, but matters for the cluster-scoped
ResourceClass during unit testing. This works right now because there is only
one such unit test, but will fail when adding a second one.

Instead of passing a boolean flag down into all functions where it might be
needed, it's now a context value.
2024-03-04 09:54:38 +01:00
Kubernetes Prow Robot
d440ab18ce
Merge pull request #123656 from huww98/e2e-pod-fail-fast
e2e pod: fail fast on failed pod
2024-03-04 00:00:14 -08:00
Gaurav Ghildiyal
51f86b9124 Change kube-proxy behaviour to consider hints when ServiceTrafficDistribution feature gate is enabled 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
51a3fa2e6f Start reconciling on the new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
9513f75089 Add trafficdist package for handling reconciliation of new field 2024-03-03 22:46:03 -08:00
Gaurav Ghildiyal
646fd200b8 Run 'make update' 2024-03-03 22:46:00 -08:00
Gaurav Ghildiyal
996d11d4e8 Add new field trafficDistribution to Service spec 2024-03-03 22:34:17 -08:00
Kubernetes Prow Robot
8c80c07e85
Merge pull request #123655 from huww98/mt-n
agnhost/mounttest: add new line to output
2024-03-03 22:29:44 -08:00
Kubernetes Prow Robot
e4a14fe0f5
Merge pull request #123575 from Huang-Wei/pod-scheduling-readiness-stable
Graduate PodSchedulingReadiness to stable
2024-03-03 22:29:38 -08:00
Kubernetes Prow Robot
d756b0a1c0
Merge pull request #123659 from dims/check-length-of-instance-name-before-truncating
Check length of instance name before truncating
2024-03-03 20:41:11 -08:00
Kubernetes Prow Robot
ee5eca2a49
Merge pull request #123527 from aramase/aramase/f/kep_3331_discovery_url
Add `DiscoveryURL` to Authentication Configuration
2024-03-03 18:51:54 -08:00
xigang
d72448a41c cleanup: if triggerValue has a value, fast break
Signed-off-by: xigang <wangxigang2014@gmail.com>
2024-03-04 10:29:31 +08:00
Anish Ramasekar
78fb0bae22
wire up discovery url in authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 17:34:51 -08:00
Anish Ramasekar
84852ff56f
Add DiscoveryURL to AuthenticationConfiguration
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-03 16:57:24 -08:00
Kubernetes Prow Robot
6d2ee131eb
Merge pull request #123225 from aramase/aramase/f/kep_3331_latency_metrics
Add `apiserver_authentication_jwt_authenticator_latency_seconds` metric
2024-03-03 16:27:50 -08:00
Davanum Srinivas
c61b2a3975
Check length of instance name before truncating
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 18:49:57 -05:00
Kubernetes Prow Robot
d45d803ac4
Merge pull request #123657 from dims/switch-to-new-cos-gpu-installer-v2.1.10
Switch to newer cos-gpu-installer - v2.1.10
2024-03-03 13:20:51 -08:00
Kubernetes Prow Robot
ccb5dd3b57
Merge pull request #123652 from dims/ensure-gcp-instance-names-are-a-max-of-63-characters
Ensure GCP instance names are a max of 63 characters
2024-03-03 11:58:53 -08:00
Jefftree
ebcb78df52 promote aggregated discovery conformance tests 2024-03-03 14:29:25 -05:00
Davanum Srinivas
b33c5a8292
Switch to newer cos-gpu-installer - v2.1.10
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 14:22:24 -05:00
Davanum Srinivas
968aefd1bf
Ensure GCP instance names are a max of 63 characters
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-03 13:19:12 -05:00
huweiwen
c2ccb921ea e2e pod: fail fast on failed pod
no need to wait until timeout. reduce test time
2024-03-04 00:01:02 +08:00
huweiwen
c134bfe9eb agnhost/mounttest: add new line to output
make the output easier to read.
2024-03-03 23:46:22 +08:00
Kubernetes Prow Robot
e798fa67b5
Merge pull request #123654 from LiorLieberman/fix-kubeadam-with-structured-authz
[structured authz][kubeadam] avoid setting default authorization-mode when structured authz is wanted
2024-03-03 07:44:02 -08:00
Lior Lieberman
db115ca929
[kubeadam] do not set authorization-mode in api server when authorization-config is provided 2024-03-03 14:43:47 +00:00
Kubernetes Prow Robot
7c11cc9cfc
Merge pull request #123578 from carlory/fix-kubeadm-494
kubeadm: print all the kubelets and nodes that need to be upgraded on "upgrade plan"
2024-03-03 01:46:03 -08:00
Kubernetes Prow Robot
3086d88dc6
Merge pull request #123614 from ameukam/bump-cuda-version
test: Bump CUDA images
2024-03-02 19:29:42 -08:00
carlory
22adf221a1 print nodename 2024-03-03 11:03:29 +08:00
Anish Ramasekar
0da5e8137b
Add apiserver_authentication_jwt_authenticator_latency_seconds metric
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-02 17:12:19 -08:00
Kubernetes Prow Robot
19df52c41a
Merge pull request #123647 from thockin/use_go_-C_instead_of_pushd_popd
Change `pushd $d; go ...; popd` to `go -C $d ...`
2024-03-02 16:41:56 -08:00
Kubernetes Prow Robot
38e5a29df6
Merge pull request #123648 from thockin/use_go.work_to_find_internal_modules
Use go.work to auto-find internal modules
2024-03-02 15:39:41 -08:00
Tim Hockin
a0215badb8
Change pushd $d; go ...; popd to go -C $d ...
Just an annoyance in reading these scripts.
2024-03-02 14:40:10 -08:00
Tim Hockin
90e6546c68
Use go.work to auto-find internal modules 2024-03-02 14:38:25 -08:00
Kubernetes Prow Robot
1fceb815ac
Merge pull request #123437 from tenzen-y/fix-job-validatioin-test-name
Job: Fix test case names for the validations
2024-03-02 13:33:18 -08:00
Kubernetes Prow Robot
4164e7c3a7
Merge pull request #123629 from thockin/master
Get rid of unused API type NodeResources
2024-03-02 12:33:18 -08:00
Kubernetes Prow Robot
8674282a05
Merge pull request #123640 from liggitt/authz-beta-config
Duplicate v1alpha1 AuthorizationConfiguration to v1beta1
2024-03-02 10:26:26 -08:00
Kubernetes Prow Robot
0364c6cc3d
Merge pull request #123623 from pohly/hack-protoc-search-path
hack: re-enable protobindings which use k8s.io/api
2024-03-02 10:26:20 -08:00
Kubernetes Prow Robot
96a5cfe513
Merge pull request #123646 from jpbetz/fix-openapi-conformance-selectable-fields
Fix publish openapi conformance tests to ignore x-kubernetes-selectable-fields
2024-03-02 09:23:42 -08:00