Commit Graph

132310 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ecf2c52f75 Merge pull request #133729 from HirazawaUi/add-HirazawaUi-to-reviewer
Self nominate HirazawaUi as sig-node reviewer
2025-09-04 19:21:27 -07:00
Kubernetes Prow Robot
ab220a42c8 Merge pull request #133575 from aerosouund/fix-nil-selectors
[BUG] [Selectors]: Return an error in case nil selectors are passed to the matcher functions
2025-09-04 19:21:16 -07:00
Kubernetes Prow Robot
8085d5c458 Merge pull request #133896 from yongruilin/fix-format-warning
fix: Only warn for unrecognized formats on type=string
2025-09-04 16:03:14 -07:00
yongruilin
4e200ca00e fix: Only warn for unrecognized formats on type=string 2025-09-04 22:04:10 +00:00
Keisuke Ishigami
ddb015f023 Resolve confusing use of TooManyRequests error for eviction (#133097)
modify test "the error includes the reason when the condition.Status is False"
2025-09-04 12:19:14 -07:00
Kubernetes Prow Robot
6f093ef292 Merge pull request #133792 from HirazawaUi/lock-AllowOverwriteTerminationGracePeriodSeconds
Lock down AllowOverwriteTerminationGracePeriodSeconds
2025-09-04 09:13:17 -07:00
HirazawaUi
43c3b03685 Lock AllowOverwriteTerminationGracePeriodSeconds 2025-09-04 19:25:26 +08:00
Kubernetes Prow Robot
55e8cdeb95 Merge pull request #133868 from serathius/storage-resource-prefix
Enforce that all resources set resourcePrefix
2025-09-03 19:07:14 -07:00
Marek Siarkowicz
683a76dd15 Enforce that all resources set resourcePrefix 2025-09-04 00:11:15 +02:00
Kubernetes Prow Robot
9e0bc19fdf Merge pull request #133832 from cbandy/cel-validation-errors-132528
Omit value type from validation rule failures
2025-09-03 14:55:21 -07:00
Eddie
954ac21c6c Add Kubelet stress test for pod cleanup when rejection due to VolumeAttachmentLimitExceeded (#133357)
* Add stress test for pod cleanup when rejected due to VolumeAttachmentLimitExceeded

Signed-off-by: Eddie Torres <torredil@amazon.com>

* Move newTestPodsWithResources below TestVolumeAttachLimitExceededCleanup

Signed-off-by: Eddie Torres <torredil@amazon.com>

---------

Signed-off-by: Eddie Torres <torredil@amazon.com>
2025-09-03 14:55:14 -07:00
Kubernetes Prow Robot
76ab726b8e Merge pull request #133875 from pohly/apimachinery-apply-flake
apply integration test: fix ordering test flake
2025-09-03 14:03:23 -07:00
Kubernetes Prow Robot
4a79948217 Merge pull request #133473 from roycaihw/psi-cpu-pressure-test
PSI test: add a CPU limit of 500m to cpu-stress-pod
2025-09-03 14:03:15 -07:00
Kubernetes Prow Robot
b00aba714e Merge pull request #133873 from serathius/storage-disable-events-estimate
Disable estimating resource size for resources with watch cache disabled
2025-09-03 12:55:20 -07:00
Kubernetes Prow Robot
7a1e1b6fb1 Merge pull request #130376 from phuhung273/pluginmanager-context-logging
kubelet: Migrate pkg/kubelet/pluginmanager to contextual logging
2025-09-03 12:55:13 -07:00
Kubernetes Prow Robot
86d0607011 Merge pull request #133769 from thockin/kk_bump_gengo
Bump gengo
2025-09-03 10:57:14 -07:00
Marek Siarkowicz
3e84e16315 Disable estimating resource size for resources with watch cache disabled
Listing all keys from etcd turned out to be too expensive, negativly
impacting events POST latency. Events resource is the only resource that
by default has watch cache disabled and which includes very
large number of small objects making it very costly to list keys.

Expected impact:
* No apiserver_resource_size_estimate_bytes metric for events.
* APF overestimating LIST request cost to events. Fallback assumes
  object size of 1.5MB, meaning LIST events will always get maxSeats
2025-09-03 19:09:32 +02:00
Kubernetes Prow Robot
2ed79f9202 Merge pull request #133138 from linxiulei/fix_shutdown
kubelet: poll after reloading logind conf
2025-09-03 10:05:13 -07:00
Kubernetes Prow Robot
39b160f10c Merge pull request #133851 from andremarianiello/respect-dynamic-fake-options
client-go/dynamic/fake: Stop ignoring options
2025-09-03 08:45:23 -07:00
Kubernetes Prow Robot
529f147dfc Merge pull request #133740 from pacoxu/add-events-group-view
add events.events.k8s.io to clusterrole view/edit default
2025-09-03 08:45:15 -07:00
Tim Hockin
73cf278883 Mark some aliases as deprecated 2025-09-03 08:24:48 -07:00
Tim Hockin
5f4b4a6824 Bump gengo 2025-09-03 08:24:17 -07:00
Kubernetes Prow Robot
5dff07fdf9 Merge pull request #133837 from saschagrunert/cni-plugins
Update CNI plugins to v1.8.0
2025-09-03 07:53:15 -07:00
Patrick Ohly
7e9b228ff0 apply integration test: fix ordering test flake
Most of the time the managed fields were returned in the order as expected,
but not always. Semantically the order is irrelevant, so the comparison gets
relaxed to ignore it by normalizing first.
2025-09-03 16:50:42 +02:00
Kubernetes Prow Robot
a76d7e2338 Merge pull request #133867 from pohly/scheduler-perf-create-pods-data-race
scheduler-perf: fix data race in createPodsSteadily
2025-09-03 06:27:21 -07:00
Kubernetes Prow Robot
90a24cf81d Merge pull request #130551 from yylt/sbx
order sandbox by attempt or create time
2025-09-03 06:27:14 -07:00
Kubernetes Prow Robot
18c188467d Merge pull request #133438 from saschagrunert/timeout-pod-should-get-evicted
Increase termination timeout for `evicted pods should be terminal` test
2025-09-03 03:53:14 -07:00
Kubernetes Prow Robot
15b9222fa7 Merge pull request #133477 from chenggu88/e2e
Allow IfNotPresent to be used in node e2e tests
2025-09-03 02:11:16 -07:00
Patrick Ohly
07faaec2c4 scheduler-perf: fix data race in createPodsSteadily
A mutex lock around decrementing runningPods was missing, leading to a data
race report in ci-kubernetes-integration-race-master:

WARNING: DATA RACE
Read at 0x00c001bd20a8 by goroutine 95696:
  k8s.io/kubernetes/test/integration/scheduler_perf.createPodsSteadily.func7()
      /home/prow/go/src/k8s.io/kubernetes/test/integration/scheduler_perf/scheduler_perf.go:2133 +0x238
  ...

Previous write at 0x00c001bd20a8 by goroutine 101407:
  k8s.io/kubernetes/test/integration/scheduler_perf.createPodsSteadily.func5()
      /home/prow/go/src/k8s.io/kubernetes/test/integration/scheduler_perf/scheduler_perf.go:2064 +0x1a4
  ...
2025-09-03 10:34:38 +02:00
Kubernetes Prow Robot
d9df4ecff7 Merge pull request #133834 from pohly/build-data-race-detection
build: support -race in binaries
2025-09-03 00:11:13 -07:00
Sascha Grunert
c8f8f66e6d Increase termination timeout for evicted pods should be terminal test
This doubles the termination timeout for the eviction test from 5min to
10min. Reason for that is that the eviction manager relies on pod stats
metrics, which may not be acceessible during a period of time because of
the kubelet API unreachable. This could be reasoned in hardware or
network pressure when multiple tests run in parallel.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2025-09-03 08:58:46 +02:00
Kubernetes Prow Robot
66ac078a20 Merge pull request #133799 from oyiz-michael/update-nfs-volume-baseimage-centos8
Update volume/nfs base image from centos:7 to centos:stream9
2025-09-02 23:03:13 -07:00
Kubernetes Prow Robot
41a8ace704 Merge pull request #133768 from jpbetz/dv-options
Add  +k8s:ifEnabled, +k8s:ifDisabled and +k8s:enumExclude tags
2025-09-02 21:41:13 -07:00
Paco Xu
ef7cee89bf add events.events.k8s.io to clusterrole view/edit/node default 2025-09-03 10:06:14 +08:00
Kubernetes Prow Robot
7284237ac4 Merge pull request #133229 from SergeyKanzhelev/fixupTypes
fix up types for 1.34 release - remove GA feature gates
2025-09-02 17:49:19 -07:00
Kubernetes Prow Robot
4cfdb209fb Merge pull request #133211 from saschagrunert/grpc-close
Add remote runtime/image `Close()` API
2025-09-02 17:49:12 -07:00
Kubernetes Prow Robot
53fecc7748 Merge pull request #133720 from carlory/cleanup-SizeMemoryBackedVolumes
Drop SizeMemoryBackedVolumes after the feature GA-ed in 1.32
2025-09-02 15:33:13 -07:00
Eric Lin
8d31237c33 kubelet: poll after reloading logind conf
fix: node shutdown manager not propoerly initialized (#133133)

Signed-off-by: Eric Lin <exlin@google.com>
2025-09-02 22:31:29 +00:00
Andre Marianiello
c7ddceb8cb client-go/dynamic/fake: Stop ignoring options 2025-09-02 17:45:31 -04:00
Joe Betz
5e59c658d6 Organize enum tests 2025-09-02 16:26:12 -04:00
Tim Hockin
f971ad76af Only pass type args when needed in enum init 2025-09-02 16:22:06 -04:00
Kubernetes Prow Robot
a6693542b7 Merge pull request #133781 from pohly/test-apiserver-flag-registration
test/integration/apiserver: fix several data races
2025-09-02 13:09:17 -07:00
Patrick Ohly
fa1f9d444c apiserver: avoid default toleration seconds data race for all tests
This reverts commit 2e756e7412,
which addressed the data race only for test/integration/apiserver/oidc.
It also occurs for test/integration/controlplane/transformation:

    WARNING: DATA RACE
    Read at 0x000008b9de38 by goroutine 104616:
      k8s.io/kubernetes/plugin/pkg/admission/defaulttolerationseconds.RegisterFlags()
          /home/prow/go/src/k8s.io/kubernetes/plugin/pkg/admission/defaulttolerationseconds/admission.go:42 +0x30
      k8s.io/kubernetes/pkg/kubeapiserver/options.registerAllAdmissionPluginFlags()
          /home/prow/go/src/k8s.io/kubernetes/pkg/kubeapiserver/options/plugins.go:115 +0x64
      k8s.io/kubernetes/pkg/kubeapiserver/options.(*AdmissionOptions).AddFlags()
          /home/prow/go/src/k8s.io/kubernetes/pkg/kubeapiserver/options/admission.go:73 +0x55
      k8s.io/kubernetes/pkg/controlplane/apiserver/options.(*Options).AddFlags()
          /home/prow/go/src/k8s.io/kubernetes/pkg/controlplane/apiserver/options/options.go:154 +0x388
      k8s.io/kubernetes/cmd/kube-apiserver/app/options.(*ServerRunOptions).Flags()
          /home/prow/go/src/k8s.io/kubernetes/cmd/kube-apiserver/app/options/options.go:101 +0x73
      k8s.io/kubernetes/cmd/kube-apiserver/app/testing.StartTestServer()
          /home/prow/go/src/k8s.io/kubernetes/cmd/kube-apiserver/app/testing/testserver.go:219 +0xb77
      k8s.io/kubernetes/test/integration/controlplane/transformation.newTransformTest()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/controlplane/transformation/transformation_test.go:131 +0x6d0
      k8s.io/kubernetes/test/integration/controlplane/transformation.TestKMSv2Healthz()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/controlplane/transformation/kmsv2_transformation_test.go:874 +0x1c8
      testing.tRunner()
          /usr/local/go/src/testing/testing.go:1792 +0x225
      testing.(*T).Run.gowrap1()
          /usr/local/go/src/testing/testing.go:1851 +0x44

    Previous write at 0x000008b9de38 by goroutine 111926:
      github.com/spf13/pflag.newInt64Value()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/spf13/pflag/int64.go:9 +0x49
      github.com/spf13/pflag.(*FlagSet).Int64Var()
          /home/prow/go/src/k8s.io/kubernetes/vendor/github.com/spf13/pflag/int64.go:41 +0x3d
      k8s.io/kubernetes/plugin/pkg/admission/defaulttolerationseconds.RegisterFlags()
          /home/prow/go/src/k8s.io/kubernetes/plugin/pkg/admission/defaulttolerationseconds/admission.go:42 +0x25
      k8s.io/kubernetes/pkg/kubeapiserver/options.registerAllAdmissionPluginFlags()
          /home/prow/go/src/k8s.io/kubernetes/pkg/kubeapiserver/options/plugins.go:115 +0x64
      k8s.io/kubernetes/pkg/kubeapiserver/options.(*AdmissionOptions).AddFlags()
          /home/prow/go/src/k8s.io/kubernetes/pkg/kubeapiserver/options/admission.go:73 +0x55
      k8s.io/kubernetes/pkg/controlplane/apiserver/options.(*Options).AddFlags()
          /home/prow/go/src/k8s.io/kubernetes/pkg/controlplane/apiserver/options/options.go:154 +0x388
      k8s.io/kubernetes/cmd/kube-apiserver/app/options.(*ServerRunOptions).Flags()
          /home/prow/go/src/k8s.io/kubernetes/cmd/kube-apiserver/app/options/options.go:101 +0x73
      k8s.io/kubernetes/cmd/kube-apiserver/app/testing.StartTestServer()
          /home/prow/go/src/k8s.io/kubernetes/cmd/kube-apiserver/app/testing/testserver.go:219 +0xb77
      k8s.io/kubernetes/test/integration/controlplane/transformation.newTransformTest()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/controlplane/transformation/transformation_test.go:131 +0x6d0
      k8s.io/kubernetes/test/integration/controlplane/transformation.TestKMSv2FeatureFlag()
          /home/prow/go/src/k8s.io/kubernetes/test/integration/controlplane/transformation/kmsv2_transformation_test.go:1009 +0x117
      testing.tRunner()
          /usr/local/go/src/testing/testing.go:1792 +0x225
      testing.(*T).Run.gowrap1()
          /usr/local/go/src/testing/testing.go:1851 +0x44

A more general solution is to lock while registering the variables (= write)
and while reading the variables once in InspectFeatureGates.
2025-09-02 21:01:04 +02:00
Patrick Ohly
ad9ae3ab9d test: fix data race in test/integration/controlplane/transformation
TestKMSv2ProviderKeyIDStaleness runs two tests which both modify
kmsv2.NowFunc temporarily. Those two cannot run in parallel. They can be run in
parallel with other tests because nothing else changes kmsv2.NowFunc.

Found during local testing.
2025-09-02 21:01:04 +02:00
Patrick Ohly
e32adad657 apiserver: fix PriorityClasses creation data race
As mentioned for SystemPriorityClasses:

     NOTE: be careful not to modify any of elements of the returned array directly.

Create violates that because it temporarily changes the kind during encoding.
This led to a data race in test/integration/apiserver/oidc, found during local
testing.

Co-authored-by: Jordan Liggitt <liggitt@google.com>
2025-09-02 21:00:18 +02:00
Kubernetes Prow Robot
947a8ebfd1 Merge pull request #133817 from serathius/stats-logs
Disable collecting stats for resources not setting prefix to prevent error logs
2025-09-02 09:31:16 -07:00
Chris Bandy
a67468717c Omit value type from validation rule failures
This updates kubernetes/kubernetes#132798 to show simple values and NO types.
This also reverts the logic that omits values when there is a message expression,
so we can discuss that behavior further.

Signed-off-by: Chris Bandy <bandy.chris@gmail.com>
2025-09-02 10:48:32 -05:00
Kubernetes Prow Robot
d182e9d29d Merge pull request #133380 from tchap/kubectl-get-watch-error-message
cli-runtime: Return defined error object from resource.Builder on SingleResourceType violated
2025-09-02 08:01:22 -07:00
Kubernetes Prow Robot
b86ff94014 Merge pull request #132960 from benluddy/webhook-client-content-type
Configure JSON content type for generic webhook RESTClient.
2025-09-02 08:01:15 -07:00
Patrick Ohly
d6068db62e CLI: log info about race detection
The build log already shows whether a binary is built with race detection
enabled:

    $ KUBE_RACE=-race KUBE_CGO_OVERRIDES="kube-apiserver" make WHAT=cmd/kube-apiserver
    +++ [0902 16:30:07] Building go targets for linux/amd64
        k8s.io/kubernetes/cmd/kube-apiserver (non-static, race detection)

But it's also useful to see that race detection is on in the log output of a
command, just to be sure:

    I0902 16:31:39.976438  797652 withrace.go:28] Data race detection enabled

If disabled, nothing is logged.
2025-09-02 16:32:40 +02:00