Commit Graph

5788 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ca03752ee7 Merge pull request #135104 from mimowo/mutable-job-directives
Allow mutable job scheduling directives on suspended Jobs
2025-11-05 21:57:11 -08:00
Kubernetes Prow Robot
f465916b85 Merge pull request #134790 from yt2985/podcertificate-e2e
Promote Pod Certificates feature to beta-with metrics/events and e2e tests.
2025-11-05 21:56:57 -08:00
Kubernetes Prow Robot
f025bcace9 Merge pull request #135068 from pohly/dra-device-taints-1.35-full
DRA device taint eviction: several improvements
2025-11-05 18:52:58 -08:00
Kubernetes Prow Robot
738475f9e2 Merge pull request #134991 from yliaog/class_events
added device class add/update events to noderesources plugin when DRAExtendedResource feature is enabled
2025-11-05 14:16:51 -08:00
Kubernetes Prow Robot
799572b8db Merge pull request #134711 from mortent/SimpleScoringForPrioritizedList
DRA: Add scoring for Prioritized List feature
2025-11-05 12:36:51 -08:00
Michał Woźniak
5a7c90fb76 Allow mutable scheduling directives for suspended Jobs 2025-11-05 19:37:33 +00:00
Kubernetes Prow Robot
36622966a8 Merge pull request #132441 from kannon92/poc-job-relax-pod-template
[KEP-5440]: MutablePodResourcesForSuspendedJobs
2025-11-05 11:26:50 -08:00
Patrick Ohly
eaee6b6bce DRA device taints: add separate feature gate for rules
Support for DeviceTaintRules depends on a significant amount of
additional code:
- ResourceSlice tracker is a NOP without it.
- Additional informers and corresponding permissions in scheduler and controller.
- Controller code for handling status.

Not all users necessarily need DeviceTaintRules, so adding a second feature
gate for that code makes it possible to limit the blast radius of bugs in that
code without having to turn off device taints and tolerations entirely.
2025-11-05 20:03:17 +01:00
tinatingyu
3f8444210c Add e2e tests, metrics and events for podcertificaterequests v1beta1 2025-11-05 18:12:39 +00:00
Morten Torkildsen
fbfeb33231 DRA: Add scoring for Prioritized List feature 2025-11-05 17:18:38 +00:00
Kevin Hannon
7db5311952 feat: Add MutablePodResourcesForSuspendedJobs feature gate
- Add feature gate to control mutable pod resources for suspended jobs
- Implement validatePodResourceUpdatesOnly function to allow only container resource updates
- Allow resource updates for suspended jobs regardless of whether they have started
- Add comprehensive unit and integration tests for all scenarios including started-then-suspended
- Ensure backward compatibility when feature gate is disabled

This enables users to update container resources on suspended jobs, including jobs that
have previously started and been suspended, while maintaining immutability for all other
pod template fields.
2025-11-05 10:38:05 -05:00
Kubernetes Prow Robot
c727585676 Merge pull request #134216 from Goend/master
fixed the CRD statusResetFields init issue
2025-11-05 00:44:52 -08:00
Goend
3b0913c866 fix test case 2025-11-05 11:17:00 +08:00
Kubernetes Prow Robot
5fd9cefd95 Merge pull request #134995 from yongruilin/flagz-kk-structure
[KEP-4828] Flagz versioned structured response
2025-11-04 19:02:04 -08:00
Kubernetes Prow Robot
3d595e3691 Merge pull request #134803 from enj/enj/f/constrained_impersonation
KEP-5284: Implement Constrained Impersonation
2025-11-04 15:32:23 -08:00
Kubernetes Prow Robot
c1a6a3ca71 Merge pull request #134152 from pohly/dra-device-taints-1.35
DRA: device taints: new ResourceSlice API, new features
2025-11-04 15:32:07 -08:00
Kubernetes Prow Robot
459bea5adf Merge pull request #135084 from tallclair/resize-validation
Fix pod resize validation when adding non-resizable resources
2025-11-04 14:32:04 -08:00
Kubernetes Prow Robot
97cb47a913 Merge pull request #135080 from dejanzele/feat/promote-job-managedby-to-ga
KEP-4368: Job Managed By; Promote to GA
2025-11-04 13:42:12 -08:00
Monis Khan
2a3f66d3f6 KEP-5284: Implement Constrained Impersonation
Signed-off-by: Jian Qiu <jqiu@redhat.com>
Signed-off-by: Monis Khan <mok@microsoft.com>

Co-authored-by: Jian Qiu <jqiu@redhat.com>
Co-authored-by: Monis Khan <mok@microsoft.com>
2025-11-04 16:30:49 -05:00
Patrick Ohly
3f45a675fc DRA integration: test eviction through DeviceTaintRule
This covers permissions and correct usage of SSA.
2025-11-04 21:57:24 +01:00
yongruilin
09dfeeb988 test: add integration test for /flagz endpoint in scheduler 2025-11-04 19:45:32 +00:00
yongruilin
ba059168c3 test: add integration test for /flagz endpoint in KCM 2025-11-04 19:45:32 +00:00
yongruilin
16db8e2375 feat: add integration test for /flagz kube-apiserver endpoint 2025-11-04 19:45:32 +00:00
Kubernetes Prow Robot
a058cf788a Merge pull request #134624 from yt2985/podcertificates-beta
Promote Pod Certificates feature to beta
2025-11-04 11:42:12 -08:00
yliao
a181fd2eb8 removed NodeAffinity in the test cases as it is not needed 2025-11-04 18:55:41 +00:00
Kubernetes Prow Robot
f620a04eb5 Merge pull request #135060 from pohly/dra-scheduler-perf-normal-tests-experimental-allocator
DRA scheduler_perf: benchmark baseline test cases with different allocators
2025-11-04 09:14:15 -08:00
Kubernetes Prow Robot
276c59af7c Merge pull request #134769 from dejanzele/fix-job-starttime-validation-on-resume
fix: allow job startTime updates on resume from suspended state
2025-11-04 09:14:08 -08:00
yliao
372328f281 reverted the inititial device class change 2025-11-04 16:43:40 +00:00
yliao
2e479e00f4 refactored the hint function, added test cases 2025-11-04 16:31:57 +00:00
Kubernetes Prow Robot
f09cd625bc Merge pull request #135007 from ania-borowiec/nnn_code_update
KEP-5278 Bring back clearing NominatedNodeName after scheduling or binding failure
2025-11-04 07:14:24 -08:00
Patrick Ohly
d132afc87e DRA scheduler_perf: benchmark baseline test cases with different allocators
When adding new features to the "experimental" allocator we are not directly
breaking "normal" usage of DRA because that uses the "incubating"
allocator. But we still want to know about potential performance problems also
for those test cases. If there is one, we might not be able to implement an
experimental feature in a way that allows promoting it later.

This is achieved by running the benchmarks twice as sub-tests, with different
topic names. The topic names then can be used to select different thresholds,
using a new extension of the scheduler_pref JSON config format.
2025-11-04 13:34:29 +01:00
Ania Borowiec
191ab8d78d Integration test verifying that in case a preemptor pod with higher priority arrives while preemption is ongoing, the lower priority preemptor does not get stuck in unschedulable 2025-11-04 11:57:39 +00:00
Ania Borowiec
9640da5452 Verify if pod has ongoing async preemption before evicting pods 2025-11-04 11:57:34 +00:00
Dejan Zele Pejchev
3dabd4417d KEP-4368: Job Managed By; Promote to GA
Signed-off-by: Dejan Zele Pejchev <pejcev.dejan@gmail.com>
2025-11-04 10:59:45 +01:00
Ania Borowiec
c98804b77f Fix existing integration tests for NominatedNodeName 2025-11-04 09:45:50 +00:00
Tim Allclair
9b95eaf593 Fix pod resize validation when adding non-resizable resources 2025-11-03 20:39:37 -08:00
yliao
14f17a3809 addressed review feedback 2025-11-03 22:53:27 +00:00
yliao
b609d4713c added integration test case 2025-11-03 21:27:41 +00:00
Kubernetes Prow Robot
462c869354 Merge pull request #134326 from sairameshv/global_cache_dra
Add global cache to map between the deviceclass and the extended resource
2025-11-03 10:40:06 -08:00
yliao
3eab698884 fixed unit test and integration test failures
Fix minor nits

Signed-off-by: Sai Ramesh Vanka <svanka@redhat.com>
2025-11-03 20:07:01 +05:30
Kubernetes Prow Robot
4e5220939e Merge pull request #134927 from macsko/dont_delete_pods_with_deletiontimestamp
Don't preempt pods with DeletionTimestamp set
2025-11-03 06:02:14 -08:00
Sai Ramesh Vanka
d8c66ffb63 Add a global cache to support DRA's extended resource to the device
class mapping

- Add a new interface "DeviceClassResolver" in the scheduler framework
- Add a global cache of mapping between the extended resource and the
  device class
- Cache can be leveraged by the k8s api-server, controller-manager along with the scheduler
- This change helps in delegating the requests to the dynamicresource
  plugin based on the mapping during the node update events and thus
avoiding an extra scheduling cycle

Signed-off-by: Sai Ramesh Vanka <svanka@redhat.com>
2025-11-03 12:31:16 +05:30
tinatingyu
59e075e8d3 Promote PodCertificateRequests to v1beta1 2025-11-02 05:33:44 +00:00
Kubernetes Prow Robot
1b6d0c7c03 Merge pull request #134965 from tsj-30/fix-dra-devicebindingconditions-flake
test: fix flake in DRA DeviceBindingCondition
2025-10-31 12:26:03 -07:00
Patrick Ohly
fee14ffca2 DRA API: device taints 1.35
This raises the number of allowed taints per device to 16 by lowering
the number of allowed devices to 64 per ResourceSlice if (and only if!)
taints are used.

"effect: None" and DeviceTaintRule status with conditions get added
to support giving feedback to admins.

Instead of merely adding the new effect value, this also changes validation of
the enum so that unknown values are valid if they were already stored. This
will simplify adding new effects in the future because validation won't fail
for them after a downgrade. Consumers must treat them like this new None
effect, i.e. ignore them.
2025-10-31 18:11:18 +01:00
Kubernetes Prow Robot
4ca91a6542 Merge pull request #134994 from liggitt/drop-strict-cost
Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates
2025-10-31 07:38:12 -07:00
Kubernetes Prow Robot
ce7ba8aa76 Merge pull request #134959 from atiratree/deployment-integration-tests
add integration tests for pod replacement during scaling and Recreate/RollingUpdate strategies
2025-10-31 07:38:04 -07:00
Kubernetes Prow Robot
279f214cc5 Merge pull request #134989 from alaypatel07/extended-resources-scheduler-perf
refactor scheduler_perf test for extended resources by dra to have 10-50 device classes
2025-10-31 03:52:12 -07:00
Kubernetes Prow Robot
b4d4cc9384 Merge pull request #123642 from aramase/aramase/f/kep_3331_jwks_metrics
Add JWKS fetch metrics for jwt authenticator
2025-10-30 22:42:02 -07:00
Jordan Liggitt
bd11e52bfc Drop locked StrictCostEnforcementForVAP and StrictCostEnforcementForWebhooks feature gates 2025-10-31 00:03:42 -04:00