github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-22 19:31:44 +00:00
Code Issues Projects Releases Wiki Activity
124,594 Commits 42 Branches 7,905 Tags 1.3 GiB
ef4a037da2
Commit Graph

124594 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Release Robot
ef4a037da2 Update CHANGELOG/CHANGELOG-1.31.md for v1.31.10 2025-06-17 18:55:04 +00:00
Kubernetes Release Robot
61183587c0 Release commit for Kubernetes v1.31.10 2025-06-17 18:33:34 +00:00
Kubernetes Prow Robot
7ae3874571
Merge pull request #132224 from cpanato/update-go-1-31 
[release-1.31] [go] Bump images, dependencies and versions to go 1.23.10 and distroless iptables
 2025-06-13 03:46:57 -07:00
Carlos Panato
262df1aacc
Bump images, dependencies and versions to go 1.23.10 and distroless iptables 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-06-11 08:30:46 +02:00
Kubernetes Prow Robot
756c2db4e8
Merge pull request #131785 from rata/automated-cherry-pick-of-#130243-upstream-release-1.31 
Automated cherry pick of #130243: Revert userns kernel check
 2025-06-05 06:12:40 -07:00
Kubernetes Prow Robot
b62290aaff
Merge pull request #131783 from rata/automated-cherry-pick-of-#131623-upstream-release-1.31 
Automated cherry pick of #131623: kubelet: userns: Improve errors returned to the user
 2025-06-04 18:48:38 -07:00
Kubernetes Prow Robot
a44b0a321c
Merge pull request #131787 from rata/automated-cherry-pick-of-#130800-upstream-release-1.31 
Automated cherry pick of #130800: Fix unit tests on windows
 2025-06-04 09:32:37 -07:00
Kubernetes Prow Robot
ec216889b6
Merge pull request #131937 from cpanato/update-go-1.31 
[release-1.31] [go] Bump images, dependencies and versions to go 1.23.9 and distroless iptables
 2025-05-26 01:45:16 -07:00
Carlos Panato
d67d7edfa1
Bump images, dependencies and versions to go 1.23.9 and distroless iptables 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-05-23 09:30:56 -04:00
Rodrigo Campos
c9dbae7d06 pkg/kubelet/userns: Remove skip on windows 
We don't build these tests for Windows, let's remove this skip.

We should have never added that skip, we should have skipped the entire
suite on Windows.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:34:54 +02:00
Rodrigo Campos
2e0622bf23 pkg/kubelet/userns: Wrap error to get mappings 
I needed to wrap the error for debugging, let's just keep this as it is
useful.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:34:54 +02:00
Rodrigo Campos
4c652757ad pkg/kubelet/userns: Provide stub implementation for windows 
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:34:54 +02:00
Rodrigo Campos
156c80a613 pkg/kubelet: Fix userns tests on Windows 
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:34:54 +02:00
Rodrigo Campos
1e53e59c3a Revert "Enforce the Minimum Kernel Version 6.3 for UserNamespacesSupport feature" 
This reverts commit 8597b343fa.

I wrote in the Kubernetes documentation:

	In practice this means you need at least Linux 6.3, as tmpfs started
	supporting idmap mounts in that version. This is usually needed as
	several Kubernetes features use tmpfs (the service account token that is
	mounted by default uses a tmpfs, Secrets use a tmpfs, etc.)

The check is wrong for several reasons:
	* Pods can use userns before 6.3, they will just need to be
	  careful to not use a tmpfs (like a serviceaccount). MOST users
	  will probably need 6.3, but it is possible to use earlier kernel
	  versions. 5.19 probably works fine and with improvements in
          the runtime 5.12 can probably be supported too.
	* Several distros backport changes and the recommended way is
	  usually to try the syscall instead of testing kernel versions.
	  I expect support for simple fs like tmpfs will be backported
	  in several distros, but with this check it can generate confusion.
	* Today a clear error is shown when the pod is created, so it's
	  unlikely a user will not understand why it fails.
	* Returning an error if utilkernel fails to understand what
	  kernel version is running is also too strict (as we are
	  logging a warning even if it is not the expected version)
	* We are switching to enabled by default, which will log a
	  warning on every user that runs on an older than 6.3 kernel,
	  adding noise to the logs.

For there reasons, let's just remove the hardcoded kernel version check.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:27:10 +02:00
Rodrigo Campos
c88aef2d63 Revert "Switch hard error to a WARNING for kernel version check" 
This reverts commit fd06dcd604.

The revert is not to make it a hard error again, this revert is needed
to revert cleanly the commit that added this as an error in the first
place.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:27:10 +02:00
Rodrigo Campos
e885986393 userns: Wrap more errors 
Most errors where already wrapped, but these were missing.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:23:17 +02:00
Rodrigo Campos
c0eb9e3433 userns: Improve error returned if userns is not supported 
This makes it clear the error comes due to a user namespace
configuration. Otherwise the error returned looks too generic and is not
clear.

Before this PR, the error was:

	  Warning  FailedCreatePodSandBox  1s    kubelet            Failed to create pod sandbox: the handler "" is not known

Now it is:

	  Warning  FailedCreatePodSandBox  1s    kubelet            Failed to create pod sandbox: runtime does not support user namespaces

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:23:17 +02:00
Rodrigo Campos
e983d3f575 userns: Use len to handle empty non-nil slices 
When using an old runtime like containerd 1.7, this message is not
implemented and what we get here is an empty non-nil slice. Let's check
the len of the slice instead.

While we are there, let's just return false and no error. In the
following commits we will wrap the error and we didn't find any more
info to add here.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
 2025-05-15 12:23:17 +02:00
Kubernetes Release Robot
16dd861dbb Update CHANGELOG/CHANGELOG-1.31.md for v1.31.9 2025-05-15 09:32:00 +00:00
Kubernetes Release Robot
8f3800390d Release commit for Kubernetes v1.31.9 2025-05-15 09:10:41 +00:00
Kubernetes Prow Robot
88e9d8fe6a
Merge pull request #131439 from gnufied/automated-cherry-pick-of-#131418-upstream-release-1.31 
Automated cherry pick of #131418: Check for newer fields when deciding expansion recovery feature status
 2025-05-13 22:57:16 -07:00
Kubernetes Prow Robot
356ae8145f
Merge pull request #131537 from ameukam/update-go-1-23-8-k8s-1-31 
[release-1.31][go] Bump images, dependencies and versions to go 1.23.8 and distroless iptables
 2025-05-13 04:53:16 -07:00
Kubernetes Prow Robot
502497200a
Merge pull request #131429 from princepereira/automated-cherry-pick-of-#131138-upstream-release-1.31 
Automated cherry pick of #131138: Fix for HNS local endpoint was being deleted instead of the remote endpoint.
 2025-05-06 17:59:13 -07:00
Arnaud Meukam
46a3947662
Bump images, dependencies and versions 
Bump images, dependencies, versions to Go 1.23.8

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
 2025-04-29 22:17:24 +02:00
Prince Pereira
92e3993bc7 Manually adding fix for failing pull-kubernetes-typecheck tests which had dependency with this commit: 6186303580 2025-04-27 21:54:22 -07:00
Hemant Kumar
e4e7f313ff Mark NodeExpansion finsihed without featuregate check 2025-04-24 12:45:41 -04:00
Hemant Kumar
4370821c87 Also change final status by removing featuregate check 2025-04-24 12:38:29 -04:00
Hemant Kumar
014728e763 Check for newer fields when deciding expansion recovery feature status 2025-04-24 12:38:22 -04:00
Prince Pereira
a1bb711b85 Fix for HNS local endpoint was being deleted instead of the remote endpoint. 2025-04-23 23:09:23 -07:00
Kubernetes Release Robot
772a0f45dd Update CHANGELOG/CHANGELOG-1.31.md for v1.31.8 2025-04-22 16:15:33 +00:00
Kubernetes Release Robot
3f46d435cd Release commit for Kubernetes v1.31.8 2025-04-22 15:53:27 +00:00
Kubernetes Prow Robot
3a67945ee1
Merge pull request #130685 from carlory/automated-cherry-pick-of-#130335-upstream-release-1.31 
Automated cherry pick of #130335: Fix kubelet restart unmounts volumes of running pods if the referenced PVC is being deleted by the user
 2025-04-17 10:31:07 -07:00
Kubernetes Prow Robot
6ed5abcf2d
Merge pull request #131160 from wojtek-t/automated-cherry-pick-of-#131020-upstream-release-1.31 
Automated cherry pick of #131020: Fix race for sending errors in watch
 2025-04-17 09:21:07 -07:00
Wojciech Tyczyński
de2117a41c Fix race for sending errors in watch 2025-04-03 08:47:31 +01:00
Kubernetes Release Robot
de93867c92 Update CHANGELOG/CHANGELOG-1.31.md for v1.31.7 2025-03-11 20:22:37 +00:00
Kubernetes Release Robot
da53587841 Release commit for Kubernetes v1.31.7 2025-03-11 19:55:16 +00:00
carlory
3836d58744 fix handle terminating pvc when kubelet rebuild dsw 
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-03-10 18:59:59 +08:00
carlory
77de0b99c2 fix e2e 
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-03-10 18:59:59 +08:00
carlory
ab4389f174 add e2e test to reproduce unexpected unmount after kubelet is restarted 
Signed-off-by: carlory <baofa.fan@daocloud.io>
 2025-03-10 18:59:59 +08:00
Kubernetes Prow Robot
002366336a
Merge pull request #130509 from cici37/automated-cherry-pick-of-#130035-upstream-release-1.31 
Automated cherry pick of #130035: [KEP-5080]Ordered Namespace Deletion
 2025-03-07 22:45:44 -08:00
Cici Huang
ae9dcc0a75 Update status before returning err 2025-03-06 11:00:19 -08:00
Kubernetes Prow Robot
ed53c53422
Merge pull request #130426 from jsturtevant/automated-cherry-pick-of-#128097-upstream-release-1.31 
Automated cherry pick of #128097: [sig-windows] Update kubectl exec to use correct format
 2025-03-06 04:53:52 -08:00
Kubernetes Prow Robot
f165a1dc46
Merge pull request #130084 from richabanker/automated-cherry-pick-of-#128430-upstream-release-1.31 
Automated cherry pick of #128430: do not install handler for '/metrics/slis' endpoint using sync.Once
 2025-03-06 04:53:44 -08:00
Kubernetes Prow Robot
b6e875e440
Merge pull request #130312 from neolit123/automated-cherry-pick-of-#130202-origin-release-1.31 
Automated cherry pick of #130202: kubeadm: fix panic when no UpgradeConfiguration was found in the config file
 2025-03-05 16:27:46 -08:00
Cici Huang
f12dbc31a9 Add the feature gate OrderedNamespaceDeletion for apiserver. 2025-03-03 13:43:37 -08:00
Kubernetes Prow Robot
a9964aec6b
Merge pull request #130071 from mimowo/automated-cherry-pick-of-#130068-upstream-release-1.31 
Automated cherry pick of #130068: Fix the flaky Job test: TestSuccessPolicy_ReEnabling
 2025-02-25 13:06:29 -08:00
James Sturtevant
2a90c25acb
Update kubectl exec to use correct format 
Signed-off-by: James Sturtevant <jsturtevant@gmail.com>
 2025-02-25 20:37:17 +00:00
Kubernetes Prow Robot
00ba1de20b
Merge pull request #130166 from mimowo/automated-cherry-pick-of-#130164-upstream-release-1.31 
Automated cherry pick of #130164: Deflake the PodReplacementPolicyFeatureToggling Job integration test
 2025-02-25 11:58:29 -08:00
Kubernetes Prow Robot
11fefab875
Merge pull request #130156 from AwesomePatrol/automated-cherry-pick-of-#130113-upstream-release-1.31 
Automated cherry pick of #130113: Make ResourceQuota LIST requests only when Informer is not synced
 2025-02-24 07:50:28 -08:00
SataQiu
475334f995 kubeadm: fix panic when no UpgradeConfiguration was found in the config file 2025-02-20 15:21:35 +02:00