Commit Graph

111479 Commits

Author SHA1 Message Date
Davanum Srinivas
f82e98c5fc
Fix sample-apiserver E2E image build failure
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2022-11-01 15:41:25 -04:00
Kubernetes Prow Robot
1a41cb8985
Merge pull request #113021 from rphillips/fixes/112936
kubelet: fix nil crash in allocateRemainingFrom
2022-11-01 10:46:45 -07:00
Kubernetes Prow Robot
e6060f2780
Merge pull request #111220 from giuseppe/drop-superfluous-function
kubelet: remove superfluous function
2022-11-01 09:34:45 -07:00
Kubernetes Prow Robot
2ab2698e4c
Merge pull request #113490 from oscr/add-makefile-target-lint
Add Makefile target lint
2022-11-01 08:24:56 -07:00
Kubernetes Prow Robot
9b5fa57654
Merge pull request #113358 from mengjiao-liu/fix-StatefulSetAutoDeletePVC
StatefulSet: fix kube-controller-manager panic due to StatefulSetPersistentVolumeClaimRetentionPolicy being nil
2022-11-01 08:24:45 -07:00
Kubernetes Prow Robot
7a2984fddf
Merge pull request #113431 from SataQiu/kube-aggregator-20221028
kube-aggregator: remove redundant Scheme registration logic
2022-11-01 07:06:44 -07:00
Kubernetes Prow Robot
2d14d50b31
Merge pull request #113406 from jsafrane/fix-selinux-check-of-mounted
Fix SELinux check of mounted volumes
2022-11-01 04:14:45 -07:00
Kubernetes Prow Robot
22f3e64039
Merge pull request #113320 from chendave/test
kubeadm: simply struct of `joinOptions` by removing `joinControlPlane`
2022-11-01 02:48:45 -07:00
Kubernetes Prow Robot
76ccb69cc1
Merge pull request #113484 from logicalhan/docs
update documentation for stability framework
2022-10-31 21:14:44 -07:00
Kubernetes Prow Robot
7d9c0e0a78
Merge pull request #113411 from jsafrane/fix-selinux-context-mount
Fix SELinux context mount with unknown context
2022-10-31 17:00:44 -07:00
Oscar Utbult
0564fcce0f Add Makefile target lint 2022-10-31 23:57:01 +01:00
Kubernetes Prow Robot
4c657e5014
Merge pull request #110403 from claudiubelu/unittests-3
unittests: Fixes unit tests for Windows (part 3)
2022-10-31 15:52:44 -07:00
Han Kang
13e7fd8ed1 update documentation for stability framework
Change-Id: Id3fea91aac9c6faf2c920b1a0bec721e930a99ae
2022-10-31 15:17:24 -07:00
Kubernetes Prow Robot
f9bfa378ef
Merge pull request #113424 from liggitt/simplify-go.mod
Simplify go.mod
2022-10-31 14:20:57 -07:00
Kubernetes Prow Robot
4811569e52
Merge pull request #113280 from oscr/fix-makefile-help
Fix Makefile help target
2022-10-31 14:20:45 -07:00
Kubernetes Prow Robot
f892ab1bd7
Merge pull request #113405 from jsafrane/reduce-log-noise-on-selinux
Reduce log noise on SELinux mount mismatch
2022-10-31 13:14:56 -07:00
Kubernetes Prow Robot
373a78feab
Merge pull request #113321 from jsafrane/selinux-all-plugins
Add SELinux mount support to all volume plugins
2022-10-31 13:14:44 -07:00
Kubernetes Prow Robot
4a3bac5eae
Merge pull request #113281 from ialidzhikov/seccomp-default-fg
Update the doc string of the SeccompDefault feature gate
2022-10-31 11:50:56 -07:00
Kubernetes Prow Robot
62b21069d7
Merge pull request #113119 from marosset/hpc-local-account-e2e
Adding e2e test for running Windows hostprocess containers as members of a local usergroup
2022-10-31 11:50:45 -07:00
Jan Safranek
8dd3510032 Fix SELinux context mount with unknown context
Don't mount with SELinux mount option if kubelet does not know the SELinux
context, i.e. MounterArgs.SELinuxLabel is ""
2022-10-31 19:11:48 +01:00
Kubernetes Prow Robot
038da2bb13
Merge pull request #113472 from logicalhan/docs
update paths for documentation
2022-10-31 10:34:46 -07:00
Han Kang
fbdd02da40 update paths for documentation
Change-Id: I369b6972b2b6af2bab4561b1af824812ead95e0e
2022-10-31 09:20:39 -07:00
Michał Woźniak
3628532311
Extend metrics with the new labels (#113324)
* Extend job metrics

* Refactor TestMetrics to extract its checks into dedicated tests per feature
2022-10-31 08:50:45 -07:00
Kubernetes Prow Robot
4d2128b523
Merge pull request #113458 from CatherineF-dev/fix-tracing-wrapper-comment
Fix tracing wrapper comment
2022-10-31 06:14:44 -07:00
Jan Safranek
d37808faae Report error on a pod startup on SELinux mismatch
When a volume is already mounted with an unexpected SELinux label,
kubelet must unmount it first and then mount it back with the expected one.
Report an error to user, just in case the unmount takes too long.

In therory, this error should not happen too often, because two Pods with
different SELinux label will not enter Desired State of World, see
dsw.AddPodToVolume. It can happen when DSW and ASW SELinux labels only when
a volume has been deleted from DSW (= Pod was deleted) or a volume was
reconstructed after kubelet restart. In both cases, volume manager should
unmount the volume quickly.
2022-10-31 13:59:23 +01:00
Jan Safranek
805482413a Fix SELinux check of mounted volumes
In PodExistsInVolume with volumeObj.seLinuxMountContext != nil we know that
the volume has been previously mounted with a given SELinuxMountContext.

Either it has been mounted by this kubelet and we know it's correct or it
was by a previous instance of kubelet and the context has been
reconstructed from the filesystem. In both cases, the actual context is
correct, regardless if the volume plugin or PV access mode supports SELinux
mounts.
2022-10-31 13:39:48 +01:00
Jan Safranek
63ab1c86e7 Add SELinux mount support to all volume plugins
.. that are not migrated to CSI in 1.26 *and* are based on a block device.
NFS and CephFS may use the same volume as several PVs and then mounting
with -o context won't work.
2022-10-31 13:02:51 +01:00
Kubernetes Prow Robot
d0e86111ef
Merge pull request #112855 from fromanirh/cpumanager-metrics
node: metrics: cpumanager: add metrics about pinning
2022-10-31 03:12:56 -07:00
Kubernetes Prow Robot
9702161caa
Merge pull request #112597 from mythi/grpc-authority
grpc: set localhost Authority to unix client calls
2022-10-31 03:12:45 -07:00
Kubernetes Prow Robot
ac59b03214
Merge pull request #113448 from pacoxu/remove-UnversionedKubeletConfigMap
remove  UnversionedKubeletConfigMap feature gate: GAed in v1.25
2022-10-31 01:18:43 -07:00
Kubernetes Prow Robot
a65d76a5b6
Merge pull request #113454 from ii/promote-namespace-finalizer-test
Promote replaceCoreV1NamespaceFinalize +1 Endpoints
2022-10-30 18:34:45 -07:00
Catherine Fang
2f30a80b33 Fix tracing wrapper comment 2022-10-30 21:25:52 -04:00
Stephen Heywood
cdfdf0f6ce Promote Namespace e2e test to Conformance 2022-10-31 09:48:28 +13:00
Kubernetes Prow Robot
526650fc13
Merge pull request #109525 from jonyhy96/feat-wait
feat: make jsonpath wait logics consistent with condition
2022-10-30 09:12:43 -07:00
David Leadbeater
dad0e937c0
Escape terminal special characters in kubectl (#112553)
* Escape terminal special characters in kubectl

* Add escaping for kubectl alpha events
2022-10-30 08:08:43 -07:00
Kubernetes Prow Robot
90f50488c7
Merge pull request #112002 from ardaguclu/apiresources-restgetter
(kubectl apiresources): Use restclientgetter instead cmdutil.Factory
2022-10-30 06:24:54 -07:00
Kubernetes Prow Robot
93ebccb2a7
Merge pull request #111990 from ardaguclu/remove-v1beta1-csr
(kubectl certificates): Remove certificates/v1beta1 client usage
2022-10-30 06:24:43 -07:00
Paco Xu
e57985a3f4 remove UnversionedKubeletConfigMap feature gate: GAed in v1.25 2022-10-30 11:17:24 +08:00
Kubernetes Prow Robot
a0b69ecd01
Merge pull request #113349 from maxsmythe/refactor-matcher-interface
Refactor matcher interface
2022-10-28 16:12:52 -07:00
Kubernetes Prow Robot
53afe3b674
Merge pull request #113430 from wojtek-t/refactor_storage_tests_4
Refactor WatchError test to make it generic
2022-10-28 14:38:53 -07:00
Kubernetes Prow Robot
dd3dfab895
Merge pull request #112994 from DangerOnTheRanger/validation-admission-metrics
Add metrics for CEL for admission control KEP
2022-10-28 13:22:52 -07:00
Jordan Liggitt
f488c67eb5
Fix unwanted dependencies scanner 2022-10-28 15:15:20 -04:00
Jordan Liggitt
0737e92da6
Regenerate vendor 2022-10-28 15:15:19 -04:00
Jordan Liggitt
cad5058200
Stop adding requires for everything in the graph 2022-10-28 15:15:18 -04:00
Jordan Liggitt
a82d2b9e08
Stop adding explicit replace directives for all requires
This was originally added in the early days of go.mod in order to ensure that the root k8s.io/kubernetes
go.mod file reflected all the versions of dependencies we were using, and to ensure that go commands didn't spuriously
increment these versions.

With module pruning in go1.17+ and go defaulting to mod=readonly mode in go1.16+, this is no longer necessary.
2022-10-28 15:15:18 -04:00
Kubernetes Prow Robot
367f01f62d
Merge pull request #113423 from sss-ng/bugfix/fix-cmd-test
fixed kubectl test that passes when it should fail on changed test input
2022-10-28 07:32:43 -07:00
Kubernetes Prow Robot
3c9928e4f8
Merge pull request #113304 from mimowo/handling-pod-failures-beta-ssa
Use SSA to add pod failure conditions
2022-10-28 07:32:32 -07:00
Kubernetes Prow Robot
9e85581584
Merge pull request #113367 from pohly/dep-ginkgo-gomega
dependencies: update to gomega v1.23.0 and ginkgo v2.4.0
2022-10-28 06:26:30 -07:00
Kubernetes Prow Robot
f9f9f0107d
Merge pull request #112544 from abhijit-dev82/master
HPA : Enhance error message to capture POD details
2022-10-28 04:14:30 -07:00
Wojciech Tyczyński
b3f9272d57 Refactor WatchError test to make it generic 2022-10-28 12:57:21 +02:00