Natasha Sarkar
7848744bf9
remove kubelet fake status manager
2025-03-13 17:11:05 +00:00
Maciej Szulik
d6e5d4f20d
make update
...
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2025-03-13 17:53:16 +01:00
Maciej Szulik
8eb74b96e3
Add validation to StatefulSet's .spec.serviceName
...
.spec.serviceName field is injected into pod.spec.subDomain which
requires values to be valid DNS1123 label, but statefulset validation
never validates the field, if specifired. This can cause the controller
to fail creating pods.
Signed-off-by: Maciej Szulik <soltysh@gmail.com>
2025-03-13 17:53:12 +01:00
Tim Hockin
7315d0a687
Change internal-version RC.Spec.Replicas to a ptr
...
This is needed to make declaratve validation clean. Past me thought
this was clever (pointer versioned, non-pointer internal) but it is just
confusing.
2025-03-13 08:47:19 -07:00
Joe Betz
e0011c7236
Support emulation versioning of formats
...
We plan to add more formats in upcoming releases.
This tracks which formats are introduced at a version.
Unrecognized formats remain ignored. That is,
if a format is not supported at the emulated version,
the format is not enforced. This differs from typical
field handling, where unsupported field values are
forbidden. This is pre-existing behavior and is
in compliance with JSON Schema's format handling.
Ratcheting of custom resources helps with the introduction
of new formats. When a cluster is upgraded to a version
of Kubernetes that supports a format already set (but not enforced)
in a custom resource definition, the format will start
being enforced against custom resources. Ratcheting will
tolerate unchanged values of custom resources, even
if the value is not valid according to the format.
2025-03-13 11:09:12 -04:00
Kubernetes Prow Robot
68899f8e6d
Merge pull request #124360 from carlory/kep-3751-quota-2
...
Add quota support for PVC with VolumeAttributesClass
2025-03-13 07:35:48 -07:00
Marek Siarkowicz
8f83f2446a
Fix detecting consistent read when watchcache starts handling continue
2025-03-13 13:53:16 +01:00
Marek Siarkowicz
6d3bff8321
Test recursive in TestGetListCacheBypass and separate overrides
2025-03-13 13:42:49 +01:00
Kubernetes Prow Robot
336a32a270
Merge pull request #130693 from novahe/fix/test-cases
...
Fix test cases that may potentially cause a panic.
2025-03-13 05:33:49 -07:00
Marek Siarkowicz
8b0294daed
Fix typo and pass the environment variable required to enable watchcache consistency checking in GCE tests
2025-03-13 11:55:23 +01:00
Monis Khan
987bdd9e46
Sync pkg/credentialprovider/OWNERS with k8s.io/client-go/tools/auth/OWNERS
...
Signed-off-by: Monis Khan <mok@microsoft.com>
2025-03-13 06:53:50 -04:00
Kubernetes Prow Robot
2e9bb32ee8
Merge pull request #130752 from serathius/watchcache-simplify-delagate
...
Simplify shouldDelegateList
2025-03-13 02:57:57 -07:00
Kubernetes Prow Robot
953b40b34e
Merge pull request #128857 from zhifei92/flagz-kubelet
...
feat: Add flagz endpoint for kubelet
2025-03-13 02:57:45 -07:00
Kubernetes Prow Robot
be32ca61a6
Merge pull request #127612 from carlory/make-scheduler-test-independent
...
make each scheduler test independent
2025-03-13 00:47:47 -07:00
carlory
aab7a079fa
make each scheduler test independent
...
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-13 14:39:50 +08:00
carlory
27706a0b54
Add quota support for PVC with VolumeAttributesClass
...
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-13 13:50:44 +08:00
Kubernetes Prow Robot
9acdca64e0
Merge pull request #130724 from jpbetz/replication-controller-to-declarative
...
Enable Declarative Validation for ReplicationController
2025-03-12 22:41:53 -07:00
Kubernetes Prow Robot
7f818e9f02
Merge pull request #130602 from tallclair/allocation-checkpoint-optimization
...
Allocation checkpoint cleanup
2025-03-12 22:41:46 -07:00
Kubernetes Prow Robot
92d7e55abd
Merge pull request #129886 from danwinship/endpointslice-api-notes
...
Try to clarify EndpointSlice semantics some more
2025-03-12 21:19:53 -07:00
Kubernetes Prow Robot
96dd5508f6
Merge pull request #129714 from esotsal/fix-reset-injector-because-cri-proxy-undefined
...
testing: Skip test if cri proxy is disabled or undefined
2025-03-12 21:19:46 -07:00
Kubernetes Prow Robot
6549f52b97
Merge pull request #130757 from BenTheElder/delete-dead-script
...
delete hack/test-integration.sh
2025-03-12 20:13:59 -07:00
Kubernetes Prow Robot
761f5646be
Merge pull request #130138 from rata/userns-enabled-by-default
...
features: Enable user namespaces by default
2025-03-12 20:13:48 -07:00
zhangzhifei16
2db729cfa4
Add flatz to kubelet auth.
...
Fix: Move flagz to InstallDebuggingHandlers.
Move flagz to the lower switch statemen
Fix linter
Drop the function parameter for the read-only server.
2025-03-13 10:11:59 +08:00
Kubernetes Prow Robot
7b6c56e5fb
Merge pull request #130135 from saschagrunert/image-volume-beta
...
[KEP-4639] Graduate image volume sources to beta
2025-03-12 18:03:58 -07:00
Kubernetes Prow Robot
05bfdbc6dd
Merge pull request #129950 from ffromani/alignment-error-detail-metrics
...
node: metrics for alignment failures
2025-03-12 18:03:46 -07:00
Joe Betz
ed08387663
Enable versioned validation fuzz testing for core v1 group
2025-03-12 19:53:47 -04:00
Joe Betz
b5bc283808
ReplicationController: Add declarative validation test suite
...
Introduce a test suite that ensures declarative test cases
are fully tested and that validation errors are compared
with handwritten validation to ensure consistency.
Co-authored-by: Tim Hockin <thockin@google.com>
Co-authored-by: Aaron Prindle <aprindle@google.com>
Co-authored-by: Yongrui Lin <yongrlin@google.com>
2025-03-12 19:53:44 -04:00
Joe Betz
5a5ed81e1f
ReplicationController: Enable declarative validation
...
After declarative validation is enabled in the ReplicationController
strategy in this way, the generated declarative validation code
in pkg/apis/core/v1/zz.generated.validations.go will be run
when the strategy validates ReplicationController.
Co-authored-by: Tim Hockin <thockin@google.com>
Co-authored-by: Aaron Prindle <aprindle@google.com>
Co-authored-by: Yongrui Lin <yongrlin@google.com>
Co-authored-by: David Eads <deads@redhat.com>
2025-03-12 19:51:31 -04:00
lauralorenz
256a576651
Add featuregate, feature and unit and e2e tests
...
Signed-off-by: lauralorenz <lauralorenz@google.com>
Signed-off-by: Laura Lorenz <lauralorenz@google.com>
2025-03-12 23:43:16 +00:00
Kubernetes Prow Robot
2261137135
Merge pull request #122550 from danwinship/tighten-ip-validation
...
Tighten IP/CIDR validation
2025-03-12 15:57:46 -07:00
Tim Allclair
e8547d8a54
Cleanup unused container parameter from allocation state Delete
2025-03-12 15:19:38 -07:00
Tim Allclair
05a9c06212
Don't update checkpoint file for deletion
2025-03-12 15:19:14 -07:00
Tim Allclair
30bca329c5
Don't re-write the checkpoint file when the content is unchanged
2025-03-12 15:11:39 -07:00
Tim Hockin
e856356225
Enable validation-gen on core/v1
...
This enables generation but does not activate the strategy calling of
declarative.
2025-03-12 18:05:20 -04:00
Kubernetes Prow Robot
c79d3ce434
Merge pull request #130758 from BenTheElder/integration-concur
...
stop overriding max concurrency in CI, let automax procs handle it
2025-03-12 14:51:48 -07:00
Benjamin Elder
9e42056a0d
stop overriding max concurrency in CI, let automax procs handle it
2025-03-12 13:45:48 -07:00
Benjamin Elder
cb7afbccf6
delete hack/test-integration.sh
...
this script has exited non-zero after telling the user to call make test-integration for 5+ years now
we should just drop it
2025-03-12 13:41:45 -07:00
Kubernetes Prow Robot
8456726952
Merge pull request #130749 from aramase/aramase/c/kep_4412_typedef_get_sa
...
Define type alias for getServiceAccount function
2025-03-12 13:36:20 -07:00
Kubernetes Prow Robot
6c3332e870
Merge pull request #130747 from soltysh/exec_context
...
kubectl: expose context parameter in DefaultRemoteExecutor
2025-03-12 13:36:10 -07:00
Kubernetes Prow Robot
69467d3547
Merge pull request #130648 from jpbetz/semver-tolerant
...
Enable Semver CEL library, add normalization support
2025-03-12 13:36:01 -07:00
Kubernetes Prow Robot
d70bfc8e86
Merge pull request #130636 from serathius/watchcache-integration-test
...
Move setup in TestListOptions before we start API server
2025-03-12 13:35:54 -07:00
Kubernetes Prow Robot
9693eea5c3
Merge pull request #128824 from yongruilin/flagz-controller-manager
...
feat: Add flagz endpoint for kube-controller-manager
2025-03-12 13:35:47 -07:00
Aaron Prindle
08745086e2
chore: change Info->Error log level related to declarative validation runtime tests and refactor panic wrapper names
2025-03-12 20:27:47 +00:00
Jefftree
3b88db4f23
Promote CLE to beta
2025-03-12 19:25:30 +00:00
Jefftree
a7505f0262
generated
2025-03-12 19:25:30 +00:00
Kubernetes Prow Robot
21f7eaa8e2
Merge pull request #130705 from aaron-prindle/validation-gen-add-metric-and-runtime-verification-upstream
...
[Declarative Validation] feat: add declarative validation metrics and associated runtime verification tests
2025-03-12 11:29:54 -07:00
Kubernetes Prow Robot
6b8341fc2e
Merge pull request #130544 from jsafrane/selinux-beta
...
selinux: Promote SELinuxChangePolicy and SELinuxMount to beta
2025-03-12 11:29:47 -07:00
Jefftree
5ba4a90fda
Add LeaseCandidate v1beta1
2025-03-12 17:52:10 +00:00
Abu Kashem
ef3cb5c5af
skip admission for unsafe delete
2025-03-12 13:39:18 -04:00
Marek Siarkowicz
a0cc02e264
Simplify shouldDelegateList
...
When ResourceVersionMatch is set to NotOlderThan, there is no need to handle continue or resourceVersion="".
The validation in apimachinery will not pass and return:
* "resourceVersionMatch is forbidden when continue is provided"
* "resourceVersionMatch is forbidden unless resourceVersion is provided"
2025-03-12 18:24:01 +01:00