Commit Graph

129072 Commits

Author SHA1 Message Date
Gaurav Ghildiyal
619957c976 Graduate TopologyAwareHints feature-gate to GA in 1.33 and LockToDefault 2025-03-14 12:06:02 -07:00
Joe Betz
a6c94ea605 Enable DeclarativeValidation feature gate by default 2025-03-14 14:44:10 -04:00
Stanislav Láznička
146515ac4a
kubelet: pullmanager: write to pulled record if secret matches during query 2025-03-14 19:38:03 +01:00
Stanislav Láznička
788b7abe40
kubelet: pullmanager: move to a separate package 2025-03-14 19:38:02 +01:00
Stanislav Láznička
b8fc6042ca
kubelet: GC for image pull managers 2025-03-14 19:38:00 +01:00
Stanislav Láznička
3793becbb9
kubelet: integrate the image pull manager 2025-03-14 19:37:59 +01:00
Anish Ramasekar
95d411382f
Fix comment for GetServiceAccountFunc type
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-14 11:21:58 -07:00
Anish Ramasekar
01302639f5
Add unit tests for credential provider in service account mode
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-14 11:21:08 -07:00
Kubernetes Prow Robot
f9e92a1aa7
Merge pull request #130814 from LionelJouin/kep-4817-beta
[KEP-4817] DRAResourceClaimDeviceStatus to Beta
2025-03-14 10:57:58 -07:00
Kubernetes Prow Robot
45f5ecfefd
Merge pull request #125452 from carlory/clean-e2efeatures
remove unneeded e2e features
2025-03-14 10:57:47 -07:00
Maciej Skoczeń
f6a35c55f2 Wait for node to appear in cache in TestUpdateNominatedNodeName integration test 2025-03-14 17:06:30 +00:00
torredil
ef40e670bf
Update hostpathplugin image to v1.16.1
Signed-off-by: torredil <torredil@amazon.com>
2025-03-14 17:00:56 +00:00
Benjamin Elder
cf20c21ef8 Revert "stop overriding max concurrency in CI, let automax procs handle it"
This reverts changes from commit 9e42056a0d.

NOTE: this is not a clean revert bcause of further changes.
2025-03-14 09:42:04 -07:00
Rita Zhang
04ac6df8a9
add dra to edit role and add featuregate test
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2025-03-14 09:14:15 -07:00
Rita Zhang
718ed7d0b5
dra: add user rbac
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2025-03-14 09:14:15 -07:00
Joe Betz
5a98d4dbb4 Limit declarative validation to spec until subresource support is added 2025-03-14 11:58:19 -04:00
Rodrigo Campos
b8361f9c6e Revert "pkg/kubelet: Fix userns tests on Windows"
This reverts commit 74b069d0fa.

Now that pkg/kubelet/userns has a windows stub, there is no need to
handle this here. Let's remove this code so if it's ever called from
windows, we find an error and the bug surfaces immediately.

I've added it yesterday as an abundance of caution, to make sure the
tests go back to green in the master branch. But now that everything is
green again, it should be safe to remove it.

Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
2025-03-14 16:58:07 +01:00
Kubernetes Prow Robot
0446f6c146
Merge pull request #130492 from macsko/call_preenqueue_plugins_when_adding_pod_to_backoffq
Call PreEnqueue plugins before adding pod to backoffQ
2025-03-14 08:55:53 -07:00
Kubernetes Prow Robot
83d33a927a
Merge pull request #130133 from ffromani/split-uncore-metrics
node: cpumgr: metrics: add uncore cache alignment metrics
2025-03-14 08:55:46 -07:00
Patrick Ohly
1057407cee DRA e2e: more flexible socket listening
Instead of hard-coding two instances of the hostpathplugin which listen on
certain socket paths, the hostpathplugin now gets started through Pod exec as
needed. The advantage is that the helper code is in charge of socket naming,
just like it would be in real deployment.

One nuisance is that exec.StreamWithContext always complains in copyFromStdout
and copyFromStderr when the remote hostpathplugin gets killed via context
cancellation:

    E0312 11:56:31.637669  289446 v2.go:167] "Unhandled Error" err="next reader: read tcp [::1]:59006->[::1]:6444: use of closed network connection" logger="UnhandledError"
    E0312 11:56:31.637749  289446 v2.go:150] "Unhandled Error" err="next reader: read tcp [::1]:59006->[::1]:6444: use of closed network connection" logger="UnhandledError"

These can be ignored.
2025-03-14 16:46:15 +01:00
Stanislav Láznička
b3befff631
implement a file-based image pull manager 2025-03-14 16:28:54 +01:00
Stanislav Láznička
0ca2333846
make update 2025-03-14 16:28:53 +01:00
Stanislav Láznička
47827f4d9a
kubelet: modify KubeletConfiguration API with image pull policies
Also adds PreloadedImagesVerificationAllowlist to API exceptions list
for missing list type as this is not a part of the REST API.
2025-03-14 16:28:52 +01:00
Tim Hockin
311e589534
Emit comments before validation code 2025-03-14 08:17:34 -07:00
Stanislav Láznička
ad96b3aed5
kubelet: implement image pull policies 2025-03-14 16:12:14 +01:00
Kubernetes Prow Robot
6ef1a1f98e
Merge pull request #130725 from jpbetz/replication-controller-minimums-to-declarative
Migrate to declarative validation: ReplicationController spec.replicas and spec.minReadySeconds fields
2025-03-14 07:46:03 -07:00
Kubernetes Prow Robot
ba6acfd748
Merge pull request #130208 from carlory/remove-duplicated-test
remove duplicated test on configmap volume
2025-03-14 07:45:56 -07:00
Kubernetes Prow Robot
afdc62eff5
Merge pull request #129755 from niranjandarshann/conmap
Concurrentmap Iteration
2025-03-14 07:45:47 -07:00
googs1025
1a660d3d0c flake: fix data race for TestApfWatchHandlePanic unit test
Signed-off-by: googs1025 <googs1025@gmail.com>
2025-03-14 21:39:20 +08:00
Kubernetes Prow Robot
e7eb076349
Merge pull request #130437 from srivastav-abhishek/fix-unsafe-conversions-test
Removed parallel execution for test/subtest where AllocsPerRun is used
2025-03-14 06:38:01 -07:00
Kubernetes Prow Robot
9fd0e20bc2
Merge pull request #129345 from pohly/log-client-go-workqueue
client-go workqueue: add optional logger
2025-03-14 06:37:53 -07:00
Kubernetes Prow Robot
78208023e2
Merge pull request #128952 from my-git9/volume-deadcode
pkg/volume: remove unused function
2025-03-14 06:37:46 -07:00
Marek Siarkowicz
c4d77a0799 Add test cases for negative resource version in TestList 2025-03-14 14:36:57 +01:00
Marek Siarkowicz
58d9b5c7b6 Test bypass for negative RV 2025-03-14 14:34:43 +01:00
Marek Siarkowicz
d263344a9b Simplify bypass test by just testing shouldDelegateList function 2025-03-14 14:26:44 +01:00
Patrick Ohly
ec12727957 DRA kubeletplugin: revise socket path handling
When supporting rolling updates, we cannot use the same fixed socket paths for
old and new pod. With the revised API, the caller no longer specifies the full
socket paths, only directories. The logic about how to name sockets then can be
in the helper.

While at it, avoid passing a context to the gRPC helper code when
all that the helper code needs is a logger. That leads to confusion
about whether cancellation has an effect.
2025-03-14 14:19:56 +01:00
Patrick Ohly
c6252daccb DRA kubeletplugin: turn helper into wrapper
The goal is to simplify writing DRA drivers. This is also a first step towards
supporting seamless upgrades.

DRA drivers no longer need to implement the kubelet plugin API
directly. Instead, the helper wraps an implementation of an interface. The
helper then provides common functionality:

- retrieve and validate ResourceClaims
- serialize gRPC calls (enabled by default, can be opted out)
- gRPC logging

The definition of that interface is meant to be comprehensive enough that a
correct DRA driver can be implemented by following the documentation of the
package, without having to cross-reference KEPs.

The DRAPlugin interface used to be the abstract API of the helper. Now it's
what the DRA driver kubelet plugin needs to implement. The helper is a concrete
Server struct with no exported fields. It only exports the methods that
drivers need when using the helper.

While at it, support for the v1alpha4 API gets removed from the helper, which
implies removing the corresponding E2E tests. The kubelet implementation will
be dropped separately.
2025-03-14 14:17:05 +01:00
Lionel Jouin
37dee3c282 [KEP-4817] DRAResourceClaimDeviceStatus to Beta
Signed-off-by: Lionel Jouin <lionel.jouin@est.tech>
2025-03-14 14:08:47 +01:00
Filipe Xavier
dc8dc31442 fix error treatment and remove annotations from proto 2025-03-14 09:56:02 -03:00
Marek Siarkowicz
86169a7a1e Fix flaky RunTestConsistentList
Noticed that cache might not nesseserly observe the write causing test
to flake. Fixed that changing the logic to require LessOrEqual of
writeRV instead of equal to writeRV. Also added comments explaining
edge cases.
2025-03-14 13:48:18 +01:00
Filipe Xavier
09817b320f move generate podsandbox request to platform specific 2025-03-14 09:41:04 -03:00
Filipe Xavier
ce4de97c2e make kubelet call updatePodSandboxResources on PodResizeAction 2025-03-14 09:41:02 -03:00
Filipe Xavier
b27c303ac2 update cri-api runtime interface and cri-client add new method 2025-03-14 09:33:32 -03:00
Filipe Xavier
8f11574f3d update proto files to add new method UpdatePodSandboxResources 2025-03-14 09:33:29 -03:00
Kubernetes Prow Robot
611abd3bcd
Merge pull request #130588 from serathius/watchcache-test-recursive
Test recursive in TestGetListCacheBypass and separate overrides
2025-03-14 05:29:57 -07:00
Kubernetes Prow Robot
2491c0b150
Merge pull request #129218 from novahe/master
Add lock for csiNode update
2025-03-14 05:29:46 -07:00
Stanislav Láznička
64c0164cec
kubelet: add the ImagePullManager interface 2025-03-14 10:47:57 +01:00
Stanislav Láznička
37e0fd50aa
imagepullmanager: add v1alpha1 config API 2025-03-14 10:47:55 +01:00
Stanislav Láznička
cb7468b077
kubelet imagepuller: PullImage() - accept TrackAuthConfigs directly
The image puller's PullImage() method should be just a dumb pull
without any further logic. Make it accept everything it needs
to pull an image and defer any other magic to the image manager.
2025-03-14 10:47:54 +01:00
Stanislav Láznička
09284d926c
credentialprovider: track kube secrets as creds sources in DockerKeyrings 2025-03-14 10:47:53 +01:00