Brad Davidson
ac9ed4a5bc
v1.35.6-k3s2
2026-06-24 04:03:48 +00:00
kubernetes-prow[bot]
60bea2b6e2
Merge pull request #139964 from liggitt/cri-api-env-json
...
[master] Restore string JSON encoding of cri-api KeyValue
(cherry picked from commit e62c2b04709d77f028b2d2dd3b57be567b4e7a60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2026-06-24 03:58:17 +00:00
Michael Fritch
ddf6b10b18
Don't Panic, everything is fine
...
control plane components share global DefaultFeatureGate/DefaultMutableFeatureGate variables
See also:
9497222ae2..db342010f4mfritch@suse.com >
2026-06-12 11:54:18 -03:00
Michael Fritch
90701f8da1
Update DefaultKubeBinaryVersion during each minor release
...
Signed-off-by: Michael Fritch <mfritch@suse.com >
2026-06-12 11:54:18 -03:00
Vitor Savian
0678fddaf1
Fix typo and remove default scheduler config
2026-06-12 11:54:18 -03:00
galal-hussein
a2c39f1583
Add the ability to add extra admission plugins
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:54:18 -03:00
galal-hussein
404ca964fe
Ignore nfacct init error in kube-proxy
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:54:18 -03:00
Erik Wilson
64716c6f2c
Add Vagrantfile
2026-06-12 11:54:18 -03:00
Darren Shepherd
692b604021
Add tag.sh script
...
Add DefaultKubeBinaryVersion to the tag script
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:54:18 -03:00
Darren Shepherd
b560ba1542
Fix CSI initialization conflict
...
CSI is used by both the kubelet and kube-controller-manager. Both
components will initialize the csiPlugin with different VolumeHost
objects. The csiPlugin will then assign a global variable for
the node info manager. It is then possible that the kubelet gets
the credentials of the kube-controller-manager and that will cause
CSI to fail.
2026-06-12 11:54:18 -03:00
Darren Shepherd
35fffb2474
Allow override of "kubernetes" endpoint port
2026-06-12 11:54:18 -03:00
Darren Shepherd
30396218fa
Notify startup to grab a hold of handler and authenticator
...
Fix to the completed options config
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:54:18 -03:00
Darren Shepherd
2d047ccb66
Add stopCh to apiserver & context to kublet commands
...
Remove SetupSignalContext call from the apiserver
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:54:18 -03:00
Erik Wilson
45f7c167bb
Update kubernetes service on start for port changes
2026-06-12 11:54:18 -03:00
Darren Shepherd
4f5b7c92f5
Don't ever select the flannel bridge or cni bridge
2026-06-12 11:54:18 -03:00
Darren Shepherd
66aef117ff
Cache loopback cert in the certs dir if set
2026-06-12 11:54:18 -03:00
Darren Shepherd
e6035dcbcc
Add ability to disable proxy hostname check
2026-06-12 11:54:18 -03:00
Darren Shepherd
c6b6839eeb
Hide deprecated warnings
2026-06-12 11:54:18 -03:00
Darren Shepherd
d05b5becb9
Set all sources so node+agent in the same process doesn't get restricted
2026-06-12 11:54:18 -03:00
Darren Shepherd
1380a9dca5
Don't check for cpuset cgroup, not always required?
2026-06-12 11:54:18 -03:00
Darren Shepherd
80533340a1
Wait for kube-apiserver for 2 minutes for slow (ARM) systems
2026-06-12 11:54:18 -03:00
Darren Shepherd
3d392e072b
Make kubelet.sock path changable
2026-06-12 11:54:18 -03:00
Darren Shepherd
c8336da979
only use the resolved name if port was zero
2026-06-12 11:54:18 -03:00
Darren Shepherd
ab0ecd4c17
If you can't set hashsize on nf_conntrack don't fail
2026-06-12 11:54:18 -03:00
Darren Shepherd
47041d84d0
Drop credential providers
2026-06-12 11:54:18 -03:00
Darren Shepherd
d7385c0545
Drop storage plugins
2026-06-12 11:54:18 -03:00
Darren Shepherd
e60cf77d03
Drop client-go cloud auth
2026-06-12 11:54:18 -03:00
Kubernetes Release Robot
fc0e7a6ca5
Release commit for Kubernetes v1.35.6
2026-06-11 18:05:07 +00:00
Kubernetes Prow Robot
6b479f6ae2
Merge pull request #139588 from cpanato/update-go-images-rel135
...
[release-1.35] [go]Bump images and versions to go 1.25.11 and distroless iptables
2026-06-09 20:41:41 +05:30
Carlos Panato
5ccf8f4ed5
Bump images and versions to go 1.25.11 and distroless iptables
...
Signed-off-by: Carlos Panato <ctadeu@gmail.com >
2026-06-09 15:13:36 +02:00
Kubernetes Prow Robot
ccae5e35aa
Merge pull request #139447 from HirazawaUi/automated-cherry-pick-of-#139339-upstream-release-1.35
...
Automated cherry pick of #139339 : kubeadm: fix dry-run CA copy paths in init certs
2026-06-09 01:31:47 +05:30
Kubernetes Prow Robot
4eb32205a4
Merge pull request #139509 from lalitc375/automated-cherry-pick-of-#139480-origin-release-1.35
...
Automated cherry pick of #139480 : Fix wrong marking of errors
2026-06-08 20:47:40 +05:30
Kubernetes Prow Robot
508ff96062
Merge pull request #139229 from aramase/automated-cherry-pick-of-#139045-upstream-release-1.35
...
Automated cherry pick of #139045 : fix(csi): preserve mount dir when NodePublish fails on a remount
2026-06-08 18:43:56 +05:30
Kubernetes Prow Robot
f5419c12b0
Merge pull request #138989 from pohly/automated-cherry-pick-of-#138885-origin-release-1.35
...
Automated cherry pick of #138885 : DRA: fix AllocationModeAll with consumed counters
2026-06-08 18:43:48 +05:30
Kubernetes Prow Robot
3fd20ce37a
Merge pull request #139362 from nojnhuh/automated-cherry-pick-of-#139017-upstream-release-1.35
...
Automated cherry pick of #139017 : Fix dra scoring bug with mixed allocated and unallocated claims
2026-06-08 16:55:59 +05:30
Kubernetes Prow Robot
e8003b4073
Merge pull request #139234 from rahulbabu95/automated-cherry-pick-of-#138736-upstream-release-1.35
...
Automated cherry pick of #138736 : fix: avoid panic on services with empty IPFamilies
2026-06-08 16:55:52 +05:30
Kubernetes Prow Robot
607d6c192d
Merge pull request #139137 from gnufied/manual-cherry-pick-selinux-metrics-perf
...
Manual cherry pick selinux metrics perf
2026-06-08 16:55:45 +05:30
Kubernetes Prow Robot
79ce1711cb
Merge pull request #139193 from liggitt/env-binary-1.35
...
[1.35] Restore ability to plumb binary data through envvar values
2026-06-08 12:08:32 +05:30
Lalit Chauhan
d44082b4bb
Fix wrong marking of errors
2026-06-04 20:30:36 +00:00
bo.jiang
d2212b840d
kubeadm: fix dry-run CA copy paths in init certs
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io >
2026-06-02 23:17:25 +08:00
John Belamaric
a74c5bff9a
Fix DRA scoring bug with mixed allocated and unallocated claims
2026-05-28 13:02:21 -05:00
Rahul
77292b8b08
fix(endpoint): avoid panic on services with empty IPFamilies
...
Accessing svc.Spec.IPFamilies[0] without a bounds check panics when a
service reaches the controller with an empty IPFamilies field. This can
happen via watch events: the apiserver's defaultOnRead decorator populates
IPFamilies on GET/LIST but not on watch (cachingObject wrapping bypasses
the type assertion).
Restore the inference logic removed in #130101 : fall back to ClusterIP
for headful services and pod IP for headless services.
Signed-off-by: Rahul <rahulbabu95@gmail.com >
2026-05-21 13:37:28 -07:00
Anish Ramasekar
df562ae381
fix(csi): preserve mount dir on NodePublish error during remount
...
On a remount (e.g. CSIDriver.spec.requiresRepublish=true), the volume is
already published and the pod is observing the existing bind mount.
Removing the mount dir on a NodePublish error left the pod with stale
contents that subsequent successful republishes could not repair.
2026-05-21 14:55:14 -05:00
Anish Ramasekar
f1ce76d7a1
feat(volume): add IsRemount to MounterArgs
...
Thread the reconciler's existing isRemount signal into MounterArgs so
volume plugins can distinguish an initial publish from a republish
(e.g. CSIDriver.spec.requiresRepublish=true). No behavior change.
2026-05-21 14:39:14 -05:00
Jordan Liggitt
b596e7bcff
Restore ability to plumb binary data through envvar values
2026-05-20 13:55:47 -04:00
Hemant Kumar
4a0532be20
Cache selinux conflicts
...
Also prevent duplicate metric emissions
2026-05-18 10:53:28 -04:00
Ondra Kupka
fd08821205
controller/selinuxwarning/cache: Add reverse index
...
Added podToVolumes reverse index to optimize DeletePod.
Currently we simply iterate through all the volumes and remove the pod
being deleted from there. This is inefficient and takes longer the
longer the volume list becomes.
Keeping a map pod -> volumes makes removing a pod fast. We can just jump
to the relevant volumes directly and remove the pod from there.
2026-05-18 10:53:23 -04:00
Ondra Kupka
9f52f4d26c
controller/selinuxwarning: Pre-parse SELinux label
...
When calling ControllerSELinuxTranslator.Conflicts(), the SELinux label
is repeatedly split into []string to detect conflicts. This causes a huge
number of allocations when there are many comparisons.
This is now made more efficient by pre-parsing the SELinux label and
storing it in podInfo as [4]string for fast comparison when needed.
2026-05-18 09:49:37 -04:00
takonomura
350f793a9c
DRA: fix AllocationModeAll with consumed counters
...
When collecting all matching devices for AllocationModeAll, the allocator did not record the source pool on the candidate device. Devices with consumed counters use that pool when checking shared counter availability, which caused kube-scheduler to panic.
Set the pool on all-devices candidates in the stable, incubating, and experimental allocators, and add a shared regression test for AllocationModeAll with consumed counters.
2026-05-13 12:24:09 +02:00
Kubernetes Release Robot
90640ec14a
Update CHANGELOG/CHANGELOG-1.35.md for v1.35.5
2026-05-12 10:02:44 +00:00
