Brad Davidson
156ce9ba05
v1.36.2-k3s2
staging/src/k8s.io/api/v1.36.2-k3s2
staging/src/k8s.io/apiextensions-apiserver/v1.36.2-k3s2
staging/src/k8s.io/apimachinery/v1.36.2-k3s2
staging/src/k8s.io/apiserver/v1.36.2-k3s2
staging/src/k8s.io/cli-runtime/v1.36.2-k3s2
staging/src/k8s.io/client-go/v1.36.2-k3s2
staging/src/k8s.io/cloud-provider/v1.36.2-k3s2
staging/src/k8s.io/cluster-bootstrap/v1.36.2-k3s2
staging/src/k8s.io/code-generator/v1.36.2-k3s2
staging/src/k8s.io/component-base/v1.36.2-k3s2
staging/src/k8s.io/component-helpers/v1.36.2-k3s2
staging/src/k8s.io/controller-manager/v1.36.2-k3s2
staging/src/k8s.io/cri-api/v1.36.2-k3s2
staging/src/k8s.io/cri-client/v1.36.2-k3s2
staging/src/k8s.io/cri-streaming/v1.36.2-k3s2
staging/src/k8s.io/csi-translation-lib/v1.36.2-k3s2
staging/src/k8s.io/dynamic-resource-allocation/v1.36.2-k3s2
staging/src/k8s.io/endpointslice/v1.36.2-k3s2
staging/src/k8s.io/externaljwt/v1.36.2-k3s2
staging/src/k8s.io/kms/v1.36.2-k3s2
staging/src/k8s.io/kube-aggregator/v1.36.2-k3s2
staging/src/k8s.io/kube-controller-manager/v1.36.2-k3s2
staging/src/k8s.io/kube-proxy/v1.36.2-k3s2
staging/src/k8s.io/kube-scheduler/v1.36.2-k3s2
staging/src/k8s.io/kubectl/v1.36.2-k3s2
staging/src/k8s.io/kubelet/v1.36.2-k3s2
staging/src/k8s.io/metrics/v1.36.2-k3s2
staging/src/k8s.io/mount-utils/v1.36.2-k3s2
staging/src/k8s.io/pod-security-admission/v1.36.2-k3s2
staging/src/k8s.io/sample-apiserver/v1.36.2-k3s2
staging/src/k8s.io/sample-cli-plugin/v1.36.2-k3s2
staging/src/k8s.io/sample-controller/v1.36.2-k3s2
staging/src/k8s.io/streaming/v1.36.2-k3s2
v1.36.2-k3s2
2026-06-24 03:51:35 +00:00
kubernetes-prow[bot]
d98d5fe745
Merge pull request #139964 from liggitt/cri-api-env-json
...
[master] Restore string JSON encoding of cri-api KeyValue
(cherry picked from commit e62c2b04709d77f028b2d2dd3b57be567b4e7a60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com >
2026-06-24 03:45:53 +00:00
Michael Fritch
a43b86b0d7
Update DefaultKubeBinaryVersion during each minor release
...
Signed-off-by: Michael Fritch <mfritch@suse.com >
2026-06-12 11:55:45 -03:00
Vitor Savian
8193087d25
Fix typo and remove default scheduler config
2026-06-12 11:55:45 -03:00
galal-hussein
7e494c6215
Add the ability to add extra admission plugins
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:55:45 -03:00
galal-hussein
6a5836fb0c
Ignore nfacct init error in kube-proxy
...
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:55:45 -03:00
Erik Wilson
9461563f73
Add Vagrantfile
2026-06-12 11:55:45 -03:00
Darren Shepherd
c0731cf7a7
Add tag.sh script
...
Add DefaultKubeBinaryVersion to the tag script
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:55:44 -03:00
Darren Shepherd
37629e83e6
Fix CSI initialization conflict
...
CSI is used by both the kubelet and kube-controller-manager. Both
components will initialize the csiPlugin with different VolumeHost
objects. The csiPlugin will then assign a global variable for
the node info manager. It is then possible that the kubelet gets
the credentials of the kube-controller-manager and that will cause
CSI to fail.
2026-06-12 11:55:44 -03:00
Darren Shepherd
be758b18f6
Allow override of "kubernetes" endpoint port
2026-06-12 11:55:44 -03:00
Darren Shepherd
763c1a2629
Notify startup to grab a hold of handler and authenticator
...
Fix to the completed options config
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:55:44 -03:00
Darren Shepherd
38a3d5a7da
Add stopCh to apiserver & context to kublet commands
...
Remove SetupSignalContext call from the apiserver
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com >
2026-06-12 11:55:44 -03:00
Erik Wilson
854d4aaaaf
Update kubernetes service on start for port changes
2026-06-12 11:55:44 -03:00
Darren Shepherd
cba5cd46ea
Don't ever select the flannel bridge or cni bridge
2026-06-12 11:55:44 -03:00
Darren Shepherd
f59cbf9845
Cache loopback cert in the certs dir if set
2026-06-12 11:55:44 -03:00
Darren Shepherd
0d79542a0c
Add ability to disable proxy hostname check
2026-06-12 11:55:44 -03:00
Darren Shepherd
958b73d613
Hide deprecated warnings
2026-06-12 11:55:44 -03:00
Darren Shepherd
a6de82cd74
Set all sources so node+agent in the same process doesn't get restricted
2026-06-12 11:55:44 -03:00
Darren Shepherd
f797dc3f2d
Don't check for cpuset cgroup, not always required?
2026-06-12 11:55:44 -03:00
Darren Shepherd
8081dfdb8c
Wait for kube-apiserver for 2 minutes for slow (ARM) systems
2026-06-12 11:55:44 -03:00
Darren Shepherd
d4b64265cf
Make kubelet.sock path changable
2026-06-12 11:55:44 -03:00
Darren Shepherd
4f4e42b814
only use the resolved name if port was zero
2026-06-12 11:55:44 -03:00
Darren Shepherd
c0ce46d08d
If you can't set hashsize on nf_conntrack don't fail
2026-06-12 11:55:44 -03:00
Darren Shepherd
7c5c8ff497
Drop credential providers
2026-06-12 11:55:44 -03:00
Darren Shepherd
13a12bcd96
Drop storage plugins
2026-06-12 11:55:44 -03:00
Darren Shepherd
e9fd94acf4
Drop client-go cloud auth
2026-06-12 11:55:44 -03:00
Kubernetes Release Robot
24e2b02af5
Release commit for Kubernetes v1.36.2
v1.36.2
2026-06-11 18:09:07 +00:00
Kubernetes Prow Robot
6a416f92e2
Merge pull request #139585 from cpanato/update-go-images-rel136
...
Bump images and versions to go 1.26.4 and distroless iptables
2026-06-09 18:45:40 +05:30
Carlos Panato
02c02b91a7
Bump images and versions to go 1.26.4 and distroless iptables
...
Signed-off-by: Carlos Panato <ctadeu@gmail.com >
2026-06-09 12:51:12 +02:00
Kubernetes Prow Robot
5c2fa527b9
Merge pull request #139508 from lalitc375/automated-cherry-pick-of-#139480-origin-release-1.36
...
Automated cherry pick of #139480 : Fix wrong marking of errors
2026-06-08 21:39:59 +05:30
Kubernetes Prow Robot
598f6af8b4
Merge pull request #139445 from HirazawaUi/automated-cherry-pick-of-#139339-upstream-release-1.36
...
Automated cherry pick of #139339 : kubeadm: fix dry-run CA copy paths in init certs
2026-06-08 21:39:52 +05:30
Kubernetes Prow Robot
92e308b49d
Merge pull request #139446 from pohly/automated-cherry-pick-of-#139439-origin-release-1.36
...
Automated cherry pick of #139439 : DRA E2E: simplify kind.yaml
2026-06-08 19:31:40 +05:30
Kubernetes Prow Robot
0671468995
Merge pull request #139363 from nojnhuh/automated-cherry-pick-of-#139017-upstream-release-1.36
...
Automated cherry pick of #139017 : Fix dra scoring bug with mixed allocated and unallocated claims
2026-06-08 16:34:18 +05:30
Kubernetes Prow Robot
cd90f1a01c
Merge pull request #139233 from rahulbabu95/automated-cherry-pick-of-#138736-upstream-release-1.36
...
Automated cherry pick of #138736 : fix: avoid panic on services with empty IPFamilies
2026-06-08 16:34:10 +05:30
Kubernetes Prow Robot
38e4ee021d
Merge pull request #139228 from aramase/automated-cherry-pick-of-#139045-upstream-release-1.36
...
Automated cherry pick of #139045 : fix(csi): preserve mount dir when NodePublish fails on a remount
2026-06-08 16:34:03 +05:30
Kubernetes Prow Robot
d52dde2e43
Merge pull request #139211 from ashvindeodhar/automated-cherry-pick-of-#139040-upstream-release-1.36
...
Automated cherry pick of #139040 : DRA: account for shared devices when rebuilding counters
2026-06-08 16:33:55 +05:30
Kubernetes Prow Robot
7949d48093
Merge pull request #139136 from gnufied/automated-cherry-pick-of-#138981-upstream-release-1.36
...
Automated cherry pick of #138981 : Improve performance characteristic of selinux metric emission
2026-06-08 16:33:47 +05:30
Kubernetes Prow Robot
ba80304d08
Merge pull request #138988 from pohly/automated-cherry-pick-of-#138885-origin-release-1.36
...
Automated cherry pick of #138885 : DRA: fix AllocationModeAll with consumed counters
2026-06-08 16:33:39 +05:30
Kubernetes Prow Robot
86ce997ef5
Merge pull request #139192 from liggitt/env-binary-1.36
...
[1.36] Restore ability to plumb binary data through envvar values
2026-06-08 15:13:10 +05:30
Lalit Chauhan
afb3edeb90
Fix wrong marking of errors
2026-06-04 20:26:17 +00:00
Kubernetes Prow Robot
8090133843
Merge pull request #138871 from BenTheElder/1.36-1.26.3
...
release-1.36: upgrade go to 1.26.4
2026-06-04 16:57:46 +05:30
Benjamin Elder
088d4d9d86
upgrade go to 1.26.4
2026-06-03 12:06:24 -07:00
Patrick Ohly
6489fe467c
DRA E2E: simplify kind.yaml
...
Runtime config can be set via the kind config, which is simpler than setting
the apiserver parameter.
DynamicResourceAllocation is enabled by default nowadays, but still needs to be
set for the current n-3 skew testing which picks 1.33 (1.37 still in alpha).
Similar for NodeLogQuery (GA in 1.36).
2026-06-03 10:06:59 +02:00
bo.jiang
0a283bcb5a
kubeadm: fix dry-run CA copy paths in init certs
...
Signed-off-by: bo.jiang <bo.jiang@daocloud.io >
2026-06-02 23:12:38 +08:00
Kubernetes Prow Robot
20cb5a2243
Merge pull request #139329 from kannon92/automated-cherry-pick-of-#139287-upstream-release-1.36
...
Automated cherry pick of #139287 : batch/job: Fix scheduling directives mutation for not-yet-started suspended Jobs
2026-06-01 19:00:50 +05:30
John Belamaric
6bd05d64c7
Fix DRA scoring bug with mixed allocated and unallocated claims
2026-05-28 13:03:36 -05:00
Kevin Hannon
0f0c734c52
batch/job: Fix scheduling directives mutation for not-yet-started suspended Jobs
...
When MutableSchedulingDirectivesForSuspendedJobs feature gate is
enabled, it overwrites the notStarted check with a stricter condition
requiring the JobSuspended=True condition. This rejects mutations on
suspended Jobs that have never started but whose JobSuspended condition
has not yet been set by the job controller, breaking external
controllers like MultiKueue that inject scheduling directives
immediately after creating a suspended Job.
Preserve the notStarted path as an OR condition alongside the
JobSuspended condition check, restoring pre-1.36 behavior for
not-yet-started Jobs while maintaining the new relaxation for
previously-started Jobs.
Kubernetes-issue: https://github.com/kubernetes/kubernetes/issues/139281
2026-05-27 10:28:13 -04:00
Rahul
c106d15f1f
fix(endpoint): avoid panic on services with empty IPFamilies
...
Accessing svc.Spec.IPFamilies[0] without a bounds check panics when a
service reaches the controller with an empty IPFamilies field. This can
happen via watch events: the apiserver's defaultOnRead decorator populates
IPFamilies on GET/LIST but not on watch (cachingObject wrapping bypasses
the type assertion).
Restore the inference logic removed in #130101 : fall back to ClusterIP
for headful services and pod IP for headless services.
Signed-off-by: Rahul <rahulbabu95@gmail.com >
2026-05-21 13:36:04 -07:00
Anish Ramasekar
6c684db7a3
fix(csi): preserve mount dir on NodePublish error during remount
...
On a remount (e.g. CSIDriver.spec.requiresRepublish=true), the volume is
already published and the pod is observing the existing bind mount.
Removing the mount dir on a NodePublish error left the pod with stale
contents that subsequent successful republishes could not repair.
2026-05-21 14:15:31 -05:00
Anish Ramasekar
238883be8d
feat(volume): add IsRemount to MounterArgs
...
Thread the reconciler's existing isRemount signal into MounterArgs so
volume plugins can distinguish an initial publish from a republish
(e.g. CSIDriver.spec.requiresRepublish=true). No behavior change.
2026-05-21 14:15:29 -05:00