Commit Graph

137124 Commits

Author SHA1 Message Date
Brad Davidson
156ce9ba05 v1.36.2-k3s2 staging/src/k8s.io/api/v1.36.2-k3s2 staging/src/k8s.io/apiextensions-apiserver/v1.36.2-k3s2 staging/src/k8s.io/apimachinery/v1.36.2-k3s2 staging/src/k8s.io/apiserver/v1.36.2-k3s2 staging/src/k8s.io/cli-runtime/v1.36.2-k3s2 staging/src/k8s.io/client-go/v1.36.2-k3s2 staging/src/k8s.io/cloud-provider/v1.36.2-k3s2 staging/src/k8s.io/cluster-bootstrap/v1.36.2-k3s2 staging/src/k8s.io/code-generator/v1.36.2-k3s2 staging/src/k8s.io/component-base/v1.36.2-k3s2 staging/src/k8s.io/component-helpers/v1.36.2-k3s2 staging/src/k8s.io/controller-manager/v1.36.2-k3s2 staging/src/k8s.io/cri-api/v1.36.2-k3s2 staging/src/k8s.io/cri-client/v1.36.2-k3s2 staging/src/k8s.io/cri-streaming/v1.36.2-k3s2 staging/src/k8s.io/csi-translation-lib/v1.36.2-k3s2 staging/src/k8s.io/dynamic-resource-allocation/v1.36.2-k3s2 staging/src/k8s.io/endpointslice/v1.36.2-k3s2 staging/src/k8s.io/externaljwt/v1.36.2-k3s2 staging/src/k8s.io/kms/v1.36.2-k3s2 staging/src/k8s.io/kube-aggregator/v1.36.2-k3s2 staging/src/k8s.io/kube-controller-manager/v1.36.2-k3s2 staging/src/k8s.io/kube-proxy/v1.36.2-k3s2 staging/src/k8s.io/kube-scheduler/v1.36.2-k3s2 staging/src/k8s.io/kubectl/v1.36.2-k3s2 staging/src/k8s.io/kubelet/v1.36.2-k3s2 staging/src/k8s.io/metrics/v1.36.2-k3s2 staging/src/k8s.io/mount-utils/v1.36.2-k3s2 staging/src/k8s.io/pod-security-admission/v1.36.2-k3s2 staging/src/k8s.io/sample-apiserver/v1.36.2-k3s2 staging/src/k8s.io/sample-cli-plugin/v1.36.2-k3s2 staging/src/k8s.io/sample-controller/v1.36.2-k3s2 staging/src/k8s.io/streaming/v1.36.2-k3s2 v1.36.2-k3s2 2026-06-24 03:51:35 +00:00
kubernetes-prow[bot]
d98d5fe745 Merge pull request #139964 from liggitt/cri-api-env-json
[master] Restore string JSON encoding of cri-api KeyValue

(cherry picked from commit e62c2b04709d77f028b2d2dd3b57be567b4e7a60)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
2026-06-24 03:45:53 +00:00
Michael Fritch
a43b86b0d7 Update DefaultKubeBinaryVersion during each minor release
Signed-off-by: Michael Fritch <mfritch@suse.com>
2026-06-12 11:55:45 -03:00
Vitor Savian
8193087d25 Fix typo and remove default scheduler config 2026-06-12 11:55:45 -03:00
galal-hussein
7e494c6215 Add the ability to add extra admission plugins
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-06-12 11:55:45 -03:00
galal-hussein
6a5836fb0c Ignore nfacct init error in kube-proxy
Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-06-12 11:55:45 -03:00
Erik Wilson
9461563f73 Add Vagrantfile 2026-06-12 11:55:45 -03:00
Darren Shepherd
c0731cf7a7 Add tag.sh script
Add DefaultKubeBinaryVersion to the tag script

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-06-12 11:55:44 -03:00
Darren Shepherd
37629e83e6 Fix CSI initialization conflict
CSI is used by both the kubelet and kube-controller-manager.  Both
components will initialize the csiPlugin with different VolumeHost
objects.  The csiPlugin will then assign a global variable for
the node info manager.  It is then possible that the kubelet gets
the credentials of the kube-controller-manager and that will cause
CSI to fail.
2026-06-12 11:55:44 -03:00
Darren Shepherd
be758b18f6 Allow override of "kubernetes" endpoint port 2026-06-12 11:55:44 -03:00
Darren Shepherd
763c1a2629 Notify startup to grab a hold of handler and authenticator
Fix to the completed options config

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-06-12 11:55:44 -03:00
Darren Shepherd
38a3d5a7da Add stopCh to apiserver & context to kublet commands
Remove SetupSignalContext call from the apiserver

Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-06-12 11:55:44 -03:00
Erik Wilson
854d4aaaaf Update kubernetes service on start for port changes 2026-06-12 11:55:44 -03:00
Darren Shepherd
cba5cd46ea Don't ever select the flannel bridge or cni bridge 2026-06-12 11:55:44 -03:00
Darren Shepherd
f59cbf9845 Cache loopback cert in the certs dir if set 2026-06-12 11:55:44 -03:00
Darren Shepherd
0d79542a0c Add ability to disable proxy hostname check 2026-06-12 11:55:44 -03:00
Darren Shepherd
958b73d613 Hide deprecated warnings 2026-06-12 11:55:44 -03:00
Darren Shepherd
a6de82cd74 Set all sources so node+agent in the same process doesn't get restricted 2026-06-12 11:55:44 -03:00
Darren Shepherd
f797dc3f2d Don't check for cpuset cgroup, not always required? 2026-06-12 11:55:44 -03:00
Darren Shepherd
8081dfdb8c Wait for kube-apiserver for 2 minutes for slow (ARM) systems 2026-06-12 11:55:44 -03:00
Darren Shepherd
d4b64265cf Make kubelet.sock path changable 2026-06-12 11:55:44 -03:00
Darren Shepherd
4f4e42b814 only use the resolved name if port was zero 2026-06-12 11:55:44 -03:00
Darren Shepherd
c0ce46d08d If you can't set hashsize on nf_conntrack don't fail 2026-06-12 11:55:44 -03:00
Darren Shepherd
7c5c8ff497 Drop credential providers 2026-06-12 11:55:44 -03:00
Darren Shepherd
13a12bcd96 Drop storage plugins 2026-06-12 11:55:44 -03:00
Darren Shepherd
e9fd94acf4 Drop client-go cloud auth 2026-06-12 11:55:44 -03:00
Kubernetes Release Robot
24e2b02af5 Release commit for Kubernetes v1.36.2 v1.36.2 2026-06-11 18:09:07 +00:00
Kubernetes Prow Robot
6a416f92e2 Merge pull request #139585 from cpanato/update-go-images-rel136
Bump images and versions to go 1.26.4 and distroless iptables
2026-06-09 18:45:40 +05:30
Carlos Panato
02c02b91a7 Bump images and versions to go 1.26.4 and distroless iptables
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2026-06-09 12:51:12 +02:00
Kubernetes Prow Robot
5c2fa527b9 Merge pull request #139508 from lalitc375/automated-cherry-pick-of-#139480-origin-release-1.36
Automated cherry pick of #139480: Fix wrong marking of errors
2026-06-08 21:39:59 +05:30
Kubernetes Prow Robot
598f6af8b4 Merge pull request #139445 from HirazawaUi/automated-cherry-pick-of-#139339-upstream-release-1.36
Automated cherry pick of #139339: kubeadm: fix dry-run CA copy paths in init certs
2026-06-08 21:39:52 +05:30
Kubernetes Prow Robot
92e308b49d Merge pull request #139446 from pohly/automated-cherry-pick-of-#139439-origin-release-1.36
Automated cherry pick of #139439: DRA E2E: simplify kind.yaml
2026-06-08 19:31:40 +05:30
Kubernetes Prow Robot
0671468995 Merge pull request #139363 from nojnhuh/automated-cherry-pick-of-#139017-upstream-release-1.36
Automated cherry pick of #139017: Fix dra scoring bug with mixed allocated and unallocated claims
2026-06-08 16:34:18 +05:30
Kubernetes Prow Robot
cd90f1a01c Merge pull request #139233 from rahulbabu95/automated-cherry-pick-of-#138736-upstream-release-1.36
Automated cherry pick of #138736: fix: avoid panic on services with empty IPFamilies
2026-06-08 16:34:10 +05:30
Kubernetes Prow Robot
38e4ee021d Merge pull request #139228 from aramase/automated-cherry-pick-of-#139045-upstream-release-1.36
Automated cherry pick of #139045: fix(csi): preserve mount dir when NodePublish fails on a remount
2026-06-08 16:34:03 +05:30
Kubernetes Prow Robot
d52dde2e43 Merge pull request #139211 from ashvindeodhar/automated-cherry-pick-of-#139040-upstream-release-1.36
Automated cherry pick of #139040: DRA: account for shared devices when rebuilding counters
2026-06-08 16:33:55 +05:30
Kubernetes Prow Robot
7949d48093 Merge pull request #139136 from gnufied/automated-cherry-pick-of-#138981-upstream-release-1.36
Automated cherry pick of #138981: Improve performance characteristic of selinux metric emission
2026-06-08 16:33:47 +05:30
Kubernetes Prow Robot
ba80304d08 Merge pull request #138988 from pohly/automated-cherry-pick-of-#138885-origin-release-1.36
Automated cherry pick of #138885: DRA: fix AllocationModeAll with consumed counters
2026-06-08 16:33:39 +05:30
Kubernetes Prow Robot
86ce997ef5 Merge pull request #139192 from liggitt/env-binary-1.36
[1.36] Restore ability to plumb binary data through envvar values
2026-06-08 15:13:10 +05:30
Lalit Chauhan
afb3edeb90 Fix wrong marking of errors 2026-06-04 20:26:17 +00:00
Kubernetes Prow Robot
8090133843 Merge pull request #138871 from BenTheElder/1.36-1.26.3
release-1.36: upgrade go to 1.26.4
2026-06-04 16:57:46 +05:30
Benjamin Elder
088d4d9d86 upgrade go to 1.26.4 2026-06-03 12:06:24 -07:00
Patrick Ohly
6489fe467c DRA E2E: simplify kind.yaml
Runtime config can be set via the kind config, which is simpler than setting
the apiserver parameter.

DynamicResourceAllocation is enabled by default nowadays, but still needs to be
set for the current n-3 skew testing which picks 1.33 (1.37 still in alpha).
Similar for NodeLogQuery (GA in 1.36).
2026-06-03 10:06:59 +02:00
bo.jiang
0a283bcb5a kubeadm: fix dry-run CA copy paths in init certs
Signed-off-by: bo.jiang <bo.jiang@daocloud.io>
2026-06-02 23:12:38 +08:00
Kubernetes Prow Robot
20cb5a2243 Merge pull request #139329 from kannon92/automated-cherry-pick-of-#139287-upstream-release-1.36
Automated cherry pick of #139287: batch/job: Fix scheduling directives mutation for not-yet-started suspended Jobs
2026-06-01 19:00:50 +05:30
John Belamaric
6bd05d64c7 Fix DRA scoring bug with mixed allocated and unallocated claims 2026-05-28 13:03:36 -05:00
Kevin Hannon
0f0c734c52 batch/job: Fix scheduling directives mutation for not-yet-started suspended Jobs
When MutableSchedulingDirectivesForSuspendedJobs feature gate is
enabled, it overwrites the notStarted check with a stricter condition
requiring the JobSuspended=True condition. This rejects mutations on
suspended Jobs that have never started but whose JobSuspended condition
has not yet been set by the job controller, breaking external
controllers like MultiKueue that inject scheduling directives
immediately after creating a suspended Job.

Preserve the notStarted path as an OR condition alongside the
JobSuspended condition check, restoring pre-1.36 behavior for
not-yet-started Jobs while maintaining the new relaxation for
previously-started Jobs.

Kubernetes-issue: https://github.com/kubernetes/kubernetes/issues/139281
2026-05-27 10:28:13 -04:00
Rahul
c106d15f1f fix(endpoint): avoid panic on services with empty IPFamilies
Accessing svc.Spec.IPFamilies[0] without a bounds check panics when a
service reaches the controller with an empty IPFamilies field. This can
happen via watch events: the apiserver's defaultOnRead decorator populates
IPFamilies on GET/LIST but not on watch (cachingObject wrapping bypasses
the type assertion).

Restore the inference logic removed in #130101: fall back to ClusterIP
for headful services and pod IP for headless services.

Signed-off-by: Rahul <rahulbabu95@gmail.com>
2026-05-21 13:36:04 -07:00
Anish Ramasekar
6c684db7a3 fix(csi): preserve mount dir on NodePublish error during remount
On a remount (e.g. CSIDriver.spec.requiresRepublish=true), the volume is
already published and the pod is observing the existing bind mount.
Removing the mount dir on a NodePublish error left the pod with stale
contents that subsequent successful republishes could not repair.
2026-05-21 14:15:31 -05:00
Anish Ramasekar
238883be8d feat(volume): add IsRemount to MounterArgs
Thread the reconciler's existing isRemount signal into MounterArgs so
volume plugins can distinguish an initial publish from a republish
(e.g. CSIDriver.spec.requiresRepublish=true). No behavior change.
2026-05-21 14:15:29 -05:00