github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
111,905 Commits 1 Branch 31 Tags
429f1527a7ac94e5280cb41931e74ac52d7a3fb1
Commit Graph

3801 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
3a99a5954d Merge pull request #113629 from andrewsykim/apiserver-identity-beta 
Promote APIServerIdentity to Beta
 2022-11-08 12:43:10 -08:00
Maciej Szulik
3c93d540c6 Revert "Update daemonSet status even if syncDaemonSet fails" 
This reverts commit 2ee024a4df.
 2022-11-08 15:01:09 +01:00
Kubernetes Prow Robot
595ea32411 Merge pull request #113314 from cici37/celIntegration 
CEL validation in Admission chain
 2022-11-07 17:08:33 -08:00
Andrew Sy Kim
c2d387ce54 test/integration/controlplane: update APIServerIdentity tests to use public lease parameter vars 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 19:42:05 -05:00
Kubernetes Prow Robot
0e9a2e6bcf Merge pull request #113669 from wojtek-t/clean_shutdown_final 
Clean shutdown final
 2022-11-07 16:01:45 -08:00
Kubernetes Prow Robot
6ee5e10f02 Merge pull request #113642 from dashpole/more_tracing_tests 
Additional integration test validations for apiserver tracing
 2022-11-07 16:01:37 -08:00
Kubernetes Prow Robot
47952e0917 Merge pull request #112360 from mimowo/handling-pod-failures-beta-kubelet 
Add pod disruption conditions for kubelet-initiated failures
 2022-11-07 16:00:40 -08:00
Kubernetes Prow Robot
b4f42864f5 Merge pull request #112127 from gjkim42/update-status-despite-error 
Update daemonSet status even if syncDaemonSet fails
 2022-11-07 16:00:28 -08:00
Cici Huang
e7d83a1fb7 Integrate cel admission with API. 
Co-authored-by: Alexander Zielenski <zielenski@google.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
 2022-11-07 21:38:55 +00:00
Cici Huang
d86cfa9854 Add integration test. 
Co-authored-by: Kermit Alexander II <kermitalexandr@google.com>
 2022-11-07 21:35:58 +00:00
Cici Huang
0486e06261 Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control 2022-11-07 20:51:51 +00:00
Kubernetes Prow Robot
7369bd27e0 Merge pull request #113679 from alculquicondor/test-approver 
Add alculquicondor to test/integration/framework OWNERS
 2022-11-07 12:42:40 -08:00
Kubernetes Prow Robot
3d5725d9c0 Merge pull request #113649 from andrewsykim/apiserver-identity-hash 
apiserver identity : use SHA256 hash in lease names
 2022-11-07 11:20:49 -08:00
Kubernetes Prow Robot
b1dd1cd2f1 Merge pull request #113529 from enj/enj/i/kms_single_healthz 
kms: add wiring to support automatic encryption config reload
 2022-11-07 11:20:42 -08:00
David Ashpole
ffae39dbde additional integration test validations for apiserver tracing 2022-11-07 19:18:46 +00:00
Aldo Culquicondor
337c515db8 Add alculquicondor to test/integration/framework OWNERS 
Change-Id: I60c91252abf985e36ba2296f763dc61792cec4d0
 2022-11-07 13:13:50 -05:00
Kubernetes Prow Robot
73f6b96f0a Merge pull request #113615 from kerthcet/feat/add-benchmark-tests 
Add nodeInclusionPolicy benchmark tests to scheduler_perf
 2022-11-07 09:18:28 -08:00
Monis Khan
22e540bc48 kms: add wiring to support automatic encryption config reload 
This change adds a flag --encryption-provider-config-automatic-reload
which will be used to drive automatic reloading of the encryption
config at runtime.  While this flag is set to true, or when KMS v2
plugins are used without KMS v1 plugins, the /healthz endpoints
associated with said plugins are collapsed into a single endpoint at
/healthz/kms-providers - in this state, it is not possible to
configure exclusions for specific KMS providers while including the
remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude
a particular KMS is not possible.  This single healthz check handles
checking  all configured KMS providers.  When reloading is enabled
but no KMS providers are configured, it is a no-op.

k8s.io/apiserver does not support dynamic addition and removal of
healthz checks at runtime.  Reloading will instead have a single
static healthz check and swap the underlying implementation at
runtime when a config change occurs.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-11-07 12:03:18 -05:00
Andrew Sy Kim
5b3a9e2d75 apiserver identity : use SHA256 hash in lease names 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 12:02:57 -05:00
Kubernetes Prow Robot
ac95e5b701 Merge pull request #113510 from alculquicondor/finalizers-stable 
Graduate JobTrackingWithFinalizers to stable
 2022-11-07 08:06:41 -08:00
Kubernetes Prow Robot
240f6651e1 Merge pull request #113503 from kerthcet/cleanup/use-string-like-type 
Refactor scheduler_perf_test codes
 2022-11-07 08:06:29 -08:00
Wojciech Tyczyński
1b976760db Improve debuggability of leaking goroutines 2022-11-07 15:04:08 +01:00
Michal Wozniak
52cd6755eb Add pod disruption conditions for kubelet initiated failures 2022-11-07 11:23:22 +01:00
Wojciech Tyczyński
71d87272de Clean shutdown of apply integration tests 2022-11-07 09:14:15 +01:00
Aldo Culquicondor
4948918155 Graduate JobTrackingWithFinalizers to stable 
Change-Id: Ifc749a85b1270c0155ac511b91d4681d53236820
 2022-11-04 17:05:53 -04:00
Kubernetes Prow Robot
b20ddbd75a Merge pull request #113351 from andrewsykim/endpointslice-terminating-ga 
Promote EndpointSliceTerminatingCondition to GA
 2022-11-04 09:36:39 -07:00
kerthcet
bc15aca26d Refactor SchedulerConfigFile 
Rename to SchedulerConfigPath and make it a pointer
to be consist with other fields

Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-05 00:30:34 +08:00
kerthcet
48f2c9ec20 Add benchmark tests for nodeInclusionPolicy 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-05 00:13:43 +08:00
kerthcet
20492f5555 Remove GetReadySchedulableNodes in scheduler_perf 
When preparing or cleaning up nodes, list all schedulable ones

Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-05 00:13:21 +08:00
Kubernetes Prow Robot
c8a3657bde Merge pull request #113307 from andrewsykim/apiserver-identity-hostname 
apiserver identity: use persistent names for lease objects
 2022-11-04 07:28:25 -07:00
Wojciech Tyczyński
7253f708a8 Decrease goroutines 2022-11-04 10:34:36 +01:00
Andrew Sy Kim
f74f819e1a apiserver identity: update Lease creation integration test to validate new naming format and hostname label 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-03 22:53:56 -04:00
Andrew Sy Kim
9e24680d0b test/integration/endpointslice: remove references to EndpointSliceTerminatingCondition feature gate 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-03 20:26:51 -04:00
Kubernetes Prow Robot
c98aef484d Merge pull request #112895 from nokia/kep-1435-GA 
KEP-1435 Mixed Protocol values in LoadBalancer Service GA
 2022-11-03 05:43:35 -07:00
Kubernetes Prow Robot
01a58847e1 Merge pull request #113233 from dashpole/fix_tracing_integration_tests 
Fix and extend APIServerTracing integration tests
 2022-11-02 18:20:53 -07:00
Kubernetes Prow Robot
4b2aa18bde Merge pull request #113478 from alculquicondor/finalizer_metric 
Add benchmark for large indexed job
 2022-11-02 16:29:13 -07:00
Aldo Culquicondor
5e03865f65 Add benchmark for large indexed job 
Change-Id: I556f0cce5842699c98654cfb5a66e7c8d63b2e2e
 2022-11-02 11:56:26 -04:00
Kubernetes Prow Robot
447706238f Merge pull request #113419 from chrishenzie/rwop-integration-test 
scheduler: integration test for ReadWriteOncePod alpha
 2022-11-02 08:35:38 -07:00
Laszlo Janosi
82ce61afc7 KEP-1435 Mixed Protocol values in LoadBalancer Service GA 
Removed the unit tests that test the cases when the MixedProtocolLBService feature flag was false - the feature flag is locked to true with GA
Added an integration test to test whether the API server accepts an LB Service with different protocols.
Added an e2e test to test whether a service which is exposed by a multi-protocol LB Service is accessible via both ports.
Removed the conditional validation that compared the new and the old Service definitions during an update - the feature flag is locked to true with GA.
 2022-11-02 13:44:52 +02:00
Chris Henzie
2d0afbc054 scheduler: integration test for ReadWriteOncePod alpha 
Tests scheduler enforcement of the ReadWriteOncePod PVC access mode.

- Creates a pod using a PVC with ReadWriteOncePod
- Creates a second pod using the same PVC
- Observes the second pod fails to schedule because PVC is in-use
- Deletes the first pod
- Observes the second pod successfully schedules
 2022-11-01 15:08:01 -07:00
Mark Rossetti
498d065cc5 Promoting WindowsHostProcessContainers to stable 
Signed-off-by: Mark Rossetti <marosset@microsoft.com>
 2022-11-01 14:06:25 -07:00
kerthcet
cfc53ee524 Refactor code and annotations for readability 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-01 17:44:45 +08:00
kerthcet
21e8a69a22 Use operationCode instead of string directly 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-01 17:01:22 +08:00
David Ashpole
f830d971b8 fix and extend apiserver tracing tests 2022-10-31 19:42:14 +00:00
Michał Woźniak
3628532311 Extend metrics with the new labels (#113324) 
* Extend job metrics

* Refactor TestMetrics to extract its checks into dedicated tests per feature
 2022-10-31 08:50:45 -07:00
Rita Zhang
c3df726c7b Enable encryption for custom resources 
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
 2022-10-26 13:37:11 -07:00
Shihang Zhang
569cd70a52 track legacy service account tokens 2022-10-24 09:37:53 -07:00
Kubernetes Prow Robot
4d50d28777 Merge pull request #113193 from kerthcet/cleanup/remove-unnecessary-tests 
Remove unuseful multi scheduler testcases
 2022-10-21 08:32:03 -07:00
Kubernetes Prow Robot
18b81513b6 Merge pull request #112025 from kerthcet/refactor/handle-scheduling-failure 
Refactor schedulingCycle and bindingCycle in scheduler
 2022-10-21 08:31:51 -07:00
kerthcet
f7f857814f Refactor schedulingCycle and bindingCycle in scheduler 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-10-21 13:53:18 +08:00