github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
111,905 Commits 1 Branch 31 Tags
429f1527a7ac94e5280cb41931e74ac52d7a3fb1
Commit Graph

22271 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
3a99a5954d Merge pull request #113629 from andrewsykim/apiserver-identity-beta 
Promote APIServerIdentity to Beta
 2022-11-08 12:43:10 -08:00
Kubernetes Prow Robot
da735b5415 Merge pull request #113596 from jsafrane/selinux-reconstruction 
Reconstruct SELinux  mount label
 2022-11-08 12:43:03 -08:00
Kubernetes Prow Robot
6687496832 Merge pull request #113383 from pohly/e2e-failure-handling 
e2e: improve failure handling
 2022-11-08 12:42:31 -08:00
Maciej Szulik
3c93d540c6 Revert "Update daemonSet status even if syncDaemonSet fails" 
This reverts commit 2ee024a4df.
 2022-11-08 15:01:09 +01:00
Jan Safranek
d6c36736d5 Add mock CSI driver test for SELinux mount 2022-11-08 13:37:09 +01:00
Jan Safranek
802979c295 Add SELinux disruptive test 2022-11-08 12:42:20 +01:00
Kubernetes Prow Robot
aef9a37df9 Merge pull request #113010 from soltysh/promote_job_metrics 
Promote job metrics
 2022-11-08 03:16:32 -08:00
Kubernetes Prow Robot
95bd687a28 Merge pull request #113275 from Huang-Wei/kep-3521-B 
[KEP-3521] Part 2: Core scheduling implementation
 2022-11-07 23:18:19 -08:00
Kubernetes Prow Robot
595ea32411 Merge pull request #113314 from cici37/celIntegration 
CEL validation in Admission chain
 2022-11-07 17:08:33 -08:00
Kubernetes Prow Robot
2f837dc113 Merge pull request #112905 from alexzielenski/kubectl-apply-csa-migration 
kubectl: `apply --server-side` managed fields migration
 2022-11-07 17:08:21 -08:00
Andrew Sy Kim
c2d387ce54 test/integration/controlplane: update APIServerIdentity tests to use public lease parameter vars 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 19:42:05 -05:00
Andrew Sy Kim
368f9f949a test/e2e/apimachinery: add e2e test for APIServerIdentity, validating behavior when restarting kube-apiserver 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 19:36:22 -05:00
Kubernetes Prow Robot
0e9a2e6bcf Merge pull request #113669 from wojtek-t/clean_shutdown_final 
Clean shutdown final
 2022-11-07 16:01:45 -08:00
Kubernetes Prow Robot
6ee5e10f02 Merge pull request #113642 from dashpole/more_tracing_tests 
Additional integration test validations for apiserver tracing
 2022-11-07 16:01:37 -08:00
Kubernetes Prow Robot
1a3db7dd67 Merge pull request #113610 from logicalhan/refactor-stability 
update documentation for metrics with deprecated version and k8s version
 2022-11-07 16:01:23 -08:00
Kubernetes Prow Robot
68875cf4a7 Merge pull request #113047 from everpeace/improve-supplemental-groups-description 
Improve the API  description of `PodSecurityContext.SupplementalGroups` to clarify its unfamiliar behavior
 2022-11-07 16:01:00 -08:00
Kubernetes Prow Robot
47952e0917 Merge pull request #112360 from mimowo/handling-pod-failures-beta-kubelet 
Add pod disruption conditions for kubelet-initiated failures
 2022-11-07 16:00:40 -08:00
Kubernetes Prow Robot
b4f42864f5 Merge pull request #112127 from gjkim42/update-status-despite-error 
Update daemonSet status even if syncDaemonSet fails
 2022-11-07 16:00:28 -08:00
Kubernetes Prow Robot
fbde6ab05c Merge pull request #111724 from dobsonj/csi-inline-conformance-tests 
CSI Inline Volumes: promote API tests to conformance
 2022-11-07 16:00:16 -08:00
Wei Huang
0b27f25252 PreEnqueue implementation 
- Add PreEnqueuePlugin to Scheduler Framework
- Implement PreEnqueuePlugin in scheduler queue
- Implementation of SchedulingGates plugin
- Metrics
 2022-11-07 14:02:58 -08:00
Cici Huang
e7d83a1fb7 Integrate cel admission with API. 
Co-authored-by: Alexander Zielenski <zielenski@google.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
 2022-11-07 21:38:55 +00:00
Cici Huang
d86cfa9854 Add integration test. 
Co-authored-by: Kermit Alexander II <kermitalexandr@google.com>
 2022-11-07 21:35:58 +00:00
Cici Huang
0486e06261 Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control 2022-11-07 20:51:51 +00:00
Han Kang
92c76e5363 fix shellcheck errors 
Change-Id: I446cc2fb8b0a8bcf86578562daa5ea41bf8aba16
 2022-11-07 12:44:40 -08:00
Kubernetes Prow Robot
7369bd27e0 Merge pull request #113679 from alculquicondor/test-approver 
Add alculquicondor to test/integration/framework OWNERS
 2022-11-07 12:42:40 -08:00
Kubernetes Prow Robot
3d5725d9c0 Merge pull request #113649 from andrewsykim/apiserver-identity-hash 
apiserver identity : use SHA256 hash in lease names
 2022-11-07 11:20:49 -08:00
Kubernetes Prow Robot
b1dd1cd2f1 Merge pull request #113529 from enj/enj/i/kms_single_healthz 
kms: add wiring to support automatic encryption config reload
 2022-11-07 11:20:42 -08:00
David Ashpole
ffae39dbde additional integration test validations for apiserver tracing 2022-11-07 19:18:46 +00:00
Maciej Szulik
39d9981dc2 Promote job-related metrics to stable 2022-11-07 19:28:40 +01:00
Aldo Culquicondor
337c515db8 Add alculquicondor to test/integration/framework OWNERS 
Change-Id: I60c91252abf985e36ba2296f763dc61792cec4d0
 2022-11-07 13:13:50 -05:00
Kubernetes Prow Robot
73f6b96f0a Merge pull request #113615 from kerthcet/feat/add-benchmark-tests 
Add nodeInclusionPolicy benchmark tests to scheduler_perf
 2022-11-07 09:18:28 -08:00
Monis Khan
22e540bc48 kms: add wiring to support automatic encryption config reload 
This change adds a flag --encryption-provider-config-automatic-reload
which will be used to drive automatic reloading of the encryption
config at runtime.  While this flag is set to true, or when KMS v2
plugins are used without KMS v1 plugins, the /healthz endpoints
associated with said plugins are collapsed into a single endpoint at
/healthz/kms-providers - in this state, it is not possible to
configure exclusions for specific KMS providers while including the
remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude
a particular KMS is not possible.  This single healthz check handles
checking  all configured KMS providers.  When reloading is enabled
but no KMS providers are configured, it is a no-op.

k8s.io/apiserver does not support dynamic addition and removal of
healthz checks at runtime.  Reloading will instead have a single
static healthz check and swap the underlying implementation at
runtime when a config change occurs.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-11-07 12:03:18 -05:00
Andrew Sy Kim
5b3a9e2d75 apiserver identity : use SHA256 hash in lease names 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 12:02:57 -05:00
Kubernetes Prow Robot
ac95e5b701 Merge pull request #113510 from alculquicondor/finalizers-stable 
Graduate JobTrackingWithFinalizers to stable
 2022-11-07 08:06:41 -08:00
Kubernetes Prow Robot
240f6651e1 Merge pull request #113503 from kerthcet/cleanup/use-string-like-type 
Refactor scheduler_perf_test codes
 2022-11-07 08:06:29 -08:00
Wojciech Tyczyński
1b976760db Improve debuggability of leaking goroutines 2022-11-07 15:04:08 +01:00
Michal Wozniak
52cd6755eb Add pod disruption conditions for kubelet initiated failures 2022-11-07 11:23:22 +01:00
Wojciech Tyczyński
71d87272de Clean shutdown of apply integration tests 2022-11-07 09:14:15 +01:00
Kubernetes Prow Robot
565f582c4b Merge pull request #113199 from bobbypage/node_e2e_stop_kubelet 
test: Stop kubelet systemd service after node e2e
 2022-11-06 01:34:16 -08:00
Shingo Omura
ac1d5fdf37 Improve the description of PodSecurityContext.SupplementalGroups (including cri-api) 
so that it explicitly describe group information defined in the
container image will be kept. This also adds e2e test case of
SupplementalGroups with pre-defined groups in the container
image to make the behaivier clearer.
 2022-11-06 10:03:13 +09:00
David Ashpole
64af1adace Second attempt: Plumb context to Kubelet CRI calls (#113591) 
* plumb context from CRI calls through kubelet

* clean up extra timeouts

* try fixing incorrectly cancelled context
 2022-11-05 06:02:13 -07:00
Alexander Zielenski
33b9552e70 add kubectl server-side apply migrate managedfields 
in discussion with SIG, there is a strong interest in keeping the last-applied-configuration around for a bit longer as other tools transition for of it. This is OK since SSA maintains the annotation on kubectl's behalf on the server-side if it exists

migrate client-side-apply fields to SSA when --serverside-side is used

https://github.com/kubernetes/kubernetes/issues/107980

https://github.com/kubernetes/kubernetes/issues/108081

https://github.com/kubernetes/kubernetes/issues/107417

https://github.com/kubernetes/kubernetes/issues/112826

add test to make sure only one apply is needed after migration
 2022-11-04 14:09:29 -07:00
Aldo Culquicondor
4948918155 Graduate JobTrackingWithFinalizers to stable 
Change-Id: Ifc749a85b1270c0155ac511b91d4681d53236820
 2022-11-04 17:05:53 -04:00
Davanum Srinivas
f19589d38a Switch to newer nvidia installer for m97 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2022-11-04 14:32:04 -04:00
Kubernetes Prow Robot
8a6cd6e76d Merge pull request #113601 from marosset/use-resource-consumer-1.13 
e2e - use resource-consumer:1.13
 2022-11-04 10:52:36 -07:00
Kubernetes Prow Robot
b20ddbd75a Merge pull request #113351 from andrewsykim/endpointslice-terminating-ga 
Promote EndpointSliceTerminatingCondition to GA
 2022-11-04 09:36:39 -07:00
Kubernetes Prow Robot
ead17f3dc8 Merge pull request #113008 from soltysh/promote_cronjob_metrics 
Promote cronjob_job_creation_skew metric to stable
 2022-11-04 09:36:27 -07:00
kerthcet
bc15aca26d Refactor SchedulerConfigFile 
Rename to SchedulerConfigPath and make it a pointer
to be consist with other fields

Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-05 00:30:34 +08:00
kerthcet
48f2c9ec20 Add benchmark tests for nodeInclusionPolicy 
Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-05 00:13:43 +08:00
kerthcet
20492f5555 Remove GetReadySchedulableNodes in scheduler_perf 
When preparing or cleaning up nodes, list all schedulable ones

Signed-off-by: kerthcet <kerthcet@gmail.com>
 2022-11-05 00:13:21 +08:00