github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
111,935 Commits 1 Branch 31 Tags
ac4da3f43793fc6a723d0eccce40c0e66a07c2bd
Commit Graph

22281 Commits

Author SHA1 Message Date
Michal Wozniak
818e180300 Add e2e test for adding DisruptionTarget condition to the preemption victim pod 2022-11-09 09:02:40 +01:00
Michal Wozniak
c803892bd8 Enable the feature into beta 2022-11-09 09:02:40 +01:00
Kubernetes Prow Robot
b3c4fb1f78 Merge pull request #113751 from logicalhan/newDesc 
clean up errors, ensure they log lines, improve documentation
 2022-11-08 23:04:12 -08:00
Kubernetes Prow Robot
e62cfabf93 Merge pull request #112050 from nilekhc/kms-hot-reload 
Implements hot reload of the KMS `EncryptionConfiguration`
 2022-11-08 17:24:12 -08:00
Kubernetes Prow Robot
d619f60e0f Merge pull request #113442 from Huang-Wei/kep-3521-C 
[KEP-3521] Part 3: Bug fixes, integration & E2E Test
 2022-11-08 15:08:15 -08:00
Nilekh Chaudhari
761b7822fc feat: implements kms encryption config hot reload 
This change enables hot reload of encryption config file when api server
flag --encryption-provider-config-automatic-reload is set to true. This
allows the user to change the encryption config file without restarting
kube-apiserver. The change is detected by polling the file and is done
by using fsnotify watcher. When file is updated it's process to generate
new set of transformers and close the old ones.

Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2022-11-08 21:47:59 +00:00
Han Kang
f61fcef706 go fmt 
Change-Id: I631ef35f10e8434b5a6deccedab6158f7199faa3
 2022-11-08 13:34:17 -08:00
Kubernetes Prow Robot
3a99a5954d Merge pull request #113629 from andrewsykim/apiserver-identity-beta 
Promote APIServerIdentity to Beta
 2022-11-08 12:43:10 -08:00
Kubernetes Prow Robot
da735b5415 Merge pull request #113596 from jsafrane/selinux-reconstruction 
Reconstruct SELinux  mount label
 2022-11-08 12:43:03 -08:00
Kubernetes Prow Robot
6687496832 Merge pull request #113383 from pohly/e2e-failure-handling 
e2e: improve failure handling
 2022-11-08 12:42:31 -08:00
Wei Huang
abe0c5d5b4 E2E test for KEP Scheduling Readiness Gates 2022-11-08 12:38:21 -08:00
Han Kang
bf7d65c15c clean up errors, ensure they log lines, improve documentation 
Change-Id: Icf4da7410dc9ecfb3616511ea55339e1d0690c49
 2022-11-08 12:18:08 -08:00
Wei Huang
ae5d430c76 Integration tests for KEP Pod Scheduling Readiness 
- test generic integration in plugins_test.go
- test integration with SchedulingGates plugin in queue_test.go
 2022-11-08 10:06:44 -08:00
Maciej Szulik
3c93d540c6 Revert "Update daemonSet status even if syncDaemonSet fails" 
This reverts commit 2ee024a4df.
 2022-11-08 15:01:09 +01:00
Jan Safranek
d6c36736d5 Add mock CSI driver test for SELinux mount 2022-11-08 13:37:09 +01:00
Jan Safranek
802979c295 Add SELinux disruptive test 2022-11-08 12:42:20 +01:00
Kubernetes Prow Robot
aef9a37df9 Merge pull request #113010 from soltysh/promote_job_metrics 
Promote job metrics
 2022-11-08 03:16:32 -08:00
Kubernetes Prow Robot
95bd687a28 Merge pull request #113275 from Huang-Wei/kep-3521-B 
[KEP-3521] Part 2: Core scheduling implementation
 2022-11-07 23:18:19 -08:00
Kubernetes Prow Robot
595ea32411 Merge pull request #113314 from cici37/celIntegration 
CEL validation in Admission chain
 2022-11-07 17:08:33 -08:00
Kubernetes Prow Robot
2f837dc113 Merge pull request #112905 from alexzielenski/kubectl-apply-csa-migration 
kubectl: `apply --server-side` managed fields migration
 2022-11-07 17:08:21 -08:00
Andrew Sy Kim
c2d387ce54 test/integration/controlplane: update APIServerIdentity tests to use public lease parameter vars 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 19:42:05 -05:00
Andrew Sy Kim
368f9f949a test/e2e/apimachinery: add e2e test for APIServerIdentity, validating behavior when restarting kube-apiserver 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 19:36:22 -05:00
Kubernetes Prow Robot
0e9a2e6bcf Merge pull request #113669 from wojtek-t/clean_shutdown_final 
Clean shutdown final
 2022-11-07 16:01:45 -08:00
Kubernetes Prow Robot
6ee5e10f02 Merge pull request #113642 from dashpole/more_tracing_tests 
Additional integration test validations for apiserver tracing
 2022-11-07 16:01:37 -08:00
Kubernetes Prow Robot
1a3db7dd67 Merge pull request #113610 from logicalhan/refactor-stability 
update documentation for metrics with deprecated version and k8s version
 2022-11-07 16:01:23 -08:00
Kubernetes Prow Robot
68875cf4a7 Merge pull request #113047 from everpeace/improve-supplemental-groups-description 
Improve the API  description of `PodSecurityContext.SupplementalGroups` to clarify its unfamiliar behavior
 2022-11-07 16:01:00 -08:00
Kubernetes Prow Robot
47952e0917 Merge pull request #112360 from mimowo/handling-pod-failures-beta-kubelet 
Add pod disruption conditions for kubelet-initiated failures
 2022-11-07 16:00:40 -08:00
Kubernetes Prow Robot
b4f42864f5 Merge pull request #112127 from gjkim42/update-status-despite-error 
Update daemonSet status even if syncDaemonSet fails
 2022-11-07 16:00:28 -08:00
Kubernetes Prow Robot
fbde6ab05c Merge pull request #111724 from dobsonj/csi-inline-conformance-tests 
CSI Inline Volumes: promote API tests to conformance
 2022-11-07 16:00:16 -08:00
Wei Huang
0b27f25252 PreEnqueue implementation 
- Add PreEnqueuePlugin to Scheduler Framework
- Implement PreEnqueuePlugin in scheduler queue
- Implementation of SchedulingGates plugin
- Metrics
 2022-11-07 14:02:58 -08:00
Cici Huang
e7d83a1fb7 Integrate cel admission with API. 
Co-authored-by: Alexander Zielenski <zielenski@google.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
 2022-11-07 21:38:55 +00:00
Cici Huang
d86cfa9854 Add integration test. 
Co-authored-by: Kermit Alexander II <kermitalexandr@google.com>
 2022-11-07 21:35:58 +00:00
Cici Huang
0486e06261 Adding new api version of admissionregistration.k8s.io v1alpha1 for CEL in Admission Control 2022-11-07 20:51:51 +00:00
Han Kang
92c76e5363 fix shellcheck errors 
Change-Id: I446cc2fb8b0a8bcf86578562daa5ea41bf8aba16
 2022-11-07 12:44:40 -08:00
Kubernetes Prow Robot
7369bd27e0 Merge pull request #113679 from alculquicondor/test-approver 
Add alculquicondor to test/integration/framework OWNERS
 2022-11-07 12:42:40 -08:00
Kubernetes Prow Robot
3d5725d9c0 Merge pull request #113649 from andrewsykim/apiserver-identity-hash 
apiserver identity : use SHA256 hash in lease names
 2022-11-07 11:20:49 -08:00
Kubernetes Prow Robot
b1dd1cd2f1 Merge pull request #113529 from enj/enj/i/kms_single_healthz 
kms: add wiring to support automatic encryption config reload
 2022-11-07 11:20:42 -08:00
David Ashpole
ffae39dbde additional integration test validations for apiserver tracing 2022-11-07 19:18:46 +00:00
Maciej Szulik
39d9981dc2 Promote job-related metrics to stable 2022-11-07 19:28:40 +01:00
Aldo Culquicondor
337c515db8 Add alculquicondor to test/integration/framework OWNERS 
Change-Id: I60c91252abf985e36ba2296f763dc61792cec4d0
 2022-11-07 13:13:50 -05:00
Kubernetes Prow Robot
73f6b96f0a Merge pull request #113615 from kerthcet/feat/add-benchmark-tests 
Add nodeInclusionPolicy benchmark tests to scheduler_perf
 2022-11-07 09:18:28 -08:00
Monis Khan
22e540bc48 kms: add wiring to support automatic encryption config reload 
This change adds a flag --encryption-provider-config-automatic-reload
which will be used to drive automatic reloading of the encryption
config at runtime.  While this flag is set to true, or when KMS v2
plugins are used without KMS v1 plugins, the /healthz endpoints
associated with said plugins are collapsed into a single endpoint at
/healthz/kms-providers - in this state, it is not possible to
configure exclusions for specific KMS providers while including the
remaining ones - ex: using /readyz?exclude=kms-provider-1 to exclude
a particular KMS is not possible.  This single healthz check handles
checking  all configured KMS providers.  When reloading is enabled
but no KMS providers are configured, it is a no-op.

k8s.io/apiserver does not support dynamic addition and removal of
healthz checks at runtime.  Reloading will instead have a single
static healthz check and swap the underlying implementation at
runtime when a config change occurs.

Signed-off-by: Monis Khan <mok@microsoft.com>
 2022-11-07 12:03:18 -05:00
Andrew Sy Kim
5b3a9e2d75 apiserver identity : use SHA256 hash in lease names 
Signed-off-by: Andrew Sy Kim <andrewsy@google.com>
 2022-11-07 12:02:57 -05:00
Kubernetes Prow Robot
ac95e5b701 Merge pull request #113510 from alculquicondor/finalizers-stable 
Graduate JobTrackingWithFinalizers to stable
 2022-11-07 08:06:41 -08:00
Kubernetes Prow Robot
240f6651e1 Merge pull request #113503 from kerthcet/cleanup/use-string-like-type 
Refactor scheduler_perf_test codes
 2022-11-07 08:06:29 -08:00
Wojciech Tyczyński
1b976760db Improve debuggability of leaking goroutines 2022-11-07 15:04:08 +01:00
Michal Wozniak
52cd6755eb Add pod disruption conditions for kubelet initiated failures 2022-11-07 11:23:22 +01:00
Wojciech Tyczyński
71d87272de Clean shutdown of apply integration tests 2022-11-07 09:14:15 +01:00
Kubernetes Prow Robot
565f582c4b Merge pull request #113199 from bobbypage/node_e2e_stop_kubelet 
test: Stop kubelet systemd service after node e2e
 2022-11-06 01:34:16 -08:00
Shingo Omura
ac1d5fdf37 Improve the description of PodSecurityContext.SupplementalGroups (including cri-api) 
so that it explicitly describe group information defined in the
container image will be kept. This also adds e2e test case of
SupplementalGroups with pre-defined groups in the container
image to make the behaivier clearer.
 2022-11-06 10:03:13 +09:00