Commit Graph

24632 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
ca43bf0582 Merge pull request #120154 from palnabarun/authz-config-external-changes
[StructuredAuthorizationConfiguration] Add --authorization-config flag and guard it using a Feature Gate
2023-10-18 16:21:13 +02:00
Kevin Hannon
989aadda83 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create" 2023-10-18 09:36:59 -04:00
Kensei Nakada
d5d3c26337 feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity 2023-10-18 11:28:02 +00:00
Kubernetes Prow Robot
dc8b57d8a7 Merge pull request #121283 from tnqn/cleanup-unregistered-group
Unregister group path from apiserver when the group no longer exists
2023-10-18 10:30:09 +02:00
Wojciech Tyczyński
7ff866463a Refactor watch event serialization to allow caching 2023-10-18 09:38:37 +02:00
Quan Tian
0cda42af7a Unregister group path from apiserver when the group no longer exists
After a CRD or an APIService was deleted, the corresponding group was
never unregistered. It caused a stale entry to remain in the root path
and could potentially lead to memory leak as the groupDiscoveryHandler
was never released and the handledGroups was never cleaned up.

The commit implements the cleanup. It tracks each group's usage and
unregister the a group when there is no version for this group.

Signed-off-by: Quan Tian <qtian@vmware.com>
2023-10-18 15:17:21 +08:00
Jordan Liggitt
a50d83c669 Add basic authz config integration test 2023-10-18 11:58:48 +05:30
Todd Neal
7bcc98c46b sidecars: terminate sidecars after main containers
Sidecars should terminate:
- after all main containers have exited
- serialized and in reverse order
2023-10-17 19:07:21 -05:00
Kubernetes Prow Robot
613f75926e Merge pull request #121274 from dejanzele/fix/pod-replacement-policy-int-tests
cleanup: improve assertions for Failed PodReplacementPolicy integration test cases
2023-10-17 23:28:48 +02:00
Kubernetes Prow Robot
e7fd5b85ed Merge pull request #121068 from carlory/cleanup-e2e-framework-deprecated-funcs
clean up deprecated funcs in e2e framework
2023-10-17 21:28:57 +02:00
Yuki Iwai
201c30fba8 Job: Handle error returned from AddEventHandler function (#119917)
* Job: Handle error returned from AddEventHandler function

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Use the error message the similar to CronJob

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Clean up error messages

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Put the tesing.T on the second place in the args for the newControllerFromClient function

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Put the testing.T on the second place in the args for the newControllerFromClientWithClock function

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Call t.Helper()

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Put the testing.TB on the second place in the args for the createJobControllerWithSharedInformers function and call tb.Helper() there

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Put the testing.TB on the second place in the args for the startJobControllerAndWaitForCaches function and call tb.Helper() there

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

* Adapt TestFinializerCleanup to the eventhandler error

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>

---------

Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>
2023-10-17 21:28:34 +02:00
Dejan Pejchev
fad4430f9e cleanup: remove redundant logic in PodReplacementPolicy integration tests 2023-10-17 20:30:54 +02:00
Kubernetes Prow Robot
3ae76863a5 Merge pull request #121213 from charles-chenzz/e2e_3085_kep
KEP 3085: check PodReadyToStartContainers condition after volume create
2023-10-17 20:08:19 +02:00
Dejan Pejchev
2ccf7e8e49 fix: minor lint issues and redundant check 2023-10-17 20:07:20 +02:00
Dejan Pejchev
056b25dfca fix: improve PodReplacementPolicy integration test case names and update deprecated methods 2023-10-17 19:18:58 +02:00
Dejan Pejchev
e73edf7764 fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests 2023-10-17 18:15:55 +02:00
Dejan Pejchev
bcf1c113f4 cleanup: add new test cases for failed pod replacement policy instead of editing existing ones 2023-10-17 18:04:25 +02:00
Jim Hays
911700e64e Fix typos in markdown 2023-10-17 10:55:40 -04:00
Quan Tian
b500c3d693 Correct the label selector used in TestSampleAPIServer
TestSampleAPIServer tried to validate APIService deletion, but it used
an unmatched selector to delete and list APIServices, which essentially
validated nothing.

Signed-off-by: Quan Tian <qtian@vmware.com>
2023-10-17 22:29:34 +08:00
Kubernetes Prow Robot
639f63c4e5 Merge pull request #121261 from kannon92/revert-119882-podres-client-wait
Revert "podresources: e2e: force eager connection"
2023-10-17 16:14:29 +02:00
Kubernetes Prow Robot
bbcbfe4b97 Merge pull request #121257 from bzsuni/ga/ProbeTerminationGracePeriod
Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
2023-10-17 16:14:19 +02:00
Patrick Ohly
7d077f9271 e2e: move AllNodesReady check to DeferCleanup
Some test cases can make nodes not ready and use DeferCleanup to bring
nodes back online. Checking if all nodes are online would fail
in such cases as AfterEach runs before DeferCleanup.

Scheduling nodes readines check to DeferCleanup should solve this
issue as nodes would be brought back to a `Ready` state before the
check.
2023-10-17 16:45:57 +03:00
Gunju Kim
ca6fda05ce Restart containers in right order after the podSandboxChanged
This is a workaround for the issue that the kubelet cannot differentiate
the container statuses of the previous podSandbox from the current one.

If the node is rebooted, all containers will be in the exited state and
the kubelet will try to recreate a new podSandbox. In this case, the
kubelet should not mistakenly think that the newly created podSandbox
has been initialized.
2023-10-17 22:11:31 +09:00
Swati Sehgal
f46cdf1428 node: sample-dp: set default value for pluginSocksDir
Setting a reasonable default in case `PLUGIN_SOCK_DIR`
environment variable is not specified.

Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
2023-10-17 12:19:10 +01:00
Swati Sehgal
211d8cc80a node: sample-dp: stubRegisterControlFunc for controlling registration
If the user specifies the intent to control registration process, we rely on
registration triggers (deletion of control file) to prompt registration.

This behvaiour is expected to be consistent across kubelet restarts and therefore
across the watch calls where we watch for changes to the unix socket so we make
this part of Stub object instead of a parameter.

Co-authored-by: Francesco Romani <fromani@redhat.com>
Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
2023-10-17 12:19:10 +01:00
Swati Sehgal
c4c9d61d66 node: sample-dp: Handle re-registration for controlled registrations
In case `REGISTER_CONTROL_FILE` is specified, we want to ensure that the
registration is triggered by deletion of the control file. This is
applicable both when the registration happens for the first time and
subsequent ones because of kubelet restarts.

Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
2023-10-17 12:19:07 +01:00
Swati Sehgal
6714e678d3 node: sample-dp: register by default and re-register on restarts
In issue: 115107 we added an environment variable to control the registration of sample
device plugin to kubelet. The intent of this patch is to ensure that the default
behaviour of the plugin is to register to kubelet (in case no environment
variable is specified).

In addition to that, we want to ensure that the plugin registers itself not just once.
It should re-register itself to kubelet in case of node reboot or kubelet restarts.

Signed-off-by: Swati Sehgal <swsehgal@redhat.com>
2023-10-17 12:14:09 +01:00
Gunju Kim
d2b803246a Don't reuse the device allocated to the restartable init container 2023-10-17 18:28:29 +09:00
wen.rui
3df3b83226 e2e_api: stop using deprecated framework.ExpectNotEqual 2023-10-17 11:03:11 +08:00
Kubernetes Prow Robot
63ae3084b7 Merge pull request #121176 from bzsuni/cleanup/e2e/expect_not_equal
remove deprecated framework.ExpectNotEqual for node
2023-10-17 02:29:06 +02:00
Kubernetes Prow Robot
ac66f3d466 Merge pull request #121010 from Jefftree/decouple-openapi-v2v3-config
Decouple openapi v2v3 config
2023-10-16 23:41:11 +02:00
Riaan Kleinhans
4ae7150f05 remove pc pvc status endpoints
Signed-off-by: Riaan Kleinhans <riaan@ii.coop>
2023-10-17 10:33:17 +13:00
Stephen Heywood
2e8f66afb3 Promote PV/PVC status e2e test to Conformance 2023-10-17 09:40:20 +13:00
Kubernetes Prow Robot
952a9cb060 Merge pull request #121174 from carlory/fix-120770
fix limitrange flaky test
2023-10-16 22:27:00 +02:00
Kubernetes Prow Robot
f6ba25fdbd Merge pull request #119026 from AxeZhan/sleepAction
Introducing Sleep Action for PreStop Hook
2023-10-16 21:19:44 +02:00
Dejan Pejchev
f2b723a130 fix: improve assertion for Failed PodReplacementPolicy integration test cases 2023-10-16 21:16:17 +02:00
Jefftree
b30c6bdff8 Fix v3 spec 2023-10-16 15:05:13 -04:00
Kubernetes Prow Robot
e196d24910 Merge pull request #121243 from ii/fix-pv-pvc-status-test
Fix PersistentVolumeStatus & PersistentVolumeClaimStatus e2e test flake
2023-10-16 19:07:39 +02:00
carlory
5d0f8530f6 fix Huge Pages failing test 2023-10-16 23:13:32 +08:00
charles-chenzz
7d31b5ffd0 Add test case for sandbox condition if pod fails to mount volume from a missing secret 2023-10-16 22:04:04 +08:00
Kevin Hannon
dd9c3358f5 Revert "podresources: e2e: force eager connection" 2023-10-16 09:46:04 -04:00
bzsuni
27abf99148 Remove GA featuregate about ProbeTerminationGracePeriod in 1.29
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-10-16 20:12:47 +08:00
upodroid
011c65e17e configure npd to run as daemonset on cos 2023-10-16 12:34:47 +01:00
upodroid
e69a960792 skip deploying csi driver if it is already installed 2023-10-16 12:32:27 +01:00
Kubernetes Prow Robot
4254a77c21 Merge pull request #121249 from pohly/klog-call-fixes
fix invalid log calls
2023-10-16 13:14:01 +02:00
Patrick Ohly
957adfac49 fix invalid log calls
These were found with a modified klog that enables "go vet" to check klog call
parameters:

    cmd/kubeadm/app/features/features.go:149:4: printf: k8s.io/klog/v2.Warningf format %t has arg v of wrong type string (govet)
    			klog.Warningf("Setting deprecated feature gate %s=%t. It will be removed in a future release.", k, v)
    test/images/sample-device-plugin/sampledeviceplugin.go:147:5: printf: k8s.io/klog/v2.Errorf does not support error-wrapping directive %w (govet)
    				klog.Errorf("error: %w", err)
    test/images/sample-device-plugin/sampledeviceplugin.go:155:3: printf: k8s.io/klog/v2.Errorf does not support error-wrapping directive %w (govet)
    		klog.Errorf("Failed to add watch to %q: %w", triggerPath, err)
    staging/src/k8s.io/code-generator/cmd/prerelease-lifecycle-gen/prerelease-lifecycle-generators/status.go:207:5: printf: k8s.io/klog/v2.Fatalf does not support error-wrapping directive %w (govet)
    				klog.Fatalf("Package %v: unsupported %s value: %q :%w", i, tagEnabledName, ptag.value, err)
    staging/src/k8s.io/legacy-cloud-providers/vsphere/nodemanager.go:286:3: printf: (k8s.io/klog/v2.Verbose).Infof format %s reads arg #1, but call has 0 args (govet)
    		klog.V(4).Infof("Node %s missing in vSphere cloud provider cache, trying node informer")
    staging/src/k8s.io/legacy-cloud-providers/vsphere/nodemanager.go:302:3: printf: (k8s.io/klog/v2.Verbose).Infof format %s reads arg #1, but call has 0 args (govet)
    		klog.V(4).Infof("Node %s missing in vSphere cloud provider caches, trying the API server")
2023-10-16 10:21:07 +02:00
Shiming Zhang
33f2d487e2 Promote KEP-2681 to beta in 1.29 2023-10-16 10:10:35 +08:00
jinye
e20ecbe1b4 cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual 2023-10-16 09:24:26 +08:00
bzsuni
5683660830 remove deprecated framework.ExpectNotEqual for node
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2023-10-16 09:21:26 +08:00
Stephen Heywood
b548bbb8cf When reading pvc status allow bound to be a valid value 2023-10-16 10:20:26 +13:00