Commit Graph

25248 Commits

Author SHA1 Message Date
Stephen Heywood
80db011202 remove VolumeAttachment endpoints 2024-03-15 13:32:17 +13:00
Stephen Heywood
55302de991 Promote VolumeAttachment e2e test to Conformance 2024-03-15 10:54:25 +13:00
cici37
4048598620 Change the API operation e2e test to conformance test. 2024-03-14 20:59:41 +00:00
Patrick Ohly
cf8fffae72 dra e2e: sanity check resource handle
When using structured parameters, the instance name must match and not be in
use already.

NodeUnprepareResources must be called with the same handle are
NodePrepareResources.
2024-03-14 20:42:31 +01:00
Patrick Ohly
f149d6d8f9 dra e2e: watch claims and validate them
Logging claims helps with debugging test failures. Checking the finalizer
catches unexpected behavior.
2024-03-14 20:42:31 +01:00
Kubernetes Prow Robot
d194e6d06c Merge pull request #123932 from pohly/dra-api-resource-model-rename
dra api: NodeResourceModel -> ResourceModel
2024-03-14 12:11:35 -07:00
Kubernetes Prow Robot
7de02b982e Merge pull request #123857 from cici37/vapGA
[ValidatingAdmissionPolicy]Add conformance tests for API
2024-03-14 12:11:21 -07:00
cici37
045d91d882 Add e2e tests for GA API 2024-03-14 17:12:22 +00:00
Patrick Ohly
a0add8d2c7 dra api: NodeResourceModel -> ResourceModel
When renaming NodeResourceSlice to ResourceSlice, the embedded
[Node]ResourceModel also should have been renamed.
2024-03-14 18:07:36 +01:00
Akihiro Suda
1dc05009fe api: NodeStatus: rename RuntimeClasses to RuntimeHandlers
The runtime classes are apiserver's concept, while the handlers are kubelet's concept.
For NodeStatus, it makes more sense to return the latter ones here.

This commit modifies the following files:

- pkg/apis/core/types.go
- staging/src/k8s.io/api/core/v1/types.go
- pkg/kubelet/nodestatus/setters.go
- pkg/kubelet/kubelet_node_status.go
- pkg/registry/core/node/strategy.go
- test/e2e_node/mount_rro_linux_test.go

Other changes were auto-generated by running `make update`.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-03-14 08:06:39 +09:00
Gaurav Kumar Ghildiyal
6680700b5d Add e2e and integration tests for Service.spec.trafficDistribution (#123812)
* Add e2e tests for Service.spec.trafficDistribution

* Fix linting issue

* Fix spelling

* Add integration tests for trafficDistribution

* Use nodeSelection instead of nodeName to schedule pods on a specific zonal node

* Fix import alias corev1 -> v1 in e2e test

* Address comments

* Add a way to only print log lines in case of errors. This is deemed to be good behaviour by e2e tests guidelines
2024-03-13 14:46:21 -07:00
Ziqi Zhao
1aeb0ba314 add http method to span name
Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>
2024-03-13 13:25:36 +08:00
Kubernetes Prow Robot
f90461c43e Merge pull request #123904 from kannon92/innocent-eviction-potential-fix
innocent-pod should not be evicted due to exceeding requests/limits
2024-03-12 16:20:54 -07:00
Kubernetes Prow Robot
2e528db812 Merge pull request #123873 from jiahuif-forks/tests/validating-admission-policy/typechecking-manual-retry
ValidatingAdmissionPolicy: retry policy creation for CRD type checking E2E test
2024-03-12 14:38:18 -07:00
Jiahui Feng
4f6212fb0e generated: ./hack/update-conformance-yaml.sh 2024-03-12 13:35:50 -07:00
Jiahui Feng
2c2d424b01 make type checking tests non-conformance. 2024-03-12 11:15:30 -07:00
Kevin Hannon
19ae61bab0 innocent-pod should not be evicted due to exceeding requests/limits 2024-03-12 13:37:11 -04:00
Ziqi Zhao
02154293c7 change the integration test
Signed-off-by: Ziqi Zhao <zhaoziqi9146@gmail.com>
2024-03-12 22:49:38 +08:00
Antonio Ojea
7ab1ef644e Revert "Implement a field selector for ClusterIP on Services" 2024-03-12 12:20:27 +00:00
Sascha Grunert
a35b75ee57 Update cni-plugins to v1.4.1
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-03-12 12:06:52 +01:00
Adrian Reber
cba34770d2 Handle containerd "CRIU not found" error message
During the PR to get "Forensic Container Checkpointing" enabled in
containerd the decision was made to not correctly report if containerd
cannot find the CRIU binary. The reason was that the e2e_node checkpoint
test did not understand the error message.

The e2e_node checkpoint test is skipped if the container runtime (CRI-O
or containerd) does not enable checkpoint support of if checkpoint
support is not implemented.

This commit adds another reason to skip a check. If the underlying OS
which is used to test "Forensic Container Checkpointing" in combination
with containerd or CRI-O is missing the CRIU binary.

This was encountered on Google's Container-Optimized OS (COS) based
tests where CRIU was not installed.

With this change merged it is possible for containerd to return the
correct error message without breaking Kubernetes e2e tests.

Signed-off-by: Adrian Reber <areber@redhat.com>
2024-03-12 08:13:53 +00:00
Jiahui Feng
dc2974c646 retry policy creation for CRD type checking E2E test 2024-03-11 14:39:43 -07:00
Kubernetes Prow Robot
016d8b11ae Merge pull request #123865 from dims/disable-aws-drivers-for-in-tree-volumes-test
Disable `aws` drivers for `In-tree Volumes` test
2024-03-11 11:26:13 -07:00
Kubernetes Prow Robot
2010ca8c5a Merge pull request #123849 from AkihiroSuda/fix-123848
e2e_node: mount_rro: skip if feature gate is disabled; fix error string comparison
2024-03-11 08:51:34 -07:00
Davanum Srinivas
4aed5652ed Disable aws drivers for In-tree Volumes test
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-11 11:08:39 -04:00
Anish Ramasekar
51c26b7002 fix test flake in TestStructuredAuthenticationConfigReload
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-10 22:36:26 -07:00
Akihiro Suda
ea14ccdf13 e2e_node: mount_rro: fix error string comparison
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-03-11 11:50:25 +09:00
Akihiro Suda
5cc1e56248 e2e_node: mount_rro: add SkipUnlessFeatureGateEnabled(RecursiveReadOnlyMounts)
Fix issue 123848

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-03-11 11:50:25 +09:00
Kubernetes Prow Robot
1f22594c9a Merge pull request #123742 from thockin/cleanup_underscore_tmp
Cleanup _tmp usage
2024-03-10 17:53:44 -07:00
Anish Ramasekar
62ac88b9ea Add metrics for authentication config reload
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-03-09 14:40:22 -08:00
Kubernetes Prow Robot
77ecfb7800 Merge pull request #123525 from enj/enj/f/authn_config_reload
Add dynamic reload support for authentication configuration
2024-03-09 14:13:37 -08:00
Monis Khan
b4935d910d Add dynamic reload support for authentication configuration
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-03-09 14:29:33 -05:00
Akihiro Suda
d4925ce8f8 e2e: KEP-3857: Recursive Read-only (RRO) mounts
Usage:
```
make test-e2e-node \
  TEST_ARGS='--service-feature-gates=RecursiveReadOnlyMounts=true --kubelet-flags="--feature-gates=RecursiveReadOnlyMounts=true"' \
  FOCUS="Mount recursive read-only" SKIP=""
```

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-03-10 03:00:59 +09:00
Kubernetes Prow Robot
28c4d00c7d Merge pull request #123344 from nilekhc/svm-controller
[Storage Version Migration] feat: implements Storage Version Migration
2024-03-08 13:45:16 -08:00
Nilekh Chaudhari
9161302e7f feat: implements svm controller
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2024-03-08 19:25:10 +00:00
Kubernetes Prow Robot
e0a142dc5c Merge pull request #123815 from mimowo/job-managed-by-test2
Follow up fix to the job status update test
2024-03-08 08:00:35 -08:00
Kubernetes Prow Robot
5639f8f848 Merge pull request #123723 from mimowo/job-managed-by-impl-test
Integration test for change in syncOrphanPod for managedBy jobs
2024-03-08 06:35:36 -08:00
Kubernetes Prow Robot
74b2f4d976 Merge pull request #123821 from dims/check-taints-as-well-for-control-plane
Check taints as well for control-plane
2024-03-08 05:32:32 -08:00
Davanum Srinivas
ee64b30d05 Check taints as well for control-plane
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-03-08 07:17:21 -05:00
Michal Wozniak
acf6b500ee Follow up fix to the job status update test 2024-03-08 07:33:10 +01:00
Nilekh Chaudhari
91a7708cdc feat: implements Storage Version Migration API in-tree
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
2024-03-08 04:18:56 +00:00
Kubernetes Prow Robot
7ea3d0245a Merge pull request #123516 from pohly/dra-structured-parameters
DRA: structured parameters
2024-03-07 19:24:48 -08:00
Kubernetes Prow Robot
5ec8dc8c6f Merge pull request #123803 from dims/revert-portion-of-the-gpu-test-case
Revert portion of the GPU testcase
2024-03-07 18:21:15 -08:00
Kubernetes Prow Robot
9ad2aabc64 Merge pull request #123520 from haircommander/proc-mount-rely-userns-2
KEP-4265: Update Unmasked ProcMountType to fail validation without a pod level user namespace
2024-03-07 18:21:08 -08:00
Kubernetes Prow Robot
364ef335db Merge pull request #123412 from tenzen-y/add-new-jobsuccesspolicy-api
Job: Support for the SuccessPolicy
2024-03-07 14:49:20 -08:00
Patrick Ohly
7f5566ac6f dra e2e: enable more tests for usage with structured parameters
This finishes the shuffling around of test scenarios so that all of them which
make sense with structured parameters are also executed with those.
2024-03-07 22:26:20 +01:00
Patrick Ohly
2c6246c906 dra e2e: move ResourceSlice test
This should better run with multiple nodes, it's more realistic that way.
2024-03-07 22:23:03 +01:00
Patrick Ohly
0b6a0d686a dra api: rename NodeResourceSlice -> ResourceSlice
While currently those objects only get published by the kubelet for node-local
resources, this could change once we also support network-attached
resources. Dropping the "Node" prefix enables such a future extension.

The NodeName in ResourceSlice and StructuredResourceHandle then becomes
optional. The kubelet still needs to provide one and it must match its own node
name, otherwise it doesn't have permission to access ResourceSlice objects.
2024-03-07 22:22:55 +01:00
Patrick Ohly
234dc1f63d dra e2e: run more test scenarios with structured parameters 2024-03-07 22:22:13 +01:00
Patrick Ohly
d59676a545 dra kubelet: publish NodeResourceSlices
The information is received from the DRA driver plugin through a new gRPC
streaming interface. This is backwards compatible with old DRA driver kubelet
plugins, their gRPC server will return "not implemented" and that can be
handled by kubelet. Therefore no API break is needed.

However, DRA drivers need to be updated because the Go API changed. They can
return
    status.New(codes.Unimplemented, "no node resource support").Err()
if they don't support the new ListAndWatchResources method and
structured parameters.

The controller in kubelet then synchronizes this information from the driver
with NodeResourceSlice objects, creating, updating and deleting them as needed.
2024-03-07 22:22:13 +01:00