github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
114,278 Commits 1 Branch 31 Tags
b0dce923f15e23cce65d19222258aaa112a698bc
Commit Graph

3030 Commits

Author SHA1 Message Date
kannon92
cd71486cfb update documentation on generateSelector for manual selector case 2023-03-02 19:47:58 +00:00
ahg-g
2ecd24011a Graduate JobMutableNodeSchedulingDirectives feature to GA 2023-02-28 15:47:13 +00:00
Kubernetes Prow Robot
f2fdda8667 Merge pull request #115918 from yt2985/genericWatch 
Partition watchers by namespace/name scope
 2023-02-28 01:47:17 -08:00
Kubernetes Prow Robot
b9fd1802ba Merge pull request #102884 from vinaykul/restart-free-pod-vertical-scaling 
In-place Pod Vertical Scaling feature
 2023-02-27 22:53:15 -08:00
Jordan Liggitt
1c2fa0c7f7 Partition watchers by namespace/name scope 2023-02-27 20:38:11 +00:00
Daniel Vega-Myhre
93a74afccb move AllowElasticIndexedJobs into JobValidationOptions declaration 2023-02-27 18:45:58 +00:00
Vinay Kulkarni
76962b0fa7 In-place Pod Vertical Scaling - API changes 
1. Define ContainerResizePolicy and add it to Container struct.
 2. Add ResourcesAllocated and Resources fields to ContainerStatus struct.
 3. Define ResourcesResizeStatus and add it to PodStatus struct.
 4. Add InPlacePodVerticalScaling feature gate and drop disabled fields.
 5. ResizePolicy validation & defaulting and Resources mutability for CPU/Memory.
 6. Various fixes from code review feedback (originally committed on Apr 12, 2022)
KEP: /enhancements/keps/sig-node/1287-in-place-update-pod-resources
 2023-02-24 17:18:04 +00:00
Kubernetes Prow Robot
0753f02851 Merge pull request #115944 from SataQiu/warning-for-externalid 
Add field-level warning for deprecated spec.externalID of node
 2023-02-24 06:15:47 -08:00
Daniel Vega-Myhre
8d31da4599 add validation test case for immutable completions on indexed jobs when AllowElasticIndexedJobs is false 2023-02-23 21:05:03 +00:00
Daniel Vega-Myhre
15077a0f28 plumb feature gate value through job validation opts and modify validateCompletions function to only check completions == parallelism after the update, not before 2023-02-23 18:09:47 +00:00
SataQiu
ba6fcf4169 add field-level warning for deprecated spec.externalID of node 2023-02-23 09:35:56 +08:00
Wei Huang
feed8c683d Enforce nodeName cannot be set along with non empty schedulingGates 2023-02-07 13:53:28 -08:00
Kubernetes Prow Robot
4b0d433dd9 Merge pull request #115536 from pwschuurman/kep-3335-enable-disable-unit-test 
Add enablement/disablement unit test for StatefulSetStartOrdinal feature
 2023-02-07 05:53:00 -08:00
Peter Schuurman
773b45abc5 Add enablement/disablement unit test for StatefulSetStartOrdinal feature 2023-02-05 20:28:54 -08:00
Kubernetes Prow Robot
ae23b0c11b Merge pull request #115111 from kannon92/strategy-coverage-increase 
increasing coverage from 78% to 94% for strategy.go for batch/job
 2023-02-02 07:58:41 -08:00
Kubernetes Prow Robot
7f0d1722f5 Merge pull request #115378 from aojea/aojea_allocator 
add aojea as approver for networking APIs: services/allocators, netwo…
 2023-01-29 16:14:49 -08:00
Kubernetes Prow Robot
5bb7326c36 Merge pull request #114418 from xuzhenglun/master 
Reserve Nodeport Ranges For Dynamic And Static Port Allocation
 2023-01-29 14:02:35 -08:00
Antonio Ojea
0461c48078 add aojea as approver for networking APIs: services/allocators, networking group, ... 
Change-Id: Ia6542b21339f4a92a9c13c2b628038abe737d0f9
 2023-01-29 00:10:06 +00:00
Kubernetes Prow Robot
12240c2a5c Merge pull request #115247 from Volatus/refactor-node-storage-tests 
Refactor: cleanup node/storage tests
 2023-01-26 17:42:32 -08:00
Ismayil Mirzali
6d484dc037 Refactor: cleanup node/storage tests 
Removes some repetitive patterns and simplifies the existing test code.
 2023-01-26 23:03:02 +02:00
xuzhenglun
d48dd100bf add kube_apiserver_nodeport_allocator_* to improve observability of ServiceNodePortStaticSubrange 2023-01-26 14:44:16 +08:00
xuzhenglun
c18c6e1b87 allocate nodeport with offset 2023-01-26 14:44:04 +08:00
Antonio Ojea
ea99593fa1 Fix panic on ClusterIP allocation for /28 subnets 
The ClusterIP allocator tries to reserve on part of the ServiceCIDR
to allocate static IPs to the Services.

The heuristic of the allocator to obtain the offset was taking into
account the whole range size, not the IPs available in the range, the
subnet address and the broadcast address for IPv4 are not available.

This caused that for CIDRs with 16 hosts, /28 for IPv4 and /124 for
IPv6, the offset calculated was higher than the max number of available
addresses on the allocator, causing this to panic.

Change-Id: I6c6f527b0a600b3612be37769e405b8fb3dd33a8
 2023-01-25 20:32:40 +00:00
kannon92
96541d3e51 increasing coverage from 75% to 95% for strategy.go for batch/job 2023-01-23 18:53:46 +00:00
HirazawaUi
3b18e80fb4 delete unused functions in pkg directory 2023-01-16 21:43:36 +08:00
Kubernetes Prow Robot
696701b9fd Merge pull request #114086 from xmcqueen/113935 
block ephemeral container addition to static pods
 2023-01-13 07:36:28 -08:00
Kubernetes Prow Robot
6ce055d62d Merge pull request #114947 from saschagrunert/seccomp-ga-cleanup 
Make seccomp annotations non-functional
 2023-01-12 13:48:54 -08:00
Sascha Grunert
af1f6a230b Make seccomp annotations non-functional 
This cleanup has been planned to finish the corresponding KEP:
https://github.com/kubernetes/kubernetes/issues/91286

As follow-up on the partly removal of the seccomp annotations in
https://github.com/kubernetes/kubernetes/pull/109819, we now drop
the version skew handling completely, but still warn as well as keep
the validation in place if both (annotation and field) are set.

The Pod Security Admission code has been already changed in
https://github.com/kubernetes/kubernetes/pull/114846.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
 2023-01-12 17:11:52 +01:00
Kubernetes Prow Robot
08d9a0ef5b Merge pull request #113467 from pacoxu/psp-cleanup 
Remove PodSecurityPolicy related code except client-go & API type
 2023-01-11 14:28:07 -08:00
Kubernetes Prow Robot
564f438892 Merge pull request #114691 from thockin/fix-pod-warning-string 
Make the warning about pod name clearer
 2023-01-10 13:47:38 -08:00
Kubernetes Prow Robot
5a896bf379 Merge pull request #114677 from kl52752/epd-warning-address-type 
Generate warning for EndpointSlice AddressType FQDN
 2023-01-10 13:47:27 -08:00
Paco Xu
e0bc0693e9 registry/storage: remove psp support 2023-01-06 17:07:02 +08:00
Kubernetes Prow Robot
ac889a0251 Merge pull request #113581 from aimuz/verify-tls-secret 
Verify that the key matches the cert
 2023-01-04 14:29:58 -08:00
TommyStarK
e2d8fc3f62 pkg/registry: Replace deprecated pointer function 
Signed-off-by: TommyStarK <thomasmilox@gmail.com>
 2023-01-04 10:38:09 +01:00
Kubernetes Prow Robot
12c71fdf1c Merge pull request #113542 from ardaguclu/fix-shortname-disperancy 
Set singular names for core types to pass to discovery
 2023-01-03 09:29:43 -08:00
Katarzyna Lach
249f763c7e Generate warning for EndpointSlice AddressType FQDN 
Change-Id: Ibc213acdffa741e630821f371ea25e2b5187a011
 2023-01-02 10:00:01 +00:00
Antonio Ojea
29ea5076ea refactor current ipallocator 
- rename files to match the allocator backend
- use t.Run for tests and cover large ranges
- add benchmarks
- check that thebitmap ip allocator satisfies the interface

goos: linux
goarch: amd64

pkg: k8s.io/kubernetes/pkg/registry/core/service/ipallocator
cpu: Intel(R) Xeon(R) CPU E5-2678 v3 @ 2.50GHz
BenchmarkAllocateNextIPv4Size1048574
BenchmarkAllocateNextIPv4Size1048574-24    	 1517683
7373 ns/op	     135 B/op	       8 allocs/op
BenchmarkAllocateNextIPv6Size65535
BenchmarkAllocateNextIPv6Size65535-24      	 5607438
193.9 ns/op	      18 B/op	       2 allocs/op
PASS
 2022-12-31 12:48:50 +00:00
Tim Hockin
7c7d79b058 Make the warning about pod name clearer 
Previously this was cut-paste from deployment.  It didn't make much
sense for pod.
 2022-12-25 14:20:55 -08:00
Tim Hockin
ed3ebbaaa7 Remove TODO about API proxy checking for svc 2022-12-23 12:32:17 -08:00
Kubernetes Prow Robot
038d983769 Merge pull request #114505 from aojea/service_warnings 
Services API: warnings on IP addresses
 2022-12-16 18:07:52 -08:00
Tim Hockin
8f62b94991 cronjob: API warn when name is not DNS label 2022-12-16 13:08:08 -08:00
Tim Hockin
fec8e721b2 job: API warn when name is not DNS label 2022-12-16 13:07:42 -08:00
Tim Hockin
b65cec86eb deployment: API warn when name is not DNS label 2022-12-16 13:07:13 -08:00
Tim Hockin
820e2fff0d rs: API warn when name is not DNS label 2022-12-16 13:06:43 -08:00
Tim Hockin
e27cf75094 rc: API warn when name is not DNS label 2022-12-16 13:06:10 -08:00
Tim Hockin
c555d290c1 pod: API warn when name is not DNS label 2022-12-16 13:05:17 -08:00
Antonio Ojea
1b804fc87c Services API: warnings 
The Services API should warn users about some IP addresses
representations, mainly because some of them are not allowed
by the golang std parsers since go 1.17

Specifically:

- IPv4 addresses with leading zeros, that may cause security risks
- IPv6 addresses in non canonical format, that may cause problems
with controllers hotlooping or cause security issues

Change-Id: Ife50a651d1b22dc4c318e42bd3e5f2e5f88ecbcd
 2022-12-16 11:54:05 +00:00
Kubernetes Prow Robot
4b27077eb2 Merge pull request #114428 from SataQiu/clean-rest-20221212 
apiserver: cleanup unused StrategyExceptions
 2022-12-14 06:47:34 -08:00
aimuz
4a7ab7fd75 Verify that the key matches the cert 
Signed-off-by: aimuz <mr.imuz@gmail.com>
 2022-12-13 10:43:58 +08:00
SataQiu
090c36027f apiserver: cleanup unused StrategyExceptions 2022-12-12 23:56:24 +08:00