github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
124,281 Commits 1 Branch 31 Tags
c75e30d0495dc42a017bc1f4565831ce4d1c928a
Commit Graph

124281 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kubernetes Prow Robot
c75e30d049 Merge pull request #126294 from aojea/nosnat 
e2e test for No SNAT
 2024-07-23 20:12:33 -07:00
Kubernetes Prow Robot
5af1710d90 Merge pull request #126243 from SergeyKanzhelev/devicePluginFailures 
Implement resource health in pod status (KEP 4680)
 2024-07-23 20:12:24 -07:00
Kubernetes Prow Robot
49ff255074 Merge pull request #126308 from cici37/hotFix 
Update with stdlib errors
 2024-07-23 18:02:07 -07:00
Kubernetes Prow Robot
59776b57e7 Merge pull request #126306 from siyuanfoundation/env-var 
Add KUBE_EMULATED_VERSION env variable to set the emulated-version of scheduler and controller manager.
 2024-07-23 18:02:00 -07:00
Kubernetes Prow Robot
d97cf3a1eb Merge pull request #126303 from bart0sh/PR150-dra-refactor-checkpoint-upstream 
DRA: refactor checkpointing
 2024-07-23 18:01:53 -07:00
Kubernetes Prow Robot
39a80796b6 Merge pull request #122628 from sanposhiho/pod-smaller-events 
add(scheduler/framework): implement smaller Pod update events
 2024-07-23 18:01:46 -07:00
Kubernetes Prow Robot
638128e74f Merge pull request #119019 from gjkim42/add-e2e-node-test-restarting-the-kubelet 
Add node serial e2e tests that simulate the kubelet restart
 2024-07-23 18:01:36 -07:00
Sergey Kanzhelev
62f96d2748 set AllocatedResourcesStatus in the Pod Status 2024-07-24 00:29:35 +00:00
Sergey Kanzhelev
3790ee2fe8 reset fields when the feature gate was not set 2024-07-24 00:29:35 +00:00
Sergey Kanzhelev
2253b53b58 generated files 2024-07-24 00:29:35 +00:00
Sergey Kanzhelev
16e8911fdc add AllocatedResourcesStatus field to ContainerStatus 2024-07-24 00:29:34 +00:00
Kubernetes Prow Robot
1353c08110 Merge pull request #126298 from vinayakankugoyal/apparmortest 
Update AppArmor e2e tests to use both containers[*].securityContext.appArmorProfile field and annotations.
 2024-07-23 15:45:29 -07:00
Cici Huang
a48a92c72e Allowing direct CEL reserved keyword usage in CRD (#126188) 
* automatically escape reserved keywords for direct usage

* Add reserved keyword support in a ratcheting way, add tests.

---------

Co-authored-by: Wenxue Zhao <ballista01@outlook.com>
 2024-07-23 15:45:20 -07:00
Kubernetes Prow Robot
fa4b8f32ac Merge pull request #125935 from gjkim42/fix-125880 
Terminate restartable init containers ignoring not-started containers
 2024-07-23 15:45:11 -07:00
Kubernetes Prow Robot
2a372a99bc Merge pull request #126290 from tenzen-y/use-type-parameters-instead-of-casting 
Job: Use type parameters instead of type casting for the ptr libraries
 2024-07-23 14:40:28 -07:00
Kubernetes Prow Robot
f93fe412c7 Merge pull request #126281 from saschagrunert/oci-volume-docs 
[KEP-4639] Mention that `fsGroupChangePolicy` has no effect
 2024-07-23 14:40:14 -07:00
Kubernetes Prow Robot
320f1ab30d Merge pull request #126182 from sohankunkerkar/fix-procmount 
test/e2e/windows: drop securityContext test for ProcMount
 2024-07-23 14:39:51 -07:00
Ed Bartosh
c0d922e786 DRA: Kubelet code cleanup 2024-07-24 00:27:52 +03:00
cici37
ac2c450da7 Update with stdlib errors 2024-07-23 21:16:53 +00:00
Ed Bartosh
59555c6a62 DRA: move dra/checkpont/* to dra/state/* 2024-07-24 00:12:10 +03:00
Ed Bartosh
35fbbc5cfd DRA: use crc32.ChecksumIEEE to calculate checkpoint checksum 2024-07-24 00:10:39 +03:00
Ed Bartosh
59daed75d6 DRA: refactor checkpointing 
Co-authored-by: Kevin Klues <klueska@gmail.com>
 2024-07-24 00:10:30 +03:00
Siyuan Zhang
e79d20dcfc Add KUBE_EMULATED_VERSION env variable to set the emulated-version of scheduler and controller manager. 
Signed-off-by: Siyuan Zhang <sizhang@google.com>
 2024-07-23 13:51:36 -07:00
Kubernetes Prow Robot
c2fdeca4ab Merge pull request #126145 from carlory/kep-3751-api 
[KEP-3751] Promote VolumeAttributesClass to beta
 2024-07-23 13:31:05 -07:00
Kubernetes Prow Robot
107f621462 Merge pull request #126108 from gnufied/changes-volume-recovery 
Reduce state changes when expansion fails and mark certain failures as infeasible
 2024-07-23 13:30:56 -07:00
Kubernetes Prow Robot
ad805387e2 Merge pull request #126291 from haircommander/proc-mount-disable 
disable ProcMountType by default
 2024-07-23 12:21:38 -07:00
Drew Sirenko
16c2ad5b84 Add labels to PVCollector bound/unbound PVC metrics for VolumeAttributesClass Feature (#126166) 
* Add labels to PVCollector bound/unbound PVC metrics

* fixup! Add labels to PVCollector bound/unbound PVC metrics

* wip: Fix 'Unknown
    Decorator'

* fixup! Add labels to PVCollector bound/unbound PVC metrics
 2024-07-23 12:21:29 -07:00
Kubernetes Prow Robot
c01bc31fa2 Merge pull request #126163 from haircommander/procMount-baseline 
PSA: allow procMount type Unmasked in baseline
 2024-07-23 12:21:20 -07:00
Kubernetes Prow Robot
13d9d7c689 Merge pull request #124819 from carlory/add-warning-MountOptionAnnotation 
mark volume.beta.kubernetes.io/mount-options as deprecated
 2024-07-23 12:21:11 -07:00
Kubernetes Prow Robot
e83fca8dd9 Merge pull request #124530 from sttts/sttts-controlplane-plumbing-split 
Step 12 - Add generic controlplane example
 2024-07-23 12:21:02 -07:00
Kubernetes Prow Robot
04d2f33641 Merge pull request #124061 from Jefftree/conversion-webhook-invalidca 
Validate CABundle when writing CRD
 2024-07-23 12:20:53 -07:00
Kubernetes Prow Robot
05bb5f71f8 Merge pull request #120611 from pohly/dra-resource-quotas 
DRA: resource quotas
 2024-07-23 12:20:44 -07:00
Yuki Iwai
25c2731399 Job: Use type parameters instead of type casting for the ptr libraries 
Signed-off-by: Yuki Iwai <yuki.iwai.tz@gmail.com>
 2024-07-24 03:38:18 +09:00
Kubernetes Prow Robot
6834a1ef3d Merge pull request #126293 from aroradaman/kube-proxy-refactor-internal-config 
Kube proxy refactor internal config
 2024-07-23 11:02:46 -07:00
Kubernetes Prow Robot
9c2302dd3e Merge pull request #126201 from aroradaman/revert-debug-steps 
Revert debug steps and logs for #123760
 2024-07-23 11:02:38 -07:00
Kubernetes Prow Robot
67c7e77044 Merge pull request #126047 from cpanato/upgrade-go-123 
[go] Bump images, dependencies and versions to go 1.23rc2
 2024-07-23 11:02:29 -07:00
Kubernetes Prow Robot
425909647b Merge pull request #126013 from npinaeva/nft-incremental 
[kube-proxy: nftables] Implement partial sync.
 2024-07-23 11:02:21 -07:00
Kubernetes Prow Robot
a00181d4d4 Merge pull request #121902 from carlory/kep-3751-pv-controller 
[kep-3751] pvc bind pv with vac
 2024-07-23 11:02:13 -07:00
Sohan Kunkerkar
c5b01a30d3 test/e2e/windows: drop securityContext test for ProcMount 
Fixes https://github.com/kubernetes/kubernetes/issues/126180

As the ProcMountType feature is disabled by default in beta and relies
on the UserNamespacesSupport feature, which is also set to false in beta,
running this test is unnecessary.

Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
 2024-07-23 13:45:29 -04:00
Vinayak Goyal
b580eb1864 Update AppArmor e2e tests to use Pod field instead of annotations. 
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
 2024-07-23 17:03:17 +00:00
Patrick Ohly
299ecde5cc DRA quota: add ResourceClaim v1.ResourceQuota limits 
Dynamic resource allocation is similar to storage in the sense that users
create ResourceClaim objects to request resources, same as with persistent
volume claims. The actual resource usage is only known when allocating claims,
but some limits can already be enforced at admission time:

- "count/resourceclaims.resource.k8s.io" limits the number of ResourceClaim objects in
  a namespace; this is a generic feature that is already supported also without
  this commit.

- "resourceclaims" is *not* an alias - use "count/resourceclaims.resource.k8s.io"
  instead.

- <device-class-name>.deviceclass.resource.k8s.io/devices limits the number of
  ResourceClaim objects in a namespace such that the number of devices
  requested through those objects with that class does not exceed the limit.

A single request may cause the allocation of multiple devices. For exact
counts, the quota limit is based on the sum of those exact counts. For requests
asking for "all" matching devices, the maximum number of allocated devices per
claim is used as a worst-case upper bound.

Requests asking for "admin access" contribute to the quota.

DRA quota: remove admin mode exception
 2024-07-23 18:52:34 +02:00
Patrick Ohly
1f43a80b3c DRA quota: unit test case for resource.k8s.io quota names 
The names aren't actually special for validation. They are
acceptable with and without the feature gate, the only difference
is that they don't do anything when the feature is enabled.
 2024-07-23 18:52:33 +02:00
Patrick Ohly
b5c94966bd DRA e2e: fix the quota name 
The actual name has the k8s.io suffix.
 2024-07-23 18:52:33 +02:00
Antonio Ojea
046e976bab cap the num of nodes on the noSNAT test and remove slow and NoSNAT tag 
run NoSNAT network test between pods without any feature tag
 2024-07-23 16:27:11 +00:00
Kubernetes Prow Robot
77c3859aee Merge pull request #126270 from stlaz/aggroapi-refactor 
integration tests: split Wardle aggregation test API server running
 2024-07-23 09:21:37 -07:00
Kubernetes Prow Robot
fe24ebfe33 Merge pull request #126205 from kwilczynski/feature/promote-4191-to-beta 
KEP-4191: Split Image Filesystem promotion to Beta
 2024-07-23 09:21:28 -07:00
Kubernetes Prow Robot
8e175c688e Merge pull request #126165 from haircommander/selinux-engine_t 
PSA: allow container_engine_t selinux type
 2024-07-23 09:21:20 -07:00
Kubernetes Prow Robot
fbdfb9d8d9 Merge pull request #126031 from harche/kubelet_cgroupv1_arg 
KEP-4569: Kubelet option to disable cgroup v1 support
 2024-07-23 09:21:11 -07:00
Kubernetes Prow Robot
a4f9910c51 Merge pull request #126014 from PannagaRao/kep-ephemeral-storage-quota 
pkg/volume/*: Enable quotas in user namespace
 2024-07-23 09:21:02 -07:00
Kubernetes Prow Robot
7590cb7adf Merge pull request #125257 from vinayakankugoyal/armor 
KEP-24: Update AppArmor feature gates to GA stage.
 2024-07-23 09:20:52 -07:00