Commit Graph

48607 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
d475c249da Merge pull request #120954 from HirazawaUi/deprecate-kubeProxyVersione-field
deprecate the kubeProxyVersion field of v1.Node
2023-10-31 19:16:20 +01:00
Kubernetes Prow Robot
ac6f707155 Merge pull request #120620 from tzneal/sidecar-termination-ordering
sidecars: terminate sidecars after main containers
2023-10-31 19:16:11 +01:00
Kubernetes Prow Robot
418e9d08a4 Merge pull request #120592 from AxeZhan/validation_sets
Use generic set in package "/pkg/apis/core/validation"
2023-10-31 19:16:02 +01:00
Kubernetes Prow Robot
a5ff0324a9 Merge pull request #120461 from gjkim42/do-not-reuse-device-of-restartable-init-container
Don't reuse the device of a restartable init container
2023-10-31 19:15:53 +01:00
Kubernetes Prow Robot
5d03ce7ae4 Merge pull request #120354 from aroradaman/proxy-conntrack-api
Add support for `nf_conntrack_tcp_be_liberal` sysctl to kube-proxy
2023-10-31 19:15:44 +01:00
Kubernetes Prow Robot
2c300ef6b0 Merge pull request #120269 from gjkim42/fix-restart-containers-in-right-order-after-podsandbox-changed
Restart containers in right order with SidecarContainers enabled
2023-10-31 19:15:35 +01:00
Kubernetes Prow Robot
bfeb3c2621 Merge pull request #119447 from gjkim42/do-not-reuse-cpu-set-of-restartable-init-container
Don't reuse CPU set of a restartable init container
2023-10-31 19:15:26 +01:00
Kubernetes Prow Robot
dea3f1a119 Merge pull request #112599 from fabi200123/Adding-Windows-Support-for-InPlaceVerticalScaling
Adding Windows support for InPlace Pod Vertical Scaling
2023-10-31 19:15:12 +01:00
Kubernetes Prow Robot
74fefd877f Merge pull request #121638 from tkashem/apf-ga
apiserver: set APF featuregate to stable
2023-10-31 15:57:57 +01:00
Abu Kashem
c7fcef1875 apiserver: set APF featuregate to ga 2023-10-31 08:46:24 -04:00
Kubernetes Prow Robot
d84ee0ba69 Merge pull request #121632 from kerthcet/fix/runscoreplugins
Fix panic when process RunScorePlugins for cap out of range
2023-10-31 13:14:32 +01:00
Kubernetes Prow Robot
064e86b3d0 Merge pull request #121223 from ritazh/authz-cel
[StructuredAuthorizationConfig] - CEL integration
2023-10-31 13:13:56 +01:00
kerthcet
b02aad42fa Fix panic when process RunScorePlugins for cap out of range
Signed-off-by: kerthcet <kerthcet@gmail.com>
2023-10-31 16:02:16 +08:00
Rita Zhang
31c76e9abb authz: add cel expression to webhook matchconditions
Signed-off-by: Rita Zhang <rita.z.zhang@gmail.com>
2023-10-30 21:48:00 -07:00
Kubernetes Prow Robot
f5a5d83d7c Merge pull request #121089 from tkashem/apf-v1
Promote APF API to v1
2023-10-31 02:39:30 +01:00
Kubernetes Prow Robot
ab13d0b47c Merge pull request #120780 from munnerz/bound-token-improvements
Including JTI & node reference in issued service account tokens (kep 4193)
2023-10-31 01:22:56 +01:00
Kubernetes Prow Robot
e823b56a0b Merge pull request #116932 from my-git9/ut-preemption
[ut] Increase test coverage for kubelet/pleg
2023-10-31 01:22:47 +01:00
Kubernetes Prow Robot
af18989486 Merge pull request #116931 from my-git9/CreateListener-ut
[ut] increase covrage for kubelet/prober/results
2023-10-31 01:22:29 +01:00
Abu Kashem
b8cd792b36 rename the roundtrip annotation, forbid it in v1 2023-10-30 18:22:51 -04:00
Kubernetes Prow Robot
08070433cc Merge pull request #121373 from cici37/crdGA
[KEP-2876] Promote CRD validation rule to GA
2023-10-30 22:42:09 +01:00
James Munnelly
76463e21d4 KEP-4193: bound service account token improvements 2023-10-30 21:15:10 +00:00
Kubernetes Prow Robot
05765a851c Merge pull request #121389 from aleksandra-malinowska/sts-restart-always
Resubmit "Make StatefulSet restart pods with phase Succeeded"
2023-10-30 21:11:51 +01:00
Kubernetes Prow Robot
e4212878dd Merge pull request #119208 from atosatto/separate-taint-manager
Decouple TaintManager from NodeLifeCycleController (KEP-3902)
2023-10-30 21:11:33 +01:00
Kubernetes Prow Robot
ceea5fd0cb Merge pull request #119109 from jiahuif-forks/feature/validating-admission-policy/crd-typechecking
ValidatingAdmissionPolicy - Type Checking for API Expensions types
2023-10-30 21:11:19 +01:00
Kubernetes Prow Robot
b84e4a1333 Merge pull request #121608 from carlory/cleanup-003
fix wrong controller name for ephemeralController
2023-10-30 18:49:12 +01:00
Jordan Liggitt
79c5b3ca6f Mirror apiserver feature gates to kube feature gates file for consistent enablement 2023-10-30 10:22:37 -04:00
Andrea Tosatto
ccda2d6fd4 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902) 2023-10-30 12:23:56 +00:00
Abu Kashem
233bc2449d apiserver: fix apf enablement with runtime-config 2023-10-30 08:18:41 -04:00
Abu Kashem
730d10a8fb apiserver: add generated files for flowcontrol api change 2023-10-30 08:18:41 -04:00
Abu Kashem
9fd2ab419a apiserver: allow zero value for the 'nominalConcurrencyShares' field 2023-10-30 08:18:40 -04:00
Abu Kashem
430c226709 apiserver: fix lint issue, defaulting and validation test for flowcontrol v1 2023-10-30 08:18:40 -04:00
Abu Kashem
17bda3c3e0 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API 2023-10-30 08:18:35 -04:00
Abu Kashem
25aebca8d5 apiserver: add etcd data and storage version hash for apf v1 2023-10-30 07:48:23 -04:00
Abu Kashem
5972037ffd apiserver: generate code for apf flowcontrol v1 API
run:
- hack/update-codegen.sh
- hack/update-openapi-spec.sh
2023-10-30 07:48:22 -04:00
Abu Kashem
03a9ad200d apiserver: remove copied generated files
otherwsie we see the following error from code-gen
  Unrecognized package: k8s.io/api/flowcontrol/v1
2023-10-30 07:48:22 -04:00
Abu Kashem
b24dd44904 apiserver: enable apf v1 API 2023-10-30 07:48:22 -04:00
Abu Kashem
5cb03064d9 apiserver: update copy, rename v1beta3 to v1 2023-10-30 07:48:22 -04:00
Abu Kashem
dc72308093 apiserver: copy apf v1beta3 to v1 2023-10-30 07:48:21 -04:00
carlory
5a20ff1617 fix wrong controller name for ephemeralController 2023-10-30 18:45:13 +08:00
Kubernetes Prow Robot
38ed3ef7b7 Merge pull request #118886 from benluddy/apf-option-disable
KEP-1040: Deep disablement for APF based on --enable-priority-and-fairness.
2023-10-30 09:38:59 +01:00
Kubernetes Prow Robot
74098ab5ad Merge pull request #119500 from JackTroy/fix-threshold-arg
Add explanation for large-cluster-size-threshold arg
2023-10-30 02:50:10 +01:00
HirazawaUi
2c2fa2107a deprecate the kubeProxyVersion field of v1.Node 2023-10-29 15:04:11 +08:00
Kubernetes Prow Robot
99bf6a674c Merge pull request #121039 from josselin-c/master
hpa: always update status metrics when updating the replica count
2023-10-28 19:35:01 +02:00
Kubernetes Prow Robot
1c8f88d4b6 Merge pull request #118760 from saschagrunert/user-namespaces-pss
KEP-127: Update PSS based on feature gate
2023-10-28 09:48:54 +02:00
Kubernetes Prow Robot
57c7b666c4 Merge pull request #118705 from pacoxu/hostnet-sysctl-rejects
forbid sysctls for pod sharing the respective namespaces with the host
2023-10-28 09:48:44 +02:00
AxeZhan
070e7a38cb generic set 2023-10-28 15:31:28 +08:00
Kubernetes Prow Robot
b8693aafdf Merge pull request #120104 from togettoyou/cleanup_endpoints
cleanup: Refactor BaseEndpointInfo to cache IP and Port values
2023-10-28 06:18:26 +02:00
Paco Xu
36d6917ae1 valid error for creation and update from valid to invalid only
- using an option AllowNamespacedSysctlsForHostNetAndHostIPC

Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-10-28 06:58:54 +08:00
Paco Xu
9a8ccdebc5 use sysctl utils to do pod spec validation
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-10-28 06:58:51 +08:00
Paco Xu
11de9543ee move sysctl namespace and some funcs to component helpers util
Signed-off-by: Paco Xu <paco.xu@daocloud.io>
2023-10-28 06:58:28 +08:00