Commit Graph

20312 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
6cc77a577e Merge pull request #123560 from ivelichkovich/master
kep-3716 GA, remove feature gate
2024-02-29 22:53:38 -08:00
Kubernetes Prow Robot
a6b806910a Merge pull request #123534 from kannon92/fix-downward-api-comment
uid is also supported in field ref for downward api
2024-02-29 22:53:29 -08:00
Kubernetes Prow Robot
6f42da171b Merge pull request #123565 from ah8ad3/update-help-text-kubectl-create-token
Implement to accept zero as a default value for kubectl create token duration
2024-02-29 21:51:41 -08:00
Kubernetes Prow Robot
5cf4fbe524 Merge pull request #123458 from aramase/aramase/i/min_jwt_payload
add min valid jwt payload to API docs for structured authn config
2024-02-29 15:11:40 -08:00
Kubernetes Prow Robot
0d50a398df Merge pull request #123598 from liggitt/remotecommand-cleanup
Remotecommand test flake cleanup
2024-02-29 13:40:48 -08:00
Jordan Liggitt
6c1a935da2 Keep streams from being set up after closeAllStreamReaders is called 2024-02-29 15:31:55 -05:00
Igor Velichkovich
a51a5b4622 kep-3716 GA, remove feature gate 2024-02-29 14:14:19 -06:00
Jordan Liggitt
26484df210 Make websocket heartbeat test timing less flaky 2024-02-29 15:10:28 -05:00
Jordan Liggitt
fc86811cbe Avoid logging binary junk for frame write failure 2024-02-29 15:09:34 -05:00
Anish Ramasekar
b57d7d6ad7 add min valid jwt payload to API docs for structured authn config
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-29 11:08:39 -08:00
Kubernetes Prow Robot
411c29c39f Merge pull request #123331 from aojea/ccm_update
CCM wait for providerID to initialize the Node object
2024-02-29 01:50:02 -08:00
Kubernetes Prow Robot
234f0fcfc3 Merge pull request #122676 from p0lyn0mial/upstream-watch-cache-init-events-ordering
apiserver/storage: improve RunWatchSemanticInitialEventsExtended test
2024-02-29 01:49:48 -08:00
ah8ad3
3b5a79f647 cleanup: add zero as a value for token create duration and act as default, added test, updated the help text
change duration validator text message in create token

unit bug fixed
2024-02-29 08:28:05 +03:30
Kubernetes Prow Robot
a67973a45c Merge pull request #122717 from jpbetz/crd-object-filters
KEP-4358: Custom Resource Field Selectors
2024-02-28 20:07:12 -08:00
Joe Betz
a0dc949ce3 Improve error handling for json path results 2024-02-28 16:22:34 -05:00
Joe Betz
61d6026d23 Fix field paths 2024-02-28 15:49:44 -05:00
Kubernetes Prow Robot
fe8a12d264 Merge pull request #123562 from jpbetz/bump-cel-go-0_17_8
Bump cel-go to v0.17.8 to pick up CEL estimated cost fix
2024-02-28 12:45:41 -08:00
Joe Betz
45742d1d9a Add integration tests 2024-02-28 14:46:47 -05:00
Joe Betz
31f7efab20 Add cost stability tests for chained and nested CEL comprehensions 2024-02-28 14:20:16 -05:00
Joe Betz
7ef3eea8a7 Generate code 2024-02-28 14:06:46 -05:00
Joe Betz
291703482d Add selectableFields to CRDs 2024-02-28 14:06:46 -05:00
Kubernetes Prow Robot
e21a2f5d4f Merge pull request #123542 from liggitt/websocket-round-tripper-protocol
Use the websocket protocol header, verify selected protocol
2024-02-28 11:01:44 -08:00
Kubernetes Prow Robot
68a47053d1 Merge pull request #123508 from saschagrunert/image-id-container
Add `image_id` to CRI `Container` message
2024-02-28 11:01:35 -08:00
Joe Betz
d49949b642 Bump cel-go to v0.17.8 to pick up CEL estimated cost fix 2024-02-28 10:52:36 -05:00
Wojciech Tyczyński
92bdc7b387 Ensure that initial events are sorted for WatchList 2024-02-28 12:50:53 +01:00
Lukasz Szaszkiewicz
20ded27570 apiserver/storage: improve RunWatchSemanticInitialEventsExtended test
changes the test to populate the underlying data store with
more data to trigger potential ordering issues.
2024-02-28 10:57:11 +01:00
Kubernetes Prow Robot
d2b4928669 Merge pull request #122830 from p0lyn0mial/upstream-watch-cache-wati-for-bk-after-rv
storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested
2024-02-28 01:43:37 -08:00
Sascha Grunert
e663285ccf Add image_id to CRI Container message
This new field allows fixing the kubelet image garbage collection in
container runtimes. The `image_ref` has been historically used by
container runtimes to reference images by digest.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-02-28 10:05:07 +01:00
Kubernetes Prow Robot
f7ca532472 Merge pull request #123281 from seans3/remote-command-websocket-beta
RemoteCommand over WebSockets to Beta
2024-02-27 21:01:55 -08:00
Jordan Liggitt
b394aac4ce Use the websocket protocol header, verify selected protocol 2024-02-27 22:47:19 -05:00
Kubernetes Prow Robot
286cdad32d Merge pull request #123538 from jiahuif-forks/fix/cel/mutation-library-map-support
CEL mutation library: add support for map
2024-02-27 18:46:10 -08:00
Kubernetes Prow Robot
872c621bb7 Merge pull request #123475 from alexzielenski/apiserver/apiextensions/cel-error-fieldpath
bugfix: incorrect fieldpath when using multiple crd validation rules
2024-02-27 18:45:57 -08:00
Kubernetes Prow Robot
72c92e975d Merge pull request #123411 from hunshcn/fix/volume-link
fix persistent volume docs link
2024-02-27 16:47:27 -08:00
Sean Sullivan
03812ddb16 streamtranslator counter metric by status code 2024-02-27 23:21:55 +00:00
Monis Khan
e89dddd4af jwt: strictly support compact serialization only
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-27 17:16:08 -05:00
Jiahui Feng
dc4c92f5a5 add support for map
to CEL mutation library.
2024-02-27 13:55:08 -08:00
Kevin Hannon
f832692d98 uid is also supported in field ref for downward api 2024-02-27 12:44:42 -05:00
Lukasz Szaszkiewicz
ecaf2093f5 storage/watch_cache: rework getAllEventsSinceLocked 2024-02-27 14:26:46 +01:00
Lukasz Szaszkiewicz
d629d3fa35 storage/cacher: add TestGetWatchCacheResourceVersion, TestGetBookmarkAfterResourceVersionLockedFunc 2024-02-27 14:26:41 +01:00
Lukasz Szaszkiewicz
f90bcf649e storage/cacher: ensure the cache is at the Most Recent ResourceVersion when streaming was requested 2024-02-27 14:26:36 +01:00
Sean Sullivan
a147693deb remote command turn on feature gates 2024-02-27 02:05:24 +00:00
Kubernetes Prow Robot
0a1cb2a4a4 Merge pull request #122589 from pohly/log-contextual-beta
promote contextual logging to beta, enabled by default
2024-02-26 13:56:13 -08:00
Alexander Zielenski
aefaf66d2b remove unused service keys from aggregated discovery 2024-02-26 11:56:07 -05:00
Kubernetes Prow Robot
d171e6733a Merge pull request #123503 from aojea/ccm_ci
Ccm ci
2024-02-26 08:02:58 -08:00
Kubernetes Prow Robot
98bd90fbe2 Merge pull request #114672 from pohly/log-text-split-streams
log: split streams also for text output
2024-02-26 01:44:58 -08:00
Antonio Ojea
0ab006b8a1 node-controller reconcile node labels on each update
instead of waiting for the periodic loop of the node-controller to
go through all the nodes, use the sync logic to reconcile the node
labels each time that the node has changed after it has been
initialized.

This has the benefit that changes by external entities on this labels
are quickly reconciled.

Change-Id: I45cfc1e3f0b9eefdfdd67267229420d76132ab87
2024-02-26 09:01:21 +00:00
Antonio Ojea
03bd3e25b1 [cloud-provider] require providerID to initialize node
The node controller has two reconcilations loops:

1. workqueue receiving events from watchers, to implement
the node initialization

2. periodic loop to reconcile cloud-provider addresses and
node objects, since there is no watch for the cloud-provider
addresses. However, this loop can take O(xx) mins on large
clusters.

Before the external cloud providers were enabled by default,
the kubelet was in charge of setting the corresponding
providerID and zone and region labels during the node object
creation.

Once this logic was moved to the external cloud providers,
there are cases that the node controller may fail to add the
providerID value on the node object and this is never reconciled.
The problem is that there are many controllers and projects that
depend on this field to be set.

Checking at the code it is not possible to not have a ProviderID
in any cloud-provider, since it is always built from the provider name
and the instance. ProviderID is also inmutable once set, so we make
ProviderID a requirement for node initialization.

To avoid any possible problems, we rollout this change under a feature
gate in deprecated state, so cloud providers can opt-out to the new
behavior.

Change-Id: Ic5d9c23b6a286b12c9721d4a378485a8b81212d1

Change-Id: Iac8c7e7e47a3247553806ed7128b273bbef0a30b
2024-02-26 09:01:21 +00:00
Antonio Ojea
ef83ec2753 don't use leader elect on ccm integration tests
Change-Id: Ic1d0ff73d7913f23ed577a121b0045a1c33b9e78
2024-02-26 09:01:21 +00:00
Antonio Ojea
08f8be9903 fix goroutine leak on legacy-cloud-provider gce
Change-Id: Ice7f66683785d60ce9d09201d557a0438743ec72
2024-02-26 09:01:21 +00:00
Antonio Ojea
3636971c39 add aojea as reviewer
Change-Id: Ie69e01542f9c8420aa0d0275378acd838e77eca9
2024-02-26 08:56:23 +00:00