Commit Graph

24762 Commits

Author SHA1 Message Date
Patrick Ohly
fe10bfb044 ktesting: fix ExpectNoError
The error wasn't actually being checked and generating the description was
broken.
2024-02-22 11:41:51 +01:00
Davanum Srinivas
aaa9b6ebd7
Fix NFS related issues on GCP/Ubuntu
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-02-21 21:36:54 -05:00
Kubernetes Prow Robot
3d3d705a6d
Merge pull request #122883 from Jefftree/agg-discovery-block-stale
Aggregated Discovery, mark APIServices stale before initial health check
2024-02-21 12:02:41 -08:00
Paco Xu
f6682370b1 fix flaky ut in TestCause contexthelper_test 2024-02-21 19:00:41 +08:00
Kubernetes Prow Robot
e613eb3388
Merge pull request #123342 from logicalhan/storage-metric
bump the stability level of apiserver_storage_size_bytes to STABLE
2024-02-21 01:40:25 -08:00
Jefftree
6726e65619 Aggregated Discovery, mark stale before initial health check 2024-02-20 18:15:13 -05:00
Kubernetes Prow Robot
d311ce0435
Merge pull request #123343 from haircommander/image-gc-e2e-2
KEP-4210: add e2e tests and add small fix for ImageGCMaxAge
2024-02-20 10:48:15 -08:00
Kubernetes Prow Robot
0f7cc6fcaa
Merge pull request #121778 from Tal-or/mm_metrics
kubelet: memorymanager: metrics:  add metrics about static allocation
2024-02-20 09:41:50 -08:00
Peter Hunt
8dddf6d314 e2e_node: add test for max age after kubelet start
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-02-19 14:44:20 -05:00
Peter Hunt
6cd78bc5fc node e2e: add image max gc test
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-02-19 14:44:20 -05:00
Peter Hunt
be7856e340 e2e_node: factor out waitForKubeletToStart
Signed-off-by: Peter Hunt <pehunt@redhat.com>
2024-02-19 14:31:38 -05:00
Patrick Ohly
cb3180950e dra e2e: fix stack unwinding in helper function
When failing inside the `ginkgo.By` callback function, skipping intermediate
stack frames didn't work properly because `ginkgo.By` itself and other internal
code is also on the stack.

To fix this, the code which can fail now runs outside of such a
callback. That's not a big loss, the only advantage of the callback was getting
timing statistics from Ginkgo which weren't used in practice.
2024-02-19 17:11:04 +01:00
Kubernetes Prow Robot
3516bc6f49
Merge pull request #122456 from AxeZhan/beta3960
[KEP 3960]: graduate PodLifecycleSleepAction to beta
2024-02-19 07:44:50 -08:00
Kubernetes Prow Robot
64386c5aba
Merge pull request #122419 from pohly/scheduler-perf-create-any
scheduler-perf: create any object from YAML
2024-02-19 07:44:40 -08:00
Davanum Srinivas
611f8ba815
bump nfs-provisioner-to-v4.0.8
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-02-19 07:18:21 -05:00
AxeZhan
c74ec3df09 graduate PodLifecycleSleepAction to beta 2024-02-19 19:40:52 +08:00
Kubernetes Prow Robot
7090b9d098
Merge pull request #123051 from yangjunmyfm192085/fixe2e
fix e2e test `test should assign default SC to PVCs that have no SC set` failure
2024-02-19 00:48:39 -08:00
Sascha Grunert
e158a83d9d
KEP-127: Add UserNamespacesPodSecurityStandards e2e test
Adding a e2e test for the functionality added in
https://github.com/kubernetes/kubernetes/pull/118760.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-02-19 08:51:50 +01:00
Davanum Srinivas
fa6429a31c
Use new 1.4 NFS image
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-02-18 20:53:20 -05:00
Davanum Srinivas
ec394ec53d
Fix NFS related CI failures
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-02-18 17:24:59 -05:00
Kubernetes Prow Robot
6ff6b51904
Merge pull request #123333 from liggitt/authz-metrics
Add allowed/denied metrics for authorizers
2024-02-17 18:28:55 -08:00
Davanum Srinivas
dfc598b6fe
Bump containerLogMonitorInterval to the minimum allowed
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-02-17 17:53:19 -05:00
Han Kang
f38852768e bump the stability level of apiserver_storage_size_bytes to STABLE 2024-02-16 10:03:39 -08:00
Jordan Liggitt
d5d3eddb95
Add allowed/denied metrics for authorizers 2024-02-16 08:20:59 -05:00
Kubernetes Prow Robot
66d038d84d
Merge pull request #121946 from liggitt/reload-authz
KEP-3221: Implement authorization configuration file reloading
2024-02-15 18:37:13 -08:00
Kubernetes Prow Robot
1f40d5c095
Merge pull request #123285 from pohly/e2e-pod-phase
e2e pod: dump pod in unexpected phase
2024-02-15 16:34:54 -08:00
Kubernetes Prow Robot
50b4cfc414
Merge pull request #123321 from mimowo/job-reset-metrics
Reset metrics in the Job integration test before testing
2024-02-15 10:57:58 -08:00
Kubernetes Prow Robot
47f92ce231
Merge pull request #123242 from mimowo/fast-backoff-for-replacment-policy-tests
Improve accuracy of the PodsCreationTotal metric and use fast pod failure backoff for ReplacementPolicy integration tests
2024-02-15 09:54:53 -08:00
Kubernetes Prow Robot
50bf3a2060
Merge pull request #123305 from aramase/aramase/f/kep_3331_audience_match_policy_follow_up
Add integration test for multiple audience in structured authn
2024-02-15 08:16:27 -08:00
Michal Wozniak
ab8cdae3b1 Reset metrics in the Job integration test before testing 2024-02-15 14:50:24 +01:00
Maciej Szulik
ec7e051bc0
Always test PDB's during service upgrade test
OpenShift has been running this tests on various platform for several
years now without any problems.
2024-02-15 14:22:46 +01:00
Michal Wozniak
115dc90633 Increase accuracy of the pods_creation_total metric and improve test exec time 2024-02-15 10:59:01 +01:00
Anish Ramasekar
0feb1d5173
Add integration test for multiple audience in structured authn
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 18:50:46 -08:00
Kubernetes Prow Robot
d76d7a1e7a
Merge pull request #123288 from AkihiroSuda/agnhost
e2e_node: replace `registry.k8s.io/stress:v1` with agnhost
2024-02-14 18:08:41 -08:00
Kubernetes Prow Robot
72c3c7c924
Merge pull request #123282 from enj/enj/i/authn_config_algs
Support all key algs with structured authn config
2024-02-14 18:08:32 -08:00
Kubernetes Prow Robot
ba450636a4
Merge pull request #123165 from aramase/aramase/f/kep_3331_audience_match_policy
Add `AudienceMatchPolicy` and support multiple audiences in AuthenticationConfiguration
2024-02-14 17:00:04 -08:00
Kubernetes Prow Robot
8e11104f0b
Merge pull request #121461 from alexzielenski/apiserver/apiextensions/ratcheting-beta
KEP-4008: CRDValidationRatcheting Bump Feature Gate To Beta
2024-02-14 15:56:47 -08:00
Kubernetes Prow Robot
5b2c919583
Merge pull request #114301 from harshanarayana/kubelet/log-rotate-improvements
kubelet: enable configurable rotation duration and parallel rotate
2024-02-14 15:56:38 -08:00
Jordan Liggitt
5dc92ada06
Implement authz config file reloading 2024-02-14 18:09:15 -05:00
Kubernetes Prow Robot
145ccf1f13
Merge pull request #123260 from pohly/e2e-tag-docs
e2e: tag documentation + sorting
2024-02-14 14:52:33 -08:00
Anish Ramasekar
18c563546a
support multiple audiences with jwt authenticator
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-14 10:47:07 -08:00
Monis Khan
b5e0068325
Support all key algs with structured authn config
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-14 09:40:25 -05:00
Akihiro Suda
e8b08cd056
e2e_node: replace registry.k8s.io/stress:v1 with agnhost
agnhost now contains the stress functionality (PR 123258).

Fix issue 123146

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 19:37:13 +09:00
Akihiro Suda
5d861b6f12
promote agnhost to v2.47
Since v2.45, the `stress` subcommand was added and the CI issue was fixed:
- kubernetes/kubernetes PR 123258
- kubernetes/kubernetes PR 123284
- kubernetes/k8s.io     PR 6422

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 19:33:46 +09:00
Patrick Ohly
aa772d77fb e2e pod: dump pod in unexpected phase
When stopping polling, the provided messages becomes the complete failure
message. This means that the code which calls gomega.StopTrying must include
the pod in the message instead of just summarizing the phase. This makes the
failure more useful.
2024-02-14 09:01:32 +01:00
Akihiro Suda
9c726b015c
agnhost: v2.47
agnhost was updated to v2.46 in PR 123258, but the image was not
published due to the failue of `post-kubernetes-push-e2e-agnhost-test-images`
(issue 123266).

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 15:11:31 +09:00
Monis Khan
b8a59346fe
test/oidc: extract key type to allow testing different algs
Signed-off-by: Monis Khan <mok@microsoft.com>
2024-02-13 17:05:33 -05:00
Akihiro Suda
6ff675310c
image-util.sh: fix gcr.io/.../agnhost:2.46-linux-amd64 is a manifest list
Fix issue 123266

> CI: `post-kubernetes-push-e2e-agnhost-test-images` is failing
> (`gcr.io/k8s-staging-e2e-test-images/agnhost:2.46-linux-amd64 is a manifest list`)

To avoid creating a manifest list with the recent version of buildx,
`--provenance=false --sbom=false` has to be specified.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-14 01:37:05 +09:00
Kubernetes Prow Robot
7abb063b42
Merge pull request #123179 from aramase/aramase/f/encryption_config_reload_metric
Add `apiserver_encryption_config_controller_automatic_reloads_total` metric and deprecate success/failure counter
2024-02-13 08:28:47 -08:00
Akihiro Suda
7ee89440c3
agnhost: v2.46
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:52 +09:00
Akihiro Suda
07c701fecb
agnhost: merge registry.k8s.io/stress:v1 (github.com/vishh/stress)
Merge vishh/stress@eab4e3384b into
agnhost.

Old usage: `stress -mem-alloc-size 12Mi -mem-alloc-sleep 10s -mem-total 4Gi`
New usage: `agnhost stress --mem-alloc-size 12Mi --mem-alloc-sleep 10s --mem-total 4Gi`

This is a part of the steps to migrate from legacy Schema 1 images
(issue 123146)

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-02-13 23:21:05 +09:00
Patrick Ohly
e53ac42633 e2e labels: add placeholder docs for existing items
Adding a doc comment for all existing items makes it more obvious that new
items should be documented more carefully. It also has the welcome side effect
that each item gets indented independently from the others.
2024-02-13 11:57:36 +01:00
Patrick Ohly
445443bd8a e2e labels: ensure that the lists remain sorted
Adding new entries at the bottom is tempting, but increases the risk of merge
conflicts between unrelated PRs. Let's use alphabetic order instead.
2024-02-13 11:51:45 +01:00
Anish Ramasekar
77241d3125
Add apiserver_encryption_config_controller_automatic_reloads_total
metric

- Adds `apiserver_encryption_config_controller_automatic_reloads_total`
  metric with status label for encryption config reload success/failure.
- Deprecated `apiserver_encryption_config_controller_automatic_reload_failures_total` and `apiserver_encryption_config_controller_automatic_reload_success_total`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 21:47:46 -08:00
Anish Ramasekar
0e6409873a
remove --v arg from kubetest2-tester-ginkgo test args
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-13 00:02:49 +00:00
Anish Ramasekar
7dd624d344
ci: bump kind to latest for kms jobs
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2024-02-12 23:01:50 +00:00
Kubernetes Prow Robot
3bf9477b52
Merge pull request #122472 from pacoxu/flowcontrolv1
flowcontrol: set the serialization version to v1
2024-02-12 13:17:48 -08:00
Kubernetes Prow Robot
7bea14097b
Merge pull request #122612 from mtardy/remove-scdeny
auth: remove SecurityContextDeny admission plugin
2024-02-12 08:37:13 -08:00
Patrick Ohly
da0c9a93ae scheduler_perf: use dynamic client to create arbitrary objects
With a dynamic client and a rest mapper it is possible to load arbitrary YAML
files and create the object defined by it. This is simpler than adding specific
Go code for each supported type.

Because the version now matters, the incorrect version in the DRA YAMLs were
found and fixed.
2024-02-11 10:51:38 +01:00
Patrick Ohly
c46ae1b26a scheduler_perf: use ktesting.TContext + staging StartTestServer
ktesting.TContext combines several different interfaces. This makes the code
simpler because less parameters need to be passed around.

An intentional side effect is that the apiextensions client interface becomes
available, which makes it possible to use CRDs. This will be needed for future
DRA tests.

Support for CRDs depends on starting the apiserver via
k8s.io/kubernetes/cmd/kube-apiserver/app/testing because only that enables the
CRD extensions. As discussed on Slack, the long-term goal is to replace the
in-tree StartTestServer with the one in staging, so this is going in the right
direction.
2024-02-11 10:51:38 +01:00
Patrick Ohly
63aa261583 ktesting: add TContext
The new TContext interface combines a normal context and the testing interface,
then adds some helper methods. The context gets canceled when the test is done,
but that can also be requested earlier via Cancel.

The intended usage is to pass a single `tCtx ktesting.TContext` parameter
around in all helper functions that get called by a unit or integration test.

Logging is also more useful: Log[f] and Fatal[f] output is prefixed with
"[FATAL] ERROR: " to make it stand out more from regular log output.

If this approach turns out to be useful, it could be extended further (for
example, with a per-test timeout) and might get moved to a staging repository
to enable usage of it in other staging repositories.

To allow other implementations besides testing.T and testing.B, a custom
ktesting.TB interface gets defined with the methods expected from the
actual implementation. One such implementation can be ginkgo.GinkgoT().
2024-02-11 10:51:38 +01:00
Kubernetes Prow Robot
48228bf9db
Merge pull request #121486 from benluddy/cbor-stub
KEP-4222: Add stub CBOR serializer.
2024-02-09 14:42:05 -08:00
cpanato
73cc31847f
fix
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-09 15:01:16 +01:00
cpanato
eec508e488
use patch number
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-09 14:47:56 +01:00
cpanato
ddb0b8da9d
[go] Bump images, dependencies and versions to go 1.22
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-09 14:43:34 +01:00
Harsha Narayana
ab8c784ee9
kubelet: enable configurable rotation duration and parallel rotate 2024-02-09 16:49:11 +05:30
Sergey Kanzhelev
de6989041a added OWNERS to test/e2e/feature/feature.go 2024-02-08 00:42:28 +00:00
bzsuni
658e3308f3 etcd: Update to version 3.5.12
Signed-off-by: bzsuni <bingzhe.sun@daocloud.io>
2024-02-07 21:16:08 +08:00
Kubernetes Prow Robot
87fa400d9d
Merge pull request #123126 from bart0sh/PR131-bump-sample-device-plugins-version
Bump sample-device-plugin version
2024-02-07 05:01:10 -08:00
cpanato
ac9482d15f
update distroless-iptables to v0.5.0 debian-base to bookworm-v1.0.1 and setcap to bookworm-v1.0.1
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-02-07 11:46:19 +01:00
Kubernetes Prow Robot
eb5b9b0b6d
Merge pull request #123140 from Jefftree/latest-sampleapiserver
Bump sample-apiserver to latest version (1.29.1)
2024-02-06 12:30:43 -08:00
Kubernetes Prow Robot
2fb99eb9e8
Merge pull request #121141 from wlq1212/introduceNewethod
using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for utils
2024-02-06 11:06:34 -08:00
Ed Bartosh
1085c0b15a Bump sample-device-plugin image version
Currently published image version doesn't include latest code changes,
for example CDI support.

Manifests include different and outdated image versions
2024-02-06 15:35:11 +02:00
Kubernetes Prow Robot
1ee42beab9
Merge pull request #123122 from carlory/clean-e2e-Azure
Update in-tree azureDisk and azureFile tests
2024-02-05 21:41:35 -08:00
Kubernetes Prow Robot
2ec3ef62d6
Merge pull request #122594 from aravindhp/nlq-windows-e2e
e2e: add NodeLogQuery tests for Windows nodes
2024-02-05 21:41:27 -08:00
Jefftree
6a98704229 Bump to latest version 2024-02-05 21:06:54 +00:00
carlory
63e91ed023 remove deprecated framework.ExpectNotEqual 2024-02-06 02:53:28 +08:00
Kubernetes Prow Robot
dbd3f3564a
Merge pull request #123129 from mkumatag/patch-3
Bump version for the sample-device-plugin image
2024-02-05 08:45:51 -08:00
Kubernetes Prow Robot
c0618cf947
Merge pull request #122769 from thockin/bump_shellcheck_version
Bump shellcheck to 0.9.0
2024-02-05 08:45:29 -08:00
Kubernetes Prow Robot
35531ae707
Merge pull request #121146 from shijinye/e2ecleanup-cloud-notequal
cleanup:e2e-cloud:stop using deprecated framework.ExpectNotEqual
2024-02-05 08:44:53 -08:00
Kubernetes Prow Robot
74888e49f2
Merge pull request #121140 from wlq1212/cleanup-e2e-autoscaling-ExpectNotEqual
test-autoscaling stop using deprecated framework.ExpectNotEqual
2024-02-05 07:21:16 -08:00
Manjunath Kumatagi
becb25c01f
Bump version for the sample-device-plugin image 2024-02-05 11:40:43 +05:30
carlory
31c86e38ac Update in-tree azureDisk and azureFile tests 2024-02-04 18:29:02 +08:00
Kubernetes Prow Robot
42941cb88a
Merge pull request #122635 from carlory/KEP-2799
Promote LegacyServiceAccountTokenCleanUp to GA
2024-02-02 12:47:23 -08:00
Kubernetes Prow Robot
77566f2486
Merge pull request #123036 from jsafrane/remove-invalid-vsphere-tests
Update in-tree vSphere tests
2024-02-02 11:35:23 -08:00
Alexander Zielenski
b636984004 test: remove unnecessary skip healthz check from test
snuck in there while I was working on the test, but is ultimately not necessary to test the functionality.

skipping healthz check resulted in leaking goroutines from poststarthooks.
2024-02-01 14:50:54 -08:00
Kubernetes Prow Robot
57e9981dc2
Merge pull request #122865 from pohly/e2e-framework-logging
e2e framework: unify logging, support skipping helpers
2024-02-01 09:37:02 -08:00
杨军10092085
97640d3e2d fix test test should assign default SC to PVCs that have no SC set failure 2024-01-31 21:42:25 +08:00
Jan Safranek
67926c3777 Update in-tree vSphere tests
Don't implement interfaces that trigger tests with in-line and
pre-provisioned vSphere volumes.

With cloud provider removal, the in-tree vSphere tests won't be able to
create a volume in vSphere and thus test in-line volumes in Pods and
pre-provisioned PVs. Only dynamically provisioned volumes can be used for
testing, because they're provisioned by the vSphere CSI driver.
2024-01-31 10:12:20 +01:00
Kubernetes Prow Robot
a9e4f5b786
Merge pull request #123041 from dims/use-metadata-file-when-values-have-special-characters
[gce_runner] use metadata file when values have special characters
2024-01-30 23:32:24 -08:00
Davanum Srinivas
717a0002b7
[gce_runner] use metadata file when values have special characters
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-01-30 15:55:51 -08:00
Aldo Culquicondor
b8c19dd1d2 Fix deprecated version for pod_scheduling_duration_seconds
Change-Id: Ia0ad9381057a4a1a4a4490861a0d7c1a7ba800cb
2024-01-30 23:41:49 +00:00
Kubernetes Prow Robot
922fbbf5b7
Merge pull request #123006 from dims/use-gcloud-for-gce-runner
Use gcloud for gce_runner
2024-01-30 09:42:05 -08:00
Kubernetes Prow Robot
4f910fe47c
Merge pull request #123003 from alexzielenski/apiserver/policy/crd-startup
ValidatingAdmissionPolicy: dont skip reconcile for unchanged policy if last sync failed
2024-01-29 20:36:41 -08:00
Kubernetes Prow Robot
0ff6a00faf
Merge pull request #122889 from cpanato/update-go-122
[go] Bump images, dependencies and versions to go 1.22rc2
2024-01-29 14:13:31 -08:00
Alexander Zielenski
71559bd026 bugfix: dont skip reconcile for unchanged policy if last sync failed 2024-01-29 11:16:59 -08:00
Qi Ni
2c829cf29b chore: Refactor network load balancer creation in e2e tests
Refactor the code related to creating an internal type load balancer in the e2e tests for network load balancers. The modification removes the check for the "azure" provider and updates it to only check for "gke" and "gce" providers. This change ensures that the test only runs when the cluster is using "gke" or "gce" as the provider. The counterpart test is in the out-of-tree cloud provider azure.
2024-01-29 14:15:25 +08:00
Davanum Srinivas
4716bf8bd4
Fix issues found by linter
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-01-28 06:05:04 -05:00
cpanato
ee86ca9f13
[go] Bump images, dependencies and versions to go 1.22rc2
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-01-28 10:10:54 +01:00
cpanato
c9991e4270
[go] Bump images, dependencies and versions to go 1.22rc1
Signed-off-by: cpanato <ctadeu@gmail.com>
2024-01-28 10:10:47 +01:00