12052 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
953b40b34e Merge pull request #128857 from zhifei92/flagz-kubelet
feat: Add flagz endpoint for kubelet
2025-03-13 02:57:45 -07:00
Kubernetes Prow Robot
7f818e9f02 Merge pull request #130602 from tallclair/allocation-checkpoint-optimization
Allocation checkpoint cleanup
2025-03-12 22:41:46 -07:00
Kubernetes Prow Robot
761f5646be Merge pull request #130138 from rata/userns-enabled-by-default
features: Enable user namespaces by default
2025-03-12 20:13:48 -07:00
zhangzhifei16
2db729cfa4 Add flatz to kubelet auth.
Fix: Move flagz to InstallDebuggingHandlers.

Move flagz  to the lower switch statemen

Fix linter

Drop the function parameter for the read-only server.
2025-03-13 10:11:59 +08:00
Kubernetes Prow Robot
7b6c56e5fb Merge pull request #130135 from saschagrunert/image-volume-beta
[KEP-4639] Graduate image volume sources to beta
2025-03-12 18:03:58 -07:00
Kubernetes Prow Robot
05bfdbc6dd Merge pull request #129950 from ffromani/alignment-error-detail-metrics
node: metrics for alignment failures
2025-03-12 18:03:46 -07:00
Tim Allclair
e8547d8a54 Cleanup unused container parameter from allocation state Delete 2025-03-12 15:19:38 -07:00
Tim Allclair
05a9c06212 Don't update checkpoint file for deletion 2025-03-12 15:19:14 -07:00
Tim Allclair
30bca329c5 Don't re-write the checkpoint file when the content is unchanged 2025-03-12 15:11:39 -07:00
Anish Ramasekar
b27735be2e Define type alias for getServiceAccount function
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-12 10:08:46 -07:00
Anish Ramasekar
ad8666ce88 Update credential provider plugin to support using service account token
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-11 20:36:32 -07:00
Anish Ramasekar
ba2eecca0d Add TokenAttributes field to v1 CredentialProvider
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-11 19:24:39 -05:00
Stanislav Láznička
1f1dbc35a9 kubelet: ctb: use generics to handle alpha/beta APIs for CTB projection 2025-03-11 18:07:31 +01:00
Stanislav Láznička
d3f44a5bc0 kubelet: lazy enabling the ClusterTrustBundleProjection feature
Determine whether the ClusterTrustBundleProjection should be enabled
based on ClusterTrustBundle API discovery.
Some distributions may rely on a running kubelet in order to start
their kube-apiserver. Therefore we must delay the API discovery.

This patch delays it until the first time a clustertrustbundle is
requested from the InformerMaanager.
2025-03-11 18:07:28 +01:00
Stanislav Láznička
e0f536bf1f use the ClusterTrustBundles beta API 2025-03-11 18:07:24 +01:00
Sascha Grunert
f9e5dd84ad Graduate image volume sources to beta
Graduate the feature to beta, by:

- Allowing `subPath`/`subPathExpr` for image volumes
- Modifying the CRI to pass down the (resolved) sub path
- Adding metrics which are outlined in the KEP

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2025-03-11 13:41:45 +01:00
Kubernetes Prow Robot
e9a3d99f37 Merge pull request #129826 from danwinship/iptables-constructors
fix up iptables construction, kubelet iptables startup messages
2025-03-11 01:17:45 -07:00
Kubernetes Prow Robot
82667879bb Merge pull request #130599 from tallclair/acknowledged-resources
[FG:InPlacePodVerticalScaling] Track actuated resources to trigger resizes
2025-03-10 19:01:46 -07:00
Kubernetes Prow Robot
f510123183 Merge pull request #130559 from esotsal/fix-use-CamelCase-for-memory-manager-policy-name-check-for-InPlacePodVerticalScalingExclusiveCPUs-feature-gate
[FG:InPlacePodVerticalScaling] Fix use CamelCase for memory manager policy in InPlacePodVerticalScalingExclusiveCPUs
2025-03-10 14:41:47 -07:00
Tim Allclair
6d0b6278cd Rename some allocation.Manager methods 2025-03-10 10:03:35 -07:00
Tim Allclair
d4444dd598 Use actuated resources to determine resize status 2025-03-10 10:03:35 -07:00
Tim Allclair
660bd6b42d Track actuated resources in the allocation manager 2025-03-10 09:58:29 -07:00
Kubernetes Prow Robot
5227bad0df Merge pull request #130335 from carlory/fix-handle-terminating-pvc-when-kubelet-rebuild-dsw
Fix kubelet restart unmounts volumes of running pods if the referenced PVC is being deleted by the user
2025-03-10 03:09:47 -07:00
carlory
aab083972d fix handle terminating pvc when kubelet rebuild dsw
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-10 15:39:18 +08:00
Tim Hockin
e54719bb66 Use randfill, do API renames 2025-03-08 15:18:00 -08:00
Dan Winship
8c98dee1ed Add utiliptables.NewDualStack
Basically all callers want dual-stack-if-possible, so simplify that.

Also, tweak the startup-time checking in kubelet to treat "no iptables
support" as interesting but not an error.
2025-03-08 10:14:17 -05:00
Dan Winship
9c98d29795 Remove exec arg from utiliptables.New
It was there so you could mock the results via a FakeExec, but these
days any unit tests outside of pkg/util/iptables that want to mock
iptables results use a FakeIPTables instead of a real
utiliptables.Interface with a FakeExec.
2025-03-08 10:11:15 -05:00
Kubernetes Prow Robot
0eaee48ecb Merge pull request #130569 from dims/update-to-latest-cadvisor-v0.52.0
Update to latest cadvisor @ v0.52.1 and new opencontainer/cgroups and drops opencontainers/runc
2025-03-07 17:09:51 -08:00
Kubernetes Prow Robot
2effa5e3cf Merge pull request #130352 from natasha41575/kubelet-pod-observedgen
[FG:PodObservedGenerationTracking] Kubelet sets pod `status.observedGeneration` when updating the pod status
2025-03-07 13:33:45 -08:00
Kubernetes Prow Robot
83b696c720 Merge pull request #130125 from marosset/windows-unit-tests-kubelet-eviction-fixes
fixing k8s.io/kubernetes/pkg/kubelet/eviction unit tests on Windows
2025-03-07 12:27:46 -08:00
Kubernetes Prow Robot
ed99f7dec6 Merge pull request #130153 from wongchar/uncore-v1.33
node: cpumanager: prefer-align-cpus-by-uncorecache: add test cases and CPU topologies
2025-03-07 08:45:45 -08:00
Kubernetes Prow Robot
1c9840c58e Merge pull request #130243 from rata/revert-userns-kernel-check
Revert userns kernel check
2025-03-07 02:35:44 -08:00
Natasha Sarkar
40e7d88f02 Kubelet sets pod.status.observedGeneration behind FG 2025-03-06 22:31:04 +00:00
Charles Wong
46c09d3017 add more uncore test cases 2025-03-06 10:02:06 -06:00
Francesco Romani
919e8a62e9 uncore: more testcases
add multi-uncore real topology and use it by starting the policy allocation tests

Signed-off-by: Francesco Romani <fromani@redhat.com>
2025-03-06 10:02:06 -06:00
Tim Allclair
ed326fea13 Always report pod status resources consistent with the current pod sync 2025-03-05 16:01:03 -08:00
Davanum Srinivas
5ecddb6571 update to latest cadvisor @ v0.52.0
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2025-03-05 06:36:39 -05:00
Kubernetes Prow Robot
9d9e1afdf7 Merge pull request #130576 from tallclair/allocated-uid
Change allocation manager pod UID to types.UID
2025-03-04 16:41:51 -08:00
Kubernetes Prow Robot
f816be06ed Merge pull request #129216 from tallclair/ippr-supported
[FG:InPlacePodVerticalScaling] Never attempt a resize of windows pods and always use allocated resources for unsupported resize pods
2025-03-04 16:41:44 -08:00
Tim Allclair
8fac9c68e1 Change allocation manager pod UID to types.UID 2025-03-04 13:54:27 -08:00
Kubernetes Prow Robot
6c445ca18a Merge pull request #130122 from marosset/windows-unit-test-pkg-kubelet-apis-config-validation-fixes
unit tests - fixing k8s.io/kubernetes/pkg/kubelet/apis/config/validation unit test failures on Windows
2025-03-04 12:25:51 -08:00
Francesco Romani
04129d1dc8 node: metrics for alignment failures
Add metrics to report alignment allocation failures
See: https://github.com/kubernetes/enhancements/pull/5108

Signed-off-by: Francesco Romani <fromani@redhat.com>
2025-03-04 19:50:08 +01:00
Sotiris Salloumis
33bf509eb0 Use CamelCase for memory manager policy name check in InPlacePodVerticalScalingExclusiveCPUs 2025-03-04 14:23:08 +01:00
Kubernetes Prow Robot
d8c2e46b21 Merge pull request #130244 from swatisehgal/topology-mgr-logs-improvements
Topology Manager logging improvements
2025-03-03 19:55:56 -08:00
Kubernetes Prow Robot
5db66add7e Merge pull request #130000 from saschagrunert/typos
Fix pod worker and prober log message typos
2025-03-03 19:55:42 -08:00
Tim Allclair
cb5c8d159c Don't automatically clear in-progress status when resize is not allowed 2025-03-03 15:26:40 -08:00
Kubernetes Prow Robot
90cf6f2efe Merge pull request #130413 from zhifei92/deprecated-pointer
chore(kubelet): Use ptr.To to replace the custom function unit64Ptr
2025-03-03 14:29:49 -08:00
Tim Allclair
523a19aa44 Extract isInPlacePodVerticalScalingAllowed to shared function 2025-03-03 14:08:49 -08:00
Tim Allclair
460db5c137 Always use allocated resources for pods that don't support resize 2025-03-03 14:07:30 -08:00
Tim Allclair
6df3ea46d9 Never attempt a resize of windows pods 2025-03-03 14:03:11 -08:00