Commit Graph

51001 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
6edbee19b9 Merge pull request #123152 from tnqn/fix-error-log
Fix internal error when serializing groupLookupFailures in log
2024-10-23 01:17:29 +01:00
Kubernetes Prow Robot
71523a7db6 Merge pull request #122644 from gyuho/logs-removing-taints
chores(controller/nodelifecycle): make node taint removal logs more a…
2024-10-23 01:17:15 +01:00
Kubernetes Prow Robot
c9525d3865 Merge pull request #120629 from Rei1010/pointerClean
Use ptr.Equal to compare the value
2024-10-23 01:17:07 +01:00
Kubernetes Prow Robot
3e66160f30 Merge pull request #107362 from shawnhanx/controller_redundant
remove redundant return statement in attachdetach/util/util.go
2024-10-23 01:16:53 +01:00
Kubernetes Prow Robot
8ddbf2a789 Merge pull request #128245 from dims/copy-limited-pieces-of-code-we-use-from-runc-apparmor-and-utils-packages
Copy limited pieces of code we use from runc's apparmor and utils packages
2024-10-23 00:12:59 +01:00
Kubernetes Prow Robot
c4a14d7ef5 Merge pull request #126562 from kannon92/split-filesystem-on-same-disk
[KEP-4191]: Fix issue in split filesystem
2024-10-22 19:48:53 +01:00
Kubernetes Prow Robot
ee9e2294ff Merge pull request #128223 from sanposhiho/bug-check-scale-down
fix: check correctly if the event is scale down
2024-10-22 18:45:03 +01:00
Kubernetes Prow Robot
8013bc1c25 Merge pull request #126249 from xigang/node_status
kubelet: remove useless comment code for node status
2024-10-22 18:44:53 +01:00
Davanum Srinivas
abbc5ad346 Copy limited pieces of code we use from runc's apparmor and utils packages
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2024-10-22 09:56:22 -04:00
Kensei Nakada
089457e908 fix: check correctly if the event is scale down
Signed-off-by: Kensei Nakada <handbomusic@gmail.com>
2024-10-22 10:01:20 +09:00
Kubernetes Prow Robot
5f3316fe23 Merge pull request #128119 from saschagrunert/api-validation-err
Clarify API validation error for toleration if `operator` is `Exists` and `value` is not empty
2024-10-21 19:44:59 +01:00
Kubernetes Prow Robot
f1e447b9d3 Merge pull request #126897 from HirazawaUi/promote-env-to-beta
KEP-4369: promote RelaxedEnvironmentVariableValidation feature gate to beta
2024-10-21 15:26:41 +01:00
Paco Xu
0e10a3a28c Revert "re: kube-proxy: internal config: refactor HealthzAddress and MetricsAddress " 2024-10-21 11:36:59 +08:00
Kubernetes Prow Robot
e39571591d Merge pull request #127478 from googs1025/scheduler/fine-grained
feature(scheduler): more fine-grained QHints for podtopologyspread plugin
2024-10-20 13:29:03 +01:00
googs1025
1edbd0b54f feature(scheduler): more fine-grained QHints for podtopologyspread plugin 2024-10-19 23:45:13 +08:00
Kubernetes Prow Robot
79cca2786e Merge pull request #128172 from liggitt/3221-ga
KEP-3221: Promote StructuredAuthorizationConfiguration to GA
2024-10-18 20:21:09 +01:00
Kubernetes Prow Robot
7429566b07 Merge pull request #127918 from saschagrunert/backoff-status
Use image pull error in `message` during back-off
2024-10-18 19:09:03 +01:00
Kubernetes Prow Robot
7adcad3138 Merge pull request #128169 from liggitt/4193-ga
KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable
2024-10-18 17:39:11 +01:00
Kubernetes Prow Robot
d7bd728403 Merge pull request #128168 from liggitt/4601-beta
KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta
2024-10-18 17:39:03 +01:00
HirazawaUi
98e3cb4c56 promote feature gate to beta 2024-10-18 23:08:28 +08:00
Kubernetes Prow Robot
0daa75b972 Merge pull request #127797 from sanposhiho/cleanup-event-list
cleanup: remove event list
2024-10-18 15:31:04 +01:00
Sascha Grunert
0fc4b740f8 Use image pull error in message during back-off
The container status waiting reason toggles between `ImagePullBackOff`
and the actual pull error, resulting in a bad user experience for
consumers like kubectl. For example, the output of
`kubectl get pods` does return either:

```
NAME   READY   STATUS                      RESTARTS   AGE
pod    0/1     SignatureValidationFailed   0          10s
```

or

```
NAME   READY   STATUS             RESTARTS   AGE
pod    0/1     ImagePullBackOff   0          18s
```

depending in which state the image pull is. We now improve that behavior
by preserving the actual error in the `message` of the `waiting` state
from the pull during back-off:

```json
{
  "waiting": {
    "message": "Back-off pulling image \"quay.io/crio/unsigned:latest\": SignatureValidationFailed: image pull failed for quay.io/crio/unsigned:latest because the signature validation failed: Source
 image rejected: A signature was required, but no signature exists",
    "reason": "ImagePullBackOff"
  }
}
```

While the `SignatureValidationFailed` value inherits from the previous
known state:

```json
{
  "waiting": {
    "message": "image pull failed for quay.io/crio/unsigned:latest because the signature validation failed: Source image rejected: A signature was required, but no signature exists",
    "reason": "SignatureValidationFailed"
  }
}
```

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-10-18 08:47:37 +02:00
Kubernetes Prow Robot
f5ae0413ca Merge pull request #126347 from vinayakankugoyal/kep2862impl
KEP-2862: Fine-grained Kubelet API Authorization
2024-10-18 03:53:04 +01:00
Jordan Liggitt
ad808e609a KEP-3221: Promote StructuredAuthorizationConfiguration to GA 2024-10-17 21:53:45 -04:00
Kubernetes Prow Robot
ded7ad554e Merge pull request #125513 from mauri870/hotfix/grpc-handle-err
kubelet/cm/devicemanager: log grpc Serve error
2024-10-18 02:49:03 +01:00
Jordan Liggitt
0771f601e1 KEP-4193: Promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo, ServiceAccountTokenNodeBindingValidation to stable 2024-10-17 21:25:09 -04:00
Kensei Nakada
83f9e4b6df cleanup: remove event list 2024-10-18 11:10:10 +10:00
Jordan Liggitt
9caca73126 KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta 2024-10-17 21:02:55 -04:00
Kubernetes Prow Robot
b1b4e5d397 Merge pull request #128003 from pohly/dra-classic-dra-removal
DRA: remove "classic DRA"
2024-10-18 00:55:17 +01:00
Kubernetes Prow Robot
90ee68948d Merge pull request #127504 from sttts/sttts-authz-cel-compiler-once
apiserver/authconfig: make CEL compiler shareable
2024-10-18 00:55:10 +01:00
Kubernetes Prow Robot
48f36acc7a Merge pull request #125337 from aojea/document_node_addresses
kubelet --node-ip flag using  unspecified IPs and external cloud provider node addresses behavior
2024-10-18 00:55:03 +01:00
Dr. Stefan Schimanski
c44fc28087 apiserver/validation: fix some sets.NewString deprecations
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-10-17 22:56:20 +02:00
Dr. Stefan Schimanski
4024390d8c apiserver/authconfig: wire CEL compiler through lower layers to allow sharing
Signed-off-by: Dr. Stefan Schimanski <stefan.schimanski@gmail.com>
2024-10-17 22:56:20 +02:00
Vinayak Goyal
b1f290d444 KEP-2862: Fine-grained Kubelet API Authorization
Signed-off-by: Vinayak Goyal <vinaygo@google.com>
2024-10-17 20:53:27 +00:00
Kubernetes Prow Robot
b7d1766c18 Merge pull request #128158 from pohly/dra-controller-logging
DRA resource claim controller: improve log messages
2024-10-17 20:31:11 +01:00
Kubernetes Prow Robot
141951cd6b Merge pull request #126420 from hoskeri/fix-container-succeeded-check-status
kuberuntime_manager: fix container success check.
2024-10-17 20:31:04 +01:00
Kubernetes Prow Robot
51f76febd7 Merge pull request #127402 from mimowo/managed-by-beta-update
Graduate JobManagedBy to Beta in 1.32
2024-10-17 19:27:14 +01:00
Kubernetes Prow Robot
c5a85abecb Merge pull request #122867 from oilbeater/patch-1
fix broken links
2024-10-17 19:27:06 +01:00
Robbie Cronin
cdbfbde4aa Add ut coverage for capabilities.Setup (#125395)
* Add ut coverage for capabilities.Setup

* Update pkg/capabilities/capabilities_test.go

Co-authored-by: Ed Bartosh <eduard.bartosh@intel.com>

* Add ut coverage for capabilities.Setup

Signed-off-by: robert-cronin <robert.owen.cronin@gmail.com>

---------

Signed-off-by: robert-cronin <robert.owen.cronin@gmail.com>
Co-authored-by: Ed Bartosh <eduard.bartosh@intel.com>
2024-10-17 18:23:03 +01:00
Patrick Ohly
d572df2493 DRA resource claim controller: improve log messages
Some code paths didn't log anything. One log message about "claim got deleted"
was incorrect.
2024-10-17 18:28:55 +02:00
Kubernetes Prow Robot
c6ad6fa951 Merge pull request #125477 from my-git9/namespaceformat
Modify some error words
2024-10-17 17:17:17 +01:00
Kubernetes Prow Robot
e6099268e3 Merge pull request #125080 from TommyStarK/unit-tests/kubelet-apis-config-validation
kubelet/apis/config/validation: improve unit test coverage
2024-10-17 17:17:10 +01:00
Kubernetes Prow Robot
f5b92902a3 Merge pull request #124434 from tu1h/fix-compute-resources-link
API docs: point outdate link to current link
2024-10-17 17:17:03 +01:00
Kubernetes Prow Robot
4d32d7e5ad Merge pull request #127930 from aroradaman/kube-proxy-refactor-healthz-metrics-address
re: kube-proxy: internal config: refactor HealthzAddress and MetricsAddress
2024-10-17 16:03:11 +01:00
Kubernetes Prow Robot
1f9038a468 Merge pull request #127919 from carlory/fix-127852
Fix data race in kubelet/volumemanager
2024-10-17 14:57:03 +01:00
Lukasz Szaszkiewicz
06a15c5cf9 Promote WatchList feature to Beta (#128053)
* e2e/apimachinery/watchlist: always run WatchList e2e tests

* kube-controller-manager: enable WatchListClient

* kube-apiserver: promote WatchList feature to beta
2024-10-17 11:07:04 +01:00
Michal Wozniak
70a8ceb6f0 Graduate JobManagedBy to Beta in 1.32
# Conflicts:
#	pkg/features/kube_features.go
2024-10-17 09:01:54 +02:00
Kubernetes Prow Robot
a4c262bc8c Merge pull request #127293 from hshiina/typecheck
kubelet/cm: Unite return value types of helper functions
2024-10-17 07:45:04 +01:00
Kubernetes Prow Robot
d67e6545b1 Merge pull request #124227 from iholder101/in-pod-vertical-scaling/extended-resources
[FG:InPlacePodVerticalScaling] Add extended resources to ContainerStatuses[i].Resources
2024-10-17 01:39:03 +01:00
Patrick Ohly
f84eb5ecf8 DRA: remove "classic DRA"
This removes the DRAControlPlaneController feature gate, the fields controlled
by it (claim.spec.controller, claim.status.deallocationRequested,
claim.status.allocation.controller, class.spec.suitableNodes), the
PodSchedulingContext type, and all code related to the feature.

The feature gets removed because there is no path towards beta and GA and DRA
with "structured parameters" should be able to replace it.
2024-10-16 23:09:50 +02:00