Commit Graph

27132 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
d70bfc8e86 Merge pull request #130636 from serathius/watchcache-integration-test
Move setup in TestListOptions before we start API server
2025-03-12 13:35:54 -07:00
Kubernetes Prow Robot
21f7eaa8e2 Merge pull request #130705 from aaron-prindle/validation-gen-add-metric-and-runtime-verification-upstream
[Declarative Validation] feat: add declarative validation metrics and associated runtime verification tests
2025-03-12 11:29:54 -07:00
Kubernetes Prow Robot
6b8341fc2e Merge pull request #130544 from jsafrane/selinux-beta
selinux: Promote SELinuxChangePolicy and SELinuxMount to beta
2025-03-12 11:29:47 -07:00
Kubernetes Prow Robot
caf541857f Merge pull request #130673 from gauravkghildiyal/kep-4444-ga
Promote ServiceTrafficDistribution feature-gate to GA and update docs with latest descriptions
2025-03-12 08:23:47 -07:00
Marek Siarkowicz
ac6790450a Move TestListOptions setup before we start API server
This PR changes the TestListOptions setup to execute compaction before
we start apiserver allowing the test work with cache snapshots from
KEP-4988 by preventing creation of snapshots for compacted revisions.

While etcd compaction removes access to old revision, with KEP-4988
those revisions will be still available in watch cache. Implementing
compaction for watch cache doesn't make sense as it would only be
used for testing, making it unreliable.

To properly test how etcd and watch cache behaves on
compacted revisions we need to compact etcd before we start apiserver.
2025-03-12 14:52:34 +01:00
Kubernetes Prow Robot
e0ab1a16ad Merge pull request #128372 from aramase/aramase/f/kep_4412_alpha_impl
KSA token for Kubelet image credential providers alpha
2025-03-12 00:39:50 -07:00
Anish Ramasekar
2090a01e0a add e2e test with the gcp-credential-provider test plugin
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-11 20:36:36 -07:00
Kubernetes Prow Robot
f13237a34e Merge pull request #130735 from Jefftree/cle-lexo-check
CLE: Remove invalid emulated version and add lexographical order test
2025-03-11 19:47:59 -07:00
Kubernetes Prow Robot
4a0566c25b Merge pull request #130575 from Jefftree/cle-e2e
Add E2E tests for CLE
2025-03-11 19:47:45 -07:00
Aaron Prindle
de904f8099 feat: add declarative validation metrics and associated runtime verification tests 2025-03-12 02:41:30 +00:00
Anish Ramasekar
d398de294d Add KubeletServiceAccountTokenForCredentialProviders feature gate
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-11 19:24:54 -05:00
Kubernetes Prow Robot
1b6e321e23 Merge pull request #129407 from serathius/streaming-proto-list-encoder
Implement streaming proto list encoder
2025-03-11 17:11:45 -07:00
Kubernetes Prow Robot
c5d4e53444 Merge pull request #130731 from Jefftree/cle-int-refactor
Fix context usage in CLE integration test
2025-03-11 15:59:52 -07:00
Jefftree
775b118a6d Remove invalid emulated version and add lexographical order test 2025-03-11 21:00:48 +00:00
Jefftree
9eef88c844 Add CLE e2e tests 2025-03-11 20:54:45 +00:00
Marek Siarkowicz
f5dd7107f7 Implement streaming proto encoding 2025-03-11 21:49:50 +01:00
Kubernetes Prow Robot
309c4c17fb Merge pull request #128499 from stlaz/ctb_betav1
ClusterTrustBundles - move to beta
2025-03-11 12:47:45 -07:00
Jefftree
b7b1e78d62 Fix context usage 2025-03-11 19:29:21 +00:00
Kubernetes Prow Robot
6bb5901e2d Merge pull request #129058 from dom4ha/nominated_cluster_event
Trigger all pods rescheduling on nominated node changes
2025-03-11 11:27:47 -07:00
Stanislav Láznička
24e8fa769b move ClusterTrustBundles featuregates to beta 2025-03-11 18:07:32 +01:00
Stanislav Láznička
0cd2976cab integration: ctb: apiserversigner test to use certbeta api 2025-03-11 18:07:27 +01:00
Stanislav Láznička
e0f536bf1f use the ClusterTrustBundles beta API 2025-03-11 18:07:24 +01:00
Kubernetes Prow Robot
07d66d9c26 Merge pull request #130574 from natasha41575/drop_proposed_resize_status
[FG:InPlacePodVerticalScaling] Drop `Proposed` resize status
2025-03-11 09:49:46 -07:00
Kubernetes Prow Robot
4c311c9fcf Merge pull request #130475 from serathius/watchcache-consistency
Implement consistency checking
2025-03-11 05:09:46 -07:00
Marek Siarkowicz
e4d73c56cd Implement consistency checking 2025-03-11 10:17:23 +01:00
Kubernetes Prow Robot
8f97ac7fcf Merge pull request #130530 from pacoxu/v1.33-fg-cleanup
v1.33 feature gate cleanup
2025-03-10 23:03:46 -07:00
Paco Xu
f167454371 remove feature gate AdmissionWebhookMatchConditions that was GAed in v1.30 2025-03-11 10:54:04 +08:00
Paco Xu
8195f82fe8 remove AggregatedDiscoveryEndpoint that was GAed in v1.30 2025-03-11 10:51:43 +08:00
yongruilin
989d68d757 chore: update DeclarativeValidation featuregate 2025-03-10 22:39:03 +00:00
Natasha Sarkar
8a20e90839 [FG:InPlacePodVerticalScaling] Drop 'Proposed' resize status 2025-03-10 20:46:02 +00:00
Kubernetes Prow Robot
cad46631a8 Merge pull request #130655 from BenTheElder/pr130580
Set [Feature:OffByDefault] when WithFeatureGate receives an off-by-default feature gate
2025-03-10 13:31:46 -07:00
Jordan Liggitt
628d107b61 Switch cluster trust bundle e2e tests to generic alpha feature + feature gates
This relies on WithFeatureGate adding [Feature:OffByDefault]. Without that, the
test would start to run in jobs which don't enable the feature.
2025-03-10 12:04:04 -07:00
Benjamin Elder
9828ad64da e2e framework WithFeatureGate adds [Feature:OffByDefault]
(when passed a feature that is not Default)

This allows using the regex filter to skip tests that do not work on a cluster
without optional configuration, while moving tests to use WithFeatureGate
without also setting WithFeature unless they have some additional configuration
required.

Co-authored-by: Patrick Ohly <patrick.ohly@intel.com>
2025-03-10 12:04:04 -07:00
Kubernetes Prow Robot
133d5d612e Merge pull request #130603 from AndrewSirenko/fix-vac-flake
Mark VAC recovery e2e test flaky
2025-03-10 10:27:46 -07:00
Kubernetes Prow Robot
b82260f003 Merge pull request #130391 from bart0sh/PR174-e2e_node-fix-eviction-kubetest2
e2e_node: fix ImageGCNoEviction test for kubetest2
2025-03-10 08:57:53 -07:00
dom4ha
4deb4f2b5f Trigger rescheduling on delete event also when unscheduled pod is removed 2025-03-10 15:03:50 +00:00
Kubernetes Prow Robot
4806519423 Merge pull request #130622 from pohly/DRAPrioritizedList
DRA: Prioritized Alternatives in Device Requests, II
2025-03-10 06:51:51 -07:00
Patrick Ohly
89440b1239 DRA: integration tests for prioritized list
This adds dedicated integration tests for the feature to the general
test/integration/dra for the API and some minimal testing with the scheduler.

It also adds non-performance test cases for scheduler_perf because that is a
better place for running through the complete flow (for example, can reuse
infrastructure for setting up nodes).
2025-03-10 11:38:06 +01:00
Kubernetes Prow Robot
5227bad0df Merge pull request #130335 from carlory/fix-handle-terminating-pvc-when-kubelet-rebuild-dsw
Fix kubelet restart unmounts volumes of running pods if the referenced PVC is being deleted by the user
2025-03-10 03:09:47 -07:00
carlory
aab083972d fix handle terminating pvc when kubelet rebuild dsw
Signed-off-by: carlory <baofa.fan@daocloud.io>
2025-03-10 15:39:18 +08:00
Drew Sirenko
085d23388a Mark VAC roll-forward test as flaky 2025-03-10 00:40:53 -04:00
Gaurav Ghildiyal
dc80618817 Use SetFeatureGateEmulationVersionDuringTest() for testing
ServiceTrafficDistribution feature-flag disablement in control plane components

Ref. https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/feature-gates.md#disablement-tests
2025-03-09 17:02:54 -07:00
Gaurav Ghildiyal
2492eddd20 Bump ServiceTrafficDistribution feature-gate to GA in 1.33 and set LockToDefault=true 2025-03-09 15:16:56 -07:00
Tim Hockin
f08e640b9e Lock down gofuzz in deps 2025-03-08 15:22:01 -08:00
Tim Hockin
e54719bb66 Use randfill, do API renames 2025-03-08 15:18:00 -08:00
Kubernetes Prow Robot
0eaee48ecb Merge pull request #130569 from dims/update-to-latest-cadvisor-v0.52.0
Update to latest cadvisor @ v0.52.1 and new opencontainer/cgroups and drops opencontainers/runc
2025-03-07 17:09:51 -08:00
Kubernetes Prow Robot
6216201e16 Merge pull request #130485 from aramase/aramase/f/using_sar_for_node_aud_restriction
Enable dynamic configuration of service account names and audiences for token requests in node audience restriction
2025-03-07 15:35:45 -08:00
Anish Ramasekar
3f5d30543d Add integration tests for using SAR with node audience restriction
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2025-03-07 16:25:18 -06:00
Kubernetes Prow Robot
2effa5e3cf Merge pull request #130352 from natasha41575/kubelet-pod-observedgen
[FG:PodObservedGenerationTracking] Kubelet sets pod `status.observedGeneration` when updating the pod status
2025-03-07 13:33:45 -08:00
Kubernetes Prow Robot
74cb75c884 Merge pull request #130396 from bart0sh/PR173-e2e_node-fix-getting-pod-logs
e2e_node: remote: fix getting pod logs
2025-03-07 05:21:45 -08:00