aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-containers/kubernetes
AgeCommit message (Collapse)Author
2024-05-02kubernetes: Pass -trimpath to buildChangqing Li
Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-02kubernetes: skip textrel QA warningChangqing Li
-buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15kubernetes: fix build with go 1.21+Bruce Ashfield
go1.21+ checks the GOTOOLCHAIN variable and will attempt to validate/fetch the toolchain version requested. That doesn't work in our environment, so we export the variable as "local" to indicate that the build should trust (and use) the local toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15kubernetes: allow go 1.20 buildingBruce Ashfield
Although k8s checks for, and demands, golang 1.21.x, runtime tests show that golang 1.20.x is properly building and providing enough for core functionality. In an effort to see what else may be lurking, we patch out the check to allow builds with our 1.20.x toolchain. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15kubernetes: update to 1.29.1Bruce Ashfield
Bumping kubernetes to version v1.29.1-1-ga02da633101, which comprises the following commits: a02da633101 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.1 bc401b91f27 Release commit for Kubernetes v1.29.1 5350f0829f5 Revert "Graduate Evented PLEG to Beta" 5b1e1446823 [go] Bump images, dependencies and versions to go 1.21.6 and distroless iptables to 0.4.4 0da29848c53 Make OpenAPIGetter tolerant of nil 865f214fe53 use context for lazy evaluation. cde050c4d0b Initialize default attach func regardless of the value of flag b055126537b .*: bump golang.org/x/tools to v0.16.1 05937cba41d add ut 00045c3c9d6 fix b10ad75ab1d fix 4b8554018c1 fix: 119921 a5f64b743e4 Address comment ed501c1f080 Keep presence cost to 0 to ensure backward compatibility. 37717c1bc43 fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times 4a597425b8b fix falky test pkg/registry/core/persistentvolume/storage TestUpdateStatus 40d8e405b8e Use a separate function for checking if device was reconstructed d30fda3c68c Add tests for checking of uncertain device paths 910fa603a25 Fix device uncertain errors on reboot 62d0bd7260f Fix CSI migration for vSphere volumes ce513803ca9 Wire in field dropping for CRDs 9abd608b99e Revert "scheduler/nodeaffinity: reduce pod scheduling latency" 95751b4df7f Revert "scheduler/NodeUnschedulable: reduce pod scheduling latency" 85ff8c0b081 kube-proxy: Fix etp:Local for externalIPs ee9a55c25d6 Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28 e1e60c9b658 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0 3f7a50f3868 Release commit for Kubernetes v1.29.0 3b8f25dfdd9 fix: disable SchedulerQueueingHints feature flag by default 0c645922edc CHANGELOG: Update directory for v1.29.0-rc.2 release a2115acba28 Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.2 e4636d05bc3 Release commit for Kubernetes v1.29.0-rc.2 0ca3089bee6 Bump distroless-iptables to v0.4.2 1c1347a3e71 [go] Bump images, dependencies and versions to go 1.21.5 4e5321c92e0 add beta comment for pod replacement policy 233949e05df Add an integration test to verify root path cleanup c769c2db6ed Revert conformance test addition of root paths ec9387da084 Remove scrape_error from resource_metrics_test due to deprecation 022d50fe3a1 CHANGELOG: Update directory for v1.29.0-rc.1 release 71c7e93ba7f Update CHANGELOG/CHANGELOG-1.29.md for v1.29.0-rc.1 96a32568e66 Release commit for Kubernetes v1.29.0-rc.1 f730dc39f9d Fix verify target to not update env var if already set 51daa8cbd5e api: run hack/update-api-spec.sh f042994cb03 releng: update publishing bot rules for 1.29 bacac254799 CHANGELOG: Update directory for v1.29.0-rc.0 release ab6a1ad8e1f Release commit for Kubernetes v1.29.0-rc.0 af34f62170c code-generator: fix invalid replace of klog d203bb54f8a fix flake on conformance e2e test ResourceQuota controller should apply changes to a resourcequota status 005e85c4d3e fix(framework): remove the mention about what happens with nil from EventsToRegister 64f8c6939f8 Replace -E with --setenv for systemd-run parameter dd6e286a1ae TestSlowNodeSync: fix flake by allowing informer cache to get populated c3ff08250eb CHANGELOG: Update directory for v1.25.16 release 59c63185457 CHANGELOG: Update directory for v1.26.11 release bb6c9ecb1a2 CHANGELOG: Update directory for v1.27.8 release 3f81c5cf3ff CHANGELOG: Update directory for v1.28.4 release 34e620d18c0 Support score extension function in preemption. 99f7df3e1c1 improve default_servicecidr_controller startup c99b5a208de Check error from gomega 49e8c196c34 use framework gomega 8c68aa656b1 Update publishing-bot rules for active release branches that uses go120 to Go 1.20.11 6aa3002ad24 add kubeup label instead of a feature label 27dfe93f53d Use value(name) in gcloud compute instance-groups managed list-instances 20853ef1200 Bump distroless-iptables to v0.4.2 4b1b9a198a6 Fix issue with client rate limiter when polling 7c5dfceff8a add false matchCondition benchmark f9ab24bf485 Refine test case 617f2132fed e2e: avoid redundant labels in JUnit file 172f680326a fix: smb file share unavailable issue when it's deleted 2017fb2ec53 Fix "go test -count=2 ./pkg/proxy/iptables" bda722bb684 kubeadm: support updating certificate organization during 'kubeadm certs renew' 2780060a789 kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt 11cdb8fd011 split compile and eval fe53db0dbdc authz: add benchmark for webhook authorizer 475bfa4a633 set LimitedSwap 819d1903a27 Add support for authorization-config to local-up-cluster b53134f129f Test anonymous and RBAC handling via config file 264cd648246 Run RBAC hook correctly when running from authz config file 1f40e0916ec Only default mode to AlwaysAllow when config file is unspecified 76277f693d0 create a new KubeUp feature label for tests marked for removal 9e5b8402bb9 update go.mod 88e124ecaa4 [go] Bump images, dependencies and versions to go 1.21.4 e4fdc96c188 Pass External Storage label parameters as individual arguments in framework variadic function f3dad977040 self nominate aroradaman as sig- proxy-reviewer 2645b22003d Self nominate Kevin Hannon for reviewer for job controller b12db6d9b55 fix test store delete collection function failed 9d5b2a44762 Fix API comment for the Job ready field 1395e2e02c5 Fix API comment for the FailIndex Job pod failure policy action 6dc11c1f219 kubeadm: ensure the kubelet and kube-apiserver wait checks go first bb315d13392 bump runc to v1.1.10 f77a4543d13 Unregister events in schedulingGates plugin 70c9eefff30 add --sbom=false --provenance=false for windows servercore cache build 42a70cdbd16 codegen bba0c9a81e9 validate defaults across an update from nil to ensure create ratcheting rules work eef15158152 ratcheting-cel: use Optional[T] for oldSelf when optionalOldSelf is true 5edb27aa382 ratcheting-cel: add optionalOldSelf field 6b6be38896b test: Fix NodeLogQuery tests ad7b9b56f5b test/e2e_node: add e2e test for Kubeletconfig drop-in dir ee5578be526 cmd/kubelet: fix overriding default KubeletConfig fields in drop-in configs if not set bd6431323a5 ClusterTrustBundle projection: e2e test 96e610ac188 ClusterTrustBundle: Enforce max size during validation 1ebe5774d08 kubelet: Support ClusterTrustBundlePEM projections e83baddbb1a LRUExpireCache: Allow removing multiple keys under lock 599fdb7adde Regenerate for ClusterTrustBundlePEM projected volume API ecfdc8fda55 Define ClusterTrustBundlePEM projected volume 0fd13627820 ClusterTrustBundles: ClusterTrustBundleProjection feature gate 2a23061f6c2 scheduler: fix performance regression at -v3 + contextual logging e5bba37f20a apiserver: promote flowcontrol tests to conformance 9ae1fc366b8 Store nodes before calling EnsureLoadBalancer 60338c79d77 KCCM: fix slow node sync + service update a8673fa5b4a KCCM: add test validating slow node sync issue b565fbeac06 test/e2e_kubeadm/dns_addon_test.go: drop kube-dns tests 2259ac2444f pause: add --provenance=false during etcd multi-arch build 50f092c1366 Add kubernetes.io/hostname to faked nodes in tests 5bf63036c7f Make EnablePodSchedulingReadiness public 0112d91a056 Add multi-webhook integration test b693f09d544 [StructuredAuthn] Ensure empty fields of user object are accessible by CEL 34b2c4e1ed0 framework: add SSH support for Azure 44d89c8cf8c Include empty string attributes for CEL authz evaluation 2e2f51a4417 Plumb failure policy from config to webhook construction 0674135c1aa CHANGELOG: Update directory for v1.29.0-alpha.3 release a000af25ff3 Require match condition version only if matchConditions are specified baebc376ff8 missed a few summary upper limits for major page faults 3c268b75244 etcd: Update to version 3.5.10 4c532213ae2 test/e2e_kubeadm: add test for the kubeadm:cluster-admins CRB ae73cf9cfb7 Add remaining e2e tests for backoffLimitPerIndex based on KEP 2d9128116b6 Use golang library instead of mklink 85b10c06fab update docs for v1.29 release (note this must be committed after code freeze) cda349cda49 Make service-cidrs-controller role feature-gated 26923b91e8c implementation of split disk kep 003e4886c6f Fix parameter passing error 18adc309337 refactor: rename TransitionRule to UsesOldSelf b2c743154cc Fix the e2e bug related to the Garbage collector in api-machinery. 338fe7ad55c e2e framework: validate test definitions f2cfbf44b1f e2e: use framework labels 248100ce6df golangci-lint: tone down comment checking ecb32a3e29c increase bounded limits for major page faults ceaacc88f0d add --provenance=false during etcd multi-arch build 833156b77e2 e2e: define environment 4a380609a94 serviceaccount: fix incorrect usage of %w in Errorf 878d037d3ba dependencies: klog v2.110.1 bc1df9e7dab bump to newest etcd: v3.5.10 38905462656 Update APIs and adjust tests 77f4178c98a Promote CSINodeExpandSecret to GA 252e1d2dfee Imagepull per runtime class alpha release changes 0993bb78efe Redo service dispatch with maps 9d71513ac1e Redo no-endpoint handling with maps 4128631d0f3 Redo LoadBalancerSourceRanges firewall using sets edaa1d735b8 Redo --nodeport-addresses handling with a set ef1347b06db Port NAT rules to nftables (and backend is now functional) 0c5c620b4f2 Port filter rules to nftables 6cff4153057 Port service/endpoint chain creation/cleanup to nftables 2735ad541e2 Port table setup/cleanup code to nftables bcced184c52 Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync 93860a52177 Distinguish iptables-based and nftables-based backends, do startup cleanup abb1a458a95 Create an nftables.Interface in nftables proxier 1a530457f90 Drop unit tests of iptables-specific unit test helpers 958e80ca3b0 Clarify nftables/proxier.go by distinguishing nat/filter table KUBE-SERVICES chains 3abdda9800d Simplify nftables/proxier.go by using string rather than utiliptables.Chain 96e53f64f4d Simplify nftables/proxier.go by removing the "args" reuse 6535ac1e619 Simplify nftables/proxier.go by removing Monitor stuff ecb7752f0b8 Simplify nftables/proxier.go by removing HaveRandomFully checks 5f09106063b Simplify nftables/proxier.go by dropping "-j ACCEPT" rules 1a6b9b811e3 Simplify nftables/proxier.go by removing localhost nodeport support e7c35d27f75 Simplify nftables/proxier.go by removing partial syncing 39a5af1d0aa Simplify nftables/proxier.go by removing large-cluster mode cac26737cd4 apiserver: add conformance tests for flowcontrol API a70653143e9 Add a dummy nftables kube-proxy backend which is just a copy of iptables ce5a22d54c1 hack/update-codegen 3b69bd6a9ba servicecidrs controller clarify condition false reevaluation fee07ad6080 make update with the new API with arrays 9917c727a1e test e2e: use new ServiceCIDR API 5d90d07f2d2 test integration: use new ServiceCIDR API 271900a0f05 integration etcd data: use new ServiceCIDR API 3edcce52e3c service cidr controller manager: use new ServiceCIDR API 016c3c9e363 repairip controller: use new ServiceCIDR API 881cf4d54fd ipallocator/cidrallocator: use new ServiceCIDR API 7e87806fab1 default_servicecidr_controller: use new ServiceCIDR API 513fdb54229 describer: use new ServiceCIDR API 5123a93b342 printers: use new ServiceCIDR API c3d9b77d94e update ServiceCIDR API: replace IPv4,IPv6 fields by an array of strings 599597ca65a fix race on ServiceCIDR deletion e3a0df26a86 remove flag cidr max size validation if gate enable 8182c4d9ec8 make update cb509b01f31 e2e for ServiceCIDRs 46b13d48e20 etcd data ccbcadb0324 add integration test 4ff80864e1c service cidr controller manager 164276175fb plumb the new multicidr clusterip allocator 65e69389463 make repair loop multi service cidr aware 63fe539b4e7 expand IPAllocator to work with multiple ServiceCIDRs d3386e171a2 add iptree radix tree util 3b450378e07 bootstrap controller for default ServiceCIDR 55a35bebee9 API printers 7e77e8b21d1 kubectl describe 2feb1503e29 Add ServiceCIDR to the REST Registry 391b25197b8 add apis to apiserver storage 632081a9078 add ServiceCIDR APIs 16363b6fb4a fix IPAddress.Name validation message df80775693f Include managed field comparison in test cc190e0ace1 add integration tests 26e3a03d12d Implement CEL and wire it with OIDC authenticator e411fd340c5 cluster/gce: add webhook to replace PersistentVolumeLabel admission controller 7e35823690d cacher: when forgeting a watcher, call stopWatcherLocked multiple times bd233a2aa55 typo/api change in cadvisor / updated unwanted-dependencies.json 8b9fc325e28 Update to new cadvisor v0.48.1 e4776e0f85b avoid infinite recursion for type resolvers. fba2d2fadc1 Move invocation to not to cause ginkgo panic eb32969ab8f Lazy load OpenAPIV2 f23ab829bee Add feature toggle for OpenAPI V3 apply in kubectl e7216c66230 use OpenAPIV3 for kubectl diff 4f3b0b15182 Use OpenAPI V3 for client side SMP 6b971153d75 add new fields in v1alpha1 StructuredAuthenticationConfiguration 168e016947c Benchmark job with backoff limit per index 6ac7da1da87 encryptionconfig/controller: run unit tests faster c2a365c6a7d kubeadm: do not poll in TestEnsureAdminClusterRoleBindingImpl c2cb3209138 Revert "cacher: when forgeting a watcher, call stopWatcherLocked multiple times" 98a2f22e740 Revert "Make the decode function respect the timeout context" c7fcef18756 apiserver: set APF featuregate to ga 8e52fc72668 Minor fix to copy the required kubelet, service logs after the execution of the node e2e tests b02aad42fa4 Fix panic when process RunScorePlugins for cap out of range 31c76e9abb2 authz: add cel expression to webhook matchconditions 56ab6c59421 generated changes ae90a696772 volumeattributesclass and core api changes c4aab1036f6 Add sig OWNERS to registry packages 1daf1b0705f test that controller descriptors should not be feature gated fed11c0793f remove unnecessary gating of taint-eviction-controller descriptor 5b268e6daf5 apply: Add test for duplicates in associative lists 9d1847c1963 managedfields: Allow duplicates for built-in updates associative lists dec443b305a Update sigs.k8s.io/structured-merge-diff to v4.4.1 b8cd792b368 rename the roundtrip annotation, forbid it in v1 76463e21d4d KEP-4193: bound service account token improvements a968f51fa2f k8s.io/apiserver/storage/etcd: refactor etcd GetList. 84ec5e2eccb k8s.io/apiserver/storage/etcd: refactor etcd GetList. 8d804078f97 Add set ext library into Kubernetes and pick up the new option cel provides 70c1f2143fc Bump cel-go to v0.17.7 d3de47ceeed chore: updates api doc 2eb06e79ef3 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2 080fe8346da Fix typos in interface comments e95b7c6d8b8 feat: updates encryption config file watch logic to polling 6d59480a70f Try a single gcloud command for scp-ing all files bbca4a4b9ad cacher: when forgeting a watcher, call stopWatcherLocked multiple times f78b367db63 Make the decode function respect the timeout context 79c5b3ca6fd Mirror apiserver feature gates to kube feature gates file for consistent enablement ccda2d6fd41 kube-controller-manager: Decouple TaintManager from NodeLifeCycleController (KEP-3902) 233bc2449d9 apiserver: fix apf enablement with runtime-config acd60896597 apiserver: remove prerelease annotation for flowcontrol v1 25447b95ad2 apiserver: add testdata for flowcontrol v1 730d10a8fb9 apiserver: add generated files for flowcontrol api change 9fd2ab419ad apiserver: allow zero value for the 'nominalConcurrencyShares' field 430c226709b apiserver: fix lint issue, defaulting and validation test for flowcontrol v1 90c091dedad apiserver: add pre-lifecycle replacement for flowcontrol v1beta3 17bda3c3e05 apiserver: apf controller, bootstrap, tests should use flowcontrol v1 API 25aebca8d54 apiserver: add etcd data and storage version hash for apf v1 5972037ffd6 apiserver: generate code for apf flowcontrol v1 API 03a9ad200d7 apiserver: remove copied generated files b24dd44904e apiserver: enable apf v1 API 5cb03064d95 apiserver: update copy, rename v1beta3 to v1 dc723080939 apiserver: copy apf v1beta3 to v1 05076de57fc kubeadm: poll additional CRB create calls for kubeadm:cluster-admins 5a20ff16173 fix wrong controller name for ephemeralController afc6c03ba74 Pass through static overrides in addtion to cgo overrides feb0e2fc2f5 Fix flaky test for services that shouldn't be available when PublishNotReadyAddresses is false 3a308140cd5 Fix e2e 2c2fa2107a6 deprecate the kubeProxyVersion field of v1.Node 070e7a38cb6 generic set 36d6917ae16 valid error for creation and update from valid to invalid only - using an option AllowNamespacedSysctlsForHostNetAndHostIPC 9a8ccdebc5a use sysctl utils to do pod spec validation 11de9543ee7 move sysctl namespace and some funcs to component helpers util 4321652d13f reject pod creation for hostNet pod with net sysctl; hostIPC pod with ipc sysctl 6614a29f470 OpenAPIResourcesGetter allows lazy-loading OpenAPI V2 04b21126e58 Add cel new validator into Kubernetes. 9ae77364e95 pkg/proxy: configure tcp-be-liberal a375aa28ee3 pkg/proxy: move get kernel version out of ipvs proxier c1fd3f5f648 suppress per-expression cost limit for unmutated versions. 4bb7dc224c5 metrics: publish metrics from ratcheting across a request e50cc47a068 Improve execution time for job e2e tests 8c72be3b74e ratcheting: add benchmark 7a91051caa1 cleanup: Refactor BaseEndpointInfo to cache IP and Port values c7842d9c63f narrow down the scope of EnqueueExtensions to subscribe less cluster events 3f8e6d6f77f etcd: Build image 3.5.10 a73725d7999 Promote SidecarContainers feature to beta 1591a0e132c add unit tests for NewControllerDescriptors 44cac266673 move start controller pre- and post- checks/actions out of StartControllers b7689672802 move aliases into each registrable controller a85779b4dfe include ServiceAccountTokenController in the NewControllerDescriptors to make it more generic 27a77e0ef3c Encapsulate KCM controllers with their metadata 77dfd63d1db fix volume conformance e2e test break other test 77e0adeb31d KEP-127: Update PSS based on feature gate b0491d71bd5 Support skipping pulling addons image. 760abc2a821 bump gomega to 1.29.0 5925dc07758 LegacyServiceAccountTokenCleanUp beta 69b9d50f9d0 e2e_node: mark CDI test as NodeSpecialFeature a9b1adbafc7 [KMSv2] promote KMSv2 and KMSv2KDF to GA 9f06eb4ca2a don't run these tests on aws e98c33bfaf2 switch feature flag to beta for pod replacement policy and add e2e test af14f97cba7 sample device plugin: fix incorrect Errorf invocation fcc55280b01 Use k8s.io/utils/ptr in pkg/proxy (#121154) b6afba18fb1 verify-file-sizes.sh: ensure that no large binary files get added fd132665a8a extend VAP status controller for extensions type checking. 3f73cdcf2ad extend SchemaResolver for more types of schemas. 38fecc8319d opportunistically attempt to refresh RESTMapper 05cd3e66ef5 simplified e2e test for CRD typechecking. 60a602f1701 gce: fix test for non-existing instance in cloud 4a640ea384a cloud-node-lifecycle controller: add fallback for empty providerID in shutdown 84faaf4427f Prevent sampledeviceplugin binary commit 7fc42189b19 Add back k8s.io/kms/internal/plugins/_mock/go.* 110ffa13b7d Delete binary file e07d898cfd2 Make StatefulSet restart pods with phase Succeeded 27f6fb2fa7e hack/tools: golangci-lint v1.55.1 6302f011211 e2e node: fix broken assertion d0a5cd16da8 e2e upgrades: fix broken assertion fb872e86384 test: fix storage status update test 53339894a1c enable PersistentVolumeLastPhaseTransitionTime feature gate for status update test 071a67d8c29 export time function 9cfd96dbb5e graduate PersistentVolumeLastPhaseTransitionTime to beta c6b42c8a72f Make e2e node image ID test more flexible 517efd64425 cluster/gce: set KUBE_WATCHLIST_INCONSISTENCY_DETECTOR when requested by a CI job 837090135f8 kubeadm: make super-admin.conf changes to app/cmd 30ed50d32e3 kubeadm: make super-admin.conf changes in app/phases d0328df04e0 add time tracking to CorrelatedObject 1165609036c Add metric for e2e pod startup latency including image pull 702d911e226 working-config-otel e7a9a148489 replace CEL ValidateWithRatcheting with variadic options f71040f620e Remove the usage of feature gate 0ac35fe44f4 Update security contacts for sig-cli 8d3a25c7c98 [KMSv2] Add tracing c2a04fa1cf5 kubeadm: fix export comments to make golangci-lint happy f91228ee719 Unexport BaseEndpointInfo fields, fix getter names e3357d0c5f3 Clean up Endpoint / BaseEndpointInfo a bit 2879ec10d50 Rewrite ipvs/iptables tests that manually construct BaseEndpointInfo 27bb66fd7b7 cleanup: rename failedPlugin to plugin in framework.Status 2a8982b27b8 Remove problematic Dbus restart test 39df946c066 golangci-lint: enable doc comment checking for cmd/kubeadm 3738111337e Add unit tests 08b942028f9 DRA: call plugins for claims even if exist in cache 69ca55f1368 Do not preallocate node for Job e2e tests to fix flakes 98bed52fdd6 kubeadm: make super-admin.conf changes in app/constants e511edf11f7 Fix SELinux unit tests 2f5903b4cf4 Move SELinux warning metric to be counted once per pod d20edf697aa verify-golangci-lint.sh: support arbitrary GOBIN a92c1269e25 test: fixes hot reload flake 71a1565d065 revert: reverts fixes for TestEncryptionConfigHotReload flake 83f5b5c240e Deep disablement for APF based on --enable-priority-and-fairness. 8e0be64b8ff remove data race on the devicemanager client plugin aeceec72bbd add integration tests 97e72d792cc Remove independent tests for metrics 84cd6dbb0aa use the latest semver version for the badge b3525946d5e ratcheting: provide a shared correlated object dfeab6eca8c fetch a shared correlated object off the validation options if it exists 0a19b5ab6e2 fix usage 432e8937cfb add variadic options to ValidateUpdate 9e2821d585e revert changes to TestMetricsOnSuccesses for job pods creation total metric 055e926a924 e2e: Increases the memory limit for downward API tests 88c0a8be1bd feat: add job_pods_creation_total metric b1ce529b2ac Remove unnecessary GetIndexer 1224e0e881d Add PodHostIPs test f8a4e343a10 Fix tracking of terminating Pods when nothing else changes (#121342) 12a972cc1e6 Promote KEP-2681 to beta in 1.29 2cea51221a3 hack/logcheck.conf: enable contextual logging in kube-scheduler bd8ac8c7fac kube-scheduler: checked err for golangci-lint b0a73213d6d kube-scheduler: convert the remaining part to use contextual logging bbb4a88bbbc e2e_node: implement DevicePluginCDIDevices test case bf2f640ea2c Add more test cases ensuring nextScheduleTimeDuration is never < 0 16b3acc27a1 cleanup UnknownCRISocket for unit tests 71bedf5cb28 kubeadm: skip CRI detection for 'kubeadm upgrade diff' 20c8b797a3c Indicate Job Backoff Limit Per Index reason consts are beta b06675724d6 Add e2e test for backoffLimitPerIndex 4b59d2b05c0 kube-proxy: Optionally do privileged configs only 35f4d29d735 Fix unit test b052c7b7cdf Update npd version to 0.8.13 in configure.sh a6f5246565b integration test for empty & unstructured. 168998e87bf StreamTranslator and FallbackExecutor for WebSockets c6b3a2f477c allow empty object to be CEL value. 8ae0d390d77 add container filesystem to CRI api 93951bc00d3 Add stability tests for CEL cost estimation. d9c967113f9 tests: fixes flake in TestEncryptionConfigHotReload 6d580da03fd ratcheting: ratchet CEL expressions for no-op updates 27afb7d75d2 e2e storage: use framework to tag tests 8a42be978bf Add CDI support to the sample device plugin d9131d5b390 [KMSv2] Drop the apimachinery 6d02fbdbe07 Revert "Promote KEP-2681 to beta in 1.29" 55e3662b72d dra: refactoring overall flow of prepare/unprepare resources fa83d5fef17 node: e2e: topology-mgr: Disambiguage cores from cpus e1f5eb3f142 node: e2e: topology-mgr: Determine threads per core e74f2d41aab Allow using upper and lower case true|false when setting kubectl feature flags 074a8b00840 KEP-3638: Promote plugin resolution to beta (#120663) b31e7793d0d client-go/reflector: introduce a data consistency mechanism for the watch-list feature. d5085c9cbe5 Bumped the fsnotify from version v1.6.0 to v1.7.0 fb6b10997a7 cleanup: remove useless test 3f4d3b67682 Cleanup paging parameters in etcd3 store 2dbd4055834 Graduate ReadWriteOncePod to GA 42945ea6dc8 update suspend test to match other test cases 49c947ba15a metrics: add and use ImageGarbageCollectedTotal d8a5cd59c08 kubelet/images: add unit test for MaxAge 914aa746c18 kubelet/images: add and use freeOldImages function 76e623098c8 kubelet config validation: add validation for image max gc age d992ea4b309 kubelet: add and use ImageMaximumGCAge in KubeletConfiguration 9a58f6c4fb4 Forbid creating CronJob with TZ or CRON_TZ, but allow updates 34294cd67f2 locking feature-gate for ready pods job status b386120da23 Remove storageConfig.Paging parameter 106f58686d5 Remove disablePaging param b0d04d933be Introduce the job_finished_indexes_total metric 6ab48d1adc5 e2e storage: remove dot at end of ginkgo.It text a913abe191b e2e test for checking ready of job status fb0ffb07a76 kubeadm coredns use drop ALL instead of all 81b960efefe e2e framework: allow random ordering of tags and text, fix some functions a4efb6fc130 kubeadm: add debug log for kubeProxyConfigFromCluster 4f5bc7e8d76 fix based on reviews 82c0cbf6d84 e2e: stop using deprecated framework.ExpectNotEqual eb3a11ea142 registry/core: wire NotFound getter instead of nil cbe3d897629 Promote CRD validation rule to stable fb9f2f5bc59 DRA: e2e: test non-graceful node shutdown 32fdb551920 Use Patch instead of SSA for Pod Disruption condition a7adde53be4 bump golang.org/grpc to v1.56.3 a1d2df81fb3 e2e: add [Environment:NotInUserNS] tag to sysctl tests 441d2b40dfd Undeprecated kubelet cloud-provider flag 4a87ee26998 use PollUntilContextCancel to replace PollImmediateUntilWithContext in test cf836309dc2 Add validation for --storage-media-type option. 8775d805fa6 use PollUntilContextTimeout to replace PollImmediateWithContext in test 1a41ed394d6 convert pointer to ptr for sig-apps integration tests 27bb40a9d83 Remove GAed feature gates OpenAPIV3 c5e25637c64 fix typo a25b87d84a3 e2e apimachinery: use feature gate ceba3be6b58 e2e: add more feature definitions 9be1b68ad03 Update staging/src/k8s.io/api/batch/v1/types.go 00c21ced3ab Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate cb5dc46edf7 feature(scheduler): simplify QueueingHint by introducing new statuses 6dd0ad5c0f3 Graduate BackoffLimitPerIndex to Beta 8ae32771523 kubeadm: remove unused DNSAddOnType from v1beta4 API 259dd93e719 kubeadm: skip CRI detection for 'kubeadm config validate' 3da7802b7c5 kubeadm: cleanup UnknownCRISocket from staticpods test aee73352853 add new test cases 220d5c2e543 remove dead code in test 79f9bfdc8e5 fix wait.PollUntilContextCancel immediately executes condition once 8dff3fcb0c8 fix: Use upper case `ALL` in drop capabilities 0a6d9531f40 update generated code and openapi 4d21a23be35 pin openapi 31a1c00e49c cleanup: move unstructured check earlier in status update d151f227803 cleanup: remove unused versions of cel validators and structural schemas from CRD strategy cc0264f7fc8 cleanup: check unstructured for Validate(Update) before validating ced56a6adab Restrict supported media types for new apiservers. f5cb2ada944 k8s.io/kms: drop direct dependency on klog db8b3031561 Modify mostRecentScheduleTime to return more detailed information about missed schedules 6c4f71b31ce Fix spelling 02b0b79eda5 CHANGELOG: Update directory for v1.25.15 release 9cf35f40016 CHANGELOG: Update directory for v1.26.10 release b7477c31b03 update versioned types 4780a75d5fb CHANGELOG: Update directory for v1.27.7 release d7556769e7f Job: Replace deprecated wait functions with supported one 1babd6f0e3f CHANGELOG: Update directory for v1.28.3 release 989aadda830 Revert "KEP 3085: check PodReadyToStartContainers condition after volume create" d5d3c26337a feature(scheduler): implement matchLabelKeys in PodAffinity and PodAntiAffinity 2508f468a8f kubelet/userns: Add more unit tests 0dd495e6dc2 Address review comments 7ff866463af Refactor watch event serialization to allow caching 0cda42af7ab Unregister group path from apiserver when the group no longer exists a50d83c669e Add basic authz config integration test 22e5a806a73 Add --authorization-config flag to apiserver 75f20ee64da update pretty param description e312d93a66a kubeadm: increase ut coverage for bootstraptoken/node 7bcc98c46b9 sidecars: terminate sidecars after main containers c8b65422e58 Drop usage of deprecated method NewNamedRateLimitingQueue 201c30fba82 Job: Handle error returned from AddEventHandler function (#119917) 7a1ac18bc84 Fix panic if there are more terminating pods than active pods fad4430f9e6 cleanup: remove redundant logic in PodReplacementPolicy integration tests 007ef653ad0 add feature gates for authorization config 2ccf7e8e49b fix: minor lint issues and redundant check 056b25dfcab fix: improve PodReplacementPolicy integration test case names and update deprecated methods bf32f87d00e skip CEL validations for enum violation. e73edf7764f fix: typo in indexed & non-indexed completion policies for failed pod replacement policy integration tests bcf1c113f4e cleanup: add new test cases for failed pod replacement policy instead of editing existing ones 72e67e0ef0d kubeapiserver/options: fix cloud provider validation 911700e64e3 Fix typos in markdown 2bf2c4f3a41 staging/apiserver: correct KubeConfigFile type in authorization types b500c3d6930 Correct the label selector used in TestSampleAPIServer c281c70bac3 kubeadm: remove reference to UnknownCRISocket from getInitConfigurationFromCluster 7d077f9271e e2e: move AllNodesReady check to DeferCleanup ca6fda05ce5 Restart containers in right order after the podSandboxChanged 75612848195 Remove GA featuregate about CSIMigrationvSphere in 1.29 e3c58378bc3 Revert "kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors" 9a354fc9d03 node: sample-dp: Add retry to handle device plugin restart failure d0d133298d9 node: sample-dp: Use fsnotify for kubelet restart detection f46cdf1428c node: sample-dp: set default value for `pluginSocksDir` 211d8cc80a7 node: sample-dp: stubRegisterControlFunc for controlling registration c4c9d61d66f node: sample-dp: Handle re-registration for controlled registrations 6714e678d33 node: sample-dp: register by default and re-register on restarts 465d3bb65b9 DRA: notify ResourceClaim or ResourceClass of wrong params d2b803246af Don't reuse the device allocated to the restartable init container a45a813d5e3 kubeadm: fix "eliptic" typo in API package fced85b27a9 run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly 1715fc0ca06 Fix issue in enabling evented pleg feature gate defda81bf8b kubeadm: remove `ClusterConfiguration` parameter from preflight check 5d5958e3389 fix ImageLocality plugin score is inconsistent 76059738a4f update standard protocols to match KEP3726 4ae7150f05d remove pc pvc status endpoints 757597fabfa track unmaintained repo - mailru/easyjson 2e8f66afb39 Promote PV/PVC status e2e test to Conformance 28f335a3397 kubelet/images: refactor image gc unit tests e22ebf13a95 kubelet/images: refactor freeImage and imagesInEvictionOrder d6d2c5775f1 Set gate SkipReadOnlyValidationGCE to Deprecated 56023e00cbc cri-api: compress OWNERS files f2b723a130e fix: improve assertion for Failed PodReplacementPolicy integration test cases e3098225eaf bump kube-openapi b30c6bdff81 Fix v3 spec d1a6c0ae7df Update cri-api change in v1.29.0 2f923e356e0 k8s.io/apiserver/storage: add a new TestCreate case. 5d0f8530f6b fix Huge Pages failing test 7d31b5ffd0a Add test case for sandbox condition if pod fails to mount volume from a missing secret dd9c3358f5e Revert "podresources: e2e: force eager connection" 27abf99148b Remove GA featuregate about ProbeTerminationGracePeriod in 1.29 5c0618b848d codegen 011c65e17e2 configure npd to run as daemonset on cos 39dcad8a19e Populate CRI filesystem info error bfda244e54e pkg/proxy: dual stack health checker 73a8965e2a9 Graduate DevicePluginCDIDevices to Beta f69e1fed82f Remove GAed feature gates TopologyManager 957adfac498 fix invalid log calls 8009530d77d kubeadm: FeatureGate MergeCLIArgumentsWithConfig is added for ignorePreflightErrors fed4f16a7ad Remove GAed feature gates SeccompDefault 33f2d487e2d Promote KEP-2681 to beta in 1.29 18c3b6fce43 Register metrics for apiserver handlers 56836608303 remove deprecated framework.ExpectNotEqual for node b548bbb8cf8 When reading pvc status allow bound to be a valid value 11b0eed9e7f Work around bug in gcloud when downloading logs 1132fd0afdf add tcp_fin_timeout, tcp_keepalive_intvl and tcp_keepalive_probes to safe sysctls 4ea6ec738cf pkg/proxy: add an ipFamily field to the winkernel proxier 6732c4110f3 kubeadm: fix uninvalid namespace field for clusterrole 332779a3b29 add a simple e2e test 3a96afdfefd implementation fa01dfdb0a4 validation 0f46033dca2 fixed miscalled function 9327f3a1734 api changes c2d473f0d43 remove ClusterCIDR 32d2afe42bc kubeadm: fill with the DefaultCRISocket when CRI socket detection is not required c72923b17ae Register UnauthenticatedHTTP2DOSMitigation into kube components fb1fc8b4a72 ratcheting: disable correlation by index d991ed56c29 comments: clear up correlateOldValueForChildAtNewIndex godoc 0ed67c9e41d cleanup: use swtich in CachedDeepEqual and add more comments 60c90fc0854 cleanup: consistently support nil receiver and document abb68591afd cleanup: clarify correlatedOldValueForChildAtNewIndex comment ddcbae734af Add a 0 × 0 case fb2e28b0702 Verify more carefully the results in the TestInt64AmountMul 26a4e06c92c k8s.io/apiserver/storage: add 3 new unit tests for delete. e1fa1df3ae8 cleanup: consistent interface{} and any 0495616230a cleanup: add godoc 4de3e73b8ac Add test cases for mostPositive and mostNegative 685ae024332 Add more unit tests 79325b6178d Multiply by a scalar 4381eb7237e quantity: Add multiplication methods 1ae54296291 add potential fixes for flakiness in eviction tests db8e106e3f6 Code Refactor: using struct option rather than a long list of parameters b0c7956a869 Bump distroless-iptables to v0.4.1 a34d2f3b134 fix limitrange flaky test 10151a5e38f kubelet/sysctl: update log level cd5db9b7f23 Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests 4dedabf2a65 test: fix boilerplate 80e378181ea add rundir folder to gitignore 800a8eaba7f Prevent rapid reset http2 DOS on API server 968d6b8a325 Update busybox SHA based image to match tag - 1.36.1-1 78ffa882be2 chore: updates api doc de5dcdc79b7 cleanup: fix missing manual selectors in strategy test 761cb18a688 cleanup: refactor job strategy tests; add test for generating selectors in PrepareForCreate test b9b436a0183 cleanup: extract generateSelector from Validate method in job strategy c94240e2e2e move kubelet constant for podreadytostart to staging 1d30a01186d Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.10 de01788deaa Switch to newer cos-gpu-installer - v2.1.9 adae1e33eae kubeadm: remove AlphaDisclaimer for certs phases 7b1d87383ec add kubelet policy skew test for kubeadm 5ad5ef1d0f6 Switch to newer cos-gpu-installer - v2.1.7 0149c1f8b31 test: few more correlatedobject test cases ba9347230e6 test: add correlatedobject test cases 15ae6cc1607 pkg/proxy: add flag to configure udp conntrack timeouts c08a9321eed cleanup: add header and fix spelling 27cb869e559 refactor: move correlatedObject to its own file b321e8bf0db refactor: make CachedDeepEqual independent of validation 921c0d01800 cleanup: add defaulting for job manual selector (#120206) c83e73ba571 CHANGELOG: Update directory for v1.29.0-alpha.2 release baac8bb573c k8s.io/apiserver/storage: add some ResourceVersion validation in GetList unit tests ebca5d438d9 k8s.io/apiserver/storage/etcd: refactor getCurrentState. 555c1b8091c bump kube-openapi 83760ae56c8 update openapi with required requestBody 5eb7fea3834 [go] Bump images, dependencies and versions to go 1.21.3 a504aed54d0 Add shortname ambiguity warning in shortcut expander (#117668) 7989400bef5 Fix concurrent write when filling PVC labels 54714686bc6 Modify test PVC to detect concurrent map write bug d7ee6b9d1bd fix possible panic if pod replacement policy is turned on and jobs do not set pod replacement policy 2c1836bc245 remove deprecated framework.ExpectEqual 990a46f9bde Update QueueingHInt's KEP b42b3f740a4 Pod Security admission allows net.ipv4.tcp_keepalive_time in v1.29+ 0167a9f833c mark net.ipv4.tcp_keepalive_time as a safe sysctl babac47c6f1 fix DevicePluginProbe node-e2e: pod and kubelet restarts 4acaf9ebed7 Add service name tests 438c0daab75 add rest of accessors to common.Schema 0f989046d06 kube-apiserver: move cloud provider validation into options 5de835d5d89 Add runtime handler field to ImageSpec Will be used by changes for image pull per runtime class in KEP 4216 80269d5d349 fix missing http.target trace attribute dc334b953d9 dependencies: update otel-go dependencies e76aad1813b refactor: use common.Schema in CorrelatedObject 83a1dbf885d refactor: export correlated fields e73f3c8cdb3 refactor: add methods for Key and Index on CorrelatedObject fc7c951d5a5 .: bump golang.org/x/net to v0.17.0 2032b742546 KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local 471e3ab8281 refactor: factor out object correlation 30cf9ed5677 refactor: directly implement ValueValidator 4fb5f1a6119 refactor: remove unnecessary lambda (noop) 19ecf93ec3d e2e: define features and node features f2d34426f86 e2e: enhance SIGDescribe 39b6916cbcc e2e: add wrapper functions to annotate tests 535ab743461 e2e framework: track and report internal bugs 3afdcc03ea5 e2e framework: list specs and labels aa4d2fc5edf e2e storage: remove useless info message 581af9ba6da kube-apiserver: use only one client in apiserver controllers 215c4627ef9 Update SECURITY_CONTACTS e9957d79aae make update 0eacff0baf9 compatibility (adapt testdata) b7ee8e84221 drop UID from the IPAddress.Spec.ParentRef f538be659c7 hack: fix update of golangci-lint verify scripts 6c395eb098d Fix "Endpoint" vs "Endpoints" in proxy type names 00ae26cda8f Create e2e test for PV/PVC status endpoints b190ea0c966 hack: update golangci-lint verify scripts 302d350e88e set maxLength to longest enum. d4a5a085a84 Improve error message in cpu assignment logic 79355caa565 dependencies: ginkgo v2.13.0, gomega v1.28.0 52c58d970e5 fix data race in apf unit test a6b0a6c484d Bump distroless-iptables to v0.3.3 f3c786cbda7 Fix regression in cmd/kube-proxy/app unit test speed e86e756c27e Update publishing-bot rules for active release branches that uses go1.20 to Go 1.20.9 0be5fdb5ced Add volume plugin label to SELinux metrics 137ad9bf2b5 clean up deprecated funcs in e2e framework d5d7fb595ee e2e_node: stop using deprecated framework.ExpectEqual 5f74461bcd7 e2e_apimachinery: stop using deprecated framework.ExpectEqual 122ff5a212a Move grpc rate limitter from podresource folder 9cca527c4b3 Migrated `pkg/scheduler/framework/plugins/examples/` to use contextual logging 62683c8d959 pkg/proxy/ipvs: hardening lb source ranges filtering ccc6458683d e2e_node: add testcase to check status of pod ready to start condition are set to false after terminating c3bf541edee kubeadm: clean up unnecessary references to UnknownCRISocket bb02d0febab fix incorrect Consistently due to missing assignment when create a newAsyncAssertion 7cba35f6519 nodeports: scheduler queueing hints 20db4ef3d64 kubeadm: fix wrong ut for util/etcd 4a8267f26be kubectl: ensure '--duration' must be positive for 'kubectl create token' command 3c4512c6ccc hpa: always update status metrics when updating the replica count 89adbb4b4aa Unit & integration tests for OpenAPIV2 AddUpdateAPIService 83fb504e46c Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler 3ee2f27e5bb kubelet: cloud-provider external addresses 619abfec70a [go] Bump images, dependencies and versions to go 1.21.2 8b5f30ef096 Don't reuse CPU set of a restartable init container e8e22f645d0 kubeadm: Optimize the logic to override the arguments 8510057e2da kubeadm: increase ut converage for bootstraptoken/clusterinfo a888fef242f Use timeout function to detect transient errors 1b489963c8d Add nil checks for hpa object target type values 0f632988297 generated: UPDATE_COMPATIBILITY_FIXTURE_DATA 3808812de7e ValidatingAdmissionPolicySpec: Variables omitempty. a213edae2a6 Add package-level godoc to pkg/kubelet/cm b2f0052d27a Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat b96a074bcdf convert pointer to ptr for job controller 1d519f1b087 cluster-bootstrap: make IsValidBootstrapToken() be in constant-time 914210ee9a6 revert back to IsUnexpectedCloseError check e1ae9060480 Close websocket heartbeat explicitly when unexpected closure received c03579bfa40 typed variables support. 4d157bb1427 add single boolean to composition e2e test. 69a3e3d1089 Add --extra-peer in conversion in kube_codegen 3de0d9afbb3 pkg/kubeapiserver: pass authorizer in top level while building from legacy options 4b391501795 reflector: fallback to the previous mode on any error 11ce6d29157 k8s.io/apiserver: fix levelling of the name field in AuthorizationConfiguration 5f8fc30b2c0 Added locks on request tracker before accessing fields (#120599) 9b32a47ab65 integration/apimachinery: add TestReflectorWatchListFallback integration test c65fe450d8a Generated files 26f113be2fc reflector: close an established watcher when the StopCh was closed f17468ff060 Fixs a validation error in teh admission registration API 6d759aac910 delete addon-manager test e7b2aeee930 Fix API docs for audit APIs 38935b787ea Do not fail volume attach operation at kubelet if staging target path already exists on windows worker node. 243ba5fb6b6 remove an e2e test specific to kubeup clusters 98bad643cde e2e_apps: stop using deprecated framework.ExpectEqual 566fad5eda3 add metrics to the ipallocator repair loop 4eff70dcf9f add metrics to the nodeport allocator repair loop 6c9ddf300cf update generated 9242cb19348 Rearrange kube-proxy config fields / CLI flags to make more sense. 44cb330aa00 Improve kube-proxy config / CLI documentation 0b76e7b69fb Fixing attempt to deploy past allocatable memory limits test on Windows d2a3184c47c remove pkg/encrypt and pkg/value in kms e764e83fe88 remove mock aes, latency and ratelimit wrapper remote services 2f5708833a5 [KMSv2] pkcs11 reference implementation using SoftHSM 74180aaf661 Fix scalability concerns in test runs 5ebde41efb5 Refactoring variable declaration and value setting 0e8a1f18163 e2e: remove redundant spaces in test names 6200eb04aff use generic sets in scheduler e320fadebe6 kubeadm: add unit test for phases/bootstraptoken/node/token.go d9002176649 fix missed branch - targets when building using arm64 61603d36d73 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec 7437ad2617a Add/update prechecks to verify-govulncheck.sh 59ad81a6157 controller/clusterauthenticationtrust: complete event filter a0610a97b3d pkg/kubelet/cm: Remove deprecated sets.String and sets.Int 63950491764 controlplane: make option structs uniformly optional a97f4b7a312 endpoints/metrics: define watchListLatencies metric and associated functions 5dc540ff57e k8s.io/client-go/tools/events: pass context into EventSink methods 27a68aee3a4 k8s.io/client-go/tools: support context for event recording 772b1f4cd84 handlers/watch: calculate and record WatchList latency metric. 4d2d9947bf8 Deprecate cloud-provider/cloud-config in apiserver CLI 394bcaf1820 Only configure swap if available on node 2b973806bc7 Remove remaining unnecessary assertIPTablesRulesEqual checks de077f448e9 Rename TestNonLocalExternalIPs to TestExternalTrafficPolicyCluster 19f19e2f4f9 Merge the `ExternalTrafficPolicy: Local` tests together ff5f5bc1613 Merge several NodePort tests into TestNodePorts f38231d5687 Merge all the "reject when no endpoints" tests together 2435da11d5d Rewrite TestClusterIPEndpointsMore as TestClusterIPGeneral ce7ffa81754 Extend iptables packet tracer to support multiple node IPs 2172ea60836 Fix typos: update Enpoint to Endpoint 6297067ff1a apf: request ejected from queue should use reason 'time-out' 11ef9514dad apf: remove RequestWaitLimit from queueset config da8a4722066 apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function f39213a7e44 apf: use context for queue wait 52f5093d775 Build kubelet with CGO for sig-node e2e tests (not ginkgo) 9b32d2f67d4 Default clientset_pkg and clientset_name variables 36146ad686a e2e dra: enhance test driver 46835f8792d CHANGELOG: Update directory for v1.29.0-alpha.1 release cdcf49ea12e Fix 120758 - prevent cache Load on uninitialized spec 0ba37e70b6e k8s.io/dynamic-resource-allocation: fix potential scheduling deadlock 2ce4f85a465 update verify script to check deprecated fields e5f25ccb620 k8s.io/dynamic-resource-allocation: fix compatibility with Kubernetes 1.27 70ae9c441ce storage/util: introduce HasInitialEventsEndBookmarkAnnotation e1a572fb2ed update filepath-securejoin dependency to 0.2.4 to fix security vulnerability 4a74958b2df deflake TestWebSocketClient_HeartbeatSucceeds ca562fd280a storage/etcd: the watcher supports the API streaming 84d5e7c8fac remove RetroactiveDefaultStorageClass feature gate 1a68195626a kubeadm: fix the bug that kubeadm always do CRI detection when --config is passed even if it is not required by subcommand 1d88bf9789b scheduler/nodeaffinity: reduce pod scheduling latency 72b68b8003c Remove dpasiukevich from cluster/addons/dns OWNERS b71d7f9305c use generic Set in scheduler 7c5219438df Remove an old compatibility check/warning 5c80007eccb cluster-bootstrap: make randBytes() be in constant-time 1b602ffd9a4 Bump Konnectivity to 0.28.0 06deb49d2c9 Fix panic testing intree vSphere dynamic PV. 0910fe4b983 Extend iptables packet tracer to check the protocol a25fb03c00a Add assertIPTablesChainEquals, to streamline a few tests 0ab0e404b83 Drop the now-unused assertIPTablesRulesNotEqual 4438f5e436b Remove assertIPTablesRulesEqual checks from terminating endpoints tests d57a51d0a90 Remove assertIPTablesRulesEqual from InternalTrafficPolicy test 43db55e93de Rename and extend TestOverallIPTablesRulesWithMultipleServices a96b97e40c0 storage/etcd3/metrics: add unit test for apiserver_storage_objects 534a0941e8d kubeadm: change kubelet skew to apiserver to n-3 0e238c4c28f storage/testing/watcher_tests: add new flavour to RunWatchSemantics test and fill the gap 9345da51ac4 fix comment mistake, run "make update" 45a776d5ff4 update rules to switch from deprecated dir field 9fb77db9b93 e2e: set liveness probe timeout seconds for conformance test 5d56f7cf86f Apimeta Set/RemoveStatusCondition: Indicate change b489beb365f Remove an old compatibility check/warning eb109e39480 e2e: bootstrap vsphere tests earlier d3d1827c054 Use local isCgroup2UnifiedMode consistently 8a31bb6786c workqueue unit tests to assert collapsing behaviors dc5cfe3cff2 storage/testing/watcher_tests: refactor RunWatchSemantics tests b5bffb6d97f kubeadm: add v1beta4.ClusterConfiguration.EncryptionAlgorithm d8cf68e75fb kubeadm: Nominate myself (chendave) as kubeadm approver 0786fcc941b kubeadm: Remove the support of configurable component configs 3eb6c4d368e Migrated `pkg/scheduler/framework/plugins/volumebinding` to contextual logging 0105a002bc6 when the hint fn returns error, the scheduling queue logs the error and treats it as QueueAfterBackoff. ed76c371df9 kubelet/lifecycle handlers: refactor port resolver e00551fe5d4 Allow storage migration of CTB without attest authorization c816601d834 reintroduce resourcequota.NewMonitor 7cfdb792d69 Revert "Skip kube-dns tests if coredns is installed" f5d915b5947 topology-mgr: metrics: Deflake Topology Manager metrics e2e tests a7466f44e01 Change the scheduler plugins PluginFactory function to use context parameter to pass logger - Migrated pkg/scheduler/framework/plugins/nodevolumelimits to use contextual logging - Fix golangci-lint validation failed - Check for plugins creation err 41584bde233 fix code style de244b2678f Promote StorageClass e2e test to Conformance b23575d0fcf remove storageclass endpoints a62eb45ae2b Rename job reasons to JobReasons as part of api review 301aa69fec5 cronjob controller: ensure already existing jobs are added to Active list of cronjobs 5ed60a72f62 Revert "Make StatefulSet restart pods with phase Succeeded" 5341890c96f add missing labels to kube-dns deployment 9e060590e6f skip kube-dns tests if kube-dns is missing 2a827767458 change rolling update logic to exclude sunsetting nodes 04668c00432 cache/reflector: check the value of the initial-events-end annotation 83c37acb21f e2e framework: adapt unit test to Go 1.22 5c28fd28478 vsphere: adapt to govmomi bump 4b60c18183f storage/etcd3/watcher_test: refactor TestWatchErrorWhenNoNewFunc to a table test 26a395ecc28 Trigger CI 12c0c08e658 fix data race in test 9533cfe2eed fix: add unit test bad0593a686 fix kubelet image gc 91bb75883c6 storage/testing/watcher_tests: make TestCacherWatchSemantics storage agnostic 272b23cc7ad kubelet: fix log when using --reserved-cpus 42356bfbb3e move common logic of highestSupportedVersion to util package fc6b19a4ba6 .: bump govmomi to v0.30.6 afbb1a6ef98 storage/testing/watcher_tests: move TestCacherWatchSemantics (no-op) 3a96baf3fa8 storage/testing/utils: add helper functions c8b9d64d81f scheduler test: unify util to fake pod. b953708fa93 Update 1.29 Release Notes team a919079ff31 Check --show-events in kubectl describe pvc (#120380) 1a27531d2e1 Fix for Kubeproxy Mock framework where hcn object is holding always new object and not the pointer reference. 108d1955954 use AuthorizationConfiguration in kube-apiserver for storing authorizer config 52c582ca77c Bootstrap API Types for Structured Authorization Configuration bbb905c794c remove gce healthcheck interval e2e lb test b59d4afd14e fix typo exeucting => executing 62275e3cc8c fix typo dervied => derived 79a7833ade0 fix typo Mininum => Minimum 6e3ebdc68e7 fix typo Conext => Context 409b46576ff bump github.com/emicklei/go-restful/v3 to v3.11.0. b4e5b868a8e Don't reuse memory of a restartable init container 10caecb3b22 kubectl prune v2: switch to contains-group-kinds annotation 6c59e8be5e2 hack/update-vendor.sh dad1b2a4306 Fixup kube-openapi/pkg/cached changes e1ffbacb7ae go.mod 7cac1dcf678 dra scheduler: fall back to SSA for PodSchedulingContext updates 39af594f312 storage/testing: a simple refactor 40618b765cc add loging and bump timers to avoid races 3cb0b520d60 Scheduler CSI tests: switch maxVols to int32 79d0dde4a83 replace hardcode string with exists variable 9b50af1f4f8 Use a wider-range of metric buckets for PodStartDuration 62267518b83 Fix systemd unit string matchs c6e9fba79b8 move reasons to api package for job controller e22f8ed553c add CAP_NET_RAW to netadmin profile and remove privileged 0288367db80 test-e2e: Retrigger the RBD image post merge job 28dbe8a34dc scheduler/NodeUnschedulable: reduce pod scheduling latency 2f10dd0a841 CHANGELOG: Update directory for v1.25.14 release 2a7902f7c7b CHANGELOG: Update directory for v1.26.9 release 7c98d3fffd7 CHANGELOG: Update directory for v1.27.6 release 309876b5d78 CHANGELOG: Update directory for v1.28.2 release 710dceded51 Look for pods in ownerReferences of PVC (#120427) 80c8074e3be service controller: limit logging node names to 50. 349e3ebf80b service controller: improve node lifecycle updates - update nodes if providerID has changed 21e26486ac3 sync Service API status rest storage 239ce7c52b1 e2e_network:stop using deprecated framework.ExpectNotEqual 7fc11f47ff4 Mark a volume as uncertain-attached after detach error 99903071469 kube-scheduler: drop deprecated pointer package 9e34aa306cd Update hack/verify-govulncheck.sh 5fcffcf4e48 Add APIGroup ratcheting validation to PVC.DataSource af151eeba2c specifically check that the pod was successful 7710128636a kms: remove livez check 15ce5dd9903 kubeadm: fix flaky-test TestManifestFilesAreEqual 4f20a72ea00 variable name should not conflit with import package, replace the variable name 084deb7a7cf clarify the description of the metric apiserver_storage_objects 9da533ced6f API Chunking conformance metadata 3d91ffc6f9b /cmd/kubeadm,/test/e2e*: update OWNERS for fabriziopandini & RA489 4e0c8a97521 kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1 4d105eb1ce8 add TestUnmarshalJson for UniversalUnmarshal 819eddaf9a4 scheduler: fix TestIncomingPodsMetrics unit test 6fbb8ec7e44 Move scheduler testing utils to /scheduler/testing 868adeb3bdb Update IPPVS e2e tests for containerd version above 1.6.9 6b4ab616a2c Increase range of job_sync_duration_seconds d765e40a988 pass GOTOOLCHAIN to build containers 7ad0e451aca remove unnecessary kube::golang::verify_go_version calls 43b434f66a8 sig-node: add rphillips to reviewers d1b5a9953a0 handle GOTOOLCHAIN in kube::golang::verify_go_version 4d55c0687db Reuse SupportedMediaTypes for CR content-type negotiation. 09d64ed7d4f promote sli metrics to stable 0df4a69f5c9 Kube-proxy: Get nodeIPs for both families with dual-stack (#119525) 0d3eafdfa39 fix(scheduling_queue): always put Pods with no unschedulable plugins into activeQ/backoffQ (#119105) e6435e98eda promote component SLIs to GA; remove feature gates for component slis e2c1c0d34a6 kubeadm: drop deprecated pointer package 357d7804b8f kube-proxy: drop deprecated pointer package 678b958567e use universal decoder and add a check on default dns Policy of static pod for test 1fb4eee94e0 Use container log instead of termination log 190f9d0d4b9 Add govulncheck script to expose go vulnerabilities fc3ee07b512 e2e pods: fix WaitForPodsResponding retry 6f9140e421c DRA scheduler: stop allocating before deallocation 2dd7db306a6 Update modules.txt 61ecc2ad884 Retry operations if CSI Driver Isn't Found by Treating this Error as Transient d3eb082568c Create a node startup latency tracker 2d86c333f57 add test case for generating etcd manifests 912041ce41b kubeadm: fix diff order and add test for new default value manifest 41b62c4dd71 Promote PV/PVC e2e test to Conformance 0936c8de59f remove persistentvolume endpoints from pending_eligible_endpoints.yaml f4467457776 Improve logging on kube-proxy exit df5c1bb1ea1 added documentation about the format of certificateKey 43ccf6c4e8f kmsv2: add apiserver identity to metrics c1a0aa08e31 Add cni plugin auto Arch and OS selection b443a841e30 kubeadm: add log for static pod manifest diff f135eed37b9 update codegen d7264d0af03 Make StatefulSet restart pods with phase Succeeded 4e73634b531 scheduler: start scheduling attempt with clean UnschedulablePlugins 7e4b5d0d49a Final Fix f499b4f8918 Bump distroless-iptables to v0.3.2 18932d970ef [releng] Update publishing-bot rules for active release branches that use go1.20 to Go 1.20.8 93e3b07e11c [cluster/gce] Add KCM specific args 48f453d6498 cloud-provider: Log additional options aa89e6dc978 Use ptr.To to retrieve intstr addresses 9feaefb5cbc Increase ut for kubeadm phases init addon rename field casename to name do go lint check Update addons_test.go to remove whitespace 5e0931336b5 kubelet: fix metric container_start_time_seconds's timestamp 3e2bad02dcf kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate a0a8765027a fix: update thirdpartyresources refs 5c7dac2d772 dra scheduler: refactor PodSchedulingContext updates 43c05e98ca4 cleanup: Replace the deprecated NewMemCacheClient with memory.NewMemCacheClient a69f56e1375 fix: check if initsystem service exists 7dea3d6c3bf New mock test framework for windows kubeproxy. 975da2fb239 fix typo in client-go package 3a1a67e33d7 add aojea as controplane reviewer cc77b97c5e9 add aojea as client-go approver 7a13b11af0e update e2e import restrictions 6c973f01d23 reduce CPU requests for fluentd-gcp to fix failing tests 08006c842fd apiserver: rename request body size metric 8451c80b601 pin gengo 93d93258b19 bump: upgrade gorilla/websocket from v1.4.2 to v1.5.0 98af8befe27 [go] Bump images, dependencies and versions to go 1.21.1 dbd3eb54191 remove logcheck.yaml f365cae9ee6 Fix typo in api.proto 2d1877c97b6 fix breaking pv creation when the validation webhook exists f33265cf5d0 HandleRetry has already called in the GetObject fc51a27c036 fix typecast missing 2ea47038b90 podresources: e2e: force eager connection 6cd446a2064 Add cloud library to unwanted deps 9f76d8d45a0 Track vendor status of unwanted deps 87d49a51bed fix(queue_test): make sure the first bind failure via counter 94afd6e3a4d skip the reason check for OOM tests if it will fail f47661e1b72 fix inplace VPA stuck in InProgress when custom resources are specified added unit tests d7b7a85fbc0 feat: make user-defined plugins discoverable with e.g. kubectl help (#116752) b468e4eb1cd e2e_node: Assign enough time to finish the postStart hook c4dd16a1f86 golangci-lint: warn about deprecated APIs only as hints 36d36722499 e2e_auth: stop using deprecated framework.ExpectEqual 9c1df5ff0af move back to bullseye 67858e1ff06 Bump images, dependencies and versions to go 1.21.0 0593cfdd14f Fixed variable used for moving auth-provider-gcp binary c682d2b8c59 scheduler: add ResourceClass events 2ad4304e8f2 Add Windows support for IPPVS 15a402eefb7 e2e_apimachinery: stop using deprecated framework.ExpectEqual 43fc6b5bdb0 Added suggests changes 355ae44a3ca Revert "bump npd to v0.8.14" e7ee3ae3d94 Create e2e test for StorageClass endpoints 418af0f4dcb register API types only once for encryption config 2144852f7c9 Commits merged 657cc2045ee kmsv2: enable KMSv2KDF feature gate by default b97cb6dd007 Revert "Do not attempt to overwrite higher system (sysctl) values" c131c92b9f3 scheduler: unit test case for concurrent event with other pod a0d6a815fcc WebSocket Client and V5 RemoteCommand Subprotocol 0024c7e1668 Changed the generator codes for kubernetes metrics table cd943dd95e3 scheduler: fix tracking of concurrent events 933bcc123b4 only drop invalid cstate packets if non liberal 7c75b018d57 cmd/kube-apiserver: add .import-restrictions 43783aeb18c drop release-1.24 rules from publishing-bot e190e179b3c Document `cluster/gce/gci/mounter` as static binary 059e8353b76 check labels/annotations in the beginning 6ec8dbe5b59 cmd/kube-apiserver: avoid importing the kubeadm pkiutils package a7748872621 cleanup:e2e:stop using deprecated framework.ExpectNotEqual e8564d6c5bc KEP-3895: Promote interactive delete to beta 14e7d97151e Remove GA featuregate for JobTrackingWithFinalizers in 1.28 ef235c4eac8 e2e_framework:stop using deprecated wait.ErrwaitTimeout b35357b6c08 cleanup: omit comparison with bool constants 622eac23477 e2e_storage:stop using deprecated framework.ExpectNotEqual 7c33b78418c remove resource flowschemas and prioritylevelconfigurations for legacyBetaEnabledByDefaultResources in v1.29 9795df456f3 cleanup:e2e:stop using deprecated wait.ErrWaitTimeout fc25af7f548 using wait.Interrupted instead of deprecated wait.ErrWaitTimeout for apps e6dfdb240fd Output the error message for better analylsis ff3cb43c300 remove labeld-deployment.yaml cae090e7fed scheduler: remove unused constant SchedulerPolicyConfigMapKey c74d045c4b7 scheduler_perf: show name of one pending pod in error message 3c2cfd9a4fd resource claim controller: separate generated suffix from base 2c5a11a55bf Match on cri-o socket suffix only 214772c1104 dependencies: update opencontainers/selinux to v1.11.0 95118ec30c1 e2e_network:stop using deprecated framework.ExpectError 3f8f14397e1 Set external credential provider to true by default in kube-up.sh 410ac1456ce Don't run the nodeipam controller on KCM if cloud provider external 45b9b0df41f Add namespace to apiserver tracing c83eb6dcaaa Add subresource to apiserver tracing bcb59a03ebb Add name to apiserver tracing 646053d73db Add api-version to apiserver tracing 8c34208a62f Add group to apiserver tracing 6f55437472e kubeadm: increase ut coverage for addons/dns/dns.go ceaed508ce7 Validate the cloud-provider passed in and the corresponding feature flags 2e5f17166b9 pkg/proxy: fix stale detection logic 95121fe846f kmsv2: add legacy data integration test 42e8cfa28ac fix failing metadata test cdcbfcc0a6a [KEP-2395] Phase 4 - Disabling In-Tree Providers 8255858a7c4 remove SkipFilterSchemaForKubectlOpenAPIV2Validation 0fb1f59a881 Improve service unit test failure report 39e433891bc fix(test): delete cronjobs.v1.example.com pi for clean up 36e33cd88e8 fix(test): Remove 'shortNames' Property from CronJob Fields in e2e-test 3e252857c1c Add unwanted cloud deps to track 875b00137fd storage/etcd: add TestWatchDispatchBookmarkEvents unit test 6058540f3d0 storage: document ProgressNotify from storage.ListOptions f4fc4b16b1d doc: Add example for restarting all deployments in a namespace 936d67f6888 Update distroless-iptables image version to v0.3.1 bb695ac67a2 eviction manager: add test case with localStorageCapacityIsolation open a56745c7066 e2e_cloud:stop using deprecated framework.ExpectError bfc3c2110fc e2e-node: fix TopologyManager test jobs. 3d9b5d05772 e2e_node:stop using deprecated framework.ExpectError f1051f34a79 Remove deprecated framework 062c57ae92f dra controller helper: make allocation error message more readable f96e23e477d dra controller helper: merge log entries for informer events 78f3b76390b scheduler_perf: use different log names for different DRA drivers d781b58100f dra helper: skip allocated claims during UnsuitableNodes calculation fcff9969095 adjust error message a bit 889c8e919bd New repo who dis? distribution/reference 741f1461571 Revert to json-patch 4.12.0 b10697c7880 kmsv2: fix race in simpleCache.set when setting cache size metric 8f6a79b29fa use external cloud provider by default with gce 903156daa2b fix(test): add e2e-test for kubectl events filter by GroupVersion a46bab69308 Fix a job quota related deadlock (#119776) 696f84aeb09 Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime 63177db32c2 Add an e2e test for the pod sandbox changed scenario e167ecbb9ea fix: only invoke AddReference first time when to sync same pod to minimize unnecessary API requests to the API server for the configmap/secret get API 3c5a58c5f89 Refactor checkErr func f22d8540723 unwanted-dependendencies: updating references, and `jq` 0323fe42e23 adding more callbacks in kubedrain helper e01bd641447 Avoid creating local variables that don't change 10553a19668 Flatten switch case 1f4f2a5d601 Refactor common WithRange case ede524e1a6a fix a pidpressure test flake 3bc6ee6fef7 unwanted-dependencies: sort this list eb5695b0c5c unwanted-dependencies: adding archived repos 15c02f2a034 add integration tests 9e1ff1e5120 add loading config and wire feature flag 57b27fd3cd1 Fallback to legacy discovery on a wider range of conditions in aggregator 160589a0edb Refactor transformers for watch to implement Encoder interface 04f0b4a0147 Bump CloudDualStackNodeIPs to beta for 1.29 46cb5386423 OWNERS_ALIASES: add tzneal to sig-node-reviewer bf41b0462cc Fix OpenAPI aggregation cleanup 16a7b536022 Fix typos in comments 2b69daa960c Allow specifying ExternalTrafficPolicy for ClusterIP Services with ExternalIPs be4692864bb Remove duplicated returnRV variable 2e174a029f5 Add timeout to listContainerStats context 2825519da2c apf: remove v1alpha1 API a926f594da9 Bump runc to v1.1.9 7b44d73f73f bump npd to v0.8.14 879dad9c2ff kubeadm: Remove the usage to print the default component configs for `reset` and `join` 53cb35d6d48 e2e_apimachinery:stop using deprecated framework.ExpectError 8a368afa273 e2e_storage: stop using deprecated framework.ExpectEqual 209f23ecd7c e2e_upgrades: stop using deprecated framework.ExpectEqual 41adc93ca3a remove GAed FG DownwardAPIHugePages e187368242b fix(test): fix TestGetPodResourcesV1 comparison logic in tests 7e7b67f2ccd remove GAed FG GRPCContainerProbe af7d76fa059 Promoted feature gate `ServiceNodePortStaticSubrange` to stable and locked it to always active 5dbec5c715b local debugging should utilize the same defaults as prod d5690f12b69 pkg/kubelet: allow sandbox image pinning from CRI 8581703b07d Prune sig-auth-encryption-at-rest-reviewers and drop lavalamp across aliases f5d6c65186d paginate initial list inside the storage watcher 8d9517318a4 Extend npd e2e timeout to fix npd e2e error 618e40c61b7 kubeadm: promote EtcdLearnerMode to beta b2c0d80c37f Test watch converter encoder 03126c54658 add comment 651eb2fa58f revert PR https://github.com/kubernetes/kubernetes/pull/119592 709721e0df1 feat: update google.golang.org/protobuf to v1.31.0 3fcc045bce9 Minor cleanup tranformers interface 172a41192c6 Cleanup setting non-nil Items field 5269e769902 scheduler: properly skip DRA events 1988c31fc81 storage/etcd3: error when progressNotify option set and newFunc was provided for a registry 580f83ab4a5 Avoid duplicated dots in pod condition 855b445d28d Remove deprecated selectorSpread c29234d3e10 Add integration tests for all bind plugins skipped in TestBindPlugin 87165303464 Add unit tests for extract tag functions in prereleaselifecyclegenerators 0ea6522807d apiextensions-apiserver: generate applyconfigurations dbbce2aaba2 sort stability list of metrics in the shell command (#120197) 9a24dd2c27f fix(test): fix error comparison in GetPodResourcesV1 test 94d03ccc83b Squashed commit of the following: 030a114ce94 Add mengjiao-liu as sig-instrumentation reviewer cc784cfe857 Mark Job onPodConditions as optional in pod failure policy 3d583398fe2 Avoid to build the error msg for twice 484510863bf e2e_windows: stop using deprecated framework.ExpectEqual f5681f88179 e2e_autoscaling: stop using deprecated framework.ExpectEqual 05bb01d27a8 e2e_cloud: stop using deprecated framework.ExpectEqual eb0afbc7d01 kubeadm: update swap warning for v1.28 change fa37bebcd4b Add comment about why AttachFunc be overridable d680bc540b5 fix(test): fix error handling condition in test 01df59a73b9 pkg/proxy: remove equal method from endpoint interface 6fc3d0ecefd remove GAed feature gates CronJobTimeZone, JobMutableNodeSchedulingDirectives and LegacyServiceAccountTokenNoAutoGeneration e9be1d7438b Test now has coverage! 628bbb9ef8a kubeadm: add supported etcd version for v1.29 dcbe7755bfb kubeadm: Add testcases for exported method `ValueFromFlagsOrConfig` 78538bd303d update coredns to v1.11.0 update coredns to v1.11.1 update coredns-kubeadm to 1.11.1 bump up corefile-migration to v1.0.21 based on https://github.com/coredns/corefile-migration/releases/tag/v1.0.21 fix dns_test ut failure e410f86825f [StructuredAuthnConfig] use local variables in oidc pkg 1bf90f9484c add StructuredAuthenticationConfiguration feature flag 1bad3cbbf59 wiring existing oidc flags with internal API struct f909eb630ca add AuthenticationConfiguration v1alpha1 api ff56d3b6914 Refactor WatchServer to prepare for using encoders a4ce32769ff fix pod delete log in deployment controller 0bc0256093b Update job_controller_test.go ff10df107a4 remove fake deployment 13a8ad12b82 apiserver: fix data race in etcd metrics dec1c361255 add kubectl rollout e2e test 22f4b1c56ad Static check fix 70e2deb32f9 Fixing lint problem 6ded53ce4dc Added back test changes 5fb049ff473 Added create job & cleanup ff1659cb798 Added syncjob f87cc43cdb0 Review Changes d08fc3a4d01 Another one creeped in ef6a0eb6d85 Final Lint Fix aa9f38c36d8 More Lint Fixes 601679446ae Lint fixes cf32ae9453b Initial Commit 297f04b74ae Added function to remove finalizers as backup 1d52fb2806e CHANGELOG: Update directory for v1.28.1 release 5524f1651a2 using wait.PollUntilContextTimeout instead of deprecated wait.Poll/PollWithContext/PollImmediate/PollImmediateWithContext methods for scheduler c9c83d1af44 cleanup: e2e : stop using deprecated framework.ExpectHaveKey 47d9a47a088 storage/util: introduce AnnotateInitialEventsEndBookmark function ccabc01093a storage/factory: extend the Create method by newList and resourcePrefix params 02e51b27a9a CHANGELOG: Update directory for v1.27.5 release 13b52a18483 fix crd finalizer validation ab018481342 Make sure skip score plugins alwarys returned 6805632abb8 CHANGELOG: Update directory for v1.26.8 release f847565c081 Move mount warnings to info logs for normal expected paths 63df8a5821a CHANGELOG: Update directory for v1.25.13 release 52e85074042 CHANGELOG: Update directory for v1.24.17 release 980fa6a2b9e Add CEL library lifecycle linter 3fb14cf4e7a Bump cel string lib to v2, add tests 640a2ec3327 Update k8s code to handle cel-go changes 1a850a00630 Bump cel-go to v0.17.6 24877f96fbb Incorporating feedback on 119341 2bede058f92 Use environment varaibles for parameters in Powershell c761c165627 Use env varaibles for passing path 1327a57aaf8 storage/cacher: duplicate logging when a watch is closed due to unresponsiveness. 9ee94b0204a Remove duplicate codes in framework RemovePod f752ca2dc84 Make API chunking conformance test deterministic 28621f1eb3f fix(kubectl): kubectl events doesn't filter events by GroupVersion for resource with full name 79466886a17 doc(kubectl): Kubectl restart command without specific deployment will restart all deployments ce9e668a932 golangci-lint: suppress one issue, demote others to "hints" 6a16c076e76 hack: move common "verify generated" shell code into function 9c83c380e0c Add wait for cache sync b1223e0d1ac check for overflow 87cf890632c Fix CEL cost handling of zero length replacement strings b0e249f657a Handle edge cases in seat demand stats 037640af8c8 Apply suggestions from code review bd06c26d580 fix: concurrent map writes in e2e test 826f3a130ae promote to conformance Service multiprotocol tests 98d772ca3c4 Support multiarch/platfrom in find-release-tars c6e54169fc1 e2e_apps: stop using deprecated framework.ExpectConsistOf 93832de6246 stop using deprecated framework.ExpectNotEqual 145dbb6accf stop using deprecated framework.ExpectNotEqual d2dbc583a06 Adding coverage for OOM Kill scenario due to node allocatable memory limits, when pod level memory limits are not set 0039f24d74d apf: refactor promise to use a context 3e9a4c15a85 Restrict what imports get into code within test/e2e_node c1eb18c00ca generated files 039859b9b72 e2e network test for udp services with hostNetwork clients 2472291790e api: introduce separate VolumeResourceRequirements struct a5600b69251 storage/etcd: simplify passing the transformer 6161752ecbe storage/etcd: remove newWatcher function 3546831ceb2 e2e_storage: stoping using deprecated framework.ExpectEmpty a9308927691 Gate: disallow .status.loadBalancer on non-LB svc b8512cfe247 expect the new resource_scape_error metric 905f07f1ac1 Revert "mark the OOM killer as serial to reduce flakes" 5c7529a6fc3 kube-proxy service cache don't treat ipMode proxy address as invalid f93bd699aaf Trim managedFields in pod informer 2f576969eee reducae function calling to once 093093593c6 kubeadm: fix the field path for JoinControlPlane.CertificateKey validation 700b55b3b26 kubeadm: fix the bug that --image-repository flag is missing for some init phase sub-commands 75a80d5aba4 kubeadm: add validation to verify that the CertificateKey is a valid hex encoded AES key c112a34642d add unit test for kube-proxy service cache with ipMode 7f805dc9354 fix test name 30ff937aaf9 add a fake load balancer class to fix e2e test failure 3cbecf218df kmsv2: add metric for DEK cache filled d86e72202c4 kmsv2 test feature enablement unit test bd6f5487463 mark the OOM killer as serial to reduce flakes afe9045e466 Add v1.28.0 API testdata a6a1f070e7f Signed-off-by: liyuerich <yue.li@daocloud.io> 8163d244ede Update ccm flag help to describe disabling webhook serving 8291b847d58 Allow disabling both webhook ports in cloud-provider f407b31d42a kubeadm: Fix typo where API group is not correct 72af21e1a13 kubeadm: Cleanup the unused input parameters 1eb6282016a kubeadm: Move the method used only in the test to `postupgrade_test.go` e290b4cb3bc e2e_network: stop using deprecated framework.ExpectEqual fd3f82531f8 kubeadm: increase ut coverage fo util/kubeconfig 48260b4a77b kubernetes mutual (2-way) x509 comment ae0a0477bf6 add aramase to sig-auth-encryption-at-rest-reviewers 6c2cfac0a97 Revert testgrid url changes from CHANGELOG 577197559ae remove the legacy test dependency af26ebd0fa3 translate beta label to ga in volume_zone 4712025ea84 Graduate kubelet resource metrics to GA 6ef90979720 Update the URL of testgrid af9bf7b41e0 Prefer non-alpha storage versions when available 09fa21ab879 Store validating admission policies and bindings as v1beta1 a422d11c772 prep for go1.21: use -e in go list ef7d4047025 using wait.PollUntilContextTimeout instead of deprecated wait.Poll for pkg/scheduler cc1670ddd2b Limit intstr.Parse() to 32-bit integer parsing 5567f288e74 api: change list type for node lists in PodSchedulingContext 79333684600 Update CNI plugins to v1.3.0 f07a3a3f263 calculate sidecar container resource in pod autoscaler 427b703c37e scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration 5bbc4f76055 Pass Pinned field to kubecontainer.Image a5b3a4b738e cleanup: Update deprecated FromInt to FromInt32 (#119858) b75c5d33e5c bump the busybox test version to resolve test failures bd36be02188 Make gomaxprocs install optional, limit to tests 9a253d896a0 storage/util: move GetCurrentResourceVersionFromStorage f7e659db236 storage/etcd: no-op, refactor watcher.Watch method signature 5752cbd8c76 chore: add pod UID in event log 7a6e056bbdc kubeadm: add TODO for NewMapStringString() and CLI extra-args f3da0d4ed32 kubeadm: update the rest of the code base for structured ExtraArgs a505c7160e2 kubeadm: adapt the validation and utils for structured ExtraArgs bc6fcb72a8a kubeadm: add structured ExtraArgs in v1beta4 8314122382c e2e framework util subtle bug checking endpoints 9742e276b95 update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 1e961af858b scheduler_perf: test case for DRA with multiple claims 0331e98957f scheduler_perf: fix installing DRA test driver multiple times 092897f061f drop v1.26.0 API testdata 4950521ad88 kubeadm: increase ut for certs/certlist 224087abfa0 Add Pod Scheduling SLI Duration metric (#119049) 3edae95e5ae Add unit tests for subdomain match in keyring 8cb979ae55d CHANGELOG: Update directory for v1.28.0 release a0f07f2b4d9 e2e WaitForServiceEndpointsNum take into account the address family a161fa8017b pull Host from kubeconfig when needed 03415ebc1da Integration tests for IP mode field 86b1f095ca7 Proxy changes for IP mode field 47fec59a31a parse node selector in prefilter 4fb0ce28377 Fix broken link to testgrid 34a89f039b8 Update cri-tools to v1.28.0 29a6705dabc Generated code for IP mode field 3ac2899d2b5 Add IP mode field cf3f0bd7780 fix: register the plugin rejects Pods in WaitOnPermit to UnschedulablePlugins b0082237050 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap 947c9376f6a change struct methods receiver to pointer e258228e4ac use a buffer equivalent to grace period to eliminate test flakes 717c149a734 fix mirror pod nfs test failure due to differing NFS versions 279a663f948 Update README.md 6f27733af8d Job: Replace deprecated workqueue library with supported one dd7b7073c38 e2e: add test for verification of timestamp for new PVs 8e661498702 e2e: remove extra spaces b9cf6991e63 Use tracing semconv types instead of own defines 765f3916c27 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip 1863a808b20 fix: add code comments 9646ae5a9ef Fix: null jsonpath serialization 8ab6bee676a Make seccomp status checks in e2e tests more robust 509ffe2938f Fix receiver names in legacyProvider 80710976cfc [releng] Update publishing-bot rules for release-1.24 to Go 1.20.7 f73c253accf fix typos for pod replacement policy 5fb543a4118 kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate 62b063b74b5 wsstream: use a single approach to detect connection upgrade 74053e21519 Create e2e test for PV/PVC endpoints 49e00e8bdee Move adding GroupVersion log until after an update is confirmed 77b3bb0f69b fix race on etcd client constructor for healthchecks a6329ac4536 Fix to honor PDB with an empty selector `{}` 0e238409290 dra test: enhance performance of test driver controller 40b604e3741 Update pkg/apis/core/helper/qos/qos.go f355b22f5f7 implement Stringer for podActions e4d16f34c15 Add test coverage of result size of string operations 10fe3da87db Delete PSP API types and generated clients 69a5a528967 Bump cel-go to v0.16.1 6aad00ff73d client-go: chore: implement `Is` interface for `ErrGroupDiscoveryFailed` 4063ca40501 Code review fix: Move GetPodQOS code to ComputePodQOS. If set, return PodStatus.QOSClass from GetPodQOS. 5d4410b9601 Perf optimization: Move away from GetPodQOS, using PodStatus.QOSClass instead ef51dbfa0c7 Drop [Feature: tag to make sure this tests runs on pre-submits a1809ffae37 client-go: log proper 'caches populated' message, with type and source and only once 37730c07dd6 apiserver/httplog: pretty up impersonation output 3e908c5bdee e2e_common: stop using deprecated framework.ExpectEqual d154ca9c00a Statefulset should wait for new replicas when removing .start.ordinal 0944c00778a Fix some typo in kubelet component source code 3a2c4d6f096 kubeadm: fix nil pointer when etcd member is already removed ba9ce3ab08b fix flaky test on dra TestPrepareResources/should_timeout 24f32d9d185 Local PV Stress test: don't fail on deleting missing PV 074d5b53299 Rewrite the tests to be table driven 391c1a3eccd dra: cleanup manager unit tests a5fff9a5d09 Catch direct references to unwanted dependencies in kubernetes modules 85c385d4101 Update the container images used in cloudbuild to their latest version c4f4e3bc43b pkg/proxy: unit test refactoring 4bc9434f99d SSA: prevent usage of Extract calls via forbidigo b6ae858e01f Drop AvailableResources from controller context d5d90b7b228 add support for ExponentialBucketsRange 90b870b710a OWNERS_ALIASES: compress sig-node-{api,cri}-approvers a215b29d7cf remove makefile:generated_files in v1.29. f0b38766a06 use LoadBalancer type service for e2e service test to patch ingress status c23cee1be3c fix OOM killer 4b6abf10c6e Handle errors when preparing lease for update ca338e517ba Fix the flaky legacy_service_account_token_clean_up_test.Fix the flaky legacy_service_account_token_clean_up_test. a44ce346d78 e2e/apimachinery/watchlist: stop panicking when run against unsupported cluster/environment 14251738d21 NCC-E003660-PCK: Non Constant-Time Comparison of Service Account Token Secrets 109cf6820d2 Update base image and add utilities to kubectl image 2a767c9916a update the busybox test image to 1.36.1 133696725ae implement secret empty string value integration test 7f53f7649e1 Use intstr.Parse instead of reimplementing it 1b8fb69d9ea kubeadm: increase ut for cmd/kubeadm/app/phases/addons/proxy 63cf568251d e2e_node: stop using deprecated framework.ExpectEqual 18c46b2487a add validation for static pods to have a name 66aa2af0979 CEL lazy map: add test for boolean short-circuiting 307b0630aa6 cri-api: add CRI implementation maintainers as approvers c4739313b7f Track manually created secret-based tokens df89045b53c dependencies: update github.com/ishidawataru/sctp 2b12df56b0b Fix a race where a call to Shutdown was happening after ShutDownWithDrain() had performed the check q.isProcessing() && q.shouldDrain() and before waitForProcessing() has reached its Wait(). This is because waitForProcessing() is only checking the length part of the condition instead of both the length and whether we still need to drain. It turned out that there were lots of unnecessary accessor functions being called locking and unlocking the cond which are not needed because Wait() automatically unlocks and locks the cond for us and best practice says we should run it in a for checking for the condition (so this is what I have done). 213ed03c000 remove deprecated kube-apiserver identity lease garbage collector 57226fbd27a e2e_dra: stop using deprecated framework.ExpectEqual fb9646fd60d apiserver: add flow control metric current_inqueue_seats 4e10ff91c5b pkg/proxy: move proxier health eventing to cmd/kube-proxy fdea6ad17d7 kubectl debug: Remove legacy server support baed6240468 kubectl debug: Introduce customizable AttachFunc instead static one 41889984304 Improve conditionFuncFor expression parsing for wait --for jsonpath 3964f71fe02 e2e:podresources: verify count for terminal pods 6d244728b9e adjust order and fix typo for kube upgrade 479b2d03a43 kubectl: fix describe node output when sidecars are present 4e2e059c7b2 Graduate RemainingItemCount to GA 6acfa3cb4ac Graduate APIListChunking to GA e9b69d1958d e2e_scheduling: stop using deprecated framework.ExpectEqual 9d8959224cd add explanation for large-cluster-size-threshold arg about multiple zones cluster 2222509cb41 e2e_instrumentation: stop using deprecated framework.ExpectEqual 60a8bca507f dynamic resource allocation: add unit test to check the reuse of the gRPC connection 7ffd3063cef dynamic resource allocation: reuse gRPC connection dbaa9fe6b46 added podgc orphaned pod unit tests 173b5a75b96 Trim managedFields in controller-manager c86f562f29b Run hack/update-codegen.sh informers subprojects 9c4651bd047 Add 'WithTransform' SharedInformerOption d1946392528 Cleanup kubectl legacy server fallback 106a931c299 fix intergration test d2df65ba6c9 update the dependency sigs.k8s.io/structured-merge-diff/v4 to latest tag a35608cc614 Update debian-base for test images and others 43f8ccfcca8 TopologyAwareHints: Take lock in HasPopulatedHints a9d26ac7c78 Optimize the code of NodeUnschedulable to reduce TolerationsTolerateTaint function calls 2ce07981af7 kubeadm: Make dry-run is configurable in joinConfiguration f5a6797e563 kubeadm: Make `dry-run` is configurable in `initConfiguration` 709eb6c0302 eviction for pid trigger PIDPressure condition slowly on CRI-O b8336f399bf KEP-2305: add metric to track unbounded label values 1e17237dbf6 KEP-2305: introduce allow-metric-labels-manifest 654e98e0a2e add endpointslice repo to staging README b7cbebcd034 Added oomkill test for init container and fix typos d8c145d20da fixes the issue in the documentation of kubectl events 12a874d2273 Preserve resourcequota informers for groups with discovery resolution errors only c9a084d59ca Fix duplicate GC event handlers getting added if discovery flutters 733f63c6c42 Add GroupDiscoveryFailedErrorGroups helper method 3bae26ae58b Check dbus error on container runtime start/stop 70f979c8da3 Alert message improved according to standards a6554b9d5d1 Make kubelet label types public f2fa6d5f6b3 Document PVLabeler as deprecated 7ff4572f792 Remove reference to `RUNTIME` variable in `build/root/Makefile` fc36d2fee83 chore: improve error message for unstructured helper method b60a3a58df2 api-machinery: stop using deprecated io/ioutil 0da37d8c544 chore: omit comparison to bool constant 17e6c5cb9f0 Error Typofix 9d4b489107e Renaming restartPolicy to containerRestartPolicy for better calrity 01c2c4f35f3 Error test cases added a609beb6b19 Decline on resizePolicy if the restartPolicy is Never f2879eed00b [UT] add ut for pkg/registry/networking/ipaddress c1cced24aa9 WIP: don't exclude .git from rsync 396c8a67832 test: TestPodDeletionEvent 975b2c6611d scheduler: Fix field apiVersion is missing from events reported from taint manager ba49ccdbc9b Gracefully handle empty config error when local flag is used 96ab232f5f7 Remove reasons from PodConditionType 1d9eed9f950 chore: slice replace loop 9378e580cf4 chore: loop optimization fc1b8a823d4 cli: stop using deprecated io/ioutil b4d1440063d unittests: Fixes hostutil.GetFileType for Windows 01861282b1d controller: fix the help information format of sorting_deletion_age_ratio metric 07a1aea2def remove unused cloudprovider param from the ProbeControllerVolumePlugins func 208cf1afabb Fix: do not assign an empty value to the resource (CPU or memory) if it's not defined in the container 72f89b63757 kubelet: fix comment typo 12f8eeaf9b1 fixed typo in get-kube.sh 3418ceaca64 test: replace intstr.FromInt with intstr.FromInt32 8b363cc7c08 bump dependencies: github.com/godbus/dbus/v5 to v5.1.0 887654160f9 Improve the performance of schedulinggates 0ef4be48777 cloud-provider: replace intstr.FromInt with intstr.FromInt32 847df6d9153 kubelet: output log even file is rotated 05f04f866eb Keep PLEG interruptions in a separate interface b109a585398 Improve the performance of isPodStatusCacheTerminal 84c14c65c6b Remove unnecessary type conversion 55d471601b1 [ut] increase covrage for kubelet/prober/results e0f2ed1b92b [ut] Increase test coverage for kubelet/pleg 18c86efeeaf kubelet: perform the admission checks that preemption will not help first to avoid meaningless pod eviction 08a69d63413 Improve performance of method PodRequests 337f4e524aa Do not error log CRI stats for not cached partitions f2aeb3b0d91 Improve lock performance fb6fd36384e Add endpoint to skip topology aware log when missing zone hint Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06kubernetes: update to 1.28.2Bruce Ashfield
Bumping kubernetes to version v1.28.2-44-ge3b5e621f07, which comprises the following commits: b5e28b1cdd6 [go] Bump images, dependencies and versions to go 1.20.10 1cd2ac99542 .: bump golang.org/x/net to v0.17.0 cecc0e93916 Mark a volume as uncertain-attached after detach error 15101d92e18 Unit & integration tests for OpenAPIV2 AddUpdateAPIService 9f4011446a2 Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler 489c08ddf47 Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec d35a00e218c Fix 120758 - prevent cache Load on uninitialized spec 985ef265511 Add nil checks for hpa object target type values 88669d0a23b Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat 84a3ad3573b [go] Bump images, versions and deps to use Go 1.20.9 63fcac91c42 Only configure swap if available on node 07a74666cb2 Use local isCgroup2UnifiedMode consistently 57bbc335fd7 cronjob controller: ensure already existing jobs are added to Active list of cronjobs 8ea9b219c69 reintroduce resourcequota.NewMonitor 794d56966e8 change rolling update logic to exclude sunsetting nodes a08ec1215fe vsphere: adapt to govmomi bump ef63f36ff82 .: bump govmomi to v0.30.6 aba7c443072 Increase range of job_sync_duration_seconds bcaa53c9c10 sync Service API status rest storage a68748c7cd0 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.2 89a4ea3e1e4 Release commit for Kubernetes v1.28.2 0c6a0c3f69b kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1 47507f9f022 fix race on etcd client constructor for healthchecks 7d33fba21a8 e2e pods: fix WaitForPodsResponding retry 2480fce67f5 kmsv2: reload metrics bug fix backport 110a6fe8a9f scheduler: start scheduling attempt with clean UnschedulablePlugins 0aebbad4731 fix(queue_test): make sure the first bind failure via counter 798a0abe368 [go] Bump images, versions and deps to use Go 1.20.8 62321a9201c scheduler: unit test case for concurrent event with other pod e5b981ebcd7 scheduler: fix tracking of concurrent events 16298b54483 fix verify errors 38904e5f2d1 remove used vars ce017591468 sort stability list of metrics in the shell command b5fd7e9f23c Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime 958c30349fa Add an e2e test for the pod sandbox changed scenario ac67de196ff fix: concurrent map writes in e2e test 19c4cf0f1a0 Automated cherry pick of #119776: Fix a job quota related deadlock (#120319) dda909d6c51 TopologyAwareHints: Take lock in HasPopulatedHints 8656da75f2a Fallback to legacy discovery on a wider range of conditions in aggregator 526e25b685a Fix OpenAPI aggregation cleanup 0bca3b0e4de apiextensions-apiserver: generate applyconfigurations 8c7c4f3fc4d Revert to json-patch 4.12.0 a4fdac21a98 update build cross image to the correct release branch image fc184558921 Mark Job onPodConditions as optional in pod failure policy 955843efcf3 Incorporating feedback on 119341 4c8b24d8618 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.1 8dc49c4b984 Release commit for Kubernetes v1.28.1 ad60b95eb63 Add wait for cache sync 175bbaa8894 check for overflow f3f88b8e7b5 Fix CEL cost handling of zero length replacement strings 90715527543 Use env varaibles for passing path 53902ce5ede Use environment varaibles for parameters in Powershell e8abf3c441c e2e framework util subtle bug checking endpoints a1fdd1152d9 Pass Pinned field to kubecontainer.Image 27e6c94259f prep for go1.21: use -e in go list 04de4683cb1 kubeadm: fix nil pointer when etcd member is already removed 8fd45c6bd0f update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 cce3f6ffa79 Make gomaxprocs install optional, limit to tests 20b69aea685 Drop [Feature: tag to make sure this tests runs on pre-submits 58ac6e12ccc Statefulset should wait for new replicas when removing .start.ordinal e7cfe85b9c1 e2e WaitForServiceEndpointsNum take into account the address family 96696c15f89 fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap d20fe4d8487 Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0 855e7c48de7 Release commit for Kubernetes v1.28.0 b4053c3b293 Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip b4fac632cd1 Remove release-notes for the PR#118895 5f7b27f4ade Remove release-notes for the PR#118895 87caf500e1f Update CHANGELOG/CHANGELOG-1.28.md for v1.28.0-rc.1 c5048f41fe3 CHANGELOG: Update directory for v1.28.0-rc.1 release add7e14df11 Release commit for Kubernetes v1.28.0-rc.1 c6efaf16c1e apiserver/etcd3: fix segv during metric collection 6ddcdef29ae kube-proxy: fix combination of --config and logging command line flags 0d90d1ffa5e Revert "Merge pull request #118895 from RyanAoh/kep-1860" 1876ddf7149 Avoid returning nil responseKind in v1beta1 aggregated discovery 55ca1a6ee15 Remove leases test case from AdmissionWebhookMatchConditions suit 050c0437e60 fix: broadcast when pod is pushed back to activeQ directly in AddUnschedulableIfNotPresent 9bc857d6d90 [releng] Update publishing-bot rules for release branches to Go 1.20.7 38a81ca04f3 Bump distroless-iptables to 0.2.7 ae86051ec5a Bump protoc ab26637eae4 Add test coverage of result size of string operations 8e72718249e Bump cel-go to v0.16.1 72c8cf9fce7 [go] Bump images, versions and deps to use Go 1.20.7 2ceca1c78db e2e WaitForServiceEndpointsNum should watch EndpointSlices 2f30fae0e8b scheduler: fix data race after binding failure 1b90dff5276 .*: bump golang.org/x/net to v0.13.0 73107c1b755 Update OWNERS 53c8872cc18 Update OWNERS 2a82aac5248 Update CHANGELOG-1.28.md for KMSv2KDF 294c7df3285 Avoid pulling node-problem-detector through CDN b4ef4015a29 Avoid pulling mounter.tar through the CDN cfcbce31a39 apiextensions: fix validation error for status.storedVersions 936819c21bc docs: update release note for KMSv1 deprecation 6689fd97469 DefaultHostNetworkHostPortsInWorkloads -> DefaultHostNetworkHostPortsInPodTemplates a65d2075072 calculate the correct machine-type 182a4f858a3 API warn non-ExternalName services w/ externalName 7bd0a857e30 API warn ExternalName services with externalIPs dd8a64d7e15 publishing-bot rules for release-1.28 branch a005617111c CHANGELOG: Update directory for v1.28.0-rc.0 release 7d13c9b096b set map to nil if an empty string is passed eb4063f0ced Add cases to tests `AdmissionWebhook` MatchConditions size limit (#119404) ef4907eddd7 Add e2e tests for admission webhooks MatchCondition fields (#118319) a248c4de521 test: fix NodeLogQuery tests to query the correct node for logs 45710678b30 Release commit for Kubernetes v1.28.0-rc.0 67769438e1d kmsv2 test feature enablement disablement and restart 18a7025383c update documentation with descriptions 7e0a9a7f4e7 Use statusReason for reason under x-kubernetes-validations (#119544) 3b9af471185 add admission policy integration test all resources 22bf29ad22f Treat empty string as nil in fuzzer for CEL Reason field a164005cc09 Fix non-test code relying on test-code e1b0bc3d0a7 bugfix: use matched resource for AdmissionRequest.resource, not the resource it was converted from 5e2e8c80647 bump validatingadmissionpolicy alpha->beta 1c99f9591b0 add node-env and instance-type flags to node-e2e tests d6479587445 update codegen ef8670c946d refactor: replace usage of v1alpha1 with v1beta1 294f5c9a42f make update ae185e91186 e2e: test LastPhaseTransitionTime field when binding PV a9c3444a47b test: add coverage for pv status update and create strategy bf49c727ba1 kmsv2: KDF based nonce extension aa65bab4269 implement pv last phase transition time c97eb2b5cb0 Fix XValidations deepcopy to copy contents of nested pointers 76eefd3a012 CHANGELOG: Update directory for v1.28.0-beta.0 release 1b4de065df4 add LastPhaseTransitionTime field to PersistentVolume 5310dd7ff53 add PersistentVolumeLastPhaseTransitionTime feature gate a31fee98f09 rename function for dropping disabled fields dbea2791129 Fix the flaky TestJobApiBackoffReset test 8f35fceae37 update vendor to use containerd cgroups c4bf42199a0 do not touch swap for cgroup v1 if swap not enabled 74fcf3e7668 implementation of PodReplacementPolicy kep in the job controller cb6d7fbe66c update documented metrics f50e74206e1 Address comment c46ffc2b422 Refactor jsonpath parser and add tests. b3b775baa51 test: adjust tests for v1beta1 validatingadmissionpolicy 88becfc0ba5 api: add v1beta1 ValidatingAdmissionPolicy/Binding types and storage b5e9e0168cf feature: add multiple params capability to VAP controller 3f63a2d17d4 refactor: make scope of ParamKind available to vap controller 6323c106e9b refactor: use the provided sharedInformerFactory for params 9a595209bd2 update-codegen c8dbf4712cf add namespaceParamRef to v1alpha1 and internal 03aad1f823c Fix the semantic meaning of etcd server within component statuses and metrics. e0a6eb93a1f node_e2e: Fix createStaticSystemNodeCriticalPod's invalid spec 2863b3d1ab7 Revert "refactor: simplify RunScorePlugins for readability + performance" 3685e5e5a9c CHANGELOG: Update directory for v1.24.16 release 51bfe417b81 CHANGELOG: Update directory for v1.25.12 release c575a1e31aa CHANGELOG: Update directory for v1.26.7 release ba01bfcdc6c CHANGELOG: Update directory for v1.27.4 release ce929520376 add podReplacementPolicy and terminating field to job api 35d0af9243c Include ignored pods when computing backoff delay for Job pod failures ee82654e398 Add pod_swap_usage_bytes as an expected metric in e2e test 81abfca4078 Add a haveKeys() helper function to match multiple keys 1000ed64e09 Use debian-base instead of distroless for conformance image d6e525877b5 [KEP-2876]Add reason and fieldPath into CRD validation rules (#118041) b1d685a05fe apiextensions: validate status updates with status schema 06a81d13959 cmd/kubelet: implement drop-in configuration directory for kubelet c1aef65640b Add integration test cd5f3d9f9d5 Add impl for uvip 2c8288ac873 feat: improves metric and logging 0449cef8fd5 Increase timeout for DRA kubelet plugin client a15c27661e6 Job controller implementation of backoff limit per index (#118009) b5012ba1e2d Mark existing NodeLogQuery e2e tests as [LinuxOnly] since they do not run on Windows bfb2c6a22a2 update go.mod 668497e7550 use ratcheting schema validator when feature is enabled e0f9db42ace add ratcheting schema validator using new openapi hooks 6f238334ab4 add CRDValidationRatcheting feature gate 635875ad521 refactor: convert slices to []interface before inserion into VendorExtensible 9ee6d97fc05 refactor: add ValidateCustomResourceUpdate to support future validators for CRD Updates a8a2fb317c8 Add tracking and reporting of executing requests 1351845133b Update cri-api change in v1.28.0 59b4951c649 Expose commit memory used in WindowsMemoryUsage struct 0ec99fb0b24 Kubelet DRA: fix failing test cases f6431c61386 DRA: don't query claims from API server cf0b74774f6 Extend the API for the Job job-index-failure-count annotation d281daee335 Prefer pods without a deletion timestamp over pods with a deletion timestamp when getting an ordered list of active pods. 0372e4b6620 add unit test for dra/manager.go. fcbfdc17106 Extend the Job API for BackoffLimitPerIndex 3fd40ffb0ef addons/metrics-server: fix nanny rbac permissions 056c19e8b39 Add slash ended urls for service-account-issuer-discovery to match API in swagger (#117511) 89ab733760a Improve docs on framework.CycleState 4da418aba7f refactor: cleanup to NewSchemaValidator takes JSONSchemaProps ba581300213 refactor: rename apiservervalidation -> apiextensionsvalidation 735be024cf9 Make CRDs built and aggregated lazily for oasv2 ea23e13463f Update OpenAPI Aggregator 850dc6123af Remove ability to re-enable serving deprecated policyv1beta1 APIs e7be841957d cli-runtime: make VerifiableQueryParam shared-parameter aware a4a607198a1 hack/update-openapi-spec.sh 961c1503b5b Bump kube-openapi 4cb5547f934 Adjust summary API e2e test e429793db1e Unit tests: node swap usage resource metric 1d368420b28 Add a node swap usage resource metric (/metrics/resource) 7d187f967ba Unit tests: CRI swap stats 59e3e3897e3 Add SwapStats to summary API through CRI 87ff9c45256 Add swap statistics to CRI-API 053d7ac61f5 Unit tests: cadvisor swap stats c74ee8045de Add SwapStats to summary API through cadvisor a05d200ac89 Add SwapStats to NodeStats, PodStats and ContainerStats d029f0ef060 Add restartable init container lifecycle hook e2e tests f17e9117776 Add restartable init container probe e2e tests 9d6c1030db0 Generate containers ready condition including restartable init containers 3bf282652f0 Allow restartable init containers to have lifecycle 7ef2d674e24 Allow restartable init containers to have livenessProbe 2c8b37498e5 Allow restartable init containers to have readinessProbe 8b20dbd0d16 Add validateStartupProbe c7e7eee554a feature(scheduling_queue): track events per Pods (#118438) 91ea8043355 Replace lavalamp with jpbetz as feature-approver for api-machinery 94c8ad289bb Enable admissionWebhookMatchCondition by default 4321d8c60f3 Graduate NodeSwap to Beta1 f1e7386fbc4 Deprecate now-unused kubelet iptables flags d486736dd38 Remove IPTablesOwnershipCleanup checks and dead code 77cbd86b0b1 Add metrics for cloud-provider node sync, update. d3c506133f1 Skip apiserver_admission_webhook_request_total during context-canceled 7698fe76397 Add StatefulSet pod index as pod label (#119232) 2e217e8cea1 Reduce duplication between helpers for checking featuregate 7edd72f7805 Update generated documentation 137474e2839 Fix validation options for old pvc d765fa6b747 Update generated stuff after changing comments f01a1faa8cb Update comments about allocatedResourceStatus c072e5b3a7e Update test generated data for 1.26 branch db8998265e9 Update 1.27 generated data 6a780f57ce5 Update generated data e0111871149 Update code to use new generic allocatedResourceStatus field d3ef2d4fe95 priority & fairness: support dynamically configuring work estimator max seats 9189c3d5599 fix tests aa788219f46 fix metric names d32aa62d844 promote beta metrics 65ce7222ced All sig node approvers should be able to merge changes to CRI API 9cb2c103107 Adding node feature owners 00de051729a Make matchConditionsFeatureGateInitiallyEnabled a boolean instead 48eee4eed86 Fix e2e tests for overriding timoutGracePeriodSeconds of probes 0074b24ca42 Graduate AdmissionWebhookMatchCondition to beta bfa62e0009a kubelet: retry RuntimeConfig call and prep for nil values from GetLinux 6aeff13def3 Never drop the `terminationGracePeriodSeconds` of a probe d0952686f68 CRI: add cavieats about cgroup driver field d7797fbc616 kubelet: get cgroup driver config from CRI fd434003f3f kubelet: initialization of runtime service earlier in the startup 37330a13924 Add KubeletCgroupDriverFromCRI feature gate d2d5e2e27dc Add CRI fake runtimes for RuntimeConfig rpc 0f05a92ce68 cri-api: add rpc for querying runtime configuration 660be4484b4 Update publishing-bot rules for release branches to Go 1.20.6 be01f4a0838 KEP-3178 IPTablesOwnershipCleanup to GA ff62cca47b8 Bump distroless-iptables to 0.2.6 229eb93a834 DRA: report NodePrepareResource errors b57c7e2fe4b Add CDI devices to device plugin API b1850497b4b Integration tests for IP mode field 7eab0d7a0de Proxy changes for IP mode field 7c6e399b228 Generated code for IP mode field e6863757f4f Add IP mode field e38ab6d3671 Add PodGC changes for PodReplacementPolicy 169abcc0398 openapi: reference shared parameters 6c0ea702d43 Conditionally serialize flushFrequency as int 19f61caabee aggregate kube-proxy metrics bd9b78d6861 kubeadm: remove the limitation that the 'ignorePreflightErrors' field can not be set to 'all' in kubeadm config file, and keep CLI / config consistent 6b3ce3004db Add integration tests for match conditions feature gate enablement b883f305011 kubeadm: Support `kubeadm config validate` for ResetConfiguration 171b19d9fe1 fix histogram vec compare using ignore fields 9b6af80a631 upgrade prometheus common to v0.44.0 8f9e2cb8a80 kubeadm: Support `kubeadm config migrate` for ResetConfiguration 22f0f2e210f kubeadm: add 'kubeadm config print reset-defaults' command for ResetConfiguration 13172cba5c0 ValidatingAdmissionPolicy: support namespace access (#118267) df0d51d3b35 add some detailed message for dup container ports(steal from thockin) 1732b23a343 Ignore context canceled from validate and mutate webhook failopen metric 90ab7580aae add list of served versions to storage version 9564bdc39de Ensure final diff is used for setting expectations for Job pod creation 8a4a29d5917 remove todo/spelling bef43788fc0 update histogram 01b9f4b6eb8 matchCondition metrics 5f37c102cb5 revert changes in staging d9bd413f991 Proactively bump golang.org/x/net to v0.12.0 883d0c3b717 Add a dummy implementation of proxyutil.LineBuffer 34640772ed4 implement SchedulerQueueingHints feature gate 619be9c1537 Add a swap e2e test 4b6314f815b Unit test: Swap - Limited/Unlimited Swap, cgroups v1/v2, etc a30410d9ceb LimitedSwap: Automatically configure swap limit for Burstable QoS Pods e4da568f331 Make kuberuntime unit tests environment independent + support cgroup v2 f37aec6c57f Add LIMITED_SWAP env var to enable limited swap 0ed7bdb057e Update vendor 69c4bc29f55 [go] Bump images, versions and deps to use Go 1.20.6 2a907e60043 kubeadm: fix fuzzing for ResetConfiguration 2e6715bc77b kubeadm: implementation of `ResetConfiguration` API types 037847066ce replace strings.Index with strings.Contains instead 3e2a1a7b9ce Regenerate b2613dd381b Add e2e to check that hostIPs and Downward API works 14b09c414ac Add DownwardAPI validation for status.hostIPs 335d905ce95 Downward API support for status.hostIPs bf030fd68ab Add validate HostIPs 267e76a66e2 Add status.hostIPs in validEnvDownwardAPIFieldPathExpressions c287943bdd5 Add status.hostIPs in ConvertDownwardAPIFieldLabel 7a81ef6406c Add fuzzer for PodStatus e6bdd224c17 Add HostIPs for kubelet dacb6890027 Add dropDisabledStatusFields e061143de7f Add HostIPs field and update PodIPs field c2c001a243a Add FeatureGate PodHostIPs ce90eb2cc2f Fix validation to use field.Forbidden instead of Required 7305c967101 QueueSet and controller part of borrowing by exempt PLs 2069835094d Tolerate only the two allowed field changes 3754d2da20f apf: allow admin to change the Exempt field only of the exempt pl f8e4e8abac8 apf: add validation to exempt for borrowing f78d6062eb8 Update generated code for APF borrowing by exempt a9d8cace1f5 Fix AutoUpdateAnnotationKey, NominalConcurrencyShares 3d3240c8b43 apf: add API changes for borrowing by exempt pl b635f2a401f ValidatingAdmissionPolicy: Variable Composition (#118642) 49d03468021 Pre-allocate webhook accessors arrays for mutating and validating webhooks 037091284e2 fix unit test bug 423f4dfc798 Add quantity library to CEL (#118803) a1a5f49bb9c remove statefulset label added to wrong branch 1ae60c0ed16 use job completion index annotation as label 131216fa8f2 chore: hashes keyID 049614f884e ValidatingAdmissionPolicy controller for Type Checking (#117377) d25075f3424 update generated list of stable metrics c291e6355c4 feat: implements metrics for encryption config hot reload be2e5417ea2 allow api-approvers to approve directories touched by generation 80ab8f0542f dra: handle scheduled pods in kube-controller-manager cffbb1f1b29 dra controller: enhance testing 5cec6d798c3 dra: revamp event handlers in kube-controller-manager 0bb419b1498 promote the following APF metrics to beta: 39207dada25 Add integration test for node authorizer claim references 4121c1fc79a auth: don't allow kubelet to from modify ResourceClaimStatuses c688478a28b Fix lifecycle generator to check the version correctly (#119268) ddc0d947900 dra API: ensure that pod status contains no duplicate resource claims 052b06bdad3 Remove test Pods sharing a single local PV 22d8ae1ba6e Enable NewVolumeManagerReconstruction 9914909f5aa Define tcpProtocol in one place in the unit tests rather than many 967ef293786 Remove/clarify two FIXME comments in the proxier unit test 14375947869 Remove some stray references to the ProxyTerminatingEndpoints feature gate 7e3b53042b1 Pass Job context down to firstPendingIndexes 4835d9e1371 Belatedly clean up some "Endpoints" vs "EndpointSlice" distinctions in the unit tests 4d8f569b037 Remove KUBECTL_EXPLAIN_OPENAPIV3 environment variable c5147c91b88 controlplane: kubernetes.default controller stop polling 9f5b6db8be8 test: azure: check error for cloud detection. 1db11c07ff2 node authorizer: limit kubelet access to ResourceClaim objects 71ef0dafa72 add flag 'logging-format' to kube-proxy c550c17f7f0 accept int or string flush frequency 148acc8632c enable arm64 support for GCE node configuration 75186b1c32a Fix, deprecate apiserver_flowcontrol_request_concurrency_limit c52911e59ad docs: add comment describing `LoadConfigFromFile` 5c18810f357 chore: update license date for configfile tests 72aeb961322 test: add tests for `LoadConfigFromFile` b3373ae2738 refactor: make only `LoadConfigFromFile` public - `loadConfig` can be made public again when needed (not required now) 8e284389a5d feat: make `loadConfig` and `loadConfigFile` public functions - so that users who import kube-scheduler libraries can use these functions to read kube scheduler config 0599b3caa0f change the QueueingHintFn to pass a logger 39bb8f4bb1d Implement ConsistentListFromCache feature gate 0695853a306 Improve naming and code comments 08d40f53a7a dra: test with and without immediate ReservedFor 98ba89d31d5 resourceclaim controller: avoid caching deleted pod unnecessarily 28b6c906966 Move DeleteFunc logging to level 2 761016482da Properly setup mutatingWebhookConfigurationManager{} 747dbd9b6b7 run `./hack/verify-gofmt.sh` 1eb60939fe5 Add smart reload for `MutatingWebhooks` aeefb762ece Properly handle parameter in `shareInformer.DeleteFunc` a01a8cb07e7 Fix webhook accessors caching pattern 7d3d44af776 Add webhookAccessors smart reloads unit tests c6f36e8702a Fix deadlock issue 99875b3fb73 Webhook Accessors Smart Recompilation 7d064812bb4 kube-controller-manager: finish conversion to contextual logging d743c50bb9e kubelet: support batched prepare/unprepare in v1alpha3 DRA plugin API 7a63997c8a1 Improve apiserver storage size metric to allow it's graduation 610509fedd9 Update standard app protocols f1f2fa9da8a kube-apiserver/corerest: split apart generic code 01c3a51a780 node: podresources: getallocatable: move to GA c1decb6763d Fix TestConditionalProgressRequester and TestWaitUntilFreshAndListTimeout flakes 1b8ddf6b79a podgc controller: convert to contextual logging f924bf95df9 dynamic resource allocation: Improve code coverage of state checkpoint c635a7e7d83 node: devicemgr: topomgr: add logs d78671447f2 e2e: node: add test to check device-requiring pods are cleaned up 5cf50105a2b e2e: node: devices: improve the node reboot test b926aba2689 e2e: node: devicemanager: update tests 3bcf4220ece kubelet: devices: skip allocation for running pods ab3a0b78ea3 Match both old and new kubectl version for a while in e2e c143a875edb dra e2e: fix "reallocation works" flake 6f1a29520fe scheduler/dra: reduce pod scheduling latency e01db325735 scheduler util: handle cache.DeletedFinalStateUnknown in As ef48efc736c scheduler dynamicresources: minor logging improvements 363874e9b56 setcap: update to debian bookworm v1.0.0 19869478c11 Migrate /pkg/controller/disruption to structured and contextual logging b81f07ac9a6 Add enj to apiserver options approver 6d6595d0f6e Add jpbetz as approver of apiserver integration tests 43b509de420 staging: Add endpointslice to publishing data. 7c873327b67 Convert controller name to reconciler variable. 29fad383dab move endpointslice reconciler to staging endpointslice repo c0030a4d27e Add support for watchlist to APF 9759fc3c230 Fix the converts an empty string to nil. 22c66784e03 staging: add endpointslice repo a34e06e74c7 kube-apiserver/corerest: structure Config 75e3576523f kube-apiserver: rewire service controllers: kubernetesservice + IP repair f22aa42aa81 bump go.mod cadvisor to v0.47.3 f855a23b455 topologymanager: promote TopologyManagerPolicyOptions feature to beta 3267dd9d529 kubectl delete: Introduce new interactive flag for interactive deletion (#114530) 23833b9c81c topologymanager: Increase TopologyManager test coverage by adding negative test cases around NUMA topology discovery 998654e0443 topologymanager: fix TopologyManagerPolicyBetaOptions not being enabled by default fec25785ee6 dra: store generated ResourceClaims in cache ba810871ada dra e2e: check that not generating a ResourceClaim works 0fc62d5ded0 dra: generated files 444d23bd2f1 dra: generated name for ResourceClaim from template 98461be8ffa Implement conditionalProgressRequester that allows requesting watch progress notification if watch cache is not fresh cd14e97ea80 Add a builder for ContainerAllocateResponse objects db2a1edbdd6 Generate empty cdi annotations f0e3c32fe56 Move CDI annotation code to utils package 354b6c409f5 Rename updateReconstructedFromAPIServer 1903f5aa2ad Rename volumesNeedDevicePath 7cd60df4aa1 Update volumesInUse after attachability is confirmed 0a2272dc68d Add uncertain state of volume attach-ability bf48165232f Remarks to syncJobCtx 990339d4c3e Introduce syncJobContext to limit the number of function parameters 94b782680c0 Update publishing-bot rules for release branches to Go 1.20.5 f443c458afe move non-graceful node shutdown to GA 645cb907320 migrated pkg/controller/endpointslicemirroring to contextual logging 98c6e25c371 update name of pod index label 09849b09cf4 migrated pkg/controller/endpointslice to contextual logging de076430957 Document address family of listening INET sockets 08dd657a71c Implement metrics agreed on the KEP 9b1c4c7b57f Implement KEP-3836 cca66011067 Add reason to force detach metric e655931274f expended type checking. 8fb5b6eb4c1 node-e2e: Add container lifecycle e2e tests for preStop hook 47ef977ddd5 Direct reference to the packages 7286d122fb7 Mark pods with restartable init containers as `UnschedulableAndUnresolvable` 0a987079128 Sidecar: Update printPod to show restartable init container information ea1eb7f8f79 implement sidecar resource calculation 03c22176877 Sidecar: Add e2e tests b94fa250c27 Sidecar: Implement lifecycle of the restartable init container c187b381173 Sidecar: Generated code 5d26bcd468b Sidecar: API changes 10dc1ca0846 Skip GracefulNodeShutdown on older systemd versions f7a1fb76f4f Only declare job as finished after removing all finalizers 3f07fc3acc9 Remove long/golang version information making short the default 3a5268502f3 Remove deprecated scheduler CLI flags 68ed020b2a3 Split IptablesRulesTotal metric into two different metrics bc059817dc5 fix: Add "metav1.CauseType" to "field.ErrorType" map c0eb0caf4ac Support fine-gained rescheduling in ReservePlugin d7708e79d32 Use cmp diff 278a8376e17 Fix: fiterror in permit plugin not handled perfectly 14bd9bc127e CHANGELOG: Update directory for v1.28.0-alpha.4 release 2fe38f93e53 feat: Append job creation timestamp to cronjob annotations (#118137) 1acdb4ae86e [KMSv2] Mark KMS v1beta1 as deprecated with no further fixes (#119007) 02c59710eaa Test the IptablesRulesTotal metric in TestSyncProxyRulesRepeated ecf0cee91ce update comment on feature flag 3a02ecb3418 check test case param instead of feature flag in unit test code b10cc642b56 DRA controller: batch resource claims for Allocate be0db3f93d7 clean up the implementation around QueueingHintFn 5175752df74 Issue 4230: remove readiness check for cache exclusion 132d477cb7a use stopCh to avoid goroutine leak in tests 20a25cbfcfb Add user specified image to CRI `ContainerConfig` 65e818d4ecf Introduce apiserver_flowcontrol_current_executing_seats metric 1bf2f6c9c05 feat(NodePorts): return Skip status in PreFilter dfc1838379f Migrated pkg/controller/volume|util|replicaset|nodeipam to contextual logging 6c0387d0047 Migrated pkg/controller/endpoint to contextual logging 3cf2822bc58 Migrated pkg/controller/garbagecollector to contextual logging 921b7e6e8f7 remove equalReady and replace with k8 util function a647f9febbf default enabled pod index for test cases, add test case disabling it 322da7c1aae fix gc metrics 02efe09abe3 component-base/logs: improve handling of re-applying a configuration 1240a29af9c Hide numberOfMissedSchedules as an algorithm internal number c733c57962f pkg/controlplane: wire core storage as RESTStorageProvider 65b34221ebb kube-apiserver: remove IP repair plumbing from kubernetes service controller 9dcc57ede62 Stop using deprecated API 5e1777be529 Update debian-base to bookworm a514f40131c dra resourceclaim controller: delete generated claims when pod is done e8a0c42212d dra resourceclaim controller: remove reservation for completed pods 7f5a02fc7e4 dra resourceclaim controller: enhance logging d1ba893ad8e dra resourceclaim controller: refactor isPodDone e2900da46aa Remove unnecessary utiliptables.Interface arg from local detectors 7690c6e8121 Simplify getDualStackLocalDetectorTuple cefd50a753e Improve the single-stack LocalDetector behavior bfccfa7016b Add names to the getLocalDetector unit tests, use t.Run 16e9cc42c1a e2e node: remove unused test/e2e_node/gcp 932d0337b82 e2e: detect unexpected command line arguments 68aee61d4f7 SPLIT: kube-apiserver/corerest: split out service IP setup logic 443bf3b01b0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/cache dad3e4d2112 SPLIT: kube-apiserver/corerest: split constructor 31943cc3f44 kubeadm: check the GV after the config migration b4f479d1f29 bump npd to v0.8.13 a556feb7cbe run hack/update-vendor.sh to fix verify master 4149933ed2e kube-apiserver: move "public IP matches IP family" check to option validation 616c9599880 FIXUP: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice c26e1ba10c3 [UT] increase coverage kubeadm/app/phases/dns b36fdd68b72 Test consistent List 01b1174c114 kubeadm: fix "migrate config --allow-experimental-api" to print v1beta4 kubeadm configurations instead of v1beta3 18f2e9055fc Add OIDC integration tests c68a6b07456 kubeadm: fix fuzzing for ExtraEnvs defined in the control plane component 80b035a116a kubeadm: Support custom env in control plane component 6b01ece5806 scheduler-perf: fix perfdash display problem 29e5771aa4d scheduler-perf: shorten "Name" label in metrics e08bd3bc263 Simplify DeleteCollection 7b62d000a4d MOVE: pkg/controlplane: move bootstrap controller to controllers/kubernetesservice 2b03f04ce58 Initialize the AuditEvent with the AuditContext (#113611) c903c29c3b1 e2e: support admissionapi.LevelRestricted in test/e2e/framwork/pod 19cb6d036ae kube-apiserver/corerest: remove redundant interface ede17eace45 test-e2e: Retrigger the RBD image post merge job a966d186083 Double-check the proxy configuration vs the available IP families 36e458612a9 cmd/kube-apiserver: move back master count variable from generic controlplane 1cfb932111e kubectl: Allow parallelizing diffing bcbc12cd79c Fix `should be able to create and delete a critical pod` test 4517d3004ad bump kube-dns to v1.22.23 985cf718a43 [Dual-stack] Fix generateAPIPodStatus() of kubelet handling Secondary IP hostIPs order may not be be consistent. If secondary IP is before primary one, current logic adds primary IP twice into PodIPs, which leads to error: "may specify no more than one IP for each IP family". In this case, the second IP shouldn't be added. f6a86bb2030 fix indent error c143710ecf1 upgrade npd image version to v0.8.13 for kubemark 96694514a75 Remove csiDriver Conformance test bb0c3a08189 Remove proxyutil.IsProxyableIP / IsProxyableHostname 59592ba4639 Add OIDC test server 1f2bf32e95f Figure out single-stack/dual-stack support before creating the proxier 8abfa89e82b Move proxy platformSetup call, and do LocalDetector setup from there ebb0fdd4f6f Don't explicitly filter config.NodePortAddresses by IP family a74b9fde3aa Don't pass around full node in proxy constructor, just pass PodCIDRs 0537c1da563 kubeadm: move migrate / validate tests out of config_tests.go b01a4145b2c Install ecr-credential-provider during node e2e tests 4e6aa5fb861 kube-proxy service health: add new return header with number of local endpoints a5df442be78 flowcontrol: copy object before passing it to client-go Create to avoid data race ea34d039256 integration testing: configure gRPC logging during init 1c48b7ec144 Add servedVersions info in StorageVersion API d548983dbb2 Use table-driven table for TestPerPodSchedulingMetrics e0af0a5a455 add test case param for feature flag d68f5f0d921 fix tests 44f1c4dd94d fix duplicate metrics issue 84b3d9b7b7e remove legacy NetworkPolicy tests 0eeca0987a6 fix tests 04ea1d506b4 promote sli metrics to beta f96d83af668 Copy container logs for easier debugging dfc150ca182 e2e: node: podresources: cooldown the rate limit f7cf9effa33 fix kubelet podWorkers.SyncKnownPods() typo 52ef833b6c2 Bump cadvisor version in tests to v0.47.2 8266c4d934d Generalize watch storage tests d53762ec3a5 remove unnecessary comment in pkg/scheduler/framework.QueueingHintFn 1b47e6433b8 dra delayed allocation: deallocate when a pod is done dbdd861ea36 chore: address review feedback 72294e4eff0 scheduler test: Use cmp.Diff instead of reflect.DeepEqual for pkg/scheduler/internal/queue/ f269acd12b2 Make QueueSet support exempt behavior; use it 931456a1427 Simplify the node name for metrics - just use localhost 3e5fafd57ab Drop docker.log and add cloud-init-output.log 1c7e87cff27 client-go: add DNS resolver latency metrics (#115357) 150f732c7ee [StructuredAuthenticationConfig] wire request context to claim resolver 4a5a242a68d dra e2e: using logging for background activity f1700e4b95b Cache authz decisions within validating policy admission. 60fb8f2fbc5 Exclude terminal pods from Daemonset e2e tests 24f4785e3eb kubeadm: remove unused Kind and Resource functions from output API 16fdd3e5eef apiserver: introduce larger buckets for flowcontrol request_wait_duration_seconds bucket 90f82d05ce2 kubeadm: remove unused Kind and Resource functions from kubeadm internal API fd15c6791a4 kubeadm: restore and generalize the TestMigrateOldConfig test d616cf72a3b Add unit tests for parallel StatefulSet create & delete c6079843792 apiserver: introduce larger buckets for request_filter_duration_seconds metric ef265101648 Return Skip in PodTopologySpread#PreScore under specific conditions 732775ee7d1 Paginate within DeleteCollection call. 0d41d509d2d scheduler_perf: replace gomega.Eventually with wait.PollUntilContextTimeout cecebe8ea2f scheduler_perf: add TestScheduling integration test dfd646e0a89 scheduler_perf: fix namespace deletion d9c16a1cedd scheduler_perf: fix goroutine leak in runWorkload 2e7f37353cb test/integration: avoid errors in fake PC controller during shutdown 812556365b6 kubeadm: backdate generated CAs by 5 minutes 44692a486f9 client-go: allow to set NotBefore in NewSelfSignedCACert() cfa2fa6d774 put feature gate in alphabetical order 860aab842db fix a reference to the wrong variable name a75b00ea39d Better URL for scraping metrics from kubelet 685b0c5efa1 Bump to latest node-problem-detector version with arm64 cad338890df add test for apiservices.apiregistration.k8s.io discoverability in openapi/v3 9e3b5b65838 update openapi ad2b4368e21 expose apiregistration.k8s.io into OpenAPIV3 bb8766daaf6 feature flags should be ordered alphabetically 7f4c187ab26 kubectl explain should work for both cluster and namespace resources and without a GET method a9afaa1eee9 add feature gate dfce076c6cf Update the template.pot file with latest message IDs. a4519665fe0 Skip terminal Pods with a deletion timestamp from the Daemonset sync (#118716) 9c7166ff639 wait for eventhandlers to sync before run scheduler bde66bfb55c kubelet dra: restore skipping of unused resource claims 874daa8b52c kubelet dra: fix checking of second pod which uses a claim 6c587b43e92 Cleanup pods at the end in Pod conditions e2e node test 56c5c8f7eef Revert "Make CA valid 1 hour in the past" ecd727e4c75 Fix PodGC test when PodDisruptionConditions disabled (#118805) bdbf07525fa test: remove exception comments in discovery tests 6fd830a075f hack/tools: bump golangci-lint and consequently staticcheck 1af54256969 hack: disable gomega.Consistently/Eventually check due to false positives f618e613322 e2e: replace gomega.HaveLen(0) with gomega.BeEmpty() e7df337ebad e2e: replace gomega.Equal(true/false) with gomega.BeTrue/BeFalse() 8b33e8bdd1b e2e: fix gomega.Expect calls without assertions 0ef1f2f2d89 Set AWS specific credential provider when running there b0f694f50ac CHANGELOG-1.27: Add note for AWS in-tree provider removal af1c9e49c49 Update schedule logic to properly calculate missed schedules 0033f658085 increase the log level for the GetTargetNodeName error message 08198fe22b5 Extend Large Create Timeout to 60 min 9354e78289f no-op: split transformer interface 21760534157 add completion index as pod label 8083d0d22e2 pkg/controlplane/apiserver: remove temporary import restriction of cmd/kube-apiserver 764da8a01dc FIXUP: cmd/kube-apiserver/app/options: split apart controlplane part 1b3779baa0d MOVE: cmd/kube-apiserver/app/options: split apart controlplane part 3df92362abd fix openapi/v3 non local apiservices aggregation 4298953c26c kubeadm: remove unused Kind and Resource functions from v1beta4 API 6e079545c48 cmd/kube-apiserver: move options completion into options package f04484fe775 kubeadm: add the --allow-experimental-api flag to "config" commands 0774f779d5c kubeadm: add v1beta4 to the kubeadm API scheme 38222014c61 kubelet pod-resources: add e2e for KubeletPodResourcesGet feature f7239e40959 Better back off delays and connection timeout to talk to containerd e4f93d8a82d ipallocator bug if ips has leading zeros 89a9e480f9b fix: update deployment e2e tests 41d961758ee update cri-api change in v1.27 22258a263f4 Fix stable metric finder for NewDesc with custom import name 13842746227 Update metric documentation 45aa59946af Refactor FindAttachablePluginBySpec out of CSI code path 07f38a3ec18 add test 6f8d38406a7 feature(scheduler): implement ClusterEventWithHint to filter out useless events 531d38e323c features: rename UserNamespacesStatelessPodsSupport 556d713a4ad apis: drop check for volumes with user namespaces 8ed23558b44 Do not set jm.syncJobBatchPeriod=0 if not needed 17013d39604 Review remarks to improve HandlePodCleanups in kubelet e3ee9b9adc1 Fix the deletion of rejected pods c91c578795c scheduler_perf: skip expensive cleanup during benchmarks 92a35f5bca9 Usse generics to simplify pkg/registry/flowcontrol/ensurer 902c711fb49 Unset gated pod info timestamp in addToActiveQ 56cb4c93918 [bug] Update DefaultObjectDescriber to handle interface params (#118190) 1053d1bbcf5 CEL lib: Expose errors on authz decisions instead of raising them from check(). 406899360b5 Refactor shouldDelegateList/shouldListFromStorage to better explain decisions e4cf103c9b9 Test all cases for LIST request cache bypass 7f532891c9c e2e tests: set all PSa labels instead of just enforcing a9af2de8fdd Refactor WithRequireLeader to make it part of the etcd store 1bd3f072fa7 stop ignoring storage class selection errors e5cbc51d29d e2e framework: allow setting all PSa labels at once edb59e9bc75 kubeadm: move token defaulting and related constants to token package ec70b2ec801 e2e dra: add "kubelet must skip NodePrepareResource if not used by any container" fdd992da865 upgrade image addon-manager/kube-addon-manager:v9.1.6 to v9.1.7 420fbd11e44 ignore Histogram for prometheus client v1.16.0 c98e72841b1 Add a connection backoff to talk to CRI impls 409bc8ccc05 deps: Bump to cAdvisor v0.47.2 f72c2c2b7d2 add process start to prometheus handler opts bbc7ca94a42 CHANGELOG: Update directory for v1.28.0-alpha.3 release ab75e48494c storage: stop using deprecated io/ioutil 687ca0e0bb2 fix(script): handle wait_for_success failed condition eecac058718 kubeadm: add v1beta4 API boilerplate 63e5b6bdb24 Parallel StatefulSet pod create & delete 2fb472c83cd Refactor StatefulSet controller update logic 784a309b917 Do not error in Job controller sync when there are pod failures f2e3157df0a Remove AdvancedAuditing feature gate. bbae445d172 fix metrics test with 1.16.0 prometheus client 180c2332bf8 [UT] increase coverage ut for kubeadm/app/features 564c236ce28 Do NOT prepull images for e2e-node jobs c84b5b0a99f Cleanup unnecessary renames of variable t c9b01dd9778 Fix race in logging expectations 3dd1bac4dce Set small DefaultJobPodFailureBackOff in Job integration tests 85d9339ef8f add KCM names into CCM cmd allowed import-restrictions 3b55f20bd34 update vendor 4e6a3fb9c10 deduplicate cloud provider controller names e5f5a9bfdbe use controller names for CLI FlagSets to show the names in help cd56748ec57 reference controllers correctly from CLI help 9fd8f568fe0 introduce CCM controller aliases and unify controller names 94792d85dea simplify TestValidateControllersOptions test 97309511366 introduce KCM controller aliases and unify controller names ba1755132e1 support controller name aliases in GenericControllerManagerConfigurationOptions 2596245f5a7 Replace deprecated sets.Int with sets.Set[int] in Job integration tests e5116a39c96 fix: kubectl expose fails for apps with same-port, different-protocol 958c8fb6950 Make use of `k8s.io/utils/pointer.Duration` ede2ec22b68 kubeadm: drop older etcd versions from kubeadm support 8cd65e9cee6 reorder hack/unwanted-dependencies.json map keys and arrays f44029705f9 exit 1 if status are not as expected(order) a1e0aa0e504 DRA Node E2E: add NodeAlphaFeature to fix CI 74c5ff97f18 Lower the constants for the rate limiter in Job controller f54c15d4e80 Change the fieldpath in the deprecated plugin response 471fd1ae8a1 deprecate RBD plugin from available in-tree drivers c51a422d787 Cleanup job controller handling of backoff fff5b35023b Adding review changs to update 889ecf865b7 always execute condition for wait.PollUntilContextTimeout with immediate=true 5aa5f1abc9c update prometheus/client_golang v1.14.0 to v1.16.0 5bde9404a09 Remove unused error return value from internal function 8636f9353a8 CHANGELOG: Update directory for v1.27.3 release 763555814b5 CHANGELOG: Update directory for v1.26.6 release 3bf93156d80 Update pending_eligible_endpoints.yaml to match APISnoop ff2a1f0167f CHANGELOG: Update directory for v1.25.11 release a29be0cfb00 update container runtime flags to use containerd instead of docker 89adbc6e5b5 check for AWS environment before running sudo 7f650acb3c1 CHANGELOG: Update directory for v1.24.15 release a83edd35c4a DRA Node E2E: relabel test suite to fix CI c27f9fdeb79 Add warnings for big number of completions and parallelism a86380c7813 Update CLI help text for grammar and consistency 96e7d5f1f25 Bump iscsi test server image e0f273ffdaf use ingress-gce-glbc v1.23.1 image for CI e213448db12 Updated kubectl explain help output 7bc449d7e0c add contextual logging to job-controller cfbc5dc54f8 mount-utils: fix linter warnings in tests 8ced101db53 mount-utils: stop using ioutil in tests 699d118d85f mount-utils: stop using ioutil b690450e846 mount-utils: don't reread mountinfo on newer kernels 8c79a911331 mount-utils: isMountPointMatch: simplify and speedup 404e844468b mount-utils: add isMountPointMatch test and benchmark 4bb02392793 mount-utils: IsMountPoint: fix 167252fb5e0 mount-utils: format with gofumpt 55b690ee018 kmsv2: no-op refactor priming logic into its own function 15003c609d0 kmsv2: refine probing logic to avoid slow starts d8150b81601 kmsv2: add a sanity check to confirm that new state is always valid 8c06ca68d7d Details added in kubectl explain help 4960207b317 DRA Node E2E: test NodePrepareResource timeout 5c5f6e8fe2f DRA Node E2E: add NodePrepareResourceCalled API 673d0aaa60c DRA Node E2E: add call blocking to the Kubelet plugin APIs a60314c47ef Make etcd component status consistent with health probes e1735b98637 Make CA valid 1 hour in the past 5e048041e40 remove helper function for unused storage feature in pkg/proxy/util e1aef2ac917 Bump publishing bot rules for Go 1.19 branches 9cb52a6872c Fix the flaky legacy_service_account_token_clean_up_test. 4e20a8f52bc kill all processes in a container in the event of OOM 0222e6d4ae3 Update kind details for DRA e2e 75cf25c0e7f iscsi: use dbus from the host f7a5817bc65 e2e storage: terminate worker quietly on test completion 22de2c27d1b scheduler: improve cache_test.go - Add test name to enhance test readability - Remove redundant test tables 325205efb72 Migrated pkg/controller/endpoint to contextual logging be14b026e33 fix the integration test a7eb7ed5c6a refactor: simplify RunScorePlugins for readability + performance 587f992a7b2 e2e: deflake a HPA CPU test by stabilizing cpu consumption 672614b57e8 apf: refactor bootstrap ensure strategy 910630fbea2 kubelet: mark '--azure-container-registry-config' flag as deprecated 5e6ae25a33b Updates chairs, tech leads for sig cloud provider 34368884783 move luxas as an emeritus approver of test/e2e/lifecycle e97d9803f2f add SataQiu as a test/e2e/lifecycle approver 4977189c1b0 Fix ginkgo noColor deprecation warning e6bc945a61b Add startup probe in integration test ea1de7517ee CHANGELOG: Update directory for v1.28.0-alpha.2 release 7ccc2317839 add test for authorizer type checking. 54cae706786 Pass the mandatory parameters to support testing on ARM64 fdc49f5257c Return deprecation warning for storageOS,PhotonPD,ScaleIO..etc 151509fb74d Remove unreachable warning on volume name dup d73923c8ebf fix 'pod' in kubelet prober metrics 0ddaa7f7c9f Fix warnings on "duplicate" env vars 4820cc852a0 Minor fix on variable a6f5abfb81e Updating names from webhookconversion to conversionwebhook 0fe84ff7cb1 Re-add the legacy wsstream package and deprecate it 8f3109da791 Refactor wsstream library from apiserver to apimachinery 6d4abd7e7b6 bump distroless-iptables to v0.2.5 04fa4184ed3 add support for authorizer to type checking. e5a15c87e9d Ensure timeout test handlers don't complete before timing out. f2a64cb91d7 fix Cronjob status.lastSuccessfulTime not populated by a manually triggered job 2f6b1d3c0fb Ensure Job sync invocations are batched by 1s periods ed429c4388a replace node-role.kubernetes.io/master taint with node-role.kubernetes.io/control-plane for gce kubelet flags b1da721bdd7 Update vendor with hack/update-vendor.sh 88b69cdd0e6 Fix flaky persistent volumes e2e test d9e12db547e Bump images, versions and deps to use Go 1.20.5 ea6495e8284 Remove StartupProbe on debug with pod copy ac15d697578 remove RetroactiveDefaultStorageClass feature gate checks 6afb363ca17 test: remove RetroactiveDefaultStorageClass feature gate 97a81a59f62 test: correct validation test error message 42722ffef02 graduate RetroactiveDefaultStorageClass feature to GA in 1.28 7f87ec9406a storage: Add MadhavJivrajani as reviewer 7ac36bd0720 test/integration: use t.Log in TestAPIServiceWaitOnStart 77cf37ee543 STRUCTURE: cmd/kube-apiserver: move admission construction back from controlplane 7961812bed8 STRUCTURE: cmd/kube-apiserver: move OpenAPI construction back from controlplane 43be9c3a0ac MOVE: cmd/kube-apiserver: move genericapiserver construction into controlplane package 9be6e7bb339 STRUCTURE: cmd/kube-apiserver/app: stratify construction with options/config/server e6ed4c7934d CLEANUP: cmd/kube-apiserver/app: remove trivial funcs f7d4e90b5c4 MOVE: cmd/kube-apiserver/app.createAPIExtensionsConfig -> pkg/controlplane 087fbc9304f Remove invalid merge key 4962e6eacb9 Squash detectNodeIP and nodeIPTuple together b5db644422d Add merge map key validation to StorageVersions 58162ffd63b DRA: add node tests b69b34bec64 Move a kube-proxy unit test to the correct file 4bee9b2b352 structured logging in proxy/ipvs/ipset 26801d6541a kube-proxy avoid race condition using LocalModeNodeCIDR 4dbece1e203 e2e-framework: remove node-role.kubernetes.io/master taint from non-blocking-taints dddbecb47e2 prune's xml files to display only top level tests and failed sub-tests 8b0a6ed6999 re-send the shutdown signal in case the dbus restart is not done 4d0e25151db Fix SELinux contexts used in e2e tests 010343562c6 dependencies: update github.com/dustin/go-humanize v1.0.1 743e5525edb fix eviction failing test for nil feature gates assignment 6d66fbc6b67 storage: Move cacher tests to reside with the cacher code 70978e4af61 cacher: Move common testing utils to a single file bdfb96c57d3 chore: os.SEEK_END os.SEEK_SET and use b.Logf(...) instead of b.Log(fmt.Sprintf(...)) 7a80d7c839c add warning for duplicate containers[*].ports with the same port, protocol, hostPort, and hostIP 923db7bd8e0 chore: use strings.Contains instead e9e4acb1dde k8s.io/apiserver: remove skewed completion from EtcdOptions 4d85a1f00cb storage: Implement TestWatchFromZero for cacher 2e76ac31fd8 Replace os.Setenv with testing.T.Setenv in tests ac5ce5cbce7 Replace os.Setenv with testing.T.Setenv in tests b274a9bf7c4 remove csidriver endpoints from pending_eligible_endpoints.yaml 5d4bf0b6f90 Promote CSIDriver e2e test to Conformance 3085b57869a Do not copy bytes for cached serializations c009667c6c6 deprecate CephFS plugin from available in-tree drivers. 1fcfd1d5090 pkg/util/iptables: use buf.String() instead of string(buf.Bytes()) 9eaa50cc829 Rename scheduler queue variables for consistency 6195f96e56e minor fix comments in netpol so its easy to understand the tests for newcomers, remove one misleading comment (#118264) 410b6023d6f scheduler: fix code style issues for pkg/scheduler 71ab7dc791f Remarks 70d3bb43e56 Adjust the algorithm for computing the pod finish time b994e639a6b Add mininumKubelet tag into ReadWriteOncePod test db9fcfeed29 Move cri/streaming to k8s.io/kubelet staging repository da4a8d831b9 kubectl: use bytes.Buffer.String 8e4228a8c1f remove CSI-migration gate a5c4fbe9791 chore(fix): test jsonpath condition parsing errors 9d3e55ec431 Support JSONPath condition without value f520f6fd06c Add Pod Termination e2e tests to test termination grace period seconds b4dfae25dee fix terminationGracePeriod blocked by preStop fd92acba5a8 chore: should use buf.String() instead of string(buf.Bytes()) 20866b3f85a dryrun: Don't reuse current object for conversion f351c6d1ecc k8s.io/apiserver: apply storage object count tracker implicitly 45c9e066164 Fix errant debugging code in codegen a51be9786ba remove enabled by default beta resources that have been removed f4d326a1fcc verify: produce JUnit file also for pull-kubernetes-verify-strict-lint a4ea058cc75 feature(scheduler_perf): distinguish result in scheduler_scheduling_attempt_duration_seconds metric result 322968e9b38 Update unwanted dependencies per CI instructions 2111e79f56a Update gnostic references 1993a4cb379 vendor 0b4efddae01 verify: nicer failure message rendering in Prow dbbb21469f4 verify: pick relevant lines from verify-golangci-lint.sh as failure message d6168bb6587 Add ephemeralcontainer to imagepolicy securityaccount admission plugin 70ff750c755 chore: io/ioutil deprecated 1ce285ad3df Revert "removed the deprecated `azureFile` in-tree storage plugin" daa71159077 kubeadm: add deprecation message for UpgradeAddonsBeforeControlPlane feature gate a6c7f63b188 Set the node-ips annotation correctly with CloudDualStackNodeIPs d49c43abde5 kubeadm: add integration test to ensure that the supported etcd version is always available for the stable Kubernetes version 6d23da045fc Migrated pkg/scheduler/framework/plugins/interpodaffinity to use contextual logging db2389ba9c8 kube-proxy: remove log warning about not using config file 15aa00fc836 Remove unused `getSeccompProfilePath` helper function d0a64739e2c e2e dra: collect and check GRPC calls 68901de8981 Enable optionals and add tests 5c0b59891d6 Bump cel-go to v0.16.0 5b3510c0b67 Fixing gmsa-webhook install steps for Windows GMSA full tests c539c739161 Changes to buckets and comments 35d2431b3a8 informer: fix race against Run and SetTransform/SetWatchErrorHandler 64269620597 Changes to histogram buckets c48c4c679ad Fix ginkgo deprecation warning 5a14573258b clean: use info instead of error to log queue closed message when scheduler exit f2a5e247ebf add pacoxu to kubeadm approvers list 705c6ff315b Review comments, added metric namespace, moved utility functions, and etc a8ef109aca0 CHANGELOG: Update directory for v1.28.0-alpha.1 release 369e3faa4ff Moving Kubelet Credential Provider test to common so that it can be run both as Node and Cluster test 2d8c820741d move pkg/util/ipset inside pkg/proxy/ipvs 85e0d8c8b14 Revert "kubeadm: add --feature-gates flag for kubeadm upgrade node" f3ba9353363 Consistently use proxyutil as the name for pkg/proxy/util b3111170f8e remove Ephemeral Containers form list 64c9070f8d0 add pod containers[*].port duplicate warning f9ae3e774d0 testutil: use contextual logging 534f5edb53c Cleanup boilerpate.py d9e2583af16 test/e2e: replace deprecated ioutil 4b4b3b71b78 clean up dead code 4523a301c87 kubeadm: enable --feature-gates flag for kubeadm upgrade node 074900e81bd scheduler: update the scheduler interface and cache methods to use contextual logging 0951204298a kubeadm: Supports() return true for all alpha/beta/ga/deprecated c6aaa1eab04 kubeadm: lower the log level of EtcdSupportedVersion warning message as it is a kubeadm internal warning 4e6d929580a deprecate csi migration for ceph rdb 11a40406a1f Promote Ephemeral containers e2e test to Conformance bf116e85943 Optimize reflect checks further, save item type information 12e3d9fcc4c Implement WithAlloc variants for EachListItem and ExtractList efc601302ad Extract List reflect optimization b8a3bd673dc Add WithAlloc interface and stub implementations with base benchmarks 4aa5441de2e Move pkg/util/ipvs inside pkg/proxy/ipvs 0535e742241 feature(schedule_one): use heap to find the highest score node 532fe3c9653 Add kerthcet and sanposhiho as SIG scheduling approvers 8df1a5e6dcb Webhook conversion metrics a045fedd025 Update google.golang.org/genproto 455169bd66a e2e storage: add missing error checking for WaitForVolumeAttachmentTerminated d76043958fb Follow up from dynamic retryAfter 510287d3444 Fix the git-repo test error caused by the correct use of loop variables 926bc9bf8e5 Update podFailurePolicy comment from alpha-level to beta 7d2e1888f8a Chore: fix the example about how to use PollUntilContextTimeout 4d2ff08bfa1 e2e-framework: code cleanup for mismatched comments 15678e4a67e Optimize usage message of commands which have subcommands. 6a867eacd85 kubeadm: warning only for deprecated FG 4dfc684b342 Set kube-proxy memory request to 50Mi 5d18f471494 Improve clarity and guidance in provisioner waiting message 7a6b4a9215e dra scheduler plugin test: fix loopvar bug and "reserve" expected data e31b2080f5a e2e framework retry on Service unavailable errors a50549cc906 e2e rc: if the pods are running but not ready the test will fail 133eff3df49 implement LegacyServiceAccountTokenCleanUp alpha a6003ae1e11 fix unknown field error in rs e2e 27057def059 Signature fix for registeropenapi 4373ae05f34 Update vendor 72e4c9a82ac kubeadm: add the "config validate" subcommand f4891842194 Delete CRDs created during field validation tests. 2ea6896f90c Add warning log callback in client-go loading rules (#117233) 485d1631cd3 Remove Azure file in-tree storage plugin 2eed9b4143a Should get ENABLE_CLIENT_GO_WATCH_LIST_ALPHA when new reflector e2ed8f8c3ca style: correct the sentence 08139044040 Fix: Restricted profile comply with PSS (#117543) c68f8586580 proxy/ipvs: github user name change: daman1807 -> aroradaman 05b3beb7f02 Create e2e test for CSIDriver endpoints d459b4429f4 integration: remove special verbosity for garbagecollector and graph_builder 931cc96b8d4 remote windows condition when #116693 is merged 0bff705acd8 Preserve code blocks in templates.Normalizer (#118029) 7470a94f5a9 add some log for debuging 6232ac734a0 Merge duplicated Linux/Windows kube-proxy setup code 08ce5805769 Add ProxyServer.platformSetup e0b7f31ce6e use standard base image in dra dev 149f4878a70 Simplify DeferCleanup. dbb6d25f13b e2e: apply timeout for CSI Storage Capacity test only to node 1c05cf1d516 kube-scheduler: NewFramework function to pass the context parameter 1b206399f6a fix using stale binaries in local-up-cluster ece68cf8337 Fix update-vendor.sh logging cba8c1f5e2e Fixing windows memory allocation e2e tests after a refactor 96d48de9b97 add OWNERS for cmd/prune-junit-xml 86a258b13a2 kmsv2: ignore cache key expiration on reads 89439b570fc test/e2e: use agnhost latest version in the manifest b30720fc9f0 Add test for starting kubelet with a CSI volume mounted ad9e264c3cc test/e2e: Use json.NewSerializerWithOptions in place of json/yaml newSerializers. 048938f1d85 hpa: cleanup `currentReplicas` code 0f5535ea259 registry/core/service: remove incorrect comments 2db577a560c scheduler-perf: inject "benchmark" as name into JSON result filename 0789bbe9f7a Update k8s.po b6364dddfe6 update webhook test to go 1.21 d8db9640fab kubeadm: remove function pointer comparison in phase test 2658a2b627f Make connection lost retryable in webhook ed26fcf5b87 cleanup useless null pointer check about nodeInfo.Node() from snapshot for in-tree plugins e21cf9a54e9 Setup e2e_node to support testing on ARM64 ec8d94f2057 Grab logs from all the containers when DNS related tests fail 182cd425d3b graduate LegacyServiceAccountTokenTracking to GA 337728b0255 Improve backoff policy in reflector. 0fe27a06f99 Cleanup the Job controller handling of terminating pods c74790e266a remove redundunt type conversion, unused variable...etc 07c94553608 fix apiserver InstallAPIGroups slices out of range aa11cc69696 Mark grpc-gateway v1 as an unwanted dependency 19ae2de19cb kubeadm: speedup init by 0s or 20s e4102d5e300 Test APIService safe handling at startup 3be3997193a Fix waiting for CRD sync at server start 71ec9df5b61 update image tags in manifests to reflect the version listed in the source a10ff53d8e6 Reword the event message to read better for a single secret b2eae2f92e9 Support podman for building release images 6b4251c0fdf Remove statefulset from logcheck.conf 3f1d8e7aeb4 Apply to use contextual logging for all loggers in statefulSet d9b941b7827 Remove undesired verbose fields from log bea71a3e4ee remove unused pv informer from expand_controller 4c9887e3ebd Updating the nodeAffinity of gated pods having nil affinity should be allowed a0f14c1c5ea CHANGELOG: Update directory for v1.25.10 release bab8002fb38 CHANGELOG: Update directory for v1.24.14 release 80b9c853613 belated cleanup of some kube-proxy stuff for old versions e553fe1fff0 CHANGELOG: Update directory for v1.27.2 release c9e4de90dbe CHANGELOG: Update directory for v1.26.5 release 526d45416fb update err status code check in transformation metrics 5a75a03a774 Improve warning message b76ef2e095f fix: move to `dl.k8s.io` from `kubernetes-release` bucket fc4fb004cf6 add reviewers and labels to yamlfmt 93462377120 Update docker/containerd/runc versions and capture more logs 885f3d7a7df Sort and limit to the describers the return (string, error) 9e9a6cde4b8 test/integration/scheduler: fix data races b035c373db8 build latest sample-api-server for test/e2e bafae5c0764 rename err to lookupErr 8b9cbe62025 fix false positive kubectl plugin unit tests b9950b5192d Drop zeitgeist from tools go.mod 36f0caf7ecd remove GlusterFS references from test/e2e/* comments/descriptions d83c3ce7ca8 make rbd and iscsi test images in parity with the test code 9de2846c72c remove glusterdynamic provisioner images reference from tests 763e7923fb9 e2e: replace ubuntu-slim with agnhost in hpa cm noExporterDeployment 261de704c25 kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet 666be79d670 legacy names of volume plugins have been gone a LONG time 8b4840aa374 clean up unsupport etcd version e0ebac6c9ca drop redundant NArg check when looping Args 82c40e3697e drop redundant NArg check when looping Args 829bcea7634 remove vestigial BUILD file 0616d15712b Fix perf-test by increasing the error margin 46ed70ecac5 Bump runc to v1.1.7 51d79c4d6b0 e2e: use gomega.Expect instead of deprecated framework.Expect* 1daf74d25c4 Initialize data if nil b81cfb9cb8c Update vendor 15c5713015e managedfields: Remove gvk from SkipNonApplied b52e57c589a managedfields: Improve/strengthen version checking for Apply 559d12fcce0 managedfields: Create NewFakeFieldManager 45853e20ae5 openapi: Create client -> TypeConverter function 45603efecb7 Create e2e test for PodEphemeralcontainers endpoints ebaf49dbd70 Export DefaultServerUrlFor utility function 5519b89a28e Validate lock identity e3eb4bd0c56 updating dependencies.yaml for etcd v3.5.9 version c99cf53a108 e2e: deflake hpa e2e custom metrics tests 247ea7fc780 use upstream etcd github path instead of redirecting one 6616e1f2385 update etcd version in install.sh to 3.5.9 0e456dcf866 Clarify localhost nodeport comments/errors a744a186b67 Rename GetNodeAddresses to GetNodeIPs, return net.IP 2ca215fd994 Add NodePortAddresses.MatchAll() d6e488b998e Changing annotate PrintFlags from annotate to annotated d8e82b1417c e2e: use gomega.Expect instead of framework.ExpectEqual in windows/* 8c6c1e53194 plugin_evaluation_total metric support preScore/score 3680a5230c3 Bump docker/distribution to 2.8.2 3ac74973610 Chore: cleanup in interpodaffinity 073b4cf66ad test/e2e/dra: fix kind cluster creation 3b69fa2fa54 dependencies: update github.com/mitchellh/go-wordwrap v1.0.1 19ae103e829 emit warning on deprecated annotation volume.beta.kubernetes.io/storage-class 517c5b75c5d Update unwanted deps d6d1dbdd82a Update kube-openapi, drop mapstructure a52dcd0d9f3 Add DelayCacheUntilActive option to start informers after leader election 7c554ea1d91 Regenerate discovery fixtures 2ab6fd3590b Capture discovery API output in test fixtures 3867569ae27 codegen 0819d342040 using parsers in applyDefaultImageTag 7da7468a3fc cleanup: duplicate request_test TestRequestAbsPathPreservesTrailingSlash f0f92853ad8 Add api-machinery TL owners permissions for jpbetz e4dd6f68dc8 remove CSIStorageCapacity featuregate 9ac657bb94e Make NodePortAddresses explicitly IP-family-specific f7bb9a9a0a7 Remove a mostly-unused variable in the ipvs proxy 1ca8f84eede Scheduler: Pass the supported nodeSelectorOperators to the field.NotSupported d85b91f343b scheduler-perf: measure workload runtime and relabel workloads aa405c8aac6 Allow runtimes to provide additional context on CRI pull errors 83fb5a50bc9 dependencies: bump k8s.io/utils daebf1c735d Simplify plugin resolution check function f562375c8a6 add changelog for kube-addon-manager v9.1.7 be4c4a51ea2 Update pending_eligible_endpoints.yaml d34d4755ae2 Promote APIResources e2e test to Conformance 6e2ea32fc89 feature(DynamicResources): return Skip in PreFilter a0133b7cc47 proxy/ipvs: added daman1807 as reviewer dcefc42b35a update vendor dependencies for the change ae749238786 etcd depdencies are updated to v3.5.9 13cef6a7549 cleanup unused variables for v1beta2 component config 815578295ae Revert "support short name for flowschema and prioritylevelconfiguration" 72202f9a007 Revert "add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations" 45836971f27 cli: replace intstr.FromInt with intstr.FromInt32 8580c116d5c fix: use dl.k8s.io, not kubernetes-release bucket ef9f8d7c0c8 kubeadm: Remove leading zeros from etcd member ID in log messages ff4c6916ec7 kubeadm: Fix log message when etcd member is added as learner 196e2f041b1 Update the cgroups v2 toleration in local-up-cluster 7248b9263f0 Fix comments on InformerFor 6ac1bae2815 test: Improve debug output of init container tests 1f16d711857 kubelet: Rename PodManager DeletePod to RemovePod 166256f73e8 kubelet: Reduce the interface pod.Manager consumers accept 8bd94dfa762 kubelet: Organize and document kubelet pod-related members bb568844b67 kubelet: Separate the MirrorClient from the PodManager 80b1aca580b kubelet: Remove dispatchWork and inline calls to UpdatePod e7207c85467 kubelet: Merge orphaned mirror pod names into GetPodsAndMirrorPods f8086f2dac1 kubelet: Convert IsMirrorOf to a function 02960a8253e kubelet: Remove unused mirrorPodFunc in eviction 1168b118750 Stabilize local-up-cluster in our CI 3dc4eea8896 proxy/service_health: release read lock early 655f2f74010 replace build to build.sh cc1251123ba use wait to avoid blocking the SIGTERM handler 808098c4c69 proxy/ipvs: healthzServer for instantiating the proxier 4b50c4bb016 Update --image-gc-low-threshold option's description 3da79e2850d OpenAPI V3 invalid document checks cbe825b2b6c ginkgo update to v2.9.4 and gomega to 1.27.6 feb63fb0285 e2e_kubeadm: stop using deprecated framework.ExpectEqual 7681135f1b1 etcd: Build image 3.5.9-0 7a4787ade10 openconsensus update to v0.24.0 82d1e356de4 deps: go-gcfg update to the v1.2.3 f03b5cdc083 update containerd/ttrpc to v1.2.2 dd49af86b7b [UT] add ut for pkg/client/conditions f7948c6e2e4 use kubectl v1.27.1 in cluster addon manager eb1483fe64d user --prune-allowlist in kube-addons.sh 20602c819be e2e framework: remove dependency on k8s.io/kubernetes/pkg/api/v1/pod 2e2afc7fd27 Job: Use generic Set in validation 1ffe3f467e8 lavalamp is taking a long break 1ea17254bf0 hack/tools: bump logcheck to v0.5.0 3fa55d469c7 fix a bug where the AttachedVolume is not printed correctly in the log 8c82855467b When expecting pods count only active ones de882f5193b Job: Replace deprecated pointer utils with supported ones 8f11f5bb2b5 DRA: use containerd 1.7 in kind image 123845da886 Log a warning if a ImagePullSecrets does not exist 3f3e1d507d0 add new metrics for the internal client-go transport generator e7c679c362c cidrset, multicidrset: directly use getIndexForIP method fe728996ca8 scheduler test: call frameworkruntime.WithLogger function for contextual logging b4563925678 Migrated `pkg/scheduler/framework/runtime` to use contextual logging bfb4f8b7071 etcd version monitor build go version update to 1.19.9 0ae902fca4c update golang version of etcd build to 1.19.9 3b634de6ffc test/e2e/dra: update README 5fdeaa8e42c update for feedback 6f23c774085 QueryParamVerifier falls back on invalid v3 document d5f4b9634c6 DRA: fix image build on Mac 569695b0226 e2e/network: setting --max-time for curl 5fd5768ef32 kubeadm: Make etcd member removal idempotent 164113bc1c3 fix a bug where the KubeletConfiguration is not printed correctly in the log a5575425b03 add no resources found message to rollout-status command (#117884) c0611b6bb33 Return Skip in InterPodAffinity#PreScore under specific conditions 11f1d241654 unit tests: Fixes kubelet util unit tests for Windows 3a394bbeada fix:translations zh_CN LC_MESSAGES k8s.po error 4634073d0b9 Use getter function for plugin subcommand resolution 2c03afac4c8 apimachinery/util: stop using deprecated io/ioutil e3d5feb76c4 fix HPA plain metric calculate 6607834207a Use the same report files as before 9150e6b55a1 s/of referencedFrom/from referenceFrom/ 4bbf611773d Retool validation for pod HostNetwork ports ec3379a717e Do hostNet Pod-ports -> hostPorts in Pod defaults ef796dca9bb Simpler openapi gen - subprojects do themselves 93b2845bec7 Codegen: subprojects openapi 4909dbd0d7f Deprecate generate*groups.sh -> kube_codegen.sh c3971002c9d MinimizeIPTablesRestore to GA 8f229057484 [refactor] refactoring flags and options in Expose cmd 82e3fa0930e fix fd leaks and failed file removing for main pkg and cmd 5289a7b029f fix fd leaks and failed file removing for test directory b94c6daa0b7 fix fd leaks and failed file removing for pkg kubectl and pod-security-admission 982d2966cd3 fix fd leaks and failed file removing for pkg controller-manager and apiserver 73aeed8766c fix fd leaks and failed file removing for pkg client-go f49cc5eb113 add remove_file in client-go util directory c8737346db4 Export GOMAXPROCS environment variable e865b30abd0 update serial number to a valid non-zero number in ca certificate (#117791) 308ab380d7c Add unit testcases of refMap. 23ac0fdaa52 APF: Dynamically compute retry-after based on history 99ebc8d9f82 Tweak annotating kubemark nodes on startup aab02d52f4d Fix make etcd image failed 91570a36614 promote ServiceNodePortStaticSubrange to beta e79daae6823 Chore: clearify need update test cases fb4d0150b96 Convert apiextensions-apiserver to new codegen 29913a89735 Convert code-generator/examples to new codegen 643bf1b0362 Convert kube-aggregator to new codegen 1e0b7aab756 Convert metrics to new codegen e368f1b25bf Convert sample-controller to new codegen d0e5adb58bc Add a new way for subprojects to do codegen 05b3449346e kubeadm: Add etcd client unit tests fc1b2287798 kubeadm: Use internal etcd client through an interface e740f8340ee Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables 235c261196e Job: Fix a misspelling b4560f9e573 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade f2de1a00b8f storage/etcd: skip SendInitialEvents if the request is backward compatible bbf5c03dd80 Add NodeLogQuery e2e tests ddb8c8a38b4 remove ServiceInternalTrafficPolicy e2e feature tag 16fecf3e761 Refactor APF handler in preparation for dynamic retryAfter d3237b72587 unittests: Fixes unit tests for Windows (part 7) ccb4ca89549 record podUID in refMap in watchBasedManager e4340f0d9bd Job: Use generic Set in controller 22d0aa1d04a remove DevicePlugins featuregate 27cdddeaf16 update Feature:KubeletCredentialProviders] e2e test name 2ebc0cc0257 remove unwantedReferences 57969c1b52c Fix etcd3 config changed 4e24237f3bc e2e services: retry if healthcheck nodeport is not avaioable e560df770e3 respect local GOPROXY setting in build/common.sh c56839c0a1e etcd: Update version to 3.5.8 64f2fe2357d kubeadm: fix crictl pull using wrong flag, use -i and -r 936265e8707 Add podUID in AddReference and DeleteReference cd51c1803e2 Add new partial/full sync time metrics for iptables kube-proxy a862a5f2d24 Use the right executable ss/netstat in log message ae08fe1e199 ProbeTerminationGracePeriod promote to GA 2cb215e1091 Add all describers to the exported DefaultObjectDescriber 5ea40d14fd9 Added e2e_node test for sigkilled pods exit code and exit reason check 3e57a0bd138 Add go.work and go.work.sum to .gitignore 008576da073 Improve and simplify maintenance of APF bootstrap objects 194ac957ad3 make resize of hollow objects more verbose in start-kubemark c3e77bf21cd Update podFailurePolicy comments from alpha-level to beta 4fa7e444805 Remove gcp cloud-provider checks for kubelet version >= 1.7.2 1c45bacfb0e mount-utils: fix flaky test 'TestFormat' 6a5cf99aad1 pkg/proxy: human-readable messages c2c8b8d1783 pkg/proxy: using generic sets 359bcec0e09 benchmark test to evaluate the overhead of podMatchesScopeFunc edd032e22b7 Fix incorrect calculation for ResourceQuota with PriorityClass as its scope e807a6aec57 Disable NewVolumeManagerReconstruction feature gate 0c9f55588c5 Simplify creation of default KubeProxyConfiguration ec2cc36404e e2e: disable jig.ExternalIPs b849ff57b85 e2e reasonable grace termination period timeout 791573ddb60 promote ProxyTerminatingEndpoints to GA b249b4ca9bb Promote ExpandedDNSConfig feature to the GA stage 5aca41af50f [local-up-cluster] Use the kubectl we built 8524d21bf48 Bump Ginkgo Poll Progress parameters to a sane level 034528a9f04 scheduler perf: add DynamicResourceAllocation test cases 1c52fb38759 Update publishing-bot rules for release branches to Go 1.19.9 19f7cb23c8c e2e agnhost functionality to RST TCP connections 63b69dd50ce Add support for CRI `ErrSignatureValidationFailed` 859359ad6ae Fix strict linting a7035f54595 Pass Context to StartTestServer 2d866ec2fc8 Teardown only scheduler in integration tests 8969fdd2f51 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents cede96336a8 Depend on k8s.io/utils cpuset 9f46cbc6fa4 Update k8s.io/utils version to v0.0.0-20230313181309-38a27ef9d749 10a869fc752 Remove duplicated config fields from ProxyServer 1f7c07f3553 scheduler: remove deprecated v1beta2 KubeSchedulerConfiguration a3848714f55 dependencies: update gh/Azure/go-autorest to latest version 17c17da97b6 e2e_node: move getSampleDevicePluginPod to device_plugin_test.go c53cc4fe0db Update distroless-iptables to v0.2.4 c4575c34382 Fix up detect-local-mode validation 3734fe7ab1d Remove some useless error checks 19885264f3d [go] Bump images, dependencies and versions to go 1.20.4 d82684e691d Add check to skip PodTopologySpread PreFilter if no constraints are specified d22b9310e6e Allow override of prerelease/buildID portions of version at runtime 36b760a9317 upgrade etcd deps to v3.5.8 7c5573d326d Fix cmd, integration, and conformance tests 69eccd41b89 endpointslice: reduce visibility of vars/funcs 933b665c18c Upgrades spf13/cobra to 1.7.0 3653b21e6ba Move glusterfs 1.25 deprecation notice to the deprecation section. 9d19c207d22 fix: fixes flake in TestKMSv2Healthz 561548e86c4 unit tests: Fixes kuberuntime unittests for Windows 5f489a33277 feat: rename PodHasNetwork to PodReadyToStartContainers a40810a2d9d Add comment about removing the feature gate e51e5962d5a Use early return pattern to avoid nested conditions e1e38148bb2 Add DisruptionTarget condition when preempting for critical pod 7be3f8e43f7 Remove old metric scheduler_goroutines e7396e35513 remove ability to re-enable serving deprecated versions of the runtimeclasses kind d96f83f02f9 windows-tests: Update connectivity check util function e496085bd34 Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP d257d5dfdc4 Trigger re-sync on any change to providerID 40de26dcff8 KEP-3325: Promote SelfSubjectReview to GA d9524379210 Fix flaky HPA e2e tests by not failing on context cancelled (#117669) 5fff8cae749 dependencies: klog v2.100.1 d55b67b3490 Clean up brace whitespace in **/validation_test.go 2ad2c15c9ca Update copyright year to 2023 b464d084278 Remove custom fake svc lister in favor of regular indexer b899ae48477 remove genericfeatures.DryRun in 1.28 c6bdde8051c Create e2e test for APIResources endpoints ab9c8eb1e8d Removing WindowsHostProcessContainers feature-gate 077cc20f8af fixup patcher test to include field manager ad5cda4d219 remove checks for fieldmanager from handlers 4721ec7519c include apiextensions types in apiextensions generated openapi 08e756342c2 fix scale not being given gvk in CRD openapi schemas ffb9c076d77 add OpenAPIV3 config to tests and server options c2177dca5f6 add error for attempting to initialize field manager with nil typeconverter 94909af68ae supply deduced typeconverter to apiserver tests 302daa889c5 Throw error if OpenAPIV3 config is not provided 1b766839677 filter out directives before taking patch value as-is 6de6cd0a658 add integration test for nested $patch in SMP e00a9c3a0b1 add subtests ffeec1f4d44 Update compatibility data test ec997d5433a Generated files for NetworkPolicyStatus removal bff8a6cd9f3 Remove withdrawn feature NetworkPolicyStatus 0fcf42f3211 Move test double queue to test file and unexport 208af2d1d83 Localize SpyWorkQueue to cloud-provider for now a15013ec8b1 Document RetryError properly 73bc9861d25 Improve error logging in processNextServiceItem 18e978a89df Improve RetryError GoDocs de34540248a Update kube-openapi to fix race d0677f528c0 Add json tag 69bc6855568 node: podresources: graduate to GA 04ad946e8fb kubelet dra: lock before getting claimInfo CDIDevices and annotations fields aaa30439bdd reduce util pkg for testing in tempdir. 4c83aae2cc7 kubeadm: replace intstr.FromInt with intstr.FromInt32 026e7c7cb37 registry: replace intstr.FromInt with intstr.FromInt32 0ee9f1b7a75 kubelet: replace intstr.FromInt with intstr.FromInt32 1c4b97ea272 network: replace intstr.FromInt with intstr.FromInt32 5bfe738af2e apps: replace intstr.FromInt with intstr.FromInt32 94410ee8078 api-machinery: replace intstr.FromInt with intstr.FromInt32 4911e9de4a7 api: replace intstr.FromInt with intstr.FromInt32 79266560383 kubelet: Implement support for Windows podAndContainerStatsFromCRI 14952cef5b7 kubelet: Move Linux stats to a Linux specific file fc8b4657c18 Add tests ea4ce5dc28e Alias api/errors instead of stdlib errors a179203bdba Support specifying custom LB retry period from cloud provider da922f0af67 Remove ability to re-enable serving deprecated discoveryv1beta1 APIs e28f3de6568 Revert "proxy startup-time config handling cleanup" d94c733ee2b Use absolute path instead requestURI in openapiv3 discovery (#117495) 34d3c7520be update Deps gopkg.in/warnings.v0 v0.1.1 to v0.1.2 944a4cd3114 Remove ability to re-enable serving deprecated autoscalingapiv2beta APIs 671a3f43fdf Correct the changelog for GlusterFS removal in 1.26. 859690d72a4 Added support for image credential provider for windows and arm64 on gce 28c573358b0 test for init container restarts d727df1741e node: device-plugin: e2e: Additional test cases 3dbb741c976 node: device-plugin: add node reboot test scenario a26f4d855d5 node: device-plugin: e2e: Capture pod admission failure 96975737033 node: device-mgr: e2e: adapt to sample device plugin refactoring 282a6a80b92 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595 d509e79837d node: device-mgr: e2e: Implement End to end test dc1a5926321 node: device-mgr: Handle recovery by checking if healthy devices exist 53c9103a1de Set ENABLE_AUTH_PROVIDER_GCP to true in gce tests 2572a430344 kubeadm: fix unit test failure on node with multiple cri endpoints f81b49d8739 Remove ability to re-enable serving deprecated eventv1beta1 APIs 48d01d6d9b0 Remove ability to re-enable serving deprecated batchapiv1beta1 APIs c6f4bee98dd kubeadm: add deprecated FG UpgradeAddonsBeforeControlPlane 4d9261c7567 Fix LocationOfOrigin shows up unexpectedly 76fe41a996e chore: update cgroups and ttrpc versions 0dbeff4b6e6 remove GA feature gates in 1.28 about network 4e7b6e8ba49 remove DelegateFSGroupToCSIDriver featuregate fc0d2cd32f5 added init containers tests to simplify the sidecar KEP large PR 258c4c4251e Remove duplicated config fields from ProxyServer 9d4f10f5d28 Fix up detect-local-mode validation 5ece6541b80 proxy/ipvs: don't bind nodeips to the dummy device 5310305098a proxy/ipvs: add a GetAllLocalAddressesExcept() function f24d1d2c950 use go 1.19.x for etcd version monitor compilation 91ee58050f8 wait: fix PollUntilContextTimeout godoc comment b3e0bc88640 scheduler_perf: let the test decide which informers are needed 969d28b12b7 scheduler_perf: refactor common code 91df71be549 correct etcd base image reference in the doc 6b40cd8cd37 update test/conformance/image version to v1.4.2 6c8be35fa86 update the etcd base image to v1.4.2 1eca720dcc7 Refactor some watchcache tests 7f370d651dd Migrated `pkg/scheduler/framework/plugins/podtopologyspread` to contextual logging 54e6f609ceb Migrated `pkg/scheduler/framework/plugins/noderesources` to contextual logging 152c1a02723 Chore: Replace re-initialized variables with create new ones 37a9260d5c5 Migrate pkg/scheduler/framework/plugins/defaultpreemption/default_preemption.go to use contextual logging eeb13993832 Migrated `pkg/scheduler/framework/preemption` to use contextual logging 550d4c00746 scheduler_perf: support test case selection via labels 79de8879cbe OWNERS_ALIASES: add self to sig-node-reviewers 217196c59fa Add ROX storage tests (#114628) 6a4cf352b8b remove tracking annotation from validation and webhooks 2af662b05fe Refactors discovery content-type and helper functions 170d5ef9fa0 code cleanup for kubeadm 902c4ecc90f Add jpbetz to approvers of apiextensions-apiserver 0a582431593 node: device-plugin: e2e: Add test case for kubelet restart 09100804722 node: device-plugin: e2e: Provide sleep intervals via constants 4a0f7c791fe node: device-plugin: e2e: Update test description to make it explicit fd459beeff6 node: device-plugin: e2e: Isolate test to pod restart scenario 5ab4ba62052 node: device-plugin: e2e: Annotate device check with error message 5c4f397361f node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount 0aa6a5726a6 node: device-plugins: e2e: Refactor parse log to return string and error 8ed861889aa feat(NodeVolumeLimits): return Skip in PreFilter 28519e240ed Fix scheduler performance regression after adding plugin metrics c96188a38b5 remove seccomp profile path 96eaed9980d cluster/gce: update cloud-controller-manager to use go-runner 0d27d3cfffc cluster/gce: update cloud-provider-gcp image to latest tagged version 4cdfe600e04 Fix image pull error type `ErrRegistryUnavailable` 6da128bdb3e dependencies: go.uber.org/atomic v1.10.0 87230578802 dependencies: update go.uber.org/multierr v1.11.0 f7ce6f834a1 Chore: add ipfamilies tweak functions 78b8af9fed3 scheduler_perf: update throughputCollector a325fdbbe5d update Deps gopkg.in/natefinch/lumberjack.v2 v2.0.0 to v2.2.1 da3e7e37816 stop watcher when error occurs 018564b8cfc change the seccompProfile field description to match the imlpementation 6d8a0100f70 Fix typo in kubectl api-resources help text for --categories flag 3c45b61b643 [KCCM]: have providerID trigger re-sync, but not be required for nodes a4f98e4c1e8 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go e115d5234c2 Fix bug where CEL listOfString.join() results in unexpected error 3229deda37b register missing metrics 24e68b3c6ac use client-go metrics not only rest_client 2bd42061b6e Remove support for EndpointsLeases and ConfigMapsLeases lock from leader election 3f247e59edf Refactor cacher.ListerWatcher code structure 892ebf2d253 Ensure version "*" is passed instead of "" for all authz checks (#116937) 73d9a9cfa06 kubelet/kuberuntime: Fix flaky test 'TestGeneratePodSandboxConfig' e3d84aa93cd kubeadm: add the experimental (alpha) feature gate UpgradeAddonsAfterControlPlane that supports upgrade coredns and kube-proxy addons after all the control plane instances have been upgraded 78e6cb1cccb intstr: add FromInt32, deprecate FromInt 88e2c344390 Enable a bunch of generic storage tests for watchcache. 860329c04b5 drop v1.25.0 API testdata 440d5910f7d Chore: add app protocol tweak function 06993afdd6a Chore: cleanup whitespaces 3d8f7233da9 Chore: remove impossible and redunant cases 4a6bc66e40f updating microsft/go-winio package to latest version 60d25c3ed77 improve remotecommand testing fuzzing the data stream d76f5dae67c Add a comment to roleRef to document that it is immutable 959c90c1d9a Chore: add deletion timestamp tweak function 4169d7d0283 golangci-lint: allow exceptions for Go naming convention 4f8eba2a0be Chore: add finalizers tweak function 28db34a231f Chore: add load balancer tweak function 1c465c51e80 Chore: add service port tweak function 0cc7369196b Chore: add LBIngress tweak function 23c242770fe Chore: add etp tweak function 2f6bc661dc3 Chore: rewrite newService function f9bab9a60b0 add --concurrent-cron-job-syncs flag bc00f5c071f Update cri-tools to v1.27.0 c3384191ea6 remove validation GCE-ism 28ac914bc54 Remove repeated info e0d5c4aa93e Move info where its most relevant 0a508ad8067 Update `kubectl edit` documentation d0412928961 Add v1.27.0 API testdata 7514d8b3339 add shortnames for mutatingwebhookconfigurations and validatingwebhookconfigurations 95fea2f2bff add test case for merging a patch against empty list 3469bb05db7 kubeadm: fix unit test panic for TestNewResetData ed37e6986b6 uncomment exit trap to cleanup tmpdir 63d44fdde58 retain KUBE_GOPATH on recursive kube::golang 4d736a0435e cleanup update-mocks.sh 726992f9db9 call kube::golang::setup_env before setting up worktree 17db22d0558 Fix potential mutex usage bug 39e52449f9f remove nodes resource from CoreDNS RBAC manifest 7a14c5ad6dd ensure we can remove _output 11f3ef1ed7d drop linux/arm build warning, now that 1.27 is released, this is covered by the release notes 104c208d0fb add Authentication tracking request/error counts and latency metrics 65f3454c1d9 fix undefined convertion 8efeb5afcfd Dependencies Update google.golang.org/protobuf v1.28.1 to v1.30.0 6f90c536330 Dependencies Update golang.org/x/tools v0.7.0 to v0.8.0 5c584269a79 avoid volume copy in checkAttachableInlineVolume 2bbd07c0192 remove defunct interactive tutorial 1d15354ccb5 update gofuzz dependency 2cd23c8b17c Update go-logr dependencies 062f146d325 Replace the deprecated ioutil method in the pkg/credentialprovider directory be6709044ad etcd: Build image 3.5.8-0 6db4cbfde7b cacher: do not popExpiredWatchers when the cacher hasn't dispatched any event eab66a687b2 cacher avoid double locking (#117410) a02e94ae2b4 e2e: fix flaky test 'should contain OpenAPI V3 for Aggregated APIServer' 0c54d9af6f2 Fix stomping os env in kubectl e2e tests 766f6c3ad41 Include stderr in cred provider plugin errors eaba1703b1b enhancemanet: reduce calculation calls a8b808ee6ca Replace the deprecated ioutil methods in the test directory a959785f964 dependencies: udpate coredns/caddy to v1.1.1 0297329795e Refactor watch bookmark tests to allow sharing between etcd3 and watchcache 45e836a968a Generalize few watch tests from cacher f3b9e0ddc9b Replace os.Setenv with testing.T.Setenv in tests 7cbbf47f5ea Cleanup environment in tests that call os.Unsetenv d38ac7e7c6b Replace os.Setenv with testing.T.Setenv in tests e8d3a4a105c Cleanup environment in tests that call os.Unsetenv 2181eea4843 Replace os.Setenv with testing.T.Setenv in tests cf125a35611 Replace os.Setenv with testing.T.Setenv in tests b9ef1603223 Cleanup environment in tests that call os.Unsetenv 240fccd7668 Replace os.Setenv with testing.T.Setenv in tests 89467ad3e9b Replace os.Setenv with testing.T.Setenv in tests fc643d2e40c Replace os.Setenv with testing.T.Setenv in tests 29b6c54d158 dependencies: update github.com/cenkalti/backoff/v4 to v4.2.1 0a8343352b4 Document gomega.Equal() instead of gomega.BeEqual() d231d6022b0 Remove endpoints (old leader election) related RBAC from kube-controller-manager ClusterRole e340325024d Fix nil pointer in test AfterEach for volumeperf.go 453f81d1cae kubelet: pass context to VolumeManager.WaitFor* 4de0d2c6f8f use generic set in storage/validation 3ac77335303 Add `saschagrunert` to `sig-node-reviewers` 7fb88eec73c support fieldSelector spec.hostNetwork 4d73864026c Dependencies Update golang.org/x/timet 90d013bbcef8 to v0.3.0 ff9ebfa90de e2e framework: control k/k/pkg imports ee99ca25ee6 Remove unnecessary if judgments 1359ebcc5b0 fix doc mismatch a6339e2702f proxy/conntrack: using common conntrack cleaning function in proxiers 399f09dde05 proxy/conntrack: common function for cleaning stale conntrack entries efb05630946 proxy/conntrack: moved pkg/util/conntrack -> pkg/proxy/conntrack 37ea51fd567 Improve the performance of map usage 9c0153aef9e KCCM: add providerID predicate to service controller d3c103edce7 Re-work logic in shouldSyncUpdatedNode dc4f6f9da6a e2e framework: remove last dependency to k/k/pkg/util 40521fe3601 e2e framework: remove last dependency to k/k/pkg/kubelet 030debc1990 changelog: fix formatting issue with v1.27 change log 4e8c5364bc6 CHANGELOG: Update directory for v1.27.1 release 1b93abb9bac Move kubelet config API to e2e_node 4e928c96b5e skip checks when topologyPolicyName is PolicyNone 71a989e5e9c Fix CHANGELOG-1.27 correct 06dc3d00fcc e2e/apimachinery: Add an e2e test for the API Streaming feature 8d19c0002bb Add node check to vSphere cloud provider 3b7c14e8cfb Remove unnecessary int type conversion 36e6e759182 dependencies: udpate seccomp/libseccomp-golang to v0.10.0 5bce18c98ec dependencies: update go-semver to v0.3.1 d7270f4ba72 dependencies: update go-oidc to v2.2.1 b0d89a7807e dependencies: update github.com/gofrs/uuid v4.4.0 1595d7f52d7 dependencies: update go-systemd to v22.5.0 9cfdf989eda dependencies: update gh/fvbommel/v1.1.0 6b70710b0d1 dependencies: xlab/treeprint v1.2.0 6320b6843a2 dependencies: update netns to v0.0.4 9e2bb40e158 fix typo annotation key notes. becf73a82b1 add invaild scope test case c4e1b01416e replace spew methods with dump methods a96358ac0fa Remove some useless error checks 867be8fc3e2 get rid of e2e/framework -> k/k/pkg/kubelet dependency 2bb35e08f4b Clarify kubelet/kube-proxy iptables rule skew constraints 6d13cad2cf5 dependencies: update gh/Azure/auto-test/{adal,validation} 432a3016a49 Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion" 9c5a66e2080 Revert "CR conversion: protect from converter input edits" ed0124855aa add log includes pod preemption details 0979d554435 unit tests: Skip flaky tests on Windows (part 2) 2d06fad5163 dependencies: azure-sdk-for-go to v55->v68 625c3025057 change pv recycler scrub cmd to find -delete c042837a761 truncate the precision at a millisecond for image pull event message 804d9f47c9f kube-aggregator: correctly use client-go TLS cache with custom dialer db5d74935ee optimize evict sandbox logic ccf7ddacfce replace ioutil with os, update doc 5668399a87c Codegen: use openapi-gen via k8s.io/code-generator b23ab389b4f Add SIG ownership to controller/nodelifecycle 375e3cf869b CHANGELOG: Update directory for v1.24.13 release f7295ac5e08 CHANGELOG: Update directory for v1.25.9 release d567d61aa56 Fix a data race in TopologyCache a62563f1305 Fix TopologyAwareHint not working when zone label is added after Node creation 83a1774df2b CHANGELOG: Update directory for v1.26.4 release a7a8cd6e5de Codegen: subprojects: nuke existing files bc302fa4144 Replace uses of ObjectReflectDiff with cmp.Diff 9627c50ef37 Replace uses of ObjectGoPrintDiff with cmp.Diff 29c0b73d640 Replace uses of diff.ObjectDiff with cmp.Diff dd7af241c11 Replace diff.ObjectDiff with cmp.Equal 97bab44cae3 Replace apimachinery diff.StringDiff with cmp 4f6714ef42d apiserver/etcd: add request and request_error metrics (#117222) d09842e0adf node-lifecycle-controller: improve monitorNodeHealth test-coverage (#116687) be101a748dd Remove some unused winkernel arguments/fields/functions 8a790ac2e1b Remove unused ProxyServer.EventClient field 9754386c764 Remove write-only ProxyServer fields b4c384ebfb2 vendor: bump runc to 1.1.6 c69689659a6 Add `--concurrent-job-syncs` flag to kube-controller-manager 4438208511e api: encode NamespacedName with lower case in JSON 476e407ffd2 cacher: prevent a potential deadlock 7cdffe37c1d update container storage interface spec to v1.8.0 10a8ec5b2cc use case-insensitive header keys for http probes a6173fad88a Delete duplicate code in schedule.go 5588e8a4cd0 hack/logcheck.conf: remove certificate controller exception 277c03fc799 remove these unrelated openapi files (#117051) 9a468563070 remove reuse buf todo (#117033) 5da386745af Kubectl convert - warn users with NotRegisteredError and Fail on all other errors (#117002) 0eec63fd687 fix the mistake in the release note 02d8fc28faa fix: add the bug as a known issue o on the v1.26 release note 75f17eb38fc optimize watch-cache getlist (#116327) 9c15d75f234 Migrated `pod-security-admission` to contextual logging (#114471) 2bed67d0f1c Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ" 73eb7c09309 Codegen: easier to read logs for subproject output bbbb695060a Codegen: subproject: chdir to the project dir 893ec0ca453 Codegen: simpler k8s.io/code-generator/examples af29cca6ced Codegen: new tools will not become part of 'all' 5f7345deaac Codegen subprojects: consolidate generate-*groups 95e614b3717 Codegen subprojects: deprecate "all" in scripts a94ed5b8ac8 Codegen metrics: include v1beta2 8b68e063e14 Codegen subprojects: regen defaulters when needed 5200f4b0d36 Codegen subprojects: reify 'all' into explicit 201653aa870 Trivial change to reduce diffs 901dea73073 Fix azure disk e2e after migration d212041d513 hack/local-up-cluster.sh: Remove old dynamic certs ed5dd38dcdc CHANGELOG: Update directory for v1.27.0 release 464edfe6f6e test/integration: create nodes directly with kubernetes.io/hostname label 9204e6b286e remove unused constant `expansionFailed` in expansion test. 4491ba89171 rename variable delete to avoid collision to builtin variable d04d7ffa6ec kubelet: Mark new terminal pods as non-finished in pod worker 0020631985e test: Add node e2e to restart kubelet while pod is terminating aa73f06e569 scheduler perf: allow creating 0 items 49bbf7c2681 scheduler_perf: fix race condition a869a898257 scheduler perf: remove cleanup func b039a2ff2c7 Add new contribex leads to sig-contribex-approvers 9363afc6502 Fixing broken tests d102a6fea51 HPA Controller - Update Owners 8d18ae6fc24 Use the generic Set in scheduler b04ca79445e Add unit tests showing the effect of unlimited containers when calculating pod limits. 1dec97436c8 Fix typo at job_test.go 046bb892566 supported version of etcd 3.5.7-0 for Kubernetes v1.27.0-rc.0 f138d29bf2d watchcache: currentCapacity acquires read lock c77ad3116f4 kubelet: fix setup of emptyDir with sizeLimit (fsquota) ea74a2d877d cpumanager: fix typo in godoc 1cce3b3e2f5 wait: fix incorrect suggested method d3ae6c2df3c Specify KUBE_ROOT for test-e2e-node/AWS to work d9bd22115ff Alias deprecated genericclioptions.IOStreams with new one 26b35ce36ae Remove endpoint related RBAC from scheduler cluster role 7fa3d54ea5b unittests: Fixes server journal unit test on Windows 08a324bf512 cluster/addons: set metrics-resolution to 15s eba18d503cc cluster/addons: bump metrics-server to v0.6.3 88e055059cd component-base: avoid data race in log format registry a2fb32870f3 test/integration/auth: fix data race 1dde8ef026e test/integration/framework: avoid race around grpclog.SetLoggerV2 f91518b81a5 Add genericiooptions in allowed list of genericclioptions b4e4db336f6 More migrations from genericclioptions to genericiooptions 5e1c6cd0d4f pkg/registry/flowcontrol: avoid race condition during Create 934516791c6 Swap assert.Equal parameters oders to follow convention 2d06601b81c RBD: e2e containers base image has been udpated to F38 0518dffd259 iscsi: e2e containers base image has been udpated to F38 8d9386fc402 Remove genericclioptions.IOStreams struct c3497b30aca More migrations from genericclioptions to genericiooptions 00c30941260 Migrate genericclioptions.IOStreams usage to genericiooptions 51a7751a496 Move genericclioptions.IOStreams into genericiooptions.IOStreams e450ed98122 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 3d3686b9cf0 Return error for localhost seccomp type with no localhost profile defined e1bcfd47da9 Sort unmounted volumes message in volume manager 79b3126f00a skip clear quota if FSQuotaMonitoring is disabled 0a37f09c32b Fix directory mismatch for `volume.SetVolumeOwnership()` 731068288e1 correct storage class selection message cc8cd88a94d remove duplicate validation for csi 978da1e8f13 remove GA feature-gates bda73bd1129 Refactor remote runners e389d140ae6 fix as suggested 457bb58ebbf kubectl events: Support fully qualified names for --for flag 1893f639d03 test: Fix flake in node e2e mirror pod tests ffcf3ee6f87 feature(pkg/api): warning for Pod with null labelSelector in PodAffinity and TopologySpread 70369bfe299 remove GAed KubeletCredentialProviders 5662566e03a Set GOMAXPROCS explicitly 56755b8ffdb fix doc mismatch 8e36e948ce6 verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones dac85fe2d3f [KMSv2] cleanup comments in v2 proto api feba08a6947 Create local copy to avoid potential race condition 29503fd8d45 openapi: Make file client more easy to re-use ed48dcd2d71 kubelet: Ensure pods that have not started track a pendingUpdate db92cc13880 ftr(etcd): add benchmarks 05f4e497f1d Deflake TestGetListNonRecursive 906f0607efc Clean up kms test d3f6cb717f7 update conformance yaml 7bfcfc4d5de docs: fix storage e2e test README f7765eb0d42 Add damemi to emeritus SIG scheduling approvers bbbd366cf39 Move damemi to sig-scheduling reviewers 397cc73dc9b delete unused functions in pkg/controller directory 47f8d42a6ba Add CecileRobertMichon to sig-cluster-lifecycle-leads 449f847630e [KMSv2] update ci script and add readme 86e1f4b9d10 e2e node: bump all nodes ready timeout beb329f4bfa Do not look at VPC-related resources outside the cluster's network 8d92cfb1316 Added conversions to/from NamespacedName df0a2538205 generate ReportingInstance and ReportingController in Event e9b384f5a75 fix typo f638e2849fb replaced spew.Sprintf with a util pretty print function 838ed7feb53 Improve the performance of map usage f6fa250e304 Add API approvers 03be789851d Fix sample-controller docs after moving to context-based cancellation 99ad88a2611 Remove unnecessary int type conversion f2fe1fff655 [KMSv2] add tests for generate transformer 479fcf0b13f kmsv2: validate encrypt response at DEK generation time 8d644fbc725 return skip in volumerestrictions ade63dd7647 cronjob: add ut for namespace terminating cause no extra log 9a776cbf212 kubelet pod-resources: e2e node test add failure description ExpectNoError 1031977b7d8 kubelet PodResources API: follow-up review comments ec9515a828e Add structured alternatives to strings in client-go/tools/cache 2b01f63b115 move check for noop managed field timestamp updates 07ebb22db92 added known issue for 1.27 release 80480f8e215 combine conditional checks 7a6d58001b7 handle event errors caused due to terminating namespaces af95a76bb21 cri-api: fix comment lines about PROPAGATION_PRIVATE daa1d287e4d fix GetPodVolumeClaims in comments c14068c2023 deflake: Add retry with timeout to wait for final conditions fbf33e32e61 Fix memory leak in kubelet volume_manager populator processedPods 27f84b755e1 Migrated the volumezone scheduler plugin to use contextual logging ddc13e983b5 Chore: add selector labels tweak function 4cab11f26f0 Chore: add persistent volume claim retention policy tweak function ba9dfe686fd Chore: add persistent volume claim template tweak function f97d3cf7486 Chore: add rolling update max unavailable type tweak function 1b17b4fa799 Chore: add rolling update partition type tweak function f3ffeae426f Chore: add update strategy type tweak function 5e0161b3de8 Chore: add labels tweak function ec34891782c Chore: add annotation tweak function b907d5af49f Chore: add finalizers tweak function 18ba7c0e433 Chore: add ordinal start tweak function 3eb34d8b6ce Chore: add min ready seconds tweak function 2161d095fa1 Chore: add template restart policy tweak function 4418a9f5906 Chore: add replicas tweak function 7fc08e0ce70 Chore: add pod management policy tweak function 77c7d6efcf6 Chore: add basic make function for stateful set 4a667a1026c fix: remove case sensitive checking of probe headers 81a0ea3da3c return name when error occurred in csi-translation a2cf4e73459 use describe node to print node events as well e5674903178 fix: remove last ip when apiserver was shut down f59ac6e6524 [WinProxy] Adding additional validations to queried endpoint list iteration. db5590a194b Remove sig-network-driver-approvers alias fc8892d26d7 Add more labels (esp. area/kube-proxy) to sig-network OWNERS 2f3800e1007 Make pkg/util/iptables and pkg/util/ipvs owned by sig-network 10b36075df6 Cleanup: use Set instead of map in endpointSlice utils eb60dce33b0 deprecate ExperimentalHostUserNamespaceDefaulting 94f2d351644 Wire bootstrap token authn secret lister only when it is enabled d71aea434e5 docs(readme): add go report and latest release badges a780544f58c add log for kubemark start d25572c3892 kubelet: HandlePodCleanups takes an extra sync to restart pods 41ed0e12341 Add an image for kubectl 1c7155e7ff6 Move hollow_proxy.go from pkg/kubemark to pkg/proxy/kubemark 8d3a498c879 don't ignore UID impersonation in webhook clients 364b66ddd65 admission ApplyTo: take in clients 630af564be3 Update cri-tools to v1.26.1 1aeec10efb7 DRA: get rid of unneeded loops over pod containers 017bb93887f certificate controller: use contextual logging c94a9a14d8d update gofmt 8cbe9fe543e trigger update event when service ipFamilies changes. b430464df06 gce: podresources: don't disable on windows 6b4ffdb9f75 node: re-implement Localendpoint on windows 195fc2f5162 kubelet: podresources: rename variable d6d19a290de Simplify statefulset fuzzer 376bda41c74 undeprecate kubelet --provider-id flag 8bb328680c0 upgrade cluster-autoscaler v1.26.1 to fix ci warnings c94bcabd7e2 [fix][typing] startResourceClaimController errrorf message has typos 31e1df9ae6c Bump Konnectivity to 0.1.2 aadb87bdcdb kubelet: Do not mutate pods in the pod manager 13192176002 Remove vestigal err check from CEL admission controller. a6ffbb41f8e Squashed commit of the following: bbf2b968c89 skip pod resource check when request is zero 64ecb161d47 Codegen: git grep returns non-zero if no match 241d46d1dd5 Codegen: deepcopy needs to run before swagger 3405853e6d0 Codegen: clean up stray ls-files use 3dd0c416639 support short name for flowschema and prioritylevelconfiguration e2b10505162 add some buff for pod initial restart count that is not zero efee9b4866d cleanup: promote ProbeTerminationGracePeriod to conformance tests b0eeeacfc0c fix: the volume is not detached after the pod and PVC objects are deleted 4d3f92d5f75 Update toplogy keyset initialization a890724f9ef cronjob: return immediately when failed to create job for the namespace is terminating 37aff025ff8 cleanup: remove Clear for fake job controller b7cdbca2374 Add more tests that should exist but don't for some reason 67d7f09eb82 hack/OWNERS: add pohly as reviewer and approver 5dca1be0160 Add tests bab2c18c246 Add jsonpath support for explain 77692f1b1c5 fix linting fabf1cba947 Add warning about TLS 1.3 cipher suites 6ad156d80ee Cleanup: modify some sentences about statefulset 13354d3da4d Add note about TLS 1.3 cipher suites c50c19d13af remove unused not api functions in the pkg/apis directory b1e3326eaee Fix gorestful typos in the APIServerHandler.Director docstring a3b44b574fb cluster/gce: Fetch image from image family 26f0325734c fix typo in volume util 0311a4e8e6d Fixed typo 9b9f22f06b5 Fix unknown field error in deployment lifecycle e2e 6f19e8656f5 Apply suggestions from code review 1134134e727 kubelet/cm/containermap: Improving test coverage 87f094c5e88 Replaces path.Operation with filepath.Operation (part 2) 5111bced373 fix test cases that may be incorrect 9a3c4aa2dc9 initial e2e tests for ValidatingAdmissionPolicy bd778449f4d versioning of CRI API 34d980e7709 i18n: Fix bug where package-level variables are not translated. ad2d23eb9ff Add test for cmd/kubeadm/app/phases/upgrade/compute.go fd4adba9acd add sig/storage label for pkg/controller/volume package PR 2557b35202f controller: add non-exist node test case 95fe0a158c2 Fix strategic merge patch $deleteFromPrimitiveList bug 76c8765bda5 ensure etc-host file permission is 644 whatever umask is 73883c71574 Remove default annotations from copied storage class f16f9100e57 cleanup: delete unused AuditDynamicOptions in apiserver 583ea17efd6 Add parameter to set SecurityContext for containers in tests Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24recipes/classes/scripts: Drop SRCPV usageBruce Ashfield
bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15kubernetes: fix installed-vs-shipped with usrmergeMartin Jansa
* fixes: ERROR: kubernetes-1_v1.27.1+git2555e0f90e80a13628f47eca5cde34decc89babb-r0 do_package: QA Issue: kubernetes: Files/directories were installed but not shipped in any package: /bin /bin/k8s-init Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. kubernetes: 2 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25kubernetes: set CVE_VERSION explicitlyChen Qi
The CVE_VERSION defaults to PV, but in NVD database, there's no prefixing 'v' in database. So set CVE_VERSION explicitly for better CVE scanning. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-05kubernetes: do not strip binaries at buildChen Qi
Yocto/OE has its own way to control binary stripping. So don't do it in the go build process. Otherwise, we'll get empty dbg packages. Setting DBG=1 solves this problem, as stated in comments in the Makefile. """ # Note: Specify DBG=1 for building unstripped binaries, which allows you to use code debugging # tools like delve. When DBG is unspecified, it defaults to "-s -w" which strips debug # information. """ Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07kubernetes: update to v1.27.1Bruce Ashfield
Bumping kubernetes to version v1.27.1-89-g2555e0f90e8, which comprises the following commits: 2eccb77b2c5 OpenAPI V3 invalid document checks 642ea896178 update for feedback 0457fbc83b3 QueryParamVerifier falls back on invalid v3 document 4cd33af1419 QueryParamVerifierV3 resilient to minimal OpenAPI V3 documents ce458add6f1 kubeadm: fix a bug where file copy(backup) could not be executed correctly on Windows platform during upgrade 3a56c1e954b Fix CHANGELOG-1.27 correct fa86f2dce30 benchmark test to evaluate the overhead of podMatchesScopeFunc 4a2e6971f7d Fix incorrect calculation for ResourceQuota with PriorityClass as its scope c041924dd10 Update podFailurePolicy comments from alpha-level to beta 7f9b3cb8540 Disable NewVolumeManagerReconstruction feature gate 3324649c1c6 releng/go: Update images, dependencies and version to Go 1.20.4 ae2f576d0b7 Bump konnectivity-client to v0.1.2 8af1ce5863d Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP 940b6892a1e node: device-plugin: e2e: Additional test cases 4cf566e32e9 node: device-plugin: add node reboot test scenario d67481c4784 node: device-plugin: e2e: Capture pod admission failure 6f5e29e26c4 node: device-mgr: e2e: adapt to sample device plugin refactoring 367e3d7c471 node: device-mgr: e2e: Update the e2e test to reproduce issue:109595 d241f58d8c8 node: device-mgr: e2e: Implement End to end test aac4c15e624 node: device-mgr: Handle recovery by checking if healthy devices exist b157e1741fb node: device-plugin: e2e: Add test case for kubelet restart 5278e9c02cd node: device-plugin: e2e: Provide sleep intervals via constants b3c58acde98 node: device-plugin: e2e: Update test description to make it explicit 0cd0fe70aa1 node: device-plugin: e2e: Isolate test to pod restart scenario ed8d4e1d6a5 node: device-plugin: e2e: Annotate device check with error message 4899dc75dde node: device-plugins: e2e: s/devLen/expectedSampleDevsAmount c81ec1ae5b0 node: device-plugins: e2e: Refactor parse log to return string and error 86904a7c580 Update kube-openapi to fix race ee1d7eb5d82 Use absolute path instead requestURI in openapiv3 discovery bbca939c661 proxy/ipvs: don't bind nodeips to the dummy device ca1e563141a proxy/ipvs: add a GetAllLocalAddressesExcept() function 3ce0c108fe9 Refactors discovery content-type and helper functions 574829867a9 Fix scheduler performance regression after adding plugin metrics 192e9dae316 Update staging/src/k8s.io/apiserver/pkg/cel/common/values.go 8d0ac2f6f8f Fix bug where CEL listOfString.join() results in unexpected error 57e67a91e39 Fix directory mismatch for `volume.SetVolumeOwnership()` d0514936f3a Fix stomping os env in kubectl e2e tests 7a6640798a7 KCCM: add providerID predicate to service controller 8221a54e1ee Re-work logic in shouldSyncUpdatedNode a9d07f4e9ef add log includes pod preemption details 9ef90afb4fb verifyVolumeNoStatusUpdateNeeded may cause flake and so only keep the last ones b598ea5c392 deflake: Add retry with timeout to wait for final conditions 2eb94fa835a kubelet: Mark new terminal pods as non-finished in pod worker ae07535c855 test: Add node e2e to restart kubelet while pod is terminating 861e1935e2a kubelet: Ensure pods that have not started track a pendingUpdate ae92fd28072 changelog: fix formatting issue with v1.27 change log 95feac5269b Update CHANGELOG/CHANGELOG-1.27.md for v1.27.1 4c9411232e1 Release commit for Kubernetes v1.27.1 2c81ecc2e29 use case-insensitive header keys for http probes 1601bb75401 fix: add the bug as a known issue o on the v1.26 release note fddf859d6a5 kube-aggregator: correctly use client-go TLS cache with custom dialer 845ba3e3a23 Revert "Optimization on running prePreEnqueuePlugins before adding pods into activeQ" a1f97a35fcb Revert "Merge pull request #113151 from ncdc/refactor-crd-conversion" 1da781e29b3 Revert "CR conversion: protect from converter input edits" f564f7a3559 api: encode NamespacedName with lower case in JSON e827a4b61f5 Do not look at VPC-related resources outside the cluster's network d662e339aa5 kubelet: Do not mutate pods in the pod manager d977e7e0dbf Fix azure disk e2e after migration e599722bc59 vendor: bump runc to 1.1.6 25b061d8202 CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 854c72766bb fix: the volume is not detached after the pod and PVC objects are deleted 398e38784e7 Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0 1b4df30b3cd Release commit for Kubernetes v1.27.0 2b6072ba00c Update CHANGELOG/CHANGELOG-1.27.md for v1.27.0-rc.1 ad18954259e CHANGELOG: Update directory for v1.27.0-rc.1 release 80bc6ffd0df Release commit for Kubernetes v1.27.0-rc.1 951f8dcc965 Return error for localhost seccomp type with no localhost profile defined 4e0bc2397da Update publishing-bot rules for release branches to Go 1.19.8 1972dd10058 Do not log entire pod struct while attaching the volume b19c362bf52 Update distroless-iptables to v0.2.3 2a69edb43de [go] Bump images, dependencies and versions to go 1.20.3 b5dd5f1f3a7 Investigate and fix the handling of Succeeded pods in DaemonSet 873127e3b04 Export WebhookHandler struct because some CCMs use Run directly 735bbc135c3 Clean up formatting 27ad623b3d1 Skip vendor directory when removing generated files 63b5ca69f1f .*: update vendor dir and cleanup 1ad7cacba59 publishing-bot rules for the new release-1.27 branch b83600de01e fix nil pointer dereference panic for deprecated metrics 5469c198e5d kmsv2: validate encrypt response at DEK generation time 0e9dd5c51d8 Call function that validates in-place vpa resize policy Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-05-08k3s, kubernetes, nagios-nrpe: fix Upstream-Status formattingMartin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-03-27kubernetes: make CC for amd64 match other architecturesChen Qi
Change 0001-hack-lib-golang.sh-use-CC-from-environment.patch to also remove the 'export CC=xxx' for amd64. The original patch is a little strange, it removes such statements for other archs but leaves amd64 untouched. If we're using CC from our environment, we use it for all targets. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-03-27kubernetes: update to v1.27.x-rcBruce Ashfield
Bumping kubernetes to the next release candidate (april 2023). We refresh our $GO patch, drop the need to do release artifacts preparation and add a new INSANE_SKIP for kubelet. But otherwise, the build and content the same or similar. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-27treewide: bulk update patches with status fieldBruce Ashfield
While the insane.bbclass upstream-status check hasn't been made default, users of meta-virtualization may have it enabled in their distros .. so the effect is the same. We must have this tracking tag in out patches. This is a bulk update to add the tag and silence the QA message. As packages get updated, the normal/routine process of checking the patches will continue, and the status fields may (or may not) get more useful. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-20kubernetes: fixed typosGuenther Meyer
After upgrading from honister to kirkstone the build always failed during the package_write_ipk step, because the package name has been overwritten because of the typo in FILES. While investigating, I discovered another typo in class-devupstream. Signed-off-by: Guenther Meyer <g.meyer@signum-media.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15kubernetes: fix more TMPDIR referencesBruce Ashfield
Changing the clone location of kubernetes allows us to remove the vendor symlink "fix". This reduces the number of TMPDIR references in the binaries. kubernetes takes care of most of the rest via using asmflags and gcflags interally which specify -trimpath, but unfortunately these flags are being recorded into the binaries and leave us with 4 references to the TMDIR: -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes We leave these for now, as attempts to remove them have broken the build, and kubernetes uses 'go install' versus 'go build' to construct the binaries .. making our normal solutions non functional. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03kubernetes: update to 1.24 releaseBruce Ashfield
Bumping to the 1.24 kubernetes release from May 2022. We refresh one patch, and drop another as the build race looks to be different (since it is no longer installed seperately). Otherwise the build is the same, and smoke tests have passed. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-03kubernetes: inhibit package QA warningBruce Ashfield
WARNING: kubernetes-1_v1.23.6+gitfbcfa33018159c033aee77b0d5456df6771aa9b5-r0 do_package_qa: QA Issue: kubernetes-misc: ELF binary /usr/bin/kubectl-convert has relocations in .text [textrel] This textrel is acceptable, so we can inhibit the warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-28k8s: update to 1.23.6Bruce Ashfield
Bumping kubernetes to version v1.23.6-rc.0-16-gfbcfa330181, which comprises the following commits: 1e8f6d51484 Copy request in timeout handler edd7a386c61 kube-up: use registry.k8s.io for containerd-related jobs 3194c87ba25 e2e: Wait only for the service account a62ee8e5c3b e2e: Wait for kube-root-ca.crt to be created 651b1fa1cce Include pod UID in secret/configmap cache key 33d089b173c Move kubelet secret and configmap manager calls to sync_Pod functions 7f02733e4d8 test: Verify that nodes do not transition to Failed while ready 77865d3db93 test: Add E2E for job completions with cpu reservation b51d11be7a4 test: Add E2E for init container pod deletion 290cdbf8792 kubelet: Delay writing a terminal phase until the pod is terminated 914475e2e9f Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 b3b64745789 Release commit for Kubernetes v1.23.6-rc.0 c285e781331 Release commit for Kubernetes v1.23.5 01c2f1c6420 Remove apf_fd from httplog c52cd9c5920 Update Go to 1.17.8 1a897af197a cluster/gce: update konnectivity image tags to v0.0.30 d741174d7e1 bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 0b8199041d1 fix dryrun when ca file exists 903f164b679 fix regression introduced by PR 100320 56bfc202e45 Add unit tests a5faf0b5ce2 Fix nodes volumesAttached status not updated 4c85abf90bb Fix default config flags 1570a75766b test/e2e/framework: include the new control plane taint 60cd43c44e0 kubelet: Clean up a static pod that has been terminated before starting 33863be9478 Add an e2e test for updating a static pod while it restarts 621894de9d6 cronjob_controllerv2: do not filter jobs to be reconciled by labels c9f904304d9 kube-proxy: fix duplicate port opening f783e573f11 increase Azure ACR credential provider timeout ba2cd0ca3db Updating EndpointSlice strategy to retain node name in topology until field is set 4e69dd88613 fix: do not return early in the node informer when there is no change of the topology label. 68ea240512a /test/e2e_kubeadm: adjust label checks for 1.23 2efffd62367 Ignore container notfound error while getPodstatuses 9f5e25033b6 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 d4b2d8cf961 Release commit for Kubernetes v1.23.5-rc.0 e6c093d87ea Release commit for Kubernetes v1.23.4 949798fe712 Add PDB selector patch integration test 47fc5aea4a2 Revert v1beta1 PodDisruptionBudget select patchStrategy ef293a9ee95 test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults 799ffd58065 kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error c465ceccb32 Update Go to 1.17.7 f0eac451011 Use serializable struct for x-kubernetes-validations in openapi 02d1a291c8b Make JSON schema round tripping test more strict 30eff360132 ignore CRI PodSandboxNetworkStatus for host network pods 34a8474e600 set secondary address on host-network pods 14c399ec5e3 Deeply copy JSONSchemaProps.XValidations. 9fe0c40c8e5 wrap error from RunCordonOrUncordon 0d487176d3a Ensure the execHostnameTest() compares hostnames 733c0ebc7c3 Revert "Fix comparison between FQDN and hostname" ebfa08cd39b service REST: Call Decorator(old) on update path 92d09f90c01 add namespace in azurefile volumeid 5830d1474ff fix: azurefile volumeid conflict in csi migration bce4e5ba5b1 Mark device as uncertain if unmount device succeeds 4b868d09c98 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 72506a8439c Release commit for Kubernetes v1.23.4-rc.0 816c97ab8cf Release commit for Kubernetes v1.23.3 f2c6108f462 kubelet: fix podstatus not containing pod full name 398effdfe0d Fix bug with node restriction blocking pvc.status.resizestatus change 6d08a56228a Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true 996d8fca977 Set max results if its not set 9c31df589b7 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 918dd8343f0 Release commit for Kubernetes v1.23.3-rc.0 9d142434e3a Release commit for Kubernetes v1.23.2 4935e0a527e Update k/utils to v0.0.0-20211116205334-6203023598ed 38e9dce15f4 [go] update to Go 1.17.6 28ad5463fda fix: remove outdated ipv4 route when the corresponding node is deleted dfea07a3b04 fix: delete non existing disk issue 65b309c76d8 Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." 677eae51666 fix containers order after applying 89d8be52ef4 generated: ./hack/update-vendor.sh 04f3c5793c1 upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 8c8fe66f7aa Execute sync before taking the snapshot 4b1d9d80da7 Correct the feature gate string for RBD migration. 50e813278cd fix: azuredisk parameter lowercase translation issue 879947434c0 removed unnecessary log line 88249a973a8 kubectl: add integration test for result reporting 16a4de9268a cli: let kubectl handle error printing c5365784330 cli: avoid logging command line errors in more cases 26dae30f913 Fix header mutation race in timeout filter 81c8d0aad93 clear pod's .status.nominatedNodeName when necessary f61c4b18c42 use node informer to check volumes attachment status before backoff f4ba875cdfd When volume is not marked in-use, do not backoff e36b9382ecd kubeadm: remove the restriction that the ca.crt can only contain one certificate f4835a2cd3e flake fix: remove the error handler for cronjob integration test 962ab763c5e Fix the leak of vSphere client sessions cc6c36f286d client-go: Clear the ResourceVersionMatch on paged list calls d42a44fcb2f Enabling kube-proxy metrics on windows kernel mode e6a8826e992 Remove JSON logging performance regression Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-06kubernetes: update to v1.23.2Bruce Ashfield
Bumping kubernetes to version v1.23.2-rc.0-26-gfa546d8cc76, which comprises the following commits: cce0b96068c fix nil pointer in create secret commands 27a66989d0f Fix order of commands in the snapshot tests for persistent volumes cc6c36f286d client-go: Clear the ResourceVersionMatch on paged list calls 271a9f0e58d Improving performance of EndpointSlice controller metrics cache 98cc4f9e96a fix the error when cleaning up jobs for cronjob 6ca361089db Update CHANGELOG to add missing release notes. 40d718778d4 apf: ensure exempt request notes the classification 77b0a633575 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 aef116487af Release commit for Kubernetes v1.23.2-rc.0 86ec240af8c Release commit for Kubernetes v1.23.1 1292aee8707 add gce loadbalancer no-op finalizer and existingFwdRule tests 40c6f562eb3 disable gce service handling if has rbs forwarding rule 41b00595137 add ELBRbsFinalizer 036fd24b91c add gce elb rbs opt-in annotation 78e8cb0743c cherry pick of knp 0.0.27 0072226ca87 Re-introduce removed kubectl --dry-run values. c237c5c78fc Point flowcontrol users at v1beta2 c836ebae52f [go1.17] Update to go1.17.5 d065f7ffe77 dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 ea103cb23a9 mount-utils: Detect potential stale file handle 1346242fd57 Skip creating HNS loadbalancer with empty endpoints 38a678fccfb Add regression test for CPUManager distribute NUMA algorithm 6d437c7e827 Add unit test for CPUManager distribute NUMA algorithm verifying fixes 53fd9db1629 Fix accounting bug in CPUManager distribute NUMA policy 9cb973ac5ee Fix error handling in CPUManager distribute NUMA tests 462f3c90b05 Add a sum() helper to the CPUManager cpuassignment logic 03666ecf4fc Allow the map.Values() function in the CPUManager to take a set of keys 22b6be8c2cb Fix CPUManager algo to calculate min NUMA nodes needed for distribution 471dd78f5ea Fix unit tests following bug fix in CPUManager for map functions (2/2) 1db0c5136e7 Fix unit tests following bug fix in CPUManager for map functions (1/2) 18392c0c4ca Fix bug in CPUManager map.Keys() and map.Values() implementations 4c7bcbddd62 Ensure we balance across *all* NUMA nodes in NUMA distribution algo d1248480b20 Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize 3a9b3072612 Round the CPUManager mean and stddev calculations to the nearest 1000th 5fc309181ab updated deprecation messages from 1.23 to 1.24 f94a022c1bb kubelet: set failed phase during graceful shutdown b63d5a805b3 kubeadm: avoid requiring a CA key during kubeconfig expiration checks a18dbc12a46 kubeadm: print the CA of kubeconfig files in "check expiration" 880e0ac50f7 kubeadm: validate local etcd certficates during expiration checks f9c8af54ccb publishing-bot/doc: add component-helpers to the readme 3245fe216f2 publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules 57f88ec404e Changelog: mention kube-scheduler bits deprication f42cbbbff43 rbd: initialize ceph monitors slice with an empty value. 0a1d2914614 Direct v2betaX users to migrate to HPA v2 064a272ee03 DelegateFSGroupToCSIDriver e2e: skip tests with chgrp dd1b0a12471 Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 8aef834386e [go1.17] Update to go1.17.4 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15kubernetes: add sysctl.d configurationBruce Ashfield
The startup of kubernetes relies on some kernel/runtime configuration. We create a sysctl.d snippet to ensure that critical ones are set when installing our packages. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15kubernetes: add READMEBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13k8s: introduce host/controller initialization scriptBruce Ashfield
Adding a simple helper to setup a host to the NodeReady state. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-10kubernetes: update to 1.23.x seriesBruce Ashfield
Bumbing kubernetes to the latest release branch (now that our go compiler meets the minium standards). We also add a networking configuration similar to the k3s one, but named appropriately so that CNI will read and do basic configuration. We also add some missing rdepends that were preventing the controller node from fully initializing. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-10kubernetes: update to v1.22.4Bruce Ashfield
Bumping kubernetes to version v1.22.4-rc.0-26-ga82c1e72259, which comprises the following commits: a1bc265ce68 Fixed unit test SELinux support 9286d722d5e Add shortcut for SELinux detection 8ddc2963808 Don't guess SELinux support on error 24b725f29f1 Use separate pathSpec for local and remote to properly handle cleaning paths 3bf2248bda7 [go1.16] Update to go1.16.10 bd146ab0e1b Automated cherry pick of #105122: added keys for structured logging (#105137) 98ad7ac4ef4 Update debian, debian-iptables, setcap images to pick up CVE-2021-33910 fixes b9236d7cd4a Fixing how EndpointSlice Mirroring handles Service selector transitions 9e778cb6ede Fix race condition in logging when request times out dee25f4db12 Remove nodes with Cluster Autoscaler taint from LB backends. e565102bce7 Support cgroupv2 in node problem detector test 33b5f0f1eaf Update CHANGELOG/CHANGELOG-1.22.md for v1.22.3 39f5a506c81 Release commit for Kubernetes v1.22.4-rc.0 c9203682049 Release commit for Kubernetes v1.22.3 6765a52acd9 Free APF seats for watches handled by an aggregated apiserver. dd8563b0184 Run storage hostpath e2e test client pod as privileged fc580a41252 support more than 100 disk mounts on Windows 176ba1d5236 [go1.16] Update to go1.16.9 cdfd8141855 Clear initial UDP conntrack entries for loadBalancerIPs b30f24e2579 Verifying the auth headers are set for upgraded aggregated API requests 0dfe8e33143 apiserver aggregator upgrade unit test 36a9689ce81 Aggregator uses the regular transport even if the request requires upgrades 5fb05afd9f8 Fix PreferNominatedNode test 410c0413757 Remove Error Message Check Dynamic PV Tests fcb66167905 go fmt 82cd11e646e Add e2e test to verify kubelet restart behaviour 8fa5ff3712c kubelet: set terminated podWorker status for terminated pods bc392586f01 Fix quota controller hotloop in integration tests af46778d58d remove StartedPodsErrorsTotal metrice message 13d852c73dc Copy VolumeSnapshotContent annotations in snapshottable.go test ae10967d23f Fix bugs in e2e pod test 60e425c9009 Ensure terminal pods maintain terminal status c44db53f2c2 Do not sync Waiting statuses for Terminated pods 4ca2cee155c Adds CancelRequest function to CommandHeadersRoundTripper cd94fec74c9 Fixes kubectl command headers which hangs on kubectl run 60ee69c79bb Revert "Build non-static binaries with PIE buildmode" e989925e232 Ignore VMs in vmss delete backend pools 407cc91f95a Fix CSR test to accept certs shorter than the requested duration 6bf5db2e3f7 fix: skip not found nodes when reconciling LB backend address pools 3ceb7b87649 fix: consolidate logs for instance not found error e15dcbe404c Remove a duplicate StorageClass creation call 6763300949a Update Containerd version - GCE Windows a135518af00 e2e scheduling priorities: do not reference control loop variable cc1eb760389 storege e2etest: Delete restored PVC/Pod in snapshottable 614988c6626 pkg/kubelet/cm/memorymanager: Fix ErrorS key/value pair 2f850d636e8 v1.22: Fix test flake in old svc registry 20fa03d60ea 'New' Event namespace validate failed 2ff2780dcc5 kubelet: Handle UID reuse in pod worker a6539a662cd Add test for recreating a static pod 2d9957274a4 Update CHANGELOG/CHANGELOG-1.22.md for v1.22.2 9f314ed137d Release commit for Kubernetes v1.22.3-rc.0 8b5a1914753 Release commit for Kubernetes v1.22.2 4fa7cdfa93c Refine locking in API Priority and Fairness config controller b23fffb83ed kube-controller-manager: properly check generic ephemeral volume feature 38c7182897c Fix null JSON round tripping aeff924339a Propagate conversion errors a69920a9588 integration test b7854d5f1c9 fix 104329: check for headless before trying to release the ClusterIPs d8ead0e1c7b fix detach disk issue on deleting node c948d8cc53b kubelet: fix sandbox creation error suppression when pods are quickly deleted Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02global: convert github SRC_URIs to use https protocolBruce Ashfield
github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02global: add explicit branch to all SRC_URIsBruce Ashfield
As introduced in the oe-core post: https://lists.openembedded.org/g/openembedded-core/message/157623 SRC_URIs without an explicit branch will generate warnings, and eventually be an error. We run the provided conversion script to make sure that meta-virt is ready for the change. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19kubernetes: add SRCREV_FORMATBruce Ashfield
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-12kubernetes: introduce devupstream variantBruce Ashfield
Introduce a devupstream variant of k8s, so we can track development while also packaging the latest released versions. We set the SRECREV to 1.23.x as it was previously, and before the go version dependency bumps to above where OE core is currently providing. We move the patches to a :append, so they can apply to both the released and devupstream versions. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-12k8s: set to 1.22.3 releaseBruce Ashfield
As it turns out 1.23.x won't release in time for the next meta-virt release, so we back off to the 1.22.x release branch. To avoid PV issues when the number goes backwards, we add PE = "1" to the versioning. 1.23.x will return in a devupstream format in another commit. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-30kubernetes: update sed expressionKai Kang
It misses a backslash in sed expression and causes warning when run do_compile: | sed: -e expression #1, char 35: Unmatched ) or \) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-27kubernetes: update to 1.23-alpha latestBruce Ashfield
Bumping kubernetes to version v1.23.0-alpha.1-58-gf6331c74b67, which comprises the following commits: 6616655b7b6 create common interface for controllers. c1284118156 fix typo: Modify PodTrackingWithFinalizers to JobTrackingWithFinalizers 6dfae64d9be REST: Document mutable inputs on Create() 42c7e621804 Fix registry tests to look at result objects 75dea6b8bc2 Service REST: Use DeepCopy() on Create() and fix tests 322bc827771 Fix buffered signal channel go vet error 183498a410c Adds CancelRequest function to CommandHeadersRoundTripper bdedd2a4c16 apiserver: add key/value pair to httplog 3a660b72941 bump e2e loadbalancer timeouts to 15m 2c73d7834ac update vendor e1e4408ab34 allow k8s.io/utils/net imports 0cd75e8fec6 run hack/update-netparse-cve.sh e9ddac5d853 rename net.ParseCIDR on messages to avoid false positives 06f2d678eec update and verify netparse c2532351525 vendor: bump k8s.io/util to get fix for LRU cache 21491aa5a1a Bump livenessprobe to 2.4.0 in e2e hostpath driver spec 0af1c83e035 CHANGELOG: Update directory for v1.22.1 release b1a6f8cdf90 kubectl proxy: append context host path to request path 950c4dafecb CHANGELOG: Update directory for v1.23.0-alpha.1 release 3c1a3dea59c test images: Adds Windows Server 2022 to the BASEIMAGEs c3509f49f96 Update-vendor to add k8s.io/utils/strings/slices/ 25453708ea2 Remove pkg/utils/slice from kube-proxy b18d6ee61d0 Update cobra to v1.2.1 f5e97186d29 Lower requests b/c multiple containers will leave pending pods ccbdf041a2f Fix slice type comparison bug 0ba731253e0 add tkashem as a reviewer of apiserver 513b55b00d8 hostNetwork tests can't share the same port 6a6e24702c9 Update cri-tools to v1.22.0 fa9d5546cdf Upgrade the default csi-proxy version installed by kube-up.sh f9375f20584 Update kubectl GitHub support issue template 5e03a1f070e Regenerate applyconfigurations ffed59d168c Fix allowed imports for kube-openapi 0e925f266f7 Update unit tests to handle go1.17 certificate parsing error messages 72fd01095de re-order imports for kubeadm b15c2130aad Bump k8s.io/kube-openapi 7cbac6bde0f [volumeScheduling/metrics] Fix buckets initialization 76f03f000a1 Fix use variables in the loop in vsphere_util 04d83edd3c3 SCTP tests run only on 2 nodes 5b3c226c34a Add name and namespace to structuredmerge errors 00dd02f89c8 test images: Use PULL_BASE_SHA for non-git image building cdbfd009dac Mention seccomp annotation removal in v1.25 edc19b80727 fix: skip case sensitivity when checking Azure NSG rules 804ce496e32 image: Change http to https 7953cf0ce9f fix typo of rate limiter 8264dbe17d0 Add unit tests for validateStructuralInvariants 28de406a379 Allocator renames for clarity 907fceb2067 Remove unused NewContiguousAllocationMap 9c4d5b69ecf Fix storage class setup in regional_pd.go a26f7f2b58d Add non-vendor version ldflags 87a4e082aca Change defaulter-gen input to package path a619be8e48f bump gengo to include defaulter-gen package support eba9d33c3ee Fix insufficient privileges to bind to port 37e9517c2f6 Fix typo in CHANGELOG-1.22.md d2a27a58f0a Fix extra latency and add tests for that and width 29bd66d0189 Remove "pkg/controller/volume/scheduling" dependency from "pkg/scheduler/framework/plugins" 4849bdcc0a1 updating co-chairs 27f15035147 rename audit Checker interface aa9380e017a Add termination hook to the startup script - GCE Windows e36a14730bd reducing the number of containers created based on the ports used 6e3923d0a4f send retry-after until ready 096c3e8f2d2 kubeadm: further improve the dynamic version population c295a850c66 update instrumentation reviewers 593eda4ad34 Add unit tests for local volume expansion d68186452d9 apf: free seats in use after additional latency 05beda5c402 Increase time to wait for nodes to become unready 704628fde41 Update golang used in etcd image to 1.16.7 1013e000af5 code cleanup:fix spelling mistake in CHANGELOG-1.22 67e14290aae Fix build with multiple GOFLAGS 145cec925af reduce the number of containers created by 66% 8771d60e541 CHANGELOG: Update directory for v1.21.4 release 874199aff28 CHANGELOG: Update directory for v1.20.10 release c4f18223dab CHANGELOG: Update directory for v1.19.14 release c69f55519e2 Revert "E2E test for kubelet exit-on-lock-contention" 11ed96baf57 generated swagger docs dfaeacb51f9 CSIDriver: allow "StorageCapacity" to be modified ea3c7d98a5c test images: Removes Windows 1903 and 1909 images d9f22688166 test images: Adds sync.exe to Windows agnhost images 94ac8962693 test images: Simplifies the agnhost binary version 3b6cd89f016 add aojea to test OWNERS 1181421112c Update version of Cluster Autoscaler to 1.22.0 e6cb526f6bb set umask on linux and darwin when testing kubeadm copycerts ff7307bf9c2 fix single pointer variable 3af26bae2c3 Refactor defaultpreemption for out-of-tree plugins c799a37654d revert test STABLE declaration 08bec6da0fc Keep MakeMountArgSensitive and add a new signature that receives flags 83889ae5940 apiserver: refactor WithRetryAfter server filter c4ecdad5708 Copy golang license to staging copies 0379c8f96a7 Fix documented version for DisableKubeletCloudCredentialProviders feature gate 3182b69e970 apiserver: add a new mode for graceful termination e8381733068 apiserver: rename test variables f63dbd481fc Warn if docker buildx is not available 95e000fd657 support kubeadm join dry-run 1db36ae3b30 Refactor goroutine counting 75f0a94aba5 Remove 1.20.0 API test data bb08d70f403 Add 1.22 API test data 30e9a420c46 kubelet: fix sandbox creation error suppression when pods are quickly deleted 1ea65e6213c remove listx from OWNERS_ALIASES 86c6e25016a Typo in a comment. b9b76dba6ee Update the unit tests to handle mountFlags 338f8ba0bf8 Add missing interface method in mount_unsupported.go 296b30f1436 Pass additional flags to subpath mount to avoid flakes in certain conditions 3b0c8980824 Regenerate openapi f98ff655647 Drop DefaultGarbageCollectionPolicy checks for legacy apps REST API versions 97c5b8de9ae Drop legacy validation logic for CRD API e3538edc227 kubeadm: update unit tests to support dynamic version updates 207ffa7bdc6 kubeadm: dynamically populate the current/minimum k8s versions 1ceb118e3cb Drop legacy status logic for volumeattachments API c702dd43940 Drop legacy validation logic for networking API b1d344db44d Drop legacy validation logic for certificates API befffd1565e Drop legacy validation logic for admission registration 8fd371353c1 Fixes 104067; Explicitly states Docker CLI plugin buildx required for building using Docker 39a1293cbc8 Drop beta REST APIs removed in 1.22 808659cc428 pin-dependencies.sh: support switching repos 768d69a423a add 'projects/' suffix if this library is used with an older version of the google api library cdc225f2979 bandwith --> bandwidth 2c2661a4113 e2e test: lock-file and exit-on-lock-contention 5eae896d71a Remove AllowInsecureBackendProxy feature gate 4af506c9895 Add getOSInfo err info 73a5cce3e64 device manager: do not clean admitted pods from the state 93a237abd82 memory manager: do not clean admitted pods from the state 66babd1a90c cpu manager: do not clean admitted pods from the state 85d83ebd288 staging/publishing: Set go1.15 version to go1.15.15 619e38141b6 remove unnecessary waits from watch conformance test 1ce594b7ee0 Fixes flaky GKE kubectl test 80ca6a4ae6f Some cleanup of the package for event clocks dc079acc2be sched: retry unschedule pods immediately after a waiting pod's deletion 4f1b1d72e31 Update setcap image to buster-v2.0.4 cafad985366 Update debian-iptables image to buster-v1.6.6 08d8f29a7a3 Update debian-base image to buster-v1.9.0 d166cabd9e2 Add e2e for local volume expansion f9efd14d443 TAG used when building pause is configurable b98594bc793 Add ibabou to gce/windows OWNERS file d2ed3b28b79 Revert "revert Bump DynamicKubeConfig metric deprecation to 1.23 by delta update" 6b9dc099f88 [go1.16] Update to go1.16.7 296c18ec323 apf: estimate list width 7db782ee039 apimachinery: remove unused ignoredConversions map and nameFunc in converter. b66d52f6a8b make notes more easily to understand 561ce035b5b Avoid spurious calls to update/delete validation 00d89aad506 Allow a custom kube-cross image + tag to be specified c2a3b793d3e apf: use EventClock rather than a PassiveClock for queueset 023f6a90db8 Add SergeyKanzhelev to node e2e test approvers ddaa06abeea Propose myself as a reviewer for cluster/gce/gci c8431f42d9a kubeadm: Reduce the backoff time of AddMember for etcd dfde50b1856 fix unsafe json construction for digestConfigObjects. 8ed1628a6e7 Add a new webhook metric tracking request totals. 3cfe3d048ff Improve dynamic cert file change detection f9a791ff262 Remove kubectl book a947c32783e Add feature gate to disable in-tree credential providers d866272d65a Correct comment related to HugePageStorageMediumSize feature gate a04a98154e5 Remove the StartupProbe feature gate af2129b77d0 Allow override of `CGO_ENABLED=0` d9d41b70f64 Fix metrics reporting for the deprecated watch path dcb298c9552 Introduce event clocks based on k8s.io/utils/clock 2c60feffbee apiserver: add callback to get notified of object count c486b229d28 refactor(kubeadm): remove the flag --port from KCM manifest 9351b57defe Skip node e2e test for recovering from ip leak with docker ff0e1f4fe97 Add the pod field to all volumeToMount info level logs 691b45e220c Clarify ready (#103782) 9cf3ad5cffa Remove duplicate dependencies from 1.22 changelog 952aa1b2d26 add integration test for apiserver hsts ff165c88239 Replace usage of Whitelist with Allowlist within Kubelet's sysctl package (#102298) 3e44139ae46 [jobs][registry]: Warn if no propagationpolicy set 9cffbab037e Log kube-env variables from startup script a7834389b44 check APIStatus.Code in Is* family of functions 5d84ffa6c26 Update configure-helper.sh b0039559ddf Update configure-helper.sh 572a24d854e add a keepalive time to the konnectivity server 0376c58c44d Update configure-helper.sh ab595f37d25 CHANGELOG: Update directory for v1.22.0 release 8cf10d9a200 set showHiddenMetricsForVersion=1.22 in dynamicKubeletConfiguration test 9d30eb88dfd retry apiserver errors on e2e service tests ea1bc18bc17 Use docker buildx for etcd image ee7562a2f8a add clusterIP allocator metrics 94a58a3b146 remove GAed feature gates sysctls ac076838c81 Add ehashman to node e2e test approvers 3463c2dfa97 Skip NVidia GPU test in node e2e CI jobs for containerd and other runtimes 4efc9a95695 Fix zone calculation - consider only untainted nodes c8208247113 Add pod context to volume lifecycle logs c35502ad4bd Remove AUFSUmountHung from NPD test dab19517e5a Explicitly restart kubelet to stabilize serial-containerd job 980cf854397 revert Bump DynamicKubeConfig metric deprecation to 1.23 by delta update 72223406ac6 Remove stray DNS port references in NetPol tests b7ea7a7766b kubeadm: disallow the mixture of --config and --patches 375ef778c4b kubeadm: remove deprecated --experimental-patches 34f49596332 replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace 7e2d6301bf9 [k8s.io/kubectl/pkg/drain/drain]: minor typo fixup 1a3eda9394b fix: 81134: display conflicted taint without a json representation. a77f4f4c29b Log e2e-node kubelet output directly to file 163e4974b63 e2e node server: fix crash in log line 1a87ae19a62 Revert "Add a namespace label to admission metrics and expand histogram range to 0-10s" 09dc055984e Update golang.org/x/time/rate (#104014) a2a22903bc0 delete stale UDP conntrack entries for loadbalancer IPs 2635415482b fix error variable name 9f735e71bbb Simplify APF promise to what is really used in the code 9cee586ee98 apiserver: avoid repeated loading context for requestInfo in Namer.Name c406f2edab6 Fix: ignore not a VMSS error for VMAS nodes in reconcileBackendPools f720c4fd44b hack/verify fixes ecb38137269 Update component-base OWNERS to include SIG-Architecture fec260d083f Add release note block to cherry-pick script 260b5ef1554 fixing scripts from https://github.com/google/protobuf/releases to https://github.com/protocolbuffers/protobuf/releases 59a7cc12c9f Mark failing node serial tests as flaky b5f24c334e4 Bump DynamicKubeConfig metric deprecation to 1.23 a1cf44eab44 Remove unused promise code from APF 05cfbecab99 test images: Adds image labels by default bbb368b7012 Update e2e test images url 4549573a447 minor cleanups ca90849724e add kube-openapi/pkg/schemaconv to kubeadm import-restrictions 4606ebe423a update node-problem-detector v0.8.9 99bc2b077fd Added support for multiple --from-env flags 4edb6e01bed Add kube-openapi to client-go import restrictions df1d9380fbd Fixes (temporarily) curl piped to shell security vulnerability 3628065b455 fix boilerplate and staticcheck 85bc3c4f857 fix vendor 49c86bde556 fix extract_test af11c4ac9be remove apiserver impor from client-go 93ef5acb35f Fix kubectl version unit test a4dfe406507 Start the informerFactory in the ControllerContext db48793269e Set idle and readheader timeouts f1e1f3a416b Fix disruptive subPath test failures 363d47c08c8 staging/publishing: fix rules for legacy-cloud-providers for 1.22 d38c2df2c4b client-go: deltaFIFO trace slow handlers 55765f1b49e sched: support HistogramVec in scheduler performance test 479e2ae307c wrap extractor errors 7bfc420351f simplify test to only test the new logic of extractUnstructured 1122091b065 Revert caching in favor of simple ttl 53582a0104f remove commented out code c9e97de46bb Address PR feedback around gvk parser generation ergonomics 9b9925f56db Restructure caching logic 7cb18e84f13 comments f6ce385e444 remove test script 604db6eb2ad rename cache, add to integration test 235a57a29e5 Add HasOpenAPISchemaChanged to DiscoveryInterface 7b9757faa49 basic caching working dda31bbf2e7 Manually set GVK in extract, add commentary to extractor 9f4a4d812d2 Write TestUnstructuredExtract 6e481c5db19 Initial UnstructuredExtract without caching b15ed04c9dc Allow non-subsetting ILBs to update when the feature is enabled. 2ad2bc68443 kubectl: Add labels to ingress describe 004e4414839 refactored master to controlplane 00080d400fe Allow customizing spam filtering in event client library 822eb29b6f3 client-go/events: avoid referencing a nil related object 1555877cc5d fix data race for Test_Run_Positive_VolumeMountControllerAttachEnabledRace 8dc091ef2e2 Fix wrong log ae7b9787ee7 cleanup description on deprecated include-uninitialized flag dc9eb82e0aa Fix NPE in test/e2e/framework/providers/azure 7fa0b9b6c10 add --concurrent-ephemeralvolume-syncs flag for kube-controller-manager 93146048b4c Mark "update Node.Spec.ConfigSource" node e2es as slow 4115bef8268 Update references to test/conformance/image 024930df119 Move cluster/images/conformance to test/conformance/image 3520e8b3393 Fix a typo in comment 75f0007d2bc Overlaid OS's environment variables with the ones specified in the CredentialProviderConfig 00e31ce565a Fix incorrect comments in scheduler_queue.go fef5c0c1a63 Improve storage test skipping pattern. 523b4c0918f Replace 'x.Sub(time.Now())' with 'time.Until(x)' 326471d8806 k8s.io/code-generator: Change BoilerplatePath() to locate file or require explicit flag 2cacfada265 Update Containerd version - GCE Windows 45cf1697ba0 Changed flag name underscore warning to avoid recommending potentially invalid flag name 97ba475941f add new metric 94977dce8d1 Update doc description for --audit-log-maxbackup 971e0c4400c Fix a typo in comment f174307e494 k8s.io/code-generator: Enable generate-* scripts usage as module deps 8ad83fd685f Make crictl tests host local 80e4007bc3b test: e2e: HPA ContainerResource 5be47eaf275 kubeadm: update references to legacy artifacts locations e2b6816953c Deprecate apiserver_longrunning_guage and apiserver_registered_watchers 019e8f71b6a refactor: normalizing URL string locally and move out from purell package 38239d3025d migrate cmd/kube-proxy/app logs to structured logging dd2c3830600 decouple timeBudget from real clock 66803689585 Add: specify that reason is a field to record the reason why failed 6490fcc5bbc setting the status to fix on the known issue 9f09064104e feat: Provide IPv6 support for internal load balancer 51e4694cd66 fix typo scheduling queue to active queue ef181c14e12 Provide reference to impersonation options for kubectl auth can-i command. b09bbd808ae testing patches. add k8s.io/staging, remove local home 6d988acb558 Ignore 'wait: no child processes' error when calling mount/umount d05b232afc8 optimize the code 5fdfe872d61 e2e: update makefile example for building images ac09f7a8bd3 TODO comment should have been removed with #2912, the restartCount docs wasn't updated as part of #6794. 318b9a95786 remove superfluous [Feature:SCTP] tag in some test names 50b3cbe9990 e2e: remove unused sync.WaitGroup 9d405710fe7 e2e: remove runKubernetesServiceTestContainer 5347f67e35b Using full url format as runtime endpoint d9b8c5f992c add deprecation for Azure Disk Kind in csi migration baf0bf831d1 Fix typo in comment in endpoints_controller f0b34bd24a7 Pass unknown labels in allowedTopologies during CSI translation 4101c8b3cb3 Set out.TargetCPUUtilizationPercentage correctly when converting autoscaling_HorizontalPodAutoscalerSpec to v1_HorizontalPodAutoscalerSpec 1980b18c458 Solved the test problem and added update comment d1e9da9f8a0 update comment with EnqueueExtensions 5f0925a2941 Flake #99979 increase delay for ready state propagation 1887ddfc968 Make --configure-cloud-routes configurable in local-up-cluster 169583bf4ed tests for path resolver, add KUBE_ROOT to both top level func calls 2d3323d1fb4 try to fix the in_tree_volumes cases: refactor the projectBasePath logic 82728b5f71d Add integration tests for updating Job parallelism 7911a08fb31 Remove ServiceAccountIssuerDiscovery feature gate e75f3fb563e add happy path tests for two types of imports d3aabe23974 fix existing unit tests 585ce7f04dd missed a paren bde2ef2a1a0 review comments 60d446fe3db Drop end of sunrpc port range to avoid port conflicts. c79a0a08828 Get rid of unused flowSchemaRVs in P&F 73211256e8f Rename width to workEstimate in P&F code 2b03c771895 e2e: fix NFS options test for IPv6 d02568aab52 client-go/tools: update events version in doc 7a36a5b827e fix test failures in legacy cloud provider: add 'projects/' after upgrade ef3c344868d seems to work, needs tests and a lot of cleanup 2bc5ff6ab34 Set EC2 instance cache max age to 10 mins 2926b4572e6 upgrade google.golang.org/api to v0.45.0 18d583653c6 upgrade github.com/prometheus/common to v0.28.0 abd8acc2599 fix exec failure for gomock finish calling 6c87c222771 Add structured logging for more steps a9b7dcc8c21 kubelet: update remote runtimes for cri stat changes 2dc2b1e239d CRI: add fields for pod level stats to satisfy the /stats/summary API a9a3c4bb9aa Refactor of TestValidateIngressClass and TestValidateIngressClassUpdate methods by adding Boilerplate in helper functions #FIXES: 99005 bf9f3dc7b3d deprecate unused option deployment-controller-sync-period for deployment controller 927d0c39322 cleanup: Removes GcrRelease and SampleRegistry from manifest.go abf735daa83 remove stack trace log when sorting with a bad unsortable field 18955db4161 fix azure disk translation issue 5d80d6e7c3d Make cpu request of kube proxy configurable by env variable. de442ef8604 Retry hostname->IP: [Errno -2] Name or service not known 03f9f75e880 fix typo for daemon_controller_test.go f2eec0a8167 ResourceConfigForPod: check initContainers as other QoS func a7c48e97076 images: Removes OS Version workaround for manifest list images 97bcfbd674b Allow the actual inhibit delay to be greater than the expected inhibit delay d9be5abc378 kubelet: add shutdown events 0839c00b76b Increase pressure timout on DiskPressure test 992993257d8 Removed usage of github.com/pkg/errors 8eee78a61f0 Update github.com/pkg/errors to go native errors pkg 7b98a0770fe remove not used IsStaticPod, prevent possible panic f9e4a015e22 tests: Spawn poststart / prestop pods on the same node as the http pod e2477171ca2 Ensure images are pulled after eviction tests a93ad421ee9 Return StatusError 404 in fake client when resource is not found a0e8a98bcb6 Add support for expanding local volumes c882437f220 e2e test: bump ProgressDeadlineSeconds in Deployment iterative rollouts 9d636fea046 e2e test: fix Pause in Deployment iterative rollouts a1e56b4f6d1 Update the typo in values of pods in performance-config.yaml 5b426818404 Correctly drain timer 6a0452e861e cleanup: fix errors ending with punctuation in proxy 82402c5af0c Omit redundant nil check in type assertion 68ec18a050d code-generator/register-gen: groupName can't use '// +groupName=somegroup ' to override 1dc4a29a1ae fix typo in retry doc 7aab5df381f use already defined variable 72271dcc9c5 Fix error path in file /verify-prerelease-lifecycle-tags.sh. 82a9fb9d0ec subatomic: Creates the symlinks to user-visible files later Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02global: overrides syntax conversionBruce Ashfield
OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-27k8s: update to v1.12.0-alphaBruce Ashfield
Bumping kubernetes to version v1.23.0-alpha.0-33-gd9d4f0c69cb, which comprises the following commits: 363d47c08c8 staging/publishing: fix rules for legacy-cloud-providers for 1.22 6d1556df7bb Update to using apiserver-network-proxy v1.22 7728428f017 Do not try to create an audit log file named "-" 77afa53f9d3 Add e2e testing manifest bundle to e2e_node test suite 0cce9a4a6c6 Remove conformance status from a sysctl test and relabel 0aa16fae5b8 staging/publishing: add release-1.22 rules 3af4fe8c9b6 Use pointer gomega comparison for UsageNanoCores 2a4a1c1d005 disable aufs module 0610968bfaa bump metrics-server to 0.5.0 c5aead020b6 cluster: fix CI metrics-server deployment 9103b7187c9 Fetch metrics from controller manager & scheduler no run once 236e72cf8a9 Make CSR cleaner tolerate objects with invalid status.certificate c1bac408803 Fix SIG Node SSH e2e test 33feaee2c2d Fix windows storage tests fac3dd6914f CHANGELOG: Update directory for v1.22.0-rc.0 release 59c0523bca0 Using ServiceIPs instead of DNS names in the NetworkPolicy Probes + adding Interface decoupling (#102354) 536cf819747 Add konnectivity agent to log dump d7ee024cc5d kubelet: Make condition processing in one spot c2a6d07b8f0 kubelet: Avoid allocating multiple times during status 9efd40d72ad kubelet: Preserve reason/message when phase changes 9d0b32858a5 update cos 85 version to latest. e5b434e990d kubelet/cm: don't set Devices eb5df869baa vendor: bump runc to 1.0.1 aeb82243fc8 Revert "tests for statefulset PersistentVolumeClaimDeletePolicy api change" faed88bb720 Add additional APF test for handling other panic types ef435b85b47 Optimize APF support for watch initialization to fix the pod startup time regression. 1f2902a336c Fix panic in master upgrade tests e5a1f86e0ac add apiserver tracing integration test, and fix endpoint validation 10a3cc815be Revert "statefulset PersistentVolumeClaimDeletePolicy api change" fb5b966a88a Revert "Add StatefulSetAutoDeletePVC feature gate" 0d1aa3a1b87 CHANGELOG: Update directory for v1.21.3 release 1e5ba82fd0b CHANGELOG: Update directory for v1.20.9 release fc6a5be694a CHANGELOG: Update directory for v1.19.13 release be34dc95b5d Remove E2E test for NodePreferAvoidPods scheduling Score a2ea04bab3e tests: Updates cuda-vector-add:1.0 image to the promoted registry a3b6f0557d2 device-plugins: replace gcr.io/gke-release to use the community registry f5bc129a991 CHANGELOG: Update directory for v1.22.0-beta.2 release a6ac42082b4 client-go exec: fix metrics related to plugin not found 5e1b5ec398c Revert counting deleted pods as failures for Job 75748c185ea enable verify-golangci-lint.sh 07332ad3985 fix ineffassign and varcheck 26cc8e40a8f fix deadcode issues b74fe232e34 update golangci-lint to newer version 416efdab26a Remove Endpoints write access from aggregated edit role 6c61ee51b90 Revert granting EndpointSlice write access to edit role de9cdab5ae3 kubelet: Prevent runtime-only pods from going into terminated phase aaa7de0ac67 Update API description for probe.terminationGracePeriodSeconds bf2ae14501e Move feature flag to beta (but leave as false) and remove the feature flag from Kubelet 83f8d1ad72d [go1.16] Update to go1.16.6 65618bfd696 Add sync reconstructed volume from desired state of world for volumemanager 9fa641b9add test/integration/endpoints: check for pod existencen in TestEndpointWithTerminatingPod 1280a365e4a Revert "use PermitWithoutStream=true for etcd: send pings even without active stream" bc475373b24 Drop direct dependency on gotest.tools 32783f75684 PodSecurity: Initial webhook implementation 2878e472ad7 test/integration/endpoints: improve docs for TestEndpointWithTerminatingPod 0aa1b3b0bfc test/integration/endpoints: add a test to ensure Endpoints does not include terminating pods 642eff0c69d Rename NodeSwapEnabled flag to NodeSwap d1ef44242a3 Make khenidak a sig-net approver c2aaf0667fd PodSecurity: make integration tests run sparsely 9dd59017c4c add tracing to webhook requests 581b088f760 integration test: provide a timeout for /health a570008cbd6 apf: fix virtual clock 5918869ed6c Revert 103327: "kube-scheduler: ensure the default config output of --write-to-config is usable" 1727cea64c1 Fix index out of range if multiple default plugins are overridden b14c10ae301 create LeaderMigrationConfiguration v1beta1 40b2155ddb7 promote ControllerManagerLeaderMigration to beta. 995278c9fbb add ControllerManagerLeaderMigration as beta 513bd93f76d update test for feature gate 412962204ff Fix the code is leaking the defaulting between unrelated pod instances 2b88dc381e1 [PodSecurity] Add test coverage for pod-template-containing objects 0fa01c371c9 Mark volume mount as uncertain in case of volume expansion fails fd0db61d6c3 test/intergration/endpointslice: add tests for endpointslice terminating condition 826a5219dac promote EndpointSliceTerminatingCondition to Beta a2fb8b00392 smtalign: e2e: add tests 23abdab2b77 smtalign: propagate policy options to policies 6dcec345dfb smtalign: cm: factor out admission response c5cb263dcf2 smtalign: propagate policy options to cpumanager 6dccad45b4f smtalign: add auto generated code cc76a756e40 smtalign: add cpu-manager-policy-options flag in Kubelet 649b87aaf85 prevent mutation of deletion options during delete collection d95b14e1abf Revert "apiserver: add callback to get notified of object count" d5d9327351d Only use dualstack if the node and config supports it 8e2b728c68a Explicitly skip host file mounting for windows 2dd26221881 Track Job Pods completion in status 7da1a0b2304 update the help text of KubeletConfig following the DynamicKubletConfig feature deprecation 41c5bca3496 kubectl: update set command description to include cronjob resource (#102503) bb56a0bd048 Add Job.status.uncountedPodUIDs 418fa71b6b1 Simplify use of the fake dynamic client 62d7a417fa6 CHANGELOG: Update directory for v1.22.0-beta.1 release 40f1db8d2d4 update license gathering script for forked code 79e230ea212 fix kubelet panic when DynamicKubeletConfig enabled b6b3a692843 Don't set sysctl net.ipv4.vs.conn_reuse_mode for kernels >=5.9 369c4a2b98b Use cmp.Diff() replace reflect and diagnosis 7f9d2eda828 limit warnings to requests that would otherwise succeed, reformat warning message 36907db929e PodSecurity: Drop field path from container visitor 78953990777 PodSecurity: seLinuxOptions: regenerate files d5419707516 PodSecurity: seLinuxOptions: cleanup 19c8ab297c0 PodSecurity: sysctls: cleanup e178695c25b PodSecurity: seccompProfile_baseline: regenerate files bebf6129672 PodSecurity: seccompProfile_baseline: cleanup 2af08d1a5a0 PodSecurity: seccompProfile_restricted: regenerate files 88a12412998 PodSecurity: seccompProfile_restricted: cleanup 43146d4377f PodSecurity: runAsNonRoot: regenerate files 5fc06591a2c PodSecurity: runAsNonRoot: cleanup edb7cdb02aa PodSecurity: restrictedVolumes: regenerate files 676240a342a PodSecurity: restrictedVolumes: cleanup 4a69c579923 PodSecurity: procMount: cleanup f9b8dfd0e69 PodSecurity: privileged: cleanup 7c704674003 PodSecurity: windowsHostProcess: regenerate files 9dce1d6a493 PodSecurity: windowsHostProcess: cleanup 45485bb7aea PodSecurity: hostPorts: cleanup f709cf05f41 PodSecurity: hostPathVolumes: regenerate files a39c448684a PodSecurity: hostPathVolumes: cleanup 826c57701c7 PodSecurity: hostNamespaces: cleanup 62b71175e74 PodSecurity: restricted capabilities: regenerate files f10dfc6e304 PodSecurity: restricted capabilities: cleanup bd4dc42a72e PodSecurity: baseline capabilities: regenerate files 809abf4f5b9 PodSecurity: baseline capabilities: cleanup b390e9e32dd PodSecurity: appArmorProfile: cleanup 8291f8490b9 PodSecurity: allowPrivilegeEscalation: regenerate files 1e2886341a6 PodSecurity: allowPrivilegeEscalation: cleanup 648b970718e PodSecurity: add message helper 92541f46e6b Restore ability to print long strings 5d80665b0a6 Fix dbus config path for GracefulNodeShutdown e2e 6c72fbaa899 update vendor after switch 79d0c6cdc10 switch from golang-lru to the one in k8s.io/utils 3a221b33324 update to new k8s.io/utils a3f57886a26 fix CleanScope so we can resolve correct verb for apiserver_request_terminations_total a6b30e96294 podsecurity: added ValidatePodSecurityConfiguration c3d9b10ca83 feature: support Memory QoS for cgroups v2 80dda49ce22 Service: Fix semantics for Update wrt allocations 6cf3e36c370 kubeadm: statically default the "from cluster" InitConfiguration 0a42f7b9890 Graduate EndpointSliceProxying and WindowsEndpointSliceProxying Gates 1dfacd3c702 PodSecurity: use code/reason/details from admission library fb9cafc99be sched: provide an option for plugin developers to move pods to activeQ 9bd857ca047 Truncate endpoints over a 1000 addresses d9e3fbff949 apf: fix bootstrap ensurer log message bb3fe633b47 add test for triggering race condition 33e6ebc8f8d update translations ab1807f2bcb copy podStatus.ContainerStatuses before sorting it 1e0f695afa9 fix translations location in update-translations.sh 6408f3dffc0 Update generated files 250f47a45c5 Rename to capabilities_restricted 08608a24f14 Update dropCapabilities check/fixtures ce257266aa7 client-go: copying object to fix data race (#103148) 2c116055f7e [disruptioncontroller] Don't error for unmanaged pods a8793dcb3e2 Implement check_dropAllCapabilities.go and test/fixtures_dropAllCapabilities.go 3fadea4ea2e Bump version of Addon Resizer used by Metrics Server 6b736f34848 Minor adjustments to descriptions and example text cea1dcfeed2 Add watch tracker to APF for request cost estimation 2df05df6982 Avoid code duplication in watchcache 96406b915d3 Clean up the remaining master names in test/integration 7f1c4977d7a Refinements to pick queue logic in P&F 26e83ac4d43 kubelet: ignore /dev/kmsg error when running in userns 192790c52fe kube-proxy: allow running in userns dbe01551397 kubelet/cm: ignore sysctl error when running in userns b16323e37ce New feature gate: KubeletInUserNamespace af19d7f415d fix delete nil pointer panic d8fe255f413 Add test for validateProbe e378600c90d Add validation for Prober TerminationGracePeriodSeconds 1ff5ae2cb5f Regenerate 20de04d6c30 Update API documents 00dba76918e Add DataSourceRef field to PVC spec 5b787aa1843 Clean up testing of AllocateLoadBalancerNodePorts eae4a19bd35 Fix small bug with AllocateLoadBalancerNodePorts 3eadd1a9ead Keep pod worker running until pod is truly complete 68dadd40d63 Fix pkg/api/pod/util tests to ensure feature gate is set adcfcfa2e78 add yaml separator validation and avoid silent ignoration 04d59ff2df3 test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network) 9977ea371b1 test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network) 025c95a778b test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod f6bc5d01402 test/e2e/network: add Service internalTrafficPolicy test pod to pod 2d0f99fba18 Fix resource metrics e2e test 28152a26fee fix: return empty VMAS name if using standalone VM ad8275f294f Added unit tests for ExpandPathsToFileVisitors dffc2a60a28 deprecate and disable by default DynamicKubeletConfig feature flag 68ccb8a9477 Use system-validators v1.5.0 b1f34ea205f add RetryOnConflict to pod status updates 6d4096cc69a Upgrade kustomize-in-kubectl to v4.2.0 a46b42a92b8 Manually update kustomize attachment points. 212ce7c2871 Shorten test time a42c066af70 Fix Data Race in nodeshutdown restart c69ad8c57a3 e2e: increase readiness gate timeout 71f810bb71e Add distributed tracing to the etcd client babebf76d39 Apply PSP container tests to EphemeralContainers aff49ca6846 Generated code for securityContext in EphemeralContainers 70765fa24d5 Allow securityContext in EphemeralContainers ebe550bd488 Upgrade etcd to 3.5.0 7839668877e GCE Windows: Set TCP/IP parameters to keep idle connections alive on GCE. 30d2ad576ac Remove ManagedPod,ManagedContainer metrics 1c8675fc02f Ensure node e2e apiserver and test suite can open enough files c4e644406ed test images: Adds windows-nanoserver image d5cb5065c46 Skip node container manager test on systemd 03d60a89a0c Add build instruction for buildx CLI plugin 82e4ab5ec62 Improve slice allocation in LabelSelectorAsSelector 19c23949154 Add benchmark for LabelSelectorAsSelector 3f0b64ec959 kubectl: show consistent unit format in quota describe 0a83041d4d3 remove Factory that not used 9e372bffeff e2e: test SSH port on NodeSSHHosts c12aa0f6b75 promote HugePageStorageMediumSize to GA 849dbe034b3 use PermitWithoutStream=true for etcd: send pings even without active streams 29178fff1c9 Add kubelet managed pod metrics b42c1a3e474 test images: Adds cuda-vector-add-old image a70323d6320 Updating OWNERS_ALIASES for SIG-Windows Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-08k8s: update to 1.22-betaBruce Ashfield
Updating to 1.22-beta. We drop our bindata patch, since the generated bindata is no longer used. The following commits are part of this update: 9e87082b85f [Pod Security] Baseline + restricted policy checks for seccomp (#103341) a7469cf6804 sort and filter exposed Pod IPs cf6ba6096f9 Move pod-security-admission to an external Attributes interface 6bfaeaf9165 Deprecate azure and gcp in-tree auth plugins 55847256058 Explicitly set LimitedSwap case with fallthrough 0ecc7ba311a Update the logic to pick the best queue in P&F 4c9c761bbb2 instantiates scheduler ComponentConfig after parsing feature gates 74f5ed6b172 This introduces an Impersonate-Uid header to server side code. 2220fc61496 PodSecurity: clean up unnecessary passing fixtures ea54b1b152c PodSecurity: Make check-specific passing fixtures optional 9a5237ca63a Custom plugin config should take precedence over default plugin config 823a0f101ac Don't return in api validation 4b9230ed27f Promote LogarithmicScaleDown to beta 24e19229101 apf: add additional latency into width 20e1c4d7548 exec credential provider: update tests+metadata for v1 04d59ff2df3 test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network) 9977ea371b1 test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network) 025c95a778b test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod f6bc5d01402 test/e2e/network: add Service internalTrafficPolicy test pod to pod 28f3f365057 Promote the ServiceInternalTrafficPolicy field to Beta and on by default (#103462) d0c422fd9c8 Hide long and multiline strings when printing edbaf9d5d36 test/integration/quota: poll for ResourceQuota used status in TestQuotaLimitService caf42fde430 test/integration/quota: refactor Service forbidden check into helper function 54bc1babe16 test/integration/quota: update TestQuotaLimitService to explicitly check for Forbidden status when quota limit is exceeded 87cef2ca736 test/integration/quota: deflake TestQuotaLimitService by collapsing test cases and adding a short delay for resource quota to propagate a85f3e4cce6 Fix(test/integration/util): fix typo on logging message a2c1b284da2 update url 1002b0d163d apiserver: add callback to get notified of object count b6b1674f560 Switch to the version instead of the `latest` 194ed1408dd update translations 66dbfbce105 update-translations.sh: add fix translations option (-k) 079d8aeb1e4 fix update-translations.sh 06124c1d1c6 Add backwards compatibility for kubectl debug f01d251e38c kubeadm: statically default ImagePullPolicy in v1beta3 bb6d5b1f95a memory manager: provide unittests for init containers re-use 960da7895cc memory manager: remove init containers once app container started b965502c495 memory manager: re-use the memory allocated for init containers 94414bea475 kubeadm: fix godoc formatting for v1beta3 61d88af9e40 Revert "Update runc to 1.0.0" 5ea9460234a Readable error message on the plugin configs of the removed plugins 2069ff9efcd fix compatibiltiy_test failures 1f24a198e76 reduce cpu usage of kube-proxy with iptables mode 29814890f6a fix compatibiltiy test f1f0183d2bb refactored extenders from scheduler/core to scheduler 570365178a8 merge packages of scheduler/core and scheduler 26f223fa6ed Bump `distroless/base` image to latest version 772344aef22 kubeadm: fix nil pointer in Cfg() feature gate checking c2a8cd359f1 re-order the imports in kubeadm c50b3074fe8 Moved VOLUME_MOUNT_GROUP capability check from NodeStageVolume to MountDevice; added log message in SetupAt to indicate FSGroup is delegated to driver 794a925a85f Pass FsGroup to NodeStageVolume 0e315355dfc Pass FsGroup to MountDevice ae5668edefd Pass FsGroup to NodePublishVolume 65db13a3a5f Combine capability check implementations 99700f7faff feature gate c24dfe528a0 cluster,hack: Use community infra GCS bucket for retrieving CI builds 1ae9b8f04dc Update kernel components to run as non-root in kubeadm. 83ee392ed42 implement EnqueueExtensions interface in volumebinding c96c809539f Add integration test for LB node port control c8bc4202454 Fix the beta release version. 79b6df96fc6 Add tests for LB type service 24592ca9890 Update the related tests 05c6eaf0d16 promote ServiceLBNodePortControl to beta 8972efc65fe change tracing service from kube-apiserver to apiserver 58b91ffca9e adds HasBeenReady signal that fires when the readyz endpoint succeeds ca108d109d5 readyz signals when the handler succeeds for the first time. 968185e1f7c Warn user for runtime support of debug targeting 6d6d200c3a7 dry-run can work when using an external ca 6c88a62cb4c remove logging from the Signal method dae08bc3a73 rename terminationSignals to lifecycleSignals c91496dda04 cluster: enable debug handlers on GCE master nodes 2b84b49ea98 Service REST test: Remove pointless cleanup ca708fa9ac3 Service REST test: Fix some names 54b6a416fba Service REST test: better IP and port alloc checks 8d49502fcd4 csr: update e2e conformance test with expirationSeconds usage 29b3fa78263 Generated cd91e59f7c3 csr: add expirationSeconds field to control cert lifetime 0a38b2804d9 add deprecated message for igonre-errors flag, and fix unsafety http link 43b13840db5 Service REST test: remove obscure const 44eb475b101 Service REST test: remove unused return value d6208606f33 Service REST test: remove pointless scaffolding 48e591eba23 Service REST test: remove obsolete setup param a3b05033f66 Move endpoints test-helper funcs to a package 012bfaf98d3 Service REST test: remove last use of "inner" 22ed090e734 Service REST test: mostly remove tests of "inner" 7e8882d189f Service REST test: Remove pointless scaffolding 175f4f33873 Move service test-helper funcs to a package b1fcbab8014 Service REST test: helper funcs for ports, too 5f65ba7d766 Service REST test: Use helper funcs to streamline d64bb1b29ed Service REST test: always check errors d3a0332b6cd Service REST test: remove unused fields 292b1444ebf Remove bad test for AllocateLoadBalancerNodePorts 0bb280044ec Fix typo in IP allocator error 5970c4671cc Add an IPFamily() method to ipallocator 89b633d3532 Fix doc comment 13a1804a5f5 podsecurity: add restricted volume type check 622f69bf8d4 kubeadm: update v1beta3's godoc changelog 11d444b00e0 kubeadm: remove versioned copies of the bootstrap token API and utils 14fa296bb38 kubeadm: use the bootstraptoken/v1 API across the code base 5b7bda90c03 kubeadm: introduce apis/bootstraptoken/v1 1cfbb0aa25b remove webhook.go to revert changes to conformance test ac4bb885be8 hostProcess test fixture data 49d31c45b12 PodSecurity: baseline hostProcess check 80494481135 [PodSecurity] baseline - apparmor Implement the "AppArmor" check from https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline b0ffaa93f5c move tracing instantiation further up, and check for nil f0ffba75ad5 Add baseline check for procMount type 210c610d662 make sure to split NPD hashes by architecture when upgrading to 0.8.9 db3534dd648 master too main cleanup e2e1c94f063 use native error instead of github.com/pkg/errors 2cab85a4034 Mark net.ipv4.ip_unprivileged_port_start as a safe sysctl ba6b4c5a18c PodSecurity: test GA-only cases and alpha/beta fields separately e87016cf941 PodSecurity: add ability to skip failure cases if relevant features are disabled b522e95aaeb Prioritizing nodes based on volume capacity: API changes 03b7a699c24 Kubeproxy uses V1 EndpointSlice ab5b77944ec kubelet/cm: don't set Devices 4e7cf5413d5 vendor: bump runc to 1.0.0 pre 67bc23411b6 [storage] [test] Ensure proper resource creation 5bd3334ad69 [PodSecurity] Add privileged containers baseline check b790cf388ce Bump SMD to v4.1.2 to pick up #102749 fix 1c39cf23652 Fix incorrect user and group for kube-scheduler when it is running as non-root. 7ad44d04fce Enforce ReadWriteOncePod access mode during scheduling d57e143277e [PodSecurity] Implement host ports check 9c150b0f22f Error string should not be capitalized or end with punctuation. 584eb5e947f Update local-cluster-up.sh to auto-detect darwin and skip kubelet and kube-proxy 1ac0e018d5b [PodSecurity] Implement sysctls check 4a2aef00d6d adds metrics for authorization webhook 6c86c34457e kube-scheduler: ensure the default config output of --write-to-config is usable 1441a330300 hostPath baseline check for Pod Security Standards 1fa673c15c9 Extent the `NodeResourcesBalancedAllocation` plugin to cover more resources 71cb2d71a87 podsecurity: add baseline hostNamespace check da4aaf81cdd Error should be checked first, then go to other steps. c1d5a3a99e1 Update golang.org/x/net to v0.0.0-20210520170846-37e1c6afe023 03f85e9ade8 Update NPD release version and include windows defender config 5c00024c70b kubeadm: fix wrong check for keys/certs during "download-certs" f0d917a3caa add fuzzer patch to fix tests 39f32d7286a Ensure MemorySwapConfig can't be set without feature flag d4041cb80f9 Add generated files for swap API changes d3fd1362ca1 Rename NoSwap to LimitedSwap as workloads may still swap 0deef4610e8 Set MemorySwapLimitInBytes for CRI when NodeSwapEnabled 7342acb0b83 Add validation for KubeletConfig MemorySwap 7d50271d217 Update CRI with memory_swap_limit_in_bytes bda03b4818d API change: add MemorySwap to KubeletConfiguration 9eeec68d67e Update local-up-cluster.sh swap warning 0dd4ce40adc Add NodeSwapEnabled feature flag ac41e565822 docs: add documentation on adding files to the embedded data deb14b995ac Add score plugin for NodeResourcesFit ebc3fdb2936 Store PVC reference counts in NodeInfo cache c65b80a6378 [storage] [test] Remove extra zone test 0ab03d3d5bb dependencies: remove go-bindata bbccf2ecb43 e2e-node: move to embedded test manifests d98b2dd2d62 generated: remove usage of go-bindata 68b334d02bf test: setup embedded file sources for manifests ceb42d09389 Update github.com/pkg/errors with go native errors pkg 8e4212c01a7 test/integration: rename package and files name from master to controlplane in test/integration 903d76f558e apiextension: fix typo and test case in conversion integration test 3af6329caf2 e2e-framework: add an EmbeddedFileSource to sources 7546e5d6dc9 vendor: update manifest 43c2e454a05 hack: remove bindata generation logic for translations eb75b343949 kubectl: use embedded translations instead of generated bindata 5ece28b77a2 kubectl: move translations to i18n package to kubectl staging directory 322c18c147d adds metrics for authentication webhook b7d732d3d6f Map PV access modes to CSI access modes 8db83c89aab CSI client helpers for NodeGetCapabilities 5f98f6cfa47 Update helper methods to print and parse ReadWriteOncePod access mode 2b98f8edc77 Enforce ReadWriteOncePod access mode during mount 7491d016519 Validate use of the ReadWriteOncePod access mode 48ba5020a28 ReadWriteOncePod PV access mode and feature gate 358d2e0bd1f Export contains access mode helper method 83e3ee780ad Rename access mode contains helper method dba8ee229ea Add validation options for PersistentVolumeClaims 9ba0eed7c50 Add validation options for PersistentVolumes 477aef192f5 fix loadbalancerclass integration test funcation name ffdf3f50073 update node-problem-detector npd to v0.8.8 f80f9eeb6d0 Destroy the created runtimeclass resources at the end of the test case. ab4918b6bc0 remove redundant clause in string_slice_flag f59523ab4c8 Update dns-horizontal-autoscaler to use the wqmulti-arch image c21f9cb59d2 Fix grammar 6f9011a4ae4 PodSecurity: vendor: generated files b8bdcf64419 PodSecurity: update dependencies 724fbfbb69b PodSecurity: test: generate fixture data 93c6f8969a8 PodSecurity: check: addCapabilities 3733e209c91 PodSecurity: check: allowPrivilegeEscalation a8206ef58be PodSecurity: check: runAsNonRoot 12ea930aae3 PodSecurity: check: selinux 42dc070b476 PodSecurity: kube-apiserver integration test f39bddd7677 PodSecurity: kube-apiserver: admission wiring 65a42a483cd PodSecurity: pkg/features: feature gate 02a61877576 PodSecurity: admission: admission library 29f5ebf1fe8 PodSecurity: test: framework 1436d35779f PodSecurity: policy: registry 5183ea0bf03 PodSecurity: metrics: stub interface a3ba921b168 PodSecurity: admission/api: configuration API 9ce17c87738 PodSecurity: api: runtime API 79d400c4416 add tracing to the apiserver's client-go requests 48dfa2a5542 generate scheduler merge patches on the pod status instead of the full pod def93317b48 Kubelet Credential Provider 30a6812aa13 promote client.authentication.k8s.io to v1 889dcb5b54d e2e: node: fix npd test failures bumping image 669fb501368 upgrade staticcheck to v0.2.0 and update the static failure packages 39a373b162f correct example command of kubeadm help a8d4cfac933 Allow delete with grace period 1s even if metadata period is negative 45ce2dfacc8 Treat negative as 1s in delete path 40593fa4d36 spec.terminationGracePeriodSeconds allow it to be set to 1s if it was previously negative 1b73a0040a4 Promote Stateful Status e2e test to Conformance 405e9a5172a Promote Deployment Status e2e test to Conformance d3ad1d77f36 Promote Statefulset list and deleteCollection e2e test to Conformance 266ffa85266 bug fix in sctp test 4add8ed9106 kubectl command headers as default in beta aeccadda4ff Update setcap image to buster-v2.0.3 1721be087d0 nodeport tests: node addresses must match the service IP family 0a8a9188c98 Update debian-iptables image to buster-v1.6.5 42f9333e7fa Update debian-base image to buster-v1.8.0 70124846fa4 control plane typo in node role path 21fd224ebdb Updated to use konnectivity client v0.0.21, and implemented placeholder context 2eb50ee2fd5 fix comment on dual-stack integration test 80171465b35 Renamed variable containing master to control plane fa7b5d86e63 remove duplicate validation on services 20f84b12a16 Optimize scheduler res scorer on non-requested extended res 0cdd8c1c109 Removing ServiceAppProtocol feature gate 913c449a42f add unit test to verify graceful termination behavior a84c1b71005 apiserver: NonBlockingRun should return a listener stopped channel d85619030e3 apiserver: refactor graceful termination logic 79550ed40c6 Add distributed tracing to the apiserver using OpenTelemetry 916dbc335c9 nodeport tests: node addresses must match the service IP family 02a3caba9c4 refactor default IP family cluster detection 9accb994dff tests: Wait for the network connectivity first 16b7d473f23 Narrow the scope of the json/register test case usage checking 179e48c4bec Add missing comments in APF API types fe161579e20 Add integration test to promote serviceloadbalancerclass feature to beta. ecc53182475 Remove MPL-licensed dep from lruexpirecache 1e250610b20 Fix panic in pkg/volume/csi tests 7f893f6bd62 Split documentation according to both mechanisms available for migration b6a317aeafc add a function that returns default scheduler configuration 5feff280e1a remove fakefs to drop spf13/afero dependency af825b43577 Remove default JSON logging format registration from component-base/logs package d3dfe124dac Update mounter interface in volume manager 4233056f804 Move HPA v2beta2 deprecation to 1.23. 538e7777c39 kubeadm:remove deprecated flags CSROnly and CSRDir 8f08db9164b Change log level to Debug 7cf30d56906 fix/remove-errors-pkg 89a4d4b0717 kubelet: modify the function of getCgroupSubsystemsV2 to use libcontainer API 23ce7977b75 Loadbalancer IngressIP policy should be configured as non-DSR to enable routing mesh by default cf07d42337b removes unused libraries 7e891e5d6cf csr: correctly handle backdating of short lived certs 70a524659aa kubeadm: add {Init|Join}Configuration.Patches.Directory to v1beta3 a4402122b4f kubeadm: add the --patches flag and deprecate --experimental-patches 70c0fdda0c6 Add lilic as Instrumentation reviewer b259686b367 tests for statefulset PersistentVolumeClaimDeletePolicy api change 43f8f58895d add containers starttime metrics for metrics/resource endpoint 0762f492c5b Add config checking for inflight limits e4e735cd1cf statefulset PersistentVolumeClaimDeletePolicy api change 0feba0c4eec Add StatefulSetAutoDeletePVC feature gate 5d461adb3b8 Apply suggestions from code review 93365919b50 Fix staticcheck failures 674802147c8 update to remove github.com/pkg/errors 730c21d386a Drop etcd tests dependency 01760927b82 Simplify running embedded etcd server in tests cf9510751d5 StatefulSet minReadySeconds e2e 47615c20207 e2e: node: remove obsolete AlphaFeature tag e7a240395e9 uses native errors instead of github.com/pkg/errors 12dcd2f84d4 Remove usage of github.com/pkg/errors 8b7003aff4c Add SeccompDefault feature 4b140218747 update github.com/pkg/errors to go native errors pkg in staging 3b36e6bcea4 kubeadm: fix image pull policy integration b4dddbafa2f CHANGELOG: Update directory for v1.22.0-beta.0 release c5498744c9e Making a run test. cd318aec0ba Disable deprecated volume limits test when migration enabled and replace with CSI-specific test 6583b05f07b replace more powershell commands with /bin/sh in volume/fixtures.go 7aa8a497df0 replaced usage of powershell commands with linux commands f0d7e9c9d1d undo windows compatibility changes because the linux commands work 9a146bc3e99 Remove [LinuxOnly] string from ginkgo tests 54070a66284 Enable another test in windows, use a /bin/sh command instead of a PS one ee34cd640ac enable gcpdcsi multivolume tests with windows nodes 58a83ecbdb3 integeration tests 2c6bba29360 fix auto upgraded preferDualStack services (in cluster upgrade) d4767ed5ebe memory manager: move to beta b6c75bee15e Remove balanced attached node volumes 63a23f1ed7a Transitive dependency: high CVE fix 681905706d4 e2e node: provide tests for memory manager pod resources metrics 03830db82de Implement all necessary methods to provide memory manager data under pod resources metrics 24023f9fcc7 Extend pod resource API response to return the memory manager information 0f922b200f3 Simplify the formula used in the RequestedToCapacityRatio plugin 3daef0a5343 Allows manual restart of dbus to work in Ubuntu. ec93b3b0be4 Stop using github.com/pkg/errors 0dd1624ec8e update cri-api v1 25f479c2ac7 fix'--log-file only works if --logtostderr=false' d95f677dd86 Fix OWNERS 249db7ceb39 wait for endpoints to be available 44360b315ca GCE Windows: Upgrade to flb-exporter v0.17.0 which reduces log spam. 459fe7d08ad add support of imagePullPolicy to kubeadm 8231a3e9210 CSIServiceAccountToken ga e2061cfcd81 Expose envvar CSI_PROXY_VERSION 518844fd25f use GA topology labels for vsphere 1e949fa9280 updating github.com/pkg/errors with native errors pkg 4d11c3cd8cb deflake TestClientReceivedGOAWAY test 6cb448c10e2 Specify etcdctl version for livenessProbe 676958c2bd0 Fix NodeAuthenticator tests in dual stack b22d0b13cc4 Fix verify staticcheck flake in cluster/images/etcd ea419eaf339 Add shu-mutou to dashboard approvers 6203d4fc6af apf: calculation of dR/dt should use seats in use 6d3fd8353c3 don't panic if nodeIPs are not found 1f9d448283a Use errors.Errorf instead of errors.Wrapf when the err is nil afea48d23f0 test/e2e/network: remove dependency to google.com for in-cluster networking tests 292f2a67bd6 Update logging example with caller e37d6d6c6dc Simplify zap logger initialization a2a8080169a Fix: typo with hack/update-codegen.sh fc38aeed6f8 Fix: typo on ExtractHoge b9d5d5536ed Add log sanitization klog integration tests cff40a7bcc1 Add info about source code location in JSON logging e371b27e6cb Fix frameworkImpl.extenders being not set 875f1ffe2bc chore: clean up the tests that have external dependencies 72a53288a5b Remove gcepd unmanaged zone test. 35e9d97f3e0 update Azure/go-ansiterm to v0.0.0-20210617225240-d185dfc1b5a1 8942cba24d4 log if we're running with -race 68d8bcb64fb remove redundant bits from test-dockerized.sh 4ee729ce5f2 disable race detector in test-cmd.sh 55d2868e9d8 don't redundantly set KUBE_RACE in test-integration.sh 3c44b86ad65 enable race detector by default in make test 6c0463bd2b6 fix: properly wrap errors when reading response body in the client 3930629e130 Track generalization for width 676f0450ed3 Add APF metrics about R(t) e72effbf12e Remove omitempty from PathType 774d228637d remove the path if it exists before writing pki data. 5d15ed02b56 Extract columnPrinter interface for printing the values behind additional columns 1c2ba3162db update internal modules e977740ae63 Rename master to apiserver in test/integration 9571b1f8844 update vendor 4eab19ae7d9 Clean up the master term in test/integration comments 54fde5d119f Make logged verbs match metric-reported verbs 762eeb0988c Use the hostprocess feature flag and assign a user ff716cef508 apf: take seats into account when dispatching request 47171077bf3 CHANGELOG: Update directory for v1.21.2 release 0ccf53dd200 CHANGELOG: Update directory for v1.20.8 release 780872223f2 CHANGELOG: Update directory for v1.19.12 release 6ae7b551143 update internal modules 97031da5e29 Correct comment block from openapi_v2.NewDocument to openapi_v2.ParseDocument c691386fef7 Update github.com/googleapis/gnostic to v0.5.5 and updating transitive dependencies go-cmp, protobuf,, to adapt the latest gnostic release which cosists of [Update protos for Go protoc plugin compatibility] edd0cd79eb0 Updating non-vendor specific code to support/use AWS-SDK-GO v1.38.49 1b27430b506 Updating AWS-SDK-Go to version 1.38.49 c673e166383 Fix ServerGroupsAndResources docs typo 1a4b0ee09bb remove excess error handling 45d18acbcc1 add info for possible failed listAndWatch grpc call c789898f793 when new manager failed should return err da35add03f7 Rename master to apiserver in test/integration eed37fa47d3 fix: cleanup outdated routes 5a0756c5f4f Update etcd in kubeadm to run as non-root. 9e694a45f94 test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy 3c59e742f3b Create List, Patch & DeleteCollection StatefulSet Test 63d12371021 Fix Node Resources plugins score when there are pods with no requests 584503d2ed3 Speed up unit tests in -race detection mode d41249f7803 CHANGELOG: Update directory for v1.18.20 release d5da73032f7 Add unit test for DSWP with uncertain volume f795b02f4f8 Refactor dswp unit tests 2fcb5e9cf79 Add PodRemovedFromVolume ca934b8f5cb Add GetPossiblyMountedVolumesForPod to let kubelet know all volumes were unmounted f4b41c0a171 Fix UnmountDevice error cases 54ad7e40f1a Add e2e test for NodeUnstage error cases a47afdded0e cmd/kubelet: replace KEP link with the documentation one as it is available now 0bfd1cb7c71 Update gomock to 1.4.4, removing a few extra dependencies. 7fcdbbef06d Switch to github.com/coreos/go-systemd/v22 and drop older package 265ef1741f9 Move scheduler plugin set and configuration defaulting to component config 057422504ab Run volume cloning tests in the same topology segment abf65843227 update string_slice_flag add nil judgment cf2a3c32309 Kube proxy for windows userspace, remove dns Mangling, vendor updates b98824c55d9 Update Azure Go SDK to v55.0.0 480093bd1f4 test/e2e/network: mark network_tiers.go tests with GCE tag f298a658aed e2e metrics: remove redundant checks around metrics tests a4c7e91b591 e2e metrics: skip tests when metrics grabbing is disabled 1d3420ca72f e2e metrics: check whether debug handlers are available 5e9076da93c e2e: grab controller and scheduler metrics via port forwarding 3e0269ce6e1 Move common code to ensureTopologyRequirements 4ee38f33d21 update etcd makefile to build v3.5.0 image 6448181d95c Update to etcd v3.5.0 client 207f9e8b714 switch go-flow-levee to tagged version 84112d36900 refactor cmd/kubeadm/app/preflight/checks_test.go() 5ca47deb0aa Promote DaemonSet Status e2e test to Conformance f7d02f4d25a Promote ReplicaSet Status e2e test to Conformance 503f5e1b528 Quiet grpc info logs in apiserver dd5f67d23c0 Kube proxy for windows userspace, remove dns Mangling 8fb909291fb Skip migrated metrics for Windows CSI tests f02948e7766 Use container-storage-interface spec v1.5.0 6ba7b3d26b3 allow enabling Leader Migration without config flag. bade96ed78f implement wildcard component. eadfe46e036 Do not throw error when we can't get canonical path 14085c50d3c bump KUBE_TIMEOUT to 180s 2f7456076e0 apf: always include seats in virtual time 9469756b6cb Ensure kubelet statuses can handle loss of container runtime state 211485c23d3 last-applied-config annotation no longer mirrored to endpoint slices ceb1dbd2f1f statefulsets: MinReadySeconds implementation 01bb0f86b02 update comments and owners file for pkg/util/removeall f1de598233e Improve terminated pod message when node is shutting down f9343f837dc Use LoggingConfig within LogOptions 5cfc39ef5e9 Update protobuf,grpc,etcd dependencies bc86d12dd9c Update generated files for endPort promotion to Beta a26c392de17 Fix etcd egress dialer addr parsing 19db126d76e Exercise egress configuration in local-up-cluster f283deee6b6 Quiet embedded etcd logs 068e4c55a8a Eliminate parallel and unnecessary embedded etcd instances 52b629efbc8 Drop use of deprecated clientv3.SetLogger 2979c3325e3 Switch to go.etcd.io/etcd/client/v3 ff2c6142459 Switch to non-deprecated timestamppb.Now() 1134456c89c Fix CSI mock driver to get marshaleable grpc error 77ab4bdbbcc Drop etcd v2 support from test util 5f1983d8710 Drop etcd v2 support from etcd migration image 1e1a60e310d publishing: Use go1.15.13 for 1.20 and 1.19 release branches 9f18ddf03ce Promote endPort field in netpolicies to beta e427d2f22a7 test/cmd: kubectl and exec plugins don't fight for stdin 60246f69cc0 kubectl: don't fight for stdin with exec plugins cd83d89ac94 exec credential provider: InteractiveMode support ca254e978b5 feature: add unified on cri to support cgroup v2 be48f1d272d Add test cases to the addAllocatableThresholds function in pkg/kubelet/eviction/helpers.go 8fe00a7e484 Start deprecation of --record flag 5ea3dd531c7 Update certs.go 83ee5da75e9 Fix:slow memory leak may be in kubelet podworkers.isWorking 74feb075948 kubeadm: CoreDNS permissions for endpointslices 188193e1c0b kubeadm: upgrade coredns 1.8.4 and corefile-migration to v1.0.12 a3e464490a5 Fix some typos and omissions in kubeadm APIs ff0f83b4b2d skipping more tests in case when ExecProbeTimeout set to false 4b36a5cbe95 Switch to github.com/robfig/cron/v3 f042b4968d3 Fix broken KEP link for issue #101008 c329202ee8e update comments to reflect wildcard component. 44cb4a63f61 Allow write on events to edit role 7560f33e27d kube-scheduler: stop using insecure serving bits 59b4b124df0 Update kubeadm control-plane to run as non-root. de2f9f17093 Remove error wrap from logs 2e06066bab8 Migrate kube-proxy to use v1 Event API 8748f3105bb Update corefile-migration to v1.0.12. 60ab908119f Fix - Winterm issue on Windows 8.1 in kubectl exec 9f7d61c520f Upgrade ANP components to v0.0.20. 106f416873c Upgraded konnectivity-client to v0.0.20 9109d928cd0 test(proxy::config): deflake TestInitialSync 44b396ae0e6 owners: update puerco/cpanato and clean up old members c13c3ebc793 Remove deprecated scheduler CLI flags hard-pod-affinity-symmetric-weight and scheduler-name c710f99ef73 apf: add a gauge for the number of seats currently in use 9d514b2de42 Konnectivity: tune flags for larger clusters (5k nodes). 36eaa11d50b cleanup usage of NewPodNominator fd972934e49 client-go: reduce log level of reflector again 369416b7636 cm: handle nil cpumanager avoiding segfault 29aa4c0ee81 Check content of volumes in snapshot/clone multivolume tests 89284a1ba7f run_remote: improve error reporting 654ec0866a9 kubeadm: use a suggested example in v1beta2/3 docs 9255f2ccf38 Fix kubelet cpuset typo 68f139548b3 Remove unused parameters from TestConcurrentAccessToRelatedVolumes 77c04d22844 Increase KUBE_TIMEOUT default to a passing default 110c39ef60c unroll extenders dae335c1150 Fix test failure in some envs. 90df026709d JSON log format registration for kube-controller-manager 170c93bf05e JSON log format registration for kube-apiserver 52f5ba3a58d Remove SchedulerAlgorithmSource from scheduler's internal CC API a5825d68365 JSON log format registration for kube-scheduler e6bf19bcf69 Update CreateInitStaticPodManifestFiles, CreateStaticPodFiles and CreateLocalEtcdStaticPodManifestFile to take into account if the command was run as dry-run. 183bc3cece7 Allow scheduler maintainers to approve changes in the internal apis pkg 46f3e4dfdd4 Define in-tree scheduler plugin names in separate pkg to break a cyclic depednecy when moving plugin defaulting to CC a84b91f08c1 fix net-tiers e2e test 6d7c83f2cd1 the last upperbound of kms latency metric is too small 9b72eb1929a apf: add plumbing to estimate width" of a request 12447bc8038 Upgrade etcd server version to 3.5.0-rc.0 c98306a09e9 test: adjust summary test for cgroup v2 c0c9f1f318c Ignore first SIGINT in node-e2e tests bd80603c9e5 JSON log format registration for kubelet 386036d23d0 Add k8s.io/component-base/logs/json/register to vendor dc5626cc183 Upgrade debian-base to buster v1.7.1 897f8012fdd kubeadm:Run preflight checks for diff to check that the manifests already exist 484eb018222 kubelet: do not call RemoveAll on volumes directory for orphaned pods 528baa09f6d e2e storage: disable health-monitor controller in hostpath deployment 1932536ebe3 CHANGELOG: Update directory for v1.22.0-alpha.3 release a94aa0ea9a3 Update version of go-flow-levee for verify-govet-levee check. de7e56bf374 apiserver: close handler chain right after shutdown delay duration 652e056e61f Add dims as approver in build/ directory 3968ee532d9 CSI e2e: stop leaking pvs in CSI mock snapshot test 1524526991c [go1.16] Update to go1.16.5 1eb8060dd61 Add test for CSI mounter 0fcd3c951c5 test/integration: Rename master to controlplane or apiserver 257b494478a test/integration: Rename masterConfig to instanceConfig ac5535c9491 test/integration: Rename MasterConfigOptions to ControlPlaneConfigOptions 3ac8d8c9cee endpointslicemirroring controller mirror address status 8d0936b7436 Check empty zone after the validation of providers aea2e33175b gendocs: using bytes.NewReader(nil)/ioutil.Discard instead of os input/output to generate command c065d7c7b3b Fix NPE for CSI mounter f22b07d8b42 add e2e test for immutable label selector in netpol ff164f90130 feat: remove ephemeral-storage etcd requirement bb6151906f1 Add utils to set file/directory owners and permissions. 95c8b02096b Add explicit capability for online volume expansion 28511e82ad9 Add e2e test for a volume + its clone used on the same node 7a63dff88bb Update konnectivity default 3c8e56bef95 scheduler: graduate CC to v1beta2, deprecate plugins 2067b69b922 storage e2e: extend timeouts for subpath restart tests 3a830aacb0e Trivial: fixed typo in logs requrested --> requested 64946cd50d6 fix flake integration rotation via informer 7ced405de5a Create a new modele component-base/logs/json/register for optional json register 92b52a4fb56 populate last successful time to cronjob status 77bb053102c Use native zsh completion 7b0fbb72929 add audit log test cases for cross-group subresource 46aa6045e4c Add tests for completion utility functions 1babceac650 Revert "Add Go tests for custom completions" 9625872d1e4 Join common functions for completion 9d03185d3c1 Update staging/src/k8s.io/kubectl/pkg/cmd/config/config.go c0b3a698fa1 Add Go tests for custom completions 879cdc5fa9e Move all completion bash code to Go code 663b13e8149 refactor: implement custom completions for some flags using Go c5d70e9db1e Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver} aa9321f534b Add example showing impact on log output 8e85a2b0c23 sched: fix a bug that a preemptor pod exists as a phantom c15fd76ee90 e2e storage: enable health-check controller in hostpath deployment 88174fc3f2c Add klog integration tests c9414c2bbaf fix bug where string slice flag is not assigned 2e167a1399b Disable zap sampling and cleanup config a9a2346e194 Cleanup json logging benchmarks d8e91ab7275 Fix test order in /pkg/probe/http/http_test.go 1010e6a9d98 proxier/ipvs: fix test cases where ready endpoints were not used cc2e9394be3 kubelet: Fix test order in verifyContainerStatuses 91e5d98b572 Fix audit unit test file location 4ebc0c94a4e Remove legacy metrics client from podautoscaler 3175dbd8554 Update owners for structured logging library f5739a15d1b The test was not very useful and required elevated access 8eb7e81bc94 proxy/ipvs: add unit test Test_HealthCheckNodePortWhenTerminating for ensuring health check node port fails when all local endpoints are terminating ed4fe073755 proxy/iptables: add unit test Test_HealthCheckNodePortWhenTerminating for ensuring health check node port fails when all local endpoints are terminating 14cc201b58b proxy: add test case in TestGetLocalEndpointIPs for when all endpoints are terminating 3e459997c83 proxy/ipvs: add a unit tests for when the ProxyTerminatingEndpoint feature gate is disabled 68ebd16a2ca proxier/iptables: refactor terminating endpoints unit tests with test table and test for feature gate f92265f6543 proxier/ipvs: check feature gate ProxyTerminatingEndpoints 8c514cb2329 proxier/iptables: check feature gate ProxyTerminatingEndpoints 25e2c92733c add feature gate ProxyTerminatingEndpoints cf9ccf5a8e2 proxier/ipvs: unit tests should specify Service ports d82d851d89a proxier/iptables: include Service port in unit tests 4c8b190372a proxier/iptables: reuse the same variable for endpointchains for better memory consumption 55881093d8a proxier/ipvs: add ipvs unit tests for falling back to terminating endpoints 9d4e24aa32d proxier/ipvs: fall back to ready terminating if no ready endpoint exists b54c0568d8c proxier/iptables: add unit tests for falling back to terminating endpoints 732635fd4b2 proxier/iptables: fallback to terminating endpoints if there are no ready endpoints be92fc83e2e proxier: simplify toplogy FilterLocalEndpoint function e797a5a1989 client-go: fix flake in test TestRequestWatchWithRetry 892d4fabb84 Revert "Merge pull request #102581 from liggitt/revert-watch-retry" fbf2d2df268 only delete forwardingrule and address when net tier annotation is specified d9f82f7eba4 Drop viper stuff in test/ 558bdd18aa2 Update cronjob integration test to batch/v1 6871b2b3c73 Rename masterConfig to controlPlaneConfig 812a04539cc remove redundant code 45179bb989a update debian-iptables to v1.6.2 c26c423b1ca storage e2e: disable health check containers 82be7aad262 Update etcd makefile to build v3.5.0-rc.0 image ceaf9b9d16a add ut for preventing dropping null from arrays ca279bbcc18 Fix race in attachdetach tests 6e0650e3e13 upgrade gopkg.in/evanphx/json-patch to v4.11.0 e35af41a123 Revert "client-go: add retry logic for Watch and Stream" 58833d652d5 Support subresource match 38d3ae1a060 api: update API compatibility tests to remove topologyKeys from Service e9c7fa49d95 core/v1: add unit tests to ensure deprecated protobuf field numbers are not re-used d96af5f2761 kube-proxy: remove ServiceTopology implementation f119b8df5f2 apis: update generated code after removing Service topologyKeys 4d38d21880a apis: remove Service topologyKeys 8c376426f3e features: remove alpha ServiceTopology feature gate 0b8dc56408f fix volume failing test a2a4b50bc15 fixed deadlock ae603a38bc2 remove -ssh-user from cluster scripts for GCE f94391789f1 Add doc.go for client-go apply support 5bf7bb52fe4 Remove -k from toCurl output ba708e5fc9e graduate SuspendJob to beta 8aba8e2a2cd remove the ssh tunneler implementation from kube-apiserver 6449416a3d7 Add scalability label to kubemark OWNERS 84590fe27cd remove --ssh- options, deprecated 13 releases, that only work on GCE ab45d5e4963 part of master to controlplane in test/integration SetMaster -> SetAPIServer 51717256f97 fix(timezone): the timezone is standardized to UTC 1331c76aa3d Added field-selector option for kubectl top pod 08ad7114d3f make lint-dependencies happy! 29def9ff6ab Updating to prometheus/common v0.26.0 77b5ad2fb02 Part of master to controlplane in test/integration(1.22) 2c9f02c3290 Add test 506fabc9ab9 Close the used modules file b87ad95fec3 Close the used file 918246d7a16 update error info with the new limit in #98753 387154f1a9a Part3: master to controlplane in test/integration Rename RunAMaster to RunAControlPlane f6d015be7a0 kubeadm: add utilities to manage users and groups dfd67c7d79e Add unit test coverage for init container phases 47a7fcb17b4 GCE Windows: Only create NPD kubeconfig when the file path is defined. b8edcd3bb33 add loadbalancer name to ESIPP tests so regex pick them 8e2eeffa792 PokeHTTP default timeout to avoid hanging connections 21073e3b347 loadbalancer outer poll loops should have a longer timeout that inner loop 27e20e226eb e2e lb use same variable for endpoint path bd2d63dd57e Fix closing of decorated watcher channel on timeout 8847a250267 apf: fix flake in test 5d4c1162b94 hotfix(staging_apiserver_pkg_httplog): restore depth to log calls 53af0027420 storage e2e: capture driver pod changes, including all events 9eea445bcce Update test cases for 'RESTARTS' column in 'kubectl get pods' ec4182d0032 Add last restart time to 'RESTARTS' column to 'kubectl get pods' output ce08fd59767 Add test cases to the LoadClientConfig function 211e9747224 Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test 4b0d0d6fc7d Fix spurious Feature tags on some NetworkPolicy tests c3a9c7da160 Promote CronJobControllerV2 flag to GA 1619e8eb953 Clean apply's prune and kube addons with batch/v1 CronJob 1bf8edfdd44 remove GAed feature gates group: LegacyNodeRoleBehavior/ServiceNodeExclusion/NodeDisruptionExclusion 8054b0f808d Fix watch rejections in P&F filter 15c4d579f08 Use objGV instead of gvk.GroupVersion eac1d23825b nit: Update comment to match headers change. b049e1b9ab4 Cleanup redundant failure reason in InterPodAffinity plugin 95ac461a290 serviceOwnsFrontendIP shouldn't report error when the public IP doesn't match 58d7bf67d46 Simplify objGV construction b9b01a0f901 Simplify objGV construction 19c72a6cd05 Simplify objGV construction 0ae6a7bac6b Simplify objGV construction 86d68effc21 clean code 355be993906 Default GCE testing to using konnectivity 673352dbd25 Cleanup Framework interface 97ba90cbfb4 use subpath for coredns only for default repository 9880ceceb94 Add KEP links to sig-net feature gates 9d2135f703f reuse fake topology manager 8b3162d67b2 clean code f3f59d420a6 remove LinuxOnly tags for subset of dual-stack tests 39d45fcceff Add user and group name constants for kubeadm rootless control-plane. 3cb4f3e1bf0 GCE Windows: Upgrade to fluent-bit 1.7.7, 1.7.6 had a major regression. 8d9dd7b6eae Avoid warning on seccomp field usage f2ca9c17946 Fix regression for timed-out stream cleanups 452e2eaf1ba Fix RollingUpdateDaemonSet godoc regarding rounding e3841e91c81 fix watch_cache_capacity metrics 5b0bafabf6b vendor: upgrade cadvisor to 0.39.2 4567a431010 Return UnschedulableAndUnresolvable when looking up volume-related resources returns NotFound error e105611d3a7 Azure auth forwarding adal refresh error to tokenSource, fixes error when token refresh fails. d9d51541a87 Address watch panics in P&F handler and extend testing. 582b492cc09 Pre-allocated memory 341f6e42673 Refactor logs options 607d3819498 client-go: add retry logic for Watch and Stream f9249061737 Bump golang.org/x/text to v0.3.6 6a374b50f92 Add tests to logs eb114115fdb Improve func ToSelectableFields performance for event 1431eab36d3 Remove Godeps 329f7d55d13 Fix auditing failed of request: encoding failed ade167e53af Delete AvailableResources judgment for GA features c7111515c5b Enable protocol-buffers by default 3c899f9b54d sched: fix Dump's doc comment 24a1f9d817c kubeadm: use "SkipPhases" from configuration for "init" and "join" ac161866aa7 kubeadm: add SkipPhases in {Init|Join}Configuration for v1beta3 39d74049615 Uniform output string. 47c8c48e2cf Remove Redundant alias 2787e8c18ce Kill container runtime with SIGKILL 1b6cf83cf40 Error message should not be capitalized. d3f92af74f1 Part of master to controlplane in test/integration NewMasterConfig -> NewControlPlaneConfig cd3709232f8 Fix VolumeAttachment garbage collection for migrated PVs 02bade46443 Fix a grammar error in doc c9fe8ddf68d bump calico to v3.19.1 816a069d543 Add a test for verifying compute basepath. 36cdb72eb6f (scheduler e2e) Create balanced pods in parallel 3813ed1ef71 fix prometheus-to-sd image for fluentbit 12fe4dee2b0 Update setcap to buster-v2.0.1 and add setcap to dependencies.yaml f9a04f3bc4a Move error reporting to volume plugins 0ed0714f8c0 Simplify kube-cross dependency handling 39d9e98a6f9 Build non-static binaries with PIE buildmode ac17d03e76c Remove set errexit from etcd manifest ae4db677f41 Update kube-cross to v1.16.4-2 c694b9f7619 CronJob: switch storage version to batch/v1 in 1.22 781c65a40c2 fix: skip pods with empty ip 580b557592c Log spelling formatting and a redundant conversion 5c2841c8cd4 Forbid the use of --config and --cri-socket at the same time 6738380a80c cleanup tempDir after fsstore_test.go d9681d72669 AllowExpandedDNSConfig if haveSameExpandedDNSConfig(newPod, oldPod) 6317ce63c6a Add feature gate ExpandedDNSConfig 819059f641d kubelet: Validate the length of the DNS search path a95842095ec Retry reading /proc/mounts indifinetly in FC and iSCSI volume reconstruction 82cfe9f14f8 ConsistentRead tries 10 times 1d16f934b94 Bump k8s.io/utils 64e8396e300 Retry detaching FibreChannel volume few times faae926d15d Changes headers to IETF standard d7a67a3b8e5 change log line to print actual pod uid instead of address of the pod uid 876174125bc upgrade klog to v2.9.0 27044f48552 depracate ValidateProxyRedirects as it is with StreamingProxyRedirects 363b78fe883 Promote cronjob to batch/v1: kubectl sparse_test prune 90e215dfd29 add api e2e test for port ranges of netpolices 9cfbf062256 cleanup PodPreset testdata 0cc217647ca Implement support for watch initialization in P&F 507710b50f8 Update CNI plugins v0.9.1 4acb6a865c9 storage e2e: use csi-driver-host-path v1.7.2 in single pod d98a83bb01b kubeadm:return error info normally 80a5b004451 Removing utils/mount dependencies from vendor 2769e99dba2 remove scheduler deprecated algorithm-provider flag and clean up algorithmprovider pkg e89d2a77795 Promote Daemonset list and deleteCollection e2e test to Conformance 5e4c59ba991 Promote Replicaset list and deleteCollection e2e test to Conformance e43e9696cc6 Fixed sort-by not sorting Resources as expected 8651fcb25a7 Implement a windows Netpol NewModel 4c95bc8830b testdata: StatefulSet f3ab9550180 validation: Handle presence of api introduced d11cc95376c feature: Add minReadySeconds featuregate 5464b649812 generated: Changes for api introduced 49af8358522 api: Introduce minReadySeconds,AvailableReplicas in Statefulset df4c34e771c Update pd csi driver images to use v1 images (CSINode, CSIDriver, etc) 17551f291d0 Return UnschedulableAndUnresolvable instead of Error when failing to lookup pvc or storageclass in VolumeZone plugin f871475a5e5 Grant PSP permissions to all serviceaccounts in e2e, not just default 80fa50e0d74 Update etcd image revision 33fe4bb0764 Update debian-base to buster-v1.7.0 3bcc15e19dd Update debian-iptables to buster-v1.6.1 6c0976814ca use ownerReference to build default spreading contraints in the scheduler 2e771b8e745 Make a public ValidateAnnotationsSize 8e5a9824425 kubeadm: remove the cgroup driver detection code for Docker a013c6a2db5 Adding IPV6 (Dual Stack) support to handle IPV6 pod cidrs 93f79103e54 kubeadm: add "+optional" to fields with "omitempty" in v1beta3 2c79f52de90 Local PV e2e: fix leaked local volumes 38c56883f1c e2e: hugepages: delete test pod after the test e862421c2bc Update etcd makefile to build v3.5.0-beta.3 image 383ce85649c [scheduler] avoid comparing function pointers in unit tests c9ec4862872 Part of master to controlplane in test/integration Rename NewIntegrationTestMasterConfig to NewIntegrationTestControlPlaneConfig 1b6895c11fb Fix: remove framework.ScoreExtensions interface check 5908cd0d90d simplify returning boolean expression in /pkg/volume 9e257ec194f Optimization logging format for pkg/kubelet 55ff9630179 Make validation totalAnnotationSizeLimitB public. 69019a03d3a Add netpol tests for windows 2d361d43063 e2e: Flag questionable durations in container status on termination f9cb68a2b13 Fix EndpointSliceCache::getEndpointsMap for different endpoints with same IP f1aee7e0496 kubelet/cm: GetResourceStats -> MemoryUsage 517feed45b5 Add: interface check 202a0120937 Add restart unit test b344d4d4422 api link is missing 20c02357cad Add hint to fake topology manager. c299b8fc9a0 kubelet/cm: rm propagateControllers fadf3e15316 Graduate prefer nominated node to beta e8f69398c35 simplify return boolean value expression in cmd/kube-controller-manager/app/certificates.go c24b87b1336 Fixed a possible nil pointer dereference caused by variable `plug` c201a78dff9 Remove etcd connection apiserver preflight check 3c1576ae573 Create e2e Deployment status lifecycle test bcfa3604a28 Create e2e test for Statefulset Status endpoints 990d0949c4e Add test, after restart dbus, should be able to gracefully shutdown 9c59e6c85fa After dbus restarts, make GracefulNodeShutdown work again ae90e6b9a1f Retain the test coverage of TestObserveWebhookRejection. fb23e449ab6 Add attr to the argument list of ObserveWebhookRejection, and remove operation, as it is included in attr. f40b10e3aa0 Prevent data race condition in vsphere unit tests f9ee64007ee apf: always create missing bootstrap configuration object(s) 32c14da9025 fix(metrics-proxy): wait for enough component pods to show up first 6c63ef147cc extract same code of es and esm to pkg 72fe1b722ce Make the service account error more apparent 88b31814f4a BoundServiceAccountTokenVolume ga 619fff10eac handle Unmarshal error 074f25523b2 scheduler_perf: correct error handling 55be51a2dbe Issue [2683](https://github.com/kubernetes/org/issues/2683) was closed with PR [2690](https://github.com/kubernetes/org/pull/2690O) sSimran should now be part of kubernetes ORG 330fee13506 remove the RunAsGroup feature-gate 5ea01629066 e2e: deflake test by not relying on events 3916c009551 fix manual trigger of readinessProbe on startupProbe success fa1a4100c6c Remove CSIMigrationVSphereComplete flag baa88b26cdc Remove feature gate to GA the setHostnameAsFQDN feature 60377ba1a37 graduate IngressClassNamespacedParams to beta 2eb90f9b809 Default StreamingProxyRedirects to disabled afe28c6fc83 kubelet_pods.go: clean makeEnvironmentVariables 1df3a735d3b go-to-protobuf: small fixes to improve debuggability 2335547a9cf cleanup: delete tempDir after flexvloume_test is executed 650666406e1 update kubelet_running_pods metrics comments: pods that have a running pod sandbox a3b2e35d700 Making a run test. 125fb04dbf2 Relax node_id length limit to 256 2dbdfd0902e Extend the max of admission latency buckets to 10s. e7db88b0b65 Add a namespace label to admission metrics. 3bad31b531e Add allowAutoIOPSPerGBIncrease to translated AWS EBS StorageClasses 4272ac92a76 Document the NodeAddressType values b9d9cc38b52 fix: inaccurate miss schedule times of cronjob v2. 78323910db5 Fix typo: Use uniform format of structured klog 8725c960149 Fix csi_client_test.go metrics nil pointer dereference 79126376f02 Add test for counting inodes correct with hardlinks d45ba645a8f Get inodes and disk usage via pure go 6e54f067e9d Support dynamically set log level for kube-proxy 1d764952dad Fix incorrect test code in pkg/volume/csi/csi_attacher_test.go file 64fca6bda7d doc: remove the description `socat` is required 80b4277bff4 Optimize the structured Logging migration. 0eb40b3ded6 e2e: reduce pods used in shared local pv test dea89e549fc Fix use nil err 086cdfb3601 Use docker buildx for the build-image. 2d3073c5917 Tweak kubelet config comments for consistency and readability fdcbb54febd Improve kubelet config type documentation bc3e7b5dca3 nit: use %v for error as it is already quoted 04f091790ee e2e: TM: wait for SRIOV devices in pod scope tests 8e7b5ff480b staging/src/k8s.io/apiserver/pkg/registry:migrate logs to structured logs 3ec63238c53 fix kubectl alpha debug node does not work on tainted nodes 88fbd370407 Fix the url 'version's comparation of github.com/Azure/go-autorest/' lost 1995f28c64a Simply modify the Kubectl logs information 385b7d7ff07 fix --event-qps and --event-burst 620c23473fb fix Spelling error for klog 00da68dbc25 Adding restart kubelet flag on e2e test 07002e41bbe Update Calico to use a non-conflicting route table range ad156aff59e ignore "vmdk not found" vsphere errors during unmount (assume success) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> /
2021-06-04k8s: bump to v1.22-alphaBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-16k8s: move to 1.21 releaseBruce Ashfield
Updating kubernetes to the 1.21 release. Minor build changes and patch refreshes were required. The changelog is massive, so we won't list it here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-17k8s: update to v1.20.4Bruce Ashfield
Moving off the 1.20.x-rc and onto a dot release tag. This pulls in the following commits: e87da0bd6e0 Release commit for Kubernetes v1.20.4 5682545c2da Update CHANGELOG/CHANGELOG-1.20.md for v1.20.3 f8f2fa827d3 Release commit for Kubernetes v1.20.4-rc.0 01849e73f3c Release commit for Kubernetes v1.20.3 58c5493f22a kube-cross: update image to use v1.15.8-legacy-1 e000e9722bb [go1.15] build: Update to k/repo-infra@v0.1.4 (supports go1.15.8) 3365196e9d8 Use go-runner:buster-v2.3.1 image (built on go1.15.8) 91f2745f08c staging/publishing: Set default go version to go1.15.8 3c777448311 Update to go1.15.8 b570189cf1f Revert "make hostPort match test linuxonly" 6698a4e7afc Revert "conformance changes" 6a31f8d17ef dockershim hostport respect IPFamily a456eb4eaf6 dockershim hostport manager use HostIP 5d9910a0172 Cherry pick of #98254:Fix the kube-scheduler binary's description of the --config parameter is inaccurate ac866d63911 make podTopologyHints protected by lock b84ee98db74 kubelet: Fix mirrorPodTerminationMap leak d381d6c52cc kubelet: Delete static pods gracefully b2576fb35f7 kubelet logs print 'kubelet nodes sync' frequently 7826a1c6b87 WIP: node sync at least once Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-10kubernetes: bump to v1.20.3Bruce Ashfield
0e3bf6dad9f kubeadm: drop explicit constant override in version test 1619e810d1c kubeadm: get k8s CI version markers from k8s infra bucket 42a3b9e85ef fix kube-scheduler cannot send event because the Note field is too large afb0de9647c Fix nil pointer dereference in disruption controller Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-05kubernetes: update to latest 1.20-releaseBruce Ashfield
Integrating the following k8s commits: 62b808f34d7 Update region_pd e2e test to support PV have GA topology 85fd25ef54c Recover CSI volumes from dangling attachments b81c612b12b IsVolumeAttachedToNode() renamed to GetAttachState(), and returns 3 states instead of combining "uncertain" and "detached" into "false" 5a957b08153 Fixes Attach Detach Controller reconciler race reading ActualStateOfWorld and operation pending states; fixes reconciler_test mock detach to account for multiple attaches on a node 3a83880d442 Fix translation of Cinder storage classess to CSI e1ee8ed5f41 Resolve IP addresses of host-only in filtered dialer a73b4122b3c Deflake ingress updates 570e423af0e ignore cgroup driver check in windows node upgrade c0fc4d4dc38 aggregate errors when putting vmss c8cc26f1523 fix azure file migration issue 8ba5a06139d kubeadm: change the default image repository for CI images from gcr.io/kubernetes-ci-images to gcr.io/k8s-staging-ci-images baa6b2bd066 reduce buckets for etcd_request_duration_seconds 745bdd0016e cleanup subnet in frontend ip configs 3a5c02dbf51 conformance changes b241e6882c0 make hostPort match test linuxonly 20b66e4ec1e Clean up namespaced children of missing virtual parents with incorrectly cluster-scoped nodes 4c1bc2d6b06 Add unit test for child scope mismatch with missing parent 87344c8d52c vendor: update cAdvisor to v0.38.7 8ae140db2b9 Use volumeHandle as PV name when translating EBS inline volume a525ddc8521 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.2 112e823d906 Release commit for Kubernetes v1.20.3-rc.0 faecb196815 Release commit for Kubernetes v1.20.2 7394cae9159 kubectl-convert import known versions 8e44c89eefe Revert "Merge pull request #92817 from kmala/kubelet" 1fc106ac183 fixes nil panic for nil delegated auth options d65732141da Lower the frequency of volume plugin deprecation warning d8a1dfb21f1 move all variables in sampleAndWaterMarkHistograms::innerSet ffed9c3a48c handle webhook authenticator and authorizer error c3e150fada2 use default unkown sock for kubeadm cmd if cri detect is not needed 2d0ffc16769 cherry-pick part of #97451: fix nodeport quota check failure during creating clusterip d0dfecaf038 fix the panic when kubelet registers if a node object already exists with no Status.Capacity or Status.Allocatable 287ca883635 Release reserved GCE IP address after ensure completes. 37e3feac7cb Ensure reproducible builds when build through docker 4d8ac66fce1 Fix cadvisor machine metrics 3c67a0a760b Create OWNERS for most of the API Priority and Fairness impl a1ac5f4894b fix the deadlock in priority and fairness config controller 16559f765ea Cherry pick 443 and 448 from cloud provider azure d8ba4e4af42 Fix bug in CPUManager with race on map acccess 0f764ea81e6 clean up executing request on panic a79db17be1a fix azure file secret not found issue 98dffa75232 fix: azure file latency issue for metadata-heavy workload 0c0d4fea8dd Update CHANGELOG/CHANGELOG-1.20.md for v1.20.1 764cafccc4e Release commit for Kubernetes v1.20.2-rc.0 c4d752765b3 Release commit for Kubernetes v1.20.1 afaa0c6e621 Avoid checking the entire backend service URL for FR equality. 6666afa3317 Revert "Use host IP instead of localhost for control plane component kubeconfig files." 787e3a62cab Add more logging for Mount error 8a224b526c3 etcd version for 1.19 is 3.4.13 for cve fixes 5483a7230d7 Use non privileged ports 0c1a53829dd Flush FibreChannel devices before deleting 34077eedb6c Fix FibreChannel volume plugin corrupting filesystem on detach 416165a0cc6 vendor: update cAdvisor to v0.38.6 2e6a0a0a126 Update CHANGELOG/CHANGELOG-1.20.md for v1.20.0 49eb3a86d5b Revert "iAdd host IP to etcd listen client URLs." f674d4e84d5 fix migration logic d1e54b9922b APF e2e: disable drown-out tests temporarily 7d6ffe0b1a4 Add AcceleratorStats to cri_stats_provider 3321f00ed14 Release commit for Kubernetes v1.20.0-rc.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-12-03k8s: update to 1.20 release candidateBruce Ashfield
As part of this update: - we refresh our CC patch to apply cleanly - adjust the host side GO_LDFLAGS to drop linker flags that cgo doesn't like when building generated_files. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-10-15kubernetes: Fix race issue for installing go2makeRobert Yang
The src/import/build/root/Makefile.generated_files are called several times during the build, so the following target which installs go2make will also run several times: $(META_DIR)/$(GO_PKGDEPS_FILE): FORCE It runs automatically when the Makefile is called because of: sinclude $(META_DIR)/$(GO_PKGDEPS_FILE) So there is a race issue of go2make when parallel build: hack/run-in-gopath.sh: line 34: build/tmp-glibc/work/corei7-64-wrs-linux/kubernetes/1.18.8-r0/git/src/import/_output/local/go/bin/go2make: No suc h file or directory Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-08-12k8s: fix 32bit ARM buildBruce Ashfield
Remove the remaining 'go' calls, and replace them with $GO. We also must explicitly pass "GO='go'" on the host side build call. This avoids the gnu-stubs header file issues, since the 'go' binary cannot use the sysroot. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-31kubernetes: update to release 1.19-rc3Bruce Ashfield
In preparation for the fall release, update to the 1.19 release branch of kubernetes, so that the change can soak and we can work through the rc's No unexpected build or patch issues with this bump and basic sanity testing passed. Once ore components are updated, extended testig will occur. Sanity built and tested on x86-64 and arm64 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-07-10kubernetes: fix ARM64 buildBruce Ashfield
The first part of the kubernetes build generates some host/build files. These use the build/host compiler and not the cross infrastructure. It was working by luck on x86 build / target matches, but blows up on an ARM64 build. We fix the CC/CFLAGS settings for the host part of the build to use the host/build flags and then restore the cross settings for the rest of the build. Tested on arm64 and x86-64. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-05-11kubernetes: update to 1.18 release branchBruce Ashfield
Bumping k8s from 1.17 to 1.18 release tracking. Outside of the kubernetes core changes the kublete and kubeadm conf files have been removed from the main repo. We add the releases repository to our SRC_URI and copy them in the same way as we did with the existing reference files. A full changelog follows: fe3ac3e3883 fix backoff manager timer initialization race 25e2829552b Restore cache-control header filter 4f633afbdec kube-scheduler: compatibility with ServerSideApply ff43875cb67 bugfix: initcontainer wasn't considered when calculate resource request b03bb751c21 Revert "stop defaulting kubeconfig to http://localhost:8080" 7b6b53c8cbf Update CHANGELOG/CHANGELOG-1.18.md for v1.18.2 2913f32b21c Release commit for Kubernetes v1.18.3-beta.0 52c56ce7a82 Release commit for Kubernetes v1.18.2 5ca8d60f319 Fix Node initialization for GCP cloud provider b4c61594923 Simplify unregistration of csiplugin f2e37956203 Unregister csiplugin even if socket path is gone 1c73483c5de Move PSP tests behind a feature tag 34726e1b50d kube-openapi bump to release-1.18 f2de2d35086 Preserve int/float distinction when decoding raw values 6fb6533170d Fix GCE ILB for large clusters 4e644d0b484 Restore the ability to `kubectl apply --prune` without -n flag ea49e94be8a Fix client watch reestablishment handling of client-side timeouts 35235970cdf Fix priorityClass typo, add numeric priority to static pods 906513a06f6 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.1 5dd22057dc7 Release commit for Kubernetes v1.18.2-beta.0 7879fc12a63 Release commit for Kubernetes v1.18.1 0d2cdc3b6d5 Test dropped round-trip annotations in HPA conversion 7909fe2d9f1 Drop round-trip annotations in HPA conversion 23c6b68f842 Skip updating cache on pod update if the node was deleted e9e1ea490f8 Check Annotations map against nil for ConfigMapLock#Update() f46ea4ddec9 Ensure Azure availability zone is always in lower cases 0dee03d1bd2 Even with build error, kubectl apply should apply all valid resources b427784213a fix: update max azure disk max count 7444c1e865b Ensure diff doesn't persist patches 4860841aa06 Fix CSINodeInfo startup 22f39eaae5f Wait for APIServer 'ok' forever during CSINode initialization during Kubelet init 1cf2fd183b7 Fix permissions for endpointslice controller b5470e1d649 Clean up event messages for errors. 26a2c61bf2b Allow list-resources.sh to continue if a resource fails to list 0c78c1e66e3 fix a bug where spn: prefix is unexpectedly added to kubeconfig apiserver-id setting 262bdad7b9d Adds integration test for apply failures when applying multiple resources 7e4d0319e3a Fixes problem where kubectl apply stops after first error 203b1ddfdf7 fix cpu resource metric type by changing to counter dd7fb533d03 fix concurreny issue in lb creation 1b15cefcc91 Kubeadm: fix Ready condition check bd9b7920920 kubeadm: add missing RBAC for getting nodes on "upgrade apply" ac62906c24d Check that ImageInspect pointer is not nil d2e35c7a6a7 Fix bug about unintentional scale out during updating deployment. 38eea6b3926 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0 5e251a7e39b Release commit for Kubernetes v1.18.1-beta.0 9e991415386 Release commit for Kubernetes v1.18.0 0630031f85b bump k8s.io/utils package dd342d7579d Simplify dual or single port logic 2ca708d2c2b fix kubectl port-forward for services with explicit local port 3c1d9790882 build/dependencies: Remove bazel WORKSPACE go_version check 374e61893b9 deps: Update to Golang 1.13.9 28a7bb5c7a7 build: Remove kube-cross image building e67d0822c96 Label Windows test as Serial. a98c208613e Fix the VMSS name and resource group name when updating VMSS for LoadBalancer backendPools. 0c34f5e431c bump k8s.io utils 3f81059b691 Do not reset managedFields in status update strategy bb673d80280 Use discovery to test apply all status cf790a8d209 Updating vendored files d28d6765656 Update vendored MountSensitive code for Windows d333dee452a add unit test for addTopology() fbbfad9f465 make filteredZones order predictable a3ec1a91bf8 Restore orphaning check in gc test d5444327df0 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-rc.1 dbbed780668 Release commit for Kubernetes v1.18.0-rc.1 2d981b36c98 Fix isCurrentInstance for Windows by removing the dependency of hostname 8f07cdcc91e Revert "Cleanup CHANGELOG/README.md for release-1.18 branch" 7e5745380c9 Revert "Delete extraneous CHANGELOG-*.md files on branch." 2a095f434ba e2e wait until controller manager pod ready 1d84a6cb533 Add missing article in prominent release note 068963fc062 add testing d527a091927 add ExternalTrafficPolicy support for External IPs in ipvs kubeproxy efc4b121862 add ExternalTrafficPolicy support for External IPs in iptables kubeproxy df9a567f3f7 add feature gate ExternalPolicyForExternalIP for the bug fix 4d6af4d8d8f Set unschedulable Condition after setting nominated Node 334d46eed5d fix logging on e2e metrics grabber test 23c358d883b Fix unbound variable error in gce/configure.sh 4734543888c CHANGELOG: Update directory for v1.15.11 release 89532ac2f0f CHANGELOG: Update directory for v1.16.8 release ce88e65ddaf CHANGELOG: Update directory for v1.17.4 release c957b2509fd Bump Cluster-Autoscaler to 1.18.0 a68d712f129 Removing ConfigMap as suggestion for IngressClass parameters a35ca04dd66 Remove kubectl column output test e03385d6ac2 build/release-images.sh: remove possible duplicate targets 66491d2d892 Add tolerations with effect "NoExecute" and "NoSchedule" to allow schedule of nodelocaldns pods on node pools with taints 366dd4af44e EndpointSlice and Endpoints should treat terminating pods the same ced2948fdeb Remove wait.Until for running Kubelet Bootstrap 6be4d0a705b Bump Cluster-Autoscaler to cluster-autoscaler:v1.18.0-beta.1 4361f8f0521 wait until /metrics are ready on e2e test 462b75388f2 let image cache do sort on write instead of on read to avoid data 2c26e109b43 CHANGELOG: Update directory for v1.18.0-beta.2 release a9f834d17dc Implement noopWindowsResourceAllocator 21b51a1bb6c Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.2 49dfa869048 Release commit for Kubernetes v1.18.0-beta.2 fa12441ab99 Preserve target apiVersion when decoding into unstructured lists ce3644ca593 Fix VMSS cache content c26653ced91 kubelet: Also set PodIPs when assign a host network PodIP b1c1187cca7 e2e: wait for controller manager pod to be ready e053fdd08ae Add NodeCIDR for detect-local-mode 6b8fc8dc5ea Move TaintBasedEvictions feature gates to GA d80981b6574 test: Detect flakes caused by container teardown races on CRI df58c042a8a metaproxier logging for endpoints ipfamily 23d9ffd4c8f Add metaproxier unit tests d8abacba40a client-go: update expansions callers 4c034278f4e client-go: add context/options to expansions methods e93c6a67d5a Use go-bindata built from vendor/ 04a72d5ef91 client-go metadata: update callers b7c2faf26c2 client-go dynamic client: add context to callers 4134494fa51 /readyz should start returning failure on shutdown initiation cb4ee9334b7 client-go metadata: plumb context 6fa54d715fb client-go dynamic context b19dc3a474e client-go dynamic client: update DeleteOptions callers 161b7513f73 client-go dynamic client: pass DeleteOptions by value d0890533a99 Updated files after rebase 73611a473ff Fix expected version for csidriver c6fd25d1003 Updated CSIDriver references 726af6bd7f2 Moved CSIDriver to GA 1e78fc0bf03 generaetd bac9351c646 refactor egress dialer construction code and add unit test fbb1fb8902c add metrics and traces for egress dials ef3d66b98bb Parallelize attach operations across different nodes for volumes that allow multi-attach 6fd748e2c56 exit if KONNECTIVITY_SERVICE_PROXY_PROTOCOL_MODE is set incorrectly 723761aa887 Don't try to create VolumeSpec immediately after underlying PVC is being deleted eb9cf777dce Disable HTTP2 while proxying a "Connection: upgrade" request 06abedb0631 Allow both GRPC and http-connect mode to be toggled 1bb6ed9bdc0 Checks error for loading audit webhook config to prevent panic 5231c6815c7 managedfields: Update Apply time if neither object nor managedfields have changed df41fd932be Bump sigs.k8s.io/structured-merge-diff to v3 7120abe6989 fieldmanager: Add failing test for no-op apply actually writing to etcd 39681aa5800 fieldmanager: Move ManagedFields update logic into its own class 76f85943787 more artisanal fixes aaf855c1e69 deref all calls to metav1.NewDeleteOptions that are passed to clients. c58e69ec791 automated refactor 86bd06c8820 update clients d9671045ff5 update client gen aee9fde751c Add e2e test for validating JWTs as OIDC tokens 1d7006c38d0 Add Extenders to scheduler v1alpha2 component config 912f05bafbb ingress: add alternate resource backend da988294ec5 Work-around for missing metrics on CRI-O exited containers c7b098ac6c2 Renaming: "Change" -> "Add" for consistency with underlying method 8a1b6032098 Fix queued request accounting, extended queueset test 1fab27502b2 Disallow use of Plugin or PluginConfig when using Policy 13fa48e5924 Disallow duplicate PluginConfig in framework creation af0e1319c35 Allow container visitor to operate on selected container types 8c35e32a402 test: Properly detect container runtime flake in e2e test bb318ea84aa Update to latest node-cache image e931e30647e ingress: allow wildcard hosts in IngressRule 7d86217043c Use the v0.0.8 network proxy images 834331088fa Use versioned autoscaling API group in code-generator examples 2cd6abece45 dynamic certs: pass valid object to event recorder 3bc918e4842 dynamic certs: use correct name with event recorder 86a5993007e dynamic certs: do not copy mutex via shallow copy of tls.Config 0551d408ace Bug fix for TM none policy b1329596875 Start adding tests for verifying correct modes 4baa1d967d6 Check for nil cpuManager 1f9b1af1adb Fix Bazel build 773b890b059 Show kubectl describe ingress error 4a4852ca9a1 Hopefully plainer test strings c52d4bf32f5 Implement changes into volume plugins for skipping chown 053baaf1437 Update generated files f7509d277ef Define new type for storing volume fsgroupchangepolicy 3ee30343cc1 Fix log formatting for skipper. "INFO" is already logged by Logf, and it wasn't in the format syntax. 8943e443e81 kubeadm: deprecate the flag --use-api for cert renewal bacc2c49605 Set field manager for kubectl diff --server-side. e8b09d36440 Add AnyVolumeDataSource feature gate 389dd0a499e Don't log "SHOULD NOT HAPPEN" errors more than once per second 167d6a2c8b0 Use the same default namespace across event recorders 8bc5cb01a9c kubelet: Clear the podStatusChannel before invoking syncBatch 8722c834e5e kubelet: Never restart containers in deleting pods 2364c10e2e4 kubelet: Don't delete pod until all container status is available ad3d8949f08 kubelet: Preserve existing container status when pod terminated 6d98b0a0f4f Test that an always-fail container can't report the pod Succeeded e5b655938e5 Add kubectl debug alpha command 9044fbfc5d7 Update VolumePVCDatasource to GA for 1.18 b93e3d18e9f fix scheduler.TestCoSchedulinngWithPermitPlugin and test scheduler.PermitPlugin 9fabafdbb11 Windows specific kubelet flags in kubeadm-flags.env - Uses correct pause image for Windows - Omits systemd specific flags - Common build flags function to be used by Linux and Windows - Uses user configured image repository for Windows pause image 61565b3f6c7 e2e-topology-manager: Wait for SR-IOV device plugin 212190e25e1 Utilerrors.Aggregate: Allow using with errors.Is() 98b9c7b5e8f Fix GCE PD snapshot flakiness 2e97d3c8732 Generalized NonResourcePolicyRule.NonResourceURLs impl 16d221e4078 Promote GMSA to GA 076132e38a5 cleanup: move the test of TaintBasedEvictions features to sig-node b2677b1e572 client-go: use klog.V(3) for the cert-rotation controller start/stop 5ceecd3ba3f Update agnhost to test OIDC validation of JWT tokens 401b85e547f Add FromFile and FromExistingClassName support for SnapshotClass in external storage e2e test db3392ed124 Always include remoteAddr in source IP list for audit (#87167) 3784438b566 Prevent CephFS from logging senstive options 548b297a003 Prevent AzureFile from logging senstive options 727582311f6 Fix MountError Test 22e8189f40f Update dep k8s.io/utils to 0a110f9eb7ab f38904d6f48 Adding PathType to Ingress 9dcbc0bf909 update override behavior for kubectl --tls-server-name 02cd65d7bb5 Squash pkg/describe/versioned/ into pkg/describe/ 37c81ed79ac Support TLS Server Name overrides in kubeconfig file 07dc17ffd9a Provide more verbose empty config error based on the context 6de140567b3 Changed kubectl cluster-info dump to not display "Cluster info dumped to standard output" message when output is stdout 472a9352943 Update Cluster Autoscaler version to 1.18.0-gke.0 413960e49be cleans up dynamiccertificates package 4144a2a1cf5 Add unit tests for IsKubeletClientCSR and IsKubeletServingCSR c2367bd5da6 Extend client-go csr package to invalidate CSRs based on signerName ef5c9203259 bandwidth: use regexp to handle tc output fix newly-added 'chain N' output from 'tc filter show dev XXX' c77b297babc Hide kubectl.kubernetes.io/last-applied-configuration in describe 9dac1699bfd Wire --filename flag to exec 49b11b5431d Implement simple endpoint slice batching f535a9c9ed4 Make some metrics finer-grained, add dispatch counts, note immediate reject 81f46b64a35 add a new generic filter goaway 9902021ccd0 Fix a PodTopologySpread e2e flake 2a98cb7f8b2 Use GRPC mode for network proxy 3af671011ad Generated API 674e539fcad test/e2e/framework: remove dependencies to internal APIs efe35b9a9aa move eparis and zmerlynn to cluster/ emeritus_approvers 904c2d8bc0a add bentheelder to cluster/ approvers 83a223f5ee3 Support intermediate certificate in certificate store 60da52a24ab Honor status.podIP over status.podIPs, node.spec.podCIDR over node.spec.podCIDRs 73ad38593a0 Add default constraints to PodTopologySpread 0989770135c Update network proxy to v0.0.7 b19ad9e7a78 stop defaulting kubeconfig to http://localhost:8080 929b1559a0b Add ReloadCertFromDisk flag to rest.Config and to kubeconfig which allows the provided client certificate files to be reloaded from disk (currently on every use) 1ede096465d Enable topology-manager-e2e tests to run on MultiNUMA nodes. 4abbce4549e Refactor CPUMananger-e2e-tests so that it be reused by topology-manager-e2e-testsuite. 09598d48f65 Improve plugin args JSON tags f96c75bca29 Bump csi-driver-host-path version to get fixed block snapshots a4b59a5d7c1 Currently SRIOV detection logic is reporting error if it fails to detect SRIOV device on the system. This patch aims to fix the same. 1cb42445d76 hack/update-vendor.sh dbe84361440 Replaced uber atomic with sync atomic, removed unneded "blank import" 104db4f01b2 Fix block snapshot tests afcbb683865 Fix unit test to fail with proper final gRPC code 85367871333 Add unit tests c11427fef5b Call NodeUnstage after NodeStage timeout f6fc73573c7 Call NodeUnpublish after NodePublish timeout 86a5bd98b64 Add uncertain map state to block volumes da3c3432d83 Add context and options to scale client e8538d9b76a Add mutex to Topology Manager Add/RemoveContainer This was exposed as a potential bug during e2e test debugging of this PR. 1e613e5a4c0 Update TopologyManager Feature Gate: - Alpha to Beta. - True by default. - Remove redundant validation checks. b60c0b5c24a small cleanup for ipvs readme e79f49ebba9 validate configuration of kube-proxy IPVS tcp,tcpfin,udp timeout 132d2afca07 Adding IngressClass to networking/v1beta1 4c54241c3df Support token authentication for network proxy b5cdb6e6cb5 test/e2e/:remove // TODO: write a wrapper for ExpectNoErrorWithOffset() b63be6a46da test/e2e/framework/service/:simplify function CreateTCPService f92c55a4769 Make sure we fail the job and log more details when it does bdea23380ba Move conformance image to debian:stretch-slim 7f270038d3c Remove unused function aggregateGoroutinesWithDelay 0f4cfe58d8e Switch to UpdateVMs() for updating VMSS backend address pool c0bad80e5b4 Factor-out metrics related logic from authentication logic. f205e3dd596 Use only v1 CRD resources in e2e tests 9bfe818229e Fixed golint issues in RBD code 4ea52da628f Remove prometheus references from pkg/controller/endpointslice 2af26dca978 Add UpdateVMs() for VMSS client to allow update multiple VMSSVMs by sequential sync requests and concurent async requests. 3eec87cd915 update WithPlugin comment, in case remove function b67a033de22 Refactor: move generic functions of integration test to util directory c6b94e4606f refactor volume binder aa12e1f8c42 e2e_node add test for PodOverhead feature 002c75442d7 storage: confirm that paging and predicate filtering work together 61fa4e6c098 Address comment and remove if condition 7b214c96b01 Hide deprecated --server-dry-run for kubectl apply 7638aae77ee Update README.md 10049500c18 Update README.md 2c1b7437669 Promote block volume features to GA 3fbb549fb7f Promote the egressselector API to beta aa07992a441 update kube-controller-manager and kube-scheduler to match kube-apiserver defaults 2f5468f1ae5 update map keys api doc with validation requirements 5b3b4de972c scheduler_perf: do not override throughput labels 2e187415fd5 extend CRD map and set validation be6ac856f13 Deprecate --generator flag from kubectl create commands cb477d3cc17 fix: remove conflict comment of taint "Value" 347d8419488 Bump CSI hostpath driver 06062b15e96 test images: ARG instructions should be first 2e7ce8cea01 bazel update 6329b17d2f6 volume scheduler: introduce special string type 6eb0b034ac9 volume scheduler: move reason strings into volume code 21f78f33487 Added non-randomized tests of matching FlowSchema rules ce30d2d5c85 test images: Skip building manifest list if no image was pushed cd57b830c14 audit webhook use network proxy 1b38199ea8b pass Dialer instead of egressselector to webhooks d318e52ffe0 authentication webhook via network proxy 97e8bf5f84a Fix default regular expressions in conformance tests runner e398302dc77 Add OWNERS and testing to external extender/v1 api 711c1e17209 Rename --enable-inflight-quota-handler to --enable-priority-and-fairness. ccd9e4e2de3 Don't save managedFields if object is too large 57ea7a11a64 Remove global variable dependency from runtimeclass admission 991909fdfbb PodOverhead: remove feature gate override in tests 4637991632d Update PodOverhead feature gate for beta 18ffaf56084 Move scheduler extender API V1 to staging k8s.io/kube-scheduler d5dae048983 certificates: update controllers to understand signerName field d7e10f98697 Add Certificate signerName admission plugins da8453af6eb fix unsupported bug 567cb6c6050 fix: azure disk remediation issue acf84351e42 test images: Rebases nautilus and kitten images 117cbda4870 Image Promoter: Allows images to be pushed immediately after being built a983356caa9 Add signerName field to CSR resource spec fb7209486e2 fix: azure file mount timeout issue 11656478be9 register metrics from comp-base 1f9f2390cb5 Add block cloning tests 2327934a860 Rename GetTopologyPodAmitHandler() as GetAllocateResourcesPodAdmitHandler(). It is named as such to reflect its new function. Also remove the Topology Manager feature gate check at higher level kubelet.go, as it is now done in GetAllocateResourcesPodAdmitHandler(). e26fff5cbc2 Update to golang@1.13.8 a9c61295779 Device Manager - Update unit tests - Pass container to Allocate(). - Loop through containers to call Allocate() on container by container basis. cb9fdc49db8 Device Manager - Refactor allocatePodResources - allocatePodResources logic altered to allow for container by container device allocation. - New type PodReusableDevices - New field in devicemanager devicesToReuse 0a9bd0334dd CPU Manager - Updates to unit tests: - Where previously we called manager.AddContainer(), we now call both manager.Allocate() and manager.AddContainer(). - Some test cases now have two expected errors. One each from Allocate() and AddContainer(). Existing outcomes are unchanged. 467f66580b9 CPU Manager - Add check to policy.Allocate() for init conatiners If container allocated CPUs is an init container, release those CPUs back into the shared pool for re-allocation to next container. 709989efa2a CPU Manager - Rename policy.AddContainer() to policy.Allocate() 0d68bffd03f Change GetTopologyPodAdmitHandler() to be more general b6b60f7fa50 test images: Temporarely exclude Windows test images c57f20b7129 tests: Replaces dnsutils image used with agnhost (part 4) 2543598628d Fix etcd issues on ARM b2528654797 kubelet: Avoid sending no-op patches ef786c9fa2d Setting a Pod's nodeAffinity instead of setting .spec.nodeName directly 505dff6d20a Fixed in the GCE/PD in-tree volume logic to expose the max number of persistent-disks for each instance type correctly. 517a41fe849 Fix an "index out of bound" issue in scheduler preemption e2e 7346579a032 Update etcd debian base image to v2.0.0 e64169d6b51 build: Enable kube-cross push/pull from K8s Infra GCR bb0d9c9f239 build: Add justaugustus as reviewer 23b69a97c6d build: Add OWNERS on build-image/ ee00896712c add support for single stack IPv6 fd5b298c508 Test PodTopologySpread.PreScore instead of internal pre-processing. 0e46803e778 Test PodTopologySpread.PreFilter instead of internal pre-processing. ca5d394f6a2 fix the coredns preflight check for unsupported plugins 10805e04522 [refactor] fold PreemptionExecutionPath into the existing top-level SIGDescribe e8245d6fd91 Add unit test for framework plugin configuration 79680b5d9bf Fix pkg/controller typos in some error messages, comments etc 07c4982245f Add unit and integration tests for multiple profiles support bf605043653 fix import formatting in gce_utils.go 2a056134809 gce: remove duplicate patch service method ed0e0350854 Add documentation around plugins b342818361f Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.1 c431b5444a6 Update CHANGELOG/CHANGELOG-1.18.md for v1.18.0-beta.1 f2d7577e318 Release commit for Kubernetes v1.18.0-beta.1 5a6435ad768 fix: corrupted mount point in csi driver d71829a1fc3 e2e: avoid setting NodeName for CSI driver deployments 7d59ea8394e Reorder conditions in FindMatchingVolume to avoid checking NodeAffinity in trivial cases. c80dcf56ee2 Ensure webhook/quota/deny admission comes last 6a337276323 Adding AppProtocol to Service and Endpoints Ports 2bcf99f05fd Improve rate limiter latency logging and metrics 7b2a0a42601 update bazel 5da37d5b5ef Fix a scheduler e2e bug on PodTopologySpread scoring c6c0bb254af Update version of GCE PD CSI Driver deployed in tests 33ef66b9275 Updating OWNERS for Windows+Azure tests d44d5b35f3d Add show-hidden-metrics-for-version to kubelet 8cb84feef3d test images: Updates agnhost guestbook ea45da7e52a apiextions: add list-type: map|set CR validation 23340d7522c [UseNetworkResourceInDifferentTenant] Fix bug of setting incorrect subscription id on azure network resource clients. 7e1ec59fe2e Remove AlgorithmSource from v1alpha2 c0488584712 Support multiple scheduling profiles in a single scheduler 08473a49497 remote patch.go and patch_test.go files bd8ed0a2a7d Add BenchmarkSchedulingWaitForFirstConsumerPVs benchmark 98df9d9db60 Make sig-scalability reviewers / approvers of cluster/gce 6739bde9ca1 Create OWNERS file for cluster/log-dump 34206a610a1 Don't rely on contents of optional Condition fields in CSI mock test 1c0a78a4fdb Use servicePatch methods from cloud-provider repo in service-controller 60f3ebe6b54 Remove alpha feature test for EvenPodsSpread c261d12bbf7 kube-proxy: fix confusing default value for healthz and metrics bind address, deprecate healthz-port and metrics-port flag bdc54eb18a5 Use compute v1 api to specify network tier d578c02975b Fix pkg/registry typos in some error message, variable names etc a3f6627ce80 scheduler: deprecate deprecated metrics in 1.19 388ebfe7d0e append_or_replace_prefixed_line in /cluster/gce/gci/configure-helper.sh fails for prefixes that contain quotes and = sign. 45d69b3a5a1 test: don't use hardcoded pod count for memory limit test 2683b1065c0 Update the conformance list and doc generation logic cb12e8a059b update corefile-migration library to 1.0.6 a980cb7ead3 update coredns to 1.6.7 886214f48c6 Fix recent context change after rebase 4eb06577dc5 Fix golint issues for `core/v1/validation` 63ff616aa8d Adding Windows CPU limit tests 19acf7d0515 Fix cpu resource limit on Windows b50f60c98fd scheduler_perf: allow to override the default benchtime 0f3e0b40f68 scheduler_perf: describe how to run BenchmarkPerfScheduling manually 9e71741d066 Add Profiles to kubescheduler.config.k8s.io/v1alpha2 1b710a4c56c kubeadm: modify how component volumes are printed 0f31bef94c4 Default grace period to 0 when --force is used to delete an object 87d0e826c15 Remove the unsupported CloudProviderBackoffMode from Azure cloud provider config. a8c41ae5fb9 Deprecate service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset 109f5db5a33 kubeadm: allow creating a cluster with ECDSA keys b38ed0467f9 Support cluster using network resources (VNet, LB, IP, etc.) across AAD Tenants. 64c4876ccd0 Add e2e session affinity timeout test e268f033b67 Revert "Mark session affinity tests as [Flaky]" 457c05feb87 deflake e2e session affinity tests 2e23f847458 kubeadm: fallback to a known etcd version if an unknown k8s version is passed 0e3b7a7aea3 fix test failure e5bb6af4756 fix: add remediation in azure disk attach/detach 8c633356df9 move well known cloud provider taints to k8s.io/cloud-provider/api b873cbbed58 Fix: pkg/apis Typos in comments, function name, error message 5362e8b6cb1 Fix initialization bug in `FakeImageService` ed9492ad69f use ControllerClientBuilder from k8s.io/cloud-provider in cloud-controller-manager 8067dd84700 kubeadm: fix the bug that 'kubeadm upgrade' hangs in single node cluster fdec0ee1214 tests: Create pod for Windows test a6dc7ba1387 Add release-1.18 publishing rules d10e3da92d3 Fix typos in some error messages, comments 0acaf5c3e93 Fix kubectl describe ingress annotations not sorted 5db45e12d54 fix kubectl create deployment image name ea5bea2b9fc Respect ignore-volume-az option in admission plugin 190a72392ae Refresh discovery server resources for memCacheClient in parallel 78b18ed6f4e Swith to mock clients for route/routetable/networkinterface tests 8c6956e5bb4 Refactor handling of local traffic detection. a54a52c5de3 Enable field management for all new objects c811fc58ef0 check ip family for node port connectivity test 684d6fb0ade Instrument DEK cache fill and request inter-arrival times. 68b7564e7ee fix alias for stack protector kernel config. 1d896db61cc e2e-scheduling: add basic PodOverhead test 2568b552c84 Fix aws provider to return no error when instance is not found for InstanceExistsByProviderID cd5cf567d88 Avoid adding labels to nodes in CSI mock driver c20e6043777 Revert "log-dump.sh: allow to dump extra log files" bb0a5ab016b tests: Fixes Hybrid cluster network test 4cb28f64ea2 Fixes for the `No ref for container` in probes after kubelet restart 7c3f6fa3234 test/e2e/framework/node/:remove TODO and make some functions private 91dc590cde7 test images: Adds building README b71fbdb3643 Image Promoter: Adds Windows build nodes for Windows test images fe15a46939c test images: Use multiple Windows nodes to build images 3cdb7a89cbb test images: Adds multiple Windows channels support 296464d968b test images: Adds Windows support (part 1) a4ceb143ddb images: Changes the image naming template 25b7a138644 images: Configurable BASEIMAGE hierarchy efcdb929dec images: Adds linux/ prefix to BASEIMAGE entries 22a5fbcfa98 test images: Bumps image versions e5760015d20 e2e-framework-node: add runtimeclass to dedup code 54be6ca6794 Update API doc for feature PodTopologySpread (a.k.a EvenPodsSpread) d44a30f0edd Moving Windows RunAsUserName feature to GA f90726a6a6f fix get-kube authorization headers 86ead631585 update golang.org/x/crypto 78e98da1dbc test/e2e/framework/log: optimize PrunedStack() d798ccbba16 Add tests for egress selector a980a1fa24b Add e2e test to test Except clause in NetworkPolicy 907ab25b6fc vendor network proxy client 55b89a6451d Support empty root CA for konnectivity 725d2b6a8fd Network Proxy: GRPC + HTTP Connect with UDS 64904d0ab8b e2e: topomgr: extend tests to all the policies bdc4e2fd17d Support injecting errors for `FakeImageService` c43b9405860 log-dump.sh: allow to dump extra log files 03ecc20b199 empty_dir: Check if hugetlbfs volume is mounted with a correct pagesize 3e59a0651f1 kubeadm: optimize the upgrade path from ClusterStatus to annotations b140c5d64b5 kubeadm: remove `ClusterStatus` dependency a249b93687a e2e: topomgr: address reviewer comments 44e6a506b9b fix: check disk status before disk azure disk 97fc3e6139f Fix typos in apiclient util e6b9a7a3098 Fix golint errors in pkg/controller/garbagecollector aecce98a542 wait for pruned CR to be invisible from API e2c733a702e test: export a fake Azure cloud Via the exported GetTestCloud(), we can reuse the code for the unit tests in Azure related CSI drivers. a9ec444d743 Add --dry-run to more kubectl commands. ad8bf3c1397 kubeadm: do not pin unit tests to a version 22319019abc kubeadm: update constants for 1.18 98ad7416faa Start deprecation process for StreamingProxyRedirects fdd7424d191 add logging for csr being approved and issued. 74718adf109 fix data races for other usage of Q 92759ea6429 NetworkPolicy e2e test should wait for Pod ready 833519f80b6 e2e: topomgr: properly clean up after completion 7c12251c7a6 e2e: topomgr: add multi-container tests 8e9d76f1b95 e2e: topomgr: validate all containers in pod ddc18eae67c e2e: topomgr: autodetect NUMA position of VF devs 0c2827cb504 e2e: topomgr: remove single-numa node hack bb6beb99e5a e2e: topomgr: early check to detect VFs, not PFs 882d6e93afd Implement tests for multiple sizes huge pages 0eb65bd7da2 Implement support for multiple sizes huge pages 76847b3a6eb Cleanup CHANGELOG/README.md for release-1.18 branch b410f77d314 replaced tokenaccessreview with tokenreview 7e33feec572 fix data races in scheduler unit tests a024ac14ef1 Add init containers to dump info 0ec85320cff podlogs: include node name in prefix f85e079147b optimize kubectl version help info a1523a049ff homogenize metrics naming 6d3a18b0be4 test images: Image Promoter sed fix da6f89217d3 adding response headers f7942290af0 tests: Replaces images used with agnhost (part 4) 7f56c753b31 Make MetricCollector configurable for scheduler benchmark tests 5b7ae34eada Switch EndpointSlice to use discovery v1beta1 api fdefdff2225 add delays between goroutines for vm instance update 1208bc34c4e kubemark: move a channel send out of critical section d9f7a1f3114 Don't call delete for already deleted volumes af9e0be163a kubelet: Record kubelet_evictions when limits are hit ae0e1b0ca29 Update default cos image to include runc-1.0.0-rc10 b757ca16e2b Add more E2E tests for the ../poddisruptionbudgets endpoint 89bb7d84541 Honor the RevisionHistoryLimit in StatefulSetSpec d221d82eaf3 run permit plugins in the scheduling cycle ca399e63157 Add a README describing behaviors b7dcc4ac298 Release commit for Kubernetes v1.18.0-beta.0 fac4a09f9ee Delete extraneous CHANGELOG-*.md files on branch. c8377ef7dbc Add BuildArgs to interpodaffinity plugin 0dfe0c793b5 rest: remove connection refused from the list of retriable errors 6846a0a6b62 Implement ItemBucketRateLimiter 9eb45d22a43 Fix wrong alpha version for ValidateProxyRedirects fd81f04036d Update Go modules 1ade9476980 chore: move caches to a separate package b6511788491 fix incorrect configuration of kubepods.slice unit by kubelet (issue #88197) 70a28579988 test/e2e/node: fix selinux test failure e77df88200f Present more concrete information about pod readiness 119f4df9c5c test/e2e/framework:remove unused code and move const a31ccc7b99b kubeadm config images list: test structured output 23e4d05083b kubeadm config images list: implement structured output be7e5b47fe2 kubeadm config images list: update output API 9c8d4bedccc test/e2e/framework:remove TODO and make func private 073d0b23407 Add getPublishDir and getVolumePluginDir 51d44af1866 Fix route conflicted operations when updating multiple routes together 53cda47913f update bazel configuration 6a773fb9c2d fix: update max azure disk max count 8fd0d8028fe Remove `FilteredNodesStatuses` argument from `PreScore` interface d97169f59ad Clean up --dry-run values. c93dffdfc44 E2E tests for PodTopologySpread 5fcd9c7c7ec Error if --local and --dry-run=server are passed 4454ce6f373 fix shellcheck failures in health-monitor.sh d827f2634ac update stale pause image comment 8ba86728e3d bump pause to 3.2 in kubectl test data 53da837872a bump pause to 3.2 in hack/ 3fb71832153 bump pause to 3.2 in test/ 583f804652f Do not dereference qcAPI which maybe nil 2fd62ad72ad added nodeSelector to constrain it to Linux only 0e178f93414 rename to sharedLimitWriter 1631825e447 bump pause to 3.2 in kubelet a00a1e39ef6 bump pause to 3.2 in kubeadm 12abf03f6b4 Shrink mutation detection critical section b142868eaf4 Version the API Priority and Fairness FieldManager values 51120d133ce Report scheduler_perf integration test kube-scheduler metrics into artifacts dir 6068ce96b1f fix: get azure disk lun timeout issue c1383e99af5 Add deletion interfaces for VM, VMSS and interface clients bb770c0325a e2e: getCurrentKubeletConfig: move in subpkg 8b825d15111 Add show-hidden-metrics-for-version to scheduler a20ae3953b5 Remove optional from core docs for 'Type' (#88029) 932500c0151 Remove deprecated rolling-update command 3342e4a09a9 Extend CPUManager e2e tests to run on MultiNUMA node with/without HT 6e933199c9e Change line terminators from CRLF to LF c83a860e9d8 Fix a bug in e2epod function a4e4a994352 Remove PodBackoffMap ef8627c95e0 Construct http Request using http.NewRequest 0da08ffd6a6 Updated test cos image to include runc-1.0.0-rc10 becc4b7d57f remove unused manifest-tool rules 20b1597302a switch pause to docker manifest instead of manifest-tool fc5b08569f2 Create an OWNERS alias for net-driver-approvers 719b3286635 add a changelog note for pause 3.2 b6bdf5172e3 Update Abdullah as the scheduling feature approver a4230055f36 address review feedback bcd975aa657 Replace Beta OS/arch labels with the GA ones c0580730469 Add a event to PV when mount fails because of fs mismatch efec7e64ce0 remove TODO and use framework.SingleCallTimeout 99bda6fac09 Remove HardPodAffinityWeight from v1alpha2 55b687054d5 Fix updated pod NetworkPolicy e2e test 666bc6aeb42 Scheduler: Exclude plugin config for empty policy arguments 53fce7641fb OWNERS(releng): Remove aleksandra-malinowska from Patch Release Team 5643280438d OWNERS(releng): Add Branch Managers to release-engineering-reviewers d6fcc224f17 kubectl cluster-info dump: use file extension according to output format e42940a67b4 CHANGELOG: Update CHANGELOG-1.18.md 6729bfd648b use network proxy for proxy subresources 7b5534021ce Collect some of scheduling metrics and scheduling throughput 15bc88785a3 test/e2e/framework/util.go:make function LookForString private 08ba240c6bb e2e: e2e_node: refactor getCurrentKubeletConfig 0bd2e629c73 Fix unit tests e2d8e575f04 Add CSI block volume directory cleanup c78c0e949d3 Remove unnecessary calls to GCE API after PD is created. 528adbefe4d Remove client cleanup from TestCleanup 7f9e228bd75 Fix impossible condition in test/e2e/framework/resource_usage_gatherer.go c099585b10c Add CHANGELOG/CHANGELOG-1.18.md for v1.18.0-alpha.5 13b80b48cd0 Use --dry-run=client,server in kubectl. e8f67d122f8 Fix gce-cos-master-reboot test 3072f9080ef update pause to 3.2 since we changed the build 5782d616f2f Move skip method from e2e fw ginkgowrapper to e2e skipper fw aa4113d777d Set up connection onClose prior to adding to connection map d61e90b0eeb Separate containerd install from config, and other cleanups 81668cb8871 Change migrated-to annoation key to follow best practices by removing beta and using 'pv' prefix 8ff6b24c573 Don't show flags in api-versions help f5b7e3cca35 Rename `PostFilter` plugin to `PreScore` cc32702e8fa Add ephemeral containers to streamLocation name suggestions 0368a7d5f7a Fix example of kubectl config set-credentials 0421b40d795 Remove tautological condition in test/e2e/framework/pod/resource.go 6a487723eda Make Azure clients only retries on specified HTTP status codes c048fb19fc4 Initialize http Request Header before RoundTrip to avoid panic d9184b75c99 Convert volume.TestConfig to use NodeSelection 76a4a34dae9 Pass NodeSelection directly into e2e testsuites so that tests can use them more consistently 242e3ebf01d Add buffer for GC resync retry to GC e2e tests fb9f02b5e11 Don't set NodeName directly in Pods so that it still goes through the scheduler 0ba58915194 kubeadm: update embedded CA in kubeconfig files on renewal 5a176ac7724 Provide OIDC discovery endpoints 06fad92509d Add CHANGELOG/CHANGELOG-1.15.md for v1.15.10 1653476e3f6 proxier: use IPSet from k8s.io/utils/net to store local addresses 77feb1126e4 userspace proxy: get local addresses only once per sync loop 126bf5a231c ipvs proxier: use util proxy methods for getting local addresses 313c3b81e3e iptables proxier: get local addresses only once per sync loop 9e5a06c3edd update vendor k8s.io/utils to 5f6fbceb4c31 e3ab253cd81 Add CHANGELOG/CHANGELOG-1.16.md for v1.16.7 888a322d9ca Round times to nearest second before sorting f26dbc473d1 Avoid running docker specific test in containerd 5e94cccf5c3 Add CHANGELOG/CHANGELOG-1.17.md for v1.17.3 a657d51ce35 Lower server-side apply percentage to 10% 89066cceb92 Add RegisterPluginAsExtensionsWithWeight ca81235f241 Fix serializer test c27fb4bad6f dump docker image list 2430c48c104 Delete pod in volume tests 9cb7f54c0b6 fix: add azure disk migration support for CSINode 11263bb57f9 kube-proxy filter Load Balancer Status ingress fb895056c65 Add test 73614ddd4e4 Added API Priority and Fairness filter and config consumer 8f764b113e9 Support for adding test-handler for containerd fe312ed74af add index for pod cacher 01328ae291f add roycaihw to reviewers in apiextensions-apiserver 1ee35e788e2 Use NodeSelector instead of NodeName in hostexec Pod so that the Pod runs through the scheduler 09121d96861 Add missing tag to vSphere storage E2E tests 70cce5e3f13 e2e: topomgr: introduce sriov setup/teardown funcs 2f0a6d2c764 e2e: topomgr: use constants for test limits fee1dba0542 e2r: topomgr: improve the test logs 83c344647f5 e2e: topomgr: better check for AffinityError 512a4e8a3e2 e2e: topomgr: reduce node readiness timeout 3b4122bd038 e2e: topomgr: get and use topology hints from conf d9d652e867d e2e: topomgr: initial negative tests ee92b4aae02 e2e: topomgr: add more positive tests 1b5801a0869 e2e: topomgr: add option to specify the SRIOV conf 6687fcc78c1 e2e: topomgr: autodetect SRIOV resource to use fa26fb68179 e2e: topomgr: check pod resource alignment cd7e3d626c5 e2e: topomgr: add test infra 1fdf2621378 e2e: topomgr: explicit save the kubelet config 5954f34ade6 migrate authenticator and authorizer to Create 119f2208324 remove authn/z.CreateContext expansions c049f30ef2a Pass context to tryAcquireOrRenew 8a3f587b049 Add fast path to node authorizer for node/edge removal 3e0c0792d71 Switch node authorizer index to refcounts 6d335372b2d Add configmap->node destination edges to the node authorizer index a4d7a67bbd4 Run Windows kubelet stats e2e tests serially because it needs to start many pods on a single node 7a0690cd592 Use ProxierHealthUpdater directly to avoid panic 8438bba5fd9 Enable field management for all new objects 114e283154d Add damemi to sig-scheduling owners a7057f8df0e Cleanup "slow-path" logic in scheduler Filters c2d3e54551e EndpointSliceTracker should track updated resource version bb2b50f3db8 Garbage collector should orphan ControllerRevisions too f2150587f32 kubeadm: remove 'kubeadm upgrade node config' c2c3c478cdc test/e2e/framework:move functions to test/e2e/scheduling/ 0b168f02436 Change devicemanager to implement HintProvider.Allocate() 91f91858a54 Change CPUManager to implement HintProvider.Allocate() 9e4ee5ecc3f Add Allocate() call to TopologyManager's HintProvider interface a3f099ea4d7 Split devicemanager Allocate into two functions 63f0078cccc register queue metrics in controller manager 95ddc029fad Make DisruptionController eviction tests serial to avoid flakes 0e47c86378c add StatusConflict as non-retriable error for disksClient 598c279ecc0 tolerate when bazel shutdown errors out da024f9a577 Ability to override versions of containerd/runc acd286d95d8 Install containerd package depending on CONTAINER_RUNTIME c4ef6a94b32 Add gid to config.toml only when docker group is present a6caa0a4726 Treat replaced events that didn't change resourceVersion as resync events d1ec762a91f cross build pause with buildx e96b037be3f test/ : fix non-ascii characters bfc75d9a5c1 manual fixes 1dcd1fb3b7a generated: update clients 25651408aea generated: run refactor 6c274ea72d1 update client gen 364c6f11733 remove TODO and unused code 44bf3475ea6 Fix non-ascii characters in test/e2e_node and test/network. 657dedc3be3 add azure disk WriteAccelerator support 0714f814fe0 kubeadm: remove 'kubeadm alpha kubelet config download' e167b44c170 kubeadm: deprecate --kubelet-version command line option 142778ac6c8 fix: add non-retriable errors in azure clients 527de3b5152 Update with update-bazel.sh script f4940cf55fd Staticcheck: vendor/k8s.io/kubectl/pkg/scale|describe/versioned|cmd/top|cmd/util/editor|cmd/top 26377722982 some manual fixes 9443a381444 generated: update clients 3aa59f7f307 generated: run refactor 7e88d8db666 update generators f1248163ff4 add exponential backoff with reset to reflector b8e2b0d990e Refine WaitingPod interface d9faaca6473 Bump to latest SMD to pick up performance optimizations 9802bfcec05 Add code to fix kubelet/metrics memory issue. 6f8dfdfb0e7 Fix docker/journald logging conformance 81252a6d78c added env var WINDOWS_CNI_STORAGE_PATH and WINDOWS_CNI_VERSION 2ffb13e822f Do lenient decoding only for kubescheduler config v1alpha1 63a15da505e Fix non-ascii characters in test/e2e/storage 36785bedfcf Ensure bazel is really brought down ba38816d423 LogResult if there is an error 0b32e142d47 Drop k8s.io/node-api packages f48e5de9632 Remove the exponential backoff in NodeGetInfo 2c93aa6ec37 Ensure kubectl is available in PATH by explicitly exporting the script 56711b9ac06 cluster: Add justaugustus as reviewer 8ec193ba9ce Limit number of instances in single update to GCE target pool ea140f5e1a1 Register conversions for kubectl testing types 99c15d28288 Support config kubelet provider id for local cluster. ad9d2d71c08 remove bash examples/comments from the v1beta1 and v1beta2 APIs 785fac68266 Make updateAllocatedDevices() as a public method and call it in podresources api bfe696b49cf Use longer pod start timeouts for specific tests 2a5bce8c820 use tars instead of debs to build server images ac9983f43df build: Remove references to debs/rpms in BUILD/dependency files baec6d4af55 build: Remove deb and rpm build definitions/specs 1071eb89f3c Remove deprecated fields from kubescheduler.config.k8s.io/v1alpha2 e41f2ccd412 gce-addons: Make sure default/limit-range doesn't get overridden 7b44ad0606d Update conformance requirement check e9e11de4e1b Remove Error log for nil StartTime 871739e4df7 Check getNodeInfoError against nil 38ecb30c58b Revert "Collect some of scheduling metrics and scheduling throughput" 999fdfaddf2 Calling hcsshim instead of docker api to get stats for windows to greatly reduce latency e8f12692dfd adding e2e test to ensure it takes less than 10 seconds to query kubelet stats for windows nodes a52776fbfb3 Add UpdateTwice and UpdateApply benchmarks for fieldmanager 815206685cf PodTopologySpread excludes terminatingPods when making scheduling decision 22bd92a390f Changed comments to match with interfaces method description 026ba549614 Fixed Golint errors in pkg/registry/core/pod e54bfa4652d CHANGELOG: Collapse README.md headings in single list f185c474e0f Add some aliases into import-aliases for e2e framework e05f8e6991d Re-adding the [[ as per review comment request 527e66fc282 Add kubectl diff exit code doc 0380aff70c4 CHANGELOG: Move changelog, soft-link to top-level, refresh listing a6b0eaecc99 CHANGELOG: Move changelogs into a subdir to delegate releng approvals d5edfc98174 fix staticcheck errors in vendor/k8s.io/legacy-cloud-providers/aws. 0c74a260c97 update generated file 5035d841cc5 update translation fc719c13f5f Explicitly shutdown bazel after the target finishes c08db5feacc add a flag in azure auth module to omit spn: prefix in audience claim aed4d639a5a kubelet: Debug pod status output diff is wrong 378fcc809ab Check for node IP f20e17e9dd2 python snippets should work on both old and new python versions 30989b648d8 Remove references to prometheus is test/e2e 6dda7adaf59 kubeadm: dual-stack validation allow single stack fa9ba80a67d validate storage cache indexers b9a586e3822 Fix non-ascii characters in test/e2e/node/pods.go d1bc1875aac Move 'path' package usage to 'path/filepath' fc8a39d439e implement backoff manager 9b23f22472e Make oidc authenticator audience agnostic 5bb1838c5c1 Updating dependency sigs.k8s.io/yaml to version v1.2.0 ca7a456a6b2 add myself to hack/OWNERS 724fb733d12 Change HostPath to EmptyDir for VolumeSubpathEnvExpansion e2e tests da4b0b0fa10 Validation for behaviors 9d3670f3586 Ensure testing credentials are labeled as such ea693833c8d Validate Except of IPBlock for NetworkPolicy spec 4b294079458 Add CHANGELOG-1.18.md for v1.18.0-alpha.3 0a476eb7d4a reduce overhead of error message formatting and allocation for scheudler NodeResource filter 2d21f16c38e Fixed code formatting issues discovered by verify-gofmt 97185e97529 Fixed problem in unit test where error expected/actual comparison was not being performed 48ee18b516b Removed unneeded newline (moved to end of directory not found message) f60c0af9771 Ignore empty or blank string in path when listing plugins 78248d0c2aa Fixed code formatting issues discovered by verify-gofmt 1fc80c57eea Autogenerated 881dde8bee8 Remove unnecessary manual conversions e70a630dac6 Added 'No resources found' message to describe and top pod commands 059429ce53a kube-aggregator: increase log level of AggregationController API group logging 439f93c91b8 kubectl: allow to preselect interesting container in logs 7368862c19e makes unavailableGauge metric to always reflect the current state of a service 69df8a8230f Add a fast path for adding new node in node_autorizer. b1d027742b8 Update for loop in server image image creation bf7112ae8ee Add shellcheck disable for set $wrappable 82f3f33eea8 Simplify and improve find/tar lines b69a38667e8 Update after review comment 8823a867183 Fix src_tarball packaging 20aeeed0f0f Replace for loop with find command 1b8107d60bd Update after review 468611d6e0a Update after review comments 405609b920b Fix shellcheck warnings/errors in /build/lib/release.sh d8c16a9eb22 Fix non-ascii characters in test/e2e/common/projected_configmap.go 0c40daddb0c Add an option to external storage e2es to use a copy of a pre-installed StorageClass 65483a19abd generated: update clients 41bd53866ef remove create expansions form authn/z clients 533d0b7f74d use generated clients instead of expansions for most of authn/z adcdb2fd72a Enable FC mount options 97eed70d743 Add konnectivity log files 60c972098ce Add defaults to pod affinity args 6acc75b4185 Only set admission review reponse patch type if the patch is not empty dc3f31569e4 Ensure specified container runtimes are present d5addb4090f Cleanup logging and creation logic of TopologyManager in prep for beta bc686ea27b0 Update TopologyManager.GetTopologyHints() to take pointers adaa58b6cb0 Update TopologyManager.Policy.Merge() to return a simple bool 95a3ac447f9 Fix bug in TopologManager RemoveContainer() 087dc49a0c0 fix range copy issue 0f187154731 snapshot clientsets pending context migration 1e50bc2d094 Add error check in kubectl proxy on server setup 00cd8c8d922 test images: Adds Image Promoter details in the README 87582e2c3c1 add indexer for storage cacher e3c8add683a fix kubectl drain ignore daemonsets and others ee3f897ca7b update network-y stuff for supporting ubuntu/bionic as master 8a1c4a5a88a Collect some of scheduling metrics and scheduling throughput df9b4e92e84 use network proxy for aggregator api 82a68be3043 Log when client side rate limiter latency is very high 0e00e0af115 Adds more unit test on Bind extension for the scheduler 8ce61eef5b2 add to api repo documentation dfd8e4e4670 Enable selinux tags in make targets 31df7077e16 Update OWNERS b11b7d354de WatchBasedManager stops watching immutable objects becdd790671 Initial example behaviors 2eb48f6049c Reduce default CPU requirement for konnectivity server ff8256de3f1 Added server-side print column about FlowSchema referential integrity cc7799a4372 Update GCP Windows node image versions 331cd94ccc0 Ineffassign fixes for pkg/volume 7ff3a1f8db8 test/e2e/framework: remove skip.go and use e2eskipper subpackage 4844b382dc9 kube-proxy: validate dual-stack cidrs 82107ff8ab9 Restore statefulset conversion that populates apiVersion/kind in volume templates 5dcf08c1993 Switch pager to return whether the result was paginated c9c4be66d3e Fix pending_pods, schedule_attempts_total was not recorded 773d3583bcb Avoid thundering herd on etcd on masters upgrade 72fe307b35f Move 'path' package usage to 'path/filepath'. 6c3093f9705 Ineffassign fixes for pkg/controller and kubelet 43ce2eb1ff8 Ineffassign fixes for pkg/proxy b6ba39d013f Fix comment whitespace 498ae799b5a Use standard default storage media type in local-up-cluster 8d7780d6358 update github.com/docker/libnetwork to c8a5fca4a652 af52beda260 Extend --dry-run to support string values. d8c00b7f529 Fix node authorizer index recomputation 3eea0d14052 kube-proxy: Only open ipv4 sockets for ipv4 clusters d05bcf6800e Add namespace mode targeting to dockershim 4d4e111f019 Generated code for kubelet namespace targeting 9a6d50cb2af Add namespace targeting to the kubelet 9bfcc6144e5 fix: missing variadic dots 47277f281eb Allow Action's Matches function to specify a subresource. 7f2200c61a7 Fix backoff retries for AzureFile client 40de7f2569e Add disableAvailabilitySetNodes to avoid VM list for VMSS clusters 6da3b70377d grammar change for pods status in tests 8bd9c994ca6 fix command variable exited with status 1 0d9f9fca89f Fix non-ascii characters in test/e2e/common/runtime.go fee77388c6d Make schema error log message more useful 4940e42b923 Fixed listType annotations for API Priority and Fairness 3d83ef2e8ec Autogenerated and build files for kubescheduler.config.k8s.io/v1alpha2 11c4bcd9dd5 Copy kubescheduler.config.k8s.io/v1alpha1 files onto v1alpha2 8daa7617575 Clean ups on kubescheduler.config.k8s.io/v1alpha1 files 9bd42287f90 Move mutating admission into finishRequest 75cf4d79f2c remove client label from healthz metric test 215b875dbf6 Add GC e2e debug logging a2399064a77 Allow update of onXPN field in fake GCE clients. cc3190968b1 remove client label from apiserver request count metric since it is unbounded fad11f87b42 Add foreground deletion check to ensure GC is aware of the new custom type cd1059e3c4b Revert "Merge pull request #87258 from verult/slow-rxm-attach" 9d2786c383d Fix back off when scheduling cycle is delayed 99b301d7e1a Fix preemption race conditions on heavy utilized nodes 968adfa9936 cleanup req.Context() and ResponseWrapper d55d6175f8e refactor 59e757afef0 regenerate clients 5360db5df81 update generator 510aa1b4324 update rest.Request signatures ed48ed0122c various context related cleanups to rest.Request 2686087888f Update GCI_VERSION to cos-77-12371-114-0 as older image is deprecated fe10c702d24 e2e dual stack retry getting endpoints 3d70e650ce3 Set cache to nil data when Azure node provisioning state is deleting 1174e6698ec cni: Update CNI version to v0.8.5 a3c434510d9 volume binder: enable klog flags in test 5c8929d95e8 volume binder: convert to sub-tests b430f022fce build: Don't attempt to use mirror for CNI plugin downloads 96f2588b610 cni: Update CNI download URLs to use new GCS bucket (k8s-artifacts-cni) cb942c23a7f Update GCE Windows smoke-test script to work with 1909 nodes. 0ce49aea1fa Update get-build.sh 1de2327afc9 Attach a new finalizer in GCE ILB creation. 43c7f3be298 Register RunPodSandbox* metrics dc731e4a1cb Clarify sha matching etcd release tag 427f0f94636 Add apiVersion to involvedObject a4d1624fecb Skip default spreading scoring plugin for pods that define TopologySpreadConstraints bae4ff565fc fix apiextensions reference in controller/clusterauthenticationtrust bea4b611582 Fixed a failing test on a RBD mount scenario cece51b9b0b bump gengo version 558f6aab56c add staging directories to import-boss verify script db19fc94273 add import-restrictions to apiextensions-apiserver/pkg/apis,v1 and v1beta1 07e3cca6d0e update existing import-restrictions files 39f6c784b73 Cleanup validation for immutable secrets/configmaps 647838f8d50 switch log verbosity for cache refresh logs d95ed2c8470 various context related cleanups to rest.Request 18fe96f629e Reduce public methods for DryRunVerifier 463442aa290 Update container hugepage limit when creating the container e992ec0d59b Add comments in several hack/*.sh b7817a2981e Add annotation annealing for migration for PVs and PVCs during syncVolume and syncClaim. This allows external-provisioners to pick up and delete volumes when they have been rolled up from previous kubernetes versions. 6901346e223 don't specify apiVersion when getting AAD token b263c875967 Update CHANGELOG-1.17.md c6a03fa5be5 Parallelize attach operations across different nodes for volumes that allow multi-attach e2d7153a133 set nil cache entry based on old cache 37957e2a0dc Refactor operation keys for NestedPendingOperations b2bb3dfb590 add logging before kubelet waiting for cert 53cc85a29d6 Expose k8s types that do not roundtrip and a helper to roundtrip without protobuf 6972d6f33af Fix kubectl taint's Complete parsing 3593fc69abb bumping agnhost version to 2.10 dc5791b47ac adding sidecar injecting webhook b8e2ad5926c More refinement of comments and parameter names for informers 24844c5fc54 Add logging to scheduler's event handlers ee00497ea94 add comment in several hack/ sh scripts. 08833c91805 Withdraw the change of getting version variable b117a928a6c kubeadm: prevent bootstrap of nodes with known names 772a20b9cfe `./hack/update-openapi-spec.sh` d7650e582ec Cleanup unused Azure client interfaces 2d9b798d1a8 Remove doc reference to godep #782 4d33d837c8b Register full object as return type for `DELETE` web services. ed2f1a6f428 fix behaviour of aws-load-balancer-security-groups annotation 7c72b5791b1 fix static check in pkg/volume/flocker aaf86537eec Update copyright date for ingress_utils_test.go 8ae868b4e07 Adds more test cases in TestRunBindPlugins for the scheduler a027c379f7e kubeadm: increase timeouts in the etcd client 5e0c0779a11 kubeadm: handle multiple members without names during concurrent join 2b389123a5d test/e2e/framework: handle the case where BeforeEach was never called cbdd3a279e6 brushed up according to review a8e07470438 Updated API Priority and Fairness validation to track change in catch-all priority level f641ecd6f83 Whitelisting *.pkg.dev for the GCP credential provider b2f32367710 Added relevent approvers and reviewers for gci. d1f62ead18f fork out a new global-default from catch-all to handle unclassified traffic ecfe31b8907 /test/e2e/framework:remove TODO in test/e2e/framework/util.go 292804ae1c8 Bump dependency github.com/prometheus/client_model@v0.2.0 afb7c5d2ce3 Add serathius to sig-instrumentation-approvers 5ba2a8da099 Pin dependency github.com/cilium/ebpf 088ee920e0e Bump dependency opencontainers/runc@v1.0.0-rc10 efd309b7dad Fix bug of hack/verify-api-groups.sh 527d60edb70 Move IngressFromManifest/IngressToManifest to ingress e2e fw 1461d8bd13c Move GetPortURL to ingress e2e fw d56f5357558 fixed UT 1dd53fd3bae Fix issue with GCE scripts assuming Python2. 71b2a4cdcc1 Revert "It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc." 22bd26fefb9 Adding taint toleration error reasons 9b679748239 Re-enable apply for 50% of requests 4c2eb77ee6e Remove use of CustomResourceSubresources feature gate, CRD field clearing 57f3a97bcba Remove use of CustomResourceWebhookConversion feature gate 46e622216d9 Remove use of CustomResourceDefaulting feature gate ff94f33a6bc Remove use of CustomResourcePublishOpenAPI feature gate 57724766bcf Remove deprecated GA feature gates a85815823eb Do not serialize internal type, fix roundtrip b86df2bec4f update gopkg.in/yaml.v2 to v2.2.8 6e411b6c0a4 Add support for pre-allocated hugepages with 2 sizes 5b49d03b844 Return the error from copyInto 9897f33f7da fix static check errors in vendor/k8s.io/apimachinery/pkg/api/resource ca1eeb99b53 informers: don't treat relist same as sync a14ceeb2c00 Staticcheck: vendor/k8s.io/kubectl/pkg/cmd/exec|config|certificates 577b2dcdacd Fix numPDBViolations when victims on same node are assigned same PDB eafbb67d010 Debugging 87473, printing out the last state of the dependent 90b49e80d62 add warning on ObjectReference cfd61e801b0 Add env var(CNI_TAR_PREFIX) for cni install. cni release has changed the prefix, add a var to make this configurable. e8c20e1f396 don't wait blindly d2ad469abbb remove unused layer of loop structure in processorListener::run 5c2d2c5ef1a rename dynamic cert loading to be more accurate 6ccfc3aecf0 add dynamic reloading for CSR signing controllers 4a5ab84dccc Move default binding to a plugin aee028dab84 Migrate health monitor from read only port to healthz port e0aeb4d6a36 Record overall Filter latency for all nodes in a scheduling cycle. 82f97775b7c Remove kubectl run generators 8c6d7a7086b fix static check errors in test/integration/etcd 9e1c99c4e22 Delete the sysctl runtime admit handler d6d08b152e0 Delete TODO to use docker client 4d76b1c8de7 Add mergeFilteredHints: - Move remaining logic from mergeProvidersHints to generic top level mergeFilteredHints function. - Add numaNodes as parameter in order to make generic. - Move single NUMA node specific check to single-numa-node Merge function. 80c3f500b68 Fix CreateVolume signature in comment fc300e0e7d6 Move filterSingleNumaHints call to top level Merge c4f7308e116 kube-proxy: fix incorrect log information 45660fd3a25 Add filterProvidersHints function: - Move initial 'filtering' functionality to generic function filterProvidersHints level policy.go. - Call new function from top level Merge function. - Rename some variables/parameters to reflect changes. df9b2595f38 Update filterHints to filterSingleNumaHints: - Change function name - Remove policy parameter (unnecessary) - Update unit test to reflect change b09e35257a7 Remove `scheduler/algorithm/priorities` in import-restrictions 6ae1b3ea21f Drop the cadvisor test 30de5bdc460 Enable verify-import-boss check for e2e framework c8dbde86664 bump github.com/google/gofuzz a65f525aed8 Tweak new names 38c5f318c9b kubectl-diff: Test return code on failure and changes b33fbc84d9d Update Structured Merge Diff to V3 170714e5321 Remove folder pkg/scheduler/algorithm f2b21f08d95 kubectl-diff: Return non-1 errors on kubectl failures bb587690fd5 Default the --enable-cadvisor-endpoints flag to disabled 368fe70aeda bumped pause-win to 1.1.0 24314d228c9 fix flaky test c30f4489b47 Update CHANGELOG-1.15.md for v1.15.9. 781f51c22dc Update CHANGELOG-1.16.md for v1.16.6. cbc089a9846 Update CHANGELOG-1.17.md for v1.17.2. 3f8b2022665 Move GeneralPredicates logic to kubelet. 50d511d4b8a Deprecate scheduler's framework.plugins.RegistryArgs de57657b2bb Self nominate aojea as sig-network-reviewer d6b449b5c7d Move scheduler's SchedulerExtender interface to core/extenders.go 2808d7154dc Update CHANGELOG-1.18.md for v1.18.0-alpha.2. 093fd4ab029 Add comments in several hack/verify-*.sh(s-v) 261f26075c0 kubeadm: remove the deprecated GA CoreDNS feature-gate e5a2aeeae6d Fix static check failures in test/e2e/instrumentation/logging/stackdriver bd9d8fa42f7 Initialize CPUManager containerMap to set of initial containers eb265bc7db7 Remove GetBinder member and replace it with a method. 7a39e1396a1 Remove unnecessary slow binding test 5aacacbdf00 client-go/cache/testing: add ability to simulate watch disruption 73b2d831254 Refactor docker specific oom const out of qos pkg 7be9b0fe55b Update comments and error messages in the CPUManager 2a2ce207f2b Enable bound tokens in local-up-cluster c42e815fb51 Fix multinode storage e2e tests for multizone clusters f2acbf66074 Base CPUManager state reconciliation on container state, not pod state f6cf9b8ce93 Move CPUManager Pod Status logic before container loop 772dbbc7d78 Fix describe of statefulset prints pointer not value 221396ac35f cleanup: delete unused func 53aff819e0e fix static check failure in pkg/controller/disruption and pkg/controller/namespace/deletion 72f34b817ea staticcheck: pkg/volume/fc, pkg/volume/portworx and pkg/volume/vsphere_volume c8df27c2b1b Add comments in several hack/verify-*.sh(g-r) afe3d5f09f6 Use e2eskipper package in test/e2e/common/ 1c092bf6359 Simplified logic around context cancel, removing bugs 1e170637c3c Refactored QueueSet configuration into two phases ce12105edcb Added server-side printers for the API object types for API priority and fairness e98f4f3ef89 Use e2eskipper package in test/e2e/framework/ f19f4e40f9b Fix static check errors in pkg/util/netsh 34f07671373 Add flowcontrol to apiVersionPriorities bc2aabaaeb1 Add: promotion for LimitRange defaults test to Conformance 203c7b47317 fix staticcheck errors in pkg/controller/daemon. 2afe0da8eed Unify --cluster-cidr in KCM and CCM 16de853c5de Clean up TODO around running test as sudo 8cbc5dc03f9 Bump golang/mock version to v1.3.1 47ad6db1dcd Fixup comments in internalbootstrap b0a6e597fee Use new storage clients in Azure cloud provider 0f53daad9ea Remove Brad Childs from OWNERS d7d316e1e74 switch to docker command line 469de65c252 Enabling EndpointSlice feature gate by default c1a4cd9c75b Improve error message when diff binary is not in PATH 47b2593d592 Creating new EndpointSliceProxying feature gate for kube-proxy 4d88acee51d Made internalbootstrap gin up its own Scheme dd65e2151b4 add crash protection to wait functions that were missing it 5330bd7440b dogged insistence on full verbosity f53d7e55dff Move Snapshot from nodeinfo/snapshot to internal/cache 6bea0e469bc Support DryRun in cli-runtime REST Helper. f1c26bf4362 removed excess blank line 6a14203658c Rename cache's Snapshot to Dump b3853138a4f update generated files 2f78a9480f2 Updating dependency google.golang.org/genproto to version v0.0.0-20190819201941-24fa4b261c55 cac0451836f Updating dependency github.com/prometheus/client_model to version v0.0.0-20190812154241-14fe0d1b01d4 3b29bcf52d3 Updating dependency google.golang.org/grpc to version v1.26.0 9c78f05d06c Updating dependency github.com/gogo/protobuf to version v1.3.1 fe8b32317ff delete unused field ec5321c6a9f Update validation for API Priority and Fairness ed1381e35f8 Fix staticcheck in pkg/controller/podgc 09a132be29d Add comments in several hack/verify-generated-*.sh a94346bef98 Update aws-sdk-go dependency to v1.28.2 c712230ac1c Implement default queue sort logic as a scheduler plugin 3698a2540dc In test framework LoadConfig(), use CurrentContext.Server for TestContext.Host if it is unset. Otherwise, kubectl exec through http/kubectl proxy tests in test/e2e/kubectl/kubectl.go would fail with "--host variable must be set to the full URI to the api server on e2e run" error. With this change, running the following tests can now pass: $ e2e.test --kubeconfig=xxx --ginkgo.focus="should support exec through" 0c12ae52401 Modify alias of e2e/framework/job to e2ejob d86fcd8c902 rename some declartions named context in tests afaea605f43 Remove Brad Childs from OWNERS files 18f05ef5b98 Fix golint errors in test/e2e/storage/vsphere 9952d487d2e Move ValidateEndpointsPorts() to e2e test 450196a719a Update CHANGELOG-1.15.md for v1.15.8. 3fbfa763fd9 Update CHANGELOG-1.16.md for v1.16.5. 708278098af Update bitmask printing to print in groups of 2 instead of all 64 bits c6429e3726f Add snapshot clients based on armclient 4ea5509b31a Add vmsize clients based on armclient c86d1ec0e9d Add storageaccount clients based on armclient 43554c80a61 Add disk clients based on armclient afd31035c21 Fix the bug PIP's DNS is deleted if no DNS label service annotation is set. 7069b1d6e8b Update TopologyManager single-numa-node logic to handle "don't cares" 2905ffffa76 Rename TopologyManager test TestPolicyBestEffortMerge for consistency 94489c137ca Cleanup use of defaultAffinity in mergePermutation of TopologyManager ef1b991ebc9 SchedulerPredicates [Serial] validates resource limits of pods that are allowed to run - set resource requests as well 5e23517ebf1 Use reflect.DeepEqual check in policy_test.go 92eb7cd6011 Update "Single NUMA hint generation" expected affinity to nil 8b3f6e61a22 Move test case "Two providers, 1 with 2 hints, 1 with single non-preferred hint matching" into specific policy tests 681c42bfc25 Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 2/2" into specific policy tests a38a2562b2f Move test case "Two providers, 1 hint each, same mask, 1 preferred, 1 not 1/2" into specific policy test. f639da7637b Move test case "Two providers, 1 hint each, no common mask" into specific policy tests. 401a2bb285a Move test case "Single TopologyHint with Preferred as false and NUMANodeAffinity as nil" into specific policy tests. 6460ef63929 Move test case "Single TopologyHint with Preferred as true and NUMANodeAffinity as nil" into specific policy tests. baeff9ec5d7 Move test case "HintProvider returns empty non-nil map[string][]TopologyHint from provider" into specific policy tests. 599217d4828 Move test case "HintProvider returns -nil map[string][]TopologyHint from provider" into specific policy tests 57661ee9467 Move test case 'HintProvider returns empty non-nil map[string][]TopologyHint' into specific policy tests. 51f1af03958 Move test case 'TopologyHint not set' into individual policy tests 8466a5852af Restore policy_test.go to upstream Following commits will contain incremental changes to this file to ease review process and ensure all tests are accounted for. 59bb6c4d6f4 Update checks in mergeProvidersHints: - Initialize best Hint to TopologyHint{} - Update checks. - Move generic unit test case into policy specific tests and updated expected outcome to reflect changes. 6758f95117b Restore original policy none test cases: Mistakenly overwritten in earlier commit 2d1a535a35c Make mergePermutation generic: - Remove policy parameters to make function generic - Move function into top level policy.go 5487941485e Refactor filterHints: - Restructure function - Remove bug fix for catching {nil true} - To be fixed in later commit - Restore unit tests to original state for testing filterHints adfd11f38f8 Make iterateAllProviderTopologyHints generic: - Remove policy parameters to make this function generic. - Move function out of individual policies and into policy.go e43f0a52933 Reinstate canAdmitPodResult in policy_none: This is to keep consistency with the other policies. This change may be made across all policies in a future PR, but removing it from the scope of this PR for now. 4cc5b9e46c3 Edit hints returned from policies and unit tests: - Best Effort Policy: Return hint with nil affinity as opposed to defaultAffinity when provider has no preference for NUMA affinty or no possible NUMA affinities. - Single NUMA Node Policy: Remove defaultHint from mergeProvidersHints. Instead return appropriate TopologyHint where required. - Update unit tests to reflect changes. Some test cases moved into individual policy test functions due to differing returned affinties per policy. e3d0c9397f0 Updates to single-numa-node policy: - Remove getHintMatch method. - Replace with simplified versions of mergePermutation and iterateAllProviderTopologyHints methods - as used in best-effort. - Remove getHintMatch unit tests. b5ca4989e3a Update unit tests: - Update filterHints test to reflect changes in previous commit. - Some common test cases achieve differing expected results based on policy due to independent merge strategies. These cases are moved into individual policy based test functions. 17d615bca2b Update filterHints: - Only append valid preferred-true hints to filtered - Return true if allResourceHints only consist of nil-affinity/preferred-true hints: {nil true}, update defaultHint preference accordingly. 9f21f494930 Additional unit tests for Topology Manager methods f886d2a8320 Update single-numa-node policy unit tests 2825a7be1a6 Add new functionality for single-numa-node policy: Explanation taken from original commit: - Change the current method of finding the best hint. Instead of going over all permutations, sort the hints and find the narrowest hint common to all resources. - Break out early when merging to a preferred hint is not possible 5ce2ea27734 Return defaultAffinity from PolicyBestEffort: Now that PolicySingleNUMANode is not considered here, return defaultAffinity as was the original case before previous bug fix eda15215621 Make mergeProviderHints policy-specific: - Remove need to pass policy and numaNodes as arguments - Remove PolicySingleNUMANode special case check in policy_best_effort - Add mergeProviderHints base to policy_single_numa_node for upcoming commit dc36924c373 Update policy_none removing canAdmitPodResult Update unit tests for none_policy Add Name test for policy_restricted cf8b098dda5 Refactor policy-best-effort - Modularize code with mergePermutation method 278717bc577 Fix ineffectual assignment to CPUSets e2e5bf5e0b6 Fix golint warning for pkg/util/procfs/procfs_linux.go 1db3f45dc59 test/e2e/framework/rc/:refactor function ByNameContainer e1eabf8576a Add comments in several hack/verify-*.sh 69461d26d81 move function GetKubemarkMasterComponentResoureUsage aa2691eeac6 Fix static check failures in test/e2e/instrumentation/monitoring 4573428b879 Deal with auto-generated files. Update bazel by hack/update-bazel.sh 0c77101b906 add README.md in hack/ a4f31e0de70 Add NewFakeKubeRegistry() for testing deprecated metrics. b2f76cc780d add comment in hack/update-*.sh 0e81e394657 cleanup(scheduler): remove unused function, remove duplicate comment, implement interface 7ac8f58ff60 Fix: formatting 3ba8f42f96b Update: podTemplateList name; Fix: initial fetching of PodTemplates 0c3112fff39 fix golint error in plugin/pkg/auth/authorizer/rbac/bootstrappolicy 961c13ecba5 Fix: formatting 77e31bd1108 Fix: formatting 2e79da91398 Fix: formatting fe91d5fad98 Fix: bazel build errors 8676fb3cdb9 Promote: Secret patching test 4efcb21af88 Promote: find Kuberntes Service in default Namespace b50531a4a46 Update: formatting, cleanup, ExpectEqual statements 0f528a27ad5 Promote: Namespace patch test 34b942a41d7 Remove check for empty activePods list in CPUManager removeStaleState 5802f3a9103 Add proper activePods list in TestGetTopologyHints for CPUManager cdd92d39b77 preemption: typo cleanup f370b781162 Update vendor f0e45689d3d Add PatchService method in service/helper. 3709f9264d7 Document the actual git tag the SHA was picked from 2a731eb411f Updating dependency github.com/checkpoint-restore/go-criu to version 17b0214 103d77c619e Updating dependency github.com/coreos/pkg to version 97fdf19 a6d72ab7132 Updating dependency github.com/elazarl/goproxy to version 947c36d 4143bc7a964 fix staticcheck errors in pkg/volume/hostpath. cc8e8401e2d fix static check in cluster/images/etcd-version-monitor 885a03eef78 Use new clients in Azure cloud provider 6882eb38d8d Add virtualmachine clients based on armclient bfbcee2e3e1 Add subnet clients based on armclient aaa70b42e89 Add securitygroup clients based on armclient 95c2f08d8f9 Add routetable clients based on armclient e68c640de2d Add route clients based on armclient bdd0d5ff86f Add publicipaddress clients based on armclient 937e6a63884 Add loadbalancer clients based on armclient dba3331ce48 Add interface clients based on armclient f88d3524d58 Fix file name for VMSSVM client 2498dbf6360 clean node_authorizer code: verb judgement a038a33dcfb Clean up commented assertions in tests 210737b0ce8 Revert "list vm instead of get when getting virtual machine" b4b1e8f7b6a remove TODO in test/e2e/framework/skip.go e8a8bdb4cac hack/update-vendor.sh 00706b8fe9e Remove gonum.org/v1 dependency in code-generator 514bdbedac9 fix-static:pkg/volume/scaleio/ f00ac0694b6 Mark session affinity tests as [Flaky] f20945aa416 Fix: formatting 372d09cd153 Add integration test for NodeResourceLimits plugin 5a008786e21 Add: PodTemplate lifecycle test ee1f0b8a381 Make CustomResourceDefinitionStatus fields optional 0fc15708fe0 Add: ConfigMap lifecycle test edbd51bc692 Update CHANGELOG-1.17.md for v1.17.1. 4673731c0bc Make sure PDB has observed pods before doing eviction in e2e test ba23aa98f65 Set managedField probability to 0% 99a015705ba storage e2e: Add context to timeout errors e4a18dee735 make request logs greppable f969d3643e8 Nominate alculquicondor to sig-scheduling-maintainers b60703c1724 test/e2e/framework:refactor generateWriteBlockCmd due to the same function 9077603b976 Add richer unit tests for OomWatcher ab7e0f58d5c Clean up rkt specific code in `pkg/kubelet/pleg` a9e5fd66230 Revert "Revert "Add an option to specify kubelet flags for heapster node."" 8b1eb7f9735 remove TODO(random-liu): Move pod wait function into this file 7e5e7c141c2 Update cri-tools to v1.17.0 c402a4bf65e WIP: use e2eskipper package in test/e2e/autoscaling 77f482c553b WIP: use e2eskipper package in test/e2e/cloud cb07680ee9e remove TODO in test/e2e/framework/providers/gce/ingress.go 0a8df435256 update test data 16fbb5be331 use e2eskipper package in test/e2e/auth 4789e51d8ed Use e2eskipper package in e2e/scheduling and e2e/servicecatalog c1de3d6e5b4 fix ci-kubernetes-node-kubelet-serial Non-system critical priority classes are not allowed to have a value larger than HighestUserDefinablePriority 07c36de3e2b e2e/instrumentation:Use e2eskipper package fe63af0d1c2 export changes to mo 63e22620a91 modify strings 739c86e2faa update po file for kubectl jp translation de15774e10a kube-proxy unit test FilterIncorrectIPVersion 1ee86328ae6 Fixes unnecessary creation of default SG and trying to delete non-provisioned SG by k8s system when annotation [service.beta.kubernetes.io/aws-load-balancer-security-groups] is present 054e3846fc1 Use v1 subjectaccessreview API in controller-manager CSR approver e6234519e1f set test image cloudbuild directory 187d7112250 Split findNodesThatFit into framework and extenders logic 63c1c68d0ca Remove direct use of Snapshot's data structures fb66e807cd3 Remove scheduler framework dependency on predicates package 4083c7d49c8 Fix a flaky scheduler preemption e2e f6d58ae3a96 Multi arch for nonroot image 2a479006209 Remove unused KUBE_TEST_API logic 925be295fb0 Allow embedding logs command e8017795d16 Fix GetPodLogs failures in NetworkPolicy e2e tests da15570daa2 fix staticcheck:pkg/volume/cinder 14e0cac5e7a Fix error-string-capitalization in clientset generator. e62f9625cf6 fix-static:pkg/volume/emptydir 07f31b3b177 test/e2e/ui and test/e2e/upgrades:Use e2eskipper package 73fb0ab5ec4 test/e2e/storage:Use e2eskipper package 34359176aa9 e2e/gke_local_ssd.go and e2e/gke_node_pools.go:Use e2eskipper package 7cc3971ee0a Immutable secrets/configmaps tests 9174905ae77 Autogenerated e612ebfdff2 Immutable field and validation 5b2cc9c2fd6 Fix(kubectl): the field of history controllerrevision will be covered by daemonset 420d5d10c4b updating googleapis/gnostic to v0.1.0 e1f7b16fa68 Update to golang@1.13.6 f3b9a6e12f5 test/e2e/windows/:Use e2eskipper package c7234aa1779 kubeadm: support automatic retry after failing to pull image 3d34a814d69 test/e2e/kubectl test/e2e_kubeadm:Use e2eskipper package 586e1f2325b e2e/network/: Use e2eskipper package a19aa1069a7 Remove duplicated ServiceStartTimeout 07c5aa98ea3 simplify 1.17 release note for storage b5f050a5cbd Move from random SHA - update github.com/prometheus/client_model to v0.1.0 59807be5abe Further tweaking up the wording f66ef23c118 update gonum.org/v1/gonum to v0.6.2 a1f998909e2 changelog: clarify 1.17 upgrade requirements 8f1e3c22353 updating github.com/smartystreets/goconvey v1.6.4 8253480ea41 update github.com/morikuni/aec to v1.0.0 4db3822ebba Update fieldmanager.go 2b554079af6 Ensure a provider ID is set on a node if expected bf30f75ec6e Update azure_test.go 70dea6e4a84 review: several fixes and addressing comments 2dc966348d6 add myself as feature approver (for SIG cloud provider) 5a44cd65fd9 Fix typo from reseting to resetting 8da4a1d97fe Add some comment to hack/verify-linkcheck.sh c5764735e27 fix staticcheck:pkg/volume/awsebs 0e8b956e27b clean deprecated apiserver request metrics 606e4503cf4 remove last part of deprecated metrics 2c2e1c5443a keep apiserver_request_latencies_summary ab182552b48 clean SinceInMicroseconds, convert to SinceInSeconds a8f2feaeb51 remove deprecated metrics of proxy 8ae3f80048a remove deprecated metrics of dockershim 060756babbb remove deprecated metrics of apiserver 85931af1eee remove deprecated metrics of scheduler d2cfd4b82fb apply review advice again 447b17587b6 remove deprecated metrics of etcd 1a9b1217649 remove deprecated metrics of kubelet 26ea420c0e6 Image Promoter: Cleans manifest list 8c481022c1c e2e/node/:Use e2eskipper package c84a371f3d4 Fix a flaky e2e test of Job completion 91dca8ff8cf Use e2eskipper package in e2e/apps e8b5658bd11 fix: typos in comments of admission 0bab010b45a clean unused predicate error b2159b5d663 Remove scheduler/algorithm/priorities/util package beb252df163 Add logs of port-forward-tester pod 99b135442c6 Add error handling of CloseWrite() 6aaf0bb41b3 Cleanup scheduler/algorithm/predicates package dcd4dcdf217 Update: comments, searching for secrets in lists b062fcb1178 Update Azure owners fee0d43d23f fix golint error in pkg/apis/rbac 010b8852361 Remove workaround for RS bug in cmd apps test 2c3c6721ce5 refactor(scheduling): remove priorities package a2526286498 fix nits 6cab3a7bec7 create probabilistic SkipNonAppliedManager 33a449474cc Fixed docker.log format 07e3c46cb4b Add: secret data patch check ddf0d4b8034 change Apply signature and move decoding into handlers 58dabc73979 Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout" f2518347f3d fix apply --prune to check cli specified namespace 71966adfc39 Allow a preloaded gke-exec-auth-plugin 39e373fc455 Do not require token secrets when using bound service account tokens afe3b907a18 Remove nodes from cache immediately on delete events 50deec25bc0 feat(scheduling): address disabled plugins in scheduling framework bcab9b4c9ea Remove uses of NodeInfoMap outside of snapshot and cache 824af9e3072 Fix kubectl top sort-by cpu and sort-by memory options 50b697bacb5 move TaintToleration predicate to its plugin 228891de9c7 Fix comment b3ae0f01e5b pass through KUBE_BUILD_PLATFORMS to enable build on specified platforms 19daee7e604 Add import-aliases check for e2e framework c04ead5fb13 Add error check for instance insert 0d86f0a0372 Separate skip as framework subpackage 51c742c1dd0 fix staticcheck failures of pkg/util/ipconfig pkg/util/iptables pkg/util/ipvs/testing 0278d793c8b fix: remove ErrTopologySpreadConstraintsNotMatch f8934861910 ipvs proxier README: fix typo 80127fe10f1 rm errserviceaffinityviolated 864600f05f6 Break nodeunschedulable Filter plugins dependency on predicates package 6c58cc0ad00 change framework_extension_point_duration_seconds from sampling to always record d829d9b0fd5 Update hostpath and mock csi drivers with latest sidecars 5def91d7785 Add VolumeBinder to FrameworkHandle interface c86f59610c0 remove test/integration dependency on predicates and algorithmprovider 1289bdaba41 network proxy with admission wh 21202b08d48 remove e2e dependency on scheduler/predicates package 9b17de74628 Repair smoke-test for Windows GCE clusters f3c7a4c8231 Update scheduler's RunFilterPlugins to return a plugin to status map 8e3c1b54a7c Fix interpodaffinity issue 326935c1b96 extend crd openapi e2e timeout to deflake the test, plus small improvements: d227b7822fb Move selector spreading priority code to plugin 4d731d92bf0 Demote Delete Grace Period test to [Flaky] 5d916e20ddd Use Snapshot.NodeInfoList for listing operations 3db91b2bdc9 Enabled reading config files for vsphere e2e tests f3c70a2ed26 Move IsAppArmorSupported() from e2e framework 704ec253527 fix flakes on e2e test TCP CLOSE_WAIT timeout 0f9c262eda1 Cleanup cloud controller manager when closing cluster. 10864d3366f fix a bug that orphan revision cannot be adopted and sts cannot be synced 568edf72ec1 fix kubectl annotate local error 8d7f3837856 cleanup(api-machinery): remove unused struct and variable 680df17f39e fix typo 68532e0c0f5 Remove redundant nil check ee967060c71 Add simple explanation to verify-spelling.sh a1053e4835f Break interpodaffinity Filter plugins dependency on predicates package a3b90584a1e Image Promoter: Bump timeout limit 8897c435ad5 Refactor oom watcher to allow greater test coverage 57f2d7ad6f2 Adding unit tests for kube-scheduler Config Complete() method. 30058c9d356 Image Promoter: Remove -it from docker command dc5934f5845 token cache: make fetch_total a counter 9ed55bc5203 Add: JSON marshal error failure checking; Fix: formatting 232da604300 Update: json patch generation c53006b1a2c Add: test for finding service from listing all namespaces b4fb46409d1 Update: test secret contains a default label, secrets are listed via default label, patch payload is marshaled instead of written in raw JSON, secret deleted check; Fix: comments, test namespace usage b8cac87646f Revert "fix flakes on e2e test TCP CLOSE_WAIT timeout" e26fbe6f08c fix a bug in scheduler's node resource limits score 729337ec7e4 gofmt reflector.go ae53a008cb3 Clarified comment on DeltaFIFO::Replace f2a8e2d9c9c finished pass over comments on Controller, and commented sharedIndexInformer 7d82e23e6cd A little more comment tweaking for cache.Controller 72fa714d636 began turning attention to cache.Controller 2ea338b63f2 Reworded comment on requestedResyncPeriod eef49c965f4 Noted divergence between requestedResyncPeriod and resyncPeriod 5546d9f12f2 Started commenting processors 320c9bfeed4 Break volumezone Filter plugins dependency on predicates package 81a6cf28478 Change PDB tests to use pod conditions instead of phase 591b8706915 fix how we check for node info list consistency 7f2d675ad0a kubeadm: Fix a false positive in a warning 42afa0a2cca Adding in missing Registry unit tests. 6a82609902e Break serviceaffinity Filter plugins dependency on predicates package 8d313f333ec staticcheck:test/integration/master/ ce68edf7009 Allow "kubelet --node-ip ::" to mean prefer IPv6 4ef31f81c76 Break nodelabel Filter plugins dependency on predicates package 264a1cf5f6f staticcheck:test/integration/auth/ 8d54a84507c fix kubemark use fake CRI 324e5ce7e3d hollow-node use remote CRI 729c37373aa Remove unused scheduler types 24ccd77a986 Remove variable EXTERNAL_CLOUD_VOLUME_PLUGIN default value in local-up-cluster.sh ab12f460d95 Update: to use framework instead of gomega for testing values 616003a8e96 Add: OWNERS file - based off of staging/src/k8s.io/apimachinery/OWNERS 2754cc37ea5 Update: namespaceName value updating order to prevent error expection bd6550fb349 Update: formatting, gomega Expect to framework ExpectEqual, framework creation to standard function fca9963c243 Move publish and unpublish counting up in test c5e3ab12489 Fix: formatting, spelling 1a283ccbb64 use az.List() to check route existence 9951a9c98e2 Add: namespace patch test a8ee1086d70 Move yaml limit tests to benchmarks 51d53036621 Fix err variable shadowing issue in storage/utils 65329a59867 list vm instead of get when getting virtual machine 2c8639deb70 allow an SNI cert to be used to respond for a particular IP 4e674768671 move nodeaffinity predicate to its filter plugin 4c51eb9063a test images: Image Promoter fixes b9e2389e0d9 Move RequestedToCapacityRatio argument processing to its plugin 906adbdfcdd Require client / server protocols 02885845ff4 kubetestgen: improve errors handling eb074761bc2 Fix local-up-cluster.sh do not work with non-intree external cloud provider issue. fddf50cf881 fix log message error in nodelifecycle fe8ad90afa5 bootstrap flow-control objects 72559ec6933 kubeadm upgrades always persist the etcd backup for stacked 7254517c5cf rename ExtenderConfig to Extender edd612d9f10 Add: test to patch a secret 9bcca31e52c Break volumerestrictions Filter plugins dependency on predicates package aae9a7f7045 Break nodevolumelimits Filter plugins dependency on predicates package 794d0d9b4d8 Remove `rkt` from container runtime options 06b44c76fd7 Correct comment around which integrations require cadvisor_stats f2cb1f35fe2 Remove dead code in fake docker client d27dc6751ec Break volumebinding Filter plugins dependency on predicates package c2d41fda6c4 remove unused code and use framework 05010d23ac7 clarify apiserver bind-address flag usage 0b064f34ae7 fix flakes on e2e test TCP CLOSE_WAIT timeout 041e5b55609 addressed comments e40625028b5 fix: correct the mentioned endpointslice manage label name. e8eb5c656b4 fix fake remote CRI d31dcecd200 cleanup unused scheduler functions/files c0bc36c12e1 kubeadm: probe address for unspecified ips 051be8fe80e Cleanup SetPredicatesOrderingDuringTest due to deprecation of predicates 64d7b224d92 Cleanup unused parameter of NewGenericScheduler 7d604c318cf Break DS controller on scheduler predicates and predicate errors 2d95520a3f6 adding private cluster check 9bc862ec697 Perform dead storage removal linearly 2371c58a736 remove unused code test/e2e/framework/google_compute.go cc0b3e82eb8 Kubelet: add a metric to observe time since PLEG last seen 17b0b77026b fix staticcheck failures of test/integration/client test/integration/disruption 0eca8ae9cdb Fix tests and improve comment on NewDeltaFIFO 1d65f1b5c39 Fixed assignment statements 89c615f9c44 Revised comments about f.knownObjects and added tests for Replace b535ed3b0c1 Merge scheduler's ConfigProducerRegistry into LegacyRegistry 51eb4b50a3a Don't paginate in listwatch 02e217759e3 update comments of some funs in scheduling_queue d09fe8e247a Remove no longer needed `modifyContainerPIDNamespaceOverrides` 93246643306 remove TODO in test/e2e/framework/node/resource.go bfc4a7a1c54 fix staticcheck of pkg/util/ebtables 7a7ccb797e0 Updated comments on internal abstractions in client-go/tools/cache fc3b210ad83 if no cycle dependency , use framework in test/e2e_node subpackage e787525d6e7 Add metrics for VMSS and VMSS clients 4a00e261754 Move Azure metrics to a separate package 2f0e5b262a4 move functions from e2e/framework/deployment/ to e2e/apps/ and e2e/upgrades c813e258920 Use new VMSS and VMSSVM client in Azure cloud provider b8e7767b67e Add VMSS VM client 63f9200c1d8 Add VMSS client 9d67227fb42 Addd Azure ARM client with backoff retries d8edc7d2c11 CHANGELOG-1.17: add note about service CIDR bug 1eaa0ee3f95 Minor nit in error message about feature gate stage a6b7b0d95e1 Define algorithm providers in terms of plugins. 7f79516705f Move resource-based priority functions to their Score plugins 36cbce1182a Postpone flag warning log to just before it be used. 7171f9a7f46 move funs of framework/volume to e2e/storage bf47d14c272 Fix staticcheck failures of test/integration/replicationcontroller 21f59c99232 Reword modifications for clarity 4d43e9e39b6 e2e: move funs of framework/viperconfig to e2e f5a3c93649c clean useless code in client-go test 706e90a0339 Skip scheduling the pod if it has been assumed and the pod updates could be skipped. 587dbc2fede remove TODO in test/e2e/framework/auth/helpers 6410ac31731 Return when removePod failed 006980c1607 Remove Todos for CSR checking 00abe6d5055 Output test description in TestPreemption 43d9748d3a8 Add error handling for Register() call 253a85db160 Move WaitForFailure() to the test 453ac809c12 kubeadm: tolerate whitespace when validating user CA PEMs 99c2e74a23c Add debugging message to know the pod status 52ddae02672 Remove Delete/CreateSyncInNamespace() 92940fa80d6 Remove `recorder.PastEventf` method 49884bca30e Fixing regex for kubernetes version in kubeadm 81c6989ccc9 Clean up unused variable from unit test. 2b304bf5e2b fix static check failures in component-base/metrics f438def93d9 Update to golang@1.13.5 ca690514753 refactor(pod log):refactor for container valiate, little cleanup 31d6cc5792f Switch to new ClientConfig for Azure cloud provider 8c77b96b75d fix staticcheck failures of test/integration/scale test/integration/serviceaccount test/integration/serving test/integration/volume 7382a7c8010 Add backoff retry which implements autorest.SendDecorator interface 80e3cc36294 Fix unit test to run in non-gce environments 210f1a904dc Move client config to a separate package 12ebe54fc41 publishing: Update to go@1.13.4 for kubernetes-1.16 78352240f63 Move podtopologyspread priority logic to its Score plugin b373121a146 Make CPUManagerCheckpointV2 type an alias of CPUManagerCheckpoint 72d66be439b test images: Adds E2E test image automated build 35dea07ad6d silence usage when pass bad cmd options 5faf8f4c528 Lock checksum calculation for v1 CPUManager state to pre 1.18 logic 6359080d4f6 fix: test failures ece8aefe1f7 fix: azure error should not retry on bad reqeust b3bebddb30f Fix a typo in interpodaffinity score plugin 320ac4e2770 feat(scheduling): implement azure, cinder, ebs and gce as filter plugin 31e59fd5e36 Add ipv6 examples for network policy API 0995ef573f8 Fix ensureStaticIP if name for existed address was changed 134c545b96e proxy: add some interface type assertions b1e03256d71 alias kubeadmutil for k8s.io/kubernetes/cmd/kubeadm/app/util 572c81ff537 e2e:remove func of framework/replicaset to e2e/upgrades/apps/replicasets.go 8a4dce5431f Move pod topology spread predicate logic to its filter plugin 78c05176917 fix link in readme 161c6f4886a e2e:remove unused func in /test/e2e/framework/autoscaling/autoscaling_utils.go eea91c018b2 Cleanup testapi after it has been removed f19ed6ccfe5 remove unused code in test/e2e/apps/deployment dbe7c920e07 Add alias of api/errors in endpointslice.go 488b94767c4 remove TODO: Use return type string instead of []string and update func 01083988aef Add apierrors as alias for k8s.io/apimachinery/pkg/api/errors f53c81f4a25 Move ServiceAntiAffinityPriority to score plugin 794a8668fa8 move funcs from test/e2e/framework/job to test/e2e/apps 12d08d52ee6 Improve output of update-openapi-spec.sh when printing logs from file. 291a7bb1649 feat(scheduling): move csi volume predicates to csi filter plugin c75787bb778 Fixing Potential Race Condition in EndpointSlice Controller. b8b846c31c8 Use Deployment in sample-apiserver examples 013994a7408 Updating minor grammar errors. 89867e1c218 Move CheckNodeUnschedulable predicate to its filter plugin c4331b0369d Move VolumeZone predicate to its Filter plugin 19fe9f8d947 replace grpc.WithDialer which is deprecated 6596a14d392 add missing alias of api errors under test 5bc0e26c190 unify alias of api errors under pkg and staging fc738cbb1d1 unify alias of api errors under test 2af59673105 move func EnableAndDisableInternalLB from test/e2e/framework/service to test/e2e/network c467a733c31 Remove unused function NewMetricExporter from e2e test 2b3df3587e3 Deprecate scheduler predicate and priority factory registration 4bfa4d8b30c Come out of loop when omitempty is true 36393390f43 fix: azure disk could not mounted on Standard_DC4s/DC2s instances dbc99290123 e2e: move funs of framework/pv to e2e/storage e5168cc7bb4 move nodepreferavoidpods to score plugin bf2b709e822 Move ResourceLimitsPriority to its Score plugin faf27331bcb fix shell checks errors in cluster/common.sh 75b716a3526 Fix simple typos 1f0c7db589d update defaultconfig link 17fa573e059 Add simple explanation to verify-golint.sh 141909fa2e3 tighten ceiling for matching-precedence to 10000 e5d90c57f0e move NoDiskConflict predicate to its filter plugin 8fc21710e7c Added scheduler algorithm provider registery. c33c4fffd1d Move RequestedToCapacityRatio to plugins/noderesources 75872b8e799 feat: implement node affinity priority as score plugin 299a9c8cf50 add extra group and usage check for bootstraptoken fe7de96ebe9 cleanup scheduler's in-tree plugins registry naming 7271a81921e validation.go: don't clamp the CIDR size calculations 49b6e404617 Clean up kube-apiserver reference document 97676963c39 deprecate scheduling_algorithm_predicate/priority_evaluation_seconds 21c916c3d21 move Taint and toleration predicate to its Score plugin 70b80ae28a2 Deprecate scheduling_duration_seconds Summary metric f0e01bcfde4 Change log level to 3 when --random-fully is not supported 4123973726c e2e: move funs of framework/deployment/fixtures.go to e2e/apps/deployment.go 5fd6b8fae79 fix: remove totalNumNodes from priority metadata 3d39d90e8e3 Update modules 1fd59cfcf37 Swith to retry.Error for Azure cloud provider 3e10dbd6686 Use retry.Error for all Azure clients cc09b3ab6c3 Add retry Error definition b086d296def move funcs in replicaset to autoscaling_utils 803161d621d kubeadm: kube-dns is deprecated and will not be supported in a future version bae72ee8d2e using string instead of byte 237da6250b7 change print log for unity when during kubeadm init bf8a8a657c9 introduce checker for the result of nodeInfo.Node() 11382a31294 Delete unused function from e2e test autoscaling_utils.go 5b4a7744fad fix kubectl run help image name fcae27b9d2d If lastTimestamp is not set use firstTimestamp when printing event 3f591bb2dd5 feat: implement image locality as score plugin 83408acf757 Move volumebinding predicate to its filter plugin 32e1c032fd8 Add logs for rate limit values 6a1354252de Add unit test for extended ipv4 service IP range df4f5c1a30d Revert "remove ipallocator in favor of k/utils net package" a54e5cec54b Fix staticcheck failures for pkg/proxy/... b13e22482ea Count dropped requests except system previledged group requests. 107db83839c kubeadm: re-enable kubelet version check test in preflight 52435c021e0 Change Azure global rate limit to per client d564e730c98 format test file b264a747481 Add unit tests for pkg azure/auth e468385d0bf Remove ineffective calls in toUnstructured eeb8a5b7282 Added back the flag to trigger examining all Filters in the scheduler. e4c87c20e2d fix azure cloud provider bug when lb specified in other resource group 2497a1209bf bump k8s.io/utils version a5f782face1 Reuse converter in crdHandler#getOrCreateServingInfoFor 3e65b3793f3 Cleanup failedPredicateMap from generic_scheduler.go 429448cb402 move inter pod affinity predicate logic to its Filter plugin 7dc6c94395f kubeadm: use bind-address instead of address 947d6960215 On OpenRC ServiceIsActive should not report true if no such service exists 1f78a936d40 Deprecate AlwaysCheckAllPredicates in scheduler Policy API 29ec87f769c apiserver: add localhost to alternateDNS for IPv6 c715aacdc24 Add simple reference to synopsis of kube-scheduler 4291a03e395 fix apply set last applied namespace a8a00f690e6 hack/local-up-cluster: modify cloud provider launch to work with aws 2d2c9a884a0 Revert "Merge pull request #86376 from xieyanker/kubemark_deployment" b88788b0854 update to use e2e-up.sh instead of kubetest b4f52385356 Add instructions about how to use kubetest to bring up e2e test cluster 0ae8b6ba596 Update subnet mask calculation for compatibility with future VNIC changes c71dd7e4ee6 Bump Ginkgo module to release version ecfd30d2517 Bump Ginkgo to support building on riscv64 arch 0e786cbafcb swap over kube-apiserver manifest to use livez and readyz d1fb0b57dfd Expect NodeUnpublish calls when NodePublish is called 68f3802ba80 move NodeLabel predicate logic to its Filter plugin 119a9a94d12 InterPodAffinity Priority as Score plugin 22a0f55a682 move NodeLabel priority logic to its Score plugin c60802e8939 Add klueska as an approver in test/e2e_node/OWNERS f4bd4e2e965 Return error instead of panic when cpu manager starts failed. f2adf33bc8a update fluentd to 1.8.0 / fixed gemfile / fixed shellcheck lint problems by using xarg 8374c49c593 Update README.md c5002a348e3 kubenet: replace gateway with cni result 4303be3d9fe Revert pull request #85879 "hollow-node use remote CRI" 096bdb7121a Sample apiserver: Avoid etcd listening on DNS result for "localhost" f50638f4395 Isolate kubectl test-cmd plugin tests a84e883e4b3 rename _count to _total in a few metrics 8110e08dd4a Fix golint failure not contained in .golint_failures b898c79656a chore: port azure disk csi code to upstream 745248dd6f5 Fix cpu manager e2e test typo d1480ab49d6 It fixes a bug where AAD token obtained by kubectl is incompatible with on-behalf-of flow and oidc. 131180b1187 Add a config option to azure cloud provider for the pre-configured loadbalancers 79bc63fb4b7 Adds PreProcessor and PostProcessor functions for modifying apply behavior 6511b603c9c Define workloads specs by YAML 03df6320e59 Wait for resizing condition 53080bda9c9 Allocate map when out points to nil map 3aa794aafc8 remove personal kind.yaml that was added accidentally 877381550dc Revert "promote e2e tests for taint-tolerations in predicates" c14280e8d39 prevent blocking wait in cert reloading bac2e9fbe2c Autogenerated 619af251476 Remove DefaultConvert 9bd2912e7a0 Add CHANGELOG-1.18.md for v1.18.0-alpha.1. 48944b94da6 change kubemark from ReplicationController to Deployment 4e45421f610 Moves visitedUids and visitedNamespaces (used for pruning) into ApplyOptions e8e1cc9ee01 extract PreInitRuntimeService from NewMainKubelet 6b33a770685 Adopt kubeadm and kubeproxy unit test after new config field added. 670369f2a4a Move patch functionality for apply into its own file. e38e320222a Moved prune functionality into its own file. 07cb2fda5da Refactored some apply printing functionality; removed unneeded count and objs variables 02af4c9be20 Created GetObjects() method for ApplyOptions and integrated into apply 18fa7bdb6ea Cloud node controller: Only call once into cloud provider 667aaf33a6b Split cronjob tests, so they don't interfere 4eb61e3f93e Deal with auto-generated files: - Update bazel by hack/update-bazel.sh - make update 9b7d8712cfa Add show hidden flag to kube-proxy 869aef61af4 improves watch and report e2e test to also check IsResourceExpired since the API can return both errors (Gone, Expired) 6e789e9d52e fix: azure data disk should use same key as os disk by default 770e51cd100 Deprecate PredicateMetadata b3abfdc9e41 registered nodeports and noderesources prefilters f9c4551a947 Use private master IP in GCE kubemark tests 87e8137c18a cleanup(kubectl taint): fix Errorf and comment error, and remove unnecessary bool flag 9818b4522e3 Add klueska as an approver in pkg/kubelet/cm/OWNERS db2c048db9c support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout 23957a6b289 Allow kube-proxy iptables mode to support dual-stack, with the meta-proxier. 01f1cf3c968 Add test cases for a helper function in controller manager 0bd41a300f1 Refactor `kubectl proxy` command to have similar design pattern as other kubectl commands. 62d77728829 Check FileInfo against nil during walk of container dir path 2103ea4dded Changes Visit() to Infos() in apply to keep slice of objects 5c537915bfc Mark '[sig-apps] CronJob should delete successful/failed finished jobs with limit of one job' flaky ce3839452e5 Mark '[sig-scheduling] PreemptionExecutionPath runs ReplicaSets to verify preemption running path' flaky 0224c481202 Job completed event added 21641571131 Make e2e scale updates unconditional 287e3298fbf suffix InSeconds to cacheTTL for clearification 82afa2bbafc Fix up the sub-test style a65d8aeb762 Add UID precondition to kubelet pod status patch updates 176c95ff3ef Add debugging for delete grace period e2e flake 3f3bc37e058 auth: add metrics to token cache d12608017d6 Mark GCEPD test flaky 8111bb3d771 Update wardle e2e image cad5de706a9 Build sample-apiserver image using kubernetes 1.17 / go 1.13 8fae8e54af2 Disable excessive logging in scheduler plugins 9898f479c1b code-gen: fix argument type for plural exceptions 2fe82075b44 fix staticcheck faulures in 'cmd' pkg c9418412d18 fix misspelling in comment f401d711aac networkPolicy validation ipv6 unit tests a16808f353a kms: use negative cachesize value to disable caching d45107a00da test/e2e: move funcs from test/e2e/pod to other folders c394d821fda Deal with auto-generated files: - Update bazel by hack/update-bazel.sh ecf5f7d7498 Deprecated metrics under /metrics/resource/v1alpha1 0db7074e1ad Add new endpoint for resource metrics. a634e254c16 Fix staticcheck failures for test/images 7331ec7b021 Move service affinity predicate logic to its plugin. 973fddd155f e2e: move funs of framework/gpu to e2e_node 4536ed50a04 e2e: move funs of framework/deviceplugin to e2e_node 21e906fba66 e2e: move funs of framework/job to e2e/upgrades/apps/job 8d3a8d5a6c2 e2e: move funs of framework/metrics to e2e_node 6603f41a130 Promote StartupProbe to beta for 1.18 fbe3521e8e5 fix: formating and typo d7f14fb38e4 fix: address test failure and review comments 51bff87b18d Add util function to merge resource lists 28f8e52f320 Add "kubectl describe node" resource tests 439a862bba6 Add huge page usage stats to kubectl describe node 4769cbedd5b Update go version in go.mod c6a2c4fa793 fix: add unit tests for truncate long subnet name on lb ip configuration 1a55d0f7b09 fix: should truncate long subnet name on lb rules 09032bea6cf addons: elasticsearch supports automatically setting the advertise address 02a0aad6d3d podfitsresource metadata as prefilter 3d353f5122d Update semantics of EvenPodsSpread metadata object 468aebc17f1 Move EvenPodsSpread metadata computation logic as a PreFilter Plugin 8953544b15e add unit test a70bec465da e2e: support long CSI driver names 4152f38d544 cache ttl is configurable 314b6cb32bb [auth]Change example in can-i to apps instead of extensions 623c4f9f17e e2e: move funs of framework/statefulset to e2e/apps & e2e/upgrades 6f3c68bd5c8 compatibility tests for default provider and mandatory filters bfd20c9e084 Fix build break - Hyperkube image needs kubelet/kubectl 5c6371502ab Update addon permissions 749eea7e0f4 Prune server-side print exemption list 0387cc7cb3b Update generated files e9870c30769 Update storage hash to use ingress type for cross-group comparison 2b4fac5760f Use openapi fixture for server-side apply tests f2f22b84cd5 Delete ReplicationControllerDummy 18ba6f94820 Remove references to unserved types 3df9e86a4ea Remove ability to re-enable serving deprecated APIs 424d5e20dfb Remove testapi 78a3a4a2b1d Remove testapi use from pkg/api/testing 5d5b444c4da Remove use of testapi codecs, selflink, resourcepath functions bb90f0ff94d Install APIs directly for tests c54dbd85e00 wrap host ports metadata in a prefilter. ee85b6a579f Don't report deletion of attached volume as warning d8c35733c0a doc: remove Draven from test package reviewers 470ea876237 fix broken link: https://kubernetes-csi.github.io/docs/Drivers.html 95bf2265337 fix staticcheck failures of test/e2e/manifest 77a9d4772b7 move funcs from test/e2e/framework/replicaset to test/e2e/apps d146e1941d2 Add getting Storage Quantity to ResourceList 5743cffd5d5 Move added info and status stack trace to the end of line. f786cb07b79 test/e2e/: use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue()|BeFalse()) 995d4083341 Clean up conformance tar test data 0e644c87493 e2e-topology-manager: Fix bazel tests 255ab6d2c35 Remove priority execution paths in favor of score plugins 288609ecf52 remove ds dependeny on scheduler metadata 70a2bccfd6c deprecate scheduler's FailureReason 31b0d7f8532 e2e-topology-manager: Fix package name fba4a7be340 e2e-topology-manager: fixes for gofmt 337fdf2f371 [WIP] e2e-topology-manager: Initial commit for E2E tests 2fdf1fa3c14 inter-pod affinity prefilter c229c78af7b Upload containerd logs to stackdriver 9cff3457705 Do not swallow timeout in manageReplicas 9f334a4d083 Add an interface to return scheduler framework instance effe2990824 kubeadm: add basic validation around kubelet.conf parsing 1657ef25ebd Extend authorization benchmark 15e98360a86 code-generator: update BUILD d511a809af4 code-generator: expose plural exceptions via flag 44a0d04b963 Add a unit test guarantees ClearState will fully clear a collector. 02f335d476b feat: remove several feature gates in 1.18 dcea6ff0653 fix: remove TaintNodesByCondition feature gate in daemon controller 64e49e187a1 add hwdef as a reviewer of hack 89b31c8d693 move test/e2e/framework/lifecycle/ test/framework/cloud/gcp ca532c6fb2c Ensure that error is returned on NodePublish 20f0408f293 promote SataQiu to an approver of test and test/e2e/framework 915b0964052 Make sure critical pod in the preemption test is always cleaned up. ec24d3c7e8f Set core_pattern to an absolute path. f5532861564 Pass initial set of runtime containers to the CPUManager at startup 6441e1ef436 Move CPUManager Checkpoint restoration to Start() instead of New() 69f80538504 Update top-level CPUManager to adhere to new state semantics 185e790f711 Update CPUManager policies to adhere to new state semantics 7c760fea384 Change CPUManager state to key off of podUID and containerName 9191a949ae7 Extend makePod() helper in CPUManager to take PodUID and ContainerName 7a15d3a4d7f Fix bug in parsing int to string in CPUManager tests 765aae93f8a Move containerMap out of static policy and into top-level CPUManager 1d995c98ef6 Update CPUmanager containerMap to allow removal by containerRef 0639bd0942c Change CPUManager containerMap to key off of (podUID, containerName) 3881e50cce7 Update CPUmanager containerMap to also return a containerRef 347d5f57ac4 Move CPUManager ContainerMap to its own package 0e4469cddda persist deployed DNS configuration during kubeadm upgrade dc17fc42833 fix log format string 773fbeab1e3 expose the clientConfig to consumers trying to build custom clients against the kubeapiserver d0210220e48 dump information for all namespaces related to the test ea913f38ead allow configuration of customized AfterEach functions for all tests 711dc0b5b5e Increase Burst limit for discovery client 5e0f36705ef Update CHANGELOG-1.16.md for v1.16.4. a5759ee2780 Update CHANGELOG-1.15.md for v1.15.7. ca0d2b7ce69 Update CHANGELOG-1.14.md for v1.14.10. cdf2e794a55 Clarify intstr.IntValue() behavior 0f410d625a1 change CounterVec to use Counter in the Kubelet's Pod Lifecycle Event Generator ca36822f1e7 client-go: update INSTALL.md to include semver tags c4ad07b0b14 e2e: move funs of framework/service to e2e/network 35b0f1f7ddc test/e2e_node/:use framework.Equal() instead of using gomega.Expect(bool).To(gomega.BeTrue(),explain) 00ea8c4f9e0 Revert "Add an option to specify kubelet flags for heapster node." f8e0c6bb41b test/e2e/storage : use framework.Equal() replace gomega.Expect(...).To(gomega.BeTrue(),...) dc3d1bd238e Eliminate running paths of Predicates in scheduler e70120f0838 fix staticcheck failures of e2e/storage/utils e2e/storage/vsphere 49e4bd137bd Ensuring kube-proxy does not mutate shared EndpointSlices 8647e75cec6 shared authenticator lookups 009c731a880 vendor golang.org/x/sync/singleflight c051fc2057a Added alejandrox1 to test/approvers 8ab226263a1 Adds tests ac23d55d907 Generates boilerplate code 27ffe439b61 Adds the algorithm implementation for the Configurable HPA 5c70cda6e51 Adds validation rules and proper defaults 141eaf79eed Introduces all API changes needed for Configurable HPA PR a051c591a1f Fix inter-pod affinity scheduler benchmarks a8839a9735f change FakeWatcher.Stopped to be a private field, as read it directly may cause Read/Write conflict race b911aa6471a fix potential memory leak issue in processing watch request 3ed535a89a2 fix staticcheck failures of e2e/storage/drivers e2e/storage/testsuites 6df97909bb0 e2e: remove unused method in e2e/framework/log 546dbf8b3cb e2e: move funs of framework/kubelet to e2e/scheduling 729bc82be64 Drop v1.15.0 API test data 82465dd8c20 Add v1.17.0 API compatibility data 9f6bbfb67f4 Revert "staging/publishing: temporarily disable publishing tags" edfef793640 Add kind/flake issue template a077734079b Update v1.17.0 CHANGELOG to match final draft 32dc70e0f13 optimize required inter-pod affinity 23a4a1191c6 Update CHANGELOG-1.17.md for v1.17.0. 57b538e657c Increasing LoadBalancerPollTimeout from 15 to 22 minutes a9f80c70b2c update RBAC rules in e2e aggregator test 3cc926f5efb e2e storage: fix type in comment 96084a5198c Make error message and service message more clear 17ae1eda3e9 e2e storage: improve instructions for external driver testing e7e9d1cf240 Add serathius to metrics-server OWNERS file 31fb04fa98e Remove cluster-monitoring 597816c11e2 update total_limit_size 3ffd8f34b24 update fluentd-es-configmap a192b59f9f0 fluentd add port promtheus and health check 325848509a6 es add readiness and liveness health check 089374e8d64 e2e: remove unused method in e2e/framework/autoscaling. babdcd0d149 invoke getTypedVersion() instead of direct runtime call a136108d2b8 Return all predicate failures instead of the first one 10b173868a7 move funs of framework/deployment to e2e/apps 31c302994ab updated fluentd to 1.7.4 + plugin updates and switch to debian buster 303c1a40bce fix static check in kubectl/pkg/cmd/annotate. dfb6c3424fe move unwanted console output out of versiongetter. 24d105995db Fix broken SELinux detection 27d645dc5b8 fix staticcheck failures of test/e2e/storage 96fe76a9ed4 kubectl oidc auth-provider: include cluster address in cache key 7f5076d8ee2 slim down some lister expansions c084d57b18a ping kmsplugin gentely when in good state aba0b315269 Changed Kubelet client and serving cert TTL/Expiry certs to use gaugefunc for calculating time remaining. dfa04bfc041 Ensuring EndpointSlices are not used for Windows kube-proxy implementations 4762985fb68 kubelet: guarantee at most only one cinfo per containerID 53be26e4025 optimize preferred pod affinity da53044abdf kubectl/drain: add option skip-wait-for-delete-timeout 2bba8dac7fa staging/publishing: temporarily disable publishing tags efd61ae3e48 correct invalid urls 06c59017697 fix staticcheck in test/integration/apiserver d428de26b83 Fix IPv6 addresses lost issue in pure ipv6 vsphere environment a5226f623e1 Add cache for VMSS. 39cb8222c79 Add an option to specify kubelet flags for heapster node. 3e19201ec2f kubeadm: Throw an error if the currentContext does not exists dd50ac311a0 Fix LoadBalancer rule checking so that no unexpected LoadBalancer updates are made 0dd468039da inject remoteRuntime to kubelet dependency 7947b6ce6d8 kubectl change podSecurityPolicy group 4d3d364d2ba promote e2e tests for taint-tolerations in predicates 6de70829784 remove two unused metrics aaac96c6605 Two bug fixes: (1) at least log something out if we fail to register our health check, (2) actually register a prometheus metric. I delete the deprecated metric in this block because there isn't any point to it, since no one can be broken by changing a metric that doesn't get collected 3fa070ad381 Fix nil pointer dereference in the azure provider 2e6d6d73e7b disable node deletion detach test 28a564cb323 Add current chairs to component base approvers a8ba361fd65 expect node to be recreated with the same name 909300b8be9 When running `kubectl drain` in dry-run, list warnings and pods that would be deleted. bacab3d4577 Deflake kubectl custom printing test d924407ede6 Include cloud/gcp in e2e.test f4d1674827e Refactor parsing logic for service IP and ranges, add tests fdd25ec9682 Fix bug in apiserver service cluster cidr split bc22d70e2b0 Revert "kubeadm: don't check if image exists before pulling" 8227b61022f bazel update 87ccd41af26 e2e storage: add compile test for public TestSuite API 160da35b23c e2e storage: public API for testsuites, support CSIInlineVolume type for generic resource dd7430134a8 Removing conditional check 1b63219c5ec Included CSINode describer fb33b2f42a9 increase LRU cache size 8x for authorization webhook da67bcbd355 added benchmarks for preferred (anti)pod affinity d81dd48e2c5 test/e2e/auth: Fix static check failures d3c562f7e09 Run all csi-hostpath containers as privileged bf92350b11a Refactor kubelet component config lenient path decoding b24dbac09a9 add hack/verify-typecheck-providerless.sh 94cf7319783 typecheck support setting tags, skipping test code, and ignoring directories d51b72d9e9b fix staticcheck in test/e2e/network/ c0db5b2562f Convert ExpectEqual(err, nil) to ExpectNoError(err) e057bd4ad2e fix: typo Snapshoting to Snapshotting 40911e74c16 fix staticcheck in pkg/printers 32850dc47d3 Revert "Use ExpectEqual test/e2e_node" cff9751112f Update GCE Windows startup scripts for TPM-based authentication 36784331eb8 Sync the status of static Pods e981d1ea44b remove framework dependency from framework sub-package kubectl b85adbf1fd9 moved WriteFileViaContainer and ReadFileViaContainer to kubectl_utils 4b99e5305e2 remove CheckFileSizeViaContainer from framework cd8da67b03c move KubectlCmd out of utils into its own package 4b8e552a888 Use typed errors for special casing volume progress 8aa26a6ed6f remove max pods from e2e test f967c544ad1 scheduler benchmark: allow to override bench prefix bc7d254317c Fix Cpu Requests priority Windows. 2dc3684cf76 Fix waiting for logexporter log fetching processes 09ede2fd982 Deleted extra 'phase' in command example 6f0eec4dffb Create kubemark cluster as private b3045389422 fix staticcheck errors in legacy-cloud-providers/azure 839b440173a Cleanup converter bcaab8c1a22 Fix bug in ignoring untypes conversions 7ab3e436f71 Cleanup old-style conversions ab6cbd2e8d0 Cleanup metav1 conversions d11b7a62040 run `hack/update-bazel.sh` c355cadbb1f Enhance error message for failed controlplane init 29eb15c3a84 fix golint check in test/e2e_node/runner/remote 901d7de5566 `kubectl create clusterrolebinding` creates rbac.authorization.k8s.io/v1 object b469404d976 hollow-node use remote CRI 9a9db004512 handle registry merge error 113001ab016 Utilize Context with timeout in gce_instances.go 1fb0dd4ec51 Rename PodDisruptionsAllowed to DisruptionsAllowed in type PodDisruptionBudgetStatus 6c1d587d514 kubectl/drain: add disable-eviction option 4d6e5bf7bea Utilize Context with timeout in GCE operations 2d3c8fe6b95 optimize anti-affinity predicate 727fdef2db8 Address PR comment 7eb6182a633 Revert "Fix shellcheck failure in log-dump/log-dump.sh" 82206578ccc Update checks.go 81471c36b11 [generated] bazels and vendor/modules.txt 6c0688fd517 santize codegen scripts 15a883b0674 s/apiextensions/apiextensionsv1/ for all imports in k/k 168f8f54f01 switch to v1 crd 51814ae189f Be more agressive acquiring the iptables lock 6fcd030877e fix staticcheck failures of test/e2e/upgrade 28327efe6bf Deflake delete grace period e2e 4629da28a02 Update CHANGELOG-1.17.md for v1.17.0-rc.2. c62d6add9b8 Deflake pod readiness e2e f2f0435e718 Enable hidden custom collectors when calling SetShowHidden(). ea7a230af63 All stable collector should be tracked in registry. 069b088ad7b The descs in a stable collector should be tracked by a map instead of slice. efa34ba484f add PredicateFunc for configmap 561ee6ece98 Use ExpectEqual test/e2e_node 9eda99793de use ExpectEqual of framework in test/e2e/storage d2d68026fc9 Fix golint issues in test/e2e/lifecycle/ cd7859901c6 Fix func VerifyLatencyWithinThreshold() to local dddd631706b cmd/kube-controller-manager: fix staticcheck warning 36b41bc9655 apimachinery: fix bugs in a Test function e581be1ec78 add err handling in gce/gci a70a5347360 Replace the hostname in the fluentd config file even if the file exists ba2cc99bdec Add test cases to verify kubelet & kube-proxy can recover if being killed accidentally 9b32d8734f8 Adds initial unit tests for tablegenerator.go e687bf4fe9e Use GCS bucket for crictl on windows. a151aa35dc2 Add defaulting logic for EncryptionConfiguration. f3885340826 make scheduling queue start before the scheduler starts and stops after the scheduler stops e9c400aabca update scheduler benchmarks to be more representative f0ea7bcf9e4 kubeadm: set cluster name on the controller manager aa278345fa5 update gopkg.in/yaml.v2 to v2.2.7 0741f6fa295 Ensure that metadata directory is not created if secret is not found 309c6f863a1 Handle the case of remounts correctly 5feea93163b Rename MarkVolumeMountedOpts to MarkVolumeOpts cdbd3ba5c29 Change interface of SetUp function db9ac38592d Change signature of MountDevice function and remove MountDeviceWithStatusTracking 0c52b6606e6 Refactor NodeStage function 57019e0628a Add tests for verifying in-progress state 27a70a9260c Update generated files 321e99367af Add code to handle Setup With Status tracking dc9e64c31e4 Implement return status codes d620493b743 Ensure webhook backend requests are not artificially rate-limited 50dbcb3e005 Make sure PodExistsInVolume does not uses uncertain volumes 34a6007dfed Add code to mark volume as uncertain a795f3de88a Add code for introducing uncertain state of mounts 51b7ef2c87e fix: replace TrimLeft with TrimPrefix and TrimRight with TrimSuffix e911833814b Make APIService.spec.service optional in the openapi v2 spec 2df8ad1b1c8 Cleanup default conversions d6969d2c554 Cleanup metav1 conversions 12ee83ed942 Use new-style conversions in default conversions 8c2aed4ff5b Optimize:remove unnecessary judgment c687521b446 fix staticcheck in test/e2e/cloud/ 0c36299c218 Use expect equal test/e2e/upgrades af231b09e41 remove Kubeadm-env file overwrite from apply and node command 14fe7225c14 kubeadm: Improve resiliency in CreateOrMutateConfigMap 335a3e9efbc kubeadm: use correct IP family for etcd localhost 84a9803741f Log error when writing checkpoint fails 6415fa765e2 Remove nodes slice in loop of takeByTopology 5ea43f20cb7 optimize scheduler's UpdateNodeInfoSnapshot 22d883d7f23 Nominate liu-cong to be sig-scheduling reviewer. 366e053e28d Switch addon resizer to 1.8.7 1d3b6ece636 Remove stale comment re making apiserver common names dynamic fef9e413dff Make cluster auto scaler use leases b1b9e6254a5 Bump Cluster Autoscaler version to 1.17.0 798d2fb75aa Fix comment typo 69aae3aa5ab fix golint failures of test/e2e_node/remote be0750f6d6a rm -rf staging/src/k8s.io/apiextensions-apiserver/pkg/client d07dd4bbedf Fix NetworkPolicy PolicyTypes validation f461225ba5a Update go-winio module version from 0.4.11 to 0.4.14 5bec54ed5b6 fix: padded base64 encoded docker auth field 044b315d611 All check for instanceID ae72e19ab6b apiextensions: filter required nullable to workaround kubectl validation 52ac2783bc8 use framework refactor code in test/e2e/common a252a617a5e drop KUBE_TIMEOUT in test/cmd/kubeadm.sh aacd79cc363 setting kubemark node labels 5cf06bfa805 fxing kubemark node labels 9ca21e3722b Deal with auto-generated files: - Update bazel by hack/update-bazel.sh 2187fe26997 Add ClearState() API to Desc. Add create() API for Desc Add annotatedHelp fields to Desc. 6323dc789aa Add kind/deprecation to pull request template 81d05e91b5b Retain objects for a limited lifetime in the mutation cache detector by default 9a868766eea Enable mutation detection 4d9c2a4ef8d use ExpectEqual of framework in test/e2e/autoscaling/ d44583d28ae Fix iscsi refcounter in the case of no Block iscsi volumes bbc49d6b1f4 catch the exception raised in Remove-HnsPolicyList a445c97a0e5 update cadvisor dependency to v0.35.0 1ad78587924 stop spamming the log on failures with full objects 7360797a126 remove redundant definition of the defaultProvider in the scheduler ee2418c7aaf Move hostdns.conf out of cni directory. e66f4ca537b Add containerd windows support on GCE for test. 2e0bad569d2 export scheduler.Snapshot function, needed for cluster autoscaler integration 86f3bc25e1d Reduce unnecessary Set in updateAllocatedDevices 29588eee85e Deal with auto-generated files: - update bazel by hack/update-bazel.sh 6dfd3e11e5d correct invalid urls in CHANGELOG file 319946924eb Refactor custom collector unit test. f993950b3f1 use framewoek in test/e2e/cloud 4325e8a4528 e2e: use log functions of core framework on pv, testfiles and volume sub packages 14316058f0a Adding KubeProxyConfigMap19 checking in test-e2e-kubeadm bc53b97ceb2 Clarify client-go issue location (#85464) e7172b3dbf4 pkg/master: Fix static check failures a3a4320aff2 Wait for PV to be available before creating PVCs in volume binding test 5b1fb221b6e increase pv controller resync period to try to deflake api update conflicts ce68a89d26a kubeadm: simplify discover/token and add detailed unit tests a8991a108a8 Enable update-bazel.sh outside of GOPATH 657a3a3294e Delete client node selector during volume creation 18ba2643dba add applyto tests for controller configs 3c1dc89d987 fix kube-apiserver poststarthook additions to avoid duplicating them 016ab0b899b Fix benchmark artifact parsing. deb75da17bb fixup kubectl test a1595da534a Attach runtimeclass printer 03910e99da2 Attach resourcequota printer 9b387da5a1a Improve rolebinding/clusterrolebinding printers 5448a8b526a Add webhook printers cc7e7245a31 Add CSINode/CSIDriver printers 36eb250cbb4 Switch TableGenerator/TableConvertor interfaces to metav1 4dd6fd44806 Fix AWS eventual consistency of AttachDisk a0489c6ca80 test/e2e/apimachinery: fix staticcheck warning 4d028a7903a Extend Registerable interface with FQName() and track collector by name. b9ef1ce87ee lazyInit accepts fqName when init. b881f19c8be kubeadm: Group centric component configs 837fd41c42b Flip CSIMigrationOpenStack flag to be beta and off by default d2bdf89a8b9 fix golint issues in test/e2e_node e4b5a54eb65 fix broken link:https://kubernetes.io/docs/concepts/overview/object-management-kubectl/ 59274b56af2 Use plugin name for filtering metrics d78137bbfe4 Fix PVC condition check for offline resizing 07806d4300c add test coverage with kubectl get components c071265c774 modify the error url of autoscaler 1cb3992d1b8 Switch storage version to use v1.CSINode in 1.18 494629ef58c Fix resource version precondition on pod delete c9dafc8cf9f Add RainbowMango to onwer list of metrics stability framework. dd76fdfce55 Rename Azure driver to Azure Disk driver 2fe699cacd3 add myself to sig-network-approvers e87e4bea0fe Fix HTTP readiness/liveness probes for local node e8ee8622b80 Add support for new dual-stack flags for kubernetes-controller- manager in kubeadm: - node-cidr-mask-size-ipv4 - node-cidr-mask-size-ipv6 ecd1c074727 don't error if set-resources patch is empty 7898b3f0a8b kubeadm: update image pull tests 09d4d65b1bd fix etcd version check error on ARM f6f3738a003 kubeadm: don't check if image exists before pulling c38e79e76d4 refactor: incorporated the review comments 5a1c6b6c022 Revert "remove redundant `source` in shell" 4229b992032 Deep copying EndpointSlices in reconciler before modifying them. bbbf3963489 make elasticsearch discovery supports IPv6 b1c39e9b160 apimachinery: Fix Dropped Test Error (#85427) f96dda6fcfd removed comments referencing akse 8682e902f54 kubectl/drain: Add context support 10865d99444 Provided a mechanism to re-register hidden metrics. a4abc1dd4d6 refactor(golint): lint fixes for iptables test file 81d00077162 Hi San Diego (#85424) 9dcb3bfcff2 Added rest client metrics for client TTL and rot. (#84382) bfa4188123e Fix kubectl conversions c224a6de5e0 Output port as number in error message 73a881e06db Fix GKE upgrade test. 65aefd3def6 Update CHANGELOG-1.17.md for v1.17.0-rc.1. 906d3159b12 kubeadm: add a upgrade health check that deploys a Job c3c7ea2efd8 Dump namespace if the namespace could not be cleaned up 4428c0c25c1 stop_kubemark 1431853075b fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/container-runtime-interface.md 1c25890e946 fix broken link :https://github.com/kubernetes/community/blob/master/contributors/devel/cri-validation.md 98be7831e4d Revert "kube-proxy: check KUBE-MARK-DROP" abc64a8519c Print nominated pods on the node when dumping scheduler cached NodeInfo 3322ff9551e generalize solution 81afa77e3bc add pod info when failing to add pod to queue 99603e105ae check service status value returned by EnsureLoadBalancer 3cbc07bb64a Promote a TCP probe test to Conformance 11b0e9af251 better comments 73c1ab71e27 Fix a bug in port-forward: named port not working with service 55828d059dc misc fixes 8b951edada6 Set default value for TEST_CLUSTER_LOG_LEVEL and KUBE_GCE_INSTANCE_PREFIX e16cc492b0e fix kubemark output error a232971d732 Add public documentation for kubelet/apis/config 7b478d15d58 Set node cidr mask size ipv4/ipv6 config 8f4a262d618 fix 1-12 number urls 96eb647898d add cofyc as local volume owner e465e1089d1 Sets HostNetwork to False for tests which do not require it a3c82e8ae31 apiserver: add Retry-After header to response when apiserver is shutting down 9aa68a5cf4b client-go: add connection refused to list of transient errors 6b73c9f8c21 upgrade api-version to fix azure file AuthorizationFailure 5652819292f kubelet/network: add sig-network-approvers to OWNERS fa9a55617bb Fix device plugin generator script 1daa08c5c86 use context to check client closed instead of http.CloseNotifier in processing watch request 821362bd1e3 SafeSysctlWhitelist: add net.ipv4.ping_group_range b05749c619a chore(gofmt): go format fix d49bc343760 [pkg/auth/nodeidentifier/default_test.go]: fix testing error message typo 55c83e33972 Fix golint issues in pkg/kubelet/events/event.go 214228f0248 Remove the derprecated API RawRegister from stability framework 1f4cd65be5e chore(lint): removing the iptables pkg a4631c845e7 chore(lint): lint fix in /pkg/util/iptables bdc11c28064 chore(lint): fix iptable.go file lint 0965b577f47 Wait for kubelet & kube-proxy to be ready within 10s ec57d8a4d0b Support Azure Stack dynamic environments 21f7060c8f4 Plumb test state through to fake volume host creation for error handling dd308ca5769 Fix grammar: have -> has d931b8434b0 Tolerate unset $GOBIN be78dd7526c added yliaog to OWNERS 1f2feb2e7ec Test writing configurations with numeric names c80fe4d9146 tests: Removes [LinuxOnly] tag from a few tests ce5cbe8b13d Add tests for kubeproxyconfig c762fbfa2bf Add componentconfig package testing files dcf80e31ac0 Migrate Kubemark to distroless cfa6f834278 Enable snapshottable e2e test for csi pd driver b7b10fc8993 kubeadm: reset raises warnings if it cannot delete folders 884582d8921 proxier: improve node topology event handler logic 197964210ac remove redundant `source` in shell e975774b334 use ExpectEqual in /e2e/auth 259cc951ffc add ut for scheduler framework 361cd7212eb Fix a comment typo in legacyNodeRoleBehaviorFeature 50bc528a7ed e2e: move LogFailedContainers out of e2e test framework util.go 7420faab435 fix-staticcheck in /test/e2e/windows 34b05d36aa7 Move suites.go to e2e package e27188d70b1 Remove e2e/framework/profile_gatherer.go f7e6b7a817e Add support for GOBIN to generate-groups.sh. bbae978d4a0 Included FSType in CSI volumes 0e93282a357 Clean up cluster-service label from calico-policy-controller 871d95cabdd Reduce visibility of prometheus libs 0412369bcd3 Deal with auto-generated files: - Update bazel by hack/update-bazel.sh c4f8c6eea71 Add flag for which to show hidden metrics to kube-controller-manager 7cfb6ec1a39 fix the defect in the shell scripts 8206a1f7142 Add matthyx to sig-node-reviewers 30bf1f47dd4 Hide kubelet metrics that have been deprecated in 1.14 b1ced1a05e5 remove unused func ce34d0a49dc refactor events utils in e2e 92c7e8e802c Fix golint failures 31d7a026db7 pkg/master: fix staticcheck warning e9edfbc539e modify dockerID to containerID 3d745c4ad45 Add johnbelamaric as conformance code reviewer/approver e99a325d4e9 Fix shellcheck failure in log-dump/log-dump.sh 896f84b6525 Fix golint issues in pkg/apis/batch/validation cfc34712c20 Fix golint issues in pkg/registry/.../storage e55fc5656c3 Fix golint issues in pkg/util/sysctl/testing fc8ea988901 kubelet: rename HTTPGetter interface 4dd546cf2cc Allow usage of consts and variables for stable metrics in static analysis d30319711e3 Fix golint failures for pkg/kubelet/config/... 0649f4064e9 Variables collides with imported package name 47642a0badc fix kubelet failed to start on setting hugetlb limits in non-exist cgroup dir cause by kubelet startup be interrupted on setting list of cgroups In the 'cgroupManagerImpl.Exists' not check&recreate the hugetlb cgroup dir. Then setting the limits in non-exist cgroup dir will cause kubelet start failed. 8e50c55e6bf kubelet: add certificate rotation error metric 9a1f631c5ca Replace nginx image with agnhost in sig-node pods tests 7d4f5554496 correctly handle resetting cpuacct in a live container b44d7c8d3cd Drop version from static openapi json file fd6983c70f9 simplify volume zone checker 9fec783d805 Log mvcc revision compaction as warning fef67e4dabe Fix validation for metav1 fuzz targets. 4b339e6e4e8 fix syntax error in test 3ae8c864de2 Fix error in periodic resyncs description ff543ddfc09 Clarify that OnUpdate can mask delete and recreate e31c7cb1932 Declare constants in pods test as const fdbf5ef0b8b ignore image err when docker image has been cleaned up 5616ce97622 [k8s.io/sample-controller/controller.go]: fixup minor typo 8f099010a5f Centralizes images into agnhost (part 4) 49207027c64 Fix golint errors 6aaae7d6466 Add support for builtin modules in kube-proxy 46fd8fce45c kubectl: remove unreachable code 61c80012448 Fix etcd-version-monitor readme and yaml file. c6f05979d34 Update Calico to v3.8.4 845c223d130 Bind kube-dns containers to linux nodes to avoid Windows scheduling ec3a38758c5 Bind metrics-server containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes 5695b348db2 Bind metadata-agent containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes 5459dbf84b7 Bind dns-horizontal containers to linux nodes to avoid Windows scheduling on kubernetes cluster includes linux nodes and windows nodes 56d1c3b96d0 update CRI to support hugepages 97e2576750d hostport return error when claim SCTP type port 9dadafa8979 healthz: instrument root healthz requests for metrics 9c120c8e1a3 Clalify how to contribute to kubectl book 3be31530d5a cri_stats_provider: do not consider exited containers when calculating cpu usage 0b481e8412e Shorten health check timeout for AWS NLB with externalTrafficPolicy: Local 91b9d421094 Fix typo 6b0748d3b5c Added e2e test to verify zone support across datacenters in the same vCenter 4b775046d4f remove stateCheckPeriod 3bb3db1d36e Bumped the number of times a node tries to lookup itself e7cc2c2d280 Report api request throttling at v=3 6d64d0610ca fix path to prow size plugin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-01-09Revert "go: add back 1.12 version to avoid compilation failure"Bruce Ashfield
This reverts commit 06dad20a32c81b6a8b6e93c99cda6f1133abddc6.
2020-01-09k8s: update to v1.17-betaBruce Ashfield
Updating to v1.17-beta, so we can drop the GO version 1.12 in meta-virtualization. We also drop one patch, since it is part of the upstream now. Basic sanity tests shows no show-stopper issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-12-10go: add back 1.12 version to avoid compilation failureChen Qi
go 1.12 was removed from oe-core, but currently k8s cannot be built successfully with go 1.13. See link below. https://github.com/kubernetes/kubernetes/issues/82531 We need to wait for k8s to support go 1.13 and update it to latest release, as well as its depedencies. Before this is done, add back go 1.12 and use it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>